Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vespa-engine/sample-apps).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

<details>
<summary>View abandoned dependencies (40)</summary>

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
> 
| Datasource | Package | Last Updated |
|------------|------|-------------|
| bundler | [jekyll](https://redirect.github.com/jekyll/jekyll) | `2025-01-29` |
| github-actions | [vespa-engine/setup-vespa-cli-action](https://redirect.github.com/vespa-engine/setup-vespa-cli-action) | `2024-08-12` |
| gomod | [github.com/GoogleCloudPlatform/functions-framework-go](https://redirect.github.com/GoogleCloudPlatform/functions-framework-go) | `2025-03-27` |
| pip_requirements | [aiosignal](https://redirect.github.com/aio-libs/aiosignal) | `2025-07-03` |
| pip_requirements | [annotated-types](https://redirect.github.com/annotated-types/annotated-types) | `2024-05-20` |
| pip_requirements | [async-timeout](https://redirect.github.com/aio-libs/async-timeout) | `2024-11-06` |
| pip_requirements | [cycler](https://redirect.github.com/matplotlib/cycler) | `2023-10-07` |
| pip_requirements | [gputil](https://redirect.github.com/anderskm/gputil) | `2018-12-18` |
| pip_requirements | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| pip_requirements | [hf-transfer](https://redirect.github.com/huggingface/hf_transfer) | `2025-01-07` |
| pip_requirements | [httpcore](https://redirect.github.com/encode/httpcore) | `2025-04-24` |
| pip_requirements | [hyperframe](https://redirect.github.com/python-hyper/hyperframe) | `2025-01-22` |
| pip_requirements | [itsdangerous](https://redirect.github.com/pallets/itsdangerous) | `2024-04-16` |
| pip_requirements | [jinja2](https://redirect.github.com/pallets/jinja) | `2025-03-05` |
| pip_requirements | [loguru](https://redirect.github.com/Delgan/loguru) | `2024-12-06` |
| pip_requirements | [lucide-fasthtml](https://redirect.github.com/curtis-allan/lucide-fasthtml#readme) | `2024-09-10` |
| pip_requirements | [mdurl](https://redirect.github.com/executablebooks/mdurl) | `2022-08-14` |
| pip_requirements | [oauthlib](https://redirect.github.com/oauthlib/oauthlib) | `2025-06-19` |
| pip_requirements | [pdf2image](https://redirect.github.com/Belval/pdf2image) | `2024-01-07` |
| pip_requirements | [pyasn1-modules](https://redirect.github.com/pyasn1/pyasn1-modules) | `2025-03-28` |
| pip_requirements | [python-dateutil](https://redirect.github.com/dateutil/dateutil) | `2024-03-01` |
| pip_requirements | [requests-toolbelt](https://redirect.github.com/requests/toolbelt) | `2023-05-01` |
| pip_requirements | [rsa](https://redirect.github.com/sybrenstuvel/python-rsa) | `2025-04-16` |
| pip_requirements | [seaborn](https://redirect.github.com/mwaskom/seaborn) | `2024-01-25` |
| pip_requirements | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| pip_requirements | [shellingham](https://redirect.github.com/sarugaku/shellingham) | `2023-10-24` |
| pip_requirements | [six](https://redirect.github.com/benjaminp/six) | `2024-12-04` |
| pip_requirements | [sniffio](https://redirect.github.com/python-trio/sniffio) | `2024-02-25` |
| pip_requirements | `spacy-legacy` | `2024-01-25` |
| pip_requirements | [spacy-loggers](https://redirect.github.com/explosion/spacy-loggers) | `2023-09-11` |
| pip_requirements | [sympy](https://redirect.github.com/sympy/sympy) | `2025-04-27` |
| pip_requirements | [threadpoolctl](https://redirect.github.com/joblib/threadpoolctl) | `2025-03-13` |
| pip_requirements | [uritemplate](https://redirect.github.com/python-hyper/uritemplate) | `2025-06-02` |
| pip_requirements | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |
| pip_requirements | [wasabi](https://redirect.github.com/explosion/wasabi) | `2024-05-31` |
| poetry | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| poetry | `jupyter` | `2024-08-30` |
| poetry | [lightgbm](https://redirect.github.com/microsoft/LightGBM) | `2025-02-15` |
| poetry | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| poetry | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |

</details>


## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

 - [ ] chore(deps): pin dependencies (`grafana/grafana`, `maven`, `prom/prometheus`, `vespaengine/vespa`)
 - [ ] chore(deps): update github actions (`actions/setup-java`, `actions/setup-python`, `aws-actions/configure-aws-credentials`, `vespa-engine/gh-actions`)
 - [ ] chore(deps): update dependency apsw to v3.53.3.1
 - [ ] chore(deps): update dependency ch.qos.logback:logback-classic to v1.5.38
 - [ ] chore(deps): update dependency charset-normalizer to v3.4.9
 - [ ] chore(deps): update dependency click to v8.4.2
 - [ ] chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.22.1
 - [ ] chore(deps): update dependency filelock to v3.29.7
 - [ ] chore(deps): update dependency proto-plus to v1.28.1
 - [ ] chore(deps): update dependency protobuf to v7.35.1
 - [ ] chore(deps): update dependency pyasn1 to v0.6.4
 - [ ] chore(deps): update dependency pyvespa to v1.2.4
 - [ ] chore(deps): update dependency tqdm to v4.68.4
 - [ ] chore(deps): update dependency typer to v0.26.8
 - [ ] chore(deps): update dependency wrapt to v2.2.2
 - [ ] chore(deps): update maven docker tag to v3.9.16
 - [ ] fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.2
 - [ ] fix(deps): update dependency python-fasthtml to v0.14.6
 - [ ] fix(deps): update jetty monorepo to v12.1.11 (`org.eclipse.jetty.http2:jetty-http2-client-transport`, `org.eclipse.jetty:jetty-client`)
 - [ ] chore(deps): update dependency accelerate to v1.14.0
 - [ ] chore(deps): update dependency aiohappyeyeballs to v2.7.1
 - [ ] chore(deps): update dependency anyio to v4.14.1
 - [ ] chore(deps): update dependency certifi to v2026.6.17
 - [ ] chore(deps): update dependency cffi to v2.1.0
 - [ ] chore(deps): update dependency docker to v7.2.0
 - [ ] chore(deps): update dependency fastcore to v1.14.5
 - [ ] chore(deps): update dependency font-awesome to v6.7.2
 - [ ] chore(deps): update dependency fsspec to v2026.6.0
 - [ ] chore(deps): update dependency google-api-python-client to v2.198.0
 - [ ] chore(deps): update dependency google-auth to v2.55.2
 - [ ] chore(deps): update dependency grpcio to v1.82.1
 - [ ] chore(deps): update dependency grpcio-status to v1.82.1
 - [ ] chore(deps): update dependency hpack to v4.2.0
 - [ ] chore(deps): update dependency httplib2 to v0.32.0
 - [ ] chore(deps): update dependency huggingface-hub to v1.23.0
 - [ ] chore(deps): update dependency matplotlib to v3.11.0
 - [ ] chore(deps): update dependency mteb to v2.18.0
 - [ ] chore(deps): update dependency numpy to v2.5.1
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6
 - [ ] chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3
 - [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.21.0
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v5.14.4
 - [ ] chore(deps): update dependency pillow to v12.3.0
 - [ ] chore(deps): update dependency polars to v1.42.1
 - [ ] chore(deps): update dependency pypdf to v6.14.2
 - [ ] chore(deps): update dependency regex to v2026.7.10
 - [ ] chore(deps): update dependency scipy to v1.18.0
 - [ ] chore(deps): update dependency sentence-transformers to v5.6.0
 - [ ] chore(deps): update dependency smart-open to v7.7.1
 - [ ] chore(deps): update dependency torch to v2.13.0
 - [ ] chore(deps): update dependency typing-extensions to v4.16.0
 - [ ] chore(deps): update dependency vespacli to v8.719.5
 - [ ] chore(deps): update dependency websockets to v16.1
 - [ ] chore(deps): update dependency xxhash to v3.8.1
 - [ ] chore(deps): update gradle to v9.6.1
 - [ ] fix(deps): update dependency transformers to v5.13.1
 - [ ] fix(deps): update dependency tzdata to v2026.3
 - [ ] fix(deps): update dependency uvicorn to v0.51.0
 - [ ] fix(deps): update module cloud.google.com/go/storage to v1.63.0
 - [ ] chore(deps): update actions/checkout action to v7
 - [ ] chore(deps): update dependency cryptography to v49
 - [ ] chore(deps): update dependency fastcore to v2
 - [ ] chore(deps): update dependency font-awesome to v7
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v6
 - [ ] chore(deps): update dependency pyarrow to v25
 - [ ] chore(deps): update dependency setuptools to v83
 - [ ] chore(deps): update dependency smart-open to v8
 - [ ] chore(deps): lock file maintenance
 - [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [fix(deps): update dependency faker to v40](../pull/1953)
 - [ ] [fix(deps): update dependency org.apache.lucene:lucene-analysis-stempel to v10](../pull/1951)
 - [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `0`/`31` CVEs have Renovate fixes.

<details><summary>gomod</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod</summary>
<blockquote>

<details><summary>golang.org/x/crypto</summary>
<blockquote>

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

<details><summary>maven</summary>
<blockquote>

<details><summary>examples/book-search/pom.xml</summary>
<blockquote>

<details><summary>com.fasterxml.jackson.core:jackson-databind</summary>
<blockquote>

- [GHSA-5jmj-h7xm-6q6v](https://osv.dev/vulnerability/GHSA-5jmj-h7xm-6q6v)
- [GHSA-5jmj-h7xm-6q6v](https://osv.dev/vulnerability/GHSA-5jmj-h7xm-6q6v)
- [GHSA-5jmj-h7xm-6q6v](https://osv.dev/vulnerability/GHSA-5jmj-h7xm-6q6v)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

<details><summary>pip_requirements</summary>
<blockquote>

<details><summary>hypencoder/requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

<details><summary>reverse-image-search/script/requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

## Detected Dependencies

<details><summary>bundler (1)</summary>
<blockquote>

<details><summary>Gemfile (4)</summary>

 - `ruby >=2.6`
 - `jekyll '>= 4.3.3'`
 - `rake lock file @ 13.4.2`
 - `html-proofer '>= 5.0.8'`

</details>

</blockquote>
</details>

<details><summary>docker-compose (2)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/docker-compose.yml (2)</summary>

 - `prom/prometheus unknown version` → [Updates: `undefined`]
 - `grafana/grafana unknown version` → [Updates: `undefined`]

</details>

<details><summary>examples/operations/multinode-HA/docker-compose.yaml (10)</summary>

 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]

</details>

</blockquote>
</details>

<details><summary>dockerfile (1)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/Dockerfile (1)</summary>

 - `maven 3.9.5-eclipse-temurin-17` → [Updates: `3.9.16-eclipse-temurin-17`, `3.9.5-eclipse-temurin-17`]

</details>

</blockquote>
</details>

<details><summary>github-actions (10)</summary>
<blockquote>

<details><summary>.github/workflows/auto-approve.yml</summary>


</details>

<details><summary>.github/workflows/build.yml (2)</summary>

 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]
 - `actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654` → [Updates: `v5`]

</details>

<details><summary>.github/workflows/feed.yml (6)</summary>

 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]
 - `ruby/setup-ruby v1`
 - `actions/setup-python v6@a309ff8b426b58ec0e2a45f0f869d46889d02405` → [Updates: `v6`]
 - `vespa-engine/setup-vespa-cli-action v1@6072462cfdaa5f704890dcfa9160759099e58469`
 - `ruby 4.0.5`
 - `python 3.x`

</details>

<details><summary>.github/workflows/link-checker.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/update-cloud-samples.yml (6)</summary>

 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
 - `aws-actions/configure-aws-credentials v6@e7f100cf4c008499ea8adda475de1042d6975c7b` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/verify-guides-billion-image.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-guides-field-generator.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-guides-main.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-notebooks.yml (1)</summary>

 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]

</details>

<details><summary>examples/operations/CI-CD/.github/workflows/deploy.yaml (1)</summary>

 - `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`]

</details>

</blockquote>
</details>

<details><summary>gomod (1)</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod (3)</summary>

 - `go 1.19`
 - `cloud.google.com/go/storage v1.62.3` → [Updates: `v1.63.0`]
 - `github.com/GoogleCloudPlatform/functions-framework-go v1.9.2`

</details>

</blockquote>
</details>

<details><summary>gradle (4)</summary>
<blockquote>

<details><summary>examples/clients/client-java/app/build.gradle.kts (5)</summary>

 - `io.github.hakky54:ayza-for-pem 10.0.5`
 - `org.eclipse.jetty:jetty-client 12.1.10` → [Updates: `12.1.11`]
 - `org.eclipse.jetty.http2:jetty-http2-client-transport 12.1.10` → [Updates: `12.1.11`]
 - `org.slf4j:slf4j-simple 2.0.18`
 - `commons-cli:commons-cli 1.11.0`

</details>

<details><summary>examples/clients/client-java/gradle.properties</summary>


</details>

<details><summary>examples/clients/client-java/gradle/libs.versions.toml (2)</summary>

 - `com.google.guava:guava 33.6.0-jre`
 - `junit:junit 4.13.2`

</details>

<details><summary>examples/clients/client-java/settings.gradle.kts (1)</summary>

 - `org.gradle.toolchains.foojay-resolver-convention 1.0.0`

</details>

</blockquote>
</details>

<details><summary>gradle-wrapper (1)</summary>
<blockquote>

<details><summary>examples/clients/client-java/gradle/wrapper/gradle-wrapper.properties (1)</summary>

 - `gradle 9.3.1` → [Updates: `9.6.1`]

</details>

</blockquote>
</details>

<details><summary>html (1)</summary>
<blockquote>

<details><summary>examples/ecommerce-user-preferences/webapp/templates/index.html (1)</summary>

 - `font-awesome 6.4.0` → [Updates: `6.7.2`, `7.0.1`]

</details>

</blockquote>
</details>

<details><summary>maven (35)</summary>
<blockquote>

<details><summary>album-recommendation-java/app/pom.xml</summary>


</details>

<details><summary>billion-scale-image-search/app/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>billion-scale-vector-search/app/pom.xml</summary>


</details>

<details><summary>examples/book-search/pom.xml (4)</summary>

 - `org.junit.jupiter:junit-jupiter 5.11.4` → [Updates: `5.14.4`, `6.1.1`]
 - `com.fasterxml.jackson.core:jackson-databind 2.22.0` → [Updates: `2.22.1`]
 - `ch.qos.logback:logback-classic 1.5.18` → [Updates: `1.5.38`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.5.2` → [Updates: `3.5.6`]

</details>

<details><summary>examples/document-processing/pom.xml</summary>


</details>

<details><summary>examples/embedding-service/pom.xml</summary>


</details>

<details><summary>examples/generic-request-processing/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/http-api-using-request-handlers-and-processors/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/joins/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/02-lucene-per-variant/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/03-lucene-icu/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/06-opennlp-icu/pom.xml (2)</summary>

 - `com.ibm.icu:icu4j 78.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]

</details>

<details><summary>examples/linguistics-asia/07-opennlp-opencc/pom.xml (2)</summary>

 - `com.github.houbb:opencc4j 1.14.0`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]

</details>

<details><summary>examples/linguistics-asia/08-lucene-phrase-dict/pom.xml (1)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]

</details>

<details><summary>examples/lucene-linguistics/add-token-filter-factory/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/advanced-configuration/pom.xml (3)</summary>

 - `org.apache.lucene:lucene-analysis-stempel 9.12.3` → [Updates: `10.5.0`]
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/custom-analyzer-phonetic/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/going-crazy/pom.xml (1)</summary>

 - `eu.hlavki.text:jlemmagen 1.0`

</details>

<details><summary>examples/lucene-linguistics/minimal/pom.xml (1)</summary>

 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/simple-korean/pom.xml</summary>


</details>

<details><summary>examples/multiple-bundles-lib/pom.xml (4)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/multiple-bundles/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-dependency-plugin 3.6.1` → [Updates: `3.11.0`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/operations/CI-CD/production-deployment-with-tests-java/pom.xml</summary>


</details>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/pom.xml (5)</summary>

 - `org.immutables:value 2.12.2`
 - `org.immutables:gson 2.12.2`
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-assembly-plugin 3.6.0` → [Updates: `3.8.0`]
 - `org.apache.maven.plugins:maven-jar-plugin 3.3.0` → [Updates: `3.5.0`]

</details>

<details><summary>examples/predicate-fields/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/reranker/pom.xml (1)</summary>

 - `org.apache.httpcomponents.client5:httpclient5 5.6.1` → [Updates: `5.6.2`]

</details>

<details><summary>examples/vespa-chinese-linguistics/pom.xml (4)</summary>

 - `com.google.inject:guice 7.0.0`
 - `com.huaban:jieba-analysis 1.0.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.1`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>incremental-search/search-as-you-type/pom.xml</summary>


</details>

<details><summary>incremental-search/search-suggestions/pom.xml</summary>


</details>

<details><summary>model-inference/pom.xml</summary>


</details>

<details><summary>news/app-6-recommendation-with-searchers/pom.xml</summary>


</details>

<details><summary>news/app-7-parent-child/pom.xml</summary>


</details>

<details><summary>pom.xml</summary>


</details>

<details><summary>text-image-search/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>use-case-shopping/pom.xml (3)</summary>

 - `org.apache.httpcomponents:httpclient 4.5.14`
 - `org.apache.httpcomponents:httpcore 4.4.16`
 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

</blockquote>
</details>

<details><summary>pep621 (2)</summary>
<blockquote>

<details><summary>examples/book-search/frontend/pyproject.toml (1)</summary>

 - `python >=3.11`

</details>

<details><summary>examples/mcp-server-app/script/pyproject.toml (3)</summary>

 - `python >=3.9`
 - `Faker ==37.12.0` → [Updates: `==40.28.1`]
 - `tzdata ==2026.2` → [Updates: `==2026.3`]

</details>

</blockquote>
</details>

<details><summary>pip_requirements (9)</summary>
<blockquote>

<details><summary>examples/agentic-streamlit-chatbot/advanced_app/requirements.txt</summary>


</details>

<details><summary>examples/agentic-streamlit-chatbot/simple_app/requirements.txt</summary>


</details>

<details><summary>examples/google-cloud/cloud-functions/python/requirements.txt (1)</summary>

 - `functions-framework ==3.*`

</details>

<details><summary>hypencoder/requirements.txt (4)</summary>

 - `torch >=2.12.1`
 - `transformers >=5.0.0,<6`
 - `onnx >=1.16`
 - `onnxruntime >=1.20`

</details>

<details><summary>news/requirements.txt</summary>


</details>

<details><summary>reverse-image-search/script/requirements.txt (10)</summary>

 - `torch >=2.12.1`
 - `transformers >=5.0.0`
 - `torchvision >=0.20.0`
 - `pillow >=11.0.0`
 - `numpy >=2.0.0`
 - `datasets >=3.0.0`
 - `pyvespa >=1.1.2`
 - `huggingface_hub >=0.26.0`
 - `hf-transfer >=0.1.8`
 - `httpx >=0.28.0`

</details>

<details><summary>test/requirements.txt</summary>


</details>

<details><summary>text-video-search/src/python/requirements.txt</summary>


</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt (156)</summary>

 - `accelerate ==1.13.0` → [Updates: `==1.14.0`]
 - `aiohappyeyeballs ==2.6.2` → [Updates: `==2.7.1`]
 - `aiohttp ==3.14.1`
 - `aiosignal ==1.4.0`
 - `annotated-types ==0.7.0`
 - `anyio ==4.13.0` → [Updates: `==4.14.1`]
 - `apsw ==3.53.2.0` → [Updates: `==3.53.3.1`]
 - `apswutils ==0.1.2`
 - `async-timeout ==5.0.1`
 - `attrs ==26.1.0`
 - `beautifulsoup4 ==4.15.0`
 - `blis ==1.3.3`
 - `cachetools ==7.1.4`
 - `catalogue ==2.0.10`
 - `certifi ==2026.5.20` → [Updates: `==2026.6.17`]
 - `cffi ==2.0.0` → [Updates: `==2.1.0`]
 - `charset-normalizer ==3.4.7` → [Updates: `==3.4.9`]
 - `click ==8.4.1` → [Updates: `==8.4.2`]
 - `cloudpathlib ==0.24.0`
 - `colpali-engine ==0.3.17`
 - `confection ==1.3.3`
 - `contourpy ==1.3.3`
 - `cryptography ==48.0.1` → [Updates: `==49.0.0`]
 - `cycler ==0.12.1`
 - `cymem ==2.0.13`
 - `datasets ==5.0.0`
 - `dill ==0.4.1`
 - `docker ==7.1.0` → [Updates: `==7.2.0`]
 - `einops ==0.8.2`
 - `eval-type-backport ==0.4.0`
 - `exceptiongroup ==1.3.1`
 - `fastcore ==1.13.3` → [Updates: `==1.14.5`, `==2.0.4`]
 - `fastlite ==0.2.4`
 - `filelock ==3.29.3` → [Updates: `==3.29.7`]
 - `fonttools ==4.63.0`
 - `frozenlist ==1.8.0`
 - `fsspec ==2026.4.0` → [Updates: `==2026.6.0`]
 - `google-ai-generativelanguage ==0.12.0`
 - `google-api-core ==2.31.0`
 - `google-api-python-client ==2.197.0` → [Updates: `==2.198.0`]
 - `google-auth ==2.53.0` → [Updates: `==2.55.2`]
 - `google-auth-httplib2 ==0.4.0`
 - `google-generativeai ==0.8.6`
 - `googleapis-common-protos ==1.75.0`
 - `gputil ==1.4.0`
 - `grpcio ==1.81.0` → [Updates: `==1.82.1`]
 - `grpcio-status ==1.81.0` → [Updates: `==1.82.1`]
 - `h11 ==0.16.0`
 - `h2 ==4.3.0`
 - `hf-xet ==1.5.1`
 - `hpack ==4.1.0` → [Updates: `==4.2.0`]
 - `httpcore ==1.0.9`
 - `httplib2 ==0.31.2` → [Updates: `==0.32.0`]
 - `httptools ==0.8.0`
 - `httpx ==0.28.1`
 - `huggingface-hub ==1.18.0` → [Updates: `==1.23.0`]
 - `hyperframe ==6.1.0`
 - `idna ==3.18`
 - `itsdangerous ==2.2.0`
 - `jinja2 ==3.1.6`
 - `joblib ==1.5.3`
 - `kiwisolver ==1.5.0`
 - `langcodes ==3.5.1`
 - `language-data ==1.4.0`
 - `loguru ==0.7.3`
 - `lucide-fasthtml ==0.0.9`
 - `lxml ==6.1.1`
 - `marisa-trie ==1.4.1`
 - `markdown-it-py ==4.2.0`
 - `markupsafe ==3.0.3`
 - `matplotlib ==3.10.9` → [Updates: `==3.11.0`]
 - `mdurl ==0.1.2`
 - `mpmath ==1.4.1`
 - `mteb ==2.15.3` → [Updates: `==2.18.0`]
 - `multidict ==6.7.1`
 - `multiprocess ==0.70.19`
 - `murmurhash ==1.0.15`
 - `networkx ==3.6.1`
 - `numpy ==2.4.6` → [Updates: `==2.5.1`]
 - `oauthlib ==3.3.1`
 - `packaging ==26.2`
 - `pandas ==3.0.3`
 - `pdf2image ==1.17.0`
 - `peft ==0.19.1`
 - `pillow ==12.2.0` → [Updates: `==12.3.0`]
 - `pip ==26.1.2`
 - `polars ==1.41.2` → [Updates: `==1.42.1`]
 - `preshed ==3.0.13`
 - `propcache ==0.5.2`
 - `proto-plus ==1.28.0` → [Updates: `==1.28.1`]
 - `protobuf ==7.35.0` → [Updates: `==7.35.1`]
 - `psutil ==7.2.2`
 - `pyarrow ==24.0.0` → [Updates: `==25.0.0`]
 - `pyasn1 ==0.6.3` → [Updates: `==0.6.4`]
 - `pyasn1-modules ==0.4.2`
 - `pycparser ==3.0`
 - `pydantic ==2.13.4`
 - `pydantic-core ==2.47.0`
 - `pygments ==2.20.0`
 - `pyparsing ==3.3.2`
 - `pypdf ==6.13.3` → [Updates: `==6.14.2`]
 - `python-dateutil ==2.9.0.post0`
 - `python-dotenv ==1.2.2`
 - `python-fasthtml ==0.14.2` → [Updates: `==0.14.6`]
 - `python-multipart ==0.0.32`
 - `pytrec-eval-terrier ==0.5.10`
 - `pytz ==2026.2`
 - `pyvespa ==1.2.1` → [Updates: `==1.2.4`]
 - `pyyaml ==6.0.3`
 - `regex ==2026.5.9` → [Updates: `==2026.7.10`]
 - `requests ==2.34.2`
 - `requests-toolbelt ==1.0.0`
 - `rich ==15.0.0`
 - `rsa ==4.9.1`
 - `safetensors ==0.8.0`
 - `scikit-learn ==1.9.0`
 - `scipy ==1.17.1` → [Updates: `==1.18.0`]
 - `seaborn ==0.13.2`
 - `sentence-transformers ==5.5.1` → [Updates: `==5.6.0`]
 - `sentencepiece ==0.2.1`
 - `setuptools ==82.0.1` → [Updates: `==83.0.0`]
 - `shad4fast ==1.3.1`
 - `shellingham ==1.5.4`
 - `six ==1.17.0`
 - `smart-open ==7.6.1` → [Updates: `==7.7.1`, `==8.0.0`]
 - `sniffio ==1.3.1`
 - `soupsieve ==2.8.4`
 - `spacy ==3.8.14`
 - `spacy-legacy ==3.0.12`
 - `spacy-loggers ==1.0.5`
 - `srsly ==2.5.3`
 - `starlette ==1.3.1`
 - `sympy ==1.14.0`
 - `tenacity ==9.1.4`
 - `thinc ==9.1.1`
 - `threadpoolctl ==3.6.0`
 - `tokenizers ==0.23.1`
 - `torch ==2.12.1` → [Updates: `==2.13.0`]
 - `tqdm ==4.68.2` → [Updates: `==4.68.4`]
 - `transformers ==5.12.0` → [Updates: `==5.13.1`]
 - `typer ==0.26.7` → [Updates: `==0.26.8`]
 - `typing-extensions ==4.15.0` → [Updates: `==4.16.0`]
 - `tzdata ==2026.2` → [Updates: `==2026.3`]
 - `uritemplate ==4.2.0`
 - `urllib3 ==2.7.0`
 - `uvicorn ==0.49.0` → [Updates: `==0.51.0`]
 - `uvloop ==0.22.1`
 - `vespacli ==8.703.17` → [Updates: `==8.719.5`]
 - `vidore-benchmark ==5.0.0`
 - `wasabi ==1.1.3`
 - `watchfiles ==1.2.0`
 - `weasel ==1.0.0`
 - `websockets ==16.0` → [Updates: `==16.1`]
 - `wrapt ==2.2.1` → [Updates: `==2.2.2`]
 - `xxhash ==3.7.0` → [Updates: `==3.8.1`]
 - `yarl ==1.24.2`

</details>

</blockquote>
</details>

<details><summary>poetry (3)</summary>
<blockquote>

<details><summary>examples/workshop-ecommerce/pyproject.toml (4)</summary>

 - `jupyter >=1.1.1`
 - `pandas >=2.3.3`
 - `pyvespa >=0.62.0`
 - `vespacli >=8.591.16`

</details>

<details><summary>rag-blueprint/eval/pyproject.toml (4)</summary>

 - `lightgbm >=4.6.0`
 - `pandas >=2.3.0`
 - `pyvespa >=0.57.0`
 - `scikit-learn >=1.7.0`

</details>

<details><summary>visual-retrieval-colpali/pyproject.toml (8)</summary>

 - `python-fasthtml ==0.14.2` → [Updates: `==0.14.6`]
 - `uvicorn ==0.49.0` → [Updates: `==0.51.0`]
 - `pyvespa >=0.50.0`
 - `vidore-benchmark >=5.0.0,<5.1.0`
 - `colpali-engine ==0.3.17`
 - `shad4fast >=1.2.1`
 - `transformers ==5.12.0` → [Updates: `==5.13.1`]
 - `h11 >=0.16.0`

</details>

</blockquote>
</details>

<details><summary>renovate-config (1)</summary>
<blockquote>

<details><summary>renovate.json</summary>


</details>

</blockquote>
</details>

<details><summary>terraform (3)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/alerts/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/dashboards/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Dependency Dashboard #1283

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Datasource	Package	Last Updated
bundler	jekyll	`2025-01-29`
github-actions	vespa-engine/setup-vespa-cli-action	`2024-08-12`
gomod	github.com/GoogleCloudPlatform/functions-framework-go	`2025-03-27`
pip_requirements	aiosignal	`2025-07-03`
pip_requirements	annotated-types	`2024-05-20`
pip_requirements	async-timeout	`2024-11-06`
pip_requirements	cycler	`2023-10-07`
pip_requirements	gputil	`2018-12-18`
pip_requirements	h11	`2025-04-24`
pip_requirements	hf-transfer	`2025-01-07`
pip_requirements	httpcore	`2025-04-24`
pip_requirements	hyperframe	`2025-01-22`
pip_requirements	itsdangerous	`2024-04-16`
pip_requirements	jinja2	`2025-03-05`
pip_requirements	loguru	`2024-12-06`
pip_requirements	lucide-fasthtml	`2024-09-10`
pip_requirements	mdurl	`2022-08-14`
pip_requirements	oauthlib	`2025-06-19`
pip_requirements	pdf2image	`2024-01-07`
pip_requirements	pyasn1-modules	`2025-03-28`
pip_requirements	python-dateutil	`2024-03-01`
pip_requirements	requests-toolbelt	`2023-05-01`
pip_requirements	rsa	`2025-04-16`
pip_requirements	seaborn	`2024-01-25`
pip_requirements	shad4fast	`2024-11-09`
pip_requirements	shellingham	`2023-10-24`
pip_requirements	six	`2024-12-04`
pip_requirements	sniffio	`2024-02-25`
pip_requirements	`spacy-legacy`	`2024-01-25`
pip_requirements	spacy-loggers	`2023-09-11`
pip_requirements	sympy	`2025-04-27`
pip_requirements	threadpoolctl	`2025-03-13`
pip_requirements	uritemplate	`2025-06-02`
pip_requirements	vidore-benchmark	`2025-02-19`
pip_requirements	wasabi	`2024-05-31`
poetry	h11	`2025-04-24`
poetry	`jupyter`	`2024-08-30`
poetry	lightgbm	`2025-02-15`
poetry	shad4fast	`2024-11-09`
poetry	vidore-benchmark	`2025-02-19`

Uh oh!

Dependency Dashboard #1283

Description

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Issue actions