Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (33)

Datasource	Package	Last Updated
github-actions	hmarr/auto-approve-action	2024-02-03
github-actions	phoenix-actions/test-reporting	2024-05-05
github-actions	python-semantic-release/upload-to-gh-release	2024-09-27
github-actions	re-actors/alls-green	2022-10-14
pip_requirements	annotated-types	2024-05-20
pip_requirements	colorama	2022-10-25
pip_requirements	crashtest	2022-11-02
pip_requirements	distro	2023-12-24
pip_requirements	jaraco-classes	2024-03-31
pip_requirements	jeepney	2025-02-27
pip_requirements	loguru	2024-12-06
pip_requirements	mdurl	2022-08-14
pip_requirements	pkginfo	2025-02-19
pip_requirements	pyproject-hooks	2024-09-29
pip_requirements	pywin32-ctypes	2024-08-14
pip_requirements	requests-toolbelt	2023-05-01
pip_requirements	shellingham	2023-10-24
pip_requirements	tomli-w	2025-01-15
pip_requirements	win32-setctime	2024-12-07
poetry	mkdocs	2024-08-30
poetry	poetry-pre-commit-plugin	2025-02-25
poetry	pytest-depends	2020-04-05
poetry	pytest-github-report	2022-06-03
poetry	pytest-order	2024-08-22
poetry	pytest-retry	2025-01-19
poetry	symspellpy	2025-03-09
poetry	tomli-w	2025-01-15

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(python-deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(gh-actions-deps): update marocchino/sticky-pull-request-comment action to v3.0.3 in all dependant reusable workflows
• chore(python-deps): update dependency cryptography to v46.0.7 in all dependant actions
• chore(python-deps): update dependency rapidfuzz to v3.14.5 in all dependant actions
• chore(gh-actions-deps): update pypa/gh-action-pypi-publish action to v1.14.0 in all dependant reusable workflows

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(python-deps): update dependency click to v8.3.2 in all dependant actions
• chore(python-deps): update dependency pydantic-core to v2.45.0 in all dependant actions
• chore(python-deps): update dependency installer to v1 in all dependant actions
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v9.21.1 in all dependant reusable workflows
• chore(python-version): update python docker tag to v3.14 in all dependant actions
• chore(gh-actions-deps): update dependency ubuntu to v24 in dev workflows
• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v10 in all dependant reusable workflows
• chore(python-deps): update dependency dulwich to v1 in all dependant actions

Detected Dependencies

dockerfile (3)

actions/create_unique_testpypi_version/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/find_unreleased_changelog_items/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/update_development_dependencies/Dockerfile (1)

• python 3.13-slim@sha256:3a6ead7603d322b80dd718d3834dcab86977c73b066028226afd8d0cdf1b0b12 → [Updates: 3.14-slim, 3.13-slim]

github-actions (16)

.github/workflows/_reusable-check-api-for-breaking-changes.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f

.github/workflows/_reusable-codeql-analysis.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-enforce-community-standards.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• andstor/file-existence-action v3.1.0@558493d6c74bf472d87c84eab196434afc2fa029
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-package-build.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.17.0@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-package-release.yml (15)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.1, v10.5.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.1, v10.5.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.17.0@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e → [Updates: v1.14.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e → [Updates: v1.14.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• python-semantic-release/upload-to-gh-release v9.8.9@0a92b5d7ebfc15a84f9801ebd1bf706343d43711
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/_reusable-package-testpypi.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.17.0@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e → [Updates: v1.14.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60

.github/workflows/_reusable-publish-api-comparison.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dawidd6/action-download-artifact v20@8305c0f1062bb0d184d09ef4493ecb9288447732
• marocchino/sticky-pull-request-comment v3.0.2@70d2764d1a7d5d9560b100cbea0077fc8f633987 → [Updates: v3.0.3]
• marocchino/sticky-pull-request-comment v3.0.2@70d2764d1a7d5d9560b100cbea0077fc8f633987 → [Updates: v3.0.3]
• marocchino/sticky-pull-request-comment v3.0.2@70d2764d1a7d5d9560b100cbea0077fc8f633987 → [Updates: v3.0.3]

.github/workflows/_reusable-publish-test-results.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dawidd6/action-download-artifact v20@8305c0f1062bb0d184d09ef4493ecb9288447732
• marocchino/sticky-pull-request-comment v3.0.2@70d2764d1a7d5d9560b100cbea0077fc8f633987 → [Updates: v3.0.3]
• marocchino/sticky-pull-request-comment v3.0.2@70d2764d1a7d5d9560b100cbea0077fc8f633987 → [Updates: v3.0.3]

.github/workflows/_reusable-sbom-scan.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• anchore/scan-action v7.4.0@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13

.github/workflows/_reusable-test-code.yml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7
• nick-fields/retry v4.0.0@ad984534de44a9489a53aefd81eb77f87c70dc60
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• phoenix-actions/test-reporting v15@f957cd93fc2d848d556fa0d03c57bc79127b6b5e
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-test-docs.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• vimtor/action-zip v1.3@5407800dfb2b1b37d48df912330cb22f4ab6f422
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-update-python-and-pre-commit-dependencies.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• crazy-max/ghaction-import-gpg v7.0.0@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7
• stefanzweifel/git-auto-commit-action v7.1.0@04702edda442b2e678b25b537cec683a1493fcb9

.github/workflows/auto-approve.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

.github/workflows/dependency-review.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48

.github/workflows/test-actions.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• austenstone/job-summary v2.0@67b7e1f68ee55e44d073ab7354e7b580cd09567c
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe
• ubuntu 22.04 → [Updates: 24.04]

actions/fetch_pr_number/action.yml (1)

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

pip_requirements (2)

actions/create_unique_testpypi_version/requirements.txt (19)

• annotated-types ==0.7.0
• attrs ==26.1.0
• beautifulsoup4 ==4.14.3
• certifi ==2026.2.25
• charset-normalizer ==3.4.7
• idna ==3.11
• mailbits ==0.2.3
• packaging ==26.0
• poetry-core ==2.3.2
• pydantic ==2.12.5
• pydantic-core ==2.41.5 → [Updates: ==2.45.0]
• pypi-simple ==1.8.0
• requests ==2.33.1
• soupsieve ==2.8.3
• tomli ==2.4.1
• tomli-w ==1.2.0
• typing-extensions ==4.15.0
• typing-inspection ==0.4.2
• urllib3 ==2.6.3

actions/update_development_dependencies/requirements.txt (77)

• annotated-types ==0.7.0
• anyio ==4.13.0
• attrs ==26.1.0
• beautifulsoup4 ==4.14.3
• build ==1.4.2
• cachecontrol ==0.14.4
• certifi ==2026.2.25
• cffi ==2.0.0
• cfgv ==3.5.0
• charset-normalizer ==3.4.7
• cleo ==2.1.0
• click ==8.3.1 → [Updates: ==8.3.2]
• colorama ==0.4.6
• crashtest ==0.4.1
• cryptography ==46.0.6 → [Updates: ==46.0.7]
• distlib ==0.4.0
• distro ==1.9.0
• dulwich ==0.25.2 → [Updates: ==1.1.0]
• fastjsonschema ==2.21.2
• filelock ==3.25.2
• findpython ==0.7.1
• h11 ==0.16.0
• httpcore ==1.0.9
• httpx ==0.28.1
• identify ==2.6.18
• idna ==3.11
• installer ==0.7.0 → [Updates: ==1.0.0]
• jaraco-classes ==3.4.0
• jaraco-context ==6.1.2
• jaraco-functools ==4.4.0
• jeepney ==0.9.0
• keyring ==25.7.0
• loguru ==0.7.3
• mailbits ==0.2.3
• maison ==2.0.2
• markdown-it-py ==4.0.0
• mdurl ==0.1.2
• more-itertools ==11.0.1
• msgpack ==1.1.2
• nodeenv ==1.10.0
• packaging ==26.0
• pbs-installer ==2026.3.25
• pkginfo ==1.12.1.2
• platformdirs ==4.9.4
• poetry ==2.3.3
• poetry-core ==2.3.2
• poetry-plugin-export ==1.10.0
• pre-commit ==4.5.1
• pycparser ==3.0
• pydantic ==2.12.5
• pydantic-core ==2.41.5 → [Updates: ==2.45.0]
• pygments ==2.20.0
• pypi-simple ==1.8.0
• pyproject-hooks ==1.2.0
• pywin32-ctypes ==0.2.3
• pyyaml ==6.0.3
• rapidfuzz ==3.14.3 → [Updates: ==3.14.5]
• requests ==2.33.1
• requests-toolbelt ==1.0.0
• rich ==14.3.3
• ruyaml ==0.91.0
• secretstorage ==3.5.0
• setuptools ==82.0.1
• shellingham ==1.5.4
• soupsieve ==2.8.3
• toml-sort ==0.24.4
• tomlkit ==0.14.0
• trove-classifiers ==2026.1.14.14
• typer ==0.24.1
• typing-extensions ==4.15.0
• typing-inspection ==0.4.2
• urllib3 ==2.6.3
• virtualenv ==21.2.0
• win32-setctime ==1.2.0
• xattr ==1.3.0
• yamlfix ==1.19.1
• zstandard ==0.25.0

poetry (1)

pyproject.toml (41)

• poetry-core 2.3.2
• pypi-simple 1.8.0
• tomli 2.4.1
• tomli-w 1.2.0
• poetry-plugin-export 1.10.0
• pre-commit 4.5.1
• pypi-simple 1.8.0
• toml-sort 0.24.4
• yamlfix 1.19.1
• pip ^26.0
• poetry ^2.3.1
• poetry-audit-plugin ^1.0.0
• poetry-plugin-export ^1.10.0
• poetry-pre-commit-plugin ^0.2.2
• pre-commit 4.5.1
• pylint 4.0.5
• pyright 1.1.408
• tox ^4.18.0
• tox-gh-actions ^3.2.0
• codespell ^2.0.0
• mkdocs ^1.6.0
• mkdocs-ezglossary-plugin ^2.0.0
• mkdocs-macros-plugin ^1.0.5
• mkdocs-mermaid2-plugin ^1.1.1
• mkdocs-same-dir ^0.1.3
• mkdocs-spellcheck ^1.1.0
• pygments ^2.17.2
• pymdown-extensions ^10.8.1
• symspellpy ^6.7.7
• tomli 2.4.1
• coverage ^7.5.0
• linkchecker ^10.0.0
• pytest ^9.0.0
• pytest-cov ^7.0.0
• pytest-depends ^1.0.1
• pytest-env ^1.1.3
• pytest-github-report ^0.0.1
• pytest-html ^4.1.1
• pytest-order ^1.2.1
• pytest-retry ^1.7.0
• pytest-subprocess ^1.5.2

---

• Check this box to trigger a request for Renovate to run again on this repository