chore:

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• actions/create_unique_testpypi_version/Dockerfile (dockerfile)
• actions/find_unreleased_changelog_items/Dockerfile (dockerfile)
• actions/update_development_dependencies/Dockerfile (dockerfile)
• .github/workflows/_reusable-check-api-for-breaking-changes.yml (github-actions)
• .github/workflows/_reusable-codeql-analysis.yml (github-actions)
• .github/workflows/_reusable-enforce-community-standards.yml (github-actions)
• .github/workflows/_reusable-package-build.yml (github-actions)
• .github/workflows/_reusable-package-release.yml (github-actions)
• .github/workflows/_reusable-package-testpypi.yml (github-actions)
• .github/workflows/_reusable-publish-api-comparison.yml (github-actions)
• .github/workflows/_reusable-publish-test-results.yml (github-actions)
• .github/workflows/_reusable-sbom-scan.yml (github-actions)
• .github/workflows/_reusable-test-code.yml (github-actions)
• .github/workflows/_reusable-test-docs.yml (github-actions)
• .github/workflows/_reusable-update-python-and-pre-commit-dependencies.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/test-actions.yml (github-actions)
• actions/fetch_pr_number/action.yml (github-actions)
• actions/create_unique_testpypi_version/requirements.txt (pip_requirements)
• actions/update_development_dependencies/requirements.txt (pip_requirements)
• pyproject.toml (poetry)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin Docker digests.
• Pin github-action digests.
• Pin dependency versions for devDependencies.
• Preset with best practices from the Renovate maintainers. Recommended for advanced users, who want to follow our best practices.
• Group download-artifact and upload-artifact major updates together.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 19 Pull Requests:

chore(docker-deps): update python:3.12-alpine docker digest to aeff643 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/docker-deps/python-3.12-alpine
• Merge into: main
• Upgrade python to sha256:aeff64320ffb81056a2afae9d627875c5ba7d303fb40d6c0a43ee49d8f82641c

chore(gh-actions-deps): update actions/checkout action to v4.1.7 in all dependant reusable workflows

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to 692973e3d937129bcbf40652eb9f2f61becf3332

chore(gh-actions-deps): update anchore/scan-action action to v4.1.2 in all dependant reusable workflows

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/anchore-scan-action-4.x
• Merge into: main
• Upgrade anchore/scan-action to 64a33b277ea7a1215a3c142735a1091341939ff5

chore(gh-actions-deps): update dev workflow dependencies

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/dev-workflow-dependencies
• Merge into: main
• Upgrade actions/checkout to 692973e3d937129bcbf40652eb9f2f61becf3332
• Upgrade re-actors/alls-green to 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

chore(gh-actions-deps): update python-semantic-release dependencies to v9.8.8 in all dependant reusable workflows

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/python-semantic-release-dependencies
• Merge into: main
• Upgrade python-semantic-release/python-semantic-release to fe6b271e942115b528c85e42bc19611b01dcea59
• Upgrade python-semantic-release/upload-to-gh-release to fa2bbbf8e61069551abd513fdc5627e14c8637c7

chore(python-deps): update dependency cffi to v1.17.1 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/cffi-1.x
• Merge into: main
• Upgrade cffi to ==1.17.1

chore(python-deps): update dependency cryptography to v43.0.1 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/cryptography-43.x
• Merge into: main
• Upgrade cryptography to ==43.0.1

chore(python-deps): update dependency pyright to v1.1.379 for dev

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/pyright-1.x
• Merge into: main
• Upgrade pyright to 1.1.379

chore(python-deps): update dependency rapidfuzz to v3.9.7 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/rapidfuzz-3.x
• Merge into: main
• Upgrade rapidfuzz to ==3.9.7

chore(gh-actions-deps): update actions/setup-python action to v5.2.0 in all dependant reusable workflows

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/actions-setup-python-5.x
• Merge into: main
• Upgrade actions/setup-python to f677139bbe7f9c59b41e40162b753c062f5d49a3

chore(gh-actions-deps): update pypa/gh-action-pypi-publish action to v1.10.1 in all dependant reusable workflows

• Schedule: ["at any time"]
• Branch name: renovate/gh-actions-deps/pypa-gh-action-pypi-publish-1.x
• Merge into: main
• Upgrade pypa/gh-action-pypi-publish to 0ab0b79471669eb3a4d647e625009c62f9f3b241

chore(python-deps): update dependency certifi to v2024.8.30 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/certifi-2024.x
• Merge into: main
• Upgrade certifi to ==2024.8.30

chore(python-deps): update dependency dulwich to v0.22.1 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/dulwich-0.x
• Merge into: main
• Upgrade dulwich to ==0.22.1

chore(python-deps): update dependency poetry-plugin-export to v1.8.0 for actions/update_development_dependencies and dev

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/poetry-plugin-export-1.x
• Merge into: main
• Upgrade poetry-plugin-export to 1.8.0

chore(python-deps): update dependency pydantic-core to v2.23.1 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/pydantic-core-2.x
• Merge into: main
• Upgrade pydantic-core to ==2.23.1

chore(python-deps): update dependency pypi-simple to v1.6.0 for actions/create_unique_testpypi_version and actions/update_development_dependencies

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/pypi-simple-1.x
• Merge into: main
• Upgrade pypi-simple to 1.6.0
• Upgrade pypi-simple to ==1.6.0

chore(python-deps): update dependency setuptools to v74.1.1 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/setuptools-74.x
• Merge into: main
• Upgrade setuptools to ==74.1.1

chore(python-deps): update dependency codespell to v2 for docs

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/codespell-2.x
• Merge into: main
• Upgrade codespell to ^2.0.0

chore(python-deps): update dependency keyring to v25 in all dependant actions

• Schedule: ["at any time"]
• Branch name: renovate/python-deps/keyring-25.x
• Merge into: main
• Upgrade keyring to ==25.3.0

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results (windows)

path	passed	subtotal
tests\test_bump_version_in_files.py	5	5
tests\test_create_unique_testpypi_version.py	7	7
tests\test_find_unreleased_changelog_items.py	3	3
tests\test_update_development_dependencies.py	13	13
TOTAL	28	28

Link to workflow run

[github-actions]

Test Results (ubuntu)

path	passed	subtotal
tests/test_bump_version_in_files.py	5	5
tests/test_create_unique_testpypi_version.py	7	7
tests/test_find_unreleased_changelog_items.py	3	3
tests/test_update_development_dependencies.py	13	13
TOTAL	28	28

Link to workflow run