Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency opentelemetry-exporter-otlp-proto-grpc to v1.40.0
• Update dependency psutil to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency python-multipart to v0.0.22 [SECURITY]
• Update dependency pyyaml to v6.0.3
• Update dependency astral-sh/uv to v0.10.9
• Update dependency curl-cffi to v0.14.0
• Update dependency fastapi to v0.135.1
• Update dependency pydantic to v2.12.5
• Update dependency pydantic-settings to v2.13.1
• Update dependency pyjwt to v2.11.0
• Update dependency python to 3.14
• Update dependency rich to v14.3.3
• Update dependency textual-dev to v1.8.0
• Update dependency typer to v0.24.1
• Update dependency typing-extensions to v4.15.0
• Update dependency uvicorn to v0.41.0
• Update dependency wcmatch to v10.1
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/setup-python action to v6
• Update actions/upload-artifact action to v7
• Update astral-sh/setup-uv action to v7
• Update dependency gunicorn to v25
• Update dependency pathspec to v1
• Update dependency textual to v8
• Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

docker/syftbox.dockerfile

github-actions (7)

.github/workflows/apps-tests.yaml (4)

• actions/checkout v4 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• actions/setup-python v5 → [Updates: v6]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]

.github/workflows/cd-deploy-stage.yaml (4)

• astral-sh/setup-uv v5 → [Updates: v7]
• actions/checkout v4 → [Updates: v6]
• extractions/setup-just v3
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]

.github/workflows/cd-deploy.yaml (2)

• actions/checkout v4 → [Updates: v6]
• extractions/setup-just v3

.github/workflows/cd-release.yaml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-python v5 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• extractions/setup-just v3
• python 3.12 → [Updates: 3.14]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]

.github/workflows/e2e-tests.yaml (12)

• actions/checkout v4 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• extractions/setup-just v3
• actions/setup-python v5 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• extractions/setup-just v3
• dcarbone/install-jq-action v3
• actions/setup-python v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]

.github/workflows/nightlies.yaml

.github/workflows/pr-tests.yaml (14)

• actions/checkout v4 → [Updates: v6]
• actions/setup-python v5 → [Updates: v6]
• pre-commit/action v3.0.1
• actions/checkout v4 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• actions/cache v4 → [Updates: v5]
• actions/setup-python v5 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• astral-sh/setup-uv v5 → [Updates: v7]
• actions/cache v4 → [Updates: v5]
• actions/setup-python v5 → [Updates: v6]
• python 3.12 → [Updates: 3.14]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]
• astral-sh/uv 0.6.10 → [Updates: 0.10.9]

pep621 (1)

pyproject.toml (43)

• python >=3.9
• fastapi ==0.115.12 → [Updates: ==0.135.1]
• uvicorn ==0.34.0 → [Updates: ==0.41.0]
• gunicorn ==23.0.0 → [Updates: ==25.1.0]
• jinja2 ==3.1.6
• typing-extensions ==4.13.1 → [Updates: ==4.15.0]
• pydantic-settings ==2.8.1 → [Updates: ==2.13.1]
• httpx ==0.28.1
• pyyaml ==6.0.2 → [Updates: ==6.0.3]
• psutil ==6.1.1 → [Updates: ==7.2.2]
• loguru ==0.7.3
• py-fast-rsync ==0.1.0
• pathspec ==0.12.1 → [Updates: ==1.0.4]
• python-multipart ==0.0.20 → [Updates: ==0.0.22]
• rich ==14.0.0 → [Updates: ==14.3.3]
• croniter ==6.0.0
• typer ==0.15.2 → [Updates: ==0.24.1]
• pid ==3.0.4
• pydantic ==2.11.3 → [Updates: ==2.12.5]
• pyjwt ==2.10.1 → [Updates: ==2.11.0]
• wcmatch ==10.0 → [Updates: ==10.1]
• curl-cffi ==0.10.0 → [Updates: ==0.14.0]
• opentelemetry-instrumentation-fastapi ==0.52b1
• opentelemetry-instrumentation-sqlite3 ==0.52b1
• opentelemetry-exporter-otlp-proto-grpc ==1.31.1 → [Updates: ==1.40.0]
• distro ==1.9.0
• textual ==1.0.0 → [Updates: ==8.1.1]
• msgpack >=1.1.0
• tqdm >=4.67.1
• aiofiles >=24.1.0
• requests >=2.32.3
• bump2version >=1.0.1
• faker >=30.4.0
• ipykernel >=6.29.5
• locust >=2.32.0
• pre-commit >=4.0.1
• pytest-asyncio >=0.24.0
• pytest-cov >=5.0.0
• pytest-httpx >=0.35.0
• pytest-timeout >=2.3.1
• pytest-xdist >=3.6.1
• pytest >=8.3.3
• textual-dev ==1.7.0 → [Updates: ==1.8.0]

pip_requirements (1)

fetchers/netflix/requirements.txt

---

• Check this box to trigger a request for Renovate to run again on this repository