Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cds-snc/data-lake).

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] chore(deps): update actions/setup-java action to v6
- [ ] chore(deps): update actions/setup-python action to v7
- [ ] chore(deps): update dependency pandas to v3
- [ ] chore(deps): update dependency pyarrow to v25
- [ ] chore(deps): update dorny/paths-filter action to v4
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [chore(deps): update mcr.microsoft.com/devcontainers/base:bullseye docker digest to d233ca1](../pull/659)
- [ ] chore(deps): update all patch dependencies (`boto3`, `hashicorp/terraform`)
- [ ] chore(deps): update all non-major github action dependencies (`ghcr.io/zizmorcore/zizmor`, `zizmorcore/zizmor-action`)
- [ ] chore(deps): update dependency google-auth to v2.58.0
- [ ] chore(deps): update terraform github.com/cds-snc/terraform-modules to v12

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency great_expectations to v1](../pull/461)

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

- `mcr.microsoft.com/devcontainers/base bullseye@sha256:5139be2118c8a62624cd9256b78610458b05bd64d539e4b81f9c51bf70810a08` → [Updates: `bullseye`]
- `ghcr.io/devcontainers/features/aws-cli 1`
- `ghcr.io/devcontainers/features/python 1`
- `python 3.14`
- `ghcr.io/devcontainers/features/terraform 1`

dockerfile (6)

export/operations/google_analytics/Dockerfile

export/platform/gc_design_system/airtable/Dockerfile

export/platform/gc_design_system/cloudfront/Dockerfile

export/platform/gc_design_system/npm/Dockerfile

export/platform/gc_notify/Dockerfile

export/platform/support/freshdesk/Dockerfile

github-actions (16)

.github/workflows/dependency-review.yml (3)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294`

.github/workflows/dependency-security-update.yml (1)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`

.github/workflows/docker-apply-production.yml (7)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`
- `aws-actions/amazon-ecr-login v2.1.7@03f1aad4c6c7ffd436567f42f9384779290529bd`
- `ubuntu 24.04-arm`

.github/workflows/docker-apply-staging.yml (6)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v3.0.4@0e4a8c6effa4802afeda77dc8d303f8176d7dfad` → [Updates: `v4.0.3`]
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`
- `aws-actions/amazon-ecr-login v2.1.7@03f1aad4c6c7ffd436567f42f9384779290529bd`
- `ubuntu 24.04-arm`

.github/workflows/docker-sbom-staging.yml (4)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/security-tools v4.0.4@d123fa2b895f7ef5b400fad333d2101b103b2e64`
- `ubuntu 24.04-arm`

.github/workflows/etl-pull-request.yml (6)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v3.0.4@0e4a8c6effa4802afeda77dc8d303f8176d7dfad` → [Updates: `v4.0.3`]
- `actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1` → [Updates: `v7.0.0`]
- `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.0`]
- `python 3.14`

.github/workflows/export-pull-request.yml (8)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v3.0.4@0e4a8c6effa4802afeda77dc8d303f8176d7dfad` → [Updates: `v4.0.3`]
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`
- `aws-actions/amazon-ecr-login v2.1.7@03f1aad4c6c7ffd436567f42f9384779290529bd`
- `actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1` → [Updates: `v7.0.0`]
- `ubuntu 24.04-arm`
- `python 3.14`

.github/workflows/glue_job_sync.yml (3)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`

.github/workflows/release-please.yml (3)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7`

.github/workflows/terraform-security-scan.yml (2)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/terragrunt-apply-production.yml (6)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/terraform-tools-setup v1.3.0@36df0d7572a15921998170395475093c183d720a`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`

.github/workflows/terragrunt-apply-staging.yml (4)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/terraform-tools-setup v1.3.0@36df0d7572a15921998170395475093c183d720a`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`

.github/workflows/terragrunt-plan-production.yml (13)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/terraform-tools-setup v1.3.0@36df0d7572a15921998170395475093c183d720a`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`

.github/workflows/terragrunt-plan-staging.yml (11)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `cds-snc/terraform-tools-setup v1.3.0@36df0d7572a15921998170395475093c183d720a`
- `aws-actions/configure-aws-credentials v6.2.4@cbe3b392738ccf3f987d68400dafcf4b0624a56c`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`
- `cds-snc/terraform-plan v5.0.4@529b272050a8f718d14c59e62b59c124eead7efc`

.github/workflows/workflow-failure.yml (1)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`

.github/workflows/zizmor.yml (4)

- `cds-snc/dns-proxy-action v1.2.0@7b6ba63b4f045de61c98a3c1b99fdd08f32b0784`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `zizmorcore/zizmor-action v0.6.3@70fb788f84895a7701f5643d103d587e460b5c99` → [Updates: `v0.6.4`]
- `ghcr.io/zizmorcore/zizmor 1.25.2` → [Updates: `1.30.1`]

pip_requirements (21)

export/operations/google_analytics/requirements_dev.txt (5)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`
- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `moto ==5.2.3`

export/operations/google_analytics/requirements.txt (3)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `google-analytics-data ==0.23.0`
- `google-auth ==2.57.1` → [Updates: `==2.58.0`]

export/platform/gc_design_system/airtable/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

export/platform/gc_design_system/airtable/requirements.txt (2)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `requests ==2.34.2`

export/platform/gc_design_system/cloudfront/requirements_dev.txt (3)

- `pytest ==9.1.1`
- `black ==26.5.1`
- `flake8 ==7.3.0`

export/platform/gc_design_system/cloudfront/requirements.txt (3)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `pandas ==2.3.3` → [Updates: `==3.0.5`]
- `pyarrow ==23.0.1` → [Updates: `==25.0.1`]

export/platform/gc_design_system/npm/requirements_dev.txt (3)

- `pytest ==9.1.1`
- `black ==26.5.1`
- `flake8 ==7.3.0`

export/platform/gc_design_system/npm/requirements.txt (2)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `requests ==2.34.2`

export/platform/gc_notify/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

export/platform/gc_notify/requirements.txt (1)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]

export/platform/support/freshdesk/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

export/platform/support/freshdesk/requirements.txt (2)

- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `requests ==2.34.2`

terragrunt/aws/glue/curated/platform/gc_notify/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

terragrunt/aws/glue/curated/platform/gc_notify/requirements.txt (1)

- `python-dateutil ==2.9.0.post0`

terragrunt/aws/glue/etl/bes/crm/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

terragrunt/aws/glue/etl/platform/gc_forms/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

terragrunt/aws/glue/etl/platform/gc_forms/requirements.txt (3)

- `awswrangler ==3.17.1`
- `pandas ==2.3.3` → [Updates: `==3.0.5`]
- `great_expectations ==0.18.22` → [Updates: `==1.22.0`]

terragrunt/aws/glue/etl/platform/gc_notify/requirements_dev.txt (6)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pandas ==2.3.3` → [Updates: `==3.0.5`]
- `pytest ==9.1.1`
- `pyspark ==4.2.0`
- `findspark ==2.0.1`

terragrunt/aws/glue/etl/platform/gc_notify/requirements.txt (4)

- `great_expectations ==0.18.22` → [Updates: `==1.22.0`]
- `numpy >=1.26.0`
- `awswrangler ==3.17.1`
- `pandas ==2.3.3` → [Updates: `==3.0.5`]

terragrunt/aws/glue/etl/platform/support/freshdesk/requirements_dev.txt (3)

- `black ==26.5.1`
- `flake8 ==7.3.0`
- `pytest ==9.1.1`

terragrunt/aws/glue/etl/platform/support/freshdesk/requirements.txt (4)

- `awswrangler ==3.17.1`
- `boto3 ==1.43.89` → [Updates: `==1.43.93`]
- `pandas ==2.3.3` → [Updates: `==3.0.5`]
- `great_expectations ==0.18.22` → [Updates: `==1.22.0`]

renovate-config (1)

renovate.json

terraform (13)

terragrunt/aws/buckets/athena.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/buckets/curated.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/buckets/glue.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/buckets/log.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/buckets/raw.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/buckets/transformed.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/export/operations/google_analytics/lambda.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/export/platform/gc_design_system/lambda.tf (3)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]
- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]
- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/export/platform/gc_notify/lambda.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/export/platform/support/freshdesk/lambda.tf (1)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/aws/export/tasks.tf

terragrunt/aws/oidc/oidc.tf (2)

- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]
- `github.com/cds-snc/terraform-modules v11.4.7` → [Updates: `v12.0.0`]

terragrunt/env/common/provider.tf (2)

- `aws ~> 6.0`
- `hashicorp/terraform 1.16.1` → [Updates: `1.16.2`]

terragrunt (14)

terragrunt/env/production/alarms/terragrunt.hcl

terragrunt/env/production/athena/terragrunt.hcl

terragrunt/env/production/buckets/terragrunt.hcl

terragrunt/env/production/export/terragrunt.hcl

terragrunt/env/production/glue/terragrunt.hcl

terragrunt/env/production/oidc/terragrunt.hcl

terragrunt/env/production/stepfunctions/terragrunt.hcl

terragrunt/env/staging/alarms/terragrunt.hcl

terragrunt/env/staging/athena/terragrunt.hcl

terragrunt/env/staging/buckets/terragrunt.hcl

terragrunt/env/staging/export/terragrunt.hcl

terragrunt/env/staging/glue/terragrunt.hcl

terragrunt/env/staging/oidc/terragrunt.hcl

terragrunt/env/staging/stepfunctions/terragrunt.hcl

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate Dependency Dashboard and its linked documentation, then inspect the listed .github/workflows files, .devcontainer/devcontainer.json, Dockerfiles, and requirements files. Review the pending approvals, scheduled updates, status checks, and linked pull requests; done would mean the selected dependency updates are created and their checks complete successfully.

Written by the indexing model from the issue text.