Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures
• ⚠️ WARN: Detected empty commit - aborting git push

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (3)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
cargo	cow-utils	2023-09-26
cargo	pep508_rs	2025-01-02
cargo	pretty_assertions	2024-09-15

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): Update actions/attest-build-provenance action to v4
• chore(deps): Update actions/cache action to v6
• chore(deps): Update actions/checkout action to v7
• chore(deps): Update actions/github-script action to v9
• chore(deps): Update actions/setup-node action to v7
• chore(deps): Update astral-sh/setup-uv action to v10
• chore(deps): Update codecov/codecov-action action to v7
• chore(deps): Update dependency node to v24
• chore(deps): Update dependency pyarrow to v25
• chore(deps): Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): Update googleapis/release-please-action action to v5
• chore(deps): Update Rust crate serial_test to v4
• chore(deps): Update Rust crate toml to v1
• chore(deps): Update SonarSource/sonarqube-scan-action action to v8
• 🔐 Create all pending approval PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up pypi package pydantic: no-result.

Files affected: pyproject.toml

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): Update Rust crate clap to v4.6.6

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update anthropics/claude-code-action digest to a874e9e
• chore(deps): Update bencherdev/bencher digest to 33cfa4a
• chore(deps): Update crate-ci/typos digest to 4d9c206
• chore(deps): Update taiki-e/install-action digest
• chore(deps): Update Rust toolchain (indexmap, log, ruff_linter, ruff_python_ast, ruff_python_codegen, ruff_python_parser, ruff_python_semantic, ruff_python_stdlib, ruff_text_size)
• chore(deps): Update Rust to v1.98.0
• chore(deps): Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (2)

Cargo.toml (26)

• once_cell 1.21.3
• clap 4.5.39 → [Updates: 4.5.39]
• ruff_linter 0.16.3 → [Updates: 0.16.5]
• ruff_python_ast 0.16.3 → [Updates: 0.16.5]
• ruff_python_codegen 0.16.3 → [Updates: 0.16.5]
• ruff_python_parser 0.16.3 → [Updates: 0.16.5]
• ruff_python_semantic 0.16.3 → [Updates: 0.16.5]
• ruff_python_stdlib 0.16.3 → [Updates: 0.16.5]
• ruff_text_size 0.16.3 → [Updates: 0.16.5]
• serde 1.0
• serde_json 1.0
• toml 0.9 → [Updates: 1.0]
• pep508_rs 0.9
• anyhow 1.0
• env_logger 0.11
• log 0.4 → [Updates: 0.4]
• indexmap 2 → [Updates: 2]
• petgraph 0.8
• rustc-hash 2.1
• cow-utils 0.1.3
• etcetera 0.11
• insta 1.43.1
• pretty_assertions 1.4.1
• serial_test 3.2.0 → [Updates: 4.0.0]
• tempfile 3.20.0
• criterion 0.8

crates/cribo/Cargo.toml (1)

• sha2 0.11

github-actions (13)

.github/workflows/base_benchmarks.yml (6)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• bencherdev/bencher main@6a0a8855eb0c7dad27f6dafa5ce36844d54d27ad → [Updates: main]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/ci.yml (5)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• Swatinem/rust-cache v2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]

.github/workflows/claude.yml (2)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• anthropics/claude-code-action v1@5ee796a55f92566ecd7e39d70dd613abcbea0d7c → [Updates: v1]

.github/workflows/commitlint.yml (2)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• webiny/action-conventional-commits v1.4.2@7f91b1595ca1951cdb671ddc9f07a49081ec5b69

.github/workflows/copilot-setup-steps.yml (8)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• Swatinem/rust-cache v2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]

.github/workflows/coverage.yml (8)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• Swatinem/rust-cache v2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action cargo-llvm-cov@562f912bf8a1174eb1007c4afe216a9187a8d722 → [Updates: cargo-llvm-cov]
• codecov/test-results-action v1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• codecov/codecov-action v5@0fb7174895f61a3b6b78fc075e0cd60383518dac → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/ecosystem-tests.yml (6)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• bencherdev/bencher main@6a0a8855eb0c7dad27f6dafa5ce36844d54d27ad → [Updates: main]
• actions/github-script v7@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/lint.yml (7)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• crate-ci/typos v1@8a48f81b6c64dcfea44b3633223084c4be58ac5f → [Updates: v1]
• SonarSource/sonarqube-scan-action v7 → [Updates: v8]
• ophi-dev/mehen v1
• bnjbvr/cargo-machete v0.9.2@ac30a525c0a8d163a92d727b3ff079ee3f6ecb08

.github/workflows/pr_benchmarks.yml (6)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• bencherdev/bencher main@6a0a8855eb0c7dad27f6dafa5ce36844d54d27ad → [Updates: main]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

.github/workflows/pr_cleanup.yml (1)

• bencherdev/bencher main@6a0a8855eb0c7dad27f6dafa5ce36844d54d27ad → [Updates: main]

.github/workflows/release-please.yml (4)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• googleapis/release-please-action v4@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 → [Updates: v5]
• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]

.github/workflows/release.yml (32)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• Swatinem/rust-cache v2@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• taiki-e/install-action v2@b6ff580856c41316412a0b9b60540fbc6f8c82cc → [Updates: v2]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v10.0.1]
• PyO3/maturin-action v1@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• PyO3/maturin-action v1@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/attest-build-provenance v3@977bb373ede98d70efdf65b84cb5f73e068dcc2a → [Updates: v4]
• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• actions/download-artifact v4@d3f86a106a0bac45b974a628896c90dbdf5c8093 → [Updates: v8]
• actions/setup-node v5@a0853c24544627f65ddf259abe73b1d18a591444 → [Updates: v7]
• actions/attest-build-provenance v2@e8998f949152b193b063cb0ec769d69d929409be → [Updates: v4]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• pypa/gh-action-pypi-publish release/v1@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• pypa/gh-action-pypi-publish release/v1@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/setup-node v5@a0853c24544627f65ddf259abe73b1d18a591444 → [Updates: v7]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• actions/download-artifact v5@634f93cb2916e3fdff6788551b99b062d0335ce0 → [Updates: v8]
• node 22 → [Updates: 24]
• node 22 → [Updates: 24]

.github/workflows/valgrind.yml (5)

• actions/checkout v5@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 → [Updates: v7]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6]
• taiki-e/install-action cargo-valgrind@44f95680a5152389af8d20dc306644bbdec7b0e1 → [Updates: cargo-valgrind]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]

npm (1)

npm/cribo/package.json (1)

• node >=18.0.0

pep621 (1)

pyproject.toml (14)

• python >=3.8
• lefthook >=1.11.13
• pyrefly >=0.21.0
• pytest >=8.3.5
• vale >=3.11.2.0
• pandera >=0.22.1
• pyarrow ~=17.0.0 → [Updates: ~=25.0.1]
• pydantic >=2.5.3
• httpx >=0.28.1
• idna >=3.10
• pyyaml >=6.0.2
• requests >=2.32.0
• rich >=14.1.0
• maturin >=1.7,<2.0

pyenv (1)

.python-version

rust-toolchain (1)

rust-toolchain.toml (1)

• rust 1.97.1 → [Updates: 1.98.0]

---

• Check this box to trigger a request for Renovate to run again on this repository