Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (33)

Datasource	Name	Last Updated
github-actions	vespa-engine/setup-vespa-cli-action	2024-08-12
pep621	jupyter	2024-08-30
pep621	shad4fast	2024-11-09
pip_requirements	annotated-types	2024-05-20
pip_requirements	async-timeout	2024-11-06
pip_requirements	cycler	2023-10-07
pip_requirements	docker	2024-05-23
pip_requirements	gputil	2018-12-18
pip_requirements	itsdangerous	2024-04-16
pip_requirements	loguru	2024-12-06
pip_requirements	lucide-fasthtml	2024-09-10
pip_requirements	mdurl	2022-08-14
pip_requirements	pdf2image	2024-01-07
pip_requirements	pyasn1	2024-09-11
pip_requirements	python-dateutil	2024-03-01
pip_requirements	requests-toolbelt	2023-05-01
pip_requirements	seaborn	2024-01-25
pip_requirements	shad4fast	2024-11-09
pip_requirements	shellingham	2023-10-24
pip_requirements	six	2024-12-04
pip_requirements	sniffio	2024-02-25
pip_requirements	spacy-legacy	2024-01-25
pip_requirements	spacy-loggers	2023-09-11
pip_requirements	sqlite-minutils	2024-12-01
pip_requirements	tqdm	2024-11-24
pip_requirements	wasabi	2024-05-31

