This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/IBM/dapcs-oso-plugins). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/werkzeug-3.x -->Update dependency werkzeug to v3.1.8 - [ ] <!-- unlimit-branch=renovate/annotated-types-0.x -->Update dependency annotated-types to v0.8.0 - [ ] <!-- unlimit-branch=renovate/certifi-2026.x -->Update dependency certifi to v2026.7.22 - [ ] <!-- unlimit-branch=renovate/click-8.x -->Update dependency click to v8.4.2 - [ ] <!-- unlimit-branch=renovate/idna-3.x -->Update dependency idna to v3.18 - [ ] <!-- unlimit-branch=renovate/packaging-26.x -->Update dependency packaging to v26.2 - [ ] <!-- unlimit-branch=renovate/pip-26.x -->Update dependency pip to v26.2 - [ ] <!-- unlimit-branch=renovate/pydantic-2.x -->Update dependency pydantic to v2.13.4 - [ ] <!-- unlimit-branch=renovate/pydantic-core-2.x -->Update dependency pydantic-core to v2.47.0 - [ ] <!-- unlimit-branch=renovate/requests-2.x -->Update dependency requests to v2.34.2 - [ ] <!-- unlimit-branch=renovate/typing-extensions-4.x -->Update dependency typing-extensions to v4.16.0 - [ ] <!-- unlimit-branch=renovate/attrs-26.x -->Update dependency attrs to v26 - [ ] <!-- unlimit-branch=renovate/cryptography-50.x -->Update dependency cryptography to v50 - [ ] <!-- unlimit-branch=renovate/gunicorn-26.x -->Update dependency gunicorn to v26 - [ ] <!-- unlimit-branch=renovate/structlog-26.x -->Update dependency structlog to v26 - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/pypi-flask-vulnerability -->[Update dependency flask to v3.1.3 [SECURITY]](../pull/71) - [ ] <!-- rebase-branch=renovate/pypi-python-dotenv-vulnerability -->[Update dependency python-dotenv to v1.2.2 [SECURITY]](../pull/79) - [ ] <!-- rebase-branch=renovate/pypi-werkzeug-vulnerability -->[Update dependency werkzeug to v3.1.6 [SECURITY]](../pull/72) - [ ] <!-- rebase-branch=renovate/pypi-idna-vulnerability -->[Update dependency idna to v3.15 [SECURITY]](../pull/84) - [ ] <!-- rebase-branch=renovate/pypi-pydantic-settings-vulnerability -->[Update dependency pydantic-settings to v2.14.2 [SECURITY]](../pull/90) - [ ] <!-- rebase-branch=renovate/pypi-requests-vulnerability -->[Update dependency requests to v2.33.0 [SECURITY]](../pull/73) - [ ] <!-- rebase-branch=renovate/pypi-urllib3-vulnerability -->[Update dependency urllib3 to v2.7.0 [SECURITY]](../pull/81) - [ ] <!-- rebase-branch=renovate/pypi-cryptography-vulnerability -->[Update dependency cryptography to v48 [SECURITY]](../pull/58) - [ ] <!-- rebase-branch=renovate/charset-normalizer-3.x -->[Update dependency charset-normalizer to v3.4.9](../pull/74) - [ ] <!-- rebase-branch=renovate/coverage-7.x -->[Update dependency coverage to v7.15.3](../pull/50) - [ ] <!-- rebase-branch=renovate/null-3.x -->[Update Terraform null to v3.3.0](../pull/44) - [ ] <!-- rebase-branch=renovate/cffi-2.x -->[Update dependency cffi to v2.1.0](../pull/46) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>dockerfile (3)</summary> <blockquote> <details><summary>fireblocks-plugin/Containerfile</summary> </details> <details><summary>ibm-digital-asset-haven-plugin/Containerfile</summary> </details> <details><summary>ripple-plugin/Dockerfile</summary> </details> </blockquote> </details> <details><summary>pep621 (2)</summary> <blockquote> <details><summary>fireblocks-plugin/pyproject.toml (6)</summary> - `python >= 3.11` - `cryptography ==45.0.5` → [Updates: `==48.0.1`] - `gunicorn >=23.0.0` - `ruff >=0.9.4` - `requests-mock >=1.12.1` - `cython >= 3` </details> <details><summary>ibm-digital-asset-haven-plugin/pyproject.toml (12)</summary> - `python >= 3.11` - `requests ==2.33.0` → [Updates: `==2.34.2`] - `flask ==3.1.3` - `werkzeug ==3.1.6` → [Updates: `==3.1.8`] - `gunicorn >=23.0.0` - `python-dotenv >=1.2.2` - `click >=8.3.3` - `urllib3 >=2.7.0` - `idna >=3.15` - `ruff >=0.9.4` - `requests-mock >=1.12.1` - `cython >= 3` </details> </blockquote> </details> <details><summary>pip_requirements (5)</summary> <blockquote> <details><summary>fireblocks-plugin/requirements.txt (31)</summary> - `annotated-types ==0.7.0` → [Updates: `==0.8.0`] - `attrs ==25.4.0` → [Updates: `==26.1.0`] - `blinker ==1.9.0` - `certifi ==2026.1.4` → [Updates: `==2026.7.22`] - `cffi ==1.17.1` → [Updates: `==2.1.0`] - `charset-normalizer ==3.4.4` → [Updates: `==3.4.9`] - `click ==8.3.1` → [Updates: `==8.4.2`] - `colorama ==0.4.6` - `cryptography ==45.0.5` → [Updates: `==48.0.1`] - `flask ==3.1.2` → [Updates: `==3.1.3`] - `gunicorn ==23.0.0` → [Updates: `==26.0.0`] - `idna ==3.11` → [Updates: `==3.15`] - `itsdangerous ==2.2.0` - `jinja2 ==3.1.6` - `jsonschema ==4.26.0` - `jsonschema-specifications ==2025.9.1` - `markupsafe ==3.0.3` - `packaging ==26.0` → [Updates: `==26.2`] - `pycparser ==3.0` - `pydantic ==2.12.5` → [Updates: `==2.13.4`] - `pydantic-core ==2.41.5` → [Updates: `==2.47.0`] - `pydantic-settings ==2.12.0` → [Updates: `==2.14.2`] - `python-dotenv ==1.2.1` → [Updates: `==1.2.2`] - `referencing ==0.37.0` - `requests ==2.32.5` → [Updates: `==2.33.0`] - `rpds-py ==0.30.0` - `structlog ==25.5.0` → [Updates: `==26.1.0`] - `typing-extensions ==4.15.0` → [Updates: `==4.16.0`] - `typing-inspection ==0.4.2` - `urllib3 ==2.6.3` → [Updates: `==2.7.0`] - `werkzeug ==3.1.5` → [Updates: `==3.1.6`] </details> <details><summary>ibm-digital-asset-haven-plugin/requirements.txt (31)</summary> - `annotated-types ==0.7.0` → [Updates: `==0.8.0`] - `attrs ==25.4.0` → [Updates: `==26.1.0`] - `blinker ==1.9.0` - `certifi ==2026.1.4` → [Updates: `==2026.7.22`] - `cffi ==2.0.0` → [Updates: `==2.1.0`] - `charset-normalizer ==3.4.4` → [Updates: `==3.4.9`] - `click ==8.3.3` → [Updates: `==8.4.2`] - `colorama ==0.4.6` - `cryptography ==46.0.7` → [Updates: `==48.0.1`] - `flask ==3.1.3` - `gunicorn ==23.0.0` → [Updates: `==26.0.0`] - `idna ==3.16` → [Updates: `==3.18`] - `itsdangerous ==2.2.0` - `jinja2 ==3.1.6` - `jsonschema ==4.26.0` - `jsonschema-specifications ==2025.9.1` - `markupsafe ==3.0.3` - `packaging ==26.0` → [Updates: `==26.2`] - `pycparser ==3.0` - `pydantic ==2.12.5` → [Updates: `==2.13.4`] - `pydantic-core ==2.41.5` → [Updates: `==2.47.0`] - `pydantic-settings ==2.12.0` → [Updates: `==2.14.2`] - `python-dotenv ==1.2.2` - `referencing ==0.37.0` - `requests ==2.33.0` → [Updates: `==2.34.2`] - `rpds-py ==0.30.0` - `structlog ==25.5.0` → [Updates: `==26.1.0`] - `typing-extensions ==4.15.0` → [Updates: `==4.16.0`] - `typing-inspection ==0.4.2` - `urllib3 ==2.7.0` - `werkzeug ==3.1.6` → [Updates: `==3.1.8`] </details> <details><summary>ripple-plugin/requirements.build.txt (3)</summary> - `packaging ==26.2` - `wheel ==0.47.0` - `setuptools ==83.0.0` </details> <details><summary>ripple-plugin/requirements.constraints.txt (38)</summary> - `aniso8601 ==10.0.1` - `attrs ==26.1.0` - `blinker ==1.9.0` - `certifi ==2026.6.17` → [Updates: `==2026.7.22`] - `cffi ==2.0.0` → [Updates: `==2.1.0`] - `charset-normalizer ==3.4.8` → [Updates: `==3.4.9`] - `click ==8.4.2` - `coverage ==7.15.0` → [Updates: `==7.15.3`] - `cryptography ==49.0.0` → [Updates: `==50.0.0`] - `flask ==3.1.3` - `flask-restx ==1.3.2` - `gunicorn ==26.0.0` - `idna ==3.18` - `importlib-resources ==7.1.0` - `iniconfig ==2.3.0` - `itsdangerous ==2.2.0` - `jinja2 ==3.1.6` - `jsonschema ==4.26.0` - `jsonschema-specifications ==2025.9.1` - `markupsafe ==3.0.3` - `packaging ==26.2` - `pluggy ==1.6.0` - `pycparser ==3.0` - `pygments ==2.20.0` - `pytest ==9.1.1` - `pytest-cov ==7.1.0` - `pytest-mock ==3.15.1` - `referencing ==0.37.0` - `requests ==2.34.2` - `requests-mock ==1.12.1` - `requests-toolbelt ==1.0.0` - `rpds-py ==2026.6.3` - `supervisor ==4.3.0` - `urllib3 ==2.7.0` - `werkzeug ==3.1.8` - `wheel ==0.47.0` - `pip ==26.1.2` → [Updates: `==26.2`] - `setuptools ==83.0.0` </details> <details><summary>ripple-plugin/requirements.txt (26)</summary> - `aniso8601 ==10.0.1` - `attrs ==26.1.0` - `blinker ==1.9.0` - `certifi ==2026.6.17` → [Updates: `==2026.7.22`] - `cffi ==2.0.0` → [Updates: `==2.1.0`] - `charset-normalizer ==3.4.8` → [Updates: `==3.4.9`] - `click ==8.4.2` - `cryptography ==49.0.0` → [Updates: `==50.0.0`] - `flask ==3.1.3` - `flask-restx ==1.3.2` - `gunicorn ==26.0.0` - `idna ==3.18` - `importlib-resources ==7.1.0` - `itsdangerous ==2.2.0` - `jinja2 ==3.1.6` - `jsonschema ==4.26.0` - `jsonschema-specifications ==2025.9.1` - `markupsafe ==3.0.3` - `packaging ==26.2` - `pycparser ==3.0` - `referencing ==0.37.0` - `requests ==2.34.2` - `rpds-py ==2026.6.3` - `supervisor ==4.3.0` - `urllib3 ==2.7.0` - `werkzeug ==3.1.8` </details> </blockquote> </details> <details><summary>poetry (1)</summary> <blockquote> <details><summary>ripple-plugin/pyproject.toml</summary> </details> </blockquote> </details> <details><summary>terraform (6)</summary> <blockquote> <details><summary>contracts/fireblocks/backend/terraform.tf (2)</summary> - `hpcr >= 0.11.0` - `null 3.2.3` → [Updates: `3.3.0`] </details> <details><summary>contracts/fireblocks/frontend/terraform.tf (1)</summary> - `hpcr >= 0.11.0` </details> <details><summary>contracts/ibm-digital-asset-haven/backend/terraform.tf (1)</summary> - `hpcr >= 0.14.0` </details> <details><summary>contracts/ibm-digital-asset-haven/frontend/terraform.tf (1)</summary> - `hpcr >= 0.14.0` </details> <details><summary>contracts/ripple/backend/terraform.tf (2)</summary> - `hpcr >= 0.11.0` - `null 3.2.3` → [Updates: `3.3.0`] </details> <details><summary>contracts/ripple/frontend_plugin/terraform.tf (1)</summary> - `hpcr >= 0.11.0` </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
Detected Dependencies
dockerfile (3)
pep621 (2)
pip_requirements (5)
poetry (1)
terraform (6)