Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency hatchling to v1.29.0
• Update docker/login-action action to v3.7.0
• Update docker/metadata-action action to v5.10.0
• Update docker/setup-buildx-action action to v3.12.0
• Update docker/setup-qemu-action action to v3.7.0
• Update orhun/git-cliff-action action to v4.7.1
• Update python Docker tag to v3.14
• Update actions/attest-build-provenance action to v4
• Update actions/checkout action to v6
• Update actions/upload-artifact action to v7
• Update astral-sh/setup-uv action to v8
• Update codecov/codecov-action action to v6
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update github/codeql-action action to v4
• Update mcr.microsoft.com/devcontainers/python Docker tag to v2
• Update SonarSource/sonarqube-scan-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/upload-artifact action to v4.6.2
• Update actions/attest-build-provenance action to v2.4.0
• Update actions/checkout action to v4.3.1
• Update astral-sh/setup-uv action to v5.4.2
• Update codecov/codecov-action action to v5.5.4
• Update codecov/test-results-action action to v1.2.1
• Update dependency astral-sh/uv to v0.11.7
• Update docker/build-push-action action to v6.19.2
• Update ghcr.io/astral-sh/uv Docker tag to v0.11.7
• Update SonarSource/sonarqube-scan-action action to v5.3.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (6)

• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/va-h/devcontainers-features/uv 1
• ghcr.io/dhoeric/features/act 1
• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/java 1
• ghcr.io/devcontainers/features/node 1

docker-compose (1)

compose.yaml

dockerfile (5)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/python 1-3.11-bullseye → [Updates: 2-3.11-bullseye]

Dockerfile (2)

• python 3.13-slim-bookworm → [Updates: 3.14-slim-bookworm]
• ghcr.io/astral-sh/uv 0.6.14 → [Updates: 0.11.7]

Dockerfile.railway (2)

• python 3.13-slim-bookworm → [Updates: 3.14-slim-bookworm]
• ghcr.io/astral-sh/uv 0.6.14 → [Updates: 0.11.7]

template/.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/python 1-3.11-bullseye → [Updates: 2-3.11-bullseye]

template/Dockerfile.jinja (2)

• python 3.13-slim-bookworm → [Updates: 3.14-slim-bookworm]
• ghcr.io/astral-sh/uv 0.6.14 → [Updates: 0.11.7]

github-actions (9)

.github/workflows/_audit.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_codeql.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/_docker-publish.yml (11)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.0.0]
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 → [Updates: v3.12.0, v4.0.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.1.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.1.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0, v6.0.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0, v6.0.0]
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 → [Updates: v6.19.2, v7.1.0]
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 → [Updates: v6.19.2, v7.1.0]
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2 → [Updates: v2.4.0, v4.1.0]
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2 → [Updates: v2.4.0, v4.1.0]

.github/workflows/_lint.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_package-publish.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• orhun/git-cliff-action v4.4.2@4a4a951bc43fafe41cd2348d181853f52356bee7 → [Updates: v4.7.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_scheduled-test.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_test.yml (8)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• codecov/codecov-action v5.4.0@0565863a31f2c772f9f0395002a31e3f06189574 → [Updates: v5.5.4, v6.0.0]
• codecov/test-results-action v1.1.0@f2dba722c67b86c6caa034178c6e4d35335f6706 → [Updates: v1.2.1]
• SonarSource/sonarqube-scan-action v5.0.0@0303d6b62e310685c0e34d0b9cde218036885c4d → [Updates: v5.3.2, v7.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_vercel-preview.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_vercel-production.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

pep621 (1)

pyproject.toml (65)

• python >=3.11, <4.0
• fastapi >=0.115.12
• logfire >=3.14.1
• nicegui >=2.15.0
• opentelemetry-instrumentation-fastapi >=0.53b0
• opentelemetry-instrumentation-httpx >=0.53b0
• opentelemetry-instrumentation-jinja2 >=0.53b0
• opentelemetry-instrumentation-requests >=0.53b0
• opentelemetry-instrumentation-sqlite3 >=0.53b0
• opentelemetry-instrumentation-tornado >=0.53b0
• opentelemetry-instrumentation-urllib >=0.53b0
• opentelemetry-instrumentation-urllib3 >=0.53b0
• psutil >=7.0.0
• pydantic-settings >=2.9.1
• pywin32 >=310
• sentry-sdk >=2.27.0
• typer >=0.15.1
• uptime >=3.0.1
• autodoc-pydantic >=2.2.0
• bump-my-version >=1.1.2
• cyclonedx-py >=1.0.1
• detect-secrets >=1.5.0
• enum-tools >=0.13.0
• furo >=2024.8.6
• git-cliff >=2.8.0
• matplotlib >=3.10.1
• mypy >=1.5.0
• nox >=2025.2.9
• pip-audit >=2.9.0
• pre-commit >=4.1.0
• pyright >=1.1.399
• pytest >=8.3.5
• pytest-asyncio >=0.26.0
• pytest-cov >=6.1.1
• pytest-docker >=3.2.1
• pytest-env >=1.1.5
• pytest-md-report >=0.6.3
• pytest-regressions >=2.7.0
• pytest-selenium >=4.1.0
• pytest-subprocess >=1.5.3
• pytest-timeout >=2.3.1
• pytest-watcher >=0.4.3
• pytest-xdist >=3.6.1
• ruff >=0.11.6
• scalene >=1.5.51
• sphinx >=8.2.3
• sphinx-autobuild >=2024.10.3
• sphinx-copybutton >=0.5.2
• sphinx-inline-tabs >=2023.4.21
• sphinx-mdinclude >=0.6.2
• sphinx-rtd-theme >=3.0.2
• sphinx-selective-exclude >=1.0.3
• sphinx-toolbox >=3.9.0
• sphinxext-opengraph >=0.9.1
• swagger-plugin-for-sphinx >=5.1.0
• tomli >=2.1.0
• types-pyyaml >=6.0.12.20250402
• types-requests >=2.32.0.20250328
• watchdog >=6.0.0
• marimo >=0.13.1
• matplotlib >=3.10.1
• jinja2 >=3.1.6
• jupyter >=1.1.1
• streamlit >=1.44.1
• hatchling ==1.27.0 → [Updates: ==1.29.0]

pyenv (2)

.python-version (1)

• python 3.13 → [Updates: 3.14]

template/.python-version (1)

• python 3.13 → [Updates: 3.14]

---

• Check this box to trigger a request for Renovate to run again on this repository