Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update all non-major dependencies (indexmap, serde_json, url, org.junit.jupiter:junit-jupiter-engine)
• chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.10.0
• fix(deps): update rust crate gix to 0.77.0
• fix(deps): update rust crate reqwest to 0.13.0
• fix(deps): update rust crate reqwest-middleware to 0.5.0
• fix(deps): update rust crate toml_edit to 0.24.0
• chore(deps): update actions/cache action to v5
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• fix(deps): update rust crate zip to v7
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update rust crate spdx to v0.13.3
• chore(deps): update rust crate toml to v0.9.10
• fix(deps): update rust crate logos to 0.16.0

Detected Dependencies

cargo (5)

bindings/java/Cargo.toml (8)

• jni 0.21.1
• indexmap 2.12.1 → [Updates: 2.12.1]
• reqwest 0.12.25 → [Updates: 0.13.0]
• url 2.5.7 → [Updates: 2.5.7]
• tokio 1.48.0
• reqwest-middleware 0.4.2 → [Updates: 0.5.0]
• serde 1.0.228
• serde_json 1.0.145 → [Updates: 1.0.145]

bindings/js/Cargo.toml (13)

• serde_json 1.0.145 → [Updates: 1.0.145]
• thiserror 2.0.17
• wasm-bindgen 0.2.106
• web-sys 0.3.83
• console_error_panic_hook 0.1.7
• serde 1.0.228
• sha2 0.10.9
• console_log 1.0.0
• log 0.4.29
• typed-path 0.12.0
• regex 1.12.2
• semver 1.0.27
• wasm-bindgen-test 0.3.56

bindings/py/Cargo.toml (10)

• pyo3 0.27.2
• pyo3-log 0.13.2
• semver 1.0.27
• typed-path 0.12.0
• url 2.5.7 → [Updates: 2.5.7]
• reqwest-middleware 0.4.2 → [Updates: 0.5.0]
• reqwest 0.12.25 → [Updates: 0.13.0]
• tokio 1.48.0
• predicates 3.1.3
• tempfile 3.23.0

core/Cargo.toml (38)

• anstyle 1.0.13
• borrow-or-share 0.2.4
• chrono 0.4.42
• digest 0.10.7
• dirs 6.0.0
• fluent-uri 0.4.1
• indexmap 2.12.1 → [Updates: 2.12.1]
• log 0.4.29
• pubgrub 0.3.0
• partialzip 5.0.0
• pyo3 0.27.2
• reqwest 0.12.25 → [Updates: 0.13.0]
• semver 1.0.27
• serde 1.0.228
• serde_json 1.0.145 → [Updates: 1.0.145]
• sha2 0.10.9
• spdx 0.13.2 → [Updates: 0.13.2]
• tempfile 3.23.0
• thiserror 2.0.17
• toml 0.9.8 → [Updates: 0.9.8]
• typed-path 0.12.0
• walkdir 2.5.0
• wasm-bindgen 0.2.106
• zip 6.0.0 → [Updates: 7.0.0]
• url 2.5.7 → [Updates: 2.5.7]
• gix 0.75.0 → [Updates: 0.77.0]
• logos 0.15.1 → [Updates: 0.16.0]
• futures 0.3.31
• tokio 1.48.0
• reqwest-middleware 0.4.2 → [Updates: 0.5.0]
• bytes 1.11.0
• toml_edit 0.23.9 → [Updates: 0.24.0]
• assert_cmd 2.1.1
• mockito 1.7.1
• port_check 0.3.0
• predicates 3.1.3
• tempfile 3.23.0
• zip 6.0.0 → [Updates: 7.0.0]

sysand/Cargo.toml (27)

• anstream 0.6.21
• anyhow 1.0.100
• clap 4.5.53
• env_logger 0.11.8
• log 0.4.29
• thiserror 2.0.17
• toml 0.9.8 → [Updates: 0.9.8]
• semver 1.0.27
• serde_json 1.0.145 → [Updates: 1.0.145]
• spdx 0.13.2 → [Updates: 0.13.2]
• fluent-uri 0.4.1
• typed-path 0.12.0
• reqwest 0.12.25 → [Updates: 0.13.0]
• url 2.5.7 → [Updates: 2.5.7]
• zip 6.0.0 → [Updates: 7.0.0]
• pubgrub 0.3.0
• indexmap 2.12.1 → [Updates: 2.12.1]
• tokio 1.48.0
• reqwest-middleware 0.4.2 → [Updates: 0.5.0]
• assert_cmd 2.1.1
• glob 0.3.3
• mockito 1.7.1
• predicates 3.1.3
• tempfile 3.23.0
• url 2.5.7 → [Updates: 2.5.7]
• zip 6.0.0 → [Updates: 7.0.0]
• rexpect 0.6.2

github-actions (5)

.github/workflows/deploy-mdbook.yml (4)

• actions/checkout v6
• peaceiris/actions-mdbook v2
• actions/upload-pages-artifact v4
• actions/deploy-pages v4

.github/workflows/java.yml (28)

• actions/checkout v6
• actions/cache v4 → [Updates: v5]
• actions/setup-python v6
• actions/upload-artifact v5 → [Updates: v6]
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v6
• actions/setup-python v6
• actions/setup-java v5
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• actions/upload-artifact v5 → [Updates: v6]
• actions/upload-artifact v5 → [Updates: v6]
• actions/checkout v6
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• actions/setup-python v6
• actions/setup-java v5
• actions/checkout v6
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• actions/download-artifact v6 → [Updates: v7]
• actions/attest-build-provenance v3
• actions/setup-python v6
• actions/setup-java v5
• python 3.14
• python 3.14
• python 3.14
• python 3.14

.github/workflows/js.yml (2)

• actions/checkout v6
• actions/setup-node v6

.github/workflows/python.yml (31)

• actions/checkout v6
• actions/setup-python v6
• PyO3/maturin-action v1
• PyO3/maturin-action v1
• actions/upload-artifact v5 → [Updates: v6]
• astral-sh/setup-uv v7
• uraimo/run-on-arch-action v3
• actions/checkout v6
• actions/setup-python v6
• PyO3/maturin-action v1
• PyO3/maturin-action v1
• actions/upload-artifact v5 → [Updates: v6]
• addnab/docker-run-action v3
• uraimo/run-on-arch-action v3
• actions/checkout v6
• actions/setup-python v6
• PyO3/maturin-action v1
• actions/upload-artifact v5 → [Updates: v6]
• astral-sh/setup-uv v7
• actions/checkout v6
• actions/setup-python v6
• PyO3/maturin-action v1
• PyO3/maturin-action v1
• actions/upload-artifact v5 → [Updates: v6]
• astral-sh/setup-uv v7
• actions/checkout v6
• PyO3/maturin-action v1
• actions/upload-artifact v5 → [Updates: v6]
• python 3.14
• python 3.14
• python 3.14

.github/workflows/test.yml (11)

• actions/checkout v6
• actions/cache v4 → [Updates: v5]
• actions/checkout v6
• actions/cache v4 → [Updates: v5]
• actions/upload-artifact v5 → [Updates: v6]
• actions/download-artifact v6 → [Updates: v7]
• actions/attest-build-provenance v3
• softprops/action-gh-release v2
• actions/download-artifact v6 → [Updates: v7]
• actions/attest-build-provenance v3
• softprops/action-gh-release v2

maven (6)

bindings/java/java-deploy-test/pom.xml (1)

• org.apache.maven.plugins:maven-surefire-plugin 3.5.4

bindings/java/java-test/pom.xml (2)

• org.junit.jupiter:junit-jupiter-engine 6.0.1 → [Updates: 6.0.2]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4

bindings/java/java/pom.xml (7)

• org.apache.maven.plugins:maven-assembly-plugin 3.8.0
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1
• org.apache.maven.plugins:maven-source-plugin 3.4.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.apache.maven.plugins:maven-resources-plugin 3.4.0
• org.sonatype.central:central-publishing-maven-plugin 0.9.0 → [Updates: 0.10.0]

bindings/java/plugin/pom.xml (9)

• org.apache.maven:maven-plugin-api 3.9.12
• org.apache.maven.plugin-tools:maven-plugin-annotations 3.15.2
• org.apache.maven.plugins:maven-plugin-plugin 3.15.2
• org.apache.maven.plugins:maven-invoker-plugin 3.9.1
• org.apache.maven.plugins:maven-install-plugin 3.1.4
• org.apache.maven.plugins:maven-source-plugin 3.4.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.sonatype.central:central-publishing-maven-plugin 0.9.0 → [Updates: 0.10.0]

bindings/java/plugin/src/it/empty-project/pom.xml

bindings/java/plugin/src/it/workspace/pom.xml

npm (1)

bindings/js/package.json (7)

• @wasm-tool/wasm-pack-plugin ^1.7.0
• copy-webpack-plugin ^13.0.1
• glob ^13.0.0
• jasmine-browser-runner ^3.0.0
• jasmine-core ^5.12.1
• webpack ^5.102.1
• webpack-cli ^6.0.1

pep621 (1)

bindings/py/pyproject.toml (6)

• maturin >=1,<2
• pytest >=8.3.5
• pytest-httpserver >=1.1.1
• mypy >=1.14.1
• ruff >=0.12.11
• maturin >=1,<2

pyenv (1)

bindings/py/.python-version

---

• Check this box to trigger a request for Renovate to run again on this repository