Dependency Dashboard

[anaconda-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v6.0.3
• chore(deps): update pre-commit hook codespell-project/codespell to v2.4.3
• chore(deps): update actions/checkout action to v7
• chore(deps): update astral-sh/setup-uv action to v8
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency pytest to v9.0.3 [security]
• chore(deps): pin pypa/gh-action-pypi-publish action to cef2210
• chore(deps): update actions/download-artifact action to v8.0.1
• chore(deps): update actions/upload-artifact action to v7.0.1
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22
• chore(deps): update pre-commit hook pycqa/docformatter to v1.7.8
• chore(deps): update astral-sh/setup-uv action to v7.6.0
• chore(deps): update dependency uv_build to >=0.11.29, <0.12
• chore(deps): update softprops/action-gh-release action to v2.6.2
• chore(deps): update webfactory/ssh-agent action to v0.10.0
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

2/2 CVEs have Renovate fixes.

pep621

pyproject.toml

pytest

• GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)
• PYSEC-2026-1845 (fixed in >= 9.0.3)

Detected Dependencies

github-actions (2)

.github/workflows/release.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0, v8.3.2]
• pypa/gh-action-pypi-publish release/v1 → [Updates: release/v1]
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• actions/download-artifact v8.0.0@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 → [Updates: v8.0.1]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.2, v3.0.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0, v8.3.2]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]

.github/workflows/test.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0, v8.3.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• astral-sh/setup-uv v7.3.1@5a095e7a2014a4212f075830d4f7277575a9d098 → [Updates: v7.6.0, v8.3.2]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd

pep621 (1)

pyproject.toml (9)

• python >= 3.10
• briefcase >= 0.4.1
• pythonanywhere-core >= 0.3.0
• pytest >= 9.0 → [Updates: >= 9.0]
• pytest-cov >= 7.0
• pytest-mock >= 3.10
• responses >= 0.25
• ruff >= 0.11
• uv_build >=0.10.7, <0.11 → [Updates: >=0.11.29, <0.12]

pre-commit (1)

.pre-commit-config.yaml (4)

• pre-commit/pre-commit-hooks v6.0.0
• PyCQA/docformatter v1.7.7 → [Updates: v1.7.8]
• astral-sh/ruff-pre-commit v0.15.5 → [Updates: v0.15.22]
• codespell-project/codespell v2.4.2 → [Updates: v2.4.3]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository