Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(deps): update dependency pyarrow to v24

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update dependency pywin32 to v312

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update minor and patch dependencies (coverage, fastparquet, idc-index-data, pyright)
• chore(deps): update dependency mypy to v2
• chore(deps): update github actions (SonarSource/sonarqube-scan-action, actions/create-github-app-token, anthropics/claude-code-action, astral-sh/setup-uv, codecov/codecov-action, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, github/codeql-action, orhun/git-cliff-action, slackapi/slack-github-action)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency sphinx to v9

Detected Dependencies

github-actions (20)

.github/workflows/_audit.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_build-native-only.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_claude-code.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• pyvista/setup-headless-display-action v4.3@5bc8de3bc71fcda7a96439571287a554901541a0
• anthropics/claude-code-action v1.0.93@b47fd721da662d48c5680e154ad16a73ed74d2e0 → [Updates: v1.0.133]
• anthropics/claude-code-action v1.0.93@b47fd721da662d48c5680e154ad16a73ed74d2e0 → [Updates: v1.0.133]

.github/workflows/_codeql.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.0]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.0]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13 → [Updates: v4.36.0]

.github/workflows/_docker-publish.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.1.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.2.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.2.0]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.1.0]
• docker/metadata-action v6.0.0@030e881283bb7a6894de51c315a6bfe6a94e05cf → [Updates: v6.1.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.2.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.2.0]

.github/workflows/_docs.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]

.github/workflows/_ketryx_report_and_check.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• Ketryx/ketryx-github-action v1.4.0@40b13ef68c772e96e58ec01a81f5b216d7710186

.github/workflows/_lint.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]

.github/workflows/_package-publish.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• orhun/git-cliff-action v4.7.1@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 → [Updates: v4.8.0]
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• getsentry/action-release v3.6.0@5657c9e888b4e2cc85f4d29143ea4131fde4a73a → [Updates: v3.7.0]
• slackapi/slack-github-action v3.0.1@af78098f536edbc4de71162a307590698245be95 → [Updates: v3.0.3]

.github/workflows/_scheduled-audit.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_scheduled-test-daily.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• pyvista/setup-headless-display-action v4.3@5bc8de3bc71fcda7a96439571287a554901541a0
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.1]
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• SonarSource/sonarqube-scan-action v7.1.0@299e4b793aaa83bf2aba7c9c14bedbb485688ec4 → [Updates: v8.1.0]

.github/workflows/_scheduled-test-hourly.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/_scheduled-test-stress.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f

.github/workflows/_test.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]
• pyvista/setup-headless-display-action v4.3@5bc8de3bc71fcda7a96439571287a554901541a0
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.1]
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3

.github/workflows/build-native-only.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]

.github/workflows/ci-cd.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• SonarSource/sonarqube-scan-action v7.1.0@299e4b793aaa83bf2aba7c9c14bedbb485688ec4 → [Updates: v8.1.0]

.github/workflows/labels-sync.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• crazy-max/ghaction-github-labeler v6.0.0@548a7c3603594ec17c819e1239f281a3b801ab4d

.github/workflows/merge-release.yml (2)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]

.github/workflows/prepare-release.yml (3)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]

.github/workflows/publish-release.yml (3)

• actions/create-github-app-token v3.1.1@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/setup-uv v8.0.0@cec208311dfd045dd5311c1add060b2062131d57 → [Updates: v8.1.0]

pep621 (1)

pyproject.toml (124)

