Dependency Dashboard

[anaconda-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin pypa/gh-action-pypi-publish action to cef2210
• chore(deps): update dependency pytest-cov to v7.1.0
• chore(deps): update softprops/action-gh-release action to v2.6.2
• chore(deps): update webfactory/ssh-agent action to v0.10.0
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency pytest to v9.0.3 [security]
• chore(deps): update dependency requests to v2.33.0 [security]
• chore(deps): update actions/cache action to v5.0.5
• chore(deps): update actions/checkout action to v6.0.2
• chore(deps): update actions/setup-python action to v6.2.0
• chore(deps): update dependency python to 3.14
• chore(deps): update dependency responses to ^0.26.0
• chore(deps): update dependency sphinx-rtd-theme to v3.1.0
• chore(deps): update dependency sphinx to v9
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

2/2 CVEs have Renovate fixes.

poetry

pyproject.toml

requests

• GHSA-gc5v-m9x4-r6x2 (fixed in >= 2.33.0)

pytest

• GHSA-6w46-j5rx-g56g (fixed in >= 9.0.3)

Detected Dependencies

github-actions (2)

.github/workflows/release.yml (16)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• snok/install-poetry v1.4.1@76e04a911780d5b312d89783f7b1cd627778900a
• actions/cache v5.0.2@8b402f58fbc84540c8b491a91e594a4576fec3d7 → [Updates: v5.0.5]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• pypa/gh-action-pypi-publish release/v1 → [Updates: release/v1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.1]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]
• snok/install-poetry v1.4.1@76e04a911780d5b312d89783f7b1cd627778900a
• actions/cache v5.0.2@8b402f58fbc84540c8b491a91e594a4576fec3d7 → [Updates: v5.0.5]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b → [Updates: v2.6.2, v3.0.0]
• python 3.13 → [Updates: 3.14]
• python 3.13 → [Updates: 3.14]

.github/workflows/test.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 → [Updates: v6.2.0]

poetry (1)

pyproject.toml (11)

• poetry-core >=1.0.0
• python ^3.10
• python-dateutil ^2.8.2
• requests ^2.30.0 → [Updates: ^2.30.0]
• typing_extensions ^4.5.0
• pytest ^9.0.0 → [Updates: ^9.0.0]
• pytest-cov ^7.0.0 → [Updates: ^7.0.0]
• pytest-mock ^3.10.0
• responses ^0.25.0 → [Updates: ^0.26.0]
• sphinx 7.4.7 → [Updates: 9.1.0]
• sphinx-rtd-theme ^3.0.0 → [Updates: ^3.0.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository