Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• ⬆️ Update ossf/scorecard-action action to v2.4.4
• ⬆️ Update github/codeql-action action to v4.37.3
• ⬆️ Update release-drafter/release-drafter action to v7.6.0
• ⬆️ Update actions/setup-node action to v7
• ⬆️ Update actions/setup-python action to v7
• ⬆️ Update astral-sh/setup-uv action to v9
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• ⬆️ Pin SonarSource/sonarqube-scan-action action to v8.2.1
• ⬆️ Update SonarSource/sonarqube-scan-action digest to 2291811
• ⬆️ Update dependency codespell to v2.4.3
• ⬆️ Update dependency pylint to v4.0.6
• ⬆️ Update dependency ty to v0.0.63
• ⬆️ Update dependency coverage to v7.15.2
• ⬆️ Update dependency pytest-asyncio to v1.4.0
• ⬆️ Update dependency ruff to v0.16.0
• ⬆️ Update actions/checkout action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (14)

.github/workflows/auto-approve-renovate.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

.github/workflows/codeql.yaml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4.37.3]
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4.37.3]

.github/workflows/dependency-review.yaml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docs.yaml (5)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/labels.yaml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c

.github/workflows/linting.yaml (7)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]

.github/workflows/lock.yaml (1)

• dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c

.github/workflows/pr-labels.yaml (1)

• jesusvasquez333/verify-pr-label-action v1.4.0@657d111bbbe13e22bbd55870f1813c699bde1401

.github/workflows/release-drafter.yaml (1)

• release-drafter/release-drafter v7.5.1@4d75298e00d9e34c483e5ff8c68d0ea1c1940c1e → [Updates: v7.6.0]

.github/workflows/release.yaml (6)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373
• pypa/gh-action-pypi-publish v1.14.1@ba38be9e461d3875417946c167d0b5f3d385a247
• sigstore/gh-action-sigstore-python v3.4.0@5b79a39c381910c090341a2c9b0bf022c8b387e1

.github/workflows/scorecard.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.3@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a → [Updates: v4.37.3]

.github/workflows/stale.yaml (1)

• actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629

.github/workflows/tests.yaml (11)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• SonarSource/sonarqube-scan-action v8.2@713881670b6b3676cda39549040e2d88c70d582e → [Updates: v8.2.1, v8.2]

.github/workflows/typing.yaml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]

npm (1)

package.json (2)

• url-parse 1.5.10
• prettier 3.9.6

nvm (1)

.nvmrc (1)

• node 24.18.0

poetry (1)

pyproject.toml (33)

• aiohttp >=3.8.1
• yarl >=1.7.2
• packaging >=21.3
• python-backoff >=2.3.1
• pydantic >=2.0
• aresponses ==3.0.0
• bandit ==1.9.4
• black ==26.5.1
• blacken-docs ==1.20.0
• codespell ==2.4.2 → [Updates: ==2.4.3]
• covdefaults ==2.3.0
• coverage ==7.14.1 → [Updates: ==7.15.2]
• darglint ==1.8.1
• flake8 ==7.3.0
• flake8-simplify ==0.30.0
• hatch >=1.14.1
• isort ==8.0.1
• ty ==0.0.59 → [Updates: ==0.0.63]
• prek >=0.3.3
• pre-commit-hooks ==6.0.0
• pylint ==4.0.5 → [Updates: ==4.0.6]
• pytest >=8.3.5
• pytest-asyncio ==1.3.0 → [Updates: ==1.4.0]
• pytest-cov ==7.1.0
• pytest-xdist >=3.8.0
• pyupgrade ==3.21.2
• ruff ==0.15.20 → [Updates: ==0.16.0]
• safety ==3.8.1
• vulture ==2.16
• yamllint ==1.38.0
• zeroconf >=0.148.0
• mkdocs-material >=9.6
• mkdocstrings >=0.29

---

• Check this box to trigger a request for Renovate to run again on this repository