Renovate: all non-major dependencies

renovate[bot] · web-flow · commit db883d8c3b15 · 2026-02-18T13:34:12.000Z
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -59,7 +59,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@v4
               with:
-                  version: "0.5.10"
+                  version: "0.10.4"
                   python-version: "3.11"
                   enable-cache: true
 
@@ -79,7 +79,7 @@ jobs:
                   AZURE_KEY_VAULT_SECRET_NAME: test
 
             - name: Upload coverage reports to Codecov
-              uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
+              uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
               with:
                   directory: ${{ matrix.package_dir }}
               env:
@@ -96,7 +96,7 @@ jobs:
             - name: Install uv
               uses: astral-sh/setup-uv@v4
               with:
-                  version: "0.5.10"
+                  version: "0.10.4"
                   python-version: "3.11"
                   enable-cache: true
 
@@ -178,7 +178,7 @@ jobs:
 
 
             - name: Upload coverage reports to Codecov
-              uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
+              uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
               with:
                 directory: test
               env:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -14,15 +14,15 @@
 ---
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.12.2
+    rev: v0.15.1
     hooks:
       - id: ruff-check # linter
         args:
           - --fix
       - id: ruff-format # formatter
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.16.1
+    rev: v1.19.1
     hooks:
       - id: mypy
         entry: mypy .
@@ -31,7 +31,7 @@ repos:
         additional_dependencies:
           ["types-PyYAML", "types-requests", "types-python-slugify", "types-psycopg2"]
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.33.2
+    rev: 0.36.2
     hooks:
       # Schemas taken from https://www.schemastore.org/json/
       - id: check-jsonschema
@@ -50,6 +50,6 @@ repos:
 
   # avoid forgetting to update the lock file after pyproject.toml changes
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.7.19
+    rev: 0.10.4
     hooks:
       - id: uv-lock
diff --git a/cli/pyproject.toml b/cli/pyproject.toml
@@ -8,8 +8,8 @@ requires-python = ">=3.11"
 classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
     "core==0.2.0rc0",
-    "click==8.1.7",
-    "tqdm==4.67.1",
+    "click==8.3.1",
+    "tqdm==4.67.3",
 ]
 
 [project.optional-dependencies]
diff --git a/docker/orthanc/Dockerfile b/docker/orthanc/Dockerfile
@@ -11,7 +11,7 @@
 #  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 #  See the License for the specific language governing permissions and
 #  limitations under the License.
-FROM orthancteam/orthanc:24.7.3@sha256:57a3d037729897331027ddc00c12695b50f1effbbf805f855396f3d0248d2d5f AS pixl_orthanc_uv
+FROM orthancteam/orthanc:24.12.0@sha256:31b5e84b5ce30e8c771337bdbb333999db90a9a53cf78f85b9a632ded0357b07 AS pixl_orthanc_uv
 SHELL ["/bin/bash", "-o", "pipefail", "-e", "-u", "-x", "-c"]
 
 # Create a virtual environment, recommended since python 3.11 and Debian bookworm based images
@@ -22,7 +22,7 @@ RUN export DEBIAN_FRONTEND=noninteractive && \
     apt-get autoremove --yes && apt-get clean --yes && rm -rf /var/lib/apt/lists/*
 
 # install uv
-COPY --from=ghcr.io/astral-sh/uv:0.5.10 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.10.4@sha256:4cac394b6b72846f8a85a7a0e577c6d61d4e17fe2ccee65d9451a8b3c9efb4ac /uv /uvx /bin/
 ENV PYTHONPATH=/.venv/lib64/python3.11/site-packages/
 
 FROM pixl_orthanc_uv AS pixl_orthanc_with_spec
diff --git a/docker/pixl-python/Dockerfile b/docker/pixl-python/Dockerfile
@@ -11,7 +11,7 @@
 #  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 #  See the License for the specific language governing permissions and
 #  limitations under the License.
-FROM python:3.12.4-slim-bullseye@sha256:26ce493641ad3b1c8a6202117c31340c7bbb2dc126f1aeee8ea3972730a81dc6 AS pixl_python_base
+FROM python:3.13.6-slim-bullseye@sha256:e98b521460ee75bca92175c16247bdf7275637a8faaeb2bcfa19d879ae5c4b9a AS pixl_python_base
 SHELL ["/bin/bash", "-o", "pipefail", "-e", "-u", "-x", "-c"]
 
 ARG TEST="false"
@@ -35,7 +35,7 @@ EOF
 HEALTHCHECK CMD /usr/bin/curl -f http://0.0.0.0:8000/heart-beat || exit 1
 
 # install uv
-COPY --from=ghcr.io/astral-sh/uv:0.5.10 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.10.4@sha256:4cac394b6b72846f8a85a7a0e577c6d61d4e17fe2ccee65d9451a8b3c9efb4ac /uv /uvx /bin/
 
 WORKDIR /app
 # specify what we're installing using build time arg
diff --git a/hasher/pyproject.toml b/hasher/pyproject.toml
@@ -8,12 +8,12 @@ requires-python = ">=3.11"
 classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
     "core==0.2.0rc0",
-    "azure-identity==1.19.0",
+    "azure-identity==1.25.2",
     "azure-keyvault==4.2.0",
-    "fastapi==0.115.6",
-    "hypothesis==6.122.3",
-    "requests==2.32.4",
-    "uvicorn==0.32.1",
+    "fastapi==0.129.0",
+    "hypothesis==6.151.9",
+    "requests==2.32.5",
+    "uvicorn==0.41.0",
 ]
 
 [project.optional-dependencies]
diff --git a/pixl_core/pyproject.toml b/pixl_core/pyproject.toml
@@ -7,24 +7,24 @@ readme = "README.md"
 requires-python = ">=3.11"
 classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
-    "aio_pika==9.5.3",
-    "azure-identity==1.19.0",
+    "aio_pika==9.5.8",
+    "azure-identity==1.25.2",
     "azure-keyvault==4.2.0",
-    "fastapi==0.115.6",
-    "jsonpickle==4.0.0",
+    "fastapi==0.129.0",
+    "jsonpickle==4.1.1",
     "loguru==0.7.3",
-    "pandas==2.2.3",
+    "pandas==2.3.3",
     "pika==1.3.2",
-    "psycopg2-binary==2.9.10",
+    "psycopg2-binary==2.9.11",
     "pyarrow==18.1.0",
-    "pydantic==2.10.3",
+    "pydantic==2.12.5",
     "python-decouple==3.8",
     "python-slugify==8.0.4",
-    "PyYAML==6.0.2",
-    "requests==2.32.4",
-    "sqlalchemy==2.0.36",
+    "PyYAML==6.0.3",
+    "requests==2.32.5",
+    "sqlalchemy==2.0.46",
     "token-bucket==0.3.0",
-    "xnat==0.6.2",
+    "xnat==0.7.2",
 ]
 
 
diff --git a/pixl_dcmd/pyproject.toml b/pixl_dcmd/pyproject.toml
@@ -8,14 +8,14 @@ requires-python = ">=3.11"
 classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
     "core==0.2.0rc0",
-    "arrow==1.3.0",
+    "arrow==1.4.0",
     "dicom-anonymizer==1.0.13.post1",
-    "dicom-validator==0.7.3",
+    "dicom-validator==0.8.0",
     "logger==1.4",
     "pydicom==2.4.4",
     "pydicom-data",
     "python-decouple==3.8",
-    "requests==2.32.4",
+    "requests==2.32.5",
     "setuptools", # pydicom needs this
     "types-requests~=2.28",
 ]
diff --git a/pixl_export/pyproject.toml b/pixl_export/pyproject.toml
@@ -8,8 +8,8 @@ requires-python = ">=3.11"
 classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
     "core==0.2.0rc0",
-    "uvicorn==0.32.1",
-    "azure-storage-blob==12.24.0",
+    "uvicorn==0.41.0",
+    "azure-storage-blob==12.28.0",
 ]
 
 [project.optional-dependencies]
diff --git a/pixl_imaging/pyproject.toml b/pixl_imaging/pyproject.toml
@@ -9,9 +9,9 @@ classifiers = ["Programming Language :: Python :: 3"]
 dependencies = [
     "core==0.2.0rc0",
     "aiohttp==3.13.3",
-    "alembic==1.14.0",
+    "alembic==1.18.4",
     "pydicom==2.4.4",
-    "uvicorn==0.32.1",
+    "uvicorn==0.41.0",
 ]
 
 [project.optional-dependencies]
diff --git a/pyproject.toml b/pyproject.toml
@@ -52,19 +52,19 @@ build-backend = "hatchling.build"
 
 [dependency-groups]
 dev = [
-    "mypy==1.13.0",
-    "pre-commit==4.0.1",
-    "pytest==8.3.4",
+    "mypy==1.19.1",
+    "pre-commit==4.5.1",
+    "pytest==8.4.2",
     "ruff>=0.11",
-    "pytest-mock==3.14.0",
+    "pytest-mock==3.15.1",
     "httpx==0.28.*",
-    "pytest-asyncio==0.24.0",
-    "pytest-check==2.4.1",
-    "pytest-cov==6.0.0",
+    "pytest-asyncio==0.26.0",
+    "pytest-check==2.6.2",
+    "pytest-cov==6.3.0",
     "pytest-pixl==0.2.0rc0",
-    "xnat4tests==0.3.12",
-    "dcm2niix==1.0.20220715",
-    "nibabel==5.3.2",
+    "xnat4tests==0.4.1",
+    "dcm2niix==1.0.20250506",
+    "nibabel==5.3.3",
 ]
 
 [tool.coverage.report]
diff --git a/pytest-pixl/pyproject.toml b/pytest-pixl/pyproject.toml
@@ -10,11 +10,11 @@ classifiers = [
 ]
 dependencies = [
     "pydicom==2.4.4",
-    "pyftpdlib==2.0.1",
+    "pyftpdlib==2.2.0",
     "pyOpenSSL==24.3.0",
     "python-decouple==3.8",
     "pytest-loguru==0.4.0",
-    "requests==2.32.4",
+    "requests==2.32.5",
 ]
 
 [project.optional-dependencies]
