Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	react-tsparticles

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update rust crate tokio-util to v0.7.19
• chore(deps): update python docker tag to v3.14
• chore(deps): update python non-major (alembic, cryptography, fastapi, gcloud-aio-storage, google-adk, google-cloud-aiplatform, google-cloud-kms, motor, mypy, orjson, pre-commit, prometheus-client, psycopg2-binary, pydantic, pydantic-settings, pymongo, pytest, python-dotenv, python-multipart, redis, reportlab, resend, ruff, sentry-sdk, sqlalchemy, testcontainers, uvicorn)
• fix(deps): update npm non-major (@clerk/react, @eslint/js, @sentry/react, @tailwindcss/vite, @testing-library/react, @types/node, @types/react, @types/react-dom, @vitejs/plugin-react, autoprefixer, eslint, eslint-plugin-react-hooks, eslint-plugin-react-refresh, google-auth-library, lucide-react, mongodb, next, postcss, prettier, react, react-dom, react-router-dom, resend, tailwindcss, typescript-eslint, vite, vitest)
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update dependency @eslint/js to v10
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency @types/node to v24
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency aiofiles to v25
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency globals to v17
• chore(deps): update dependency google-cloud-aiplatform to v2
• chore(deps): update dependency gunicorn to v26
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency mypy to v2
• chore(deps): update dependency redis to v8
• chore(deps): update dependency reportlab to v5
• chore(deps): update dependency stripe to v15
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency vite to v8
• chore(deps): update dependency vitest to v5
• chore(deps): update google-github-actions/auth action to v3
• chore(deps): update google-github-actions/setup-gcloud action to v3
• chore(deps): update postgres docker tag to v18
• fix(deps): update dependency google-auth-library to v11
• fix(deps): update dependency lucide-react to v1
• fix(deps): update dependency motion to v13
• fix(deps): update dependency next to v16
• fix(deps): update dependency tsparticles to v4
• chore(deps): refresh pip-compile outputs
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up pypi package ai-identity: no-result.

Files affected: sdk/langchain/pyproject.toml

---

Detected Dependencies

cargo (1)

integrations/cpex-ocsf-audit/Cargo.toml (10)

• async-trait 0.1
• base64 0.23
• chrono 0.4
• p256 0.14
• serde 1
• serde_json 1
• sha2 0.11
• tracing 0.1
• tokio 1
• tokio-util 0.7 → [Updates: 0.7]

cloudbuild (1)

agent/cloudbuild.yaml

docker-compose (1)

docker-compose.yml (1)

• postgres 16-alpine → [Updates: 18-alpine]

dockerfile (5)

agent/Dockerfile (1)

• python 3.13-slim → [Updates: 3.14-slim]

Dockerfile (1)

• python 3.11-slim → [Updates: 3.14-slim]

Dockerfile.api (1)

• python 3.11-slim → [Updates: 3.14-slim]

Dockerfile.gateway (1)

• python 3.11-slim → [Updates: 3.14-slim]

Dockerfile.mandate (1)

• python 3.11-slim → [Updates: 3.14-slim]

github-actions (14)

.github/actions/populate-wheelhouse/action.yml (1)

• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v6.1.0]

.github/workflows/ada-evals.yml (6)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.13
• python 3.13

.github/workflows/audit-trigger-health.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.11

.github/workflows/ceo-dashboard-sync.yml (9)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.11
• python 3.11
• python 3.11

.github/workflows/ci.yml (8)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020 → [Updates: v7.0.0]
• python 3.11
• node 22

.github/workflows/codeql.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938

.github/workflows/deploy-gke.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3.0.1]

.github/workflows/evidence-anchor-mirror.yml (1)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]

.github/workflows/image-build-check.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• google-github-actions/auth v2.1.13@c200f3691d83b41bf9bbd8638997a462592937ed → [Updates: v3.0.0]
• google-github-actions/setup-gcloud v2.2.1@e427ad8a34f8676edf47cf7d7925499adf3eb74f → [Updates: v3.0.1]

.github/workflows/migration-check.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.11

.github/workflows/publish-langchain-sdk.yml (4)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• python 3.11

.github/workflows/qa-smoke-test.yml (5)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• actions/github-script v7.1.0@f28e40c7f34bde8b3046d885e986cb6290c5673b → [Updates: v9.0.0]
• python 3.12

.github/workflows/rust.yml (1)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]

.github/workflows/scorecard.yml (4)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938

npm (3)

dashboard/package.json (25)

• @clerk/react ^6.1.2 → [Updates: ^6.1.2]
• @sentry/react ^10.45.0 → [Updates: ^10.45.0]
• react ^19.2.0 → [Updates: ^19.2.0]
• react-dom ^19.2.0 → [Updates: ^19.2.0]
• react-router-dom ^7.13.1 → [Updates: ^7.13.1]
• @eslint/js ^9.39.1 → [Updates: ^9.39.1, ^10.0.0]
• @tailwindcss/vite ^4.2.1 → [Updates: ^4.2.1]
• @testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2 → [Updates: ^16.3.2]
• @types/node ^24.10.1 → [Updates: ^24.10.1]
• @types/react ^19.2.7 → [Updates: ^19.2.7]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
• @vitejs/plugin-react ^5.1.1 → [Updates: ^5.1.1, ^6.0.0]
• eslint ^9.39.1 → [Updates: ^9.39.1, ^10.0.0]
• eslint-config-prettier ^10.1.8
• eslint-plugin-react-hooks ^7.0.1 → [Updates: ^7.0.1]
• eslint-plugin-react-refresh ^0.4.24 → [Updates: ^0.5.0]
• globals ^16.5.0 → [Updates: ^17.0.0]
• jsdom ^28.1.0 → [Updates: ^30.0.0]
• prettier ^3.8.1 → [Updates: ^3.8.1]
• tailwindcss ^4.2.1 → [Updates: ^4.2.1]
• typescript ~5.9.3 → [Updates: ~7.0.0]
• typescript-eslint ^8.48.0 → [Updates: ^8.48.0]
• vite ^7.3.1 → [Updates: ^7.3.1, ^8.0.0]
• vitest ^4.1.0 → [Updates: ^4.1.0, ^5.0.0]

landing-page/package.json (19)

• @vercel/analytics ^2.0.1
• @vercel/speed-insights ^2.0.0
• motion ^12.4.0 → [Updates: ^13.0.0]
• google-auth-library ^10.6.2 → [Updates: ^10.6.2, ^11.0.0]
• lucide-react ^0.487.0 → [Updates: ^0.577.0, ^1.0.0]
• mongodb ^7.2.0 → [Updates: ^7.2.0]
• next ^15.3.0 → [Updates: ^15.3.0, ^16.0.0]
• react ^19.2.4 → [Updates: ^19.2.4]
• react-dom ^19.2.4 → [Updates: ^19.2.4]
• react-tsparticles ^2.2.4
• resend ^6.12.3 → [Updates: ^6.12.3]
• tsparticles ^2.2.4 → [Updates: ^4.0.0]
• @types/node ^22.0.0 → [Updates: ^22.0.0, ^24.0.0]
• @types/react ^19.2.14 → [Updates: ^19.2.14]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
• autoprefixer ^10.4.0 → [Updates: ^10.4.0]
• postcss ^8.4.0 → [Updates: ^8.4.0]
• tailwindcss ^3.4.0 → [Updates: ^4.0.0]
• typescript ^5.5.0 → [Updates: ^7.0.0]

sdk/typescript/package.json (3)

• tsup ^8.0.0
• typescript ^5.4.0 → [Updates: ^7.0.0]
• node >=18

pep621 (1)

pyproject.toml (1)

• python >=3.11

pip-compile (3)

api/requirements.txt (30)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• python-multipart ==0.0.31 → [Updates: ==0.0.32]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• alembic ==1.18.4 → [Updates: ==1.19.2]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• google-cloud-kms ==3.12.0 → [Updates: ==3.16.0]
• PyJWT ==2.13.0
• stripe ==14.4.1 → [Updates: ==15.6.1]
• resend ==2.26.0 → [Updates: ==2.43.0]
• reportlab ==4.4.10 → [Updates: ==4.5.1, ==5.0.1]
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• jinja2 >=3.1
• python-magic ==0.4.27
• clamd ==1.0.2
• aiofiles ==23.2.1 → [Updates: ==25.1.0]
• gcloud-aio-storage ==9.3.0 → [Updates: ==9.6.4]
• Pillow ==12.3.0
• pytest ==9.0.3 → [Updates: ==9.1.1]
• httpx ==0.28.1
• testcontainers ==4.7.2 → [Updates: ==4.15.0]

gateway/requirements.txt (18)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• httpx ==0.28.1
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• biscuit-python ==0.4.0
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• redis ==5.2.1 → [Updates: ==5.3.1, ==8.1.0]
• pytest ==9.0.3 → [Updates: ==9.1.1]

mandate/requirements.txt (23)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• motor ==3.7.0 → [Updates: ==3.7.1]
• pymongo ==4.12.1 → [Updates: ==4.18.0]
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• google-cloud-kms ==3.12.0 → [Updates: ==3.16.0]
• PyJWT ==2.13.0
• biscuit-python ==0.4.0
• liboqs-python ==0.16.0
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• pytest ==9.0.3 → [Updates: ==9.1.1]
• httpx ==0.28.1
• testcontainers ==4.7.2 → [Updates: ==4.15.0]

pip_requirements (6)

agent/launcher/requirements.txt (2)

• rumps >=0.4.0
• Pillow >=12.3.0

agent/requirements.txt (3)

• google-adk ==2.7.1 → [Updates: ==2.8.0]
• google-cloud-aiplatform ==1.164.0 → [Updates: ==1.165.1, ==2.1.0]
• httpx ==0.28.1

api/requirements.txt (30)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• python-multipart ==0.0.31 → [Updates: ==0.0.32]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• alembic ==1.18.4 → [Updates: ==1.19.2]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• google-cloud-kms ==3.12.0 → [Updates: ==3.16.0]
• PyJWT ==2.13.0
• stripe ==14.4.1 → [Updates: ==15.6.1]
• resend ==2.26.0 → [Updates: ==2.43.0]
• reportlab ==4.4.10 → [Updates: ==4.5.1, ==5.0.1]
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• jinja2 >=3.1
• python-magic ==0.4.27
• clamd ==1.0.2
• aiofiles ==23.2.1 → [Updates: ==25.1.0]
• gcloud-aio-storage ==9.3.0 → [Updates: ==9.6.4]
• Pillow ==12.3.0
• pytest ==9.0.3 → [Updates: ==9.1.1]
• httpx ==0.28.1
• testcontainers ==4.7.2 → [Updates: ==4.15.0]

gateway/requirements.txt (18)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• httpx ==0.28.1
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• biscuit-python ==0.4.0
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• redis ==5.2.1 → [Updates: ==5.3.1, ==8.1.0]
• pytest ==9.0.3 → [Updates: ==9.1.1]

mandate/requirements.txt (23)

• fastapi ==0.135.1 → [Updates: ==0.141.1]
• uvicorn ==0.42.0 → [Updates: ==0.52.4]
• gunicorn ==23.0.0 → [Updates: ==26.2.0]
• uvloop ==0.22.1
• orjson ==3.11.7 → [Updates: ==3.12.0]
• pydantic ==2.12.5 → [Updates: ==2.13.5]
• pydantic-settings ==2.14.2 → [Updates: ==2.15.0]
• python-dotenv ==1.2.2 → [Updates: ==1.2.3]
• motor ==3.7.0 → [Updates: ==3.7.1]
• pymongo ==4.12.1 → [Updates: ==4.18.0]
• sqlalchemy ==2.0.48 → [Updates: ==2.0.52]
• psycopg2-binary ==2.9.11 → [Updates: ==2.9.12]
• cryptography ==50.0.0 → [Updates: ==50.0.1]
• rfc8785 ==0.1.4
• google-cloud-kms ==3.12.0 → [Updates: ==3.16.0]
• PyJWT ==2.13.0
• biscuit-python ==0.4.0
• liboqs-python ==0.16.0
• sentry-sdk ==2.22.0 → [Updates: ==2.68.1]
• prometheus-client ==0.25.0 → [Updates: ==0.26.0]
• pytest ==9.0.3 → [Updates: ==9.1.1]
• httpx ==0.28.1
• testcontainers ==4.7.2 → [Updates: ==4.15.0]

requirements-dev.txt (3)

• ruff ==0.15.6 → [Updates: ==0.16.6]
• pre-commit ==4.5.1 → [Updates: ==4.6.2]
• mypy ==1.19.1 → [Updates: ==1.20.2, ==2.3.1]

pip_setup (1)

common/setup.py (5)

• sqlalchemy >=2.0
• pydantic >=2.0
• pydantic-settings >=2.14.2
• python-dotenv >=1.0
• cryptography >=50.0.0

poetry (2)

sdk/langchain/pyproject.toml (10)

• langchain >=0.3
• langchain-openai >=0.2
• ai-identity >=0.1.0
• httpx >=0.25
• crewai >=0.28
• pytest >=9.0.3
• pytest-asyncio >=0.21
• pytest-mock >=3.0
• ruff >=0.1
• mypy >=1.0

sdk/python/pyproject.toml (2)

• httpx >=0.25
• pydantic >=2.0

---

• Check this box to trigger a request for Renovate to run again on this repository