Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vespa-engine/sample-apps).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

<details>
<summary>View abandoned dependencies (39)</summary>

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
> 
| Datasource | Package | Last Updated |
|------------|------|-------------|
| bundler | [jekyll](https://redirect.github.com/jekyll/jekyll) | `2025-01-29` |
| github-actions | [vespa-engine/setup-vespa-cli-action](https://redirect.github.com/vespa-engine/setup-vespa-cli-action) | `2024-08-12` |
| gomod | [github.com/GoogleCloudPlatform/functions-framework-go](https://redirect.github.com/GoogleCloudPlatform/functions-framework-go) | `2025-03-27` |
| pip_requirements | [aiosignal](https://redirect.github.com/aio-libs/aiosignal) | `2025-07-03` |
| pip_requirements | [async-timeout](https://redirect.github.com/aio-libs/async-timeout) | `2024-11-06` |
| pip_requirements | [contourpy](https://redirect.github.com/contourpy/contourpy) | `2025-07-26` |
| pip_requirements | [cycler](https://redirect.github.com/matplotlib/cycler) | `2023-10-07` |
| pip_requirements | [gputil](https://redirect.github.com/anderskm/gputil) | `2018-12-18` |
| pip_requirements | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| pip_requirements | [hf-transfer](https://redirect.github.com/huggingface/hf_transfer) | `2025-01-07` |
| pip_requirements | [httpcore](https://redirect.github.com/encode/httpcore) | `2025-04-24` |
| pip_requirements | [hyperframe](https://redirect.github.com/python-hyper/hyperframe) | `2025-01-22` |
| pip_requirements | [itsdangerous](https://redirect.github.com/pallets/itsdangerous) | `2024-04-16` |
| pip_requirements | [jinja2](https://redirect.github.com/pallets/jinja) | `2025-03-05` |
| pip_requirements | [loguru](https://redirect.github.com/Delgan/loguru) | `2024-12-06` |
| pip_requirements | [lucide-fasthtml](https://redirect.github.com/curtis-allan/lucide-fasthtml#readme) | `2024-09-10` |
| pip_requirements | [mdurl](https://redirect.github.com/executablebooks/mdurl) | `2022-08-14` |
| pip_requirements | [oauthlib](https://redirect.github.com/oauthlib/oauthlib) | `2025-06-19` |
| pip_requirements | [pdf2image](https://redirect.github.com/Belval/pdf2image) | `2024-01-07` |
| pip_requirements | [pyasn1-modules](https://redirect.github.com/pyasn1/pyasn1-modules) | `2025-03-28` |
| pip_requirements | [python-dateutil](https://redirect.github.com/dateutil/dateutil) | `2024-03-01` |
| pip_requirements | [requests-toolbelt](https://redirect.github.com/requests/toolbelt) | `2023-05-01` |
| pip_requirements | [rsa](https://redirect.github.com/sybrenstuvel/python-rsa) | `2025-04-16` |
| pip_requirements | [seaborn](https://redirect.github.com/mwaskom/seaborn) | `2024-01-25` |
| pip_requirements | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| pip_requirements | [shellingham](https://redirect.github.com/sarugaku/shellingham) | `2023-10-24` |
| pip_requirements | [six](https://redirect.github.com/benjaminp/six) | `2024-12-04` |
| pip_requirements | [sniffio](https://redirect.github.com/python-trio/sniffio) | `2024-02-25` |
| pip_requirements | `spacy-legacy` | `2024-01-25` |
| pip_requirements | [spacy-loggers](https://redirect.github.com/explosion/spacy-loggers) | `2023-09-11` |
| pip_requirements | [sympy](https://redirect.github.com/sympy/sympy) | `2025-04-27` |
| pip_requirements | [threadpoolctl](https://redirect.github.com/joblib/threadpoolctl) | `2025-03-13` |
| pip_requirements | [uritemplate](https://redirect.github.com/python-hyper/uritemplate) | `2025-06-02` |
| pip_requirements | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |
| pip_requirements | [wasabi](https://redirect.github.com/explosion/wasabi) | `2024-05-31` |
| poetry | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| poetry | `jupyter` | `2024-08-30` |
| poetry | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| poetry | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |

</details>


## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

 - [ ] chore(deps): pin dependencies (`grafana/grafana`, `maven`, `prom/prometheus`, `vespaengine/vespa`)
 - [ ] chore(deps): update aws-actions/configure-aws-credentials digest to cbe3b39
 - [ ] chore(deps): update dependency cachetools to v7.1.8
 - [ ] chore(deps): update dependency fastcore to v2.2.19
 - [ ] chore(deps): update dependency filelock to v3.32.5
 - [ ] chore(deps): update dependency grpcio to v1.83.1
 - [ ] chore(deps): update dependency grpcio-status to v1.83.1
 - [ ] chore(deps): update dependency kiwisolver to v1.5.1
 - [ ] chore(deps): update dependency mteb to v2.20.5
 - [ ] chore(deps): update dependency polars to v1.44.1
 - [ ] chore(deps): update dependency protobuf to v7.36.1
 - [ ] chore(deps): update dependency pydantic to v2.13.5
 - [ ] chore(deps): update dependency pyvespa to v1.2.5
 - [ ] chore(deps): update dependency sentence-transformers to v6.0.1
 - [ ] chore(deps): update dependency typer to v0.27.2
 - [ ] chore(deps): update maven docker tag to v3.9.16
 - [ ] fix(deps): update dependency colpali-engine to v0.3.18
 - [ ] fix(deps): update dependency io.github.hakky54:ayza-for-pem to v10.0.7
 - [ ] fix(deps): update dependency org.apache.opennlp:opennlp-tools to v2.5.11
 - [ ] fix(deps): update dependency python-fasthtml to v0.14.12
 - [ ] chore(deps): update dependency click to v8.5.0
 - [ ] chore(deps): update dependency font-awesome to v6.7.2
 - [ ] chore(deps): update dependency fonttools to v4.64.0
 - [ ] chore(deps): update dependency google-api-python-client to v2.200.0
 - [ ] chore(deps): update dependency huggingface-hub to v1.29.0
 - [ ] chore(deps): update dependency joblib to v1.6.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6
 - [ ] chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3
 - [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.21.0
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v5.14.4
 - [ ] chore(deps): update dependency regex to v2026.9.3
 - [ ] chore(deps): update dependency websockets to v17.1
 - [ ] chore(deps): update dependency wrapt to v2.4.0
 - [ ] chore(deps): update gradle to v9.7.1
 - [ ] fix(deps): update dependency transformers to v5.16.1
 - [ ] fix(deps): update dependency tzdata to v2026.3
 - [ ] fix(deps): update dependency uvicorn to v0.52.4
 - [ ] fix(deps): update module cloud.google.com/go/storage to v1.66.0
 - [ ] chore(deps): update actions/setup-java action to v6
 - [ ] chore(deps): update dependency font-awesome to v7
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v6
 - [ ] fix(deps): update dependency faker to v40
 - [ ] chore(deps): lock file maintenance
 - [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [chore(deps): update module golang.org/x/crypto to v0.55.0 [security]](../pull/1998)
 - [ ] [fix(deps): update dependency org.apache.lucene:lucene-analysis-stempel to v10](../pull/1951)
 - [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `2`/`21` CVEs have Renovate fixes.

<details><summary>gomod</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod</summary>
<blockquote>

<details><summary>golang.org/x/crypto</summary>
<blockquote>

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
- [GO-2026-6303](https://osv.dev/vulnerability/GO-2026-6303) (fixed in >= 0.55.0)
</blockquote>
</details>

<details><summary>google.golang.org/grpc</summary>
<blockquote>

- [GHSA-vp52-pcj8-j9qc](https://osv.dev/vulnerability/GHSA-vp52-pcj8-j9qc) (fixed in >= 1.83.1)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

<details><summary>pip_requirements</summary>
<blockquote>

<details><summary>reverse-image-search/script/requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

## Detected Dependencies

<details><summary>bundler (1)</summary>
<blockquote>

<details><summary>Gemfile (4)</summary>

 - `ruby >=2.6`
 - `jekyll '>= 4.3.3'`
 - `rake lock file @ 13.4.2`
 - `html-proofer '>= 5.0.8'`

</details>

</blockquote>
</details>

<details><summary>docker-compose (2)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/docker-compose.yml (2)</summary>

 - `prom/prometheus unknown version` → [Updates: `undefined`]
 - `grafana/grafana unknown version` → [Updates: `undefined`]

</details>

<details><summary>examples/operations/multinode-HA/docker-compose.yaml (10)</summary>

 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]

</details>

</blockquote>
</details>

<details><summary>dockerfile (1)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/Dockerfile (1)</summary>

 - `maven 3.9.5-eclipse-temurin-17` → [Updates: `3.9.16-eclipse-temurin-17`, `3.9.5-eclipse-temurin-17`]

</details>

</blockquote>
</details>

<details><summary>github-actions (10)</summary>
<blockquote>

<details><summary>.github/workflows/auto-approve.yml</summary>


</details>

<details><summary>.github/workflows/build.yml (2)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/setup-java v5@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/feed.yml (6)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `ruby/setup-ruby v1`
 - `actions/setup-python v7@5fda3b95a4ea91299a34e894583c3862153e4b97`
 - `vespa-engine/setup-vespa-cli-action v1@6072462cfdaa5f704890dcfa9160759099e58469`
 - `ruby 4.0.6`
 - `python 3.x`

</details>

<details><summary>.github/workflows/link-checker.yml (1)</summary>

 - `vespa-engine/gh-actions main@b9b3093fe531392b08e7a71ffa8bcd88cb529bc3`

</details>

<details><summary>.github/workflows/update-cloud-samples.yml (6)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
 - `aws-actions/configure-aws-credentials v6@e6de054238d6b7531b4efff3b6587d9aade6a06c` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/verify-guides-billion-image.yml (1)</summary>

 - `vespa-engine/gh-actions main@b9b3093fe531392b08e7a71ffa8bcd88cb529bc3`

</details>

<details><summary>.github/workflows/verify-guides-field-generator.yml (1)</summary>

 - `vespa-engine/gh-actions main@b9b3093fe531392b08e7a71ffa8bcd88cb529bc3`

</details>

<details><summary>.github/workflows/verify-guides-main.yml (1)</summary>

 - `vespa-engine/gh-actions main@b9b3093fe531392b08e7a71ffa8bcd88cb529bc3`

</details>

<details><summary>.github/workflows/verify-notebooks.yml (1)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

<details><summary>examples/operations/CI-CD/.github/workflows/deploy.yaml (1)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

</blockquote>
</details>

<details><summary>gomod (1)</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod (4)</summary>

 - `go 1.19`
 - `cloud.google.com/go/storage v1.62.3` → [Updates: `v1.66.0`]
 - `github.com/GoogleCloudPlatform/functions-framework-go v1.9.2`
 - `golang.org/x/crypto v0.52.0` → [Updates: `v0.55.0`]

</details>

</blockquote>
</details>

<details><summary>gradle (4)</summary>
<blockquote>

<details><summary>examples/clients/client-java/app/build.gradle.kts (8)</summary>

 - `io.github.hakky54:ayza-for-pem 10.0.6` → [Updates: `10.0.7`]
 - `org.eclipse.jetty:jetty-client 12.1.12`
 - `org.eclipse.jetty.http2:jetty-http2-client-transport 12.1.12`
 - `org.slf4j:slf4j-simple 2.0.18`
 - `commons-cli:commons-cli 1.11.0`
 - `org.bouncycastle:bcprov-jdk18on 1.85.2`
 - `org.bouncycastle:bcpkix-jdk18on 1.85`
 - `org.bouncycastle:bcutil-jdk18on 1.85`

</details>

<details><summary>examples/clients/client-java/gradle.properties</summary>


</details>

<details><summary>examples/clients/client-java/gradle/libs.versions.toml (2)</summary>

 - `com.google.guava:guava 33.7.1-jre`
 - `junit:junit 4.13.2`

</details>

<details><summary>examples/clients/client-java/settings.gradle.kts (1)</summary>

 - `org.gradle.toolchains.foojay-resolver-convention 1.0.0`

</details>

</blockquote>
</details>

<details><summary>gradle-wrapper (1)</summary>
<blockquote>

<details><summary>examples/clients/client-java/gradle/wrapper/gradle-wrapper.properties (1)</summary>

 - `gradle 9.3.1` → [Updates: `9.7.1`]

</details>

</blockquote>
</details>

<details><summary>html (1)</summary>
<blockquote>

<details><summary>examples/ecommerce-user-preferences/webapp/templates/index.html (1)</summary>

 - `font-awesome 6.4.0` → [Updates: `6.7.2`, `7.3.1`]

</details>

</blockquote>
</details>

<details><summary>maven (36)</summary>
<blockquote>

<details><summary>album-recommendation-java/app/pom.xml</summary>


</details>

<details><summary>billion-scale-image-search/app/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>billion-scale-vector-search/app/pom.xml</summary>


</details>

<details><summary>examples/book-search/pom.xml (7)</summary>

 - `org.bouncycastle:bcprov-jdk18on 1.85.2`
 - `org.bouncycastle:bcpkix-jdk18on 1.85`
 - `org.bouncycastle:bcutil-jdk18on 1.85`
 - `org.junit.jupiter:junit-jupiter 5.14.4` → [Updates: `6.1.3`]
 - `com.fasterxml.jackson.core:jackson-databind 2.22.2`
 - `ch.qos.logback:logback-classic 1.6.3`
 - `org.apache.maven.plugins:maven-surefire-plugin 3.5.2` → [Updates: `3.5.6`]

</details>

<details><summary>examples/document-processing/pom.xml</summary>


</details>

<details><summary>examples/embedding-service/pom.xml</summary>


</details>

<details><summary>examples/generic-request-processing/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/http-api-using-request-handlers-and-processors/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/joins/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/02-lucene-per-variant/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/03-lucene-icu/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/06-opennlp-icu/pom.xml (2)</summary>

 - `com.ibm.icu:icu4j 78.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/linguistics-asia/07-opennlp-opencc/pom.xml (2)</summary>

 - `com.github.houbb:opencc4j 1.14.0`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/linguistics-asia/08-lucene-phrase-dict/pom.xml (1)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/lucene-linguistics/add-token-filter-factory/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/advanced-configuration/pom.xml (3)</summary>

 - `org.apache.lucene:lucene-analysis-stempel 9.12.3` → [Updates: `10.5.1`]
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/custom-analyzer-phonetic/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/going-crazy/pom.xml (2)</summary>

 - `eu.hlavki.text:jlemmagen 1.0`
 - `org.apache.opennlp:opennlp-tools 2.5.9` → [Updates: `2.5.11`]

</details>

<details><summary>examples/lucene-linguistics/hyphenation-compound-word/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/minimal/pom.xml (1)</summary>

 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/simple-korean/pom.xml</summary>


</details>

<details><summary>examples/multiple-bundles-lib/pom.xml (4)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/multiple-bundles/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-dependency-plugin 3.6.1` → [Updates: `3.11.0`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/operations/CI-CD/production-deployment-with-tests-java/pom.xml</summary>


</details>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/pom.xml (8)</summary>

 - `org.bouncycastle:bcprov-jdk18on 1.85.2`
 - `org.bouncycastle:bcpkix-jdk18on 1.85`
 - `org.bouncycastle:bcutil-jdk18on 1.85`
 - `org.immutables:value 2.12.2`
 - `org.immutables:gson 2.12.2`
 - `org.apache.maven.plugins:maven-compiler-plugin 3.15.0`
 - `org.apache.maven.plugins:maven-assembly-plugin 3.8.0`
 - `org.apache.maven.plugins:maven-jar-plugin 3.5.1`

</details>

<details><summary>examples/predicate-fields/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/reranker/pom.xml (1)</summary>

 - `org.apache.httpcomponents.client5:httpclient5 5.6.4`

</details>

<details><summary>examples/vespa-chinese-linguistics/pom.xml (4)</summary>

 - `com.google.inject:guice 7.0.0`
 - `com.huaban:jieba-analysis 1.0.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>incremental-search/search-as-you-type/pom.xml</summary>


</details>

<details><summary>incremental-search/search-suggestions/pom.xml</summary>


</details>

<details><summary>model-inference/pom.xml</summary>


</details>

<details><summary>news/app-6-recommendation-with-searchers/pom.xml</summary>


</details>

<details><summary>news/app-7-parent-child/pom.xml</summary>


</details>

<details><summary>pom.xml</summary>


</details>

<details><summary>text-image-search/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>use-case-shopping/pom.xml (3)</summary>

 - `org.apache.httpcomponents:httpclient 4.5.14`
 - `org.apache.httpcomponents:httpcore 4.4.16`
 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

</blockquote>
</details>

<details><summary>pep621 (2)</summary>
<blockquote>

<details><summary>examples/book-search/frontend/pyproject.toml (1)</summary>

 - `python >=3.11`

</details>

<details><summary>examples/mcp-server-app/script/pyproject.toml (3)</summary>

 - `python >=3.9`
 - `Faker ==40.36.0` → [Updates: `==40.38.0`]
 - `tzdata ==2026.2` → [Updates: `==2026.3`]

</details>

</blockquote>
</details>

<details><summary>pip_requirements (9)</summary>
<blockquote>

<details><summary>examples/agentic-streamlit-chatbot/advanced_app/requirements.txt</summary>


</details>

<details><summary>examples/agentic-streamlit-chatbot/simple_app/requirements.txt</summary>


</details>

<details><summary>examples/google-cloud/cloud-functions/python/requirements.txt (1)</summary>

 - `functions-framework ==3.*`

</details>

<details><summary>hypencoder/requirements.txt</summary>


</details>

<details><summary>news/requirements.txt</summary>


</details>

<details><summary>reverse-image-search/script/requirements.txt (10)</summary>

 - `torch >=2.13.0`
 - `transformers >=5.0.0`
 - `torchvision >=0.20.0`
 - `pillow >=12.3.0`
 - `numpy >=2.0.0`
 - `datasets >=5.0.1`
 - `pyvespa >=1.1.2`
 - `huggingface_hub >=0.26.0`
 - `hf-transfer >=0.1.8`
 - `httpx >=0.28.0`

</details>

<details><summary>test/requirements.txt</summary>


</details>

<details><summary>text-video-search/src/python/requirements.txt</summary>


</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt (156)</summary>

 - `accelerate ==1.14.0`
 - `aiohappyeyeballs ==2.7.1`
 - `aiohttp ==3.14.3`
 - `aiosignal ==1.4.0`
 - `annotated-types ==0.8.0`
 - `anyio ==4.14.2`
 - `apsw ==3.53.4.0`
 - `apswutils ==0.1.2`
 - `async-timeout ==5.0.1`
 - `attrs ==26.1.0`
 - `beautifulsoup4 ==4.15.0`
 - `blis ==1.3.3`
 - `cachetools ==7.1.7` → [Updates: `==7.1.8`]
 - `catalogue ==2.0.10`
 - `certifi ==2026.7.22`
 - `cffi ==2.1.1`
 - `charset-normalizer ==3.5.1`
 - `click ==8.4.2` → [Updates: `==8.5.0`]
 - `cloudpathlib ==0.25.0`
 - `colpali-engine ==0.3.18`
 - `confection ==1.3.3`
 - `contourpy ==1.3.3`
 - `cryptography ==50.0.1`
 - `cycler ==0.12.1`
 - `cymem ==2.0.13`
 - `datasets ==5.0.1`
 - `dill ==0.4.1`
 - `docker ==7.2.0`
 - `einops ==0.8.2`
 - `eval-type-backport ==0.4.0`
 - `exceptiongroup ==1.3.1`
 - `fastcore ==2.2.15` → [Updates: `==2.2.19`]
 - `fastlite ==0.2.4`
 - `filelock ==3.32.4` → [Updates: `==3.32.5`]
 - `fonttools ==4.63.0` → [Updates: `==4.64.0`]
 - `frozenlist ==1.8.0`
 - `fsspec ==2026.7.0`
 - `google-ai-generativelanguage ==0.12.0`
 - `google-api-core ==2.34.0`
 - `google-api-python-client ==2.199.0` → [Updates: `==2.200.0`]
 - `google-auth ==2.57.0`
 - `google-auth-httplib2 ==0.4.2`
 - `google-generativeai ==0.8.6`
 - `googleapis-common-protos ==1.75.2`
 - `gputil ==1.4.0`
 - `grpcio ==1.83.0` → [Updates: `==1.83.1`]
 - `grpcio-status ==1.83.0` → [Updates: `==1.83.1`]
 - `h11 ==0.16.0`
 - `h2 ==4.4.1`
 - `hf-xet ==1.6.0`
 - `hpack ==4.2.0`
 - `httpcore ==1.0.9`
 - `httplib2 ==0.32.0`
 - `httptools ==0.8.0`
 - `httpx ==0.28.1`
 - `huggingface-hub ==1.28.0` → [Updates: `==1.29.0`]
 - `hyperframe ==6.1.0`
 - `idna ==3.19`
 - `itsdangerous ==2.2.0`
 - `jinja2 ==3.1.6`
 - `joblib ==1.5.3` → [Updates: `==1.6.0`]
 - `kiwisolver ==1.5.0` → [Updates: `==1.5.1`]
 - `langcodes ==3.5.1`
 - `language-data ==1.4.0`
 - `loguru ==0.7.3`
 - `lucide-fasthtml ==0.0.9`
 - `lxml ==6.1.2`
 - `marisa-trie ==1.4.1`
 - `markdown-it-py ==4.2.0`
 - `markupsafe ==3.0.3`
 - `matplotlib ==3.11.1`
 - `mdurl ==0.1.2`
 - `mpmath ==1.4.1`
 - `mteb ==2.20.2` → [Updates: `==2.20.5`]
 - `multidict ==6.7.1`
 - `multiprocess ==0.70.19`
 - `murmurhash ==1.0.15`
 - `networkx ==3.6.1`
 - `numpy ==2.5.2`
 - `oauthlib ==3.3.1`
 - `packaging ==26.3`
 - `pandas ==3.0.5`
 - `pdf2image ==1.17.0`
 - `peft ==0.20.0`
 - `pillow ==12.3.0`
 - `pip ==26.2.1`
 - `polars ==1.44.0` → [Updates: `==1.44.1`]
 - `preshed ==3.0.13`
 - `propcache ==0.5.2`
 - `proto-plus ==1.28.4`
 - `protobuf ==7.36.0` → [Updates: `==7.36.1`]
 - `psutil ==7.2.2`
 - `pyarrow ==25.0.1`
 - `pyasn1 ==0.6.4`
 - `pyasn1-modules ==0.4.2`
 - `pycparser ==3.0`
 - `pydantic ==2.13.4` → [Updates: `==2.13.5`]
 - `pydantic-core ==2.48.0`
 - `pygments ==2.21.0`
 - `pyparsing ==3.3.2`
 - `pypdf ==6.16.2`
 - `python-dateutil ==2.9.0.post0`
 - `python-dotenv ==1.2.3`
 - `python-fasthtml ==0.14.12`
 - `python-multipart ==0.0.32`
 - `pytrec-eval-terrier ==0.5.10`
 - `pytz ==2026.3.post1`
 - `pyvespa ==1.2.4` → [Updates: `==1.2.5`]
 - `pyyaml ==6.0.3`
 - `regex ==2026.7.19` → [Updates: `==2026.9.3`]
 - `requests ==2.34.2`
 - `requests-toolbelt ==1.0.0`
 - `rich ==15.0.0`
 - `rsa ==4.9.1`
 - `safetensors ==0.8.0`
 - `scikit-learn ==1.9.0`
 - `scipy ==1.18.1`
 - `seaborn ==0.13.2`
 - `sentence-transformers ==6.0.0` → [Updates: `==6.0.1`]
 - `sentencepiece ==0.2.2`
 - `setuptools ==84.0.0`
 - `shad4fast ==1.3.1`
 - `shellingham ==1.5.4`
 - `six ==1.17.0`
 - `smart-open ==8.0.1`
 - `sniffio ==1.3.1`
 - `soupsieve ==2.9.2`
 - `spacy ==3.8.16`
 - `spacy-legacy ==3.0.12`
 - `spacy-loggers ==1.0.5`
 - `srsly ==2.5.3`
 - `starlette ==1.6.0`
 - `sympy ==1.14.0`
 - `tenacity ==9.1.4`
 - `thinc ==9.1.1`
 - `threadpoolctl ==3.6.0`
 - `tokenizers ==0.23.1`
 - `torch ==2.13.0`
 - `tqdm ==4.70.0`
 - `transformers ==5.15.1` → [Updates: `==5.16.1`]
 - `typer ==0.27.1` → [Updates: `==0.27.2`]
 - `typing-extensions ==4.16.0`
 - `tzdata ==2026.3`
 - `uritemplate ==4.2.0`
 - `urllib3 ==2.7.0`
 - `uvicorn ==0.52.4`
 - `uvloop ==0.22.1`
 - `vespacli ==8.738.17`
 - `vidore-benchmark ==5.0.0`
 - `wasabi ==1.1.3`
 - `watchfiles ==1.2.0`
 - `weasel ==1.0.0`
 - `websockets ==17.0.1` → [Updates: `==17.1`]
 - `wrapt ==2.3.0` → [Updates: `==2.4.0`]
 - `xxhash ==4.0.1`
 - `yarl ==1.24.5`

</details>

</blockquote>
</details>

<details><summary>poetry (3)</summary>
<blockquote>

<details><summary>examples/workshop-ecommerce/pyproject.toml (4)</summary>

 - `jupyter >=1.1.1`
 - `pandas >=2.3.3`
 - `pyvespa >=0.62.0`
 - `vespacli >=8.591.16`

</details>

<details><summary>rag-blueprint/eval/pyproject.toml (4)</summary>

 - `lightgbm >=4.6.0`
 - `pandas >=2.3.0`
 - `pyvespa >=0.57.0`
 - `scikit-learn >=1.7.0`

</details>

<details><summary>visual-retrieval-colpali/pyproject.toml (8)</summary>

 - `python-fasthtml ==0.14.2` → [Updates: `==0.14.12`]
 - `uvicorn ==0.49.0` → [Updates: `==0.52.4`]
 - `pyvespa >=0.50.0`
 - `vidore-benchmark >=5.0.0,<5.1.0`
 - `colpali-engine ==0.3.17` → [Updates: `==0.3.18`]
 - `shad4fast >=1.2.1`
 - `transformers ==5.12.0` → [Updates: `==5.16.1`]
 - `h11 >=0.16.0`

</details>

</blockquote>
</details>

<details><summary>renovate-config (1)</summary>
<blockquote>

<details><summary>renovate.json</summary>


</details>

</blockquote>
</details>

<details><summary>terraform (3)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/alerts/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/dashboards/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Navigation Menu

Uh oh!

Dependency Dashboard #1283

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Datasource	Package	Last Updated
bundler	jekyll	`2025-01-29`
github-actions	vespa-engine/setup-vespa-cli-action	`2024-08-12`
gomod	github.com/GoogleCloudPlatform/functions-framework-go	`2025-03-27`
pip_requirements	aiosignal	`2025-07-03`
pip_requirements	async-timeout	`2024-11-06`
pip_requirements	contourpy	`2025-07-26`
pip_requirements	cycler	`2023-10-07`
pip_requirements	gputil	`2018-12-18`
pip_requirements	h11	`2025-04-24`
pip_requirements	hf-transfer	`2025-01-07`
pip_requirements	httpcore	`2025-04-24`
pip_requirements	hyperframe	`2025-01-22`
pip_requirements	itsdangerous	`2024-04-16`
pip_requirements	jinja2	`2025-03-05`
pip_requirements	loguru	`2024-12-06`
pip_requirements	lucide-fasthtml	`2024-09-10`
pip_requirements	mdurl	`2022-08-14`
pip_requirements	oauthlib	`2025-06-19`
pip_requirements	pdf2image	`2024-01-07`
pip_requirements	pyasn1-modules	`2025-03-28`
pip_requirements	python-dateutil	`2024-03-01`
pip_requirements	requests-toolbelt	`2023-05-01`
pip_requirements	rsa	`2025-04-16`
pip_requirements	seaborn	`2024-01-25`
pip_requirements	shad4fast	`2024-11-09`
pip_requirements	shellingham	`2023-10-24`
pip_requirements	six	`2024-12-04`
pip_requirements	sniffio	`2024-02-25`
pip_requirements	`spacy-legacy`	`2024-01-25`
pip_requirements	spacy-loggers	`2023-09-11`
pip_requirements	sympy	`2025-04-27`
pip_requirements	threadpoolctl	`2025-03-13`
pip_requirements	uritemplate	`2025-06-02`
pip_requirements	vidore-benchmark	`2025-02-19`
pip_requirements	wasabi	`2024-05-31`
poetry	h11	`2025-04-24`
poetry	`jupyter`	`2024-08-30`
poetry	shad4fast	`2024-11-09`
poetry	vidore-benchmark	`2025-02-19`

Uh oh!

Dependency Dashboard #1283

Description

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions