Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bcgov/wps).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/bcgov/wps).

- ⚠️ WARN: Error obtaining docker token
- ⚠️ WARN: Error updating branch: update failure
- ⚠️ WARN: Package lookup failures

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency bcgov/renovate-config to v2026.9.9
- [ ] fix(deps): update dependency com.android.tools.build:gradle to v9.4.0
- [ ] chore(deps): update dependency @swc/plugin-emotion to v16
- [ ] chore(deps): update github actions (major) (`actions/setup-java`, `astral-sh/setup-uv`)
- [ ] fix(deps): update dependency ipykernel to v7
- [ ] fix(deps): update dependency pandas to v3
- [ ] fix(deps): update dependency xarray to v2026
- [ ] fix(deps): update python docker tag
- [ ] fix(deps): update vitest monorepo to v5 (`@vitest/coverage-v8`, `vitest`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

- [ ] fix(deps): pin python to 292f12c

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update cffdrs digest to 0f57fcc
- [ ] fix(deps): update node dependencies (`@biomejs/biome`, `react-is`)
- [ ] chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.13
- [ ] chore(deps): update ghcr.io/bcgov/wps/wps-api-base docker tag to v7

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up docker package image-registry.apps.silver.devops.gov.bc.ca/e1e498-tools/wps-jobs-base: no-result`, `Failed to look up docker package artifacts.developer.gov.bc.ca/docker-remote/ubuntu: no-result`, `Failed to look up docker package image-registry.openshift-image-registry.svc:5000/bcgov/patroni-postgres: no-result`, `Could not determine new digest for update (git-refs package https://github.com/cffdrs/cffdrs_py.git)`.
>
> Files affected: `Dockerfile.jobs`, `openshift/hourlies-prune/docker/Dockerfile`, `openshift/patroni-postgis/docker/Dockerfile`, `openshift/pgslice/docker/Dockerfile`, `backend/packages/cffdrs-vec/pyproject.toml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency astral-sh/uv to v0.12.10](../pull/5817)
- [ ] [fix(deps): update capacitor to v8.5.1](../pull/5814) (`@capacitor/android`, `@capacitor/cli`, `@capacitor/core`, `@capacitor/ios`)
- [ ] [fix(deps): update python dependencies](../pull/5818) (`gdal`, `numba`)
- [ ] [chore(deps): update dependency openid/appauth-ios to v3](../pull/5807)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency ruff to ^0.16.0](../pull/5718)
- [ ] [fix(deps): update dependency numpy to ==2.5.*](../pull/5723)

## Detected Dependencies

cocoapods (1)

mobile/asa-go/ios/App/Podfile

docker-compose (3)

docker-compose.api-noreload.yml

docker-compose.yml

openshift/s3-backup/docker/docker-compose.yml

dockerfile (13)

backend/packages/wps-api/Dockerfile (2)

- `ubuntu 26.04`
- `ghcr.io/astral-sh/uv 0.9.11` → [Updates: `0.12.13`]

backend/packages/wps-weather/Dockerfile (2)

- `ghcr.io/astral-sh/uv 0.9.28` → [Updates: `0.12.13`]
- `ghcr.io/astral-sh/uv 0.9.28` → [Updates: `0.12.13`]

Dockerfile (4)

- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ghcr.io/astral-sh/uv 0.9.11` → [Updates: `0.12.13`]
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ghcr.io/astral-sh/uv 0.9.11` → [Updates: `0.12.13`]

Dockerfile.jobs (4)

- `image-registry.apps.silver.devops.gov.bc.ca/e1e498-tools/wps-jobs-base 16-06-2026`
- `ghcr.io/astral-sh/uv 0.9.11` → [Updates: `0.12.13`]
- `image-registry.apps.silver.devops.gov.bc.ca/e1e498-tools/wps-jobs-base 16-06-2026`
- `ghcr.io/astral-sh/uv 0.9.11` → [Updates: `0.12.13`]

Dockerfile.tileserv

Dockerfile.web (1)

- `docker.io/library/node 24-alpine`

openshift/hourlies-prune/docker/Dockerfile (1)

- `artifacts.developer.gov.bc.ca/docker-remote/ubuntu 24.04`

openshift/patroni-postgis/docker/Dockerfile (1)

- `image-registry.openshift-image-registry.svc:5000/bcgov/patroni-postgres 12.4-latest`

openshift/pgslice/docker/Dockerfile (1)

- `artifacts.developer.gov.bc.ca/docker-remote/ubuntu 24.04`

openshift/s3-backup/docker/Dockerfile (1)

- `postgres 16` → [Updates: `18`]

openshift/wps-api-base/docker/Dockerfile

openshift/wps-jobs-base/docker/Dockerfile

web/apps/wps-web/Dockerfile (1)

- `node 24-alpine`

github-actions (20)

.github/actions/aps-publish/action.yml (1)

- `actions/upload-artifact v7`

.github/actions/asa-go-setup/action.yml (4)

- `actions/setup-node v7`
- `actions/cache v6`
- `actions/cache v6`
- `node 24`

.github/actions/oc-setup/action.yml (1)

- `redhat-actions/openshift-tools-installer v3@37eb3cfb20ac2df6f0511ffa71cd917e4d49cabf`

.github/actions/python-setup/action.yml (3)

- `astral-sh/setup-uv v9.0.0` → [Updates: `v10.0.1`]
- `actions/cache v6`
- `astral-sh/uv 0.12.9` → [Updates: `0.12.10`]

.github/actions/sfms-fwi-aps-apply/action.yml (1)

- `actions/upload-artifact v7`

.github/actions/zap-baseline-scan/action.yml (1)

- `zaproxy/action-baseline v0.15.0`

.github/workflows/asa_go_android_build.yml (5)

- `actions/checkout v7`
- `actions/setup-java v5` → [Updates: `v6`]
- `gradle/actions v6.3.0@9c971963bec38e04b3d30dcc455b5382be2fdbfb`
- `actions/upload-artifact v7`
- `ubuntu 22.04` → [Updates: `24.04`]

.github/workflows/asa_go_integration.yml (13)

- `actions/checkout v7`
- `actions/checkout v7`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/checkout v7`
- `actions/checkout v7`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/checkout v7`
- `actions/setup-java v5` → [Updates: `v6`]
- `gradle/actions v6.3.0@9c971963bec38e04b3d30dcc455b5382be2fdbfb`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]
- `ubuntu 22.04` → [Updates: `24.04`]

.github/workflows/asa_go_ios_build_deploy.yml (3)

- `actions/checkout v7`
- `actions/upload-artifact v7`
- `macos 15` → [Updates: `26`]

.github/workflows/build_openshift_manual.yml (1)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/cleanup.yml (4)

- `actions/checkout v7`
- `actions/upload-artifact v7`
- `actions/upload-artifact v7`
- `actions/checkout v7`

.github/workflows/deploy_wps_weather.yml (4)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bcgov/actions v0.5.0@4ad61a784f1c17765b03d8d6de9737c1d3f4c0f2` → [Updates: `v0.6.0`]
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ubuntu 24.04`

.github/workflows/deployment.yml (11)

- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/integration.yml (40)

- `actions/checkout v7`
- `actions/checkout v7`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/checkout v7`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `actions/setup-node v7`
- `actions/cache v6`
- `rharkor/caching-for-turbo v2.5.1@2238fae6eb9a9936f92356f54cb3660200d105e7`
- `actions/upload-artifact v7`
- `actions/checkout v7`
- `actions/download-artifact v8`
- `codecov/codecov-action v7@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/checkout v7`
- `actions/setup-python v7`
- `actions/cache v6`
- `actions/cache v6`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ghcr.io/bcgov/wps/wps-api-base 06-16-2026` → [Updates: `07-16-2026`]
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`
- `ubuntu 24.04`

.github/workflows/issue-metrics.yml (2)

- `github/issue-metrics v5`
- `peter-evans/create-issue-from-file v6`

.github/workflows/pr_description.yml (3)

- `actions/checkout v7`
- `actions/github-script v9`
- `ubuntu 24.04`

.github/workflows/production.yml (5)

- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/login-action v4@dbcb813823bdd20940b903addbd779551569679f`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `ubuntu 24.04`

.github/workflows/publish_docker_base.yml (3)

- `actions/checkout v7`
- `docker/login-action v4`
- `ubuntu 24.04`

.github/workflows/setup_mac_test.yml (2)

- `actions/checkout v7`
- `macos 15` → [Updates: `26`]

.github/workflows/zap_scan.yml (2)

- `actions/checkout v7`
- `ubuntu 24.04`

gradle (10)

mobile/asa-go/android/app/build.gradle (6)

- `net.openid:appauth 0.11.1`
- `org.mockito:mockito-core 5.23.0`
- `org.mockito:mockito-inline 5.2.0`
- `org.robolectric:robolectric 4.16.1` → [Updates: `4.17`]
- `androidx.test:core 1.7.0`
- `com.google.firebase:firebase-bom 34.18.0` → [Updates: `34.19.0`]

mobile/asa-go/android/app/capacitor.build.gradle

mobile/asa-go/android/build.gradle (2)

- `com.android.tools.build:gradle 9.3.2` → [Updates: `9.4.0`]
- `com.google.gms:google-services 4.5.0`

mobile/asa-go/android/capacitor.settings.gradle

mobile/asa-go/android/gradle.properties

mobile/asa-go/android/settings.gradle (1)

- `org.gradle.toolchains.foojay-resolver-convention 1.0.0`

mobile/asa-go/android/variables.gradle (6)

- `androidx.appcompat:appcompat 1.8.0`
- `androidx.coordinatorlayout:coordinatorlayout 1.3.0`
- `androidx.core:core-splashscreen 1.2.0`
- `junit:junit 4.13.2`
- `androidx.test.ext:junit 1.3.0`
- `androidx.test.espresso:espresso-core 3.7.0`

mobile/keycloak/android/build.gradle (10)

- `com.android.tools.build:gradle 9.3.2` → [Updates: `9.4.0`]
- `androidx.browser:browser 1.10.0`
- `androidx.datastore:datastore-preferences-rxjava3 1.2.1`
- `com.google.crypto.tink:tink-android 1.23.0`
- `com.squareup.okhttp3:okhttp 5.5.0`
- `net.openid:appauth 0.11.1`
- `org.mockito:mockito-core 5.23.0`
- `org.mockito:mockito-inline 5.2.0`
- `org.robolectric:robolectric 4.16.1` → [Updates: `4.17`]
- `androidx.test:core 1.7.0`

mobile/keycloak/android/gradle.properties

mobile/keycloak/android/settings.gradle (1)

- `org.gradle.toolchains.foojay-resolver-convention 1.0.0`

gradle-wrapper (2)

mobile/asa-go/android/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 9.7.1`

mobile/keycloak/android/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 9.7.1`

npm (9)

mobile/asa-go/package.json (63)

- `@capacitor-firebase/messaging ^8.1.0`
- `@capacitor/android 8.5.0` → [Updates: `8.5.1`]
- `@capacitor/app 8.1.1`
- `@capacitor/core 8.5.0` → [Updates: `8.5.1`]
- `@capacitor/device ^8.0.1`
- `@capacitor/filesystem ^8.0.0`
- `@capacitor/geolocation ^8.0.0`
- `@capacitor/haptics 8.0.2`
- `@capacitor/ios 8.5.0` → [Updates: `8.5.1`]
- `@capacitor/keyboard 8.0.5`
- `@capacitor/local-notifications ^8.0.2`
- `@capacitor/network ^8.0.0`
- `@capacitor/preferences ^8.0.0`
- `@capacitor/screen-orientation ^8.0.0`
- `@capacitor/splash-screen ^8.0.0`
- `@capacitor/status-bar 8.0.3`
- `@emotion/react ^11.14.0`
- `@emotion/styled ^11.14.0`
- `@mui/icons-material ^9.0.0`
- `@mui/material ^9.0.0`
- `@mui/system ^9.0.0`
- `@mui/x-data-grid-pro ^9.0.0`
- `@reduxjs/toolkit ^2.5.1`
- `@sentry/capacitor ^4.3.0`
- `@sentry/react 10.69.0`
- `@sentry/vite-plugin ^5.2.0`
- `axios ^1.7.9`
- `firebase ^12.9.0`
- `jwt-decode ^4.0.0`
- `lodash ^4.17.21`
- `luxon ^3.5.0`
- `ol ^10.4.0`
- `ol-pmtiles ^2.0.0`
- `pmtiles ^4.2.1`
- `react ^19.2.7`
- `react-dom ^19.2.7`
- `react-is 19.2.8` → [Updates: `19.3.0`]
- `react-redux ^9.2.0`
- `vitest ^4.0.0` → [Updates: `^5.0.0`]
- `@biomejs/biome 2.5.12` → [Updates: `2.5.13`]
- `@capacitor/assets ^3.0.5`
- `@capacitor/cli 8.5.0` → [Updates: `8.5.1`]
- `@testing-library/dom ^10.4.0`
- `@testing-library/jest-dom ^7.0.0`
- `@testing-library/react ^16.3.0`
- `@testing-library/user-event ^14.6.1`
- `@types/jest ^30.0.0`
- `@types/lodash ^4.17.14`
- `@types/luxon ^3.4.2`
- `@types/node ^25.5.0`
- `@types/react ^19.2.17`
- `@types/react-dom ^19.2.3`
- `@types/sinon ^22.0.0`
- `@vitejs/plugin-react-swc ^4.0.0`
- `@vitest/coverage-v8 ^4.0.8` → [Updates: `^5.0.0`]
- `jsdom ^30.0.0`
- `ol-mapbox-style ^13.0.0`
- `sinon ^22.0.0`
- `typescript ~7.0.0`
- `vite ^8.0.0`
- `react-is 19.2.8` → [Updates: `19.3.0`]
- `vite ^8.0.0`
- `yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e`

mobile/keycloak/package.json (14)

- `@biomejs/biome 2.5.12` → [Updates: `2.5.13`]
- `@capacitor/android ^8.0.0`
- `@capacitor/core ^8.0.0`
- `@capacitor/docgen ^0.3.0`
- `@capacitor/ios ^8.0.0`
- `@ionic/swiftlint-config ^2.0.0`
- `prettier ^3.4.2`
- `prettier-plugin-java ^2.6.6`
- `rimraf ^6.0.1`
- `rollup ^4.30.1`
- `swiftlint ^2.0.0`
- `typescript ~7.0.0`
- `@capacitor/core >=7.0.0`
- `yarn 1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e`

web/apps/wps-web/package.json (62)

- `@emotion/cache ^11.14.0`
- `@emotion/react ^11.8.2`
- `@emotion/styled ^11.8.1`
- `@mui/icons-material ^9.0.0`
- `@mui/material ^9.0.0`
- `@mui/system ^9.0.0`
- `@mui/x-data-grid-pro ^9.0.0`
- `@mui/x-date-pickers ^9.0.0`
- `@reduxjs/toolkit ^2.2.7`
- `@sentry/react ^10.0.0`
- `@sentry/vite-plugin ^5.0.0`
- `@types/lodash ^4.14.173`
- `@types/luxon ^3.0.2`
- `@types/react ^19.2.17`
- `@types/react-dom ^19.2.3`
- `@types/react-router-dom ^5.3.3`
- `@types/webpack-env ^1.15.1`
- `axios 1.20.0`
- `date-fns ^4.0.0`
- `filefy ^0.1.11`
- `jsdom ^30.0.0`
- `jwt-decode ^4.0.0`
- `keycloak-js ^26.0.0`
- `lodash ^4.17.21`
- `luxon ^3.0.2`
- `match-sorter ^8.0.0`
- `nyc ^18.0.0`
- `ol 10.10.0`
- `ol-mapbox-style ^13.1.1`
- `ol-pmtiles ^2.0.0`
- `react ^19.2.7`
- `react-dom ^19.2.7`
- `react-is 19.2.8` → [Updates: `19.3.0`]
- `react-redux ^9.1.2`
- `react-router-dom ^7.6.2`
- `whatwg-fetch ^3.6.20`
- `@babel/core ^8.0.0`
- `@babel/preset-env ^8.0.0`
- `@playwright/test ^1.59.1`
- `@swc/plugin-emotion ^15.0.0` → [Updates: `^16.0.0`]
- `@testing-library/dom ^10.1.0`
- `@testing-library/jest-dom ^7.0.0`
- `@testing-library/react ^16.0.0`
- `@testing-library/user-event ^14.5.2`
- `@types/babel__core ^7`
- `@types/babel__preset-env ^7`
- `@types/fs-extra ^11.0.4`
- `@types/jest ^30.0.0`
- `@types/node ^25.6.0`
- `@types/react-is ^19`
- `@vitejs/plugin-react-swc ^4.3.3`
- `babel-loader ^10.1.1`
- `fs-extra ^11.3.4`
- `rollup ^4.59.0`
- `start-server-and-test ^3.0.0`
- `ts-sinon ^2.0.2`
- `vite ^8.0.0`
- `vite-plugin-istanbul ^9.0.0`
- `vite-plugin-svgr ^5.0.0`
- `webpack ^5.105.4`
- `node >=24`
- `npm >=10.7.0`

web/package.json (7)

- `@biomejs/biome 2.5.12` → [Updates: `2.5.13`]
- `@vitest/coverage-v8 ^4.1.0` → [Updates: `^5.0.0`]
- `turbo ^2.0.0`
- `typescript ^7.0.0`
- `vitest ^4.1.0` → [Updates: `^5.0.0`]
- `react-is 19.2.8` → [Updates: `19.3.0`]
- `yarn 4.18.0+sha512.fcb8716fe7cd0eece141ffc18b92193a9df9204c1ba83189c288835223fc0bbe64af473bab0d5e9927a7daeb5caf2bb07eb2787cc9338ca040ea125f2a1f2f7e`

web/packages/api/package.json (4)

- `axios 1.20.0`
- `lodash ^4.17.21`
- `luxon ^3.0.2`
- `geojson ^0.5.0`

web/packages/tsconfig/package.json

web/packages/types/package.json

web/packages/ui/package.json (13)

- `@mui/icons-material ^9.0.0`
- `@mui/material ^9.0.0`
- `@mui/system ^9.0.0`
- `@mui/x-data-grid-pro ^9.0.0`
- `@mui/x-date-pickers ^9.0.0`
- `@sentry/react ^10.0.0`
- `@types/react ^19.2.17`
- `@types/react-dom ^19.2.3`
- `date-fns ^4.0.0`
- `lodash ^4.17.21`
- `luxon ^3.0.2`
- `react ^19.2.7`
- `react-dom ^19.2.7`

web/packages/utils/package.json (5)

- `axios 1.20.0`
- `lodash ^4.17.21`
- `luxon ^3.0.2`
- `ol 10.10.0`
- `ol-mapbox-style ^13.1.1`

pep621 (9)

backend/packages/cffdrs-vec/pyproject.toml (6)

- `python >=3.12.3,<4.0`
- `cffdrs >=0,<1@e3f27c2f5d6ac5618e48b5d5b725dbd9ab3af19c`
- `numba >=0,<1`
- `numpy >=1,<3`
- `gdal ==3.13.1` → [Updates: `==3.13.3`]
- `hypothesis >=6.150.2`

backend/packages/wps-api/pyproject.toml (50)

- `python >=3.12.3,<4.0`
- `fastapi >=0,<1`
- `requests >=2,<3`
- `aiodns >=4,<5`
- `aiohttp >=3,<4`
- `pandas >=2,<3` → [Updates: `>=3,<4`]
- `pyjwt >=2,<3`
- `cryptography >=50,<51`
- `sqlalchemy >=2,<3`
- `psycopg2 >=2,<3`
- `postgres >=4,<5`
- `python-decouple >=3,<4`
- `uvicorn >=0,<1`
- `alembic >=1,<2`
- `requests-ntlm >=1,<2`
- `scipy >=1,<2`
- `geoalchemy2 >=0,<1`
- `aiofiles >=25.0.0,<26`
- `jinja2 >=3,<4`
- `numpy ==2.3.*` → [Updates: `==2.5.*`]
- `redis >=8,<9`
- `pyjnius >=1.3.0,<2`
- `hiredis >=3.0.0,<4`
- `pdfkit >=1.0.0,<2`
- `asyncpg >=0.30.0,<1`
- `python-multipart >=0.0.18,<1`
- `gunicorn >=26,<27`
- `setuptools >=84,<85`
- `nats-py >=2.1.7,<3`
- `affine >=3,<4`
- `scikit-learn >=1.1.3,<2`
- `httpx >=0.27.0,<1`
- `orjson >=3.9.0,<4`
- `greenlet >=3.0.0,<4`
- `sentry-sdk >=2.0.1,<3`
- `numba ==0.66.*` → [Updates: `==0.67.*`]
- `cffdrs e3f27c2f5d6ac5618e48b5d5b725dbd9ab3af19c` → [Updates: `undefined`]
- `geopandas >=1.0.1,<2`
- `shapely >=2.0.5,<3`
- `gdal ==3.13.1` → [Updates: `==3.13.3`]
- `earthaccess >=0.15.1`
- `firebase-admin >=7.3.0`
- `jupyter >=1,<2`
- `notebook >=7.0.7,<8`
- `pycodestyle >=2,<3`
- `autopep8 >=2,<3`
- `matplotlib >=3,<4`
- `rope >=1,<2`
- `pytest-watch >=4.2.0,<5`
- `testcontainers >=4.10.0,<5`

backend/packages/wps-jobs/pyproject.toml (16)

- `python >=3.12.3,<4.0`
- `scipy >=1.15.2,<2`
- `scikit-learn >=1.6.1,<2`
- `sqlalchemy >=2.0.38,<3`
- `redis >=8,<9`
- `psycopg2-binary >=2.9.10,<3`
- `asyncpg >=0.30.0,<1`
- `affine >=3,<4`
- `numpy ==2.3.*` → [Updates: `==2.5.*`]
- `xarray >=2025.3.1,<2026` → [Updates: `>=2026.7,<2027`]
- `herbie-data >=2026.3,<2027`
- `gdal ==3.13.1` → [Updates: `==3.13.3`]
- `aiofiles >=25.0.0,<26`
- `geoalchemy2 >=0,<1`
- `shapely >=2.0.5,<3`
- `ipykernel >=6.29.5,<7` → [Updates: `>=7.3,<8`]

backend/packages/wps-sfms/pyproject.toml (3)

- `python >=3.12.3,<4.0`
- `numpy >=1,<3`
- `hypothesis >=6.150.2`

backend/packages/wps-shared/pyproject.toml (19)

- `python >=3.12.3,<4.0`
- `sqlalchemy >=2,<3`
- `aiohttp >=3,<4`
- `requests >=2,<3`
- `python-decouple >=3,<4`
- `geopandas >=1.0.1,<2`
- `shapely >=2.0.5,<3`
- `pydantic >=2.10.6,<3`
- `geoalchemy2 >=0,<1`
- `affine >=3,<4`
- `fastapi >=0.115.11,<1`
- `sentry-sdk >=2.22.0,<3`
- `pyjwt >=2.10.1,<3`
- `psycopg2-binary >=2.9.10,<3`
- `asyncpg >=0.30.0,<1`
- `redis >=8,<9`
- `gdal ==3.13.1` → [Updates: `==3.13.3`]
- `aiofiles >=25.0.0,<26`
- `testcontainers >=4.10.0,<5`

backend/packages/wps-tools/pyproject.toml (9)

- `python >=3.12.3,<4.0`
- `python-decouple >=3.6,<4`
- `boto3 >=1.34,<2`
- `boto3-stubs >=1.34,<2`
- `types-aiobotocore >=3.9,<4`
- `pandas >=1.5.2,<3` → [Updates: `>=3.0.5,<4`]
- `requests >=2.31.0,<3`
- `aiohttp >=3.13.2`
- `matplotlib >=3.10.8`

backend/packages/wps-weather/pyproject.toml (18)

- `python >=3.12.3,<4.0`
- `numpy ==2.3.*` → [Updates: `==2.5.*`]
- `xarray >=2025.3.1,<2026` → [Updates: `>=2026.7,<2027`]
- `matplotlib >=3.7.0,<4`
- `cartopy >=0.22.0,<1`
- `scipy >=1.15.2,<2`
- `geopandas >=1.0.1,<2`
- `shapely >=2.0.5,<3`
- `pyproj >=3.5.0,<4`
- `fiona >=1.9.0,<2`
- `aio-pika >=9.5.8`
- `aiofiles >=25.1.0`
- `cfgrib >=0.9.15.1`
- `eccodes >=2.45.0`
- `sqlalchemy >=2,<3`
- `jupyter >=1.0.0,<2`
- `notebook >=7.0.0,<8`
- `jupyterlab >=4.0.0,<5`

backend/packages/wps-wf1/pyproject.toml (2)

- `python >=3.12.3,<4.0`
- `aiohttp >=3.13.2`

backend/pyproject.toml (8)

- `pytest >=9.0.0,<10`
- `pytest-mock >=3,<4`
- `pytest-cov >=7.0.0,<8`
- `pytest-xdist >=3,<4`
- `coverage >=7.6.4,<8`
- `ruff >=0.11.5,<1`
- `moto >=5.2,<6`
- `responses >=0.26,<1`

poetry (2)

openshift/s3-backup/docker/pyproject.toml (5)

- `poetry-core >=1.0.0`
- `python >=3.11.2`
- `python-decouple ^3.5`
- `pytest ^9.0.0`
- `ruff ^0.6.8` → [Updates: `^0.16.0`]

sfms/pyproject.toml (2)

- `poetry-core >=1.0.0`
- `python 2.7.18` → [Updates: `3.14.7`, `2.7.18`]

pyenv (1)

backend/.python-version (1)

- `python 3.12.3` → [Updates: `3.14.6`]

regex (1)

renovate.json (1)

- `bcgov/renovate-config 2026.8.18` → [Updates: `2026.9.9`]

renovate-config (1)

renovate.json (1)

- `bcgov/renovate-config 2026.8.18` → [Updates: `2026.9.9`]

swift (1)

mobile/keycloak/Package.swift (2)

- `ionic-team/capacitor-swift-pm from: "8.5.0"`
- `openid/AppAuth-iOS from: "2.1.0"` → [Updates: `from: "3.0.0"`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate dashboard, its repository-problem logs, and the linked pull requests. Review the affected Dockerfiles, GitHub Actions files, and backend/packages/cffdrs-vec/pyproject.toml to identify which dependency failures remain actionable. Done is not defined by this issue; it currently records multiple rate-limited, blocked, pending, and errored updates.

Written by the indexing model from the issue text.