diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 22bfa225..85993df1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,7 @@
 version: 2
 updates:
   # Python requirements.txt setup.cfg
-  - package-ecosystem: "pip"
+  - package-ecosystem: "uv"
     directory: "/"
     schedule:
       interval: "weekly"
diff --git a/aiopenapi3/cli.py b/aiopenapi3/cli.py
index 66f13df2..0c15ffee 100644
--- a/aiopenapi3/cli.py
+++ b/aiopenapi3/cli.py
@@ -191,6 +191,7 @@ def cmd_convert(args: argparse.Namespace) -> None:
     cmd.add_argument("-p", "--parameters")
     cmd.add_argument("-d", "--data")
     cmd.add_argument("-f", "--format")
+    cmd.add_argument("-t", "--timeout", type=int, default=15)
 
     def cmd_call(args: argparse.Namespace) -> None:
         loader = loader_prepare(args, session_factory)
@@ -198,7 +199,7 @@ def cmd_call(args: argparse.Namespace) -> None:
         def prepare_arg(value):
             if value:
                 if value[0] == "@":
-                    with Path(value[1:]).open("rt") as f:
+                    with Path(value[1:]).expanduser().open("rt") as f:
                         data = json.load(f)
                 else:
                     data = json.loads(value)
@@ -311,7 +312,9 @@ def log_(s):
         tracemalloc.start()
 
     def session_factory(*args_, **kwargs) -> httpx.Client:
-        return httpx.Client(*args_, verify=args.disable_ssl_validation is False, **kwargs)
+        return httpx.Client(
+            *args_, verify=args.disable_ssl_validation is False, timeout=httpx.Timeout(args.timeout), **kwargs
+        )
 
     if args.func:
         args.func(args)