Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): Update dependency cryptography to v46.0.3
• fix(deps): Update dependency nox to v2025.10.14
• fix(deps): Update dependency virtualenv to v20.35.3

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): Update dependency pytest to v8.4.2
• fix(deps): Update dependency attrs to v25.4.0
• fix(deps): Update dependency click to v8.3.0
• fix(deps): Update dependency filelock to v3.20.0
• fix(deps): Update dependency more-itertools to v10.8.0
• fix(deps): Update dependency platformdirs to v4.5.0
• fix(deps): Update dependency pycparser to v2.23
• fix(deps): Update dependency pytest-mock to v3.15.1
• fix(deps): Update dependency SecretStorage to v3.4.0
• fix(deps): Update dependency yubikey-manager to v5.8.0
• fix(deps)!: Update dependency cffi to v2

Detected dependencies

cloudbuild

oss-terraform-automation/common/modules/bootstrap-kms-hsm/cloudbuild.yaml

dockerfile

oss-terraform-automation/1-apache-web-server/Dockerfile

• ubuntu/apache2 2.4-22.04_beta

oss-terraform-automation/2-nginx-ssl-offloading/Dockerfile

• nginx 1.25.0-bullseye

oss-terraform-automation/3-cng-provider/Dockerfile

• ubuntu/apache2 2.4-22.04_beta

gomod

test/integration/go.mod

• go 1.24.0
• go 1.24.9
• github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.17.9
• github.com/gruntwork-io/terratest v0.51.0
• github.com/stretchr/testify v1.11.1

tink-envelope-encryption-sample/go.mod

• go 1.24.0
• go 1.24.9
• github.com/google/tink/go v1.7.0
• google.golang.org/api v0.252.0

pip_requirements

envelope-encryption-sample/python-cli/requirements.txt

• google-cloud-kms ==3.6.0
• absl-py ==2.3.1
• cryptography ==46.0.2
• crcmod ==1.7

scripts/singletenanthsm/requirements.txt

• argcomplete ==3.6.2
• attrs ==25.3.0
• backports.tarfile ==1.2.0
• cffi ==1.17.1
• click ==8.2.1
• colorlog ==6.9.0
• cryptography ==46.0.2
• dependency-groups ==1.3.1
• distlib ==0.4.0
• fido2 ==2.0.0
• filelock ==3.18.0
• importlib_metadata ==8.7.0
• iniconfig ==2.1.0
• jaraco.classes ==3.4.0
• jaraco.context ==6.0.1
• jaraco.functools ==4.3.0
• jeepney ==0.9.0
• keyring ==25.6.0
• more-itertools ==10.7.0
• nox ==2025.5.1
• packaging ==25.0
• platformdirs ==4.4.0
• pluggy ==1.6.0
• pycparser ==2.22
• pyscard ==2.3.0
• pytest ==8.4.1
• pytest-mock ==3.14.1
• SecretStorage ==3.3.3
• virtualenv ==20.34.0
• yubikey-manager ==5.7.2
• zipp ==3.23.0

share-encrypted-data-with-partners/examples/python/requirements.txt

• cryptography ==46.0.2
• google-cloud-kms ==3.6.0

regex

build/int.cloudbuild.yaml

• cft/developer-tools 1

Makefile

• cft/developer-tools 1

renovate-config-presets

.github/renovate.json

terraform

ekm-over-vpc-onboarding/main.tf

ekm-over-vpc-onboarding/modules/create_vpc_kms_project/main.tf

• terraform-google-modules/project-factory/google ~> 18.0
• terraform-google-modules/project-factory/google ~> 18.0

ekm-over-vpc-onboarding/modules/create_vpc_kms_project/service_controls.tf

• terraform-google-modules/vpc-service-controls/google ~> 7.0
• terraform-google-modules/vpc-service-controls/google ~> 7.0
• terraform-google-modules/vpc-service-controls/google ~> 7.0

ekm-over-vpc-onboarding/modules/create_vpc_kms_project/versions.tf

• google >= 5.23.0
• hashicorp/terraform >= 1.5.7

ekm-over-vpc-onboarding/modules/ekm_resources_creation/network.tf

• terraform-google-modules/network/google 12.0.0
• terraform-google-modules/network/google ~> 12.0

ekm-over-vpc-onboarding/modules/ekm_resources_creation/versions.tf

• google >= 5.23.0
• google-beta >= 5.43.1
• hashicorp/terraform >= 1.5.7

ekm-over-vpc-onboarding/versions.tf

• hashicorp/terraform >= 1.5.7

envelope-encryption-sample/0-bootstrap/main.tf

• terraform-google-modules/kms/google 4.1.0

envelope-encryption-sample/0-bootstrap/versions.tf

• google >= 5.11, < 8
• null 3.2.4
• random 3.7.2
• time 0.13.1
• hashicorp/terraform >= 1.5.7

envelope-encryption-sample/1-encrypt/versions.tf

• google >= 5.11, < 8
• null 3.2.4
• random 3.7.2
• time 0.13.1
• hashicorp/terraform >= 1.5.7

envelope-encryption-sample/2-decrypt/versions.tf

• google >= 5.11, < 8
• null 3.2.4
• random 3.7.2
• time 0.13.1
• hashicorp/terraform >= 1.5.7

examples/envelope-encryption-sample/main.tf

examples/oss-apache-web-server/main.tf

examples/oss-cng-provider/main.tf

examples/oss-nginx-ssl-offloading/main.tf

examples/share_encrypted_data_with_partners/main.tf

examples/tink-envelope-encryption-sample/main.tf

examples/tink-envelope-encryption-sample/symmetric_encrypt_process.tf

• terraform-google-modules/kms/google 4.1.0

oss-terraform-automation/1-apache-web-server/main.tf

oss-terraform-automation/1-apache-web-server/versions.tf

• google >= 5.11, < 8
• hashicorp/terraform >= 1.5.7

oss-terraform-automation/2-nginx-ssl-offloading/main.tf

oss-terraform-automation/2-nginx-ssl-offloading/versions.tf

• google >= 5.11, < 8
• hashicorp/terraform >= 1.5.7

oss-terraform-automation/3-cng-provider/main.tf

oss-terraform-automation/3-cng-provider/versions.tf

• google >= 5.11, < 8
• hashicorp/terraform >= 1.5.7

oss-terraform-automation/common/modules/bootstrap-kms-hsm/main.tf

• terraform-google-modules/kms/google 4.1.0

oss-terraform-automation/common/modules/bootstrap-kms-hsm/network.tf

• terraform-google-modules/network/google ~> 12.0

oss-terraform-automation/common/modules/bootstrap-kms-hsm/org_policies.tf

• terraform-google-modules/org-policy/google ~> 7.0
• terraform-google-modules/org-policy/google ~> 7.0

oss-terraform-automation/common/modules/bootstrap-kms-hsm/vm.tf

• terraform-google-modules/container-vm/google ~> 3.0

share-encrypted-data-with-partners/consumer/0-bootstrap/versions.tf

• google >= 5.11, < 8
• null 3.2.4
• random 3.7.2
• time 0.13.1
• hashicorp/terraform >= 1.5.7

share-encrypted-data-with-partners/consumer/1-key-import/versions.tf

• null 3.2.4
• hashicorp/terraform >= 1.5.7

share-encrypted-data-with-partners/producer/versions.tf

• null 3.2.4
• hashicorp/terraform >= 1.5.7

test/setup/main.tf

• terraform-google-modules/project-factory/google ~> 18.0

test/setup/versions.tf

• terracurl ~> 2.0
• hashicorp/terraform >= 0.13

tink-envelope-encryption-sample/0-bootstrap/main.tf

• terraform-google-modules/kms/google 4.1.0

tink-envelope-encryption-sample/0-bootstrap/versions.tf

• google >= 5.11, < 8
• null 3.2.4
• random 3.7.2
• time 0.13.1
• hashicorp/terraform >= 1.5.7

tink-envelope-encryption-sample/1-encrypt/versions.tf

• null 3.2.4
• hashicorp/terraform >= 1.5.7

tink-envelope-encryption-sample/2-decrypt/versions.tf

• null 3.2.4
• hashicorp/terraform >= 1.5.7

tink-envelope-encryption-sample/3-reencrypt-symmetric-to-envelope/main.tf

tink-envelope-encryption-sample/3-reencrypt-symmetric-to-envelope/versions.tf

• null 3.2.4
• hashicorp/terraform >= 1.5.7

---

• Check this box to trigger a request for Renovate to run again on this repository