Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• ⬆️ Update codecov/codecov-action action to v6.0.2
• ⬆️ Update dependency prek to v0.4.4
• ⬆️ Update github/codeql-action action to v4.36.2
• ⬆️ Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.16
• ⬆️ Update codecov/codecov-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• ⬆️ Update dependency aiohttp to v3.14.0 [SECURITY]
• ⬆️ Pin dependencies
• ⬆️ Update actions-rust-lang/setup-rust-toolchain digest to 46268bd
• ⬆️ Update actions/checkout action to v6.0.3
• ⬆️ Update Rust crate log to v0.4.32
• ⬆️ Update Rust crate serde_json to v1.0.150
• ⬆️ Update astral-sh/setup-uv action to v8.2.0
• ⬆️ Update CodSpeedHQ/action action to v4.17.0
• ⬆️ Update dependency testfixtures to v12
• ⬆️ Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v3
• ⬆️ Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (1)

Cargo.toml (19)

• base64 0.22.1
• byteorder 1.5.0
• crc32fast 1.5.0
• image 0.25.10
• liblzma 0.4.6
• log 0.4.29 → [Updates: 0.4.29]
• once_cell 1.21.4
• png 0.18.1
• pyo3 0.28.3
• pyo3-log >=0.13.1
• svg 0.18.0
• zstd 0.13.3
• serde 1.0
• serde_json 1.0 → [Updates: 1.0]
• ordermap 1.2.0
• itertools 0.14.0
• rstest 0.26.1
• strum 0.28.0
• strum_macros 0.28.0

devcontainer (1)

.devcontainer.json (3)

• mcr.microsoft.com/devcontainers/python 3
• ghcr.io/devcontainers/features/docker-in-docker 2 → [Updates: 3]
• ghcr.io/devcontainers/features/rust 1

dockerfile (1)

ci/Dockerfile.alpine (1)

• python 3-alpine

github-actions (5)

.github/workflows/ci.yml (47)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions-rust-lang/setup-rust-toolchain v1.16@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7 → [Updates: v1.16.1, v1.16]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions-rust-lang/setup-rust-toolchain v1.16@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7 → [Updates: v1.16.1, v1.16]
• actions-rust-lang/rustfmt v1.1.2@4066006ec54a31931b9b1fddfd38f2fdf2d27143
• clechasseur/rs-clippy-check v6.0.4@1e16925ceec49b64803a6abc5f6bbe79044c3bd4
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• j178/prek-action v2.0.4@bdca6f102f98e2b4c7029491a53dfd366469e33d
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions-rust-lang/setup-rust-toolchain v1.16@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7 → [Updates: v1.16.1, v1.16]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• codecov/codecov-action v6.0.1@e79a6962e0d4c0c17b229090214935d2e33f8354 → [Updates: v6.0.2, v7.0.0]
• codecov/codecov-action v6.0.1@e79a6962e0d4c0c17b229090214935d2e33f8354 → [Updates: v6.0.2, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• PyO3/maturin-action v1.51.0@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• PyO3/maturin-action v1.51.0@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• CodSpeedHQ/action v4.15.1@3194d9a39c4d46684cb44bf7207fc56626aad8fd → [Updates: v4.17.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.2.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b
• sigstore/gh-action-sigstore-python v3.3.0@04cffa1d795717b140764e8b640de88853c92acc
• re-actors/alls-green v1.2.2@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

.github/workflows/cleanup-cache.yml

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• github/codeql-action v4.36.1@87557b9c84dde89fdd9b10e88954ac2f4248e463 → [Updates: v4.36.2]
• github/codeql-action v4.36.1@87557b9c84dde89fdd9b10e88954ac2f4248e463 → [Updates: v4.36.2]
• github/codeql-action v4.36.1@87557b9c84dde89fdd9b10e88954ac2f4248e463 → [Updates: v4.36.2]

.github/workflows/release-drafter.yml (1)

• release-drafter/release-drafter v7.3.1@693d20e7c1ce1a81d3a41962f85914253b518449

.github/workflows/scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.1@87557b9c84dde89fdd9b10e88954ac2f4248e463 → [Updates: v4.36.2]

pep621 (1)

pyproject.toml (24)

• python >=3.14.0
• aiohttp >=3.13.3,<4.0 → [Updates: >=3.13.3,<4.0]
• aiomqtt >=2.5.0,<3.0
• cachetools >=5.0.0,<8.0
• defusedxml >=0.7.1
• orjson >=3.11.3
• maturin ==1.13.3
• maturin-import-hook ==0.3.0
• mypy ==2.1.0
• prek ==0.4.3 → [Updates: ==0.4.4]
• types-cachetools >=5.5.0.20240820
• types-mock >=5.1.0.20240425
• pycountry ==26.2.16
• pytest-asyncio ==1.4.0
• pytest-codspeed >=3.1.2
• pytest-cov ==7.1.0
• pytest-docker-fixtures ==1.4.4
• pytest-timeout ==2.4.0
• pytest ==9.0.3
• testfixtures ==11.0.0 → [Updates: ==12.0.0]
• pytest-github-actions-annotate-failures ==0.4.0
• pytest-xdist ==3.8.0
• syrupy ==5.3.1
• maturin >=1.7,<2.0

pre-commit (1)

.pre-commit-config.yaml (6)

• astral-sh/ruff-pre-commit v0.15.15 → [Updates: v0.15.16]
• codespell-project/codespell v2.4.2
• prettier 3.8.3
• prettier-plugin-sort-json 4.2.0
• rbubley/mirrors-prettier v3.8.3
• adrienverge/yamllint v1.38.0

pyenv (1)

.python-version (1)

• python 3.14

---

• Check this box to trigger a request for Renovate to run again on this repository