Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update all non-major dependencies (astral-sh/setup-uv, ghcr.io/astral-sh/uv)

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• chore(deps): update chainguard python base images

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (4)

• docker/dockerfile 1.27@sha256:bde3983e9c939224420ddaf6b784cc30e09b035a4dea01f581230c50809f372e
• cgr.dev/chainguard/python latest-dev@sha256:8af5085c793a9b501253117ccceabff2340400f3ef92fb0e09df690dd1e961a4 → [Updates: latest-dev]
• ghcr.io/astral-sh/uv 0.11@sha256:77280f2f771df71f90786c314fe1bbc1e023feac652969bbf139c280babf2eb7 → [Updates: 0.12]
• cgr.dev/chainguard/python latest@sha256:1206ffee8644e6338b3fc8b6e5dc384b03d91ad1df1d6b74fa4255544ac51ad2 → [Updates: latest]

github-actions (4)

.github/workflows/docker-publish.yml (10)

• actions/checkout v7
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• sigstore/cosign-installer v4.1.2
• anchore/sbom-action v0
• actions/attest v4
• actions/attest-build-provenance v4

.github/workflows/ghcr-retention.yml (1)

• dataaxiom/ghcr-cleanup-action v1.2.2

.github/workflows/supply-chain.yml (4)

• actions/checkout v7
• astral-sh/setup-uv v10.1.0 → [Updates: v10.2.0]
• google/osv-scanner-action v2.6.0
• pypa/gh-action-pip-audit v1.1.0

.github/workflows/test.yml (6)

• actions/checkout v7
• astral-sh/setup-uv v10.1.0 → [Updates: v10.2.0]
• codecov/codecov-action v7
• actions/upload-artifact v7
• actions/checkout v7
• astral-sh/setup-uv v10.1.0 → [Updates: v10.2.0]

pep621 (1)

pyproject.toml (15)

• python >=3.14
• google-auth-oauthlib >=1.0.0
• google-auth-httplib2 >=0.1.0
• google-api-python-client >=2.0.0
• python-dotenv >=1.0.0
• openai >=1.12.0
• pytest >=8.0.0
• pytest-cov >=4.1.0
• pytest-mock >=3.12.0
• pytest-asyncio >=0.23.0
• responses >=0.24.0
• freezegun >=1.4.0
• black >=24.0.0
• flake8 >=7.0.0
• mypy >=1.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository