Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/onekey-sec/unblob).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

 - [ ] chore(deps): update pre-commit hook python-jsonschema/check-jsonschema to v0.37.1
 - [ ] fix(deps): update rust crate pyo3 to 0.28.0
 - [ ] chore(deps): update actions/attest-build-provenance action to v4
 - [ ] chore(deps): update actions/cache action to v5
 - [ ] chore(deps): update actions/checkout action to v6
 - [ ] chore(deps): update anchore/scan-action action to v7
 - [ ] chore(deps): update astral-sh/setup-uv action to v8
 - [ ] chore(deps): update cachix/cachix-action action to v17
 - [ ] chore(deps): update dependency atheris to v3
 - [ ] chore(deps): update dependency mkdocstrings to v1
 - [ ] chore(deps): update docker/build-push-action action to v7
 - [ ] chore(deps): update docker/login-action action to v4
 - [ ] chore(deps): update docker/metadata-action action to v6
 - [ ] chore(deps): update docker/setup-buildx-action action to v4
 - [ ] chore(deps): update docker/setup-qemu-action action to v4
 - [ ] chore(deps): update github artifact actions (major) (`actions/download-artifact`, `actions/upload-artifact`)
 - [ ] chore(deps): update github/codeql-action action to v4
 - [ ] chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6
 - [ ] chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43
 - [ ] chore(deps): lock file maintenance (flake.nix)
 - [ ] chore(deps): lock file maintenance (pyproject.toml)
 - [ ] chore(deps): lock file maintenance (rust/cargo.toml)
 - [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Detected Dependencies

<details><summary>cargo (1)</summary>
<blockquote>

<details><summary>rust/Cargo.toml (9)</summary>

 - `log 0.4.22`
 - `pyo3 0.27.0` → [Updates: `0.28.0`]
 - `pyo3-log 0.13.0`
 - `statrs 0.18.0`
 - `thiserror 2.0.0`
 - `approx 0.5.0`
 - `criterion 0.8.0`
 - `rand 0.10.0`
 - `landlock 0.4.1`

</details>

</blockquote>
</details>

<details><summary>dockerfile (1)</summary>
<blockquote>

<details><summary>Dockerfile (1)</summary>

 - `python 3.14-slim-bookworm`

</details>

</blockquote>
</details>

<details><summary>github-actions (8)</summary>
<blockquote>

<details><summary>.github/actions/setup-dependencies/action.yml (2)</summary>

 - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad`
 - `astral-sh/setup-uv v6.8.0@d0cc045d04ccac9d8b7881df0226f9e82c39688e` → [Updates: `v8.0.0`]

</details>

<details><summary>.github/actions/setup-git-lfs/action.yml (1)</summary>

 - `actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5.0.4`]

</details>

<details><summary>.github/workflows/build-nix.yml (3)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `cachix/install-nix-action v31.10.3@96951a368ba55167b55f1c916f7d416bac6505fe`
 - `cachix/cachix-action v16@3ba601ff5bbb07c7220846facfa2cd81eeee15a1` → [Updates: `v17`]

</details>

<details><summary>.github/workflows/check-mergeable.yml (1)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]

</details>

<details><summary>.github/workflows/CI.yml (35)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `cachix/install-nix-action v31.10.3@96951a368ba55167b55f1c916f7d416bac6505fe`
 - `pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd`
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad`
 - `benchmark-action/github-action-benchmark v1.22.0@a60cea5bc7b49e15c1f58f411161f99e0df48372`
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `PyO3/maturin-action v1.50.1@04ac600d27cdf7a9a280dadf7147097c42b757ad`
 - `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.0`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `PyO3/maturin-action v1.50.1@04ac600d27cdf7a9a280dadf7147097c42b757ad`
 - `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.0`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `PyO3/maturin-action v1.50.1@04ac600d27cdf7a9a280dadf7147097c42b757ad`
 - `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.0`]
 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8.0.1`]
 - `docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051` → [Updates: `v6.0.0`]
 - `docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130` → [Updates: `v4.0.0`]
 - `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.0.0`]
 - `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.1.0`]
 - `docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8` → [Updates: `v7.0.0`]
 - `anchore/scan-action v6.5.1@1638637db639e0ade3258b51db49a9a137574c3e` → [Updates: `v7.4.0`]
 - `github/codeql-action v3.35.1@5c8a8a642e79153f5d047b10ec1cba1d1cc65699` → [Updates: `v4.35.1`]
 - `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.0`]
 - `actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8.0.1`]
 - `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.0.0`]
 - `docker/metadata-action v5.10.0@c299e40c65443455700f0fdfc63efafe5b349051` → [Updates: `v6.0.0`]
 - `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.1.0`]
 - `actions/download-artifact v4.3.0@d3f86a106a0bac45b974a628896c90dbdf5c8093` → [Updates: `v8.0.1`]
 - `actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f` → [Updates: `v4.1.0`]
 - `PyO3/maturin-action v1.50.1@04ac600d27cdf7a9a280dadf7147097c42b757ad`

</details>

<details><summary>.github/workflows/codeql-analysis.yml (4)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `github/codeql-action v3.35.1@5c8a8a642e79153f5d047b10ec1cba1d1cc65699` → [Updates: `v4.35.1`]
 - `github/codeql-action v3.35.1@5c8a8a642e79153f5d047b10ec1cba1d1cc65699` → [Updates: `v4.35.1`]
 - `github/codeql-action v3.35.1@5c8a8a642e79153f5d047b10ec1cba1d1cc65699` → [Updates: `v4.35.1`]

</details>

<details><summary>.github/workflows/documentation.yml (2)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `astral-sh/setup-uv v6.8.0@d0cc045d04ccac9d8b7881df0226f9e82c39688e` → [Updates: `v8.0.0`]

</details>

<details><summary>.github/workflows/scorecard.yml (3)</summary>

 - `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v6.0.2`]
 - `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a`
 - `github/codeql-action v3.35.1@5c8a8a642e79153f5d047b10ec1cba1d1cc65699` → [Updates: `v4.35.1`]

</details>

</blockquote>
</details>

<details><summary>nix (1)</summary>
<blockquote>

<details><summary>flake.nix (4)</summary>

 - `filter lock file @ 59c44d1909c72441144b93cf0f054be7fe764de5`
 - `flake-compat lock file @ 5edf11c44bc78a0d334f6334cdaf7d60d732daab`
 - `nixpkgs nixpkgs-unstable`
 - `shell-hooks lock file @ 7073872447f49a51b005ce59836d082928e21c71`

</details>

</blockquote>
</details>

<details><summary>pep621 (1)</summary>
<blockquote>

<details><summary>pyproject.toml (43)</summary>

 - `python >=3.10`
 - `arpy >=2.3.0`
 - `attrs >=23.1.0`
 - `click >=8.1.7`
 - `cryptography >=41.0`
 - `dissect-cstruct >=4.0,<5.0`
 - `jefferson >=0.4.7`
 - `lark >=1.1.8`
 - `lief >=0.16.1`
 - `lz4 >=4.3.2,!=4.4.3`
 - `lzallright >=0.2.6`
 - `plotext >=4.2.0,<6.0`
 - `pluggy >=1.3.0`
 - `pydantic >=2.0`
 - `pyfatfs >=1.0.5`
 - `pymdown-extensions >=10.15`
 - `pyperscan >=0.3.0`
 - `python-magic >=0.4.27`
 - `pyzstd >0.16.2`
 - `rarfile >=4.1`
 - `rich >=13.3.5`
 - `structlog >=24.1.0`
 - `treelib >=1.7.0`
 - `ubi-reader >=0.8.9`
 - `pre-commit >=3.5,<5.0`
 - `pyyaml >=6.0.1`
 - `ruff ==0.15.9`
 - `taplo 0.10.0`
 - `vulture >=2.13`
 - `cairosvg >=2.7.1`
 - `mkdocs-material ==9.7.6`
 - `mkdocstrings-python >=1.8.0`
 - `mkdocstrings >=0.30,<0.31` → [Updates: `>=1,<1.1`]
 - `pillow >=12.2,<12.3`
 - `pymdown-extensions >=10.15`
 - `atheris >=2.3,<3.0` → [Updates: `>=3,<3.1`]
 - `memray >=1.19.2`
 - `pexpect >=4.9,<5`
 - `psutil >=7,<8`
 - `pytest-cov >=7,<8`
 - `pytest >=8.0.0`
 - `pyright >=1.1.349`
 - `maturin >=1.0,<2.0`

</details>

</blockquote>
</details>

<details><summary>pre-commit (1)</summary>
<blockquote>

<details><summary>.pre-commit-config.yaml (5)</summary>

 - `pre-commit/pre-commit-hooks v5.0.0` → [Updates: `v6.0.0`]
 - `semgrep >=1.104,<2`
 - `jendrikseipp/vulture v2.16`
 - `python-jsonschema/check-jsonschema 0.36.1` → [Updates: `0.37.1`]
 - `renovatebot/pre-commit-hooks 41.173.1` → [Updates: `43.104.7`]

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dependency Dashboard #1064

Awaiting Schedule

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Dependency Dashboard #1064

Description

Awaiting Schedule

Detected Dependencies

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions