Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency postcss to v8.5.15
• chore(deps): update pre-commit hook biomejs/pre-commit to v2.2.7
• chore(deps): update pre-commit hook codespell-project/codespell to v2.4.2
• chore(deps): update pre-commit hook kynan/nbstripout to v0.8.2
• chore(deps): update pre-commit hook mxr/sync-pre-commit-deps to v0.0.4
• chore(deps): update pre-commit hook python-jsonschema/check-jsonschema to v0.34.1
• chore(deps): update pypa/cibuildwheel action to v2.23.4
• fix(deps): update dependency watchfiles to <1.1.2,>=1.1.1
• chore(deps): update dependency astral-sh/uv to v0.11.23
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.18
• chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.23
• chore(deps): update pre-commit hook biomejs/pre-commit to v2.5.0
• chore(deps): update pre-commit hook fpgmaas/deptry to v0.25.1
• chore(deps): update pre-commit hook kynan/nbstripout to v0.9.1
• chore(deps): update pre-commit hook marcogorelli/cython-lint to v0.21.0
• chore(deps): update pre-commit hook python-jsonschema/check-jsonschema to v0.37.3
• fix(deps): update dependency mini-racer to v0.14.1
• fix(deps): update dependency pygithub to v2.9.1
• fix(deps): update dependency sentry-sdk to v2.63.0
• fix(deps): update dependency tree-sitter to >=0.25.2,<0.26
• fix(deps): update dependency tree-sitter-javascript to >=0.25,<0.26
• fix(deps): update dependency tree-sitter-python to >=0.25,<0.26
• fix(deps): update dependency watchfiles to <1.2.1,>=1.2.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v6
• chore(deps): update astral-sh/setup-uv action to v8
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update codfish/semantic-release-action action to v5
• chore(deps): update dependency @rollup/plugin-commonjs to v29
• chore(deps): update dependency jsbeautifier to v2
• chore(deps): update dependency node to v24 (node, @types/node)
• chore(deps): update pre-commit hook hukkin/mdformat to v1
• chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v6
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43
• chore(deps): update pypa/cibuildwheel action to v4
• chore(deps): update slackapi/slack-github-action action to v3
• chore(deps): update softprops/action-gh-release action to v3
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• chore(deps): update tj-actions/changed-files action to v47
• fix(deps): update dependency lsprotocol to v2025
• fix(deps): update dependency openai to v2
• fix(deps): update dependency pyjson5 to v2
• fix(deps): update dependency rich to v15
• fix(deps): update dependency typescript to v6
• fix(deps): update dependency wrapt to v2
• fix(deps): update dependency xmltodict to v1
• fix(deps): update dependency yargs to v18
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency python-dotenv to v1.2.2 [security]
• chore(deps): update dependency black to v26 [security]
• chore(deps): update dependency pip to v26 [security]
• chore(deps): update dependency pytest to v9 [security]
• fix(deps): update dependency starlette to v1 [security]
• chore(deps): update python to >=3.14, <3.15
• chore(deps): update dependency @rollup/plugin-node-resolve to v16
• chore(deps): update dependency pytest-asyncio to v1
• chore(deps): update dependency pytest-cov to v7
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update pre-commit hook @biomejs/biome to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (3)

Cargo.toml (7)

• pyo3 0.29
• serde 1
• serde_json 1
• rayon 1
• tree-sitter 0.26
• tree-sitter-python 0.25
• tree-sitter-typescript 0.23.2

crates/graph-sitter-engine/Cargo.toml

crates/graph-sitter-py/Cargo.toml

dockerfile (2)

Dockerfile

src/graph_sitter/cli/commands/start/Dockerfile

github-actions (17)

.github/actions/release-slack-bot/action.yml (1)

• slackapi/slack-github-action v2.1.1 → [Updates: v3.0.3]

.github/actions/report/action.yml (2)

• codecov/test-results-action v1
• codecov/codecov-action v5.5.5 → [Updates: v7.0.0]

.github/actions/setup-environment/action.yml (2)

• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/actions/setup-oss-repos/action.yml (1)

• actions/cache v4 → [Updates: v5]

.github/workflows/auto-release.yml (5)

• actions/checkout v4 → [Updates: v7]
• poseidon/wait-for-status-checks v0.6.0
• codfish/semantic-release-action v3 → [Updates: v5]
• actions/checkout v4 → [Updates: v7]
• ad-m/github-push-action master

.github/workflows/cache-delete.yml

.github/workflows/generate-docs.yml (2)

• actions/checkout v4 → [Updates: v7]
• ad-m/github-push-action master

.github/workflows/mypy.yml (3)

• actions/checkout v4 → [Updates: v7]
• tj-actions/changed-files v46.0.5 → [Updates: v47.0.6]
• pr-annotators/mypy-pr-annotator v1.0.0

.github/workflows/pre-commit.yml (3)

• actions/checkout v4 → [Updates: v7]
• actions/cache v4 → [Updates: v5]
• stefanzweifel/git-auto-commit-action v5 → [Updates: v7]

.github/workflows/release.yml (8)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• pypa/cibuildwheel v2.23.3 → [Updates: v2.23.4, v4.1.0]
• actions/upload-artifact v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• softprops/action-gh-release v2 → [Updates: v3]
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/required-ci.yml (3)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/rust-rewrite-cli-smoke.yml (3)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/rust-rewrite-extension.yml (5)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/rust-rewrite-fast.yml (5)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/rust-rewrite-large-repos.yml (7)

• actions/checkout v4 → [Updates: v7]
• astral-sh/setup-uv v5.4 → [Updates: v8.2.0]
• dtolnay/rust-toolchain stable
• Swatinem/rust-cache v2
• actions/cache v4 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v7]
• astral-sh/uv 0.9.30 → [Updates: 0.11.23]

.github/workflows/site-build.yml (3)

• actions/checkout v4 → [Updates: v7]
• actions/setup-node v4 → [Updates: v6]
• node 22 → [Updates: 24]

.github/workflows/test.yml (3)

• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]
• actions/checkout v4 → [Updates: v7]

npm (2)

site/package.json (26)

• @radix-ui/react-slot ^1.3.0
• @types/d3-force ^3.0.10
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• d3-force ^3.0.0
• github-slugger ^2.0.0
• gray-matter ^4.0.3
• lucide-react 1.21.0
• next 16.2.9
• next-mdx-remote ^6.0.0
• next-themes ^0.4.6
• react 19.2.7
• react-dom 19.2.7
• rehype-autolink-headings ^7.1.0
• rehype-pretty-code ^0.14.3
• rehype-slug ^6.0.0
• remark-gfm ^4.0.0
• tailwind-merge ^3.6.0
• tw-animate-css ^1.4.0
• @tailwindcss/postcss ^4.3.1
• @types/node 26.0.0
• @types/react 19.2.17
• @types/react-dom 19.2.3
• tailwindcss ^4.3.1
• typescript 6.0.3
• postcss 8.5.10 → [Updates: 8.5.15]

src/graph_sitter/typescript/external/typescript_analyzer/package.json (12)

• typescript ^5.0.0 → [Updates: ^6.0.0]
• yargs ^17.7.2 → [Updates: ^18.0.0]
• @rollup/plugin-commonjs ^28.0.0 → [Updates: ^29.0.0]
• @rollup/plugin-json ^6.0.0
• @rollup/plugin-node-resolve ^15.0.0 → [Updates: ^16.0.0]
• @rollup/plugin-typescript ^12.0.0
• @rollup/plugin-virtual ^3.0.2
• @types/node ^22.0.0 → [Updates: ^24.0.0]
• @types/yargs ^17.0.32
• rollup ^4.9.0
• ts-node ^10.9.1
• tslib ^2.6.0

pep621 (1)

pyproject.toml (107)

• python >=3.12, <3.14 → [Updates: >=3.14, <3.15]
• openai ==1.109.1 → [Updates: ==2.43.0]
• tiktoken <1.0.0,>=0.5.1
• tabulate >=0.9.0,<1.0.0
• codeowners <1.0.0,>=0.6.0
• dataclasses-json <1.0.0,>=0.6.4
• dicttoxml <2.0.0,>=1.7.16
• xmltodict <1.0.0,>=0.13.0 → [Updates: <1.1.0,>=1.0.4]
• astor <1.0.0,>=0.8.1
• tree-sitter >=0.23.1,<0.25 → [Updates: >=0.25.2,<0.26]
• tree-sitter-python >=0.23.4,<0.24 → [Updates: >=0.25,<0.26]
• tree-sitter-typescript >=0.23.2,<0.24
• tree-sitter-javascript >=0.23.1,<0.24 → [Updates: >=0.25,<0.26]
• python-levenshtein <1.0.0,>=0.25.1
• networkx >=3.4.1
• wrapt <2.0.0,>=1.16.0 → [Updates: <2.3.0,>=2.2.2]
• pyright <2.0.0,>=1.1.372
• watchfiles <1.1.1,>=1.1.0 → [Updates: <1.1.2,>=1.1.1, <1.2.1,>=1.2.0]
• rich <14.0.0,>=13.7.1 → [Updates: <15.1.0,>=15.0.0]
• pydantic <3.0.0,>=2.9.2
• pydantic-settings >=2.0.0
• docstring-parser <1.0,>=0.16
• plotly >=5.24.0,<7.0.0
• humanize <5.0.0,>=4.10.0
• pytest-snapshot >=0.9.0
• pyjson5 ==1.6.9 → [Updates: ==2.0.1]
• mini-racer ==0.12.4 → [Updates: ==0.14.1]
• rustworkx >=0.15.1
• typing-extensions >=4.12.2
• termcolor >=2.4.0
• sentry-sdk ==2.41.0 → [Updates: ==2.63.0]
• click >=8.1.7
• requests >=2.32.3
• lazy-object-proxy >=0.0.0
• pydantic-core >=2.23.4
• hatch-vcs >=0.4.0
• hatchling >=1.25.0
• pyinstrument >=5.0.0
• pip >=24.3.1 → [Updates: >=24.3.1]
• rich-click >=1.8.5
• python-dotenv >=1.0.1 → [Updates: >=1.0.1]
• pygit2 >=1.16.0
• unidiff >=0.7.5
• datamodel-code-generator >=0.26.5
• PyGithub ==2.8.1 → [Updates: ==2.9.1]
• GitPython ==3.1.50
• psutil >=5.8.0
• fastapi <1.0.0,>=0.115.2
• starlette <1.0.0,>=0.16.0 → [Updates: <1.4.0,>=1.3.1]
• tqdm >=4.67.1
• tomlkit >=0.13.2
• uvicorn >=0.30.0
• packaging >=24.2
• numpy >=2.2.2
• modal >=0.73.45
• lox >=0.12.0
• docker >=6.1.3
• urllib3 >=2.0.0
• colorlog >=6.9.0
• codegen-sdk-pink >=0.1.0
• codegen-sdk-pink >=0.1.0
• types-networkx >=3.2.1.20240918
• types-tabulate >=0.9.0.20240106
• types-requests >=2.32.0.20241016
• types-toml >=0.10.8.20240310
• pygls >=2.0.0a2
• lsprotocol ==2024.0.0b1 → [Updates: ==2025.0.0]
• attrs >=25.1.0
• hatchling >=1.26.3
• hatch-vcs >=0.4.0
• setuptools-scm >=8.0.0
• coverage <8.0.0,>=7.6.1
• filelock <4.0.0,>=3.15.4
• pytest >=8.3.3 → [Updates: >=8.3.3]
• pytest-cov >=6.3.0,<6.3.1 → [Updates: >=7.1.0,<7.1.1]
• ruff >=0.6.8
• mypy >=1.13.0
• pre-commit >=4.0.1
• pytest-xdist >=3.6.1,<4.0.0
• pytest-mock <4.0.0,>=3.14.0
• pytest-timeout >=2.3.1
• braintrust >=0.0.160
• ruff-lsp <1.0.0,>=0.0.55
• austin-python >=1.7.1
• autoflake >=2.3.1
• typer >=0.12.5
• pre-commit-uv >=4.1.4
• austin-dist >=3.7.0
• uv >=0.4.25
• deptry >=0.22.0
• cibuildwheel >=2.22.0
• sybil >=9.0.0
• jsbeautifier <2.0.0,>=1.15.1 → [Updates: <2.1.0,>=2.0.1]
• inflection <1.0.0,>=0.5.1
• autoflake >=2.3.1
• black >=24.8.0 → [Updates: >=24.8.0]
• isort >=5.13.2
• emoji >=2.14.0
• pytest-benchmark >=5.1.0
• pytest-asyncio >=0.21.1,<1.0.0 → [Updates: >=1.4.0,<1.5.0]
• loguru >=0.7.3
• httpx <0.28.2,>=0.28.1
• jupyterlab >=4.3.5
• modal >=0.73.25
• pytest-lsp >=1.0.0b1
• cython >=3.0.11
• pytest-split >=0.10.0

pre-commit (1)

.pre-commit-config.yaml (14)

• ComPWA/taplo-pre-commit v0.9.3
• astral-sh/ruff-pre-commit v0.14.14 → [Updates: v0.15.18]
• @biomejs/biome 1.9.4 → [Updates: 2.5.0]
• biomejs/pre-commit v2.2.5 → [Updates: v2.2.7, v2.5.0]
• MarcoGorelli/cython-lint v0.17.0 → [Updates: v0.21.0]
• kynan/nbstripout 0.8.1 → [Updates: 0.8.2, 0.9.1]
• pre-commit/pre-commit-hooks v5.0.0 → [Updates: v6.0.0]
• python-jsonschema/check-jsonschema 0.34.0 → [Updates: 0.34.1, 0.37.3]
• mxr/sync-pre-commit-deps v0.0.3 → [Updates: v0.0.4]
• codespell-project/codespell v2.4.1 → [Updates: v2.4.2]
• fpgmaas/deptry 0.23.1 → [Updates: 0.25.1]
• renovatebot/pre-commit-hooks 39.264.0 → [Updates: 43.235.1]
• astral-sh/uv-pre-commit 0.9.30 → [Updates: 0.11.23]
• hukkin/mdformat 0.7.22 → [Updates: 1.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository