Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (8)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	szenius/set-timezone	2024-05-07
pip_requirements	async-timeout	2024-11-06
pip_requirements	asynctest	2019-05-14
pip_requirements	freezegun	2025-08-09
pip_requirements	pre-commit-hooks	2025-08-09
pip_requirements	pytest-snapshot	2022-04-23

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update python:3.14-alpine Docker digest to 05b2b8b
• Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v4
• Update mcr.microsoft.com/devcontainers/python Docker tag to v3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update home-assistant/actions digest to a7c616c
• Update dependency pre-commit to v4.6.2
• Update dependency ruff to v0.16.2
• Update dependency awscli to v1.46.0
• Update dependency homeassistant to v2026.8.1
• Update dependency setuptools to v84
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency python to 3.14
• Update dependency pycares to v5

Vulnerabilities

Important

11/11 CVEs have Renovate fixes.

pip_requirements

requirements_core_min.txt

homeassistant

• GHSA-46j8-vpx8-6p72 (fixed in >= 2026.01)
• GHSA-5hxg-r395-fqxx (fixed in >= 2026.6.0)
• GHSA-mq77-rv97-285m (fixed in >= 2025.10.2)
• GHSA-pp3g-xmm4-5cw9 (fixed in >= 2025.8.0)
• GHSA-r584-6283-p7xc (fixed in >= 2026.01)
• GHSA-x84v-g949-293w (fixed in >= 2026.6.0)
• PYSEC-2026-1453 (fixed in >= 2025.10.2)
• PYSEC-2026-1454 (fixed in >= 2025.8.0)
• PYSEC-2026-241 (fixed in >= 2026.6.0)
• PYSEC-2026-2516 (fixed in >= 2026.01)
• PYSEC-2026-2517 (fixed in >= 2026.01)

Detected Dependencies

devcontainer (1)

.devcontainer.json (6)

• mcr.microsoft.com/devcontainers/python 1-3.13 → [Updates: 3-3.13]
• ghcr.io/anthropics/devcontainer-features/claude-code 1.0
• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 4]
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/node 2
• ghcr.io/devcontainers/features/rust 1

dockerfile (1)

action/Dockerfile (1)

• python 3.14-alpine@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92 → [Updates: 3.14-alpine]

github-actions (9)

.github/workflows/action-container.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/generate-hacs-data.yml (11)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• python 3.14
• python 3.14

.github/workflows/lint.yaml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• python 3.14

.github/workflows/lock.yml (1)

• dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c

.github/workflows/publish.yml (5)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v3.0.2@3d0d9888cb7fd7b750713d6e236d1fcb99157228
• python 3.14

.github/workflows/pull_requests_labels.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ludeeus/action-require-labels 2.0.0@be19cd7f04c6fad46a85336f9e9cebdf961807bb

.github/workflows/pytest.yml (7)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• szenius/set-timezone v2.0@1f9716b0f7120e344f0c62bb7b1ee98819aefd42
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• szenius/set-timezone v2.0@1f9716b0f7120e344f0c62bb7b1ee98819aefd42
• python 3.13 → [Updates: 3.14]

.github/workflows/stale.yml (1)

• actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93

.github/workflows/validate.yml (9)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• home-assistant/actions master@e3fb68ebda13d88a0d695082f471ba2c83d025fb → [Updates: master]
• hacs/action main@1ebf01c408f29afcb6406bd431bc98fd8cbb15aa
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.14

homeassistant-manifest (1)

custom_components/hacs/manifest.json (1)

• aiogithubapi >=22.10.1

pip_requirements (6)

requirements_action.txt (2)

• aiogithubapi ==26.0.0
• homeassistant ==2026.7.4 → [Updates: ==2026.8.1]

requirements_base.txt (6)

• aiogithubapi >=21.11.0
• aiohttp >=3.8.3,<4.0
• async-timeout >=4.0.2
• asynctest ==0.13.0
• colorlog ==6.12.0
• setuptools ==83.0.0 → [Updates: ==84.0.0]

requirements_core_min.txt

requirements_generate_data.txt (2)

• awscli ==1.45.61 → [Updates: ==1.46.0]
• homeassistant ==2026.7.4 → [Updates: ==2026.8.1]

requirements_lint.txt (7)

• codespell ==2.4.3
• isort ==8.0.1
• pre-commit ==4.6.1 → [Updates: ==4.6.2]
• pre-commit-hooks ==6.0.0
• pyupgrade ==3.21.2
• ruff ==0.16.1 → [Updates: ==0.16.2]
• vulture ==2.16

requirements_test.txt (10)

• asynctest ==0.13.0
• freezegun ==1.5.5
• josepy <3
• pycares <5 → [Updates: <6]
• pytest ==9.1.1
• pytest-asyncio ==1.4.0
• pytest-cov ==7.1.0
• pytest-snapshot ==0.9.0
• pytest-socket ==0.8.0
• RestrictedPython ==8.4

regex (1)

custom_components/hacs/validate/license.py (1)

• spdx/license-list-data v3.28.0@c4a7237ec8f4654e867546f9f409749300f1bf4c

---

• Check this box to trigger a request for Renovate to run again on this repository