Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• ⬆️ Update dependency node to v24.18.1
• ⬆️ Update github/codeql-action action to v4.37.4
• ⬆️ Update pypa/gh-action-pypi-publish action to v1.14.2
• ⬆️ Update release-drafter/release-drafter action to v7.7.0
• ⬆️ Update sigstore/gh-action-sigstore-python action to v3.5.0
• ⬆️ Update actions/setup-python action to v7
• ⬆️ Update actions/stale action to v11
• ⬆️ Update astral-sh/setup-uv action to v9
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• ⬆️ Pin SonarSource/sonarqube-scan-action action to v8.2.1
• ⬆️ Update SonarSource/sonarqube-scan-action digest to 2291811
• ⬆️ Update dependency codespell to v2.4.3
• ⬆️ Update dependency pylint to v4.0.6
• ⬆️ Update dependency ty to v0.0.65
• ⬆️ Update dependency coverage to v7.15.2
• ⬆️ Update dependency pytest-asyncio to v1.4.0
• ⬆️ Update dependency ruff to v0.16.1
• ⬆️ Update actions/checkout action to v7
• ⬆️ Update actions/setup-node action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (14)

.github/workflows/auto-approve-renovate.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

.github/workflows/codeql.yaml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.4]
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.4]

.github/workflows/dependency-review.yaml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docs.yaml (5)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/labels.yaml (2)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• micnncim/action-label-syncer v1.3.0@3abd5ab72fda571e69fffd97bd4e0033dd5f495c

.github/workflows/linting.yaml (7)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7.0.0]

.github/workflows/lock.yaml (1)

• dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c

.github/workflows/pr-labels.yaml (1)

• jesusvasquez333/verify-pr-label-action v1.4.0@657d111bbbe13e22bbd55870f1813c699bde1401

.github/workflows/release-drafter.yaml (1)

• release-drafter/release-drafter v7.6.0@eada3c96a64734dd381cfbda23511034e328ddb0 → [Updates: v7.7.0]

.github/workflows/release.yaml (6)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/attest-build-provenance v4.1.1@0f67c3f4856b2e3261c31976d6725780e5e4c373
• pypa/gh-action-pypi-publish v1.14.1@ba38be9e461d3875417946c167d0b5f3d385a247 → [Updates: v1.14.2]
• sigstore/gh-action-sigstore-python v3.4.0@5b79a39c381910c090341a2c9b0bf022c8b387e1 → [Updates: v3.5.0]

.github/workflows/scorecard.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.3@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 → [Updates: v4.37.4]

.github/workflows/stale.yaml (1)

• actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629 → [Updates: v11.0.0]

.github/workflows/tests.yaml (11)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• SonarSource/sonarqube-scan-action v8.2@713881670b6b3676cda39549040e2d88c70d582e → [Updates: v8.2.1, v8.2]

.github/workflows/typing.yaml (3)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]

npm (1)

package.json (2)

• url-parse 1.5.10
• prettier 3.9.6

nvm (1)

.nvmrc (1)

• node 24.18.0 → [Updates: 24.18.1]

poetry (1)

pyproject.toml (33)

• aiohttp >=3.8.1
• yarl >=1.7.2
• packaging >=21.3
• python-backoff >=2.3.1
• pydantic >=2.0
• aresponses ==3.0.0
• bandit ==1.9.4
• black ==26.5.1
• blacken-docs ==1.20.0
• codespell ==2.4.2 → [Updates: ==2.4.3]
• covdefaults ==2.3.0
• coverage ==7.14.1 → [Updates: ==7.15.2]
• darglint ==1.8.1
• flake8 ==7.3.0
• flake8-simplify ==0.30.0
• hatch >=1.14.1
• isort ==8.0.1
• ty ==0.0.59 → [Updates: ==0.0.65]
• prek >=0.3.3
• pre-commit-hooks ==6.0.0
• pylint ==4.0.5 → [Updates: ==4.0.6]
• pytest >=8.3.5
• pytest-asyncio ==1.3.0 → [Updates: ==1.4.0]
• pytest-cov ==7.1.0
• pytest-xdist >=3.8.0
• pyupgrade ==3.21.2
• ruff ==0.15.20 → [Updates: ==0.16.1]
• safety ==3.8.1
• vulture ==2.16
• yamllint ==1.38.0
• zeroconf >=0.148.0
• mkdocs-material >=9.6
• mkdocstrings >=0.29

---

• Check this box to trigger a request for Renovate to run again on this repository