Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	codacy/codacy-coverage-reporter-action	2022-01-19
pep621	defusedxml	2023-09-29

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): Update mcr.microsoft.com/devcontainers/universal Docker tag to v6

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): Lock file maintenance

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): Pin dependencies (ghcr.io/devcontainers-extra/features/mise, ghcr.io/skriptfabrik/devcontainer-features/infisical-cli, python)
• chore(deps): Update basher83/.github digest to c46ba74
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update mise tools (fd, git-cliff, prek, uv)
• chore(deps): Update dependency rg to v15
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (3)

• mcr.microsoft.com/devcontainers/universal 5@sha256:5035562d736642e6d0382d4ef599d84d43f428609ae17fbe2e841b30451de0f7 → [Updates: 6]
• ghcr.io/skriptfabrik/devcontainer-features/infisical-cli 1 → [Updates: 1]
• ghcr.io/devcontainers-extra/features/mise 1 → [Updates: 1]

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (5)

• docker/dockerfile 1@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769
• python 3.13-slim@sha256:a0779d7c12fc20be6ec6b4ddc901a4fd7657b8a6bc9def9d3fde89ed5efe0a3d
• ghcr.io/astral-sh/uv latest@sha256:3b7b60a81d3c57ef471703e5c83fd4aaa33abcd403596fb22ab07db85ae91347
• python 3.13-slim@sha256:a0779d7c12fc20be6ec6b4ddc901a4fd7657b8a6bc9def9d3fde89ed5efe0a3d
• ghcr.io/astral-sh/uv latest@sha256:3b7b60a81d3c57ef471703e5c83fd4aaa33abcd403596fb22ab07db85ae91347

github-actions (5)

.github/workflows/codacy.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121
• codacy/codacy-analysis-cli-action v4.4.7@562ee3e92b8e92df8b67e0a5ff8aa8e261919c08
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225

.github/workflows/docker-publish.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f
• actions/attest-build-provenance v4@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

.github/workflows/security-scan.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• github/codeql-action v4@95e58e9a2cdfd71adc6e0353d5c52f41a045d225
• pyupio/safety-action v1.0.1@2591cf2f3e67ba68b923f4c92f0d36e281c65023
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.14

.github/workflows/sync-labels.yml (1)

• basher83/.github main@2d27d7bfa6e028b35a0df73cf5c3330ad0a2b7dc → [Updates: main]

.github/workflows/tests.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• codacy/codacy-coverage-reporter-action v1.3.0@89d6c85cfafaec52c72b6c5e8b2878d33104c699
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.14

mise (1)

mise.toml (9)

• python 3.14.4
• eza 0.23.0
• fd 10.2.0 → [Updates: 10.4.2]
• rg 14.1.1 → [Updates: 15.1.0]
• git-cliff 2.10.1 → [Updates: 2.13.1]
• shellcheck 0.11.0
• markdownlint-cli2 0.22.1
• uv 0.11.7 → [Updates: 0.11.8]
• prek 0.2.20 → [Updates: 0.3.11]

pep621 (1)

pyproject.toml (28)

• python >=3.10
• mcp >=1.23.0
• zammad-py >=3.2.0
• pydantic >=2.11.7
• python-dotenv >=1.2.2
• httpx >=0.28.1
• pytest >=9.0.3
• pytest-asyncio >=0.21.0
• pytest-cov >=7.1.0
• ruff >=0.15.10
• mypy >=1.20.1
• pip-audit >=2.6.0
• bandit >=1.9.4
• semgrep >=1.35.0
• safety >=3.7.0
• defusedxml >=0.7.1
• pre-commit >=4.5.1
• pytest >=9.0.3
• pytest-asyncio >=0.21.0
• pytest-cov >=7.1.0
• ruff >=0.15.10
• mypy >=1.20.1
• pip-audit >=2.6.0
• bandit >=1.9.4
• semgrep >=1.35.0
• safety >=3.7.0
• defusedxml >=0.7.1
• pre-commit >=4.5.1

pip_requirements (1)

.claude/skills/mcp-builder/scripts/requirements.txt (2)

• anthropic >=0.39.0
• mcp >=1.1.0

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.13]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository