Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update pandoc/core Docker tag to v3.10
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-python action to v7
- [ ] Update DeterminateSystems/magic-nix-cache-action action to v14
- [ ] Update DeterminateSystems/nix-installer-action action to v22
- [ ] Lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update renovatebot/github-action action to v46.2.5](../pull/23)
- [ ] [Update dependency python to 3.14](../pull/24)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (3)

.github/workflows/publish.yaml (4)

- `actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7`]
- `actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7`]
- `pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33`
- `python 3.13` → [Updates: `3.14`]

.github/workflows/renovate.yaml (2)

- `actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803` → [Updates: `v7`]
- `renovatebot/github-action v46.2.3@0a7b68676027570f113b1d6e7b69b231b56167ab` → [Updates: `v46.2.5`]

.github/workflows/verify.yaml (5)

- `actions/checkout v6` → [Updates: `v7`]
- `DeterminateSystems/nix-installer-action v21` → [Updates: `v22`]
- `DeterminateSystems/magic-nix-cache-action v13` → [Updates: `v14`]
- `actions/checkout v6` → [Updates: `v7`]
- `pandoc/core 3.1` → [Updates: `3.10`]

nix (1)

flake.nix (3)

- `flake-utils lock file @ 11707dc2f618dd54ca8739b309ec4fc024de578b`
- `nixpkgs nixpkgs-unstable`
- `pyproject-nix lock file @ 43f0b40edd0a74c63f66b7b48d969ae6b740d611`

poetry (1)

pyproject.toml (1)

- `markdown-it-py >=4.1`

Read the Renovate Dependency Dashboard documentation, then inspect the listed entries in .github/workflows/publish.yaml, .github/workflows/renovate.yaml, .github/workflows/verify.yaml, flake.nix, and pyproject.toml. Done means the selected rate-limited updates are created or retried and the existing dependency-update PRs are handled, but PRs 23 and 24 are already linked from this issue.

Written by the indexing model from the issue text.