Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update langfuse/langfuse:3 docker digest to c782c55
• chore(deps): update pgvector/pgvector:pg15 docker digest to a20a57d
• chore(deps): update python:3.14-slim docker digest to a7fb1e6
• chore(deps): update searxng/searxng docker digest to cd22dbf
• chore(deps): update vikunja/vikunja docker digest to b386f33
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.12.3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency json-repair to v0.60.1 [security]
• chore(deps): update dependency mcp to v1.28.1 [security]
• chore(deps): update dependency cryptography to v50 [security]
• chore(deps): update actions/checkout digest to 3d3c42e
• chore(deps): update anthropics/claude-code-action digest to 5ef2e55
• chore(deps): update actions/checkout action to v7.0.1
• chore(deps): update prom/prometheus docker tag to v3.13.2
• chore(deps): update actions/setup-python action to v7
• chore(deps): update astral-sh/setup-uv action to v9
• chore(deps): update langfuse/langfuse docker tag to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker/docker-compose.yml (8)

• pgvector/pgvector pg15@sha256:bd12d6788a617f4147d5a2ae0b56d07921398adabfe5a033bd3f50c245df55a1 → [Updates: pg15]
• evoapicloud/evolution-api sha256:e15508de128b9ab232d9cabb2441ca897a4802fba2c8186ed384b4f4508767d9
• vikunja/vikunja sha256:9e664c859f30c605c454aeb8712494ec20550a8e5220cb2d509e49a85d3effd4 → [Updates: undefined]
• bbernhard/signal-cli-rest-api sha256:5b1dd4ece2fb8a40287f72fb90b139ae840fe6ac5147b78340fd0f627ca80973
• searxng/searxng sha256:4baf815fff29c6ba8b2f41625deea54f8b1e9371d5c670ca510eebc7d0153883 → [Updates: undefined]
• langfuse/langfuse 3@sha256:1a128e60b0b6547a576010819f91e27c6bde929ca3c640115038e5de15511f9f → [Updates: 4, 3]
• caddy 2.11-alpine@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d58648
• prom/prometheus v3.13.0@sha256:c6b27ea434f8389bfe233fbc7be381cf50587c286e871bc842008f5a1b1908a7 → [Updates: v3.13.2]

dockerfile (1)

docker/Dockerfile.niles (4)

• python 3.14-slim@sha256:d7a925f9eb9639a93e455b9f12c167569358818c0f62b51b88edbc8fcf34c421 → [Updates: 3.14-slim]
• ghcr.io/astral-sh/uv 0.11.28@sha256:0f36cb9361a3346885ca3677e3767016687b5a170c1a6b88465ec14aefec90aa → [Updates: 0.12.3]
• python 3.14-slim@sha256:d7a925f9eb9639a93e455b9f12c167569358818c0f62b51b88edbc8fcf34c421 → [Updates: 3.14-slim]
• python 3.14-slim@sha256:d7a925f9eb9639a93e455b9f12c167569358818c0f62b51b88edbc8fcf34c421 → [Updates: 3.14-slim]

github-actions (5)

.github/workflows/ci.yml (19)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/ruff-action v4.1.0@278981a28ce3188b1e39527901f38254bf3aac89
• astral-sh/ruff-action v4.1.0@278981a28ce3188b1e39527901f38254bf3aac89
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• gitleaks/gitleaks-action v3@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-python v6@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• python 3.14
• python 3.14

.github/workflows/claude.yml (2)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• anthropics/claude-code-action v1@37b464ce72700f7b2c5ff8d2db7fa7b15df792f5 → [Updates: v1]

.github/workflows/llm-eval.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/release-please.yml (1)

• googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7

.github/workflows/sbom.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• anchore/sbom-action v0.24.0@e22c389904149dbc22b58101806040fa8d37a610

pep621 (1)

pyproject.toml (42)

• python >=3.14
• fastapi >=0.129.0
• uvicorn >=0.41.0
• httpx >=0.28.1
• tenacity >=9.0.0
• asyncpg >=0.31.0
• alembic >=1.13.0
• sqlalchemy >=2.0.0
• psycopg2-binary >=2.9.0
• openai >=2.21.0
• tiktoken >=0.8.0
• mcp >=1.26.0 → [Updates: >=1.26.0]
• pydantic-settings >=2.13.0
• pyyaml >=6.0.3
• apscheduler >=3.11.2
• jinja2 >=3.1.0
• aiofiles >=24.0.0
• itsdangerous >=2.0
• argon2-cffi >=25.1.0
• python-dateutil >=2.8.0
• structlog >=24.1.0
• prometheus-client >=0.21.0
• websockets >=14.0
• trafilatura >=2.0.0
• lxml-html-clean >=0.4.5
• json-repair >=0.58.0 → [Updates: >=0.58.0]
• notion-client >=2.0.0
• cryptography >=44.0 → [Updates: >=44.0]
• sentry-sdk >=2.0.0
• defusedxml >=0.7.0
• langfuse >=4.7.1,<5
• pytest >=9.0.0
• pytest-asyncio >=1.3.0
• pytest-cov >=6.0.0
• pytest-json-report >=1.5.0
• httpx >=0.28.1
• mypy >=1.14.0
• pip-audit >=2.7.0
• ruff >=0.9.0
• anthropic >=0.40
• types-python-dateutil >=2.9.0.20260518
• types-pyyaml >=6.0.12.20260518

---

• Check this box to trigger a request for Renovate to run again on this repository