Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information
• ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (28)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
docker-compose	docker.io/aehrc/pathling	2025-05-13
github-actions	micalevisk/last-issue-action	2023-12-30
github-actions	rlespinasse/slugify-value	2022-10-31
github-actions	slsa-framework/slsa-github-generator	2025-02-24
npm	@vue/eslint-config-airbnb	2023-12-28
npm	@vue/vue2-jest	2023-09-06
npm	connect-history-api-fallback	2022-06-27
npm	cypress-keycloak	2024-08-05
npm	express-bearer-token	2024-11-11
npm	express-jwt	2024-12-09
npm	express-prom-bundle	2024-10-12
npm	node-http-proxy-json	2019-10-02
npm	path	2015-09-13
npm	prom-client	2024-06-27
npm	vue-template-compiler	2023-12-24
pip_requirements	colorama	2022-10-25
pip_requirements	ghp-import	2022-05-02
pip_requirements	jinja2	2025-03-05
pip_requirements	mergedeep	2021-02-05
pip_requirements	mkdocs	2024-08-30
pip_requirements	mkdocs-material-extensions	2023-11-22
pip_requirements	paginate	2024-08-25
pip_requirements	pluggy	2025-05-15
pip_requirements	python-dateutil	2024-03-01
pip_requirements	pyyaml-env-tag	2025-05-13
pip_requirements	six	2024-12-04
pip_requirements	watchdog	2024-11-01

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update all digest updates (gcr.io/distroless/java25-debian13, gcr.io/distroless/nodejs24-debian13, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• chore(deps): update github-actions (actions/cache, actions/checkout, actions/download-artifact, actions/upload-artifact, docker/login-action, docker/setup-buildx-action, ghcr.io/chgl/kube-powertools, ghcr.io/miracum/ig-build-tools, github/codeql-action, googleapis/release-please-action, miracum/.github, sigstore/cosign-installer, softprops/action-gh-release)
• chore(deps): update dependency backrefs to v7
• chore(deps): update dependency cypress to v15
• chore(deps): update dependency sass-loader to v17
• chore(deps): update docker.io/cypress/included docker tag to v15
• chore(deps): update docker.io/trinodb/trino docker tag to v481
• chore(deps): update github-actions (major) (actions/checkout, docker/build-push-action, googleapis/release-please-action, gradle/actions, softprops/action-gh-release)
• fix(deps): update dependency com.approvaltests:approvaltests to v31
• fix(deps): update dependency com.github.slugify:slugify to v4
• fix(deps): update dependency io.trino:trino-jdbc to v481
• fix(deps): update dependency js-yaml to v5
• fix(deps): update dependency jwks-rsa to v4
• chore(deps): refresh pip-compile outputs
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency pymdown-extensions to v11

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency http-proxy-middleware to v3.0.7 [security]
• fix(deps): update all non-major dependencies (@babel/eslint-parser, @opentelemetry/api, @opentelemetry/exporter-jaeger, @opentelemetry/exporter-trace-otlp-grpc, @opentelemetry/instrumentation, @opentelemetry/instrumentation-express, @opentelemetry/instrumentation-http, @opentelemetry/instrumentation-pino, @opentelemetry/resources, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node, @opentelemetry/semantic-conventions, @vue/test-utils, Hl7.Fhir.R4, Polly, System.CommandLine, axios, certifi, click, core-js, cors, csharpier, csv-stringify, docker.io/jaegertracing/jaeger, docker.io/library/gradle, docker.io/library/node, docker.io/library/postgres, docker.io/library/python, docker.io/library/traefik, docker.io/rancher/kubectl, express, fhir-pseudonymizer, fhirpath, ghcr.io/chgl/kube-powertools, ghcr.io/miracum/fhir-pseudonymizer, ghcr.io/miracum/util-images/hive-metastore, gradle, hapi-fhir-jpaserver, helmet, idna, js-yaml, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk, ohdsi, pino, platformdirs, postgres, pytest, quay.io/keycloak/keycloak, requests, retry-axios, sass, sass-loader, checkstyle, jacoco, io.micrometer:micrometer-core, io.micrometer:micrometer-registry-prometheus, com.squareup.okhttp3:okhttp, ca.uhn.hapi.fhir:hapi-fhir-client-okhttp, com.fasterxml.jackson.core:jackson-annotations, ca.uhn.hapi.fhir:hapi-fhir-structures-r4, org.apache.camel.springboot:camel-micrometer-starter, ca.uhn.hapi.fhir:hapi-fhir-base, org.apache.camel.springboot:camel-spring-boot-starter, ca.uhn.hapi.fhir:hapi-fhir-client, org.apache.camel.springboot:camel-servlet-starter, org.apache.camel.springboot:camel-rest-starter, org.apache.camel:camel-cron, org.apache.camel:camel-http, org.apache.camel:camel-fhir, com.diffplug.spotless:spotless-plugin-gradle, org.apache.camel:camel-jsonpath, org.apache.camel:camel-jackson, org.springframework.retry:spring-retry, org.apache.camel:camel-sql, org.springframework.boot:spring-boot-gradle-plugin)
• chore(deps): update dependency @babel/eslint-parser to v8
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency jest to v30
• chore(deps): update quay.io/keycloak/keycloak docker tag to v26
• fix(deps): update dependency @dsb-norge/vue-keycloak-js to v3
• fix(deps): update dependency buefy to v3
• fix(deps): update dependency express to v5
• fix(deps): update dependency org.springframework.boot:spring-boot-gradle-plugin to v4
• fix(deps): update dependency vue-router to v5
• fix(deps): update font awesome (major) (@fortawesome/fontawesome-svg-core, @fortawesome/free-solid-svg-icons, @fortawesome/vue-fontawesome)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency vue to v3 [security]
• chore(deps): update dependency @vue/eslint-config-airbnb to v8
• chore(deps): update dependency eslint-config-prettier to v10
• chore(deps): update dependency eslint-plugin-vue to v10

Detected Dependencies

docker-compose (8)

docker-compose/docker-compose.probe.yaml (1)

• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]

docker-compose/docker-compose.staging.yaml (8)

• docker.io/library/traefik v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c → [Updates: v3.7.4]
• ghcr.io/miracum/recruit/omop-cdm-test-db v4.0.0@sha256:00be4b12281795318fc5674e6007fd59500c86f443147132546a2b46a4d40f64
• docker.io/ohdsi/webapi 2.15.1@sha256:09a8af62f640b533bb308e5b18d2a2f55a916ebacbff139824fe042d9c94e88d → [Updates: 2.15.2]
• docker.io/ohdsi/atlas 2.15.0@sha256:6814e8c5b5366b50bc197b1eb2881689e5852784742b91b9636eec514f5a555e
• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• docker.io/maildev/maildev 2.2.1@sha256:180ef51f65eefebb0e7122d8308813c1fd7bff164bc440ce5a3c2feee167a810
• quay.io/keycloak/keycloak 15.1.1@sha256:abade9a9cf985b454b30a9119183e62a0018ec546c8fc4fbd8572457afb4a666 → [Updates: 26.6.4]

docker-compose/docker-compose.yaml

src/hack/compose.yaml (21)

