Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency fastparquet to v2026

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency nicegui to v3.9.0 [security]
• fix(deps): update minor and patch dependencies (hatchling, idc-index-data)
• chore(deps): update dependency myst-parser to v5
• chore(deps): update dependency sphinx to v9
• chore(deps): update dependency swagger-plugin-for-sphinx to v7
• chore(deps): update github actions (actions/checkout, actions/download-artifact, actions/upload-artifact, anthropics/claude-code-action, astral-sh/setup-uv, codecov/codecov-action, crazy-max/ghaction-github-labeler, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, docker/setup-qemu-action, orhun/git-cliff-action, pyvista/setup-headless-display-action, slackapi/slack-github-action)
• fix(deps): update dependency fastmcp to v3
• fix(deps): update dependency packaging to v26
• fix(deps): update dependency pandas to v3
• fix(deps): update dependency pyarrow to v23
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (16)

.github/workflows/_audit.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_build-native-only.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_claude-code.yml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• pyvista/setup-headless-display-action v4.2@7d84ae825e6d9297a8e99bdbbae20d1b919a0b19 → [Updates: v4.3]
• anthropics/claude-code-action v1
• anthropics/claude-code-action v1.0.29 → [Updates: v1.0.75]

.github/workflows/_codeql.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• github/codeql-action v4
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/_docker-publish.yml (9)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130 → [Updates: v4.0.0]
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4.0.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef → [Updates: v4.0.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.0.0]
• docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6.0.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7.0.0]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7.0.0]

.github/workflows/_ketryx_report_and_check.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• Ketryx/ketryx-github-action v1.4.0@40b13ef68c772e96e58ec01a81f5b216d7710186

.github/workflows/_lint.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]

.github/workflows/_package-publish.yml (11)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• orhun/git-cliff-action v4.7.0@e16f179f0be49ecdfe63753837f20b9531642772 → [Updates: v4.7.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• getsentry/action-release v3.5.0@dab6548b3c03c4717878099e43782cf5be654289
• slackapi/slack-github-action v2.1.1@91efab103c0de0a537f72a35f6b8cda0ee76bf0a → [Updates: v3.0.1]

.github/workflows/_scheduled-audit.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_scheduled-test-daily.yml (8)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• pyvista/setup-headless-display-action v4.2@7d84ae825e6d9297a8e99bdbbae20d1b919a0b19 → [Updates: v4.3]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de → [Updates: v5.5.3]
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3
• SonarSource/sonarqube-scan-action v7.0.0@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9

.github/workflows/_scheduled-test-hourly.yml (4)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_scheduled-test-stress.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f

.github/workflows/_test.yml (7)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• astral-sh/setup-uv v7.2.0@61cb8a9741eeb8a550a1b8544337180c0fc8476b → [Updates: v7.6.0]
• pyvista/setup-headless-display-action v4.2@7d84ae825e6d9297a8e99bdbbae20d1b919a0b19 → [Updates: v4.3]
• SpicyPizza/create-envfile v2.0.3@ace6d4f5d7802b600276c23ca417e669f1a06f6f
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de → [Updates: v5.5.3]
• codecov/test-results-action v1.2.1@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3

.github/workflows/build-native-only.yml (1)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]

.github/workflows/ci-cd.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• SonarSource/sonarqube-scan-action v7.0.0@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9

.github/workflows/labels-sync.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8 → [Updates: v6.0.2]
• crazy-max/ghaction-github-labeler v5.3.0@24d110aa46a59976b8a7f35518cb7f14f434c916 → [Updates: v6.0.0]

pep621 (1)

pyproject.toml (116)

