Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update github/codeql-action action to v3.27.5
• Update codecov/codecov-action action to v5

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/TruffleHog-OSS.yml

• actions/checkout v4

.github/workflows/autopep8.yml

• actions/checkout v4
• peter-evans/autopep8 v2

.github/workflows/bandit.yml

• actions/checkout v4
• shundor/python-bandit-scan 9cc5aa4a006482b8a7f91134412df6772dbda22c

.github/workflows/close-inactive-issues.yml

• actions/stale v9

.github/workflows/code-coverage.yml

• actions/checkout v4
• actions/setup-python v5
• actions/upload-artifact v4
• codecov/codecov-action v4

.github/workflows/dependabot-auto-approve.yml

• dependabot/fetch-metadata v2

.github/workflows/dependabot-auto-label.yml

• dependabot/fetch-metadata v2

.github/workflows/dependbot-fetch-metadata.yml

• dependabot/fetch-metadata v2

.github/workflows/dependency-review.yml

• actions/checkout v4
• actions/dependency-review-action v4

.github/workflows/devskim.yml

• actions/checkout v4
• microsoft/DevSkim-Action v1
• github/codeql-action v3
• digicert/ssm-gpg-signing v0.0.2
• ubuntu 24.04

.github/workflows/docker-ci.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/build-push-action v6

.github/workflows/docs-build.yml

• actions/checkout v4
• actions/setup-python v5
• peaceiris/actions-gh-pages v4

.github/workflows/generator-generic-ossf-slsa3-publish.yml

• actions/checkout v4
• slsa-framework/slsa-github-generator v2.0.0

.github/workflows/governance.yml

• BirthdayResearch/oss-governance-bot v4

.github/workflows/gpt-code-review.yml

• actions/checkout v4
• actions/setup-python v5

.github/workflows/issue-tracker.yml

• actions/checkout v4

.github/workflows/license.yml

• ralexander-phi/license_approval v1.0.0

.github/workflows/lines-of-code.yml

• actions/checkout v4
• djdefi/cloc-action 7

.github/workflows/manual.yml

• actions/checkout v4
• sigstore/gh-action-sigstore-python v3.0.0

.github/workflows/metrix.yml

• githubocto/repo-visualizer 0.9.1

.github/workflows/ossar.yml

• actions/checkout v4
• github/ossar-action v1
• github/codeql-action v3

.github/workflows/publish_conda.yml

• actions/checkout v4
• maxibor/conda-package-publish-action v1.1

.github/workflows/python-package.yml

• actions/checkout v4
• actions/setup-python v5

.github/workflows/python-publish.yml

• actions/checkout v4
• actions/setup-python v5

.github/workflows/release-drafter.yml

• release-drafter/release-drafter v6

.github/workflows/scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.1@4f3212b61783c3c68e8309a0f18a699764811cda
• ossf/scorecard-action v2.4.0

.github/workflows/snyk-security.yml

• actions/checkout v4
• snyk/actions cdb760004ba9ea4d525f2e043745dfe85bb9077e
• github/codeql-action v3

.github/workflows/stackhawk.yml

• actions/checkout v4
• stackhawk/hawkscan-action babdc51d04a845402d5d5b3e0ca1a67d89bbf2c5
• ubuntu 24.04

.github/workflows/stale.yml

• actions/stale v9

pip_requirements

requirements.txt

• scikit-learn ==1.5.2
• pillow >=10.2.0
• fonttools >=4.43.0
• validators >=0.21.0
• setuptools >=70.0.0
• numpy >=1.22.2
• certifi >=2023.7.22
• requests >=2.32.0
• zipp >=3.19.1

---

• Check this box to trigger a request for Renovate to run again on this repository