• docker.io/library/traefik v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c → [Updates: v3.7.4]
• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• docker.io/ohdsi/broadsea-atlasdb 2.3.0@sha256:25d5000bd02427ea992d5ad20b1a6f2e7807a673122f83494be4ab477a0f6bf9
• docker.io/ohdsi/webapi 2.15.1@sha256:09a8af62f640b533bb308e5b18d2a2f55a916ebacbff139824fe042d9c94e88d → [Updates: 2.15.2]
• docker.io/ohdsi/atlas 2.15.0@sha256:6814e8c5b5366b50bc197b1eb2881689e5852784742b91b9636eec514f5a555e
• docker.io/jaegertracing/jaeger 2.17.0@sha256:6266573208d665ce5c17483bce0a75d0806480d92c84766d288d0aee885ce708 → [Updates: 2.19.0]
• docker.io/maildev/maildev 2.2.1@sha256:180ef51f65eefebb0e7122d8308813c1fd7bff164bc440ce5a3c2feee167a810
• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• quay.io/keycloak/keycloak 26.6.1@sha256:dea26401d06341095cc4ea9d66896200b55de5ca1daa1d2fcbe58493afa6e0ad → [Updates: 26.6.4]
• docker.io/minio/minio RELEASE.2025-07-23T15-54-02Z@sha256:d249d1fb6966de4d8ad26c04754b545205ff15a62e4fd19ebd0f26fa5baacbc0
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• docker.io/minio/minio RELEASE.2025-07-23T15-54-02Z@sha256:d249d1fb6966de4d8ad26c04754b545205ff15a62e4fd19ebd0f26fa5baacbc0
• ghcr.io/chgl/kube-powertools v2.5.40@sha256:cc83abff62221780fbfde6fcfc1465b7782ee25c2a11fcfe561d1bcf733c670b → [Updates: v2.5.53]
• docker.io/aehrc/pathling 7.2.0@sha256:31b5ef50294e55136ae2278c2d0b8435a96a15b5da040ec785effb51875d08d3
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• ghcr.io/miracum/util-images/warehousekeeper v0.1.14@sha256:78b8944559c48b609fb0b0127bb19e39fe9eed915cb22e4de31f39bb0222191e
• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• ghcr.io/miracum/util-images/hive-metastore v1.3.2@sha256:070c65748b0101133344b71a03ef427283c2c20a08783f98bd530ede4053cadf → [Updates: v1.3.3]
• docker.io/trinodb/trino 479@sha256:6af989b0846d5cc48d8b4aa4e46036cd0d766910b671e076bf756e19ff6fcd58 → [Updates: 481]

src/list/frontend/deploy/docker-compose.dev.yml (5)

• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• docker.io/jaegertracing/all-in-one 1.60@sha256:4fd2d70fa347d6a47e79fcb06b1c177e6079f92cba88b083153d56263082135e
• quay.io/keycloak/keycloak 15.1.1@sha256:abade9a9cf985b454b30a9119183e62a0018ec546c8fc4fbd8572457afb4a666 → [Updates: 26.6.4]
• ghcr.io/miracum/fhir-pseudonymizer v2.25.0@sha256:e9ff406f538283e9be75a1595c3d797993278e6d8e126fd4f6e7105abb863acd → [Updates: v2.28.0]

src/list/frontend/tests/e2e/docker-compose.yaml (4)

• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• quay.io/keycloak/keycloak 15.1.1@sha256:abade9a9cf985b454b30a9119183e62a0018ec546c8fc4fbd8572457afb4a666 → [Updates: 26.6.4]
• docker.io/jaegertracing/all-in-one 1.60@sha256:4fd2d70fa347d6a47e79fcb06b1c177e6079f92cba88b083153d56263082135e

src/notify/tests/e2e/docker-compose.yaml (4)

• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]
• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/maildev/maildev 2.2.1@sha256:180ef51f65eefebb0e7122d8308813c1fd7bff164bc440ce5a3c2feee167a810

src/query/tests/e2e/docker-compose.yaml (3)

• docker.io/hapiproject/hapi v8.0.0@sha256:bf6ecbb4492361ae258a2bde6d4daf4c505b1a98e0925745aa0689e95b2d157e
• docker.io/ohdsi/broadsea-atlasdb 2.3.0@sha256:25d5000bd02427ea992d5ad20b1a6f2e7807a673122f83494be4ab477a0f6bf9
• docker.io/ohdsi/webapi 2.15.1@sha256:09a8af62f640b533bb308e5b18d2a2f55a916ebacbff139824fe042d9c94e88d → [Updates: 2.15.2]

dockerfile (5)

src/Dockerfile (2)

• docker.io/library/gradle 9.4.1-jdk25@sha256:8e41f079ca18bf00994f0ba7ca5cbfb7b0c2fdafd72bee98e6c3785bd9ac2939 → [Updates: 9.5.1-jdk25]
• gcr.io/distroless/java25-debian13 nonroot@sha256:ace83a068839dbfb151b0d80693df23120f6d13f963427fde7e43d9a175fd54a → [Updates: nonroot]

src/list/Dockerfile (2)

• docker.io/library/node 24.14.1-slim@sha256:b506e7321f176aae77317f99d67a24b272c1f09f1d10f1761f2773447d8da26c → [Updates: 24.16.0-slim]
• gcr.io/distroless/nodejs24-debian13 nonroot@sha256:38792f83f35f2df89d403f49491782981dd13a853bbcb09ff978d79328263463 → [Updates: nonroot]

src/list/frontend/tests/e2e/Dockerfile (1)

• docker.io/cypress/included 14.5.4@sha256:848fb0d361178e695aa3ebd0f9632f2966232907c0fc02fbd6432e07d4d08d8b → [Updates: 15.17.0]

src/query/tests/e2e/Dockerfile (1)

• docker.io/library/python 3.14.3-slim-bookworm@sha256:f21c0d5a44c56805654c15abccc1b2fd576c8d93aca0a3f74b4aba2dc92510e2 → [Updates: 3.14.5-slim-bookworm]

tests/chaos/tester/Dockerfile (3)

• mcr.microsoft.com/dotnet/sdk 10.0.300-noble@sha256:dc8430e6024d454edadad1e160e1973be3cabbb7125998ef190d9e5c6adf7dbb → [Updates: 10.0.301-noble, 10.0.300-noble]
• mcr.microsoft.com/dotnet/aspnet 10.0.8-noble-chiseled@sha256:c30fa82755872b47156f0b1ba3012a1705c8d8a95b319eb1c8924a4f4fc16a46 → [Updates: 10.0.9-noble-chiseled, 10.0.8-noble-chiseled]
• docker.io/rancher/kubectl v1.36.0@sha256:05d2b313e2f397e0ade252136aed47abd72d56ead11d1b027ac70f66362c8495 → [Updates: v1.36.1]

github-actions (13)

.github/workflows/build-docs.yaml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0]
• ubuntu 24.04
• python 3.14

.github/workflows/chaos-test.yaml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.2.0]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• ubuntu 24.04

.github/workflows/check-links.yaml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• lycheeverse/lychee-action v2.8.0@8646ba30535128ac92d33dfc9133794bfdd9b411
• micalevisk/last-issue-action v2.3.0@0d40124cc99ac8601c2516007f0c98ef3d27537b
• peter-evans/create-issue-from-file v6.0.0@fca9117c27cdc29c6c4db3b86c48e4115a786710
• ubuntu 24.04

.github/workflows/ci.yaml (6)

• miracum/.github v1.21.1@6c54f95d52ffc2aaddb163da9680a2d63c6accd9 → [Updates: v1.21.4]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• rlespinasse/slugify-value v1.4.0@a4879db1eb3db9bbee01dca36f98a8236c2b8239
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• miracum/.github v1.20.4@e80245abb031a27f87d0e07eeb6f5f54a82a46b8 → [Updates: v1.21.4]
• ubuntu 24.04

.github/workflows/helm-lint.yaml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.5, v6.1.0]
• ghcr.io/chgl/kube-powertools v2.5.15@sha256:d7050c728f9f73b55531d71aa5e1be8509a7764d9dd1c3c8eed578aee3c2ac88 → [Updates: v2.5.53]
• ubuntu 24.04

.github/workflows/lint-pr-title.yaml (2)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• ubuntu 24.04

.github/workflows/release-please.yaml (2)

• googleapis/release-please-action v4.4.0@16a9c90856f42705d54a6fda1823352bdc62cf38 → [Updates: v4.4.1, v5.0.0]
• ubuntu 24.04

.github/workflows/release.yaml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/login-action v4.0.0@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 → [Updates: v4.2.0]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.2]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8.0.0@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8.0.1]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.2, v3.0.1]
• slsa-framework/slsa-github-generator v2.1.0
• ubuntu 24.04
• ghcr.io/chgl/kube-powertools v2.5.15@sha256:d7050c728f9f73b55531d71aa5e1be8509a7764d9dd1c3c8eed578aee3c2ac88 → [Updates: v2.5.53]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/scorecards.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• github/codeql-action v4.32.5@c793b717bc78562f491db7b0e93a3a178b099162 → [Updates: v4.36.2]

.github/workflows/test-compose-installation.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/download-artifact v8.0.0@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8.0.1]
• ubuntu 24.04

.github/workflows/test-k8s-installation.yaml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.2.0]
• helm/kind-action v1.14.0@ef37e7f390d99f746eb8b610417061a60e82a6cc
• actions/download-artifact v8.0.0@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8.0.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611 → [Updates: v3.0.0]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• ubuntu 24.04

