Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Attempting to use non-git url for git operations
• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency fastapi-cli to v0.0.24
• Update dependency httpcore to v1.0.9
• Update dependency markupsafe to v3.0.3
• Update dependency pyyaml to v6.0.3
• Update actions/attest-build-provenance action to v2.4.0
• Update actions/checkout action to v4.3.1
• Update codecov/codecov-action action to v5.5.4
• Update codecov/test-results-action action to v1.2.1
• Update dependency astral-sh/uv to v0.11.7
• Update dependency certifi to v2025.11.12
• Update dependency click to v8.3.2
• Update dependency dnspython to v2.8.0
• Update dependency email-validator to v2.3.0
• Update dependency fastapi to v0.136.0
• Update dependency hatchling to v1.29.0
• Update dependency httptools to v0.7.1
• Update dependency idna to v3.11
• Update dependency pydantic-core to v2.46.2
• Update dependency pydantic-settings to v2.13.1
• Update dependency python-dotenv to v1.2.2
• Update dependency rich-toolkit to v0.19.7
• Update dependency typer to v0.24.1
• Update dependency typing-extensions to v4.15.0
• Update dependency uvicorn to v0.44.0
• Update dependency uvloop to v0.22.1
• Update dependency watchfiles to v1.1.1
• Update docker/build-push-action action to v6.19.2
• Update docker/login-action action to v3.7.0
• Update docker/metadata-action action to v5.10.0
• Update docker/setup-buildx-action action to v3.12.0
• Update docker/setup-qemu-action action to v3.7.0
• Update ghcr.io/astral-sh/uv Docker tag to v0.11.7
• Update orhun/git-cliff-action action to v4.7.1
• Update python Docker tag to v3.14
• Update actions/attest-build-provenance action to v4
• Update actions/checkout action to v6
• Update actions/upload-artifact action to v7
• Update astral-sh/setup-uv action to v8
• Update codecov/codecov-action action to v6
• Update dependency certifi to v2026
• Update dependency markdown-it-py to v4
• Update dependency rich to v15
• Update dependency websockets to v16
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update docker/setup-qemu-action action to v4
• Update github/codeql-action action to v4
• Update mcr.microsoft.com/devcontainers/python Docker tag to v2
• Update SonarSource/sonarqube-scan-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up git-tags package gh:helmut-hoffer-von-ankershoffen/oe-python-template: no-result.

Files affected: .copier-answers.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency python-multipart to v0.0.26 [SECURITY]
• Update dependency h11 to v0.16.0 [SECURITY]
• Update dependency orjson to v3.11.6 [SECURITY]
• Update dependency pygments to v2.20.0 [SECURITY]
• Update dependency starlette to v0.49.1 [SECURITY]
• Update dependency ujson to v5.12.0 [SECURITY]
• Update actions/upload-artifact action to v4.6.2
• Update dependency websockets to v15.0.1
• Update astral-sh/setup-uv action to v5.4.2
• Update dependency anyio to v4.13.0
• Update dependency pydantic to v2.13.2
• Update dependency pydantic-extra-types to v2.11.1
• Update SonarSource/sonarqube-scan-action action to v5.3.2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

copier (1)

.copier-answers.yml (1)

• gh:helmut-hoffer-von-ankershoffen/oe-python-template v0.17.3

devcontainer (1)

.devcontainer/devcontainer.json (6)

• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/va-h/devcontainers-features/uv 1
• ghcr.io/dhoeric/features/act 1
• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/java 1
• ghcr.io/devcontainers/features/node 1

docker-compose (1)

compose.yaml

dockerfile (2)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/devcontainers/python 1-3.11-bullseye → [Updates: 2-3.11-bullseye]

Dockerfile (2)

• python 3.13-slim-bookworm → [Updates: 3.14-slim-bookworm]
• ghcr.io/astral-sh/uv 0.6.14 → [Updates: 0.11.7]

github-actions (9)

.github/workflows/_audit.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_codeql.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/_docker-publish.yml (11)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392 → [Updates: v3.7.0, v4.0.0]
• docker/setup-buildx-action v3.10.0@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 → [Updates: v3.12.0, v4.0.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.1.0]
• docker/login-action v3.4.0@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4.1.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0, v6.0.0]
• docker/metadata-action v5.7.0@902fa8ec7d6ecbf8d84d538b9b233a880e428804 → [Updates: v5.10.0, v6.0.0]
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 → [Updates: v6.19.2, v7.1.0]
• docker/build-push-action v6.15.0@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 → [Updates: v6.19.2, v7.1.0]
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2 → [Updates: v2.4.0, v4.1.0]
• actions/attest-build-provenance v2.2.3@c074443f1aee8d4aeeae555aebba3282517141b2 → [Updates: v2.4.0, v4.1.0]

.github/workflows/_lint.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_package-publish.yml (4)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• orhun/git-cliff-action v4.4.2@4a4a951bc43fafe41cd2348d181853f52356bee7 → [Updates: v4.7.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_scheduled-test.yml (5)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_test.yml (8)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 → [Updates: v4.6.2, v7.0.1]
• codecov/codecov-action v5.4.0@0565863a31f2c772f9f0395002a31e3f06189574 → [Updates: v5.5.4, v6.0.0]
• codecov/test-results-action v1.1.0@f2dba722c67b86c6caa034178c6e4d35335f6706 → [Updates: v1.2.1]
• SonarSource/sonarqube-scan-action v5.0.0@0303d6b62e310685c0e34d0b9cde218036885c4d → [Updates: v5.3.2, v7.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_vercel-preview.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

.github/workflows/_vercel-production.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• astral-sh/setup-uv v5.3.1@f94ec6bedd8674c4426838e6b50417d36b6ab231 → [Updates: v5.4.2, v8.1.0]
• astral-sh/uv 0.6.3 → [Updates: 0.11.7]

pep621 (1)

pyproject.toml (64)

• python >=3.11, <4.0
• fastapi >=0.115.12
• logfire >=3.14.1
• nicegui >=2.15.0
• opentelemetry-instrumentation-fastapi >=0.53b0
• opentelemetry-instrumentation-httpx >=0.53b0
• opentelemetry-instrumentation-jinja2 >=0.53b0
• opentelemetry-instrumentation-requests >=0.53b0
• opentelemetry-instrumentation-sqlite3 >=0.53b0
• opentelemetry-instrumentation-tornado >=0.53b0
• opentelemetry-instrumentation-urllib >=0.53b0
• opentelemetry-instrumentation-urllib3 >=0.53b0
• psutil >=7.0.0
• pydantic-settings >=2.9.1
• sentry-sdk >=2.27.0
• typer >=0.15.1
• uptime >=3.0.1
• autodoc-pydantic >=2.2.0
• bump-my-version >=1.1.2
• cyclonedx-py >=1.0.1
• detect-secrets >=1.5.0
• enum-tools >=0.13.0
• furo >=2024.8.6
• git-cliff >=2.8.0
• matplotlib >=3.10.1
• mypy >=1.5.0
• nox >=2025.2.9
• pip-audit >=2.9.0
• pre-commit >=4.1.0
• pyright >=1.1.399
• pytest >=8.3.5
• pytest-asyncio >=0.26.0
• pytest-cov >=6.1.1
• pytest-docker >=3.2.1
• pytest-env >=1.1.5
• pytest-md-report >=0.6.3
• pytest-regressions >=2.7.0
• pytest-selenium >=4.1.0
• pytest-subprocess >=1.5.3
• pytest-timeout >=2.3.1
• pytest-watcher >=0.4.3
• pytest-xdist >=3.6.1
• ruff >=0.11.6
• scalene >=1.5.51
• sphinx >=8.2.3
• sphinx-autobuild >=2024.10.3
• sphinx-copybutton >=0.5.2
• sphinx-inline-tabs >=2023.4.21
• sphinx-mdinclude >=0.6.2
• sphinx-rtd-theme >=3.0.2
• sphinx-selective-exclude >=1.0.3
• sphinx-toolbox >=3.9.0
• sphinxext-opengraph >=0.9.1
• swagger-plugin-for-sphinx >=5.1.0
• tomli >=2.1.0
• types-pyyaml >=6.0.12.20250402
• types-requests >=2.32.0.20250328
• watchdog >=6.0.0
• marimo >=0.13.1
• matplotlib >=3.10.1
• jinja2 >=3.1.6
• jupyter >=1.1.1
• streamlit >=1.44.1
• hatchling ==1.27.0 → [Updates: ==1.29.0]

pip_requirements (1)

dist_vercel/requirements.txt (39)

• annotated-types ==0.7.0
• anyio ==4.8.0 → [Updates: ==4.13.0]
• certifi ==2025.1.31 → [Updates: ==2025.11.12, ==2026.2.25]
• click ==8.1.8 → [Updates: ==8.3.2]
• dnspython ==2.7.0 → [Updates: ==2.8.0]
• email-validator ==2.2.0 → [Updates: ==2.3.0]
• fastapi ==0.115.12 → [Updates: ==0.136.0]
• fastapi-cli ==0.0.7 → [Updates: ==0.0.24]
• h11 ==0.14.0 → [Updates: ==0.16.0]
• httpcore ==1.0.7 → [Updates: ==1.0.9]
• httptools ==0.6.4 → [Updates: ==0.7.1]
• httpx ==0.28.1
• idna ==3.10 → [Updates: ==3.11]
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• markdown-it-py ==3.0.0 → [Updates: ==4.0.0]
• markupsafe ==3.0.2 → [Updates: ==3.0.3]
• mdurl ==0.1.2
• orjson ==3.10.15 → [Updates: ==3.11.6]
• pydantic ==2.10.6 → [Updates: ==2.13.2]
• pydantic-core ==2.27.2 → [Updates: ==2.46.2]
• pydantic-extra-types ==2.10.2 → [Updates: ==2.11.1]
• pydantic-settings ==2.8.1 → [Updates: ==2.13.1]
• pygments ==2.19.1 → [Updates: ==2.20.0]
• python-dotenv ==1.1.0 → [Updates: ==1.2.2]
• python-multipart ==0.0.20 → [Updates: ==0.0.26]
• pyyaml ==6.0.2 → [Updates: ==6.0.3]
• rich ==13.9.4 → [Updates: ==15.0.0]
• rich-toolkit ==0.13.2 → [Updates: ==0.19.7]
• shellingham ==1.5.4
• sniffio ==1.3.1
• starlette ==0.46.0 → [Updates: ==0.49.1]
• typer ==0.15.2 → [Updates: ==0.24.1]
• typing-extensions ==4.12.2 → [Updates: ==4.15.0]
• ujson ==5.10.0 → [Updates: ==5.12.0]
• uvicorn ==0.34.0 → [Updates: ==0.44.0]
• uvloop ==0.21.0 → [Updates: ==0.22.1]
• watchfiles ==1.0.4 → [Updates: ==1.1.1]
• websockets ==15.0 → [Updates: ==15.0.1, ==16.0]

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.14]

---

• Check this box to trigger a request for Renovate to run again on this repository