Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update patch dependencies (litellm, n24q02m-mcp-core, n24q02m/better-semantic-release, ruff, tree-sitter-language-pack, ty)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update semgrep to v1.161.0

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update fastmcp to v4
• fix(deps): update mcp to v2

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• docker/dockerfile 1
• ghcr.io/astral-sh/uv python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca
• python 3.13-slim-bookworm@sha256:ed86c82274b3c69b52fb5820f358f0bd7df0b603332063cb5c6e32bd220c3e6e

github-actions (4)

.github/workflows/bot-governance.yml

.github/workflows/cd.yml (13)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• n24q02m/better-semantic-release v1.6.1@6e6884898bfe1ac34a0bc64ed62f54a21562df23 → [Updates: v1.6.2]
• n24q02m/better-semantic-release v1.6.1@6e6884898bfe1ac34a0bc64ed62f54a21562df23 → [Updates: v1.6.2]
• python-semantic-release/publish-action v10.6.2@6d89e2de8d40ecb3717316ecbbf15a6fa8ea9039
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v10.1.0@bec219d24cd3e171d82865faccec33120bb574f4
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/ci.yml (17)

• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v10.1.0@bec219d24cd3e171d82865faccec33120bb574f4
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63
• github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1
• dawidd6/action-send-mail v21@03a02a49409134de07636216fb379a026c52991e
• python 3.13

.github/workflows/opencode.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a

pep621 (1)

pyproject.toml (19)

• python ==3.13.*
• mcp >=1.30.0,<2 → [Updates: >=2.2.0,<3]
• fastmcp >=3.4.7,<4 → [Updates: >=4.0.3,<5]
• tree-sitter >=0.26.0,<1
• tree-sitter-language-pack >=1.19.0,<2 → [Updates: >=1.19.1,<2]
• networkx >=3.6.1,<4
• watchdog >=6.0.0,<7
• fastretrieval >=1.5.0,<2
• n24q02m-mcp-core ==1.24.1 → [Updates: ==1.24.4]
• litellm >=1.100.0 → [Updates: >=1.100.1]
• Pygments >=2.21.0
• alembic >=1.20.0,<2
• defusedxml >=0.7.1
• bandit ==1.9.4
• pytest ==9.1.1
• pytest-asyncio ==1.4.0
• ruff ==0.16.6 → [Updates: ==0.16.7]
• ty ==0.0.78 → [Updates: ==0.0.80]
• semgrep >=1.0,<1.162 → [Updates: >=1.0,<1.162]

---

• Check this box to trigger a request for Renovate to run again on this repository