Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
pep621	pytest-timeout	2025-05-05

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update python to >=3.14.7

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update pypa/gh-action-pypi-publish digest to dc37677
• chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.29.0
• chore(deps): update github/codeql-action action to v4.37.6
• chore(deps): update actions/checkout action to v7
• chore(deps): update astral-sh/setup-uv action to v9
• chore(deps): update dependency macos to v26
• fix(deps): update dependency mypy to v2
• fix(deps): update dependency rich to v15
• fix(deps): update dependency twine to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency rich to >=14.3.4
• chore(deps): update actions/checkout action to v6.1.0
• chore(deps): update astral-sh/setup-uv action to v7.6.0
• chore(deps): update dependency astral-sh/uv to v0.12.3
• chore(deps): update dependency build to >=1.5.0
• chore(deps): update zizmorcore/zizmor-action action to v0.6.2
• fix(deps): update dependency click to >=8.4.2
• fix(deps): update dependency iterm2 to >=2.20
• fix(deps): update dev dependencies (black, build, mypy, pytest, pytest-asyncio, pytest-cov, ruff, types-pyyaml)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (2)

.github/workflows/ci.yml (14)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.6.0, v9.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.6.0, v9.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.6.0, v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish release/v1@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: release/v1]
• astral-sh/uv 0.10.1 → [Updates: 0.12.3]
• macos 15 → [Updates: 26]
• astral-sh/uv 0.10.1 → [Updates: 0.12.3]
• astral-sh/uv 0.10.1 → [Updates: 0.12.3]

.github/workflows/workflow-lint.yml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• zizmorcore/zizmor-action v0.5.6@5f14fd08f7cf1cb1609c1e344975f152c7ee938d → [Updates: v0.6.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• github/codeql-action v4.35.4@68bde559dea0fdcac2102bfdf6230c5f70eb485e → [Updates: v4.37.6]
• github/codeql-action v4.35.4@68bde559dea0fdcac2102bfdf6230c5f70eb485e → [Updates: v4.37.6]
• reviewdog/action-setup v1.5.0@d8a7baabd7f3e8544ee4dbde3ee41d0011c3a93f
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• ghcr.io/zizmorcore/zizmor v1.25.2 → [Updates: 1.29.0]

pep621 (1)

pyproject.toml (17)

• python >=3.10 → [Updates: >=3.14.7]
• iterm2 >=2.13 → [Updates: >=2.20]
• click >=8.3.1 → [Updates: >=8.4.2]
• PyYAML >=6.0.3
• rich >=14.3.2 → [Updates: >=14.3.4, >=15.0.0]
• build >=1.4.0 → [Updates: >=1.5.0]
• pytest-timeout >=2.4.0
• pytest >=9.0.2 → [Updates: >=9.1.1]
• pytest-asyncio >=1.3.0 → [Updates: >=1.4.0]
• pytest-cov >=7.0.0 → [Updates: >=7.1.0]
• pytest-timeout >=2.4.0
• black >=26.1.0 → [Updates: >=26.5.1]
• ruff >=0.15.0 → [Updates: >=0.16.2]
• mypy >=1.19.1 → [Updates: >=1.20.2, >=2.3.0]
• types-pyyaml >=6.0.12.20250915 → [Updates: >=6.0.12.20260724]
• twine ==6.2.0 → [Updates: ==7.0.0]
• build >=1.4.0 → [Updates: >=1.5.0]

---

• Check this box to trigger a request for Renovate to run again on this repository