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Pin dependencies (actions/checkout, actions/download-artifact, actions/setup-java, actions/setup-python, actions/upload-artifact, aws-actions/configure-aws-credentials, grafana/grafana, maven, prom/prometheus, python, vespa-engine/setup-vespa-cli-action, vespaengine/vespa)
• Update dependency apswutils to v0.1.2
• Update dependency cachetools to v5.5.2
• Update dependency cffi to v1.17.1
• Update dependency colpali-engine to v0.3.13
• Update dependency contourpy to v1.3.3
• Update dependency cryptography to v44.0.3
• Update dependency cymem to v2.0.13
• Update dependency einops to v0.8.1
• Update dependency fastlite to v0.2.3
• Update dependency google-generativeai to v0.8.6
• Update dependency httpcore to v1.0.9
• Update dependency kiwisolver to v1.4.9
• Update dependency loguru to v0.7.3
• Update dependency multiprocess to v0.70.18
• Update dependency murmurhash to v1.0.15
• Update dependency preshed to v3.0.12
• Update dependency pyasn1-modules to v0.4.2
• Update dependency python-fasthtml to v0.12.37
• Update dependency python-multipart to v0.0.21
• Update dependency pytrec-eval-terrier to v0.5.10
• Update dependency pyyaml to v6.0.3
• Update dependency requests to v2.32.5
• Update dependency rich to v13.9.4
• Update dependency rsa to v4.9.1
• Update dependency sentencepiece to v0.2.1
• Update dependency sqlite-minutils to v3.37.0.post4
• Update dependency urllib3 to v2.6.2
• Update dependency vidore-benchmark to v4.0.2
• Update dependency weasel to v0.4.3
• Update maven Docker tag to v3.9.12
• Update dependency aiohappyeyeballs to v2.6.1
• Update dependency aiohttp to v3.13.2
• Update dependency aiosignal to v1.4.0
• Update dependency anyio to v4.12.0
• Update dependency apsw to v3.51.1.0
• Update dependency attrs to v24.3.0
• Update dependency beautifulsoup4 to v4.14.3
• Update dependency blis to v0.9.1
• Update dependency certifi to v2024.12.14
• Update dependency charset-normalizer to v3.4.4
• Update dependency click to v8.3.1
• Update dependency cloudpathlib to v0.23.0
• Update dependency dill to v0.4.0
• Update dependency eval-type-backport to v0.3.1
• Update dependency exceptiongroup to v1.3.1
• Update dependency Faker to v37.12.0
• Update dependency fastcore to v1.10.3
• Update dependency font-awesome to v6.7.2
• Update dependency fonttools to v4.61.1
• Update dependency frozenlist to v1.8.0
• Update dependency fsspec to v2024.12.0
• Update dependency google-ai-generativelanguage to v0.9.0
• Update dependency google-api-core to v2.28.1
• Update dependency google-api-python-client to v2.187.0
• Update dependency google-auth to v2.45.0
• Update dependency google-auth-httplib2 to v0.3.0
• Update dependency googleapis-common-protos to v1.72.0
• Update dependency grpcio to v1.76.0
• Update dependency grpcio-status to v1.76.0
• Update dependency hpack to v4.1.0
• Update dependency html-proofer to v5.1.1
• Update dependency httplib2 to v0.31.0
• Update dependency httptools to v0.7.1
• Update dependency httpx to v0.28.1
• Update dependency huggingface-hub to v0.36.0
• Update dependency hyperframe to v6.1.0
• Update dependency idna to v3.11
• Update dependency jekyll to v4.4.1
• Update dependency joblib to v1.5.3
• Update dependency langcodes to v3.5.1
• Update dependency language-data to v1.4.0
• Update dependency lxml to v5.4.0
• Update dependency marisa-trie to v1.3.1
• Update dependency matplotlib to v3.10.8
• Update dependency mteb to v1.39.7
• Update dependency multidict to v6.7.0
• Update dependency networkx to v3.6.1
• Update dependency oauthlib to v3.3.1
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6
• Update dependency org.apache.lucene:lucene-analysis-stempel to v9.12.3
• Update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0
• Update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
• Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1
• Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1
• Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.9.0
• Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.0
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.4
• Update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3
• Update dependency org.codehaus.mojo:versions-maven-plugin to v2.20.1
• Update dependency org.junit.jupiter:junit-jupiter to v5.14.1
• Update dependency packaging to v24.2
• Update dependency pandas to v2.3.3
• Update dependency peft to v0.18.0
• Update dependency polars to v1.36.1
• Update dependency propcache to v0.4.1
• Update dependency proto-plus to v1.27.0
• Update dependency psutil to v6.1.1
• Update dependency pycparser to v2.23
• Update dependency pydantic to v2.12.5
• Update dependency pydantic-core to v2.41.5
• Update dependency pygments to v2.19.2
• Update dependency pyparsing to v3.3.1
• Update dependency python-dotenv to v1.2.1
• Update dependency pyvespa to v0.62.0
• Update dependency rake to v13.3.1
• Update dependency regex to v2024.11.6
• Update dependency ruby to v3.4.8
• Update dependency safetensors to v0.7.0
• Update dependency scikit-learn to v1.8.0
• Update dependency scipy to v1.16.3
• Update dependency sentence-transformers to v3.4.1
• Update dependency shad4fast to v1.3.1
• Update dependency six to v1.17.0
• Update dependency smart-open to v7.5.0
• Update dependency soupsieve to v2.8.1
• Update dependency spacy to v3.8.11
• Update dependency srsly to v2.5.2
• Update dependency starlette to v0.50.0
• Update dependency sympy to v1.14.0
• Update dependency tenacity to v9.1.2
• Update dependency thinc to v8.3.10
• Update dependency threadpoolctl to v3.6.0
• Update dependency tokenizers to v0.22.1
• Update dependency torch to v2.9.1
• Update dependency tqdm to v4.67.1
• Update dependency typer to v0.21.0
• Update dependency typing-extensions to v4.15.0
• Update dependency uritemplate to v4.2.0
• Update dependency uvicorn to v0.40.0
• Update dependency uvloop to v0.22.1
• Update dependency vespacli to v8.620.35
• Update dependency watchfiles to v0.24.0
• Update dependency websockets to v13.1
• Update dependency wrapt to v1.17.3
• Update dependency xxhash to v3.6.0
• Update dependency yarl to v1.22.0
• Update module cloud.google.com/go/storage to v1.58.0
• Update module github.com/GoogleCloudPlatform/functions-framework-go to v1.9.2
• Update org.immutables.version to v2.12.0 (org.immutables:gson, org.immutables:value)
• Update Python
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update actions/setup-python action to v6
• Update aws-actions/configure-aws-credentials action to v5
• Update dependency accelerate to v1
• Update dependency async-timeout to v5
• Update dependency attrs to v25
• Update dependency blis to v1
• Update dependency cachetools to v6
• Update dependency certifi to v2025
• Update dependency cffi to v2
• Update dependency cryptography to v46
• Update dependency datasets to v4
• Update dependency Faker to v40
• Update dependency font-awesome to v7
• Update dependency fsspec to v2025
• Update dependency huggingface-hub to v1
• Update dependency lxml to v6
• Update dependency markdown-it-py to v4
• Update dependency markupsafe to v3
• Update dependency mteb to v2
• Update dependency numpy to v2
• Update dependency org.apache.lucene:lucene-analysis-stempel to v10
• Update dependency org.junit.jupiter:junit-jupiter to v6
• Update dependency packaging to v25
• Update dependency pillow to v12
• Update dependency protobuf to v6
• Update dependency psutil to v7
• Update dependency pyarrow to v22
• Update dependency pytz to v2025
• Update dependency regex to v2025
• Update dependency rich to v14
• Update dependency ruby to v4
• Update dependency sentence-transformers to v5
• Update dependency setuptools to v80
• Update dependency sqlite-minutils to v4
• Update dependency thinc to v9
• Update dependency tzdata to v2025.3
• Update dependency vidore-benchmark to v5
• Update dependency watchfiles to v1
• Update dependency websockets to v15
• Update dependency wrapt to v2
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency filelock to v3.20.1 [SECURITY]

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency pypdf to v6.4.0 [SECURITY]
• Update dependency transformers to v4.53.0 [SECURITY]

Vulnerabilities

50/50 CVEs have Renovate fixes.

pep621

visual-retrieval-colpali/pyproject.toml

torch

• GHSA-3749-ghw9-m3mg (fixed in >= 2.7.1-rc1)
• PYSEC-2025-41 (fixed in >= 2.6.0)
• GHSA-887c-mr87-cxwp (fixed in >= 2.8.0)
• GHSA-53q9-r3pm-6pq6 (fixed in >= 2.6.0)

pypdf

• GHSA-vr63-x8vc-m265 (fixed in >= 6.1.3)
• GHSA-m449-cwjh-6pw7 (fixed in >= 6.4.0)
• GHSA-7hfw-26vp-jp8m (fixed in >= 6.0.0)
• GHSA-jfx9-29x2-rv3j (fixed in >= 6.1.3)

setuptools

• GHSA-5rjg-fvgr-3xxf (fixed in >= 78.1.1)
• PYSEC-2025-49 (fixed in >= 78.1.1)

transformers

• GHSA-fpwr-67px-3qhx (fixed in >= 4.50.0)
• GHSA-q2wp-rjmx-x6x9 (fixed in >= 4.51.0)
• GHSA-59p9-h35m-wg4g (fixed in >= 4.53.0)
• GHSA-phhr-52qp-3mj4 (fixed in >= 4.52.1)
• GHSA-qxrp-vhvm-j765 (fixed in >= 4.48.0)
• GHSA-wrfc-pvp9-mr9g (fixed in >= 4.48.0)
• GHSA-4w7r-h757-3r74 (fixed in >= 4.53.0)
• PYSEC-2024-229 (fixed in >= 4.48.0)
• GHSA-jjph-296x-mrcr (fixed in >= 4.51.0)
• PYSEC-2025-40 (fixed in >= 4.49.0)
• PYSEC-2024-227 (fixed in >= 4.48.0)
• GHSA-9356-575x-2w9m (fixed in >= 4.53.0)
• GHSA-qq3j-4f4f-9583 (fixed in >= 4.50.0)
• PYSEC-2024-228 (fixed in >= 4.48.0)
• GHSA-37mw-44qp-f5jm (fixed in >= 4.52.1)
• GHSA-hxxf-235m-72v3 (fixed in >= 4.48.0)
• GHSA-6rvg-6v2m-4j46 (fixed in >= 4.48.0)
• GHSA-rcv9-qm8p-9p6j (fixed in >= 4.53.0)

pip

• GHSA-4xh5-x5gv-qwph (fixed in >= 25.3)

pip_requirements

examples/fasthtml-demo/requirements.txt

filelock

• GHSA-w853-jp5j-5j7f (fixed in >= 3.20.1)

visual-retrieval-colpali/src/requirements.txt

filelock

• GHSA-w853-jp5j-5j7f (fixed in >= 3.20.1)

pypdf

• GHSA-m449-cwjh-6pw7 (fixed in >= 6.4.0)

transformers

• GHSA-fpwr-67px-3qhx (fixed in >= 4.50.0)
• GHSA-q2wp-rjmx-x6x9 (fixed in >= 4.51.0)
• GHSA-59p9-h35m-wg4g (fixed in >= 4.53.0)
• GHSA-phhr-52qp-3mj4 (fixed in >= 4.52.1)
• GHSA-qxrp-vhvm-j765 (fixed in >= 4.48.0)
• GHSA-wrfc-pvp9-mr9g (fixed in >= 4.48.0)
• GHSA-4w7r-h757-3r74 (fixed in >= 4.53.0)
• PYSEC-2024-229 (fixed in >= 4.48.0)
• GHSA-jjph-296x-mrcr (fixed in >= 4.51.0)
• PYSEC-2025-40 (fixed in >= 4.49.0)
• PYSEC-2024-227 (fixed in >= 4.48.0)
• GHSA-9356-575x-2w9m (fixed in >= 4.53.0)
• GHSA-qq3j-4f4f-9583 (fixed in >= 4.50.0)
• PYSEC-2024-228 (fixed in >= 4.48.0)
• GHSA-37mw-44qp-f5jm (fixed in >= 4.52.1)
• GHSA-hxxf-235m-72v3 (fixed in >= 4.48.0)
• GHSA-6rvg-6v2m-4j46 (fixed in >= 4.48.0)
• GHSA-rcv9-qm8p-9p6j (fixed in >= 4.53.0)

Detected Dependencies

bundler (1)

Gemfile (4)

• ruby >=2.6
• jekyll '>= 4.2.1' → [Updates: '>= 4.2.1']
• rake lock file @ 13.1.0 → [Updates: undefined]
• html-proofer lock file @ 5.0.8 → [Updates: undefined]

docker-compose (2)

examples/operations/monitoring/album-recommendation-monitoring/docker-compose.yml (2)

• prom/prometheus unknown version → [Updates: undefined]
• grafana/grafana unknown version → [Updates: undefined]

examples/operations/multinode-HA/docker-compose.yaml (10)

• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]
• vespaengine/vespa unknown version → [Updates: undefined]

dockerfile (3)

examples/fasthtml-demo/Dockerfile (1)

• python 3.10 → [Updates: 3.14, 3.10]

examples/fasthtml-demo/Dockerfile.nonhf (1)

• python 3.10 → [Updates: 3.14, 3.10]

examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/Dockerfile (1)

• maven 3.9.5-eclipse-temurin-17 → [Updates: 3.9.12-eclipse-temurin-17, 3.9.5-eclipse-temurin-17]

github-actions (10)

.github/workflows/build.yml (2)

• actions/checkout v4 → [Updates: v6, v4]
• actions/setup-java v4 → [Updates: v5, v4]

.github/workflows/feed.yml (6)

• actions/checkout v4 → [Updates: v6, v4]
• ruby/setup-ruby v1
• actions/setup-python v4 → [Updates: v6, v4]
• vespa-engine/setup-vespa-cli-action v1 → [Updates: v1]
• ruby 3.3 → [Updates: 3.4.8, 4.0.0]
• python 3.x

.github/workflows/link-checker.yml (1)

• vespa-engine/gh-actions main

.github/workflows/update-cloud-samples.yml (6)

• actions/checkout v4 → [Updates: v6, v4]
• actions/upload-artifact v4 → [Updates: v6, v4]
• actions/checkout v4 → [Updates: v6, v4]
• actions/upload-artifact v4 → [Updates: v6, v4]
• actions/download-artifact v4 → [Updates: v7, v4]
• aws-actions/configure-aws-credentials v4 → [Updates: v5, v4]

.github/workflows/verify-guides-billion-image.yml (1)

• vespa-engine/gh-actions main

.github/workflows/verify-guides-billion-vector.yml (1)

• vespa-engine/gh-actions main

.github/workflows/verify-guides-field-generator.yml (1)

• vespa-engine/gh-actions main

.github/workflows/verify-guides-main.yml (1)

• vespa-engine/gh-actions main

.github/workflows/verify-notebooks.yml (1)

• actions/checkout v4 → [Updates: v6, v4]

examples/operations/CI-CD/.github/workflows/deploy.yaml (1)

• actions/checkout v3 → [Updates: v6, v3]

gomod (1)

examples/google-cloud/cloud-functions/go/go.mod (3)

• go 1.19
• cloud.google.com/go/storage v1.39.0 → [Updates: v1.58.0]
• github.com/GoogleCloudPlatform/functions-framework-go v1.8.0 → [Updates: v1.9.2]

html (1)

examples/ecommerce-user-preferences/webapp/templates/index.html (1)

• font-awesome 6.4.0 → [Updates: 6.7.2, 7.0.1]

maven (28)

album-recommendation-java/pom.xml

billion-scale-image-search/pom.xml (1)

• org.codehaus.mojo:exec-maven-plugin 3.2.0 → [Updates: 3.6.3]

billion-scale-vector-search/pom.xml

examples/document-processing/pom.xml

examples/embedding-service/pom.xml

examples/generic-request-processing/pom.xml (5)

• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5 → [Updates: 3.5.4]
• org.codehaus.mojo:versions-maven-plugin 2.16.2 → [Updates: 2.20.1]
• org.apache.maven.plugins:maven-antrun-plugin 3.1.0 → [Updates: 3.2.0]

examples/http-api-using-request-handlers-and-processors/pom.xml (5)

• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5 → [Updates: 3.5.4]
• org.codehaus.mojo:versions-maven-plugin 2.16.2 → [Updates: 2.20.1]
• org.apache.maven.plugins:maven-antrun-plugin 3.1.0 → [Updates: 3.2.0]

examples/joins/pom.xml

examples/lucene-linguistics/add-token-filter-factory/pom.xml

examples/lucene-linguistics/advanced-configuration/pom.xml (3)

• org.apache.lucene:lucene-analysis-stempel 9.8.0 → [Updates: 9.12.3, 10.3.2]
• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]

examples/lucene-linguistics/going-crazy/pom.xml (1)

• eu.hlavki.text:jlemmagen 1.0

examples/lucene-linguistics/minimal/pom.xml (1)

• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]

examples/lucene-linguistics/simple-korean/pom.xml

examples/multiple-bundles-lib/pom.xml (4)

• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5 → [Updates: 3.5.4]
• org.codehaus.mojo:versions-maven-plugin 2.16.2 → [Updates: 2.20.1]

examples/multiple-bundles/pom.xml (5)

• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-dependency-plugin 3.6.1 → [Updates: 3.9.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5 → [Updates: 3.5.4]
• org.codehaus.mojo:versions-maven-plugin 2.16.2 → [Updates: 2.20.1]

examples/operations/CI-CD/production-deployment-with-tests-java/pom.xml

examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/pom.xml (5)

• org.immutables:value 2.10.0 → [Updates: 2.12.0]
• org.immutables:gson 2.10.0 → [Updates: 2.12.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-assembly-plugin 3.6.0 → [Updates: 3.8.0]
• org.apache.maven.plugins:maven-jar-plugin 3.3.0 → [Updates: 3.5.0]

examples/predicate-fields/pom.xml (5)

• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5 → [Updates: 3.5.4]
• org.codehaus.mojo:versions-maven-plugin 2.16.2 → [Updates: 2.20.1]
• org.apache.maven.plugins:maven-antrun-plugin 3.1.0 → [Updates: 3.2.0]

examples/reranker/pom.xml (1)

• org.apache.httpcomponents.client5:httpclient5 5.3.1 → [Updates: 5.6]

examples/vespa-chinese-linguistics/pom.xml (4)

• com.google.inject:guice 7.0.0
• com.huaban:jieba-analysis 1.0.3
• org.junit.jupiter:junit-jupiter 5.10.1 → [Updates: 5.14.1, 6.0.1]
• org.apache.maven.plugins:maven-compiler-plugin 3.12.1 → [Updates: 3.14.1]

incremental-search/search-as-you-type/pom.xml

incremental-search/search-suggestions/pom.xml

model-inference/pom.xml

news/app-6-recommendation-with-searchers/pom.xml

news/app-7-parent-child/pom.xml

pom.xml

text-image-search/pom.xml (1)

• org.codehaus.mojo:exec-maven-plugin 3.2.0 → [Updates: 3.6.3]

use-case-shopping/pom.xml (3)

• org.apache.httpcomponents:httpclient 4.5.14
• org.apache.httpcomponents:httpcore 4.4.16
• org.codehaus.mojo:exec-maven-plugin 3.2.0 → [Updates: 3.6.3]

pep621 (2)

examples/workshop-ecommerce/pyproject.toml (5)

• python >=3.12
• jupyter >=1.1.1
• pandas >=2.3.3
• pyvespa >=0.62.0
• vespacli >=8.591.16

visual-retrieval-colpali/pyproject.toml (9)

• python >=3.10, <3.12 → [Updates: >=3.14, <3.15]
• python-fasthtml ==0.12.33 → [Updates: ==0.12.37]
• uvicorn ==0.38.0 → [Updates: ==0.40.0]
• pyvespa >=0.50.0
• vidore-benchmark >=4.0.0,<5.0.0 → [Updates: >=5.0.0,<5.1.0]
• colpali-engine ==0.3.1 → [Updates: ==0.3.13]
• shad4fast >=1.2.1
• google-generativeai >=0.7.2
• transformers ==4.45 → [Updates: ==4.53.0]

pip_requirements (8)

examples/agentic-streamlit-chatbot/advanced_app/requirements.txt

examples/agentic-streamlit-chatbot/simple_app/requirements.txt

examples/fasthtml-demo/requirements.txt (58)

