Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/hacs/integration). ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (8) | Datasource | Package | Last Updated | |------------|------|-------------| | github-actions | [szenius/set-timezone](https://redirect.github.com/szenius/set-timezone) | `2024-05-07` | | pip_requirements | [async-timeout](https://redirect.github.com/aio-libs/async-timeout) | `2024-11-06` | | pip_requirements | [asynctest](https://redirect.github.com/Martiusweb/asynctest) | `2019-05-14` | | pip_requirements | [freezegun](https://redirect.github.com/spulec/freezegun) | `2025-08-09` | | pip_requirements | [pre-commit-hooks](https://redirect.github.com/pre-commit/pre-commit-hooks) | `2025-08-09` | | pip_requirements | [pytest-snapshot](https://redirect.github.com/joseph-roitman/pytest-snapshot) | `2022-04-23` | ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] [Update python:3.14-alpine Docker digest to 016508b](../pull/5492) - [ ] Update codecov/codecov-action action to v7.1.1 - [ ] Update dependency spdx/license-list-data to v3.29.0 - [ ] Update docker/build-push-action action to v7.4.0 - [ ] Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v4 - [ ] Update mcr.microsoft.com/devcontainers/python Docker tag to v3 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update home-assistant/actions digest to 58bff37](../pull/5469) - [ ] [Update dependency ruff to v0.16.7](../pull/5523) - [ ] [Update softprops/action-gh-release action to v3.0.3](../pull/5525) - [ ] [Update dependency homeassistant to v2026.9.2](../pull/5531) - [ ] [Update dependency isort to v9](../pull/5517) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [Update dependency python to 3.14](../pull/5373) - [ ] [Update dependency pycares to v5](../pull/5358) ## Vulnerabilities > [!IMPORTANT] > `12`/`12` CVEs have Renovate fixes. pip_requirements

requirements_core_min.txt

homeassistant

- [GHSA-46j8-vpx8-6p72](https://osv.dev/vulnerability/GHSA-46j8-vpx8-6p72) (fixed in >= 2026.01) - [GHSA-5hxg-r395-fqxx](https://osv.dev/vulnerability/GHSA-5hxg-r395-fqxx) (fixed in >= 2026.6.0) - [GHSA-mq77-rv97-285m](https://osv.dev/vulnerability/GHSA-mq77-rv97-285m) (fixed in >= 2025.10.2) - [GHSA-pp3g-xmm4-5cw9](https://osv.dev/vulnerability/GHSA-pp3g-xmm4-5cw9) (fixed in >= 2025.8.0) - [GHSA-r584-6283-p7xc](https://osv.dev/vulnerability/GHSA-r584-6283-p7xc) (fixed in >= 2026.01) - [GHSA-x84v-g949-293w](https://osv.dev/vulnerability/GHSA-x84v-g949-293w) (fixed in >= 2026.6.0) - [PYSEC-2026-1453](https://osv.dev/vulnerability/PYSEC-2026-1453) (fixed in >= 2025.10.2) - [PYSEC-2026-1454](https://osv.dev/vulnerability/PYSEC-2026-1454) (fixed in >= 2025.8.0) - [PYSEC-2026-241](https://osv.dev/vulnerability/PYSEC-2026-241) (fixed in >= 2026.6.0) - [PYSEC-2026-2516](https://osv.dev/vulnerability/PYSEC-2026-2516) (fixed in >= 2026.01) - [PYSEC-2026-2517](https://osv.dev/vulnerability/PYSEC-2026-2517) (fixed in >= 2026.01) - [PYSEC-2026-3669](https://osv.dev/vulnerability/PYSEC-2026-3669) (fixed in >= 2026.6.0)

## Detected Dependencies devcontainer (1)

.devcontainer.json (6) - `mcr.microsoft.com/devcontainers/python 1-3.13` → [Updates: `3-3.13`] - `ghcr.io/anthropics/devcontainer-features/claude-code 1.0` - `ghcr.io/devcontainers/features/docker-in-docker 2` → [Updates: `4`] - `ghcr.io/devcontainers/features/github-cli 1` - `ghcr.io/devcontainers/features/node 2` - `ghcr.io/devcontainers/features/rust 1`

dockerfile (1)

action/Dockerfile (1) - `python 3.14-alpine@sha256:26730869004e2b9c4b9ad09cab8625e81d256d1ce97e72df5520e806b1709f92` → [Updates: `3.14-alpine`]

github-actions (9)

.github/workflows/action-container.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f` - `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302` - `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7.4.0`] .github/workflows/generate-hacs-data.yml (11) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c` - `python 3.14` - `python 3.14` .github/workflows/lint.yaml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `python 3.14` .github/workflows/lock.yml (1) - `dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c` .github/workflows/publish.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `softprops/action-gh-release v3.0.2@3d0d9888cb7fd7b750713d6e236d1fcb99157228` → [Updates: `v3.0.3`] - `python 3.14` .github/workflows/pull_requests_labels.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ludeeus/action-require-labels 2.0.0@be19cd7f04c6fad46a85336f9e9cebdf961807bb` .github/workflows/pytest.yml (8) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `szenius/set-timezone v2.0@1f9716b0f7120e344f0c62bb7b1ee98819aefd42` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `szenius/set-timezone v2.0@1f9716b0f7120e344f0c62bb7b1ee98819aefd42` - `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.1`] - `python 3.13` → [Updates: `3.14`] .github/workflows/stale.yml (1) - `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93` .github/workflows/validate.yml (9) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `home-assistant/actions master@e3fb68ebda13d88a0d695082f471ba2c83d025fb` → [Updates: `master`] - `hacs/action main@1ebf01c408f29afcb6406bd431bc98fd8cbb15aa` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97` - `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `python 3.14`

homeassistant-manifest (1)

custom_components/hacs/manifest.json (1) - `aiogithubapi >=22.10.1`

pip_requirements (6)

requirements_action.txt (2) - `aiogithubapi ==26.0.0` - `homeassistant ==2026.8.3` → [Updates: `==2026.9.2`] requirements_base.txt (6) - `aiogithubapi >=21.11.0` - `aiohttp >=3.8.3,<4.0` - `async-timeout >=4.0.2` - `asynctest ==0.13.0` - `colorlog ==6.12.0` - `setuptools ==84.0.0` requirements_core_min.txt requirements_generate_data.txt (2) - `awscli ==1.46.1` - `homeassistant ==2026.8.3` → [Updates: `==2026.9.2`] requirements_lint.txt (7) - `codespell ==2.4.3` - `isort ==8.0.1` → [Updates: `==9.0.1`] - `pre-commit ==4.6.2` - `pre-commit-hooks ==6.0.0` - `pyupgrade ==3.21.2` - `ruff ==0.16.4` → [Updates: `==0.16.7`] - `vulture ==2.16` requirements_test.txt (10) - `asynctest ==0.13.0` - `freezegun ==1.5.5` - `josepy <3` - `pycares <5` → [Updates: `<6`] - `pytest ==9.1.1` - `pytest-asyncio ==1.4.0` - `pytest-cov ==7.1.0` - `pytest-snapshot ==0.9.0` - `pytest-socket ==0.8.1` - `RestrictedPython ==8.5`

regex (1)

custom_components/hacs/validate/license.py (1) - `spdx/license-list-data v3.28.0@c4a7237ec8f4654e867546f9f409749300f1bf4c` → [Updates: `v3.29.0`]

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository