Dependency Dashboard

[github-actions]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github actions (google/osv-scanner-action, python, renovatebot/github-action, softprops/action-gh-release)
• chore(deps): update python docker tag to v3.14
• fix(deps): update python dependencies (numpy, scipy, typer)
• chore(deps): update github actions (major) (actions/checkout, actions/github-script, astral-sh/setup-uv, gitleaks/gitleaks-action, postgres)
• fix(deps): update dependency aio-pika to v10
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• ghcr.io/devcontainers/features/common-utils 2

dockerfile (2)

Dockerfile (1)

• python 3.12-slim → [Updates: 3.14-slim]

Dockerfile.dev (2)

• python 3.12 → [Updates: 3.14]
• python 3.12-slim → [Updates: 3.14-slim]

github-actions (10)

.github/workflows/_check.yml (1)

• actions/github-script v8 → [Updates: v9]

.github/workflows/_dist.yml (3)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/upload-artifact v7

.github/workflows/_schema_drift.yml (3)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• postgres 15 → [Updates: 18]

.github/workflows/_test.yml (2)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]

.github/workflows/build_win_smartem_agent.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• python 3.12 → [Updates: 3.14]

.github/workflows/leaked-secrets-scan.yml (5)

• actions/checkout v6 → [Updates: v7]
• gitleaks/gitleaks-action v2 → [Updates: v3]
• actions/checkout v6 → [Updates: v7]
• github/codeql-action v4
• actions/upload-artifact v7

.github/workflows/osv-scanner.yml (2)

• google/osv-scanner-action v2.3.3 → [Updates: v2.3.8]
• google/osv-scanner-action v2.3.3 → [Updates: v2.3.8]

.github/workflows/publish-openapi-spec.yml (2)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]

.github/workflows/release-smartem-decisions.yml (29)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v7 → [Updates: v8.3.2]
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• actions/setup-python v6
• actions/upload-artifact v7
• actions/download-artifact v8
• actions/download-artifact v8
• pypa/gh-action-pypi-publish release/v1
• actions/checkout v6 → [Updates: v7]
• actions/download-artifact v8
• actions/download-artifact v8
• actions/download-artifact v8
• softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda → [Updates: v3.0.1]
• actions/checkout v6 → [Updates: v7]
• docker/setup-buildx-action v4
• docker/login-action v4
• docker/metadata-action v6
• docker/build-push-action v7
• python 3.12 → [Updates: 3.14]

.github/workflows/renovate.yml (2)

• actions/checkout v6 → [Updates: v7]
• renovatebot/github-action v46.1.14 → [Updates: v46.1.18]

pep621 (1)

pyproject.toml (30)

• python >=3.12
• pytest-asyncio >=0.23.0,<2.0.0
• pydantic >=2.11.7,<3.0.0
• httpx >=0.27.0,<1.0.0
• requests >=2.32.0,<3.0.0
• sseclient-py >=1.8.0,<2.0.0
• fastapi >=0.116.1,<1.0.0
• uvicorn >=0.30.0,<1.0.0
• sqlalchemy >=2.0.0,<3.0.0
• psycopg2-binary >=2.9.10,<3.0.0
• sqlmodel >=0.0.24,<1.0.0
• alembic >=1.13.0,<2.0.0
• numpy >=2.0.0,<2.5.0 → [Updates: >=2.5.1,<2.6.0]
• scipy >=1.0.0,<1.18.0 → [Updates: >=1.18.0,<1.19.0]
• python-dotenv ==1.2.2
• typer ==0.24.1 → [Updates: ==0.26.8]
• aio-pika >=9.4.0,<10.0.0 → [Updates: >=10.0.1,<10.1.0]
• fastapi >=0.116.1,<1.0.0
• uvicorn >=0.30.0,<1.0.0
• sqlalchemy >=2.0.0,<3.0.0
• asyncpg >=0.30.0,<1.0.0
• psycopg2-binary >=2.9.10,<3.0.0
• sqlmodel >=0.0.24,<1.0.0
• alembic >=1.13.0,<2.0.0
• sse-starlette >=2.1.0,<4.0.0
• pyjwt >=2.9.0,<3.0.0
• lxml >=5.0.0,<7.0.0
• watchdog >=4.0.0,<7.0.0
• setuptools >=64
• setuptools_scm >=8

renovate-config (1)

renovate.json