Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (5)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
pep621	appdirs	2020-05-11
pep621	mock	2025-03-03
pep621	mozilla-repo-urls	2025-06-03
pep621	redo	2024-07-17
pep621	slugid	2019-02-15

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update debian docker tag to v13
• fix(deps): update dependency @taskcluster/client to v103
• chore(deps): lock file maintenance (npm)
• chore(deps): lock file maintenance (pep621)
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update docker dependencies (debian, golang, node)
• chore(deps): update github actions (CodSpeedHQ/action, github/codeql-action, pypa/gh-action-pypi-publish)
• chore(deps): update pre-commit hooks (astral-sh/ruff-pre-commit, astral-sh/uv-pre-commit, codespell-project/codespell)
• chore(deps): update codspeedhq/action action to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (7)

taskcluster/docker/decision/Dockerfile

taskcluster/docker/fetch/Dockerfile (1)

• debian 12-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df → [Updates: 13-slim, 12-slim]

taskcluster/docker/index-task/Dockerfile (1)

• node 24-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd → [Updates: 24-alpine]

taskcluster/docker/python/Dockerfile

taskcluster/docker/run-task/Dockerfile (1)

• debian 13-slim@sha256:28de0877c2189802884ccd20f15ee41c203573bd87bb6b883f5f46362d24c5c2 → [Updates: 13-slim]

taskcluster/docker/skopeo/Dockerfile (3)

• golang 1.14@sha256:1a7173b5b9a3af3e29a5837e0b2027e1c438fd1b83bbee8f221355087ad416d6 → [Updates: 1.26]
• golang 1.14@sha256:1a7173b5b9a3af3e29a5837e0b2027e1c438fd1b83bbee8f221355087ad416d6 → [Updates: 1.26]
• debian 12-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df → [Updates: 13-slim, 12-slim]

template/{{cookiecutter.project_name}}/taskcluster/docker/linux/Dockerfile (1)

• alpine latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b

github-actions (3)

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.5]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.5]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.5]

.github/workflows/codspeed.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• CodSpeedHQ/action v4.18.1@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f → [Updates: v4.19.1, v5.0.2]

.github/workflows/pypi-publish.yml (12)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: v1.14.2]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: v1.14.2]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b → [Updates: v1.14.2]
• python 3.14
• python 3.14
• python 3.14

npm (1)

taskcluster/docker/index-task/package.json (2)

• @taskcluster/client 101.1.0 → [Updates: 103.0.1]
• node ^24

pep621 (3)

packages/pytest-taskgraph/pyproject.toml (1)

• pytest >=8.4.2

packages/sphinx-taskgraph/pyproject.toml (2)

• sphinx >=7.0.0
• voluptuous >=0.12.1

pyproject.toml (29)

• python >=3.9
• appdirs >=1.4
• cookiecutter ~=2.1
• json-e >=2.7
• mozilla-repo-urls >=0.1.1
• msgspec >=0.20.0
• PyYAML >=5.3.1
• redo >=2.0
• requests >=2.25
• slugid >=2.0
• taskcluster >=92.0
• taskcluster-urls >=11.0
• voluptuous >=0.12.1
• coverage >=7.10.7
• mock >=5.2.0
• pre-commit >=4.3.0
• pyright >=1.1.406
• pytest >=8.4.2
• pytest-codspeed >=3.2.0
• pytest-mock >=3.15.1
• responses >=0.25.8
• sphinx >=7.4.7
• sphinx-autobuild >=2024.04.16
• sphinx-argparse >=0.4.0
• sphinx-book-theme >=1.1.4
• sphinxcontrib-mermaid >=1.0.0
• zstandard >=0.25.0
• zstandard >=0.23.0
• orjson >=3

pre-commit (1)

.pre-commit-config.yaml (6)

• pre-commit/pre-commit-hooks v6.0.0
• astral-sh/ruff-pre-commit v0.15.20 → [Updates: v0.16.1]
• astral-sh/uv-pre-commit 0.11.26 → [Updates: 0.12.1]
• adrienverge/yamllint v1.38.0
• codespell-project/codespell v2.4.2 → [Updates: v2.4.3]
• compilerla/conventional-pre-commit v4.4.0

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository