Dependency Dashboard

[williaby]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update GitHub Actions (ByronWilliamsCPA/.github, SonarSource/sonarqube-scan-action, actions/attest-build-provenance, actions/checkout, actions/setup-python, astral-sh/setup-uv, github/codeql-action, lycheeverse/lychee-action, step-security/harden-runner)
• chore(deps)!: update GitHub Actions (major) (actions/checkout, actions/setup-python, astral-sh/setup-uv)
• chore(deps): update
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (24)

.github/workflows/ci.yml (2)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]

.github/workflows/cifuzzy.yml (6)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• google/clusterfuzzlite main@52ecc61cb587ee99c26825a112a21abf19c7448c
• google/clusterfuzzlite main@52ecc61cb587ee99c26825a112a21abf19c7448c
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.4]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/codecov.yml (2)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]

.github/workflows/codeql.yml (6)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.4]
• github/codeql-action v4.35.5@9e0d7b8d25671d64c341c19c0152d693099fb5ba → [Updates: v4.37.4]

.github/workflows/container-security.yml

.github/workflows/coverage.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docs.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/fips-compatibility.yml (8)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]

.github/workflows/mutation-testing.yml

.github/workflows/pr-title.yml (2)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/pr-validation.yml (9)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• lycheeverse/lychee-action v2.8.0@8646ba30535128ac92d33dfc9133794bfdd9b411 → [Updates: v2.9.0]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]

.github/workflows/publish-pypi.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/python-compatibility.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/qlty.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/release-sign.yml (3)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• sigstore/cosign-installer v4.1.2@6f9f17788090df1f26f669e9d70d6ae9567deba6

.github/workflows/release.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/reuse.yml (2)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]

.github/workflows/sbom.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/scorecard.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/security-analysis.yml (1)

• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/slsa-provenance.yml (7)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• astral-sh/setup-uv v8.1.0@08807647e7069bb48b6ef5acd8ec9567f424441b → [Updates: v8.3.2, v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/attest-build-provenance v4.1.0@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4.1.1]
• ByronWilliamsCPA/.github main@799ebd63e16aba0236ceded915f5c1cac20823b3 → [Updates: main]

.github/workflows/sonarcloud.yml (7)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]
• SonarSource/sonarqube-scan-action v8.0.0@59db25f34e16620e48ab4bb9e4a5dce155cb5432 → [Updates: v8.2.1]
• sonarsource/sonarqube-quality-gate-action v1.2.0@cf038b0e0cdecfa9e56c198bbb7d21d751d62c3b
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/validate-cruft.yml (3)

• step-security/harden-runner v2.19.3@ab7a9404c0f3da075243ca237b5fac12c98deaa5 → [Updates: v2.20.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7.0.1]
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405 → [Updates: v6.3.0, v7.0.0]

pep621 (1)

pyproject.toml (66)

• pydantic >=2.0.0
• pydantic-settings >=2.0.0
• python-dotenv >=1.0.0
• structlog >=23.1.0
• rich >=13.5.0
• click >=8.1.0
• urllib3 >=2.6.0
• platformdirs >=4.5.0
• basedpyright >=1.35.0
• pytest >=7.4.0
• pytest-cov >=4.1.0
• pytest-asyncio >=0.21.0
• pytest-xdist >=3.3.0
• hypothesis >=6.82.0
• ruff >=0.9.0
• basedpyright >=1.18.0
• bandit >=1.7.0
• vulture >=2.11
• pip-audit >=2.7.0
• pydoclint >=0.8.4
• pre-commit >=3.3.0
• mkdocs >=1.6.0,<2
• mkdocs-material >=9.5.0,<10
• mkdocstrings >=0.26.0,<1
• griffe-pydantic >=1.1.0
• mkdocs-gen-files >=0.5.0,<1
• mkdocs-section-index >=0.3.0,<1
• mkdocs-autorefs >=1.2.0,<2
• mkdocs-git-revision-date-localized-plugin >=1.3.0
• python-frontmatter >=1.1.0
• ruamel-yaml >=0.18.0
• interrogate >=1.7.0
• jupyter >=1.0.0
• ipykernel >=6.25.0
• nox >=2024.10.16
• nox-uv >=0.6.3
• mutmut >=3.3.1
• google-auth >=2.0.0
• google-api-core >=2.0.0
• python-dotenv >=1.0.0
• torch >=2.9.0
• torchvision >=0.24.0
• numpy >=1.24.0
• scikit-learn >=1.3.0
• tensorboard >=2.14.0
• sentry-sdk >=2.0.0
• arq >=0.25.0
• redis >=5.0.0
• fastapi >=0.133.0
• uvicorn >=0.27.0
• python-multipart >=0.0.6
• librosa >=0.10.0
• pydub >=0.25.1
• ffmpeg-python >=0.2.0
• soundfile >=0.12.1
• scipy >=1.11.0
• silero-vad >=5.1
• deepgram-sdk >=3.0.0
• rq >=1.16.0
• redis >=5.0.0
• docling-core >=2.3.0
• redis >=5.0.0
• cyclonedx-bom >=4.6.0
• pip-audit >=2.7.0
• pip-licenses >=4.0.0
• keyrings-google-artifactregistry-auth >=1.1.0