Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency fastapi to >=0.128.1

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update ghcr.io/astral-sh/uv docker digest to 538e0b3
• chore(deps): update astral-sh/setup-uv action to v7.2.1
• chore(deps): update dependency ty to >=0.0.15
• fix(deps): update dependency cryptography to >=46.0.4
• chore(deps): update dependency ruff to >=0.15.0
• chore(deps): update docker/login-action action to v3.7.0
• fix(deps): update dependency mcp to >=1.26.0
• fix(deps): update dependency pydantic-ai to >=1.55.0
• fix(deps): update dependency rich to >=14.3.2
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update python docker tag

Detected Dependencies

dockerfile (1)

Dockerfile (4)

• python 3.13-slim → [Updates: 3.14-slim]
• python 3.13-slim → [Updates: 3.14-slim]
• ghcr.io/astral-sh/uv sha256:9a23023be68b2ed09750ae636228e903a54a05ea56ed03a934d00fe9fbeded4b → [Updates: undefined]
• python 3.13-slim → [Updates: 3.14-slim]

github-actions (9)

.github/workflows/claude-code-review.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anthropics/claude-code-action v1

.github/workflows/claude.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• anthropics/claude-code-action v1

.github/workflows/code-quality-cli.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.2.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611
• python 3.13 → [Updates: 3.14]

.github/workflows/code-quality-with-ollama.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.2.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611

.github/workflows/code-quality.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.2.1]
• arduino/setup-task v2.0.0@b91d5d2c96a56797b48ac1e0e89220bf64044611

.github/workflows/image-build.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/release-cli.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.2.1]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b

.github/workflows/release.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v3.7.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• sigstore/cosign-installer v4.0.0@faadad0cce49287aee09b3a48701e75088a2c6ad

.github/workflows/security.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.33.1@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8

pep621 (3)

cli/pyproject.toml (15)

• python >=3.13 → [Updates: >=3.14.3]
• click >=8.3.1
• httpx >=0.28.1
• docker >=7.1.0
• rich >=14.2.0 → [Updates: >=14.3.2]
• pydantic >=2.12.5
• pydantic-settings >=2.12.0
• pytest >=9.0.2
• pytest-asyncio >=1.3.0
• pytest-cov >=7.0.0
• respx >=0.22.0
• ruff >=0.14.14 → [Updates: >=0.15.0]
• ty >=0.0.13 → [Updates: >=0.0.15]
• bandit >=1.9.3
• pip-audit >=2.10.0

mcp-tef-models/pyproject.toml (2)

• python >=3.13 → [Updates: >=3.14.3]
• pydantic >=2.12.5

pyproject.toml (21)

• python >=3.13 → [Updates: >=3.14.3]
• fastapi >=0.128.0 → [Updates: >=0.128.1]
• pydantic >=2.12.5
• pydantic-ai >=1.46.0 → [Updates: >=1.55.0]
• aiosqlite >=0.22.1
• uvicorn >=0.40.0
• httpx >=0.28.1
• python-dotenv >=1.2.1
• structlog >=25.5.0
• dotenv >=0.9.9
• mcp >=1.25.0 → [Updates: >=1.26.0]
• fastembed >=0.7.4
• scikit-learn >=1.8.0
• cryptography >=46.0.3 → [Updates: >=46.0.4]
• pytest >=9.0.2
• pytest-cov >=7.0.0
• pytest-asyncio >=1.3.0
• ruff >=0.14.14 → [Updates: >=0.15.0]
• ty >=0.0.13 → [Updates: >=0.0.15]
• bandit >=1.9.3
• pip-audit >=2.10.0

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.14]

---

• Check this box to trigger a request for Renovate to run again on this repository