Dependency Dashboard

[williaby]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Failed to assign reviewer

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): Update

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package actions/attest-build-provenance).

Files affected: .github/workflows/slsa-provenance.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update GitHub Actions (ByronWilliamsCPA/.github, actions/checkout, github/codeql-action, step-security/harden-runner)
• chore(deps)!: Update GitHub Actions (major) (actions/attest-build-provenance, actions/checkout, actions/dependency-review-action, actions/download-artifact, actions/setup-python, actions/upload-artifact, astral-sh/setup-uv, codecov/codecov-action, dorny/paths-filter, github/codeql-action, google-github-actions/auth, google-github-actions/setup-gcloud, python-semantic-release/python-semantic-release)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (19)

.github/workflows/ci.yml (13)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• dorny/paths-filter v3.0.3@d1c1ffe0248fe513906c8e24db8ea791d46f8590 → [Updates: v4.0.1]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• codecov/codecov-action v4.6.0@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 → [Updates: v6.0.1]

.github/workflows/codecov.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/codeql.yml (7)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.2.0]
• astral-sh/setup-uv v4.2.0@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• github/codeql-action v3.35.3@0daab03d71ff584ef619d027a3fd9146679c5d84 → [Updates: v3.36.0, v4.36.0]
• github/codeql-action v3.35.3@0daab03d71ff584ef619d027a3fd9146679c5d84 → [Updates: v3.36.0, v4.36.0]
• python 3.12

.github/workflows/coverage.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/dependency-review.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/docs.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/fips-compatibility.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/mutation-testing.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/pr-validation.yml (4)

• ByronWilliamsCPA/.github main@e8fc83c98c2971ad1ece71573d28171463e30c16 → [Updates: main]
• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v6.8.0@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v8.1.0]

.github/workflows/publish-artifact-registry.yml (5)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6]
• google-github-actions/auth v2@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3]
• google-github-actions/setup-gcloud v2@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• astral-sh/uv ${{ env.UV_VERSION }}

.github/workflows/python-compatibility.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/qlty.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/release.yml (5)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• python-semantic-release/python-semantic-release v9.21.1@0dc72ac9058a62054a45f6344c83a423d7f906a8 → [Updates: v10.5.3]

.github/workflows/reuse.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/sbom.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/scorecard.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/security-analysis.yml (1)

• ByronWilliamsCPA/.github main → [Updates: main]

.github/workflows/slsa-provenance.yml (8)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.4]
• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.2]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v6.2.0]
• astral-sh/setup-uv v4@38f3f104447c67c051c4a08e39b64a148898af3a → [Updates: v8.1.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/attest-build-provenance v1.5.2@def455f501ff622b3e6c35f7b7d1c8712b81d7e1 → [Updates: v4.1.0]
• ByronWilliamsCPA/.github main → [Updates: main]
• python 3.12

.github/workflows/sonarcloud.yml (1)

• ByronWilliamsCPA/.github main@e8fc83c98c2971ad1ece71573d28171463e30c16 → [Updates: main]

poetry (5)

packages/cloudflare-api/pyproject.toml (9)

• cloudflare >=4.0.0
• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• httpx >=0.25.0
• pyyaml >=6.0.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0
• respx >=0.21.0

packages/cloudflare-auth/pyproject.toml (14)

• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• pyjwt >=2.8.0
• cryptography >=41.0.0
• httpx >=0.25.0
• redis >=5.0.0
• fastapi >=0.100.0
• starlette >=0.27.0
• redis >=5.0.0
• fastapi >=0.100.0
• starlette >=0.27.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0

packages/gcs-utilities/pyproject.toml (6)

• google-cloud-storage >=2.10.0
• google-auth >=2.0.0
• aiofiles >=23.0.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0

packages/gemini-image/pyproject.toml (4)

• google-genai >=1.0.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0

pyproject.toml (44)

• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• structlog >=23.1.0
• rich >=13.5.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0
• pytest-xdist >=3.3.0
• hypothesis >=6.82.0
• ruff >=0.9.0
• basedpyright >=1.18.0
• bandit >=1.7.0
• vulture >=2.11
• pip-audit >=2.7.0
• darglint >=1.8.1
• pre-commit >=3.3.0
• mkdocs >=1.6.0
• mkdocs-material >=9.5.0
• mkdocstrings >=0.26.0
• griffe-pydantic >=1.1.0
• mkdocs-gen-files >=0.5.0
• mkdocs-section-index >=0.3.0
• mkdocs-autorefs >=1.2.0
• mkdocs-git-revision-date-localized-plugin >=1.3.0
• python-frontmatter >=1.1.0
• ruamel-yaml >=0.18.0
• interrogate >=1.7.0
• jupyter >=1.0.0
• ipykernel >=6.25.0
• safety >=3.7.0
• nox >=2024.10.16
• nox-uv >=0.6.3
• google-auth >=2.0.0
• google-api-core >=2.0.0
• python-dotenv >=1.0.0
• fastapi >=0.100.0
• starlette >=0.27.0
• redis >=5.0.0
• google-cloud-storage >=2.10.0
• google-genai >=1.0.0
• email-validator >=2.0.0
• pyjwt >=2.8.0
• cryptography >=41.0.0
• httpx >=0.25.0