Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update astral-sh/setup-uv action to v7.3.1
• chore(deps): update dependency bandit to >=1.9.4
• chore(deps): update dependency greenlet to >=3.3.2
• fix(deps): update dependency sqlalchemy to >=2.0.48
• chore(deps): update docker/login-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package anthropics/claude-code-action).

Files affected: .github/workflows/claude-code-review.yml, .github/workflows/claude.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency cyclonedx-bom to >=7.2.2
• chore(deps): update dependency rich to >=14.3.3
• chore(deps): update dependency ruff to >=0.15.4
• chore(deps): update dependency ty to >=0.0.20
• chore(deps): update dependency anthropic to >=0.84.0
• chore(deps): update dependency pydantic-ai to >=1.65.0
• chore(deps): update docker/build-push-action action to v6.19.2
• fix(deps): update dependency datamodel-code-generator to >=0.54.1
• fix(deps): update dependency uvicorn to >=0.41.0
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update python docker tag

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]

github-actions (11)

.github/workflows/claude-code-review.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anthropics/claude-code-action v1.0@ac1a3207f3f00b4a37e2f3a6f0935733c7c64651

.github/workflows/claude.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anthropics/claude-code-action v1.0@ac1a3207f3f00b4a37e2f3a6f0935733c7c64651

.github/workflows/code-quality.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.3.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/download-models.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.3.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/image-build.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]

.github/workflows/integration-tests.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• StacklokLabs/toolhive-actions v0.0.3@6a095f99aa2fd6cd92cf0bb94bdf509b99820c06
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.3.1]

.github/workflows/mcp-tef-integration-tests.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.3.1]
• StacklokLabs/toolhive-actions v0.0.3@6a095f99aa2fd6cd92cf0bb94bdf509b99820c06
• actions/upload-artifact v6@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7]

.github/workflows/offline-tests.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]

.github/workflows/release.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v6.19.2]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad

.github/workflows/releaser-helm-charts.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• helm/chart-releaser-action v1.7.0@cae68fefc6b5f367a0275617c9f83181ba54714f
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.0.0]
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad

.github/workflows/update-thv-models.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• StacklokLabs/toolhive-actions v0.0.3@6a095f99aa2fd6cd92cf0bb94bdf509b99820c06
• astral-sh/setup-uv v7.3.0@eac588ad8def6316056a12d4907a9d4d84ff7a3b → [Updates: v7.3.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• peter-evans/create-pull-request v8.1.0@c0f553fe549906ede9cf27b5156039d195d2ece0
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

helm-values (1)

helm/mcp-optimizer/values.yaml

pep621 (1)

pyproject.toml (33)

• python >=3.13 → [Updates: >=3.14.3]
• aiosqlite >=0.22.1
• alembic >=1.18.4
• click >=8.3.1
• datamodel-code-generator >=0.53.0 → [Updates: >=0.54.1]
• httpx >=0.28.1
• mcp >=1.26.0
• numpy >=2.4.2
• pydantic >=2.12.5
• fastembed >=0.7.4
• sqlalchemy >=2.0.46 → [Updates: >=2.0.48]
• structlog >=25.5.0
• uvicorn >=0.40.0 → [Updates: >=0.41.0]
• watchfiles >=1.1.1
• sqlite-vec >=0.1.6
• tiktoken >=0.12.0
• semver >=3.0.4
• greenlet >=3.3.0 → [Updates: >=3.3.2]
• pytest >=9.0.2
• pytest-asyncio >=1.3.0
• ruff >=0.15.0 → [Updates: >=0.15.4]
• ty >=0.0.15 → [Updates: >=0.0.20]
• pytest-cov >=7.0.0
• bandit >=1.9.3 → [Updates: >=1.9.4]
• pip-audit >=2.10.0
• cyclonedx-bom >=7.2.1 → [Updates: >=7.2.2]
• anthropic >=0.79.0 → [Updates: >=0.84.0]
• pydantic-ai >=1.57.0 → [Updates: >=1.65.0]
• matplotlib >=3.10.8
• rich >=14.3.2 → [Updates: >=14.3.3]
• optimum >=2.1.0
• fastembed >=0.7.4
• tiktoken >=0.12.0

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.14]

---

• Check this box to trigger a request for Renovate to run again on this repository