Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/checkout action to v7
• Update actions/create-github-app-token action to v3
• Update actions/setup-node action to v7
• Update actions/setup-python action to v7
• Update actions/upload-artifact action to v7
• Update dependency @stylistic/eslint-plugin-ts to v4
• Update dependency @types/node to v24
• Update dependency dotenv to v17
• Update dependency eslint to v10
• Update dependency eslint-plugin-unused-imports to v4
• Update dependency ipykernel to v7
• Update dependency knip to v6
• Update dependency npm-check-updates to v23
• Update dependency opencv-python to v5
• Update dependency pandas to v3
• Update dependency pytz to v2026
• Update dependency typescript to v7
• Update dependency websockets to v17
• Update dependency xarray to v2026
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update pnpm to v11
• Update pnpm/action-setup action to v6
• Update typescript-eslint monorepo to v8 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update patch-updates (bokeh, imageio, nltk)
• Update dependency e2b
• Update dependency e2b to v2.37.0
• Update dependency ipython to v9.16.1
• Update dependency numpy to v2.5.1
• Update dependency numpy to v2.5.1
• Update dependency opencv-python to v4.14.0.94
• Update dependency pandas to v2.3.3
• Update dependency plotly to v6.9.0
• Update dependency poetry to v2.4.1
• Update dependency prettier to v3.9.6
• Update dependency pydantic to v2.13.4
• Update dependency pydantic to v2.13.4
• Update dependency pytest to v9.1.1
• Update dependency pytest to v9.1.1
• Update dependency pytest-asyncio to v1.4.0
• Update dependency python to v3.14.6
• Update dependency python-docx to v1.2.0
• Update dependency requests to v2.34.2
• Update dependency scikit-image to v0.26.0
• Update dependency scikit-learn to v1.9.0
• Update dependency scipy to v1.18.0
• Update dependency soundfile to v0.14.0
• Update dependency textblob to v0.20.1
• Update dependency typescript to v5.9.3
• Update dependency uvicorn to v0.52.1
• Update dependency xarray to v2025.12.0
• Update suzuki-shunsuke/github-action-renovate-config-validator action to v2.1.0
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency ruff to ^0.16.0
• Update dependency ubuntu to v24

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency fastapi to v0.141.1
• Update dependency matplotlib to v3.11.1
• Update dependency matplotlib to v3.11.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

asdf (1)

.tool-versions (4)

• python 3.10 → [Updates: 3.14.6]
• poetry 2.1.1 → [Updates: 2.4.1]
• pnpm 10.34.5 → [Updates: 11.20.0]
• bun 1.3.14

github-actions (11)

.github/workflows/build_prod_template.yml (3)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]

.github/workflows/build_test_template.yml (3)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]

.github/workflows/charts_tests.yml (5)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/cleanup_build_template.yml

.github/workflows/js_tests.yml (8)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v3 → [Updates: v7]
• oven-sh/setup-bun v2
• denoland/setup-deno v2
• ubuntu 22.04 → [Updates: 24.04]
• deno v2.x

.github/workflows/lint.yml (6)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1

.github/workflows/performance_tests.yml (6)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1
• actions/upload-artifact v4 → [Updates: v7]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/python_tests.yml (5)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/release_candidates.yml (6)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v7]
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1

.github/workflows/release.yml (31)

• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1
• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• actions/setup-python v6 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]
• actions/create-github-app-token v1 → [Updates: v3]
• actions/checkout v4 → [Updates: v7]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6 → [Updates: v7]
• snok/install-poetry v1
• pnpm/action-setup v4 → [Updates: v6]
• actions/setup-node v6 → [Updates: v7]
• changesets/action v1
• rtCamp/action-slack-notify v2
• node 24.x

.github/workflows/validate-renovate-config.yaml (3)

• actions/checkout v6 → [Updates: v7]
• suzuki-shunsuke/github-action-renovate-config-validator v2.0.0 → [Updates: v2.1.0]
• ubuntu 24.04

npm (6)

chart_data_extractor/package.json (3)

• @typescript-eslint/eslint-plugin ^7.11.0 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^7.11.0 → [Updates: ^8.0.0]
• eslint ^8.57.1 → [Updates: ^10.0.0]

js/package.json (10)

• e2b ^2.28.0 → [Updates: ^2.28.0]
• @types/node ^20.19.19 → [Updates: ^24.0.0]
• dotenv ^16.4.5 → [Updates: ^17.0.0]
• knip ^5.25.1 → [Updates: ^6.0.0]
• npm-check-updates ^17.1.14 → [Updates: ^23.0.0]
• tsup ^8.5.1
• typescript ^5.5.3 → [Updates: ^5.5.3, ^7.0.0]
• vitest ^4.1.0
• node >=20
• pnpm 10.34.5 → [Updates: 11.20.0]

package.json (11)

• @changesets/read ^0.6.2
• changeset ^0.2.6
• @typescript-eslint/eslint-plugin ^6.7.2 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.7.2 → [Updates: ^8.0.0]
• eslint ^8.57.1 → [Updates: ^10.0.0]
• eslint-plugin-unused-imports ^3.0.0 → [Updates: ^4.0.0]
• @stylistic/eslint-plugin-ts ^1.6.2 → [Updates: ^4.0.0]
• prettier ^3.6.2 → [Updates: ^3.6.2]
• pnpm >=10.16.0 <11 → [Updates: >=10.16.0 <12]
• pnpm 10.34.5 → [Updates: 11.20.0]
• esbuild@<0.28.1 >=0.28.1

pnpm-workspace.yaml

python/package.json (1)

• pnpm 10.34.5 → [Updates: 11.20.0]

template/package.json

pip_requirements (3)

template/requirements-dev.txt (2)

• e2b ==2.32.0 → [Updates: ==2.37.0]
• python-dotenv ==1.2.2

template/requirements.txt (37)

• jupyter-server ==2.20.0
• ipykernel ==6.31.0 → [Updates: ==7.3.0]
• ipython ==9.15.0 → [Updates: ==9.16.1]
• orjson ==3.11.9
• pandas ==2.2.3 → [Updates: ==2.3.3, ==3.0.5]
• matplotlib ==3.10.9 → [Updates: ==3.11.1]
• pillow ==12.3.0
• aiohttp ==3.14.3
• beautifulsoup4 ==4.15.0
• bokeh ==3.9.1 → [Updates: ==3.9.2]
• gensim ==4.4.0
• imageio ==2.37.3 → [Updates: ==2.37.4]
• joblib ==1.5.3
• librosa ==0.11.0
• nltk ==3.10.0 → [Updates: ==3.10.1]
• numpy ==2.3.5 → [Updates: ==2.5.1]
• numba ==0.66.0
• opencv-python ==4.11.0.86 → [Updates: ==4.14.0.94, ==5.0.0.93]
• openpyxl ==3.1.5
• plotly ==6.0.1 → [Updates: ==6.9.0]
• kaleido ==1.3.0
• pytest ==9.0.3 → [Updates: ==9.1.1]
• python-docx ==1.1.2 → [Updates: ==1.2.0]
• pytz ==2025.2 → [Updates: ==2026.3.post1]
• requests ==2.33.0 → [Updates: ==2.34.2]
• scikit-image ==0.25.2 → [Updates: ==0.26.0]
• scikit-learn ==1.6.1 → [Updates: ==1.9.0]
• scipy ==1.17.1 → [Updates: ==1.18.0]
• seaborn ==0.13.2
• soundfile ==0.13.1 → [Updates: ==0.14.0]
• spacy ==3.8.14
• textblob ==0.19.0 → [Updates: ==0.20.1]
• tornado ==6.5.7
• urllib3 ==2.7.0
• xarray ==2025.4.0 → [Updates: ==2025.12.0, ==2026.7.0]
• xlrd ==2.0.2
• sympy ==1.14.0

template/server/requirements.txt (6)

• fastapi ==0.111.0 → [Updates: ==0.141.1]
• httpx ==0.28.1
• websockets ==12.0 → [Updates: ==17.0.1]
• uvicorn ==0.30.1 → [Updates: ==0.52.1]
• requests ==2.33.0 → [Updates: ==2.34.2]
• pydantic ==2.9.1 → [Updates: ==2.13.4]

poetry (2)

chart_data_extractor/pyproject.toml (8)

• python ^3.10
• numpy ^2.2.6 → [Updates: ^2.2.6]
• matplotlib ^3.10.3 → [Updates: ^3.10.3]
• pydantic ^2.9.1 → [Updates: ^2.9.1]
• pytest ^9.0.3 → [Updates: ^9.0.3]
• python-dotenv ^1.2.1
• pytest-dotenv ^0.5.2
• ruff ^0.11.12 → [Updates: ^0.16.0]

python/pyproject.toml (11)

• python ^3.10
• httpx >=0.20.0, <1.0.0
• attrs >=21.3.0
• e2b ^2.26.0 → [Updates: ^2.26.0]
• pytest ^9.0.3 → [Updates: ^9.0.3]
• python-dotenv ^1.0.0
• pytest-dotenv ^0.5.2
• pytest-asyncio ^1.3.0 → [Updates: ^1.3.0]
• pytest-xdist ^3.6.1
• matplotlib ^3.8.0 → [Updates: ^3.8.0]
• ruff ^0.11.12 → [Updates: ^0.16.0]

---

• Check this box to trigger a request for Renovate to run again on this repository

[linear]

ENG-3509

[JiwaniZakir]

This is Renovate's automated Dependency Dashboard tracking major version bumps that require explicit approval before branch creation — none of these are auto-merged because they crossed a major version boundary, which Renovate treats as potentially breaking. The items under "Pending Approval" (e.g., pandas v3, ipykernel v7, eslint v10, node v24) each carry real migration risk and likely need changelog review before checking the box. Worth noting that poetry v2 and ipykernel v7 in particular have known breaking changes in environment/kernel management that could affect the sandbox execution layer in this repo.