Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/checkout action to v6
• Update actions/create-github-app-token action to v3
• Update actions/setup-node action to v6
• Update actions/upload-artifact action to v7
• Update dependency @stylistic/eslint-plugin-ts to v4
• Update dependency attrs to v26
• Update dependency dotenv to v17
• Update dependency eslint to v10
• Update dependency eslint-plugin-unused-imports to v4
• Update dependency ipykernel to v7
• Update dependency knip to v6
• Update dependency node to v24 (node, @types/node)
• Update dependency npm-check-updates to v20
• Update dependency pandas to v3
• Update dependency poetry to v2
• Update dependency pytest to v9
• Update dependency pytest-asyncio to v1
• Update dependency pytz to v2026
• Update dependency typescript to v6
• Update dependency ubuntu to v24
• Update dependency vitest to v4
• Update dependency websockets to v16
• Update dependency xarray to v2026
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update pnpm to v10
• Update pnpm/action-setup action to v5
• Update typescript-eslint monorepo to v8 (major) (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update patch-updates (@types/node, aiohttp, bun, numpy, orjson, requests, spacy)
• Update dependency e2b
• Update dependency e2b to v2.20.0
• Update dependency jupyter-server to v2.17.0
• Update dependency kaleido to v1.2.0
• Update dependency knip to v5.88.1
• Update dependency matplotlib to v3.10.8
• Update dependency numba to v0.65.0
• Update dependency numpy to v2.4.4
• Update dependency opencv-python to v4.13.0.92
• Update dependency pandas to v2.3.3
• Update dependency pillow to v12.2.0
• Update dependency plotly to v6.7.0
• Update dependency pnpm to 9.15
• Update dependency prettier to v3.8.2
• Update dependency pydantic to v2.12.5
• Update dependency pydantic to v2.12.5
• Update dependency pytest to v8.4.2
• Update dependency pytest-asyncio to ^0.26.0
• Update dependency pytest-xdist to v3.8.0
• Update dependency python to v3.14.4
• Update dependency python-docx to v1.2.0
• Update dependency python-dotenv to v1.2.2
• Update dependency ruff to ^0.15.0
• Update dependency scikit-image to v0.26.0
• Update dependency scikit-learn to v1.8.0
• Update dependency textblob to v0.20.0
• Update dependency typescript to v5.9.3
• Update dependency uvicorn to v0.44.0
• Update dependency xarray to v2025.12.0
• Update suzuki-shunsuke/github-action-renovate-config-validator action to v2.1.0
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency fastapi to v0.135.3
• Update dependency ipykernel to v6.31.0
• Update dependency ipython to v9.12.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

asdf (1)

.tool-versions (2)

• python 3.10 → [Updates: 3.14.4]
• poetry 1.8.5 → [Updates: 2.3.3]

github-actions (11)

.github/workflows/build_prod_template.yml (3)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6

.github/workflows/build_test_template.yml (3)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6

.github/workflows/charts_tests.yml (5)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6
• snok/install-poetry v1
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/cleanup_build_template.yml

.github/workflows/js_tests.yml (10)

• actions/checkout v4 → [Updates: v6]
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-node v3 → [Updates: v6]
• oven-sh/setup-bun v2
• denoland/setup-deno v2
• ubuntu 22.04 → [Updates: 24.04]
• pnpm 9.5 → [Updates: 9.15, 10.33]
• node 20.x → [Updates: 24.x]
• bun 1.3.11 → [Updates: 1.3.12]
• deno v2.x

.github/workflows/lint.yml (8)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v4 → [Updates: v5]
• actions/setup-node v4 → [Updates: v6]
• actions/setup-python v6
• snok/install-poetry v1
• pnpm 9.15.9 → [Updates: 10.33.0]
• node 20.x → [Updates: 24.x]

.github/workflows/performance_tests.yml (6)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6
• snok/install-poetry v1
• actions/upload-artifact v4 → [Updates: v7]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/python_tests.yml (5)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6
• snok/install-poetry v1
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/release_candidates.yml (8)

• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-node v4 → [Updates: v6]
• actions/setup-python v6
• snok/install-poetry v1
• pnpm 9.5 → [Updates: 9.15, 10.33]
• node 20.x → [Updates: 24.x]

.github/workflows/release.yml (35)

• actions/checkout v4 → [Updates: v6]
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-node v6
• actions/checkout v4 → [Updates: v6]
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-node v6
• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-python v6
• snok/install-poetry v1
• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• actions/setup-python v6
• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6
• actions/create-github-app-token v1 → [Updates: v3]
• actions/checkout v4 → [Updates: v6]
• wistia/parse-tool-versions v2.1.1
• actions/setup-python v6
• snok/install-poetry v1
• pnpm/action-setup v3 → [Updates: v5]
• actions/setup-node v6
• changesets/action v1
• rtCamp/action-slack-notify v2
• pnpm 9.5 → [Updates: 9.15, 10.33]
• node 22.x → [Updates: 24.x]
• pnpm 9.5 → [Updates: 9.15, 10.33]
• node 22.x → [Updates: 24.x]
• pnpm 9.5 → [Updates: 9.15, 10.33]
• pnpm 9.5 → [Updates: 9.15, 10.33]
• node 22.x → [Updates: 24.x]

.github/workflows/validate-renovate-config.yaml (3)

• actions/checkout v6
• suzuki-shunsuke/github-action-renovate-config-validator v2.0.0 → [Updates: v2.1.0]
• ubuntu 24.04

npm (6)

chart_data_extractor/package.json (3)

• @typescript-eslint/eslint-plugin ^7.11.0 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^7.11.0 → [Updates: ^8.0.0]
• eslint ^8.57.1 → [Updates: ^10.0.0]

js/package.json (10)

• e2b ^2.8.4 → [Updates: ^2.8.4]
• @types/node ^20.19.19 → [Updates: ^20.19.19, ^24.0.0]
• dotenv ^16.4.5 → [Updates: ^17.0.0]
• knip ^5.25.1 → [Updates: ^5.25.1, ^6.0.0]
• npm-check-updates ^17.1.14 → [Updates: ^20.0.0]
• tsup ^8.5.1
• typescript ^5.5.3 → [Updates: ^5.5.3, ^6.0.0]
• vitest ^3.2.4 → [Updates: ^4.0.0]
• node >=20
• pnpm 9.15.9 → [Updates: 10.33.0]

package.json (10)

• @changesets/read ^0.6.2
• changeset ^0.2.6
• @typescript-eslint/eslint-plugin ^6.7.2 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.7.2 → [Updates: ^8.0.0]
• eslint ^8.57.1 → [Updates: ^10.0.0]
• eslint-plugin-unused-imports ^3.0.0 → [Updates: ^4.0.0]
• @stylistic/eslint-plugin-ts ^1.6.2 → [Updates: ^4.0.0]
• prettier ^3.6.2 → [Updates: ^3.6.2]
• pnpm >=9.0.0 <10 → [Updates: >=9.0.0 <11]
• pnpm 9.15.9 → [Updates: 10.33.0]

pnpm-workspace.yaml

python/package.json (1)

• pnpm 9.15.9 → [Updates: 10.33.0]

template/package.json

pip_requirements (3)

template/requirements-dev.txt (2)

• e2b ==2.16.0 → [Updates: ==2.20.0]
• python-dotenv ==1.2.2

template/requirements.txt (37)

• jupyter-server ==2.16.0 → [Updates: ==2.17.0]
• ipykernel ==6.29.5 → [Updates: ==6.31.0, ==7.2.0]
• ipython ==9.2.0 → [Updates: ==9.12.0]
• orjson ==3.11.7 → [Updates: ==3.11.8]
• pandas ==2.2.3 → [Updates: ==2.3.3, ==3.0.2]
• matplotlib ==3.10.8
• pillow ==12.1.1 → [Updates: ==12.2.0]
• aiohttp ==3.13.4 → [Updates: ==3.13.5]
• beautifulsoup4 ==4.14.3
• bokeh ==3.9.0
• gensim ==4.4.0
• imageio ==2.37.3
• joblib ==1.5.3
• librosa ==0.11.0
• nltk ==3.9.4
• numpy ==2.3.5 → [Updates: ==2.4.4]
• numba ==0.63.1 → [Updates: ==0.65.0]
• opencv-python ==4.11.0.86 → [Updates: ==4.13.0.92]
• openpyxl ==3.1.5
• plotly ==6.0.1 → [Updates: ==6.7.0]
• kaleido ==1.0.0 → [Updates: ==1.2.0]
• pytest ==8.3.5 → [Updates: ==8.4.2, ==9.0.3]
• python-docx ==1.1.2 → [Updates: ==1.2.0]
• pytz ==2025.2 → [Updates: ==2026.1.post1]
• requests ==2.33.0 → [Updates: ==2.33.1]
• scikit-image ==0.25.2 → [Updates: ==0.26.0]
• scikit-learn ==1.6.1 → [Updates: ==1.8.0]
• scipy ==1.17.1
• seaborn ==0.13.2
• soundfile ==0.13.1
• spacy ==3.8.11 → [Updates: ==3.8.14]
• textblob ==0.19.0 → [Updates: ==0.20.0]
• tornado ==6.5.5
• urllib3 ==2.6.3
• xarray ==2025.4.0 → [Updates: ==2025.12.0, ==2026.2.0]
• xlrd ==2.0.2
• sympy ==1.14.0

template/server/requirements.txt (6)

• fastapi ==0.111.0 → [Updates: ==0.135.3]
• httpx ==0.28.1
• websockets ==12.0 → [Updates: ==16.0]
• uvicorn ==0.30.1 → [Updates: ==0.44.0]
• requests ==2.33.0 → [Updates: ==2.33.1]
• pydantic ==2.9.1 → [Updates: ==2.12.5]

poetry (2)

chart_data_extractor/pyproject.toml (8)

• python ^3.10
• numpy ^2.2.6 → [Updates: ^2.2.6]
• matplotlib ^3.10.3
• pydantic ^2.9.1 → [Updates: ^2.9.1]
• pytest ^8.3.5 → [Updates: ^9.0.0]
• python-dotenv ^1.2.1
• pytest-dotenv ^0.5.2
• ruff ^0.11.12 → [Updates: ^0.15.0]

python/pyproject.toml (11)

• python ^3.10
• httpx >=0.20.0, <1.0.0
• attrs >=21.3.0 → [Updates: >=21.3.0]
• e2b ^2.7.0 → [Updates: ^2.7.0]
• pytest ^8.2.0 → [Updates: ^9.0.0]
• python-dotenv ^1.0.0 → [Updates: ^1.0.0]
• pytest-dotenv ^0.5.2
• pytest-asyncio ^0.24.0 → [Updates: ^0.26.0, ^1.0.0]
• pytest-xdist ^3.6.1 → [Updates: ^3.6.1]
• matplotlib ^3.8.0 → [Updates: ^3.8.0]
• ruff ^0.11.12 → [Updates: ^0.15.0]

---

• Check this box to trigger a request for Renovate to run again on this repository

[linear]

ENG-3509

[JiwaniZakir]

This is Renovate's automated Dependency Dashboard tracking major version bumps that require explicit approval before branch creation — none of these are auto-merged because they crossed a major version boundary, which Renovate treats as potentially breaking. The items under "Pending Approval" (e.g., pandas v3, ipykernel v7, eslint v10, node v24) each carry real migration risk and likely need changelog review before checking the box. Worth noting that poetry v2 and ipykernel v7 in particular have known breaking changes in environment/kernel management that could affect the sandbox execution layer in this repo.