🤖 Renovate Dependency Dashboard

[vagary-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update github-actions (docker/build-push-action, docker/setup-buildx-action, github/codeql-action)
• chore(deps): update patch dependencies (patch) (PyYAML, charset-normalizer, python-dateutil)
• chore(deps): update renovatebot/github-action action to v46.1.17
• chore(deps): update all non-major dependencies (minor) (charset-normalizer, python-dateutil, sentry-sdk)
• chore(deps): update python docker tag to v3.14
• chore(deps): update actions/create-github-app-token action to v2
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update dependency watchdog to v4
• chore(deps): update dependency watchdog to v5
• chore(deps): update dependency watchdog to v6
• chore(deps): update github-actions to v4 (docker/login-action, docker/setup-buildx-action, sigstore/cosign-installer)
• chore(deps): update github-actions to v5 (actions/checkout, actions/upload-artifact)
• chore(deps): update github-actions to v6 (actions/checkout, actions/upload-artifact, docker/build-push-action, docker/metadata-action)
• chore(deps): update github-actions to v7 (actions/checkout, actions/upload-artifact, docker/build-push-action)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency tqdm to >=4.68.3 [security]
• chore(deps): update dependency certifi to v2024 [security]
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

3/3 CVEs have Renovate fixes.

pip_requirements

requirements.txt

tqdm

• GHSA-g7vv-2v7x-gj9p (fixed in >= 4.66.3)

certifi

• GHSA-248v-346w-9cwc (fixed in >= 2024.7.4)
• PYSEC-2024-230 (fixed in >= 2024.7.4)

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• python 3.11-slim → [Updates: 3.14-slim]

github-actions (6)

.github/workflows/ci.yml (6)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4]
• docker/build-push-action v7@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7]
• python 3.14.6

.github/workflows/codeql.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]

.github/workflows/cosign.yml (7)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v5@ca052bb54ab0790a636c9b5f226502c73d547a25 → [Updates: v6, v7]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• anchore/sbom-action v0@e22c389904149dbc22b58101806040fa8d37a610

.github/workflows/grafana-deploy-annotation.yml

.github/workflows/renovate.yml (3)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v2, v3]
• renovatebot/github-action v46.1.8@b67590ea780158ccd13192c22a3655a5231f869d → [Updates: v46.1.17]

.github/workflows/trivy.yml (2)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v5, v6, v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v5, v6, v7]

pip_requirements (1)

requirements.txt (10)

• requests >=2.34.2
• tqdm >=4.65.2 → [Updates: >=4.68.3]
• PyYAML >=6.0 → [Updates: >=6.0.3]
• watchdog >=3.0.0 → [Updates: >=4.0.2, >=5.0.3, >=6.0.0]
• python-dateutil >=2.8.0 → [Updates: >=2.8.2, >=2.9.0.post0]
• urllib3 >=2.7.0
• certifi >=2023.11.17 → [Updates: >=2024.12.14, >=2025.11.12, >=2026.6.17]
• charset-normalizer >=3.0.0 → [Updates: >=3.0.1, >=3.4.7]
• idna >=3.18
• sentry-sdk >=2.18.0 → [Updates: >=2.64.0]

renovate-config (1)

.github/renovate.json