• aiohappyeyeballs ==2.4.0 → [Updates: ==2.6.1]
• aiohttp ==3.12.14 → [Updates: ==3.13.2]
• aiosignal ==1.3.1 → [Updates: ==1.4.0]
• anyio ==4.4.0 → [Updates: ==4.12.0]
• attrs ==24.2.0 → [Updates: ==24.3.0, ==25.4.0]
• beautifulsoup4 ==4.12.3 → [Updates: ==4.14.3]
• certifi ==2024.7.4 → [Updates: ==2024.12.14, ==2025.11.12]
• cffi ==1.17.0 → [Updates: ==1.17.1, ==2.0.0]
• charset-normalizer ==3.3.2 → [Updates: ==3.4.4]
• click ==8.1.7 → [Updates: ==8.3.1]
• cryptography ==44.0.1 → [Updates: ==44.0.3, ==46.0.3]
• docker ==7.1.0
• fastcore ==1.7.1 → [Updates: ==1.10.3]
• fasthtml-hf a7ae831a1bd01105a9f771fb3a4e4c454ddc3176
• fastlite ==0.0.9 → [Updates: ==0.2.3]
• filelock ==3.15.4 → [Updates: ==3.20.1]
• frozenlist ==1.4.1 → [Updates: ==1.8.0]
• fsspec ==2024.6.1 → [Updates: ==2024.12.0, ==2025.12.0]
• h11 ==0.16.0
• h2 ==4.3.0
• hpack ==4.0.0 → [Updates: ==4.1.0]
• httpcore ==1.0.5 → [Updates: ==1.0.9]
• httptools ==0.6.1 → [Updates: ==0.7.1]
• httpx ==0.27.0 → [Updates: ==0.28.1]
• huggingface-hub ==0.24.6 → [Updates: ==0.36.0, ==1.2.3]
• hyperframe ==6.0.1 → [Updates: ==6.1.0]
• idna ==3.7 → [Updates: ==3.11]
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• markupsafe ==2.1.5 → [Updates: ==3.0.3]
• multidict ==6.0.5 → [Updates: ==6.7.0]
• oauthlib ==3.2.2 → [Updates: ==3.3.1]
• packaging ==24.1 → [Updates: ==24.2, ==25.0]
• propcache ==0.2.1 → [Updates: ==0.4.1]
• pycparser ==2.22 → [Updates: ==2.23]
• python-dateutil ==2.9.0.post0
• python-dotenv ==1.0.1 → [Updates: ==1.2.1]
• python-fasthtml ==0.4.4 → [Updates: ==0.12.37]
• python-multipart ==0.0.18 → [Updates: ==0.0.21]
• pyvespa ==0.46.0 → [Updates: ==0.62.0]
• pyyaml ==6.0.2 → [Updates: ==6.0.3]
• requests ==2.32.4 → [Updates: ==2.32.5]
• requests-toolbelt ==1.0.0
• six ==1.16.0 → [Updates: ==1.17.0]
• sniffio ==1.3.1
• soupsieve ==2.6 → [Updates: ==2.8.1]
• sqlite-minutils ==3.37.0.post1 → [Updates: ==3.37.0.post4, ==4.0.3]
• starlette ==0.49.1 → [Updates: ==0.50.0]
• tenacity ==9.0.0 → [Updates: ==9.1.2]
• tqdm ==4.66.5 → [Updates: ==4.67.1]
• typing-extensions ==4.12.2 → [Updates: ==4.15.0]
• urllib3 ==2.6.0 → [Updates: ==2.6.2]
• uvicorn ==0.30.6 → [Updates: ==0.40.0]
• uvloop ==0.20.0 → [Updates: ==0.22.1]
• vespacli ==8.391.23 → [Updates: ==8.620.35]
• watchfiles ==0.23.0 → [Updates: ==0.24.0, ==1.1.1]
• websockets ==13.0 → [Updates: ==13.1, ==15.0.1]
• yarl ==1.18.3 → [Updates: ==1.22.0]

examples/google-cloud/cloud-functions/python/requirements.txt (1)

• functions-framework ==3.*

news/requirements.txt

test/requirements.txt

text-video-search/src/python/requirements.txt

visual-retrieval-colpali/src/requirements.txt (156)

• accelerate ==0.34.2 → [Updates: ==1.12.0]
• aiohappyeyeballs ==2.6.1
• aiohttp ==3.12.14 → [Updates: ==3.13.2]
• aiosignal ==1.4.0
• annotated-types ==0.7.0
• anyio ==4.6.0 → [Updates: ==4.12.0]
• apsw ==3.50.4.0 → [Updates: ==3.51.1.0]
• apswutils ==0.1.0 → [Updates: ==0.1.2]
• async-timeout ==4.0.3 → [Updates: ==5.0.1]
• attrs ==24.2.0 → [Updates: ==24.3.0, ==25.4.0]
• beautifulsoup4 ==4.12.3 → [Updates: ==4.14.3]
• blis ==0.7.11 → [Updates: ==0.9.1, ==1.3.3]
• cachetools ==5.5.0 → [Updates: ==5.5.2, ==6.2.4]
• catalogue ==2.0.10
• certifi ==2024.8.30 → [Updates: ==2024.12.14, ==2025.11.12]
• cffi ==1.17.1 → [Updates: ==2.0.0]
• charset-normalizer ==3.3.2 → [Updates: ==3.4.4]
• click ==8.1.7 → [Updates: ==8.3.1]
• cloudpathlib ==0.20.0 → [Updates: ==0.23.0]
• colpali-engine ==0.3.1 → [Updates: ==0.3.13]
• confection ==0.1.5
• contourpy ==1.3.0 → [Updates: ==1.3.3]
• cryptography ==44.0.1 → [Updates: ==44.0.3, ==46.0.3]
• cycler ==0.12.1
• cymem ==2.0.8 → [Updates: ==2.0.13]
• datasets ==2.21.0 → [Updates: ==4.4.2]
• dill ==0.3.8 → [Updates: ==0.4.0]
• docker ==7.1.0
• einops ==0.8.0 → [Updates: ==0.8.1]
• eval-type-backport ==0.2.0 → [Updates: ==0.3.1]
• exceptiongroup ==1.2.2 → [Updates: ==1.3.1]
• fastcore ==1.8.15 → [Updates: ==1.10.3]
• fastlite ==0.2.1 → [Updates: ==0.2.3]
• filelock ==3.16.1 → [Updates: ==3.20.1]
• fonttools ==4.60.2 → [Updates: ==4.61.1]
• frozenlist ==1.4.1 → [Updates: ==1.8.0]
• fsspec ==2024.6.1 → [Updates: ==2024.12.0, ==2025.12.0]
• google-ai-generativelanguage ==0.6.10 → [Updates: ==0.9.0]
• google-api-core ==2.21.0 → [Updates: ==2.28.1]
• google-api-python-client ==2.149.0 → [Updates: ==2.187.0]
• google-auth ==2.35.0 → [Updates: ==2.45.0]
• google-auth-httplib2 ==0.2.0 → [Updates: ==0.3.0]
• google-generativeai ==0.8.3 → [Updates: ==0.8.6]
• googleapis-common-protos ==1.65.0 → [Updates: ==1.72.0]
• gputil ==1.4.0
• grpcio ==1.67.0 → [Updates: ==1.76.0]
• grpcio-status ==1.67.0 → [Updates: ==1.76.0]
• h11 ==0.16.0
• h2 ==4.3.0
• hf-xet ==1.2.0
• hpack ==4.1.0
• httpcore ==1.0.9
• httplib2 ==0.22.0 → [Updates: ==0.31.0]
• httptools ==0.7.1
• httpx ==0.27.2 → [Updates: ==0.28.1]
• huggingface-hub ==0.36.0 → [Updates: ==1.2.3]
• hyperframe ==6.1.0
• idna ==3.10 → [Updates: ==3.11]
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• joblib ==1.4.2 → [Updates: ==1.5.3]
• kiwisolver ==1.4.7 → [Updates: ==1.4.9]
• langcodes ==3.4.1 → [Updates: ==3.5.1]
• language-data ==1.2.0 → [Updates: ==1.4.0]
• loguru ==0.7.2 → [Updates: ==0.7.3]
• lucide-fasthtml ==0.0.9
• lxml ==5.3.0 → [Updates: ==5.4.0, ==6.0.2]
• marisa-trie ==1.2.1 → [Updates: ==1.3.1]
• markdown-it-py ==3.0.0 → [Updates: ==4.0.0]
• markupsafe ==2.1.5 → [Updates: ==3.0.3]
• matplotlib ==3.9.2 → [Updates: ==3.10.8]
• mdurl ==0.1.2
• mpmath ==1.3.0
• mteb ==1.15.3 → [Updates: ==1.39.7, ==2.6.4]
• multidict ==6.1.0 → [Updates: ==6.7.0]
• multiprocess ==0.70.16 → [Updates: ==0.70.18]
• murmurhash ==1.0.10 → [Updates: ==1.0.15]
• networkx ==3.3 → [Updates: ==3.6.1]
• numpy ==1.26.4 → [Updates: ==2.4.0]
• oauthlib ==3.2.2 → [Updates: ==3.3.1]
• packaging ==24.1 → [Updates: ==24.2, ==25.0]
• pandas ==2.2.3 → [Updates: ==2.3.3]
• pdf2image ==1.17.0
• peft ==0.11.1 → [Updates: ==0.18.0]
• pillow ==10.4.0 → [Updates: ==12.1.0]
• pip ==25.3
• polars ==1.9.0 → [Updates: ==1.36.1]
• preshed ==3.0.9 → [Updates: ==3.0.12]
• propcache ==0.4.1
• proto-plus ==1.24.0 → [Updates: ==1.27.0]
• protobuf ==5.29.5 → [Updates: ==6.33.2]
• psutil ==6.0.0 → [Updates: ==6.1.1, ==7.2.1]
• pyarrow ==17.0.0 → [Updates: ==22.0.0]
• pyasn1 ==0.6.1
• pyasn1-modules ==0.4.1 → [Updates: ==0.4.2]
• pycparser ==2.22 → [Updates: ==2.23]
• pydantic ==2.9.2 → [Updates: ==2.12.5]
• pydantic-core ==2.23.4 → [Updates: ==2.41.5]
• pygments ==2.18.0 → [Updates: ==2.19.2]
• pyparsing ==3.1.4 → [Updates: ==3.3.1]
• pypdf ==6.1.3 → [Updates: ==6.4.0]
• python-dateutil ==2.9.0.post0
• python-dotenv ==1.0.1 → [Updates: ==1.2.1]
• python-fasthtml ==0.12.33 → [Updates: ==0.12.37]
• python-multipart ==0.0.18 → [Updates: ==0.0.21]
• pytrec-eval-terrier ==0.5.6 → [Updates: ==0.5.10]
• pytz ==2024.2 → [Updates: ==2025.2]
• pyvespa ==0.50.0 → [Updates: ==0.62.0]
• pyyaml ==6.0.2 → [Updates: ==6.0.3]
• regex ==2024.9.11 → [Updates: ==2024.11.6, ==2025.11.3]
• requests ==2.32.4 → [Updates: ==2.32.5]
• requests-toolbelt ==1.0.0
• rich ==13.9.2 → [Updates: ==13.9.4, ==14.2.0]
• rsa ==4.9 → [Updates: ==4.9.1]
• safetensors ==0.4.5 → [Updates: ==0.7.0]
• scikit-learn ==1.5.2 → [Updates: ==1.8.0]
• scipy ==1.14.1 → [Updates: ==1.16.3]
• seaborn ==0.13.2
• sentence-transformers ==3.1.1 → [Updates: ==3.4.1, ==5.2.0]
• sentencepiece ==0.2.0 → [Updates: ==0.2.1]
• setuptools ==78.1.1 → [Updates: ==80.9.0]
• shad4fast ==1.2.1 → [Updates: ==1.3.1]
• shellingham ==1.5.4
• six ==1.16.0 → [Updates: ==1.17.0]
• smart-open ==7.0.5 → [Updates: ==7.5.0]
• sniffio ==1.3.1
• soupsieve ==2.6 → [Updates: ==2.8.1]
• spacy ==3.7.5 → [Updates: ==3.8.11]
• spacy-legacy ==3.0.12
• spacy-loggers ==1.0.5
• srsly ==2.4.8 → [Updates: ==2.5.2]
• starlette ==0.49.1 → [Updates: ==0.50.0]
• sympy ==1.13.3 → [Updates: ==1.14.0]
• tenacity ==9.0.0 → [Updates: ==9.1.2]
• thinc ==8.2.5 → [Updates: ==8.3.10, ==9.1.1]
• threadpoolctl ==3.5.0 → [Updates: ==3.6.0]
• tokenizers ==0.20.3 → [Updates: ==0.22.1]
• torch ==2.8.0 → [Updates: ==2.9.1]
• tqdm ==4.66.5 → [Updates: ==4.67.1]
• transformers ==4.45.0 → [Updates: ==4.53.0]
• typer ==0.12.5 → [Updates: ==0.21.0]
• typing-extensions ==4.12.2 → [Updates: ==4.15.0]
• tzdata ==2024.2 → [Updates: ==2025.3]
• uritemplate ==4.1.1 → [Updates: ==4.2.0]
• urllib3 ==2.6.0 → [Updates: ==2.6.2]
• uvicorn ==0.38.0 → [Updates: ==0.40.0]
• uvloop ==0.20.0 → [Updates: ==0.22.1]
• vespacli ==8.391.23 → [Updates: ==8.620.35]
• vidore-benchmark ==4.0.0 → [Updates: ==4.0.2, ==5.0.0]
• wasabi ==1.1.3
• watchfiles ==0.24.0 → [Updates: ==1.1.1]
• weasel ==0.4.1 → [Updates: ==0.4.3]
• websockets ==13.1 → [Updates: ==15.0.1]
• wrapt ==1.16.0 → [Updates: ==1.17.3, ==2.0.1]
• xxhash ==3.5.0 → [Updates: ==3.6.0]
• yarl ==1.22.0

poetry (2)

examples/mcp-server-app/script/pyproject.toml (2)

• Faker ==37.5.3 → [Updates: ==37.12.0, ==40.1.0]
• tzdata ==2025.2 → [Updates: ==2025.3]

rag-blueprint/eval/pyproject.toml (4)

• lightgbm >=4.6.0
• pandas >=2.3.0
• pyvespa >=0.57.0
• scikit-learn >=1.7.0

renovate-config-presets (1)

renovate.json

terraform (3)

examples/operations/monitoring/vespa-grafana-terraform/main.tf (1)

• grafana >= 1.28.2

examples/operations/monitoring/vespa-grafana-terraform/modules/alerts/main.tf (1)

• grafana >= 1.28.2

examples/operations/monitoring/vespa-grafana-terraform/modules/dashboards/main.tf (1)

• grafana >= 1.28.2

---

• Check this box to trigger a request for Renovate to run again on this repository