Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies (actions/checkout, actions/download-artifact, actions/github-script, actions/setup-node, actions/setup-python, actions/upload-artifact, amannn/action-semantic-pull-request, astral-sh/setup-uv, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, github/codeql-action, softprops/action-gh-release)
• chore(deps): update astral-sh/setup-uv action to v8

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• python 3.14-alpine

github-actions (7)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v7 → [Updates: v7.0.0]
• github/codeql-action v4 → [Updates: v4.36.2]
• github/codeql-action v4 → [Updates: v4.36.2]
• github/codeql-action v4 → [Updates: v4.36.2]

.github/workflows/dependency-review.yml (2)

• actions/checkout v7 → [Updates: v7.0.0]
• actions/dependency-review-action v5.0.0

.github/workflows/docker-security-scan.yml (12)

• aquasecurity/trivy-action master
• actions/upload-artifact v7 → [Updates: v7.0.1]
• github/codeql-action v4 → [Updates: v4.36.2]
• actions/github-script v9 → [Updates: v9.0.0]
• actions/checkout v7 → [Updates: v7.0.0]
• actions/download-artifact v8 → [Updates: v8.0.1]
• sigstore/cosign-installer v4.1.2
• docker/setup-buildx-action v4 → [Updates: v4.1.0]
• docker/login-action v4 → [Updates: v4.2.0]
• docker/build-push-action v7 → [Updates: v7.2.0]
• docker/build-push-action v7 → [Updates: v7.2.0]
• actions/github-script v9 → [Updates: v9.0.0]

.github/workflows/lint.yml (2)

• actions/checkout v7 → [Updates: v7.0.0]
• astral-sh/setup-uv v7 → [Updates: v7.6.0, v8.2.0]

.github/workflows/release.yml (13)

• actions/checkout v7 → [Updates: v7.0.0]
• cycjimmy/semantic-release-action v6.0.0
• actions/checkout v7 → [Updates: v7.0.0]
• actions/setup-python v6 → [Updates: v6.3.0]
• astral-sh/setup-uv v7 → [Updates: v7.6.0, v8.2.0]
• softprops/action-gh-release v3 → [Updates: v3.0.1]
• actions/checkout v7 → [Updates: v7.0.0]
• sigstore/cosign-installer v4.1.2
• docker/setup-buildx-action v4 → [Updates: v4.1.0]
• docker/login-action v4 → [Updates: v4.2.0]
• docker/metadata-action v6 → [Updates: v6.1.0]
• docker/build-push-action v7 → [Updates: v7.2.0]
• python 3.14.6

.github/workflows/semantic-pr.yml (5)

• amannn/action-semantic-pull-request v6 → [Updates: v6.1.1]
• actions/checkout v7 → [Updates: v7.0.0]
• actions/setup-node v6 → [Updates: v6.4.0]
• actions/github-script v9 → [Updates: v9.0.0]
• node 24.18.0

.github/workflows/tests.yml (2)

• actions/checkout v7 → [Updates: v7.0.0]
• astral-sh/setup-uv v7 → [Updates: v7.6.0, v8.2.0]

pep621 (1)

pyproject.toml (13)

• python >=3.12
• appdirs >=1.4.3
• arrow >=1.3.0
• backports-abc >=0.5
• praw >=7.5.0
• PyYAML >=6.0.1
• requests >=2.32.4
• six >=1.12
• tornado >=6.5.1
• prometheus-client >=0.16.0
• pytest >=7.0.0
• pytest-cov >=4.0.0
• ruff >=0.8.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository