Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update all non-major dependencies (flask-wtf, jsonschema, lxml, pyjwt, python-json-logger, requests, semgrep, tomlkit, types-defusedxml, types-wtforms)
• Update actions/checkout action to v7
• Update codecov/codecov-action action to v7
• Update dependency boltons to v26
• Update dependency chardet to v7
• Update dependency django to v6
• Update dependency isort to v8
• Update dependency packaging to v26
• Update dependency setuptools to v83
• Update peter-evans/create-pull-request action to v8
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency openai to v2
• Update dependency pytest to v9
• Update dependency wrapt to v2

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• python 3.14

github-actions (8)

.github/workflows/autoformat-pixeebot-prs.yaml (4)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• stefanzweifel/git-auto-commit-action v7
• python 3.14

.github/workflows/codemod_pygoat.yml (5)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• actions/checkout v6 → [Updates: v7]
• ubuntu 24.04
• python 3.14

.github/workflows/deploy_to_pypi.yml (4)

• actions/setup-python v6
• actions/checkout v6 → [Updates: v7]
• ubuntu 24.04
• python 3.14

.github/workflows/integration_test.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• ubuntu 24.04

.github/workflows/lint.yml (7)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• pre-commit/action v3.0.1
• ubuntu 24.04
• python 3.14

.github/workflows/pre-commit-autoupdate.yml (4)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• browniebroke/pre-commit-autoupdate-action main
• peter-evans/create-pull-request v7 → [Updates: v8]

.github/workflows/sonar_pixee.yml (1)

• pixee/upload-tool-results-action v2.5.0

.github/workflows/test.yml (12)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• codecov/codecov-action v5 → [Updates: v7]
• ubuntu 24.04
• python 3.14
• ubuntu 24.04
• python 3.14
• ubuntu 24.04

poetry (1)

pyproject.toml (45)

• boltons >=21.0,<25.1 → [Updates: >=26,<27]
• GitPython <4
• isort >=6.1,<7 → [Updates: >=8,<9]
• libcst >=1.8,<1.9
• packaging >=24.2,<25.1 → [Updates: >=26.2,<27]
• pylint >=4,<4.1
• python-json-logger ~=4.0.0 → [Updates: ~=4.1.0]
• PyYAML ~=6.0.0
• toml ~=0.10.2
• tomlkit ~=0.13.0 → [Updates: ~=0.15.0]
• wrapt ~=1.17.0 → [Updates: ~=2.2.2]
• chardet ~=5.2.0 → [Updates: ~=7.4.3]
• sarif-pydantic ~=0.6.1
• setuptools ~=80.0 → [Updates: ~=83.0]
• semgrep >=1.144,<1.145 → [Updates: >=1.168,<1.169]
• azure-ai-inference >=1.0.0b1,<2.0
• coverage-threshold ~=0.4
• defusedxml ==0.7.1
• types-defusedxml ==0.7.0.20250822 → [Updates: ==0.7.0.20260504]
• flask-wtf ~=1.2.0 → [Updates: ~=1.3.0]
• types-wtforms ==3.2.1.20250809 → [Updates: ==3.2.1.20260518]
• flask <4
• httpx ~=0.27
• jinja2 ~=3.1.2
• jsonschema ~=4.25.0 → [Updates: ~=4.26.0]
• lxml >=6.0.0,<6.1.0 → [Updates: >=6.1.1,<6.2.0]
• openai >=1.109,<1.110 → [Updates: >=2.44,<2.45]
• mock ==5.2.*
• pre-commit <5
• pyjwt ~=2.10.0 → [Updates: ~=2.13.0]
• pytest >=8.2,<9 → [Updates: >=9.1,<10]
• pytest-asyncio ~=1.0
• pytest-cov >=7,<8
• pytest-mock >=3.15,<3.16
• pytest-randomly ==4.*
• pytest-xdist ==3.*
• requests ~=2.32.1 → [Updates: ~=2.34.2]
• security ==1.3.1
• types-mock ==5.2.*
• django >=4,<6 → [Updates: >=6,<7]
• fickling ~=0.1.0,>=0.1.3
• graphql-server ~=3.0.0b9
• unidiff >=0.7.5
• radon ==6.0.*
• xenon ==0.9.*

---

• Check this box to trigger a request for Renovate to run again on this repository