.github/workflows/validate-fhir-resources.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• ghcr.io/miracum/ig-build-tools v2.2.28@sha256:234c9e29eedd1e0bbf153399558d9c22b9d03d0f89549d11d6e06d3463a99049 → [Updates: v2.2.46]
• ubuntu 24.04

.github/workflows/validate-gradle-wrapper.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• ubuntu 24.04

gradle (8)

src/buildSrc/build.gradle (6)

• org.springframework.boot:spring-boot-gradle-plugin 3.5.14 → [Updates: 3.5.15, 4.1.0]
• io.spring.gradle:dependency-management-plugin 1.1.7
• com.google.cloud.tools:jib-gradle-plugin 3.5.3
• com.diffplug.spotless:spotless-plugin-gradle 8.4.0 → [Updates: 8.7.0]
• io.freefair.gradle:lombok-plugin 9.5.0
• de.undercouch:gradle-download-task 5.7.0

src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle (11)

• ca.uhn.hapi.fhir:hapi-fhir-client 8.8.1 → [Updates: 8.10.0]
• ca.uhn.hapi.fhir:hapi-fhir-base 8.8.1 → [Updates: 8.10.0]
• ca.uhn.hapi.fhir:hapi-fhir-structures-r4 8.8.1 → [Updates: 8.10.0]
• ca.uhn.hapi.fhir:hapi-fhir-client-okhttp 8.8.1 → [Updates: 8.10.0]
• com.squareup.okhttp3:okhttp 5.3.2 → [Updates: 5.4.0]
• net.logstash.logback:logstash-logback-encoder 9.0
• org.postgresql:postgresql 42.7.11 → [Updates: 42.7.12]
• io.micrometer:micrometer-registry-prometheus 1.16.5 → [Updates: 1.17.0]
• io.micrometer:micrometer-core 1.16.5 → [Updates: 1.17.0]
• jacoco 0.8.14 → [Updates: 0.8.15]
• checkstyle 13.4.1 → [Updates: 13.6.0]

src/buildSrc/src/main/groovy/org.miracum.recruit.java-common-conventions.gradle

src/buildSrc/src/main/groovy/org.miracum.recruit.java-library-conventions.gradle

src/notify/build.gradle (2)

• org.springframework.retry:spring-retry 2.0.12 → [Updates: 2.0.13]
• jakarta.mail:jakarta.mail-api 2.1.5

src/query-fhir-trino/build.gradle (5)

• ua.eshepelyuk.ManifestClasspath 1.0.0
• com.github.slugify:slugify 3.0.7 → [Updates: 4.0.0]
• io.trino:trino-jdbc 479 → [Updates: 481]
• com.approvaltests:approvaltests 29.0.0 → [Updates: 31.0.0]
• com.google.code.gson:gson 2.14.0

src/query/build.gradle (16)

• ua.eshepelyuk.ManifestClasspath 1.0.0
• org.apache.camel:camel-sql 4.16.0 → [Updates: 4.20.0]
• org.apache.camel:camel-jackson 4.16.0 → [Updates: 4.20.0]
• org.apache.camel:camel-jsonpath 4.16.0 → [Updates: 4.20.0]
• org.apache.camel:camel-fhir 4.16.0 → [Updates: 4.20.0]
• org.apache.camel:camel-http 4.16.0 → [Updates: 4.20.0]
• org.apache.camel:camel-cron 4.16.0 → [Updates: 4.20.0]
• org.apache.camel.springboot:camel-rest-starter 4.16.0 → [Updates: 4.20.0]
• org.apache.camel.springboot:camel-servlet-starter 4.16.0 → [Updates: 4.20.0]
• org.apache.camel.springboot:camel-spring-boot-starter 4.16.0 → [Updates: 4.20.0]
• org.apache.camel.springboot:camel-micrometer-starter 4.16.0 → [Updates: 4.20.0]
• com.fasterxml.jackson.core:jackson-annotations 2.21 → [Updates: 2.22]
• net.minidev:json-smart 2.6.0
• com.github.slugify:slugify 3.0.7 → [Updates: 4.0.0]
• com.approvaltests:approvaltests 29.0.0 → [Updates: 31.0.0]
• com.google.code.gson:gson 2.14.0

src/settings.gradle

gradle-wrapper (1)

src/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.5.0 → [Updates: 9.6.0]

helm-values (1)

charts/recruit/values.yaml (7)

• docker.io/library/postgres 18.2@sha256:a688ae5c99f86c1424e046ace0de890608cc0ddb5ec8ef72a6ff8305fdc8f4d2 → [Updates: 18.3]
• ghcr.io/miracum/recruit/omop/init v3.3.2-cdm5.3.1@sha256:40521fabaa73f9d01daec43ba9d510fc0f89b73714515006b70333c4b043d52c
• ghcr.io/miracum/recruit/query v10.5.0
• ghcr.io/miracum/recruit/notify v10.5.0
• ghcr.io/miracum/recruit/list v10.5.0
• ghcr.io/miracum/recruit/query-fhir-trino v10.5.0
• docker.io/curlimages/curl 8.20.0@sha256:b3f1fb2a51d923260350d21b8654bbc607164a987e2f7c84a0ac199a67df812a → [Updates: 8.21.0]

helmv3 (1)

charts/recruit/Chart.yaml (6)

• hapi-fhir-jpaserver 0.22.0 → [Updates: 0.23.0]
• mailhog 5.8.0
• ohdsi 0.25.66 → [Updates: 0.25.76]
• postgres 0.19.3 → [Updates: 0.19.5]
• fhir-pseudonymizer 0.8.45 → [Updates: 0.9.1]
• common 0.1.1

npm (4)

src/list/frontend/package.json (33)

• @dsb-norge/vue-keycloak-js 2.4.0 → [Updates: 3.0.8]
• @fortawesome/fontawesome-svg-core 1.2.36 → [Updates: 7.3.0]
• @fortawesome/free-solid-svg-icons 5.15.4 → [Updates: 7.3.0]
• @fortawesome/vue-fontawesome 2.0.10 → [Updates: 3.3.0]
• axios 1.16.0 → [Updates: 1.18.1]
• buefy 0.9.29 → [Updates: 3.0.8]
• core-js 3.47.0 → [Updates: 3.49.0]
• csv-stringify 6.6.0 → [Updates: 6.8.0]
• fhirclient 2.6.3
• fhirpath 4.8.2 → [Updates: 4.11.0]
• vue 2.7.16 → [Updates: 3.0.0]
• vue-router 3.6.5 → [Updates: 5.1.0]
• vuejs-logger 1.5.5
• @babel/eslint-parser 7.28.5 → [Updates: 7.29.7, 8.0.1]
• @vue/cli-plugin-babel 5.0.9
• @vue/cli-plugin-eslint 5.0.9
• @vue/cli-plugin-router 5.0.9
• @vue/cli-plugin-unit-jest 5.0.9
• @vue/cli-service 5.0.9
• @vue/eslint-config-airbnb 6.0.0 → [Updates: 8.0.0]
• @vue/test-utils 2.4.6 → [Updates: 2.4.11]
• @vue/vue2-jest 29.2.6
• cypress-keycloak 2.0.2
• eslint 8.57.1 → [Updates: 10.6.0]
• eslint-config-prettier 9.1.2 → [Updates: 10.1.8]
• eslint-plugin-vue 9.33.0 → [Updates: 10.9.2]
• jest 29.7.0 → [Updates: 30.4.2]
• sass 1.97.1 → [Updates: 1.101.0]
• sass-loader 16.0.6 → [Updates: 16.0.8, 17.0.0]
• vue-template-compiler 2.7.16
• pino 10.1.0 → [Updates: 10.3.1]
• @vue/cli-plugin-e2e-cypress 5.0.9
• cypress 13.17.0 → [Updates: 15.18.0]

src/list/frontend/tests/e2e/package.json (1)

• cypress-keycloak 2.0.2

src/list/package.json

src/list/server/package.json (29)

