Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/DiamondLightSource/python-zocalo).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] Update actions/setup-python action to v7

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update codecov/codecov-action action to v7
- [ ] Update docker/build-push-action action to v7
- [ ] Update docker/login-action action to v4
- [ ] Update docker/setup-buildx-action action to v4
- [ ] Update docker/setup-qemu-action action to v4
- [ ] Update GitHub Artifact Actions (major) (`actions/download-artifact`, `actions/upload-artifact`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update dependency jinja2 to v3.1.6 [SECURITY]](../pull/280)
- [ ] [Update dependency marshmallow to v3.26.2 [SECURITY]](../pull/293)
- [ ] [Update dependency requests to v2.33.0 [SECURITY]](../pull/281)
- [ ] [Update dependency urllib3 to v2.7.0 [SECURITY]](../pull/282)
- [ ] [Update dependency setuptools to v83 [SECURITY]](../pull/283)
- [ ] [Update all dependencies](../pull/284) (`annotated-types`, `babel`, `bidict`, `certifi`, `charset-normalizer`, `coverage`, `docutils`, `googleapis-common-protos`, `imagesize`, `importlib-metadata`, `iniconfig`, `markupsafe`, `opentelemetry-api`, `opentelemetry-exporter-otlp-proto-common`, `opentelemetry-exporter-otlp-proto-http`, `opentelemetry-proto`, `opentelemetry-sdk`, `pika`, `pluggy`, `pydantic`, `pydantic-core`, `pyright`, `pytest-mock`, `pyyaml`, `typing-extensions`, `typing-inspection`, `websocket-client`, `zipp`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency idna to v3.15 [SECURITY]](../pull/311)
- [ ] [Update dependency pygments to v2.20.0 [SECURITY]](../pull/303)
- [ ] [Update dependency pytest to v9 [SECURITY]](../pull/304)
- [ ] [Update codecov/codecov-action action to v5.5.5](../pull/301)
- [ ] [Update pypa/gh-action-pypi-publish action to v1.14.2](../pull/313)
- [ ] [Update dependency python](../pull/287)
- [ ] [Update jpetrucciani/ruff-check action to v0.16.7](../pull/297)
- [ ] [Update actions/checkout action to v7](../pull/314)
- [ ] [Update all dependencies (major)](../pull/299) (`alabaster`, `certifi`, `imagesize`, `importlib-metadata`, `packaging`, `protobuf`, `pytest-cov`, `snowballstemmer`, `sphinx`, `sphinx-rtd-theme`, `stomp-py`, `zipp`)
- [ ] [Update dependency sphinx to v9](../pull/300)
- [ ] [Update dependency sphinx-rtd-theme to v3](../pull/312)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

Dockerfile (1)

- `python 3.11-slim` → [Updates: `3.14-slim`]

github-actions (3)

.github/workflows/build_and_test.yml (11)

- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-python v5` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v6` → [Updates: `v7`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `actions/setup-python v5` → [Updates: `v7`]
- `pavelzw/pytest-action v2.2.0@510c5e90c360a185039bea56ce8b3e7e51a16507`
- `codecov/codecov-action v5.5.2@671740ac38dd9b0130fbe1cec585b89eea48d3de` → [Updates: `v5.5.5`, `v7.0.0`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `pypa/gh-action-pypi-publish v1.14.0@cef221092ed1bacb1cc03d23a2d87d1d172e277b` → [Updates: `v1.14.2`]
- `python 3.13` → [Updates: `3.14`]

.github/workflows/build-and-push-docker-images.yml (5)

- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-qemu-action v3` → [Updates: `v4`]
- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/login-action v3` → [Updates: `v4`]
- `docker/build-push-action v6` → [Updates: `v7`]

.github/workflows/linting.yml (2)

- `actions/checkout v6` → [Updates: `v7`]
- `jpetrucciani/ruff-check 0.15.5@3d1a50730e90a5cb0347ec031202041376542e07` → [Updates: `0.16.7`]

pep621 (1)

pyproject.toml (10)

- `python >=3.12`
- `pydantic ~=2.13`
- `workflows >=3.7`
- `pytest >=8.2.2` → [Updates: `>=8.2.2`]
- `pytest-mock >=3.14`
- `pytest-cov >=5`
- `requests-mock >=1.12`
- `pyright >=1.1.410`
- `sphinx >=6,<7` → [Updates: `>=9,<10`]
- `sphinx-rtd-theme ~=1.2` → [Updates: `~=3.1`]

pip_requirements (1)

requirements_dev.txt (58)

