Renovate Dashboard 🤖

[dreadnode-renovate-bot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency pytest to v9 [security]
• fix(deps): update dependency pillow to v12 [security]
• fix(deps): update dependency transformers to v5 [security]
• chore(deps): update python to v3.14.5
• fix(deps): update dependency numpy to <=2.4.5
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update astral-sh/setup-uv action to v8
• chore(deps): update dependency mypy to v2
• chore(deps): update renovatebot/github-action action to v46
• fix(deps): update dependency coolname to v5
• fix(deps): update dependency fsspec to v2026
• fix(deps): update dependency pandas to v3
• fix(deps): update dependency pyarrow to v24
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency logfire to >=3.25.0,<=3.25.0
• fix(deps): update dependency aiofiles to v25
• fix(deps): update dependency logfire to v4

Detected Dependencies

github-actions (10)

.github/workflows/meta-labeler.yaml (2)

• actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3.2.0]
• actions/labeler v6.1.0@f27b608878404679385c85cfa523b85ccb86e213

.github/workflows/meta-sync-labels.yaml (3)

• actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a

.github/workflows/pre-commit.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v8.1.0]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.5]

.github/workflows/publish.yaml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v8.1.0]
• pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b

.github/workflows/renovate.yaml (3)

• actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• renovatebot/github-action v44.2.6@eaf12548c13069dcc28bb75c4ee4610cdbe400c5 → [Updates: v46.1.14]

.github/workflows/rigging_pr_description.yaml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python v6.2.0@a309ff8b426b58ec0e2a45f0f869d46889d02405
• nefrob/pr-description v1.2.0@4dcc9f3ad5ec06b2a197c5f8f93db5e69d2fdca7
• python 3.13 → [Updates: 3.14]

.github/workflows/semantic-prs.yaml (1)

• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/semgrep.yaml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/template-sync.yaml (3)

• actions/create-github-app-token v2.2.2@fee1f7d63c2ff003460e3d139729b119787bc349 → [Updates: v3.2.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• AndreasAugustin/actions-template-sync v2

.github/workflows/test.yaml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7.6.0@37802adc94f370d6bfd71619e3f0bf239e1f3b78 → [Updates: v8.1.0]

pep621 (1)

pyproject.toml (43)

• python >=3.10,<3.14 → [Updates: >=3.14,<3.15]
• pydantic >=2.9.2,<3.0.0
• httpx >=0.28.0,<1.0.0
• logfire >=3.5.3,<=3.20.0 → [Updates: >=3.25.0,<=3.25.0, >=4.33.0,<=4.33.0]
• python-ulid >=3.0.0,<4.0.0
• coolname >=2.2.0,<3.0.0 → [Updates: >=5.0.0,<5.1.0]
• pandas >=2.2.3,<3.0.0 → [Updates: >=3.0.3,<3.1.0]
• fsspec >=2023.1.0,<=2025.12.0 → [Updates: >=2026.4.0,<=2026.4.0]
• optuna >=4.5.0,<5.0.0
• numpy <=2.3.5 → [Updates: <=2.4.5]
• universal-pathlib >=0.3.3,<0.4.0
• loguru >=0.7.3
• python-jsonpath >=2.0.1
• pyyaml >=6.0.2
• cyclopts >=4.2.0
• aiofiles >=24.1.0,<25.0.0 → [Updates: >=25.1.0,<25.2.0]
• rigging >=3.3.4
• mypy >=1.8.0,<2.0.0 → [Updates: >=2.1.0,<2.2.0]
• ruff >=0.11.6,<1.0.0
• pre-commit >=4.0.0,<5.0.0
• pytest >=8.3.3,<9.0.0 → [Updates: >=9.0.3,<9.1.0]
• pytest-asyncio >=1.3.0,<1.4.0
• types-protobuf >=5.29.1.20250208
• pandas-stubs >=2.2.3.250308
• types-requests >=2.32.0.20250306
• ipykernel >=7.2.0,<7.3.0
• ipywidgets >=8.1.7,<9.0.0
• types-pyyaml >=6.0.12.20250822
• transformers >=4.41.0,<5.0.0 → [Updates: >=5.0.0,<5.1.0]
• datasets >=4.0.0,<5.0.0
• pyarrow >=22.0.0,<22.1.0 → [Updates: >=24.0.0,<24.1.0]
• pillow >=11.2.1,<12.0.0 → [Updates: >=12.2.0,<12.3.0]
• soundfile >=0.13.1,<1.0.0
• moviepy >=2.1.2,<3.0.0
• sentence-transformers >=5.1.0,<6.0.0
• rapidfuzz >=3.14.1
• presidio-analyzer >=2.2.359,<3.0.0
• scikit-learn >=1.7.1,<2.0.0
• confusables >=1.2.0,<2.0.0
• nltk >=3.9.1,<4.0.0
• textblob >=0.19.0,<1.0.0
• textstat >=0.7.10,<1.0.0
• art >=6.5,<7.0.0

pre-commit (1)

.pre-commit-config.yaml (7)

• pre-commit/pre-commit-hooks v6.0.0
• rhysd/actionlint v1.7.12
• adrienverge/yamllint v1.38.0
• codespell-project/codespell v2.4.2
• PyCQA/bandit 1.9.4
• Yelp/detect-secrets v1.5.0
• kynan/nbstripout 0.9.1