• python >=3.11, <3.15
• fastapi >=0.123.10
• humanize >=4.14.0,<5
• nicegui >=3.5.0,<4 → [Updates: >=3.5.0,<4]
• packaging >=25.0,<26 → [Updates: >=26,<27]
• platformdirs >=4.5.1,<5
• psutil >=7.1.3,<8
• pydantic-settings >=2.12.0,<3
• pywin32 >=311,<312
• pyyaml >=6.0.3,<7
• sentry-sdk >=2.47.0,<3
• typer >=0.20.0,<1
• uptime >=3.0.1,<4
• boto3 >=1.42.4,<2
• certifi >=2025.11.12
• defusedxml >=0.7.1
• dicom-validator >=0.7.3,<1
• dicomweb-client >=0.59.3,<1
• duckdb >=1.4.2,<=2
• google-cloud-storage >=3.6.0,<4
• crc32c >=2.8,<3
• highdicom >=0.26.1,<1
• html-sanitizer >=2.6.0,<3
• httpx >=0.28.1,<1
• idc-index-data ==23.2.7 → [Updates: ==23.8.1]
• ijson >=3.4.0.post0,<4
• jsf >=0.11.2,<1
• jsonschema >=4.25.1,<5
• loguru >=0.7.3,<1
• openslide-bin >=4.0.0.10,<5
• openslide-python >=1.4.3,<2
• pandas >=2.3.3,<3 → [Updates: >=3.0.1,<4]
• platformdirs >=4.3.2,<5
• procrastinate >=3.5.3
• fastparquet >=2025.12.0,<2026.0.0 → [Updates: >=2026.3.0,<2026.4.0]
• pyarrow >=22.0.0,<23 → [Updates: >=23.0.1,<24]
• pyjwt >=2.10.1,<3
• python-dateutil >=2.9.0.post0,<3
• requests >=2.32.5,<3
• requests-oauthlib >=2.0.0,<3
• s5cmd >=0.3.3,<1
• semver >=3.0.4,<4
• shapely >=2.1.2,<3
• tenacity >=9.1.2,<10
• tqdm >=4.67.1,<5
• truststore >=0.10.4,<1
• urllib3 >=2.6.3,<3
• wsidicom >=0.28.1,<1
• h11 >=0.16.0
• tornado >=6.5.0
• urllib3 >=2.5.0
• pillow >=11.3.0
• aiohttp >=3.13.3
• starlette >=0.47.2
• starlette >=0.49.1
• lxml >=6.0.2
• filelock >=3.20.1
• marshmallow >=3.26.2
• fastmcp >=2.0.0,<3 → [Updates: >=3.1.1,<4]
• autodoc-pydantic >=2.2.0,<3
• bump-my-version >=1.2.4,<2
• cyclonedx-py >=1.0.1,<2
• detect-secrets >=1.5.0,<2
• enum-tools >=0.13.0,<1
• furo >=2025.9.25
• git-cliff >=2.10.1,<3
• mypy >=1.19.0,<2
• myst-parser >=4.0.1,<5 → [Updates: >=5,<6]
• nox >=2025.11.12
• pip-audit >=2.10.0,<3
• pre-commit >=4.5.0,<5
• pyright >=1.1.408,<1.1.409
• pytest >=9.0.2,<10
• pytest-asyncio >=1.3.0,<2
• pytest-cov >=7.0.0,<8
• pytest-docker >=3.2.5,<4
• pytest-durations >=1.6.1,<2
• pytest-env >=1.2.0,<2
• pytest-md-report >=0.7.0,<1
• pytest-regressions >=2.8.3,<3
• pytest-retry >=1.7.0,<2
• pytest-selenium >=4.1.0,<5
• pytest-subprocess >=1.5.3,<2
• pytest-timeout >=2.4.0,<3
• pytest-watcher >=0.4.3,<1
• pytest-xdist >=3.8.0,<4
• ruff >=0.14.8,<1
• scalene >=2.0.1,<3
• sphinx >=8.2.3,<9 → [Updates: >=9.1,<10]
• sphinx-autobuild >=2025.8.25,<2026
• sphinx-click >=6.2.0,<7
• sphinx-copybutton >=0.5.2,<1
• sphinx-inline-tabs >=2025.12.21,<2026
• linkify-it-py >=2.0.3,<3
• sphinx-rtd-theme >=3.0.2,<4
• sphinx-selective-exclude >=1.0.3,<2
• sphinx-toolbox >=4.1.0,<5
• sphinxext-opengraph >=0.9.1,<1
• swagger-plugin-for-sphinx >=6.1.0,<7 → [Updates: >=7,<8]
• tomli >=2.3.0,<3
• types-pyyaml >=6.0.12.20250915,<7
• types-requests >=2.32.4.20250913,<3
• watchdog >=6.0.0,<7
• pip >=5.3
• uv >=0.9.7
• fonttools >=4.60.2
• pyinstaller >=6.14.0,<7
• jupyter >=1.1.1,<2
• jupyter-core >=5.8.1
• jupyterlab >=4.4.9
• cloudpathlib >=0.23.0,<1
• ipython >=9.8.0,<10
• marimo >=0.18.4,<1
• matplotlib >=3.10.7,<4
• shapely >=2.1.0,<3
• hatchling ==1.28.0 → [Updates: ==1.29.0]

---

• Check this box to trigger a request for Renovate to run again on this repository