Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (32)

Datasource	Name	Last Updated
github-actions	hmarr/auto-approve-action	2024-02-03
github-actions	phoenix-actions/test-reporting	2024-05-05
github-actions	python-semantic-release/upload-to-gh-release	2024-09-27
github-actions	re-actors/alls-green	2022-10-14
pip_requirements	annotated-types	2024-05-20
pip_requirements	colorama	2022-10-25
pip_requirements	crashtest	2022-11-02
pip_requirements	distro	2023-12-24
pip_requirements	installer	2023-03-17
pip_requirements	jaraco-classes	2024-03-31
pip_requirements	loguru	2024-12-06
pip_requirements	mdurl	2022-08-14
pip_requirements	pyproject-hooks	2024-09-29
pip_requirements	pywin32-ctypes	2024-08-14
pip_requirements	requests-toolbelt	2023-05-01
pip_requirements	shellingham	2023-10-24
pip_requirements	tomli-w	2025-01-15
pip_requirements	win32-setctime	2024-12-07
poetry	mkdocs	2024-08-30
poetry	mkdocs-same-dir	2024-01-31
poetry	pytest-depends	2020-04-05
poetry	pytest-github-report	2022-06-03
poetry	pytest-order	2024-08-22
poetry	pytest-retry	2025-01-19
poetry	pytest-subprocess	2025-01-04
poetry	tomli-w	2025-01-15

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(gh-actions-deps): update anchore/sbom-action action to v0.22.1 in all dependant reusable workflows
• chore(gh-actions-deps): update anchore/scan-action action to v7.3.1 in all dependant reusable workflows
• chore(gh-actions-deps): update github/codeql-action action to v4.31.11 in all dependant reusable workflows
• chore(gh-actions-deps): update actions/attest-build-provenance action to v3.2.0 in all dependant reusable workflows
• chore(gh-actions-deps): update github/codeql-action action to v4.32.0 in all dependant reusable workflows

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(gh-actions-deps): update actions/setup-python action to v6.2.0 in all dependant reusable workflows

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v9.21.1 in all dependant reusable workflows
• chore(python-version): update python docker tag to v3.14 in all dependant actions
• chore(gh-actions-deps): update dependency ubuntu to v24 in dev workflows
• chore(gh-actions-deps): update python-semantic-release/python-semantic-release action to v10 in all dependant reusable workflows
• chore(python-deps): update dependency dulwich to v1 in all dependant actions

Detected Dependencies

dockerfile (3)

actions/create_unique_testpypi_version/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/find_unreleased_changelog_items/Dockerfile (1)

• python 3.13-alpine@sha256:9ba6d8cbebf0fb6546ae71f2a1c14f6ffd2fdab83af7fa5669734ef30ad48844 → [Updates: 3.14-alpine, 3.13-alpine]

actions/update_development_dependencies/Dockerfile (1)

• python 3.13-slim@sha256:3a6ead7603d322b80dd718d3834dcab86977c73b066028226afd8d0cdf1b0b12 → [Updates: 3.14-slim, 3.13-slim]

github-actions (16)

.github/workflows/_reusable-check-api-for-breaking-changes.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f

.github/workflows/_reusable-codeql-analysis.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4.31.10@cdefb33c0f6224e58673d9004f47f7cb3e328b89 → [Updates: v4.31.11, v4.32.0]
• github/codeql-action v4.31.10@cdefb33c0f6224e58673d9004f47f7cb3e328b89 → [Updates: v4.31.11, v4.32.0]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-enforce-community-standards.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• andstor/file-existence-action v3.0.0@076e0072799f4942c8bc574a82233e1e4d13e9d6
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-package-build.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.14.0@efb823f52190ad02594531168b7a2d5790e66516
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-package-release.yml (15)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.1, v10.5.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• python-semantic-release/python-semantic-release v9.9.0@fd8c509df1f16daf3f71a9a6fac49247017017b2 → [Updates: v9.21.1, v10.5.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.14.0@efb823f52190ad02594531168b7a2d5790e66516
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• python-semantic-release/upload-to-gh-release v9.8.9@0a92b5d7ebfc15a84f9801ebd1bf706343d43711
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/workflows/_reusable-package-testpypi.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• hynek/build-and-inspect-python-package v2.14.0@efb823f52190ad02594531168b7a2d5790e66516
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• pypa/gh-action-pypi-publish v1.13.0@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08

.github/workflows/_reusable-publish-api-comparison.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dawidd6/action-download-artifact v12@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/_reusable-publish-test-results.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• dawidd6/action-download-artifact v12@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/_reusable-sbom-scan.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• anchore/sbom-action v0.22.0@62ad5284b8ced813296287a0b63906cb364b73ee → [Updates: v0.22.1]
• actions/attest-build-provenance v3.1.0@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 → [Updates: v3.2.0]
• anchore/scan-action v7.3.0@0d444ed77d83ee2ba7f5ced0d90d640a1281d762 → [Updates: v7.3.1]
• anchore/scan-action v7.3.0@0d444ed77d83ee2ba7f5ced0d90d640a1281d762 → [Updates: v7.3.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• github/codeql-action v4.31.10@cdefb33c0f6224e58673d9004f47f7cb3e328b89 → [Updates: v4.31.11, v4.32.0]

.github/workflows/_reusable-test-code.yml (16)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/cache v5.0.2@8b402f58fbc84540c8b491a91e594a4576fec3d7
• nick-fields/retry v3.0.2@ce71cc2ab81d554ebbe88c79ab5975992d79ba08
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131
• phoenix-actions/test-reporting v15@f957cd93fc2d848d556fa0d03c57bc79127b6b5e
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-test-docs.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• vimtor/action-zip v1.2@1379ea20d4c5705669ba81fd626dd01b1c738f26
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/_reusable-update-python-and-pre-commit-dependencies.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• crazy-max/ghaction-import-gpg v6.3.0@e89d40939c28e39f97cf32126055eeae86ba74ec
• actions/cache v5.0.2@8b402f58fbc84540c8b491a91e594a4576fec3d7
• stefanzweifel/git-auto-commit-action v7.1.0@04702edda442b2e678b25b537cec683a1493fcb9

.github/workflows/auto-approve.yml (1)

• hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363

.github/workflows/dependency-review.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/test-actions.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• austenstone/job-summary v2.0@67b7e1f68ee55e44d073ab7354e7b580cd09567c
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe
• ubuntu 22.04 → [Updates: 24.04]

actions/fetch_pr_number/action.yml (1)

• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

pip_requirements (2)

actions/create_unique_testpypi_version/requirements.txt (19)

• annotated-types ==0.7.0
• attrs ==25.4.0
• beautifulsoup4 ==4.14.3
• certifi ==2026.1.4
• charset-normalizer ==3.4.4
• idna ==3.11
• mailbits ==0.2.3
• packaging ==26.0
• poetry-core ==2.3.0
• pydantic ==2.12.5
• pydantic-core ==2.41.5
• pypi-simple ==1.8.0
• requests ==2.32.5
• soupsieve ==2.8.3
• tomli ==2.4.0
• tomli-w ==1.2.0
• typing-extensions ==4.15.0
• typing-inspection ==0.4.2
• urllib3 ==2.6.3

actions/update_development_dependencies/requirements.txt (77)

• annotated-types ==0.7.0
• anyio ==4.12.1
• attrs ==25.4.0
• beautifulsoup4 ==4.14.3
• build ==1.4.0
• cachecontrol ==0.14.4
• certifi ==2026.1.4
• cffi ==2.0.0
• cfgv ==3.5.0
• charset-normalizer ==3.4.4
• cleo ==2.1.0
• click ==8.3.1
• colorama ==0.4.6
• crashtest ==0.4.1
• cryptography ==46.0.3
• distlib ==0.4.0
• distro ==1.9.0
• dulwich ==0.25.2 → [Updates: ==1.0.0]
• fastjsonschema ==2.21.2
• filelock ==3.20.3
• findpython ==0.7.1
• h11 ==0.16.0
• httpcore ==1.0.9
• httpx ==0.28.1
• identify ==2.6.16
• idna ==3.11
• installer ==0.7.0
• jaraco-classes ==3.4.0
• jaraco-context ==6.1.0
• jaraco-functools ==4.4.0
• jeepney ==0.9.0
• keyring ==25.7.0
• loguru ==0.7.3
• mailbits ==0.2.3
• maison ==2.0.2
• markdown-it-py ==4.0.0
• mdurl ==0.1.2
• more-itertools ==10.8.0
• msgpack ==1.1.2
• nodeenv ==1.10.0
• packaging ==26.0
• pbs-installer ==2026.1.14
• pkginfo ==1.12.1.2
• platformdirs ==4.5.1
• poetry ==2.3.1
• poetry-core ==2.3.0
• poetry-plugin-export ==1.10.0
• pre-commit ==4.5.1
• pycparser ==3.0
• pydantic ==2.12.5
• pydantic-core ==2.41.5
• pygments ==2.19.2
• pypi-simple ==1.8.0
• pyproject-hooks ==1.2.0
• pywin32-ctypes ==0.2.3
• pyyaml ==6.0.3
• rapidfuzz ==3.14.3
• requests ==2.32.5
• requests-toolbelt ==1.0.0
• rich ==14.3.1
• ruyaml ==0.91.0
• secretstorage ==3.5.0
• setuptools ==80.10.2
• shellingham ==1.5.4
• soupsieve ==2.8.3
• toml-sort ==0.24.3
• tomlkit ==0.14.0
• trove-classifiers ==2026.1.14.14
• typer ==0.21.1
• typing-extensions ==4.15.0
• typing-inspection ==0.4.2
• urllib3 ==2.6.3
• virtualenv ==20.36.1
• win32-setctime ==1.2.0
• xattr ==1.3.0
• yamlfix ==1.19.1
• zstandard ==0.25.0

poetry (1)

pyproject.toml (41)

• poetry-core 2.3.0
• pypi-simple 1.8.0
• tomli 2.4.0
• tomli-w 1.2.0
• poetry-plugin-export 1.10.0
• pre-commit 4.5.1
• pypi-simple 1.8.0
• toml-sort 0.24.3
• yamlfix 1.19.1
• pip ^25.0
• poetry ^2.3.1
• poetry-audit-plugin ^1.0.0
• poetry-plugin-export ^1.10.0
• poetry-pre-commit-plugin ^0.2.2
• pre-commit 4.5.1
• pylint 4.0.4
• pyright 1.1.408
• tox ^4.18.0
• tox-gh-actions ^3.2.0
• codespell ^2.0.0
• mkdocs ^1.6.0
• mkdocs-ezglossary-plugin ^2.0.0
• mkdocs-macros-plugin ^1.0.5
• mkdocs-mermaid2-plugin ^1.1.1
• mkdocs-same-dir ^0.1.3
• mkdocs-spellcheck ^1.1.0
• pygments ^2.17.2
• pymdown-extensions ^10.8.1
• symspellpy ^6.7.7
• tomli 2.4.0
• coverage ^7.5.0
• linkchecker ^10.0.0
• pytest ^9.0.0
• pytest-cov ^7.0.0
• pytest-depends ^1.0.1
• pytest-env ^1.1.3
• pytest-github-report ^0.0.1
• pytest-html ^4.1.1
• pytest-order ^1.2.1
• pytest-retry ^1.7.0
• pytest-subprocess ^1.5.2

---

• Check this box to trigger a request for Renovate to run again on this repository