Dependency Dashboard

[specmatic-builder]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update dependency python to 3.14
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update mikepenz/action-junit-report action to v6
• chore(deps): update softprops/action-gh-release action to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [SECURITY] Update dependency Werkzeug to v3.1.6
• [SECURITY] Update dependency python-dotenv to v1.2.2
• [SECURITY] Update dependency requests to v2.33.0
• [SECURITY] Update dependency flask to v3.1.3
• [SECURITY] Update dependency pytest to v9.0.3
• chore(deps): update dependency sanic to v25.12.1
• chore(deps): update dependency coverage to v7.14.1
• chore(deps): update dependency fastapi to v0.136.3
• chore(deps): update dependency marshmallow to v4.3.0
• chore(deps): update dependency setuptools to v80.10.2
• chore(deps): update dependency uvicorn to v0.49.0
• chore(deps): update dependency setuptools to v82
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

11/11 CVEs have Renovate fixes.

pip_requirements

requirements.txt

pytest

• GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)

requests

• GHSA-gc5v-m9x4-r6x2 (fixed in >= 2.33.0)

werkzeug

• GHSA-29vq-49wr-vm6x (fixed in >= 3.1.6)
• GHSA-87hc-h4r5-73f7 (fixed in >= 3.1.5)

flask

• GHSA-68rp-wp8r-4726 (fixed in >= 3.1.3)

python-dotenv

• GHSA-mf9w-mj56-hr94 (fixed in >= 1.2.2)

pip_setup

setup.py

pytest

• GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)

requests

• GHSA-gc5v-m9x4-r6x2 (fixed in >= 2.33.0)

werkzeug

• GHSA-29vq-49wr-vm6x (fixed in >= 3.1.6)
• GHSA-87hc-h4r5-73f7 (fixed in >= 3.1.5)

flask

• GHSA-68rp-wp8r-4726 (fixed in >= 3.1.3)

Detected Dependencies

github-actions (3)

.github/workflows/publish-to-test-pypi.yml (5)

• actions/checkout v6
• actions/setup-java v5
• actions/setup-python v6
• pypa/gh-action-pypi-publish release/v1
• python 3.11 → [Updates: 3.14]

.github/workflows/run-tests.yml (5)

• actions/setup-java v5
• actions/checkout v6
• actions/setup-python v6
• mikepenz/action-junit-report v4 → [Updates: v6]
• actions/upload-artifact v6 → [Updates: v7]

.github/workflows/update-specmatic-version-and-publish.yml (2)

• actions/checkout v6
• softprops/action-gh-release v2 → [Updates: v3]

pip_requirements (1)

requirements.txt (11)

• pytest ==9.0.2 → [Updates: ==9.0.3]
• requests ==2.32.5 → [Updates: ==2.33.0]
• Werkzeug ==3.1.4 → [Updates: ==3.1.6]
• uvicorn ==0.40.0 → [Updates: ==0.49.0]
• fastapi ==0.128.0 → [Updates: ==0.136.3]
• flask ==3.0.3 → [Updates: ==3.1.3]
• sanic ==25.12.0 → [Updates: ==25.12.1]
• marshmallow ==4.1.2 → [Updates: ==4.3.0]
• coverage ==7.13.1 → [Updates: ==7.14.1]
• python-dotenv ==1.0.1 → [Updates: ==1.2.2]
• setuptools ==80.9.0 → [Updates: ==80.10.2, ==82.0.1]

pip_setup (1)

setup.py (7)

• pytest >=7.3.1 → [Updates: >=9.0.3]
• requests >=2.32.4 → [Updates: >=2.33.0]
• Werkzeug >=3.1.4 → [Updates: >=3.1.6]
• uvicorn >=0.18.0
• fastapi >=0.70.0
• flask >=2.2.5 → [Updates: >=3.1.3]
• sanic >=22.12.0