[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .github/workflows/ci.yaml (github-actions)
• .github/workflows/quokka-review.yml (github-actions)
• .github/workflows/release.yaml (github-actions)
• go.mod (gomod)
• mise.toml (mise)
• eval/fixtures/owasp-subset/requirements.txt (pip_requirements)
• eval/fixtures/vulnerable-app/requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Update vulnerable PHP runtime pins for CVE-2026-109618 and CVE-2026-109619.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 10 Pull Requests, up to a maximum of 98 over time (see docs for prConcurrentLimit), plus 15 security update Pull Requests which are not subject to this limit:

ℹ️ If you want to rate limit security update Pull Requests too, set vulnerabilityAlerts.prConcurrentLimit.

chore(deps): update dependency aiohttp to v3.14.4 [security]

• Branch name: renovate/pypi-aiohttp-vulnerability
• Merge into: main
• Upgrade aiohttp to ==3.14.4

chore(deps): update dependency anyio to v4.14.2 [security]

• Branch name: renovate/pypi-anyio-vulnerability
• Merge into: main
• Upgrade anyio to ==4.14.2

chore(deps): update dependency brotli to v1.2.1 [security]

• Branch name: renovate/pypi-brotli-vulnerability
• Merge into: main
• Upgrade Brotli to ==1.2.1

chore(deps): update dependency dnspython to v2.9.0 [security]

• Branch name: renovate/pypi-dnspython-vulnerability
• Merge into: main
• Upgrade dnspython to ==2.9.0

chore(deps): update dependency h2 to v4.4.1 [security]

• Branch name: renovate/pypi-h2-vulnerability
• Merge into: main
• Upgrade h2 to ==4.4.1

chore(deps): update dependency hpack to v4.2.0 [security]

• Branch name: renovate/pypi-hpack-vulnerability
• Merge into: main
• Upgrade hpack to ==4.2.0

chore(deps): update dependency idna to v3.15 [security]

• Branch name: renovate/pypi-idna-vulnerability
• Merge into: main
• Upgrade idna to ==3.15

chore(deps): update dependency msgpack to v1.2.3 [security]

• Branch name: renovate/pypi-msgpack-vulnerability
• Merge into: main
• Upgrade msgpack to ==1.2.3

chore(deps): update dependency pyasn1 to v0.6.5 [security]

• Branch name: renovate/pypi-pyasn1-vulnerability
• Merge into: main
• Upgrade pyasn1 to ==0.6.5

chore(deps): update dependency soupsieve to v2.9 [security]

• Branch name: renovate/pypi-soupsieve-vulnerability
• Merge into: main
• Upgrade soupsieve to ==2.9

chore(deps): update dependency tornado to v6.6 [security]

• Branch name: renovate/pypi-tornado-vulnerability
• Merge into: main
• Upgrade tornado to ==6.6

chore(deps): update dependency urllib3 to v2.8.0 [security]

• Branch name: renovate/pypi-urllib3-vulnerability
• Merge into: main
• Upgrade urllib3 to ==2.8.0

chore(deps): update dependency certifi to v2026 [security]

• Branch name: renovate/pypi-certifi-vulnerability
• Merge into: main
• Upgrade certifi to ==2026.10.18

chore(deps): update dependency cryptography to v50 [security]

• Branch name: renovate/pypi-cryptography-vulnerability
• Merge into: main
• Upgrade cryptography to ==50.0.0

chore(deps): update dependency setuptools to v84 [security]

• Branch name: renovate/pypi-setuptools-vulnerability
• Merge into: main
• Upgrade setuptools to ==84.1.0

chore(deps): update dependency aiocache to v0.12.3

• Schedule: ["at any time"]
• Branch name: renovate/aiocache-0.x
• Merge into: main
• Upgrade aiocache to ==0.12.3

chore(deps): update dependency flask to v3.1.3

• Schedule: ["at any time"]
• Branch name: renovate/flask-3.x
• Merge into: main
• Upgrade Flask to ==3.1.3
• Upgrade flask to ==3.1.3

chore(deps): update dependency httpcore to v1.0.9

• Schedule: ["at any time"]
• Branch name: renovate/httpcore-1.x
• Merge into: main
• Upgrade httpcore to ==1.0.9

chore(deps): update dependency jsonpickle to v4.1.4

• Schedule: ["at any time"]
• Branch name: renovate/jsonpickle-4.x
• Merge into: main
• Upgrade jsonpickle to ==4.1.4

chore(deps): update dependency loguru to v0.7.3

• Schedule: ["at any time"]
• Branch name: renovate/loguru-0.x
• Merge into: main
• Upgrade loguru to ==0.7.3

chore(deps): update dependency lz4 to v4.4.5

• Schedule: ["at any time"]
• Branch name: renovate/lz4-4.x
• Merge into: main
• Upgrade lz4 to ==4.4.5

chore(deps): update dependency markupsafe to v3.0.4

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-3.x
• Merge into: main
• Upgrade MarkupSafe to ==3.0.4

chore(deps): update dependency pyasn1_modules to v0.4.2

• Schedule: ["at any time"]
• Branch name: renovate/pyasn1_modules-0.x
• Merge into: main
• Upgrade pyasn1_modules to ==0.4.2

chore(deps): update dependency pylsqpack to v0.3.24

• Schedule: ["at any time"]
• Branch name: renovate/pylsqpack-0.x
• Merge into: main
• Upgrade pylsqpack to ==0.3.24

chore(deps): update dependency pyyaml to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/pyyaml-6.x
• Merge into: main
• Upgrade PyYAML to ==6.0.3

chore(deps): update dependency tld to v0.13.2

• Schedule: ["at any time"]
• Branch name: renovate/tld-0.x
• Merge into: main
• Upgrade tld to ==0.13.2

chore(deps): update dependency urwid to v2.6.16

• Schedule: ["at any time"]
• Branch name: renovate/urwid-2.x
• Merge into: main
• Upgrade urwid to ==2.6.16

chore(deps): update dependency werkzeug to v3.1.9

• Schedule: ["at any time"]
• Branch name: renovate/werkzeug-3.x
• Merge into: main
• Upgrade Werkzeug to ==3.1.9

fix(deps): update module github.com/blevesearch/bleve/v2 to v2.6.3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-blevesearch-bleve-v2-2.x
• Merge into: main
• Upgrade github.com/blevesearch/bleve/v2 to v2.6.3

chore(deps): update dependency aiohappyeyeballs to v2.7.1

• Schedule: ["at any time"]
• Branch name: renovate/aiohappyeyeballs-2.x
• Merge into: main
• Upgrade aiohappyeyeballs to ==2.7.1

chore(deps): update dependency aioquic to v1.7.2

• Schedule: ["at any time"]
• Branch name: renovate/aioquic-1.x
• Merge into: main
• Upgrade aioquic to ==1.7.2

chore(deps): update dependency aiosqlite to v0.22.1

• Schedule: ["at any time"]
• Branch name: renovate/aiosqlite-0.x
• Merge into: main
• Upgrade aiosqlite to ==0.22.1

chore(deps): update dependency asgiref to v3.13.0

• Schedule: ["at any time"]
• Branch name: renovate/asgiref-3.x
• Merge into: main
• Upgrade asgiref to ==3.13.0

chore(deps): update dependency attrs to v25.4.0

• Schedule: ["at any time"]
• Branch name: renovate/attrs-25.x
• Merge into: main
• Upgrade attrs to ==25.4.0

chore(deps): update dependency bandit to v1.9.4

• Schedule: ["at any time"]
• Branch name: renovate/bandit-1.x
• Merge into: main
• Upgrade bandit to ==1.9.4

chore(deps): update dependency beautifulsoup4 to v4.15.0

• Schedule: ["at any time"]
• Branch name: renovate/beautifulsoup4-4.x
• Merge into: main
• Upgrade beautifulsoup4 to ==4.15.0

chore(deps): update dependency browser-cookie3 to v0.20.1

• Schedule: ["at any time"]
• Branch name: renovate/browser-cookie3-0.x
• Merge into: main
• Upgrade browser-cookie3 to ==0.20.1

chore(deps): update dependency charset-normalizer to v3.5.2

• Schedule: ["at any time"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: main
• Upgrade charset-normalizer to ==3.5.2

chore(deps): update dependency click to v8.5.1

• Schedule: ["at any time"]
• Branch name: renovate/click-8.x
• Merge into: main
• Upgrade click to ==8.5.1

chore(deps): update dependency elementpath to v5.1.4

• Schedule: ["at any time"]
• Branch name: renovate/elementpath-5.x
• Merge into: main
• Upgrade elementpath to ==5.1.4

chore(deps): update dependency frozenlist to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/frozenlist-1.x
• Merge into: main
• Upgrade frozenlist to ==1.8.0

chore(deps): update dependency go to v1.27.3

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.27.3
• Upgrade go to 1.27

chore(deps): update dependency greenlet to v3.5.6

• Schedule: ["at any time"]
• Branch name: renovate/greenlet-3.x
• Merge into: main
• Upgrade greenlet to ==3.5.6

chore(deps): update dependency h11 to v0.16.0

• Schedule: ["at any time"]
• Branch name: renovate/h11-0.x
• Merge into: main
• Upgrade h11 to ==0.16.0

chore(deps): update dependency httpx to v0.28.1

• Schedule: ["at any time"]
• Branch name: renovate/httpx-0.x
• Merge into: main
• Upgrade httpx to ==0.28.1

chore(deps): update dependency humanize to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/humanize-4.x
• Merge into: main
• Upgrade humanize to ==4.16.0

chore(deps): update dependency kaitaistruct to v0.11

• Schedule: ["at any time"]
• Branch name: renovate/kaitaistruct-0.x
• Merge into: main
• Upgrade kaitaistruct to ==0.11

chore(deps): update dependency lxml to v6.1.3

• Schedule: ["at any time"]
• Branch name: renovate/lxml-6.x
• Merge into: main
• Upgrade lxml to ==6.1.3

chore(deps): update dependency mako to v1.4.3

• Schedule: ["at any time"]
• Branch name: renovate/mako-1.x
• Merge into: main
• Upgrade Mako to ==1.4.3

chore(deps): update dependency mitmproxy_linux to v0.12.15

• Schedule: ["at any time"]
• Branch name: renovate/mitmproxy_linux-0.x
• Merge into: main
• Upgrade mitmproxy_linux to ==0.12.15

chore(deps): update dependency mitmproxy_rs to v0.12.15

• Schedule: ["at any time"]
• Branch name: renovate/mitmproxy_rs-0.x
• Merge into: main
• Upgrade mitmproxy_rs to ==0.12.15

chore(deps): update dependency multidict to v6.9.1

• Schedule: ["at any time"]
• Branch name: renovate/multidict-6.x
• Merge into: main
• Upgrade multidict to ==6.9.1

chore(deps): update dependency packaging to v24.2

• Schedule: ["at any time"]
• Branch name: renovate/packaging-24.x
• Merge into: main
• Upgrade packaging to ==24.2

chore(deps): update dependency propcache to v0.5.4

• Schedule: ["at any time"]
• Branch name: renovate/propcache-0.x
• Merge into: main
• Upgrade propcache to ==0.5.4

chore(deps): update dependency pycparser to v2.23

• Schedule: ["at any time"]
• Branch name: renovate/pycparser-2.x
• Merge into: main
• Upgrade pycparser to ==2.23

chore(deps): update dependency pycryptodomex to v3.24.2

• Schedule: ["at any time"]
• Branch name: renovate/pycryptodomex-3.x
• Merge into: main
• Upgrade pycryptodomex to ==3.24.2

chore(deps): update dependency pyfakefs to v5.10.2

• Schedule: ["at any time"]
• Branch name: renovate/pyfakefs-5.x
• Merge into: main
• Upgrade pyfakefs to ==5.10.2

chore(deps): update dependency pygments to v2.21.0

• Schedule: ["at any time"]
• Branch name: renovate/pygments-2.x
• Merge into: main
• Upgrade Pygments to ==2.21.0

chore(deps): update dependency pyopenssl to v25.3.0

• Schedule: ["at any time"]
• Branch name: renovate/pyopenssl-25.x
• Merge into: main
• Upgrade pyOpenSSL to ==25.3.0

chore(deps): update dependency pyparsing to v3.3.3

• Schedule: ["at any time"]
• Branch name: renovate/pyparsing-3.x
• Merge into: main
• Upgrade pyparsing to ==3.3.3

chore(deps): update dependency pyperclip to v1.11.0

• Schedule: ["at any time"]
• Branch name: renovate/pyperclip-1.x
• Merge into: main
• Upgrade pyperclip to ==1.11.0

chore(deps): update dependency pysonar to v1.10.0.5888

• Schedule: ["at any time"]
• Branch name: renovate/pysonar-1.x
• Merge into: main
• Upgrade pysonar to ==1.10.0.5888

chore(deps): update dependency pyspnego to v0.12.4

• Schedule: ["at any time"]
• Branch name: renovate/pyspnego-0.x
• Merge into: main
• Upgrade pyspnego to ==0.12.4

chore(deps): update dependency requests to v2.34.2

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: main
• Upgrade requests to ==2.34.2

chore(deps): update dependency responses to v0.26.3

• Schedule: ["at any time"]
• Branch name: renovate/responses-0.x
• Merge into: main
• Upgrade responses to ==0.26.3

chore(deps): update dependency rich to v14.3.4

• Schedule: ["at any time"]
• Branch name: renovate/rich-14.x
• Merge into: main
• Upgrade rich to ==14.3.4

chore(deps): update dependency ruamel.yaml to v0.19.1

• Schedule: ["at any time"]
• Branch name: renovate/ruamel.yaml-0.x
• Merge into: main
• Upgrade ruamel.yaml to ==0.19.1

chore(deps): update dependency sqlalchemy to v2.1.8

• Schedule: ["at any time"]
• Branch name: renovate/sqlalchemy-2.x
• Merge into: main
• Upgrade SQLAlchemy to ==2.1.8

chore(deps): update dependency stevedore to v5.9.1

• Schedule: ["at any time"]
• Branch name: renovate/stevedore-5.x
• Merge into: main
• Upgrade stevedore to ==5.9.1

chore(deps): update dependency tomli to v2.5.0

• Schedule: ["at any time"]
• Branch name: renovate/tomli-2.x
• Merge into: main
• Upgrade tomli to ==2.5.0

chore(deps): update dependency typing_extensions to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/typing_extensions-4.x
• Merge into: main
• Upgrade typing_extensions to ==4.16.0

chore(deps): update dependency wapiti_arsenic to v28.5

• Schedule: ["at any time"]
• Branch name: renovate/wapiti_arsenic-28.x
• Merge into: main
• Upgrade wapiti_arsenic to ==28.5

chore(deps): update dependency wcwidth to v0.9.4

• Schedule: ["at any time"]
• Branch name: renovate/wcwidth-0.x
• Merge into: main
• Upgrade wcwidth to ==0.9.4

chore(deps): update dependency wsproto to v1.3.2

• Schedule: ["at any time"]
• Branch name: renovate/wsproto-1.x
• Merge into: main
• Upgrade wsproto to ==1.3.2

chore(deps): update dependency yarl to v1.25.1

• Schedule: ["at any time"]
• Branch name: renovate/yarl-1.x
• Merge into: main
• Upgrade yarl to ==1.25.1

chore(deps): update dependency zstandard to v0.25.0

• Schedule: ["at any time"]
• Branch name: renovate/zstandard-0.x
• Merge into: main
• Upgrade zstandard to ==0.25.0

fix(deps): update module github.com/odvcencio/gotreesitter to v0.56.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-odvcencio-gotreesitter-0.x
• Merge into: main
• Upgrade github.com/odvcencio/gotreesitter to v0.56.0

fix(deps): update module golang.org/x/text to v0.43.0

• Schedule: ["at any time"]
• Branch name: renovate/golang.org-x-text-0.x
• Merge into: main
• Upgrade golang.org/x/text to v0.43.0

fix(deps): update module modernc.org/sqlite to v1.61.1

• Schedule: ["at any time"]
• Branch name: renovate/modernc.org-sqlite-1.x
• Merge into: main
• Upgrade modernc.org/sqlite to v1.61.1

chore(deps): update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to v7

chore(deps): update actions/setup-go action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-7.x
• Merge into: main
• Upgrade actions/setup-go to v7

chore(deps): update dependency argon2-cffi to v25

• Schedule: ["at any time"]
• Branch name: renovate/argon2-cffi-25.x
• Merge into: main
• Upgrade argon2-cffi to ==25.1.0

chore(deps): update dependency argon2-cffi-bindings to v26

• Schedule: ["at any time"]
• Branch name: renovate/argon2-cffi-bindings-26.x
• Merge into: main
• Upgrade argon2-cffi-bindings to ==26.1.0

chore(deps): update dependency attrs to v26

• Schedule: ["at any time"]
• Branch name: renovate/attrs-26.x
• Merge into: main
• Upgrade attrs to ==26.1.0

chore(deps): update dependency cffi to v2

• Schedule: ["at any time"]
• Branch name: renovate/cffi-2.x
• Merge into: main
• Upgrade cffi to ==2.1.1

chore(deps): update dependency markdown-it-py to v4

• Schedule: ["at any time"]
• Branch name: renovate/markdown-it-py-4.x
• Merge into: main
• Upgrade markdown-it-py to ==4.2.0

chore(deps): update dependency mitmproxy to v12

• Schedule: ["at any time"]
• Branch name: renovate/mitmproxy-12.x
• Merge into: main
• Upgrade mitmproxy to ==12.3.1

chore(deps): update dependency multidict to v7

• Schedule: ["at any time"]
• Branch name: renovate/multidict-7.x
• Merge into: main
• Upgrade multidict to ==7.2.1

chore(deps): update dependency packaging to v26

• Schedule: ["at any time"]
• Branch name: renovate/packaging-26.x
• Merge into: main
• Upgrade packaging to ==26.3

chore(deps): update dependency pbr to v7

• Schedule: ["at any time"]
• Branch name: renovate/pbr-7.x
• Merge into: main
• Upgrade pbr to ==7.1.3

chore(deps): update dependency pycparser to v3

• Schedule: ["at any time"]
• Branch name: renovate/pycparser-3.x
• Merge into: main
• Upgrade pycparser to ==3.12

chore(deps): update dependency pyfakefs to v6

• Schedule: ["at any time"]
• Branch name: renovate/pyfakefs-6.x
• Merge into: main
• Upgrade pyfakefs to ==6.3.2

chore(deps): update dependency pylsqpack to v1

• Schedule: ["at any time"]
• Branch name: renovate/pylsqpack-1.x
• Merge into: main
• Upgrade pylsqpack to ==1.0.0

chore(deps): update dependency pyopenssl to v26

• Schedule: ["at any time"]
• Branch name: renovate/pyopenssl-26.x
• Merge into: main
• Upgrade pyOpenSSL to ==26.4.0

chore(deps): update dependency rich to v15

• Schedule: ["at any time"]
• Branch name: renovate/rich-15.x
• Merge into: main
• Upgrade rich to ==15.0.0

chore(deps): update dependency service-identity to v26

• Schedule: ["at any time"]
• Branch name: renovate/service-identity-26.x
• Merge into: main
• Upgrade service-identity to ==26.1.0

chore(deps): update dependency structlog to v26

• Schedule: ["at any time"]
• Branch name: renovate/structlog-26.x
• Merge into: main
• Upgrade structlog to ==26.1.0

chore(deps): update dependency urwid to v5

• Schedule: ["at any time"]
• Branch name: renovate/urwid-5.x
• Merge into: main
• Upgrade urwid to ==5.1.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details. Security update Pull Requests are not subject to this limit and will be created straight away.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.