[dependabot]

Bumps the python-dependencies group in /cdk/runtimes/eoapi/stac with 1 update: stac-fastapi-pgstac[catalogs].

Updates stac-fastapi-pgstac[catalogs] from 6.3.1 to 7.0.0

Release notes

Sourced from stac-fastapi-pgstac[catalogs]'s releases.

7.0.0

What's Changed

• update: stac-fastapi to v7.0.0 by @​jonhealy1 in stac-utils/stac-fastapi-pgstac#419
• feat: remove deprecated POSTGRES_* settings by @​vincentsarago in stac-utils/stac-fastapi-pgstac#420
• fix: remove shapely dependencies and update pre-commit config by @​vincentsarago in stac-utils/stac-fastapi-pgstac#421
• feat: add metrics support from stac-fastapi. by @​pantierra in stac-utils/stac-fastapi-pgstac#423
• fix: collections query request by @​jonhealy1 in stac-utils/stac-fastapi-pgstac#427
• Feat/use uv in docker image by @​vincentsarago in stac-utils/stac-fastapi-pgstac#424

Full Changelog: stac-utils/stac-fastapi-pgstac@6.4.0...7.0.0

6.4.1

What's Changed

• fix: collections query request [backport 7.x] by @​vincentsarago in stac-utils/stac-fastapi-pgstac#429

Full Changelog: stac-utils/stac-fastapi-pgstac@6.4.0...6.4.1

6.4.0

What's Changed

• feat: update stac-fastapi-* requirements to >=6.4 by @​vincentsarago in stac-utils/stac-fastapi-pgstac#401
• fix: update sort conformances values by @​vincentsarago in stac-utils/stac-fastapi-pgstac#403
• Enable easier API customisation by @​mcucchi9 in stac-utils/stac-fastapi-pgstac#381
• refactor: implement Uvicorn factory pattern and clean up test suite by @​jonhealy1 in stac-utils/stac-fastapi-pgstac#405
• feat: update pgstac version and refactor docker compose by @​vincentsarago in stac-utils/stac-fastapi-pgstac#410
• Release/v6.4.0 by @​vincentsarago in stac-utils/stac-fastapi-pgstac#416

New Contributors

• @​hk60418 made their first contribution in stac-utils/stac-fastapi-pgstac#337

Full Changelog: stac-utils/stac-fastapi-pgstac@6.3.1...6.4.0

Changelog

Sourced from stac-fastapi-pgstac[catalogs]'s changelog.

[7.0.0] - 2026-09-15

Added

• ENABLE_METRICS setting to expose an optional Prometheus metrics endpoint at /_mgmt/metrics, backed by stac-fastapi-api's add_metrics support (#958). Requires the new metrics optional extra (pip install "stac-fastapi-pgstac[metrics]"). (#423)

Changed

• Update stac-fastapi-* requirements to >=7.0,<8.0 (#419)
• Remove deprecated POSTGRES_* environment variable support from PostgresSettings.
• Remove deprecated host_reader and host_writer attributes from PostgresSettings.
• Removed shapely from dev dependencies
• Update Dockerfile to use uv.lock file for dependency management

[6.4.1] - 2026-09-15

Fixed

• Fix GET /collections returning a 500 error when the query parameter is used: the injected type = Collection constraint is now merged into whichever of query/filter the client supplied, since pgstac rejects a query + filter payload (#427) [backport from 7.0]
• Return 400 instead of a pgstac error when query and filter are used together in GET /collections requests (#427) [backport from 7.0]

[6.4.0] - 2026-09-04

Added

• add tests for new app.instantiate_api function (#381)

Fixed

• Fix multi-platform Docker builds by adding QEMU emulation and correcting workflow_dispatch trigger (#337)

Changed

• Refactored application initialization to completely eliminate global state and natively support the Uvicorn --factory pattern. Replaced the global app variable with a create_app() factory wrapper in app.py, ensuring pristine memory isolation per worker and preventing unintended import side-effects. Additionally, updated the test suite to use the new factory pattern (eliminating shadow implementations) and fixed httpx async client compatibility. (#405)
• Update stac-fastapi-* requirements to >=6.4,<7.0
• Sort conformance class version to v1.1.0 instead of v1.0.0
• Update sort extension to use new conformance classes in app.py for search, collection search, and item search endpoints (#404)
• introduce app.instantiate_api function to make API customisation easier (#381)
• Updated Dockerfile CMD to use the new create_app factory function with --factory flag for Uvicorn compatibility (#406)
• Changed output from string to dict object (BulkTransaction) for bulk transaction bulk_item_insert methods (#419)
• Removed app_host, app_port, and reload attributes from ApiSettings. Use uvicorn command-line arguments or environment variables to configure these instead (#419)
• Removed deprecated stac_fastapi.extensions.third_party namespace. Import BulkTransactionExtension directly from stac_fastapi.extensions instead (#419)

Removed

• Removed deprecated SortConformanceClasses enum aliases (COLLECTIONS, ITEMS, SEARCH). Use COLLECTION_SEARCH_SORT, FEATURES_SORT, and ITEM_SEARCH_SORT instead

Commits

• 730a135 Merge branch 'main' of https://github.com/stac-utils/stac-fastapi-pgstac
• 1f1a13f Release/v7.0.0 (#430)
• 7471b60 chore: update changelog
• 92f9a99 Feat/use uv in docker image (#424)
• 050b02a chore(deps): bump astral-sh/setup-uv in the all group (#428)
• b75289a fix: collections query request (#427)
• 0ed58da fix: minor changelog fixes (#425)
• 606275e feat: added metrics support from stac-fastapi. (#423)
• 38ed0cf fix: remove custom pull request template
• 8a10414 fix: remote shapely dependencies and update pre-commit config (#421)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions