Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): pin pypa/gh-action-pypi-publish action to cef2210
• chore(deps): update actions/checkout digest to 93cb6ef
• chore(deps): update amannn/action-semantic-pull-request digest to e32d7e6
• chore(deps): update astral-sh/setup-uv digest to 37802ad
• chore(deps): update dorny/paths-filter digest to d1c1ffe
• chore(deps): update github/codeql-action digest to 95e58e9
• chore(deps): update googleapis/release-please-action digest to 5c625bf
• chore(deps): update providers/openfeature-provider-flagd/openfeature/spec digest to ac62b5d
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.12
• chore(deps): update codecov/codecov-action action to v5.5.4
• chore(deps): update dependency providers/openfeature-provider-flagd/openfeature/test-harness to v3.6.2
• chore(deps): update dependency uv_build to ~=0.11.8
• chore(deps): update python docker tag to v3.14
• chore(deps): update actions/checkout action to v6
• chore(deps): update amannn/action-semantic-pull-request action to v6
• chore(deps): update astral-sh/setup-uv action to v8
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update dependency protobuf to v7
• chore(deps): update dependency types-protobuf to v7
• chore(deps): update dorny/paths-filter action to v4
• chore(deps): update googleapis/release-please-action action to v5
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• 🔐 Create all pending approval PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment).

Files affected: .github/workflows/lint-pr.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency asserts to >=0.14.0,<0.15.0
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

git-submodules (1)

.gitmodules (3)

• providers/openfeature-provider-flagd/openfeature/schemas 1daf5ff56b48d582187d59e35d48c6e191c23839
• providers/openfeature-provider-flagd/openfeature/spec eefdf439c5a5b69ccde036c3c6959a4a6c17e08c → [Updates: undefined]
• providers/openfeature-provider-flagd/openfeature/test-harness v3.5.0@ff2fbe6c6584953cb2753ae9188d1cee14f7f57f → [Updates: v3.6.2]

github-actions (4)

.github/workflows/build.yml (11)

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• dorny/paths-filter v3@de90cc6fb38fc0963ad72b210f1f284cd68cea36 → [Updates: v4, v3]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• astral-sh/setup-uv v7@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a → [Updates: v8.1.0, v7]
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24 → [Updates: v5.5.4, v6]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• astral-sh/setup-uv v7@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a → [Updates: v8.1.0, v7]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• github/codeql-action v4@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4]
• github/codeql-action v4@0499de31b99561a6d14a36a5f662c2a54f91beee → [Updates: v4]

.github/workflows/component-owners.yml

.github/workflows/lint-pr.yml (3)

• amannn/action-semantic-pull-request v5@0723387faaf9b38adef4775cd42cfd5155ed6017 → [Updates: v6, v5]
• marocchino/sticky-pull-request-comment v2@52423e01640425a022ef5fd42c6fb5f633a02728 → [Updates: v3.0.4]
• marocchino/sticky-pull-request-comment v2@52423e01640425a022ef5fd42c6fb5f633a02728 → [Updates: v3.0.4]

.github/workflows/release.yml (4)

• googleapis/release-please-action v4@a02a34c4d625f9be7cb89156071d8567266a2445 → [Updates: v5, v4]
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 → [Updates: v6, v5]
• astral-sh/setup-uv v7@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a → [Updates: v8.1.0, v7]
• pypa/gh-action-pypi-publish release/v1 → [Updates: release/v1]

pep621 (11)

hooks/openfeature-hooks-opentelemetry/pyproject.toml (8)

• python >=3.10
• openfeature-sdk >=0.8.4
• opentelemetry-semantic-conventions >=0.50b0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

providers/openfeature-provider-aws-ssm/pyproject.toml (15)

• python >=3.10
• openfeature-sdk >=0.8.2
• boto3 >=1.28.0
• cachebox >=5.1.0,<6.0.0
• aioboto3 >=12.3.0
• types-boto3 >=1.28.0
• types-aioboto3 >=13.0.0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• pytest-asyncio >=1.3.0,<2.0.0
• moto >=5.0.0,<6.0.0
• aioboto3 >=12.3.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

providers/openfeature-provider-env-var/pyproject.toml (7)

• python >=3.10
• openfeature-sdk >=0.8.2
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

providers/openfeature-provider-flagd/pyproject.toml (17)

• python >=3.10
• openfeature-sdk >=0.8.2
• grpcio >=1.80.0
• protobuf >=6.30.0,<7.0.0 → [Updates: >=7.34.1,<7.35.0]
• pyyaml >=6.0.1
• cachebox >=5.1.0,<6.0.0
• asserts >=0.13.0,<0.14.0 → [Updates: >=0.14.0,<0.15.0]
• coverage >=7.10.0,<8.0.0
• grpcio-health-checking >=1.80.0,<2.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• pytest-bdd >=8.1.0,<9.0.0
• testcontainers >=4.12.0,<5.0.0
• types-grpcio >=1.0.0,<2.0.0
• types-protobuf >=6.30.0,<7.0.0 → [Updates: >=7.34.1.0,<7.35.0]
• types-pyyaml >=6.0.0,<7.0.0

providers/openfeature-provider-flipt/pyproject.toml (10)

• python >=3.10
• openfeature-sdk >=0.7.0
• openfeature-provider-ofrep >=0.2.0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• requests-mock >=1.12.0,<2.0.0
• types-requests >=2.32.0,<3.0.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

providers/openfeature-provider-ofrep/pyproject.toml (10)

• python >=3.10
• openfeature-sdk >=0.8.2
• requests >=2.27.0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• requests-mock >=1.12.0,<2.0.0
• types-requests >=2.32.0,<3.0.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

providers/openfeature-provider-unleash/pyproject.toml (12)

• python >=3.10
• openfeature-sdk >=0.8.2
• UnleashClient >=6.3.0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• pytest-asyncio >=1.3.0,<2.0.0
• psycopg2-binary >=2.9.0,<3.0.0
• testcontainers >=4.12.0,<5.0.0
• types-requests >=2.31.0,<3.0.0
• uv_build ~=0.10.0 → [Updates: ~=0.11.8]

pyproject.toml (4)

• python >=3.10
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• pytest >=9.0.0,<10.0.0

tools/openfeature-flagd-api-testkit/pyproject.toml (7)

• python >=3.10
• openfeature-sdk >=0.8.2
• pytest >=8.4.0
• pytest-bdd >=8.1.0
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0

tools/openfeature-flagd-api/pyproject.toml (7)

• python >=3.10
• openfeature-sdk >=0.8.2
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• uv_build ~=0.9.0 → [Updates: ~=0.11.8]

tools/openfeature-flagd-core/pyproject.toml (11)

• python >=3.10
• openfeature-sdk >=0.8.2
• mmh3 >=5.0.0,<6.0.0
• panzi-json-logic >=1.0.1
• semver >=3,<4
• coverage >=7.10.0,<8.0.0
• mypy >=1.18.0,<2.0.0
• poethepoet >=0.37.0
• pytest >=9.0.0,<10.0.0
• pytest-bdd >=8.1.0,<9.0.0
• uv_build ~=0.9.0 → [Updates: ~=0.11.8]

pre-commit (1)

.pre-commit-config.yaml (2)

• astral-sh/ruff-pre-commit v0.15.5 → [Updates: v0.15.12]
• pre-commit/pre-commit-hooks v6.0.0

pyenv (1)

.python-version (1)

• python 3.10 → [Updates: 3.14]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository