Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update astral-sh/setup-uv action to v7.6.0
• chore(deps): update github/codeql-action action to v4.34.1
• chore(deps): update sigstore/cosign-installer action to v4.1.1
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

• ghcr.io/devcontainers/features/common-utils 2
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/python 1
• python 3.14
• ghcr.io/devcontainers/features/docker-outside-of-docker 1

docker-compose (1)

docker-compose.example.yml

dockerfile (2)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/base ubuntu-24.04@sha256:d94c97dd9cacf183d0a6fd12a8e87b526e9e928307674ae9c94139139c0c6eae

Dockerfile (1)

• ghcr.io/astral-sh/uv 0.9-python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca

github-actions (10)

.github/workflows/ci.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/codeql.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.34.1]
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.34.1]
• ubuntu 24.04

.github/workflows/dependency-review.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48
• ubuntu 24.04

.github/workflows/devcontainer-smoke.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• devcontainers/ci v0.3@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6
• devcontainers/ci v0.3@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6
• ubuntu 24.04

.github/workflows/lint-pr.yml (2)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• ubuntu 24.04

.github/workflows/release.yml (25)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• orhun/git-cliff-action v4.7.1@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.0.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]
• aquasecurity/setup-trivy v0.2.6@3fb12ec12f41e471780db15c232d5dd185dcb514
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v7.0.0]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad → [Updates: v4.1.1]
• actions/download-artifact v6.0.0@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 → [Updates: v8.0.1]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.34.1]
• ubuntu 24.04

.github/workflows/stale.yml (2)

• actions/stale v10.2.0@b5d41d4e1d5dceea10e7104786b73624c18a190f
• ubuntu 24.04

.github/workflows/trivy-scan.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7
• aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v4.32.6@0d579ffd059c29b07949a3cce3983f0780820c98 → [Updates: v4.34.1]
• ubuntu 24.04

.github/workflows/uv-lock-check.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0]

pep621 (1)

pyproject.toml (8)

• python >=3.9
• flask >=3.1.2
• gunicorn >=23.0.0
• requests >=2.32.5
• urllib3 >=2.5.0
• ruff >=0.13.1
• pytest >=8.3.4
• pytest-cov >=6.0.0

pyenv (1)

.python-version (1)

• python 3.14

renovate-config-presets (1)

.github/renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository