Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (27)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	hmarr/auto-approve-action	2024-02-03
github-actions	python-semantic-release/upload-to-gh-release	2024-09-27
pip_requirements	colorama	2022-10-25
pip_requirements	crashtest	2022-11-02
pip_requirements	distro	2023-12-24
pip_requirements	h11	2025-04-24
pip_requirements	httpcore	2025-04-24
pip_requirements	jaraco-classes	2024-03-31
pip_requirements	jeepney	2025-02-27
pip_requirements	loguru	2024-12-06
pip_requirements	mdurl	2022-08-14
pip_requirements	pypi-simple	2025-09-03
pip_requirements	pyproject-hooks	2024-09-29
pip_requirements	pywin32-ctypes	2024-08-14
pip_requirements	requests-toolbelt	2023-05-01
pip_requirements	shellingham	2023-10-24
pip_requirements	tomli-w	2025-01-15
pip_requirements	win32-setctime	2024-12-07
poetry	linkchecker	2025-07-28
poetry	poetry-pre-commit-plugin	2025-02-25
poetry	pypi-simple	2025-09-03
poetry	pytest-depends	2020-04-05
poetry	pytest-github-report	2022-06-03
poetry	pytest-retry	2025-01-19
poetry	tomli-w	2025-01-15

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(python-deps): update dependency filelock to v3.32.5 in all dependant actions
• chore(python-deps): update dependency platformdirs to v4.11.7 in all dependant actions
• chore(python-deps): update dependency rapidfuzz to v3.14.6 in all dependant actions
• chore(python-deps): update dependency anyio to v4.15.1 in all dependant actions
• chore(python-deps): update dependency pbs-installer to v2026.9.1 in all dependant actions
• chore(python-deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(python-deps): update dependency pyright to v1.1.414 for dev
• chore(gh-actions-deps): update github/codeql-action action to v4.38.0 in all dependant reusable workflows

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(gh-actions-deps): update anchore/scan-action action to v7.4.2 in all dependant reusable workflows
• chore(python-deps): update dependency pylint to v4.0.8 for dev
• chore(python-deps): update dependency typer to v0.27.2 in all dependant actions
• chore(python-deps): update dependency virtualenv to v21.7.8 in all dependant actions
• chore(python-deps): update poetry dependencies in all dependant actions (patch) (poetry, poetry-core)
• chore(python-deps): update pydantic dependencies in all dependant actions (patch) (pydantic, pydantic-core)
• chore(python-deps): update dependency build to v1.6.0 in all dependant actions
• chore(python-deps): update dependency pkginfo to v1.13 in all dependant actions
• chore(python-deps): update dependency pydantic-core to v2.48.0 in all dependant actions
• chore(python-deps): update dependency safety to ~3.8.0 for dev
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v9.21.2 in all dependant reusable workflows
• chore(python-version): update python docker tag to v3.14 in all dependant actions
• chore(gh-actions-deps): update dependency ubuntu to v24 in dev workflows
• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v10 in all dependant reusable workflows

Detected Dependencies

dockerfile (3)

actions/create_unique_testpypi_version/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/find_unreleased_changelog_items/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/update_development_dependencies/Dockerfile (1)

• python 3.13-slim@sha256:3a6ead7603d322b80dd718d3834dcab86977c73b066028226afd8d0cdf1b0b12 → [Updates: 3.14-slim, 3.13-slim]

github-actions (16)

.github/workflows/_reusable-check-api-for-breaking-changes.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_reusable-codeql-analysis.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35

.github/workflows/_reusable-enforce-community-standards.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• andstor/file-existence-action v3.1.0@558493d6c74bf472d87c84eab196434afc2fa029
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35

.github/workflows/_reusable-package-build.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• hynek/build-and-inspect-python-package v3.0.1@2abe76da66d0a6a4a227101f9348ee855797cfa5
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35

.github/workflows/_reusable-package-release.yml (15)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.2, v10.6.2]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.2, v10.6.2]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• hynek/build-and-inspect-python-package v3.0.1@2abe76da66d0a6a4a227101f9348ee855797cfa5
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• python-semantic-release/upload-to-gh-release v9.8.9@0a92b5d7ebfc15a84f9801ebd1bf706343d43711
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/_reusable-package-testpypi.yml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• hynek/build-and-inspect-python-package v3.0.1@2abe76da66d0a6a4a227101f9348ee855797cfa5
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/_reusable-publish-api-comparison.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dawidd6/action-download-artifact v24@d63b86af1b34672e53c440b1b83979861906bad7
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

.github/workflows/_reusable-publish-test-results.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• dawidd6/action-download-artifact v24@d63b86af1b34672e53c440b1b83979861906bad7
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

.github/workflows/_reusable-sbom-scan.yml (8)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• anchore/sbom-action v0.24.2@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26
• actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8
• anchore/scan-action v7.4.1@8964e60c6fabdb85fdbbbfd9834d8f19c97a3086 → [Updates: v7.4.2]
• anchore/scan-action v7.4.1@8964e60c6fabdb85fdbbbfd9834d8f19c97a3086 → [Updates: v7.4.2]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

.github/workflows/_reusable-test-code.yml (16)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• phoenix-actions/test-reporting v16@7317eea6e13c47348dd0bb318669485157c518d6
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35

.github/workflows/_reusable-test-docs.yml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• vimtor/action-zip v1.3@5407800dfb2b1b37d48df912330cb22f4ab6f422
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35

.github/workflows/_reusable-update-python-and-pre-commit-dependencies.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• crazy-max/ghaction-import-gpg v7.0.0@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• stefanzweifel/git-auto-commit-action v7.2.0@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d

.github/workflows/auto-approve.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

.github/workflows/dependency-review.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/test-actions.yml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• austenstone/job-summary v3@996a8271f63c4cf68782155ca8dcb511d6347f0f
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• re-actors/alls-green v1.3.0@b5b5b37504aa4183270bd3d855c52a67f212be35
• ubuntu 22.04 → [Updates: 24.04]

actions/fetch_pr_number/action.yml (1)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

pip_requirements (2)

actions/create_unique_testpypi_version/requirements.txt (19)

• annotated-types ==0.8.0
• attrs ==26.1.0
• beautifulsoup4 ==4.15.0
• certifi ==2026.7.22
• charset-normalizer ==3.5.1
• idna ==3.19
• mailbits ==0.2.3
• packaging ==26.3
• poetry-core ==2.4.0 → [Updates: ==2.4.1]
• pydantic ==2.13.4 → [Updates: ==2.13.5]
• pydantic-core ==2.46.4 → [Updates: ==2.46.5, ==2.48.0]
• pypi-simple ==1.8.0
• requests ==2.34.2
• soupsieve ==2.9.2
• tomli ==2.4.1
• tomli-w ==1.2.0
• typing-extensions ==4.16.0
• typing-inspection ==0.4.4
• urllib3 ==2.7.0

actions/update_development_dependencies/requirements.txt (77)

• annotated-types ==0.8.0
• anyio ==4.14.2 → [Updates: ==4.15.1]
• attrs ==26.1.0
• beautifulsoup4 ==4.15.0
• build ==1.5.1 → [Updates: ==1.6.0]
• cachecontrol ==0.14.4
• certifi ==2026.7.22
• cffi ==2.1.1
• cfgv ==3.5.0
• charset-normalizer ==3.5.1
• cleo ==2.1.0
• click ==8.5.0
• colorama ==0.4.6
• crashtest ==0.4.1
• cryptography ==50.0.1
• distlib ==0.4.3
• distro ==1.9.0
• dulwich ==1.2.14
• fastjsonschema ==2.22.2
• filelock ==3.32.4 → [Updates: ==3.32.5]
• findpython ==0.8.0
• h11 ==0.16.0
• httpcore ==1.0.9
• httpx ==0.28.1
• identify ==2.6.19
• idna ==3.19
• installer ==1.0.1
• jaraco-classes ==3.4.0
• jaraco-context ==6.1.2
• jaraco-functools ==4.6.0
• jeepney ==0.9.0
• keyring ==25.7.0
• loguru ==0.7.3
• mailbits ==0.2.3
• maison ==2.0.2
• markdown-it-py ==4.2.0
• mdurl ==0.1.2
• more-itertools ==11.1.0
• msgpack ==1.2.2
• nodeenv ==1.10.0
• packaging ==26.3
• pbs-installer ==2026.8.25 → [Updates: ==2026.9.1]
• pkginfo ==1.12.1.2 → [Updates: ==1.13]
• platformdirs ==4.11.5 → [Updates: ==4.11.7]
• poetry ==2.4.1 → [Updates: ==2.4.3]
• poetry-core ==2.4.0 → [Updates: ==2.4.1]
• poetry-plugin-export ==1.10.0
• pre-commit ==4.6.2
• pycparser ==3.0
• pydantic ==2.13.4 → [Updates: ==2.13.5]
• pydantic-core ==2.46.4 → [Updates: ==2.46.5, ==2.48.0]
• pygments ==2.21.0
• pypi-simple ==1.8.0
• pyproject-hooks ==1.2.0
• pywin32-ctypes ==0.2.3
• pyyaml ==6.0.3
• rapidfuzz ==3.14.5 → [Updates: ==3.14.6]
• requests ==2.34.2
• requests-toolbelt ==1.0.0
• rich ==15.0.0
• ruyaml ==0.91.0
• secretstorage ==3.5.0
• setuptools ==84.0.0
• shellingham ==1.5.4
• soupsieve ==2.9.2
• toml-sort ==0.24.4
• tomlkit ==0.15.1
• trove-classifiers ==2026.6.1.19
• typer ==0.27.1 → [Updates: ==0.27.2]
• typing-extensions ==4.16.0
• typing-inspection ==0.4.4
• urllib3 ==2.7.0
• virtualenv ==21.7.5 → [Updates: ==21.7.8]
• win32-setctime ==1.2.0
• xattr ==1.3.0
• yamlfix ==1.19.1
• zstandard ==0.25.0

poetry (1)

pyproject.toml (42)

• poetry-core 2.4.0 → [Updates: 2.4.1]
• pypi-simple 1.8.0
• tomli 2.4.1
• tomli-w 1.2.0
• poetry-plugin-export 1.10.0
• pre-commit 4.6.2
• pypi-simple 1.8.0
• toml-sort 0.24.4
• yamlfix 1.19.1
• pip ^26.0
• poetry ^2.3.1
• poetry-audit-plugin ^1.0.0
• poetry-plugin-export ^1.10.0
• poetry-pre-commit-plugin ^0.2.2
• pre-commit 4.6.2
• pylint 4.0.7 → [Updates: 4.0.8]
• pyright 1.1.411 → [Updates: 1.1.414]
• safety ~3.7.0 → [Updates: ~3.8.0]
• tox ^4.18.0
• tox-gh-actions ^3.2.0
• codespell ^2.0.0
• mkdocs ^1.6.0
• mkdocs-ezglossary-plugin ^2.0.0
• mkdocs-macros-plugin ^1.0.5
• mkdocs-mermaid2-plugin ^1.1.1
• mkdocs-same-dir ^0.1.3
• mkdocs-spellcheck ^1.1.0
• pygments ^2.17.2
• pymdown-extensions ^11.0.0
• symspellpy ^6.7.7
• tomli 2.4.1
• coverage ^7.5.0
• linkchecker ^10.0.0
• pytest ^9.0.0
• pytest-cov ^7.0.0
• pytest-depends ^1.0.1
• pytest-env ^1.1.3
• pytest-github-report ^0.0.1
• pytest-html ^4.1.1
• pytest-order ^1.2.1
• pytest-retry ^1.7.0
• pytest-subprocess ^1.5.2

---

• Check this box to trigger a request for Renovate to run again on this repository