• python >=3.11, <3.15
• fastapi >=0.123.10
• humanize >=4.14.0,<5
• nicegui >=3.11.0,<4
• packaging >=26,<27
• platformdirs >=4.5.1,<5
• psutil >=7.1.3,<8
• pydantic-settings >=2.12.0,<3
• pywin32 >=311,<312 → [Updates: >=312,<313]
• pyyaml >=6.0.3,<7
• sentry-sdk >=2.47.0,<3
• typer >=0.20.0,<1
• boto3 >=1.42.4,<2
• certifi >=2025.11.12
• defusedxml >=0.7.1
• dicom-validator >=0.7.3,<1
• dicomweb-client >=0.59.3,<1
• duckdb >=1.4.2,<=2
• google-cloud-storage >=3.6.0,<4
• crc32c >=2.8,<3
• highdicom >=0.26.1,<1
• html-sanitizer >=2.6.0,<3
• httpx >=0.28.1,<1
• idc-index-data ==24.0.3 → [Updates: ==24.2.1]
• ijson >=3.4.0.post0,<4
• jsf >=0.11.2,<1
• jsonschema >=4.25.1,<5
• loguru >=0.7.3,<1
• openslide-bin >=4.0.0.10,<5
• openslide-python >=1.4.3,<2
• pandas >=2.3.3,<4
• platformdirs >=4.3.2,<5
• procrastinate >=3.5.3
• fastparquet >=2026.3.0,<2026.4.0 → [Updates: >=2026.5.0,<2026.6.0]
• pyarrow >=23.0.1,<24 → [Updates: >=24,<25]
• pyjwt >=2.13.0,<3
• python-dateutil >=2.9.0.post0,<3
• requests >=2.33.0,<3
• requests-oauthlib >=2.0.0,<3
• s5cmd >=0.3.3,<1
• semver >=3.0.4,<4
• shapely >=2.1.2,<3
• tenacity >=9.1.2,<10
• tqdm >=4.67.1,<5
• truststore >=0.10.4,<1
• urllib3 >=2.6.3,<3
• wsidicom >=0.28.1,<1
• fastmcp >=3.2.0,<4
• h11 >=0.16.0
• tornado >=6.5.5
• urllib3 >=2.5.0
• pillow >=12.2.0
• aiohttp >=3.13.4
• starlette >=1.0.1
• lxml >=6.1.0
• filelock >=3.20.3
• marshmallow >=3.26.2
• pygments >=2.20.0
• cryptography >=46.0.7
• pydicom >=3.0.2
• pyasn1 >=0.6.3
• lxml-html-clean >=0.4.4
• python-multipart >=0.0.26
• protobuf >=6.33.5
• autodoc-pydantic >=2.2.0,<3
• bump-my-version >=1.2.4,<2
• cyclonedx-py >=1.0.1,<2
• detect-secrets >=1.5.0,<2
• enum-tools >=0.13.0,<1
• furo >=2025.9.25
• git-cliff >=2.10.1,<3
• mypy >=1.19.0,<2 → [Updates: >=2.1,<3]
• myst-parser >=5,<6
• nox >=2025.11.12
• pip-audit >=2.10.0,<3
• pre-commit >=4.5.0,<5
• pyright >=1.1.408,<1.1.409 → [Updates: >=1.1.409,<1.1.410]
• pytest >=9.0.3,<10
• pytest-asyncio >=1.3.0,<2
• pytest-cov >=7.0.0,<8
• coverage >=7.12.0,<7.13 → [Updates: >=7.14.1,<7.15]
• pytest-docker >=3.2.5,<4
• pytest-durations >=1.6.1,<2
• pytest-env >=1.2.0,<2
• pytest-md-report >=0.7.0,<1
• pytest-regressions >=2.8.3,<3
• pytest-retry >=1.7.0,<2
• pytest-selenium >=4.1.0,<5
• pytest-subprocess >=1.5.3,<2
• pytest-timeout >=2.4.0,<3
• pytest-watcher >=0.4.3,<1
• pytest-xdist >=3.8.0,<4
• ruff >=0.14.8,<1
• scalene >=2.0.1,<3
• sphinx >=8.2.3,<9 → [Updates: >=9.1,<10]
• sphinx-autobuild >=2025.8.25,<2026
• sphinx-click >=6.2.0,<7
• sphinx-copybutton >=0.5.2,<1
• sphinx-inline-tabs >=2025.12.21,<2026
• linkify-it-py >=2.0.3,<3
• sphinx-rtd-theme >=3.0.2,<4
• sphinx-selective-exclude >=1.0.3,<2
• sphinx-toolbox >=4.1.0,<5
• sphinxext-opengraph >=0.9.1,<1
• swagger-plugin-for-sphinx >=7,<8
• tomli >=2.3.0,<3
• types-pyyaml >=6.0.12.20250915,<7
• types-requests >=2.32.4.20250913,<3
• watchdog >=6.0.0,<7
• pip >=26.1.2
• uv >=0.11.6
• fonttools >=4.60.2
• virtualenv >=20.36.1
• pyinstaller >=6.14.0,<7
• jupyter >=1.1.1,<2
• jupyter-core >=5.8.1
• jupyterlab >=4.4.9
• nbconvert >=7.17.1
• cloudpathlib >=0.23.0,<1
• ipython >=9.8.0,<10
• marimo >=0.23.0,<1
• matplotlib >=3.10.7,<4
• shapely >=2.1.0,<3
• hatchling ==1.29.0 → [Updates: ==1.30.1]

---

• Check this box to trigger a request for Renovate to run again on this repository