Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update astral-sh/setup-uv action to v7.2.1
• chore(deps): update dependency astral-sh/uv to v0.9.28
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.9.28
• chore(deps): update actions/setup-python action to v6.2.0
• chore(deps): update docker/login-action action to v3.7.0
• chore(deps): update github/codeql-action action to v4.32.0
• chore(deps): update peter-evans/create-pull-request action to v8.1.0
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (5)

• mcr.microsoft.com/devcontainers/python 3.14
• ghcr.io/devcontainers/features/common-utils 2
• ghcr.io/devcontainers/features/git 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/copilot-cli 1

github-actions (14)

.github/workflows/rhiza_benchmarks.yml (5)

• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/upload-artifact v6.0.0
• benchmark-action/github-action-benchmark v1
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]

.github/workflows/rhiza_book.yml (5)

• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/upload-pages-artifact v4.0.0
• actions/deploy-pages v4.0.5
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]

.github/workflows/rhiza_ci.yml (9)

• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]

.github/workflows/rhiza_codeql.yml (3)

• actions/checkout v6.0.2
• github/codeql-action v4.31.10 → [Updates: v4.32.0]
• github/codeql-action v4.31.10 → [Updates: v4.32.0]

.github/workflows/rhiza_deptry.yml (2)

• actions/checkout v6.0.2
• ghcr.io/astral-sh/uv 0.9.27-python3.12-trixie → [Updates: 0.9.28-python3.12-trixie]

.github/workflows/rhiza_devcontainer.yml (3)

• actions/checkout v6.0.2
• docker/login-action v3.6.0 → [Updates: v3.7.0]
• devcontainers/ci v0.3

.github/workflows/rhiza_docker.yml (3)

• actions/checkout v6.0.2
• hadolint/hadolint-action v3.3.0
• docker/setup-buildx-action v3.12.0

.github/workflows/rhiza_marimo.yml (4)

• actions/checkout v6.0.2
• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]

.github/workflows/rhiza_mypy.yml (2)

• actions/checkout v6
• ghcr.io/astral-sh/uv 0.9.27-python3.12-trixie → [Updates: 0.9.28-python3.12-trixie]

.github/workflows/rhiza_pre-commit.yml (1)

• actions/checkout v6.0.2

.github/workflows/rhiza_release.yml (17)

• actions/checkout v6.0.2
• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/attest-build-provenance v3
• actions/upload-artifact v6.0.0
• softprops/action-gh-release v2.5.0
• actions/checkout v6.0.2
• actions/download-artifact v7.0.0
• actions/checkout v6.0.2
• docker/login-action v3.6.0 → [Updates: v3.7.0]
• devcontainers/ci v0.3
• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• actions/setup-python v6.1.0 → [Updates: v6.2.0]
• softprops/action-gh-release v2.5.0
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]
• astral-sh/uv 0.9.27 → [Updates: 0.9.28]

.github/workflows/rhiza_security.yml (2)

• actions/checkout v6.0.2
• ghcr.io/astral-sh/uv 0.9.27-python3.12-trixie → [Updates: 0.9.28-python3.12-trixie]

.github/workflows/rhiza_sync.yml (3)

• actions/checkout v6.0.2
• astral-sh/setup-uv v7.2.0 → [Updates: v7.2.1]
• peter-evans/create-pull-request v8.0.0 → [Updates: v8.1.0]

.github/workflows/rhiza_validate.yml (2)

• actions/checkout v6.0.2
• ghcr.io/astral-sh/uv 0.9.27-python3.12-trixie → [Updates: 0.9.28-python3.12-trixie]

pep621 (1)

pyproject.toml (6)

• cvxpy >=1.7.5
• marimo >=0.18.4
• numpy >=2.4.0
• pandas >=2.3.3
• plotly >=6.5.0
• pyyaml >=6.0

pre-commit (1)

.pre-commit-config.yaml (7)

• pre-commit/pre-commit-hooks v6.0.0
• astral-sh/ruff-pre-commit v0.14.14
• igorshubovych/markdownlint-cli v0.47.0
• python-jsonschema/check-jsonschema 0.36.1
• rhysd/actionlint v1.7.10
• abravalheri/validate-pyproject v0.24.1
• PyCQA/bandit 1.9.3

---

• Check this box to trigger a request for Renovate to run again on this repository