Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update github actions (`google/osv-scanner-action`, `python`, `renovatebot/github-action`, `softprops/action-gh-release`)
- [ ] chore(deps): update python docker tag to v3.14
- [ ] fix(deps): update python dependencies (`numpy`, `python-dotenv`, `scipy`, `typer`)
- [ ] chore(deps): update github actions (major) (`actions/checkout`, `actions/github-script`, `actions/setup-python`, `astral-sh/setup-uv`, `gitleaks/gitleaks-action`, `postgres`)
- [ ] fix(deps): update dependency aio-pika to v10
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): lock file maintenance](../pull/315)

## Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

- `ghcr.io/devcontainers/features/common-utils 2`

dockerfile (2)

Dockerfile (1)

- `python 3.12-slim` → [Updates: `3.14-slim`]

Dockerfile.dev (2)

- `python 3.12` → [Updates: `3.14`]
- `python 3.12-slim` → [Updates: `3.14-slim`]

github-actions (10)

.github/workflows/_check.yml (1)

- `actions/github-script v8` → [Updates: `v9`]

.github/workflows/_dist.yml (3)

- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/upload-artifact v7`

.github/workflows/_schema_drift.yml (3)

- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `postgres 15` → [Updates: `18`]

.github/workflows/_test.yml (2)

- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]

.github/workflows/build_win_smartem_agent.yml (3)

- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-python v6` → [Updates: `v7`]
- `python 3.12` → [Updates: `3.14`]

.github/workflows/leaked-secrets-scan.yml (5)

- `actions/checkout v6` → [Updates: `v7`]
- `gitleaks/gitleaks-action v2` → [Updates: `v3`]
- `actions/checkout v6` → [Updates: `v7`]
- `github/codeql-action v4`
- `actions/upload-artifact v7`

.github/workflows/osv-scanner.yml (2)

- `google/osv-scanner-action v2.3.3` → [Updates: `v2.6.0`]
- `google/osv-scanner-action v2.3.3` → [Updates: `v2.6.0`]

.github/workflows/publish-openapi-spec.yml (2)

- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]

.github/workflows/release-smartem-decisions.yml (29)

- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/checkout v6` → [Updates: `v7`]
- `astral-sh/setup-uv v7` → [Updates: `v10.1.0`]
- `actions/upload-artifact v7`
- `actions/upload-artifact v7`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/setup-python v6` → [Updates: `v7`]
- `actions/upload-artifact v7`
- `actions/download-artifact v8`
- `actions/download-artifact v8`
- `pypa/gh-action-pypi-publish release/v1`
- `actions/checkout v6` → [Updates: `v7`]
- `actions/download-artifact v8`
- `actions/download-artifact v8`
- `actions/download-artifact v8`
- `softprops/action-gh-release v3.0.0@b4309332981a82ec1c5618f44dd2e27cc8bfbfda` → [Updates: `v3.0.3`]
- `actions/checkout v6` → [Updates: `v7`]
- `docker/setup-buildx-action v4`
- `docker/login-action v4`
- `docker/metadata-action v6`
- `docker/build-push-action v7`
- `python 3.12` → [Updates: `3.14`]

.github/workflows/renovate.yml (2)

- `actions/checkout v6` → [Updates: `v7`]
- `renovatebot/github-action v46.1.14` → [Updates: `v46.3.1`]

pep621 (1)

pyproject.toml (31)

- `python >=3.12`
- `httpx2 >=2.9.0,<3.0.0`
- `pytest-asyncio >=0.23.0,<2.0.0`
- `pydantic >=2.11.7,<3.0.0`
- `httpx >=0.27.0,<1.0.0`
- `requests >=2.32.0,<3.0.0`
- `sseclient-py >=1.8.0,<2.0.0`
- `fastapi >=0.116.1,<1.0.0`
- `uvicorn >=0.30.0,<1.0.0`
- `sqlalchemy >=2.0.0,<3.0.0`
- `psycopg2-binary >=2.9.10,<3.0.0`
- `sqlmodel >=0.0.24,<1.0.0`
- `alembic >=1.13.0,<2.0.0`
- `numpy >=2.0.0,<2.5.0` → [Updates: `>=2.5.3,<2.6.0`]
- `scipy >=1.0.0,<1.18.0` → [Updates: `>=1.18.1,<1.19.0`]
- `python-dotenv ==1.2.2` → [Updates: `==1.2.3`]
- `typer ==0.24.1` → [Updates: `==0.27.2`]
- `aio-pika >=9.4.0,<10.0.0` → [Updates: `>=10.0.1,<10.1.0`]
- `fastapi >=0.116.1,<1.0.0`
- `uvicorn >=0.30.0,<1.0.0`
- `sqlalchemy >=2.0.0,<3.0.0`
- `asyncpg >=0.30.0,<1.0.0`
- `psycopg2-binary >=2.9.10,<3.0.0`
- `sqlmodel >=0.0.24,<1.0.0`
- `alembic >=1.13.0,<2.0.0`
- `sse-starlette >=2.1.0,<4.0.0`
- `pyjwt >=2.9.0,<3.0.0`
- `lxml >=5.0.0,<7.0.0`
- `watchdog >=4.0.0,<7.0.0`
- `setuptools >=64`
- `setuptools_scm >=8`

renovate-config (1)

renovate.json

Start with the Dependency Dashboard and its linked pull request 315. Review the listed files, including pyproject.toml, Dockerfile files, .devcontainer/devcontainer.json, and GitHub workflow files, then run the repository checks after selecting a focused update. Done means the selected dependency updates are applied without breaking the test, build, or release workflows.

Written by the indexing model from the issue text.