Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency pytest-randomly to v5
• Update dependency setuptools to v84
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update all non-major dependencies (coverage, libcst, python-json-logger, requests, semgrep, tomlkit, types-defusedxml, types-wtforms)
• Update actions/checkout action to v7
• Update actions/setup-python action to v7
• Update codecov/codecov-action action to v7
• Update dependency boltons to v26
• Update dependency chardet to v7
• Update dependency django to v6
• Update dependency openai to v3
• Update dependency packaging to v26
• Update peter-evans/create-pull-request action to v8
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency wrapt to v2

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• python 3.14

github-actions (8)

.github/workflows/autoformat-pixeebot-prs.yaml (4)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• stefanzweifel/git-auto-commit-action v7
• python 3.14

.github/workflows/codemod_pygoat.yml (5)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• ubuntu 24.04
• python 3.14

.github/workflows/deploy_to_pypi.yml (4)

• actions/setup-python v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• ubuntu 24.04
• python 3.14

.github/workflows/integration_test.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• ubuntu 24.04

.github/workflows/lint.yml (7)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• pre-commit/action v3.0.1
• ubuntu 24.04
• python 3.14

.github/workflows/pre-commit-autoupdate.yml (4)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• browniebroke/pre-commit-autoupdate-action main
• peter-evans/create-pull-request v7 → [Updates: v8]

.github/workflows/sonar_pixee.yml (1)

• pixee/upload-tool-results-action v2.5.0

.github/workflows/test.yml (12)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• codecov/codecov-action v5 → [Updates: v7]
• ubuntu 24.04
• python 3.14
• ubuntu 24.04
• python 3.14
• ubuntu 24.04

poetry (1)

pyproject.toml (40)

• boltons >=21.0,<25.1 → [Updates: >=26.2,<27]
• GitPython <4
• libcst >=1.8,<1.9 → [Updates: >=1.9,<1.10]
• packaging >=24.2,<25.1 → [Updates: >=26.3,<27]
• pylint >=4,<4.1
• python-json-logger ~=4.0.0 → [Updates: ~=4.2.0]
• PyYAML ~=6.0.0
• toml ~=0.10.2
• tomlkit ~=0.13.0 → [Updates: ~=0.15.1]
• wrapt ~=1.17.0 → [Updates: ~=2.4.0]
• chardet ~=5.2.0 → [Updates: ~=7.6.0]
• sarif-pydantic ~=0.6.1
• setuptools ~=80.0 → [Updates: ~=84.0]
• semgrep >=1.144,<1.145 → [Updates: >=1.176,<1.177]
• azure-ai-inference >=1.0.0b1,<2.0
• coverage >=7.12,<7.13 → [Updates: >=7.16,<7.17]
• coverage-threshold ~=0.4
• defusedxml ==0.7.1
• types-defusedxml ==0.7.0.20250822 → [Updates: ==0.7.0.20260504]
• types-wtforms ==3.2.1.20250809 → [Updates: ==3.2.1.20260518]
• flask <4
• httpx ~=0.27
• jinja2 ~=3.1.2
• openai >=1.109,<1.110 → [Updates: >=3.8,<3.9]
• mock ==5.2.*
• pre-commit <5
• pytest-asyncio ~=1.0
• pytest-cov >=7,<8
• pytest-mock >=3.15,<3.16
• pytest-randomly ==4.* → [Updates: ==5.*]
• pytest-xdist ==3.*
• requests ~=2.32.1 → [Updates: ~=2.34.2]
• security ==1.3.1
• types-mock ==5.2.*
• django >=4,<6 → [Updates: >=6,<7]
• fickling ~=0.1.0,>=0.1.3
• graphql-server ~=3.0.0b9
• unidiff >=0.7.5
• radon ==6.0.*
• xenon ==0.9.*

---

• Check this box to trigger a request for Renovate to run again on this repository