Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency pymdown-extensions to v10.16.1 [security]
• chore(deps): update dependency filelock to v3.20.1 [security]
• chore(deps): update dependency fonttools to v4.60.2 [security]
• chore(deps): update dependency pillow to v11.3.0 [security]
• chore(deps): update dependency urllib3 to v2.6.0 [security]
• chore(deps): update dependency python to 3.14
• chore(deps): update python dependencies (anyio, argcomplete, astroid, backrefs, bandit, black, boto3, botocore, bracex, build, bump-my-version, certifi, cfgv, charset-normalizer, click, commitizen, contourpy, coverage, distlib, docutils, flake8, identify, idna, importlib-metadata, iniconfig, isort, jaraco-context, jaraco-functools, keyring, kiwisolver, mando, markdown, markupsafe, matplotlib, mkdocs-material, more-itertools, mypy, nh3, nodeenv, pandas, platformdirs, pre-commit, prometheus-client, prompt-toolkit, pycodestyle, pydantic, pydantic-core, pydantic-settings, pyflakes, pylint, pyparsing, pytest, pytest-benchmark, pytest-cov, pytest-mock, python-dotenv, pyyaml, questionary, requests, rich, rich-click, ruff, s3transfer, scipy, stevedore, termcolor, twine, types-python-dateutil, types-pyyaml, types-requests, typing-extensions, typing-inspection, tzdata, virtualenv, wcmatch, wcwidth)
• chore(deps): update python docker tag to v3.14
• chore(deps): update github actions (major) (actions/checkout, actions/download-artifact, actions/first-interaction, actions/github-script, actions/labeler, actions/setup-python, actions/stale, actions/upload-artifact, github/codeql-action)
• chore(deps): update python dependencies (major) (astroid, backrefs, isort, markdown-it-py, numpy, pbr, pylint, pytest, pytest-cov, termcolor)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• python 3.12-slim
• python 3.12-slim

github-actions (55)

.github/workflows/Apply Labels to Pull Request.yml (2)

• actions/checkout v4
• actions/labeler v5

.github/workflows/archive/SBOM and License Audit.yml (4)

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.11

.github/workflows/Attest-build-provenance.yml (2)

• actions/checkout v4
• slsa-framework/slsa-github-generator v1

.github/workflows/Auditwheel Compatibility.yml (1)

• actions/checkout v4

.github/workflows/Auto Assign Issue.yml (1)

• pozil/auto-assign-issue v2

.github/workflows/Auto Rebase Dependabot Pull Requests.yml (1)

• actions/github-script v7

.github/workflows/Auto Rebase Pull Requests.yml (1)

• cirrus-actions/rebase 1.8

.github/workflows/Automated Version Bump and Changelog.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.13

.github/workflows/bandit.yml (2)

• actions/checkout v4
• shundor/python-bandit-scan ab1d87dfccc5a0ffab88be3aaac6ffe35c10d6cd

.github/workflows/Build and Push Docker Image.yml (5)

• actions/checkout v4
• docker/setup-buildx-action v3
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.13

.github/workflows/Check Outdated Dependencies.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.x

.github/workflows/ci-experiments/Argocd deployment test.yml (2)

• actions/checkout v4
• helm/kind-action v1

.github/workflows/ci-experiments/ArgoCD Linting & Sync Check.yml (1)

• actions/checkout v4

.github/workflows/ci-experiments/ci-failure-notifications-split.yml (1)

• slackapi/slack-github-action v2.1.1

.github/workflows/ci-experiments/Helm Chart Validation.yml (2)

• actions/checkout v4
• azure/setup-helm v4

.github/workflows/ci-experiments/Helm Dry-Run Deployment.yml (3)

• actions/checkout v4
• azure/setup-helm v4
• engineerd/setup-kind v0.6.2

.github/workflows/ci-experiments/Helm Template & Package Check.yml (2)

• actions/checkout v4
• azure/setup-helm v4

.github/workflows/ci-experiments/Validate ArgoCD Applications.yml (1)

• actions/checkout v4

.github/workflows/ci-experiments/Validate ArgoCD Manifests.yml (2)

• actions/checkout v4
• ibiqlik/action-yamllint v3

.github/workflows/ci-experiments/Validate Kubernetes YAML.yml (1)

• actions/checkout v4

.github/workflows/ci-experiments/Validate Kustomize Overlays.yml (1)

• actions/checkout v4

.github/workflows/Cleanup Artifacts.yml

.github/workflows/Cleanup GitHub Cache.yml

.github/workflows/Cleanup Old Docker Images.yml (1)

• actions/checkout v4

.github/workflows/Cleanup Old Releases.yml

.github/workflows/Cleanup Stale Branches.yml

.github/workflows/Code Coverage.yml (4)

• actions/checkout v4
• actions/setup-python v5
• codecov/codecov-action v5
• python 3.11

.github/workflows/CodeQL Analysis.yml (3)

• actions/checkout v4
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/Create Greetings on Pull Request.yml (1)

• actions/first-interaction v2

.github/workflows/Delete Old Workflow Runs.yml

.github/workflows/Dependabot Dependency Updates.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.x

.github/workflows/Dependency Check with Deptry.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.11

.github/workflows/Dependency Security Audit.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.x

.github/workflows/Deploy MkDocs to GitHub Pages.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.13

.github/workflows/Expire Old Workflow Logs.yml

.github/workflows/GitHub Actions Cleanup.yml (1)

• actions/checkout v4

.github/workflows/Github Automated Releases.yml (4)

• actions/checkout v4
• actions/setup-python v5
• softprops/action-gh-release v2
• python 3.13

.github/workflows/GitHub Release & Artifact Upload.yml (4)

• actions/checkout v4
• actions/download-artifact v4
• actions/download-artifact v4
• softprops/action-gh-release v2

.github/workflows/GitHub Workflow Lint.yml (2)

• actions/checkout v4
• github/super-linter v7

.github/workflows/Ignore File Consistency Check.yml (1)

• actions/checkout v4

.github/workflows/License Checker.yml (4)

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.11

.github/workflows/License Report.yml (4)

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.11

.github/workflows/Mark stale issues and pull requests.yml (1)

• actions/stale v9

.github/workflows/metadata-check.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.11

.github/workflows/Python Build & Install Check.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.x

.github/workflows/Python linting.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.13

.github/workflows/Python Matrix Test.yml (2)

• actions/checkout v4
• actions/setup-python v5

.github/workflows/Sbom Attestation.yml (1)

• actions/checkout v4

.github/workflows/SBOM Generator.yml (4)

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.11

.github/workflows/Sbom Image Scan.yml (3)

• actions/checkout v4
• anchore/sbom-action v0
• actions/upload-artifact v4

.github/workflows/Secret scanning.yml (2)

• actions/checkout v4
• actions/checkout v4

.github/workflows/SLSA Provenance.yml (4)

• actions/checkout v4
• actions/download-artifact v4
• actions/download-artifact v4
• slsa-framework/slsa-github-generator v1

.github/workflows/Static Analysis with Pylint.yml (3)

• actions/checkout v4
• actions/setup-python v5
• python 3.13

.github/workflows/Validate YAML & JSON.yml (2)

• actions/checkout v4
• ibiqlik/action-yamllint v3

.github/workflows/Vulnerability Audit.yml (4)

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• python 3.11

pip_requirements (2)

requirements-dev.txt (134)

• annotated-types ==0.7.0
• anyio ==4.9.0
• argcomplete ==3.6.2
• astroid ==3.3.10
• babel ==2.17.0
• backrefs ==5.8
• bandit ==1.8.3
• black ==25.1.0
• boto3 ==1.38.41
• botocore ==1.38.41
• bracex ==2.5.post1
• build ==1.2.2.post1
• bump-my-version ==1.1.2
• certifi ==2025.6.15
• cfgv ==3.4.0
• charset-normalizer ==3.4.2
• click ==8.2.1
• colorama ==0.4.6
• commitizen ==4.8.3
• contourpy ==1.3.2
• coverage ==7.9.1
• cycler ==0.12.1
• decli ==0.6.3
• dill ==0.4.0
• distlib ==0.3.9
• docutils ==0.21.2
• filelock ==3.18.0
• flake8 ==7.2.0
• flake8-docstrings ==1.7.0
• fonttools ==4.58.4
• ghp-import ==2.1.0
• h11 ==0.16.0
• httpcore ==1.0.9
• httpx ==0.28.1
• id ==1.5.0
• identify ==2.6.12
• idna ==3.10
• importlib-metadata ==8.7.0
• iniconfig ==2.1.0
• isort ==6.0.1
• jaraco-classes ==3.4.0
• jaraco-context ==6.0.1
• jaraco-functools ==4.2.1
• jinja2 ==3.1.6
• jmespath ==1.0.1
• keyring ==25.6.0
• kiwisolver ==1.4.8
• loguru ==0.7.3
• mando ==0.7.1
• markdown ==3.8.2
• markdown-it-py ==3.0.0
• markupsafe ==3.0.2
• matplotlib ==3.10.3
• mccabe ==0.7.0
• mdurl ==0.1.2
• mergedeep ==1.3.4
• mkdocs ==1.6.1
• mkdocs-get-deps ==0.2.0
• mkdocs-material ==9.6.14
• mkdocs-material-extensions ==1.3.1
• more-itertools ==10.7.0
• mypy ==1.15.0
• mypy-extensions ==1.1.0
• nh3 ==0.2.21
• nodeenv ==1.9.1
• numpy ==1.26.4
• packaging ==25.0
• paginate ==0.5.7
• pandas ==2.2.3
• pathspec ==0.12.1
• pbr ==6.1.1
• pika ==1.3.2
• pillow ==11.2.1
• platformdirs ==4.3.8
• pluggy ==1.6.0
• pre-commit ==4.2.0
• prometheus-client ==0.22.1
• prompt-toolkit ==3.0.51
• py-cpuinfo ==9.0.0
• pycodestyle ==2.13.0
• pydantic ==2.11.7
• pydantic-core ==2.33.2
• pydantic-settings ==2.10.0
• pydocstyle ==6.3.0
• pyflakes ==3.3.2
• pygments ==2.19.2
• pylint ==3.3.6
• pymdown-extensions ==10.16
• pyparsing ==3.2.3
• pyproject-hooks ==1.2.0
• pytest ==8.3.5
• pytest-benchmark ==5.1.0
• pytest-cov ==6.1.1
• pytest-html ==4.1.1
• pytest-metadata ==3.1.1
• pytest-mock ==3.14.0
• python-dateutil ==2.9.0.post0
• python-dotenv ==1.1.0
• pytz ==2025.2
• pywin32-ctypes ==0.2.3
• pyyaml ==6.0.2
• pyyaml-env-tag ==1.1
• questionary ==2.1.0
• radon ==6.0.1
• readme-renderer ==44.0
• requests ==2.32.4
• requests-toolbelt ==1.0.0
• rfc3986 ==2.0.0
• rich ==14.0.0
• rich-click ==1.8.9
• ruff ==0.11.6
• s3transfer ==0.13.0
• scipy ==1.15.3
• six ==1.17.0
• sniffio ==1.3.1
• snowballstemmer ==3.0.1
• stevedore ==5.4.1
• termcolor ==2.3.0
• tomlkit ==0.13.3
• twine ==6.1.0
• types-python-dateutil ==2.9.0.20241206
• types-pyyaml ==6.0.12.20250402
• types-requests ==2.32.0.20250328
• typing-extensions ==4.14.0
• typing-inspection ==0.4.1
• tzdata ==2025.2
• urllib3 ==2.5.0
• virtualenv ==20.31.2
• watchdog ==6.0.0
• wcmatch ==10.0
• wcwidth ==0.2.13
• win32-setctime ==1.2.0
• xenon ==0.9.3
• zipp ==3.23.0

requirements.txt (30)

• boto3 ==1.38.36
• botocore ==1.38.36
• certifi ==2025.6.15
• charset-normalizer ==3.4.2
• colorama ==0.4.6
• contourpy ==1.3.2
• cycler ==0.12.1
• fonttools ==4.58.3
• idna ==3.10
• jmespath ==1.0.1
• kiwisolver ==1.4.8
• loguru ==0.7.3
• matplotlib ==3.10.3
• numpy ==1.26.4
• packaging ==25.0
• pandas ==2.2.3
• pika ==1.3.2
• pillow ==11.2.1
• prometheus-client ==0.22.1
• pyparsing ==3.2.3
• python-dateutil ==2.9.0.post0
• python-dotenv ==1.1.0
• pytz ==2025.2
• requests ==2.32.4
• s3transfer ==0.13.0
• scipy ==1.15.3
• six ==1.17.0
• tzdata ==2025.2
• urllib3 ==2.5.0
• win32-setctime ==1.2.0

poetry (1)

pyproject.toml (12)

• requests >=2.28.0
• numpy >=1.21.0
• pytest >=7.0
• pytest-cov >=4.0
• black >=22.0
• mypy >=1.0
• bandit >=1.7
• commitizen >=3.12
• mkdocs >=1.5
• mkdocs-material >=9.0
• pytest >=7.0
• pytest-cov >=4.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[github-actions]

👋 Welcome to the repository, @renovate[bot]!

Thank you for opening an issue. A team member will review it soon. Please make sure you've followed the issue template and provided all the necessary details to help us assist you efficiently.