• @opentelemetry/api 1.9.0 → [Updates: 1.9.1]
• @opentelemetry/exporter-jaeger 2.2.0 → [Updates: 2.8.0]
• @opentelemetry/exporter-trace-otlp-grpc 0.208.0 → [Updates: 0.219.0]
• @opentelemetry/instrumentation 0.208.0 → [Updates: 0.219.0]
• @opentelemetry/instrumentation-express 0.57.1 → [Updates: 0.67.0]
• @opentelemetry/instrumentation-http 0.208.0 → [Updates: 0.219.0]
• @opentelemetry/instrumentation-pino 0.55.1 → [Updates: 0.65.0]
• @opentelemetry/resources 2.2.0 → [Updates: 2.8.0]
• @opentelemetry/sdk-trace-base 2.2.0 → [Updates: 2.8.0]
• @opentelemetry/sdk-trace-node 2.2.0 → [Updates: 2.8.0]
• @opentelemetry/semantic-conventions 1.38.0 → [Updates: 1.41.1]
• axios 1.16.0 → [Updates: 1.18.1]
• connect-history-api-fallback 2.0.0
• cors 2.8.5 → [Updates: 2.8.6]
• debug 4.4.3
• express 4.22.1 → [Updates: 4.22.2, 5.2.1]
• express-bearer-token 3.0.0
• express-jwt 8.5.1
• express-prom-bundle 8.0.0
• helmet 8.1.0 → [Updates: 8.2.0]
• http-proxy-middleware 3.0.5 → [Updates: 3.0.7]
• js-yaml 4.1.1 → [Updates: 4.3.0, 5.2.0]
• jwks-rsa 2.1.5 → [Updates: 4.1.0]
• node-http-proxy-json 0.1.9
• path 0.12.7
• pino 10.1.0 → [Updates: 10.3.1]
• pino-http 11.0.0
• prom-client 15.1.3
• retry-axios 4.0.1 → [Updates: 4.0.3]

nuget (2)

.config/dotnet-tools.json (1)

• csharpier 1.2.6 → [Updates: 1.3.0]

tests/chaos/tester/tester.csproj (3)

• System.CommandLine 2.0.0-beta4.22272.1 → [Updates: 2.0.9]
• Polly 8.6.6 → [Updates: 8.7.0]
• Hl7.Fhir.R4 6.1.1 → [Updates: 6.2.0]

pip-compile (1)

docs/requirements.in (1)

• mkdocs-material ==9.7.6

pip_requirements (2)

docs/requirements.txt (29)

• babel ==2.18.0
• backrefs ==6.2 → [Updates: ==7.0]
• certifi ==2026.4.22 → [Updates: ==2026.6.17]
• charset-normalizer ==3.4.7
• click ==8.3.3 → [Updates: ==8.4.1]
• colorama ==0.4.6
• ghp-import ==2.1.0
• idna ==3.15 → [Updates: ==3.18]
• jinja2 ==3.1.6
• Markdown ==3.10.2
• MarkupSafe ==3.0.3
• mergedeep ==1.3.4
• mkdocs ==1.6.1
• mkdocs-get-deps ==0.2.2
• mkdocs-material ==9.7.6
• mkdocs-material-extensions ==1.3.1
• packaging ==26.2
• paginate ==0.5.7
• pathspec ==1.1.1
• platformdirs ==4.9.6 → [Updates: ==4.10.0]
• Pygments ==2.20.0
• pymdown-extensions ==10.21.3 → [Updates: ==11.0.1]
• python-dateutil ==2.9.0.post0
• PyYAML ==6.0.3
• pyyaml-env-tag ==1.1
• requests ==2.33.1 → [Updates: ==2.34.2]
• six ==1.17.0
• urllib3 ==2.7.0
• watchdog ==6.0.0

src/query/tests/e2e/requirements.txt (12)

• certifi ==2026.4.22 → [Updates: ==2026.6.17]
• charset-normalizer ==3.4.7
• fhirclient ==4.4.0
• idna ==3.15 → [Updates: ==3.18]
• iniconfig ==2.3.0
• packaging ==26.2
• pluggy ==1.6.0
• pygments ==2.20.0
• pytest ==9.0.3 → [Updates: ==9.1.1]
• requests ==2.33.1 → [Updates: ==2.34.2]
• retrying ==1.4.2
• urllib3 ==2.7.0

renovate-config (1)

.renovaterc.json

---

• Check this box to trigger a request for Renovate to run again on this repository