Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Abandoned Dependencies

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>
> These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (10)

| Datasource | Name | Last Updated |
|------------|------|-------------|
| github-actions | `craftech-io/slack-action` | `2020-05-21` |
| poetry | `flake8` | `2025-06-20` |
| poetry | `jsl` | `2016-05-11` |
| poetry | `marshmallow-dataclass` | `2024-09-12` |
| poetry | `marshmallow-union` | `2020-06-24` |
| poetry | `pep8-naming` | `2025-05-05` |
| poetry | `pyflakes` | `2025-06-20` |
| poetry | `pytoml` | `2019-07-21` |
| poetry | `toml` | `2020-11-01` |
| poetry | `typing-inspect` | `2023-05-24` |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency ruff to v0.16.7
- [ ] Update elastic/ci-gh-actions action to v1.5.4
- [ ] Update dependency PyGithub to v2.10.0
- [ ] Update dependency python to 3.14
- [ ] Update dependency semver to v3.1.0
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-go action to v7
- [ ] Update actions/setup-python action to v7
- [ ] Update dependency setuptools to v84
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update mshick/add-pr-comment digest to ec328af](../pull/6744)
- [ ] [Update dependency marko to v2.2.4](../pull/6745)
- [ ] [Update dependency pyright to v1.1.414](../pull/6776)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update actions/checkout digest](../pull/6551)
- [ ] [Update actions/setup-go digest to 924ae3a](../pull/6382)
- [ ] [Update actions/setup-python digest to ece7cb0](../pull/6627)
- [ ] [Update elastic/docs-actions digest to 8f286cd](../pull/6137)
- [ ] [Update dependency Click to ~=8.5.0](../pull/6265)
- [ ] [Update release-drafter/release-drafter action to v7](../pull/6115)
- [ ] [Update tj-actions/changed-files action to v47](../pull/6132)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update dependency elasticsearch to ~=8.19.3](../pull/5100)
- [ ] [Update dependency nodeenv to v1.10.0](../pull/5800)
- [ ] [Update dependency requests to ~=2.34.2](../pull/5907)
- [ ] [Update dependency elasticsearch to v9](../pull/5329)
- [ ] [Update dependency marshmallow to v4](../pull/5330)
- [ ] [Update peter-evans/create-pull-request action to v8](../pull/6114)

## Detected Dependencies

github-actions (17)

.github/workflows/add-guidelines.yml (2)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `mshick/add-pr-comment v3@8e4927817251f1ff60c001f04568532b38e0b4a0` → [Updates: `v3`]

.github/workflows/backport.yml (10)

- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `craftech-io/slack-action v1@fb1d4e50375d7758efb90fa0564734bae931f84f`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `python 3.12` → [Updates: `3.14`]

.github/workflows/code-checks.yml (3)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `python 3.13` → [Updates: `3.14`]

.github/workflows/community.yml (3)

- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/docs-build.yml (1)

- `elastic/docs-actions v1@e53c90b907ba881cc54b60e447541c72600ebe86` → [Updates: `v1`]

.github/workflows/docs-deploy.yml (1)

- `elastic/docs-actions v1@e53c90b907ba881cc54b60e447541c72600ebe86` → [Updates: `v1`]

.github/workflows/docs-preview-cleanup.yml (1)

- `elastic/docs-actions v1@e53c90b907ba881cc54b60e447541c72600ebe86` → [Updates: `v1`]

.github/workflows/esql-validation.yml (4)

- `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v7`, `v5`]
- `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v7`, `v5`]
- `actions/setup-python v6@e797f83bcb11b83ae66e0230d6156d7c80228e7c` → [Updates: `v7`, `v6`]
- `python 3.13` → [Updates: `3.14`]

.github/workflows/get-target-branches.yml (3)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `python 3.12` → [Updates: `3.14`]

.github/workflows/kibana-mitre-update.yml (3)

- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `tj-actions/changed-files v46.0.5@ed68ef82c095e0d48ec87eccea555d944a631a4c` → [Updates: `v47.0.6`]

.github/workflows/lock-versions.yml (7)

- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v7`, `v5`]
- `peter-evans/create-pull-request v3@18f7dc018cc2cd597073088f7c7591b9d1c02672` → [Updates: `v8`]
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `python 3.12` → [Updates: `3.14`]

.github/workflows/pythonpackage.yml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `python 3.13` → [Updates: `3.14`]

.github/workflows/react-tests-dispatcher.yml (1)

- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]

.github/workflows/release-docs.yml (6)

- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `python 3.12` → [Updates: `3.14`]

.github/workflows/release-fleet.yml (11)

- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v7`, `v5`]
- `actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c` → [Updates: `v7`, `v6`]
- `elastic/ci-gh-actions v1.5.3@2feb1c6f5086cf8e06f61ef35e275abed3456f7b` → [Updates: `v1.5.4`]
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `python 3.12` → [Updates: `3.14`]
- `go ^1.20.1`

.github/workflows/release-line-caught-up.yml (4)

- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `python 3.12` → [Updates: `3.14`]

.github/workflows/version-code-and-release.yml (4)

- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v7`, `v4`]
- `release-drafter/release-drafter v6.4.0@6a93d829887aa2e0748befe2e808c66c0ec6e4c7` → [Updates: `v7.7.0`]

poetry (3)

lib/kibana/pyproject.toml (2)

- `requests >=2.25,<3.0`
- `elasticsearch ~=8.12.1` → [Updates: `~=8.19.3`, `~=9.5.1`]

lib/kql/pyproject.toml (2)

- `eql ==1.0.1`
- `lark >=1.3.1`

pyproject.toml (29)

- `Click ~=8.3.0` → [Updates: `~=8.5.0`]
- `elasticsearch ~=8.12.1` → [Updates: `~=8.19.3`, `~=9.5.1`]
- `eql ==1.0.1`
- `jsl ==0.2.4`
- `jsonschema >=4.21.1`
- `marko ==2.2.1` → [Updates: `==2.2.4`]
- `marshmallow-dataclass ==8.7.1`
- `marshmallow-jsonschema ~=0.16.0`
- `marshmallow-union ~=0.1.15`
- `marshmallow ~=3.26.1` → [Updates: `~=4.3.1`]
- `pytoml ==0.1.21`
- `PyYAML ~=6.0.1`
- `requests ~=2.33.1` → [Updates: `~=2.34.2`]
- `toml ==0.10.2`
- `typing-inspect ==0.9.0`
- `typing-extensions >=4.12`
- `XlsxWriter ~=3.2.0`
- `semver ==3.0.4` → [Updates: `==3.1.0`]
- `PyGithub ==2.9.1` → [Updates: `==2.10.0`]
- `setuptools ==83.0.0` → [Updates: `==84.0.0`]
- `pep8-naming ==0.15.1`
- `flake8 ==7.3.0`
- `pyflakes ==3.4.0`
- `pytest >=8.1.1`
- `nodeenv ==1.9.1` → [Updates: `==1.10.0`]
- `pre-commit ==4.6.2`
- `ruff ==0.16.0` → [Updates: `==0.16.7`]
- `pyright ==1.1.409` → [Updates: `==1.1.414`]
- `tabulate ==0.10.0`

renovate-config-presets (1)

renovate.json

---
- [ ] Check this box to run Renovate now