This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.View this repository on the Mend.io Web Portal .
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
Update all non-major dependencies (coverage, jsonschema, lxml, numpy, pyjwt, python-json-logger, requests, semgrep, tomlkit, types-defusedxml, types-wtforms)
Update codecov/codecov-action action to v6
Update dependency chardet to v7
Update dependency django to v6
Update dependency isort to v8
Update dependency packaging to v26
Update dependency setuptools to v82
Update peter-evans/create-pull-request action to v8
Click on this checkbox to rebase all open PRs at once
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
dockerfile (1)
Dockerfile (1)
github-actions (8)
.github/workflows/autoformat-pixeebot-prs.yaml (4)
actions/checkout v6
actions/setup-python v6
stefanzweifel/git-auto-commit-action v7
python 3.14
.github/workflows/codemod_pygoat.yml (5)
actions/checkout v6
actions/setup-python v6
actions/checkout v6
ubuntu 24.04
python 3.14
.github/workflows/deploy_to_pypi.yml (4)
actions/setup-python v6
actions/checkout v6
ubuntu 24.04
python 3.14
.github/workflows/integration_test.yml (3)
actions/checkout v6
actions/setup-python v6
ubuntu 24.04
.github/workflows/lint.yml (7)
actions/checkout v6
actions/setup-python v6
actions/checkout v6
actions/setup-python v6
pre-commit/action v3.0.1
ubuntu 24.04
python 3.14
.github/workflows/pre-commit-autoupdate.yml (4)
actions/checkout v6
actions/setup-python v6
browniebroke/pre-commit-autoupdate-action main
peter-evans/create-pull-request v7 → [Updates: v8]
.github/workflows/sonar_pixee.yml (1)
pixee/upload-tool-results-action v2.5.0
.github/workflows/test.yml (12)
actions/checkout v6
actions/setup-python v6
actions/checkout v6
actions/setup-python v6
actions/checkout v6
actions/setup-python v6
codecov/codecov-action v5 → [Updates: v6]
ubuntu 24.04
python 3.14
ubuntu 24.04
python 3.14
ubuntu 24.04
poetry (1)
pyproject.toml (51)
boltons >=21.0,<25.1
GitPython <4
isort >=6.1,<7 → [Updates: >=8,<9]
libcst >=1.8,<1.9
packaging >=24.2,<25.1 → [Updates: >=26.1,<27]
pylint >=4,<4.1
python-json-logger ~=4.0.0 → [Updates: ~=4.1.0]
PyYAML ~=6.0.0
toml ~=0.10.2
tomlkit ~=0.13.0 → [Updates: ~=0.14.0]
wrapt ~=1.17.0 → [Updates: ~=2.1.2]
chardet ~=5.2.0 → [Updates: ~=7.4.3]
sarif-pydantic ~=0.6.1
setuptools ~=80.0 → [Updates: ~=82.0]
semgrep >=1.144,<1.145 → [Updates: >=1.160,<1.161]
azure-ai-inference >=1.0.0b1,<2.0
coverage >=7.12,<7.13 → [Updates: >=7.13,<7.14]
coverage-threshold ~=0.4
defusedxml ==0.7.1
types-defusedxml ==0.7.0.20250822 → [Updates: ==0.7.0.20260408]
flask-wtf ==1.2.2
types-wtforms ==3.2.1.20250809 → [Updates: ==3.2.1.20260408]
flask <4
httpx ~=0.27
jinja2 ~=3.1.2
jsonschema ~=4.25.0 → [Updates: ~=4.26.0]
lxml >=6.0.0,<6.1.0 → [Updates: >=6.1.0,<6.2.0]
openai >=1.109,<1.110 → [Updates: >=2.32,<2.33]
mock ==5.2.*
pre-commit <5
pyjwt ~=2.10.0 → [Updates: ~=2.12.1]
pytest >=8.2,<9 → [Updates: >=9,<10]
pytest-asyncio ~=1.0
pytest-cov >=7,<8
pytest-mock >=3.15,<3.16
pytest-randomly ==4.*
pytest-xdist ==3.*
requests ~=2.32.1 → [Updates: ~=2.33.1]
security ==1.3.1
types-mock ==5.2.*
django >=4,<6 → [Updates: >=6,<7]
numpy ~= 2.3.0 → [Updates: ~=2.4.4]
flask-wtf ~=1.2.0
fickling ~=0.1.0,>=0.1.3
graphql-server ~=3.0.0b9
unidiff >=0.7.5
semgrep >=1.144,<1.145 → [Updates: >=1.160,<1.161]
radon ==6.0.*
xenon ==0.9.*
openai >=1.109,<1.110 → [Updates: >=2.32,<2.33]
azure-ai-inference >=1.0.0b1,<2.0
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
coverage,jsonschema,lxml,numpy,pyjwt,python-json-logger,requests,semgrep,tomlkit,types-defusedxml,types-wtforms)PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
Detected Dependencies
dockerfile (1)
github-actions (8)
poetry (1)