- `alabaster ==0.7.16` → [Updates: `==1.0.0`]
- `annotated-types ==0.7.0` → [Updates: `==0.8.0`]
- `babel ==2.16.0` → [Updates: `==2.18.0`]
- `bidict ==0.23.1` → [Updates: `==0.24.1`]
- `certifi ==2024.8.30` → [Updates: `==2024.12.14`, `==2026.7.22`]
- `charset-normalizer ==3.4.0` → [Updates: `==3.5.1`]
- `colorama ==0.4.6`
- `coverage ==7.6.4` → [Updates: `==7.16.0`]
- `docopt ==0.6.2`
- `docutils ==0.18.1` → [Updates: `==0.23`]
- `googleapis-common-protos ==1.75.0` → [Updates: `==1.75.3`]
- `graypy ==2.1.0`
- `idna ==3.10` → [Updates: `==3.15`]
- `imagesize ==1.4.1` → [Updates: `==1.5.0`, `==2.0.1`]
- `importlib-metadata ==8.7.1` → [Updates: `==8.9.0`, `==9.0.1`]
- `iniconfig ==2.0.0` → [Updates: `==2.3.0`]
- `jinja2 ==3.1.4` → [Updates: `==3.1.6`]
- `markupsafe ==3.0.2` → [Updates: `==3.0.3`]
- `marshmallow ==3.23.1` → [Updates: `==3.26.2`]
- `nodeenv ==1.10.0`
- `opentelemetry-api ==1.40.0` → [Updates: `==1.44.0`]
- `opentelemetry-exporter-otlp-proto-common ==1.40.0` → [Updates: `==1.44.0`]
- `opentelemetry-exporter-otlp-proto-http ==1.40.0` → [Updates: `==1.44.0`]
- `opentelemetry-proto ==1.40.0` → [Updates: `==1.44.0`]
- `opentelemetry-sdk ==1.40.0` → [Updates: `==1.44.0`]
- `opentelemetry-semantic-conventions ==0.61b0`
- `packaging ==24.2` → [Updates: `==26.3`]
- `pika ==1.3.2` → [Updates: `==1.4.4`]
- `pluggy ==1.5.0` → [Updates: `==1.6.0`]
- `protobuf ==6.33.6` → [Updates: `==7.36.1`]
- `pydantic ==2.13.4` → [Updates: `==2.13.5`]
- `pydantic-core ==2.46.4` → [Updates: `==2.49.0`]
- `pygments ==2.18.0` → [Updates: `==2.20.0`]
- `pyright ==1.1.410` → [Updates: `==1.1.414`]
- `pytest ==8.3.3` → [Updates: `==9.0.3`]
- `pytest-cov ==5.0.0` → [Updates: `==7.1.0`]
- `pytest-mock ==3.14.0` → [Updates: `==3.15.1`]
- `pyyaml ==6.0.2` → [Updates: `==6.0.3`]
- `requests ==2.32.3` → [Updates: `==2.33.0`]
- `requests-mock ==1.12.1`
- `setuptools ==75.5.0` → [Updates: `==83.0.0`]
- `snowballstemmer ==2.2.0` → [Updates: `==3.1.1`]
- `sphinx ==6.2.1` → [Updates: `==9.1.0`]
- `sphinx-rtd-theme ==1.3.0` → [Updates: `==3.1.0`]
- `sphinxcontrib-applehelp ==2.0.0`
- `sphinxcontrib-devhelp ==2.0.0`
- `sphinxcontrib-htmlhelp ==2.1.0`
- `sphinxcontrib-jquery ==4.1`
- `sphinxcontrib-jsmath ==1.0.1`
- `sphinxcontrib-qthelp ==2.0.0`
- `sphinxcontrib-serializinghtml ==2.0.0`
- `stomp-py ==8.2.0` → [Updates: `==9.0.0`]
- `typing-extensions ==4.15.0` → [Updates: `==4.16.0`]
- `typing-inspection ==0.4.2` → [Updates: `==0.4.4`]
- `urllib3 ==2.2.3` → [Updates: `==2.7.0`]
- `websocket-client ==1.8.0` → [Updates: `==1.9.2`]
- `workflows ==3.7`
- `zipp ==3.23.0` → [Updates: `==3.23.1`, `==4.1.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository