Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vespa-engine/sample-apps).

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

<details>
<summary>View abandoned dependencies (39)</summary>

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
> 
| Datasource | Package | Last Updated |
|------------|------|-------------|
| bundler | [jekyll](https://redirect.github.com/jekyll/jekyll) | `2025-01-29` |
| github-actions | [vespa-engine/setup-vespa-cli-action](https://redirect.github.com/vespa-engine/setup-vespa-cli-action) | `2024-08-12` |
| gomod | [github.com/GoogleCloudPlatform/functions-framework-go](https://redirect.github.com/GoogleCloudPlatform/functions-framework-go) | `2025-03-27` |
| pip_requirements | [aiosignal](https://redirect.github.com/aio-libs/aiosignal) | `2025-07-03` |
| pip_requirements | [async-timeout](https://redirect.github.com/aio-libs/async-timeout) | `2024-11-06` |
| pip_requirements | [contourpy](https://redirect.github.com/contourpy/contourpy) | `2025-07-26` |
| pip_requirements | [cycler](https://redirect.github.com/matplotlib/cycler) | `2023-10-07` |
| pip_requirements | [gputil](https://redirect.github.com/anderskm/gputil) | `2018-12-18` |
| pip_requirements | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| pip_requirements | [hf-transfer](https://redirect.github.com/huggingface/hf_transfer) | `2025-01-07` |
| pip_requirements | [httpcore](https://redirect.github.com/encode/httpcore) | `2025-04-24` |
| pip_requirements | [hyperframe](https://redirect.github.com/python-hyper/hyperframe) | `2025-01-22` |
| pip_requirements | [itsdangerous](https://redirect.github.com/pallets/itsdangerous) | `2024-04-16` |
| pip_requirements | [jinja2](https://redirect.github.com/pallets/jinja) | `2025-03-05` |
| pip_requirements | [loguru](https://redirect.github.com/Delgan/loguru) | `2024-12-06` |
| pip_requirements | [lucide-fasthtml](https://redirect.github.com/curtis-allan/lucide-fasthtml#readme) | `2024-09-10` |
| pip_requirements | [mdurl](https://redirect.github.com/executablebooks/mdurl) | `2022-08-14` |
| pip_requirements | [oauthlib](https://redirect.github.com/oauthlib/oauthlib) | `2025-06-19` |
| pip_requirements | [pdf2image](https://redirect.github.com/Belval/pdf2image) | `2024-01-07` |
| pip_requirements | [pyasn1-modules](https://redirect.github.com/pyasn1/pyasn1-modules) | `2025-03-28` |
| pip_requirements | [python-dateutil](https://redirect.github.com/dateutil/dateutil) | `2024-03-01` |
| pip_requirements | [requests-toolbelt](https://redirect.github.com/requests/toolbelt) | `2023-05-01` |
| pip_requirements | [rsa](https://redirect.github.com/sybrenstuvel/python-rsa) | `2025-04-16` |
| pip_requirements | [seaborn](https://redirect.github.com/mwaskom/seaborn) | `2024-01-25` |
| pip_requirements | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| pip_requirements | [shellingham](https://redirect.github.com/sarugaku/shellingham) | `2023-10-24` |
| pip_requirements | [six](https://redirect.github.com/benjaminp/six) | `2024-12-04` |
| pip_requirements | [sniffio](https://redirect.github.com/python-trio/sniffio) | `2024-02-25` |
| pip_requirements | `spacy-legacy` | `2024-01-25` |
| pip_requirements | [spacy-loggers](https://redirect.github.com/explosion/spacy-loggers) | `2023-09-11` |
| pip_requirements | [sympy](https://redirect.github.com/sympy/sympy) | `2025-04-27` |
| pip_requirements | [threadpoolctl](https://redirect.github.com/joblib/threadpoolctl) | `2025-03-13` |
| pip_requirements | [uritemplate](https://redirect.github.com/python-hyper/uritemplate) | `2025-06-02` |
| pip_requirements | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |
| pip_requirements | [wasabi](https://redirect.github.com/explosion/wasabi) | `2024-05-31` |
| poetry | [h11](https://redirect.github.com/python-hyper/h11) | `2025-04-24` |
| poetry | `jupyter` | `2024-08-30` |
| poetry | [shad4fast](https://redirect.github.com/curtis-allan/shad4fasthtml#readme) | `2024-11-09` |
| poetry | [vidore-benchmark](https://redirect.github.com/illuin-tech/vidore-benchmark) | `2025-02-19` |

</details>


## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

 - [ ] chore(deps): pin dependencies (`grafana/grafana`, `maven`, `prom/prometheus`, `vespaengine/vespa`)
 - [ ] chore(deps): update dependency apsw to v3.53.4.0
 - [ ] chore(deps): update dependency cachetools to v7.1.7
 - [ ] chore(deps): update dependency charset-normalizer to v3.4.9
 - [ ] chore(deps): update dependency click to v8.4.2
 - [ ] chore(deps): update dependency datasets to v5.0.1
 - [ ] chore(deps): update dependency google-auth-httplib2 to v0.4.1
 - [ ] chore(deps): update dependency googleapis-common-protos to v1.75.1
 - [ ] chore(deps): update dependency html-proofer to v5.2.2
 - [ ] chore(deps): update dependency pandas to v3.0.5
 - [ ] chore(deps): update dependency proto-plus to v1.28.3
 - [ ] chore(deps): update dependency protobuf to v7.35.1
 - [ ] chore(deps): update dependency pyvespa to v1.2.4
 - [ ] chore(deps): update dependency sentencepiece to v0.2.2
 - [ ] chore(deps): update dependency spacy to v3.8.15
 - [ ] chore(deps): update dependency yarl to v1.24.5
 - [ ] chore(deps): update maven docker tag to v3.9.16
 - [ ] fix(deps): update dependency io.github.hakky54:ayza-for-pem to v10.0.6
 - [ ] fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.4
 - [ ] fix(deps): update dependency python-fasthtml to v0.14.11
 - [ ] fix(deps): update jetty monorepo to v12.1.12 (`org.eclipse.jetty.http2:jetty-http2-client-transport`, `org.eclipse.jetty:jetty-client`)
 - [ ] chore(deps): update dependency accelerate to v1.14.0
 - [ ] chore(deps): update dependency aiohappyeyeballs to v2.7.1
 - [ ] chore(deps): update dependency annotated-types to v0.8.0
 - [ ] chore(deps): update dependency anyio to v4.14.2
 - [ ] chore(deps): update dependency certifi to v2026.7.22
 - [ ] chore(deps): update dependency cffi to v2.1.1
 - [ ] chore(deps): update dependency ch.qos.logback:logback-classic to v1.6.1
 - [ ] chore(deps): update dependency docker to v7.2.0
 - [ ] chore(deps): update dependency fastcore to v1.14.5
 - [ ] chore(deps): update dependency filelock to v3.32.2
 - [ ] chore(deps): update dependency font-awesome to v6.7.2
 - [ ] chore(deps): update dependency fsspec to v2026.7.0
 - [ ] chore(deps): update dependency google-api-core to v2.34.0
 - [ ] chore(deps): update dependency google-api-python-client to v2.198.0
 - [ ] chore(deps): update dependency google-auth to v2.56.3
 - [ ] chore(deps): update dependency grpcio to v1.83.0
 - [ ] chore(deps): update dependency grpcio-status to v1.83.0
 - [ ] chore(deps): update dependency hf-xet to v1.6.0
 - [ ] chore(deps): update dependency hpack to v4.2.0
 - [ ] chore(deps): update dependency huggingface-hub to v1.27.0
 - [ ] chore(deps): update dependency matplotlib to v3.11.1
 - [ ] chore(deps): update dependency mteb to v2.18.16
 - [ ] chore(deps): update dependency numpy to v2.5.1
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6
 - [ ] chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3
 - [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.21.0
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v5.14.4
 - [ ] chore(deps): update dependency packaging to v26.3
 - [ ] chore(deps): update dependency peft to v0.20.0
 - [ ] chore(deps): update dependency pip to v26.2.1
 - [ ] chore(deps): update dependency polars to v1.43.2
 - [ ] chore(deps): update dependency pydantic-core to v2.48.0
 - [ ] chore(deps): update dependency pytz to v2026.3.post1
 - [ ] chore(deps): update dependency regex to v2026.7.19
 - [ ] chore(deps): update dependency scipy to v1.18.0
 - [ ] chore(deps): update dependency sentence-transformers to v5.7.0
 - [ ] chore(deps): update dependency smart-open to v7.7.1
 - [ ] chore(deps): update dependency soupsieve to v2.9.2
 - [ ] chore(deps): update dependency starlette to v1.6.0
 - [ ] chore(deps): update dependency tqdm to v4.70.0
 - [ ] chore(deps): update dependency typer to v0.27.1
 - [ ] chore(deps): update dependency typing-extensions to v4.16.0
 - [ ] chore(deps): update dependency vespacli to v8.733.3
 - [ ] chore(deps): update dependency websockets to v16.1.1
 - [ ] chore(deps): update dependency wrapt to v2.3.0
 - [ ] chore(deps): update dependency xxhash to v3.8.1
 - [ ] chore(deps): update gradle to v9.7.0
 - [ ] fix(deps): update dependency transformers to v5.14.1
 - [ ] fix(deps): update dependency tzdata to v2026.3
 - [ ] fix(deps): update dependency uvicorn to v0.52.1
 - [ ] fix(deps): update module cloud.google.com/go/storage to v1.64.0
 - [ ] chore(deps): update dependency fastcore to v2
 - [ ] chore(deps): update dependency font-awesome to v7
 - [ ] chore(deps): update dependency org.junit.jupiter:junit-jupiter to v6
 - [ ] chore(deps): update dependency pyarrow to v25
 - [ ] chore(deps): update dependency setuptools to v84
 - [ ] chore(deps): update dependency smart-open to v8
 - [ ] chore(deps): update dependency websockets to v17
 - [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [chore(deps): update dependency h2 to v4.4.1 [security]](../pull/1988)
 - [ ] [chore(deps): update dependency pypdf to v6.15.0 [security]](../pull/1989)
 - [ ] [chore(deps): update dependency cryptography to v50 [security]](../pull/1985)
 - [ ] [chore(deps): update github actions](../pull/1981) (`actions/setup-java`, `aws-actions/configure-aws-credentials`, `ruby`, `vespa-engine/gh-actions`)
 - [ ] [fix(deps): update dependency org.apache.lucene:lucene-analysis-stempel to v10](../pull/1951)
 - [ ] [chore(deps): lock file maintenance](../pull/1982)
 - [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `15`/`34` CVEs have Renovate fixes.

<details><summary>gomod</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod</summary>
<blockquote>

<details><summary>golang.org/x/crypto</summary>
<blockquote>

- [GO-2026-5932](https://osv.dev/vulnerability/GO-2026-5932)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

<details><summary>pip_requirements</summary>
<blockquote>

<details><summary>reverse-image-search/script/requirements.txt</summary>
<blockquote>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt</summary>
<blockquote>

<details><summary>aiohttp</summary>
<blockquote>

- [GHSA-cq5v-8q36-5273](https://osv.dev/vulnerability/GHSA-cq5v-8q36-5273) (fixed in >= 3.14.3)
- [GHSA-mfx4-hv73-q22v](https://osv.dev/vulnerability/GHSA-mfx4-hv73-q22v) (fixed in >= 3.14.2)
- [GHSA-mq44-7p77-q5h7](https://osv.dev/vulnerability/GHSA-mq44-7p77-q5h7) (fixed in >= 3.14.2)
- [PYSEC-2026-3545](https://osv.dev/vulnerability/PYSEC-2026-3545) (fixed in >= 3.14.3)
- [PYSEC-2026-3546](https://osv.dev/vulnerability/PYSEC-2026-3546) (fixed in >= 3.14.2)
- [PYSEC-2026-3547](https://osv.dev/vulnerability/PYSEC-2026-3547) (fixed in >= 3.14.2)
</blockquote>
</details>

<details><summary>cryptography</summary>
<blockquote>

- [GHSA-g6cj-pr64-35w5](https://osv.dev/vulnerability/GHSA-g6cj-pr64-35w5) (fixed in >= 50.0.0)
- [GHSA-jwv3-5hgf-82ww](https://osv.dev/vulnerability/GHSA-jwv3-5hgf-82ww) (fixed in >= 49.0.0)
- [GHSA-m2h6-j472-rp4c](https://osv.dev/vulnerability/GHSA-m2h6-j472-rp4c) (fixed in >= 49.0.0)
- [PYSEC-2026-3552](https://osv.dev/vulnerability/PYSEC-2026-3552) (fixed in >= 50.0.0)
- [PYSEC-2026-3553](https://osv.dev/vulnerability/PYSEC-2026-3553) (fixed in >= 49.0.0)
- [PYSEC-2026-3554](https://osv.dev/vulnerability/PYSEC-2026-3554) (fixed in >= 49.0.0)
</blockquote>
</details>

<details><summary>h2</summary>
<blockquote>

- [GHSA-6hr6-w5qg-qmwg](https://osv.dev/vulnerability/GHSA-6hr6-w5qg-qmwg) (fixed in >= 4.4.1)
</blockquote>
</details>

<details><summary>pypdf</summary>
<blockquote>

- [GHSA-fp3f-mc75-235c](https://osv.dev/vulnerability/GHSA-fp3f-mc75-235c) (fixed in >= 6.15.0)
- [GHSA-fwg2-594c-jp42](https://osv.dev/vulnerability/GHSA-fwg2-594c-jp42) (fixed in >= 6.15.0)
</blockquote>
</details>

<details><summary>torch</summary>
<blockquote>

- [PYSEC-2025-189](https://osv.dev/vulnerability/PYSEC-2025-189)
- [PYSEC-2025-190](https://osv.dev/vulnerability/PYSEC-2025-190)
- [PYSEC-2025-192](https://osv.dev/vulnerability/PYSEC-2025-192)
- [PYSEC-2025-193](https://osv.dev/vulnerability/PYSEC-2025-193)
- [PYSEC-2025-194](https://osv.dev/vulnerability/PYSEC-2025-194)
- [PYSEC-2025-195](https://osv.dev/vulnerability/PYSEC-2025-195)
- [PYSEC-2025-196](https://osv.dev/vulnerability/PYSEC-2025-196)
- [PYSEC-2025-197](https://osv.dev/vulnerability/PYSEC-2025-197)
- [PYSEC-2025-210](https://osv.dev/vulnerability/PYSEC-2025-210)
</blockquote>
</details>

</blockquote>
</details>

</blockquote>
</details>

## Detected Dependencies

<details><summary>bundler (1)</summary>
<blockquote>

<details><summary>Gemfile (4)</summary>

 - `ruby >=2.6`
 - `jekyll '>= 4.3.3'`
 - `rake lock file @ 13.4.2`
 - `html-proofer '>= 5.0.8'` → [Updates: `'>= 5.0.8'`]

</details>

</blockquote>
</details>

<details><summary>docker-compose (2)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/docker-compose.yml (2)</summary>

 - `prom/prometheus unknown version` → [Updates: `undefined`]
 - `grafana/grafana unknown version` → [Updates: `undefined`]

</details>

<details><summary>examples/operations/multinode-HA/docker-compose.yaml (10)</summary>

 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]
 - `vespaengine/vespa unknown version` → [Updates: `undefined`]

</details>

</blockquote>
</details>

<details><summary>dockerfile (1)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/Dockerfile (1)</summary>

 - `maven 3.9.5-eclipse-temurin-17` → [Updates: `3.9.16-eclipse-temurin-17`, `3.9.5-eclipse-temurin-17`]

</details>

</blockquote>
</details>

<details><summary>github-actions (10)</summary>
<blockquote>

<details><summary>.github/workflows/auto-approve.yml</summary>


</details>

<details><summary>.github/workflows/build.yml (2)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654` → [Updates: `v5`]

</details>

<details><summary>.github/workflows/feed.yml (6)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `ruby/setup-ruby v1`
 - `actions/setup-python v7@5fda3b95a4ea91299a34e894583c3862153e4b97`
 - `vespa-engine/setup-vespa-cli-action v1@6072462cfdaa5f704890dcfa9160759099e58469`
 - `ruby 4.0.5` → [Updates: `4.0.6`]
 - `python 3.x`

</details>

<details><summary>.github/workflows/link-checker.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/update-cloud-samples.yml (6)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
 - `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
 - `actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
 - `aws-actions/configure-aws-credentials v6@e7f100cf4c008499ea8adda475de1042d6975c7b` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/verify-guides-billion-image.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-guides-field-generator.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-guides-main.yml (1)</summary>

 - `vespa-engine/gh-actions main@d6a206637e259811059800dbee04fdcbc75aab3e` → [Updates: `main`]

</details>

<details><summary>.github/workflows/verify-notebooks.yml (1)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

<details><summary>examples/operations/CI-CD/.github/workflows/deploy.yaml (1)</summary>

 - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

</details>

</blockquote>
</details>

<details><summary>gomod (1)</summary>
<blockquote>

<details><summary>examples/google-cloud/cloud-functions/go/go.mod (3)</summary>

 - `go 1.19`
 - `cloud.google.com/go/storage v1.62.3` → [Updates: `v1.64.0`]
 - `github.com/GoogleCloudPlatform/functions-framework-go v1.9.2`

</details>

</blockquote>
</details>

<details><summary>gradle (4)</summary>
<blockquote>

<details><summary>examples/clients/client-java/app/build.gradle.kts (5)</summary>

 - `io.github.hakky54:ayza-for-pem 10.0.5` → [Updates: `10.0.6`]
 - `org.eclipse.jetty:jetty-client 12.1.10` → [Updates: `12.1.12`]
 - `org.eclipse.jetty.http2:jetty-http2-client-transport 12.1.10` → [Updates: `12.1.12`]
 - `org.slf4j:slf4j-simple 2.0.18`
 - `commons-cli:commons-cli 1.11.0`

</details>

<details><summary>examples/clients/client-java/gradle.properties</summary>


</details>

<details><summary>examples/clients/client-java/gradle/libs.versions.toml (2)</summary>

 - `com.google.guava:guava 33.6.0-jre`
 - `junit:junit 4.13.2`

</details>

<details><summary>examples/clients/client-java/settings.gradle.kts (1)</summary>

 - `org.gradle.toolchains.foojay-resolver-convention 1.0.0`

</details>

</blockquote>
</details>

<details><summary>gradle-wrapper (1)</summary>
<blockquote>

<details><summary>examples/clients/client-java/gradle/wrapper/gradle-wrapper.properties (1)</summary>

 - `gradle 9.3.1` → [Updates: `9.7.0`]

</details>

</blockquote>
</details>

<details><summary>html (1)</summary>
<blockquote>

<details><summary>examples/ecommerce-user-preferences/webapp/templates/index.html (1)</summary>

 - `font-awesome 6.4.0` → [Updates: `6.7.2`, `7.3.0`]

</details>

</blockquote>
</details>

<details><summary>maven (36)</summary>
<blockquote>

<details><summary>album-recommendation-java/app/pom.xml</summary>


</details>

<details><summary>billion-scale-image-search/app/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>billion-scale-vector-search/app/pom.xml</summary>


</details>

<details><summary>examples/book-search/pom.xml (4)</summary>

 - `org.junit.jupiter:junit-jupiter 5.11.4` → [Updates: `5.14.4`, `6.1.3`]
 - `com.fasterxml.jackson.core:jackson-databind 2.22.1`
 - `ch.qos.logback:logback-classic 1.5.18` → [Updates: `1.6.1`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.5.2` → [Updates: `3.5.6`]

</details>

<details><summary>examples/document-processing/pom.xml</summary>


</details>

<details><summary>examples/embedding-service/pom.xml</summary>


</details>

<details><summary>examples/generic-request-processing/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/http-api-using-request-handlers-and-processors/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/joins/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/02-lucene-per-variant/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/03-lucene-icu/pom.xml</summary>


</details>

<details><summary>examples/linguistics-asia/06-opennlp-icu/pom.xml (2)</summary>

 - `com.ibm.icu:icu4j 78.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/linguistics-asia/07-opennlp-opencc/pom.xml (2)</summary>

 - `com.github.houbb:opencc4j 1.14.0`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/linguistics-asia/08-lucene-phrase-dict/pom.xml (1)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]

</details>

<details><summary>examples/lucene-linguistics/add-token-filter-factory/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/advanced-configuration/pom.xml (3)</summary>

 - `org.apache.lucene:lucene-analysis-stempel 9.12.3` → [Updates: `10.5.0`]
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/custom-analyzer-phonetic/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/going-crazy/pom.xml (1)</summary>

 - `eu.hlavki.text:jlemmagen 1.0`

</details>

<details><summary>examples/lucene-linguistics/hyphenation-compound-word/pom.xml</summary>


</details>

<details><summary>examples/lucene-linguistics/minimal/pom.xml (1)</summary>

 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>examples/lucene-linguistics/simple-korean/pom.xml</summary>


</details>

<details><summary>examples/multiple-bundles-lib/pom.xml (4)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/multiple-bundles/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-dependency-plugin 3.6.1` → [Updates: `3.11.0`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]

</details>

<details><summary>examples/operations/CI-CD/production-deployment-with-tests-java/pom.xml</summary>


</details>

<details><summary>examples/operations/monitoring/album-recommendation-monitoring/album-recommendation-random-data/pom.xml (5)</summary>

 - `org.immutables:value 2.12.2`
 - `org.immutables:gson 2.12.2`
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-assembly-plugin 3.6.0` → [Updates: `3.8.0`]
 - `org.apache.maven.plugins:maven-jar-plugin 3.3.0` → [Updates: `3.5.1`]

</details>

<details><summary>examples/predicate-fields/pom.xml (5)</summary>

 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.5.6`]
 - `org.codehaus.mojo:versions-maven-plugin 2.16.2` → [Updates: `2.21.0`]
 - `org.apache.maven.plugins:maven-antrun-plugin 3.1.0` → [Updates: `3.2.0`]

</details>

<details><summary>examples/reranker/pom.xml (1)</summary>

 - `org.apache.httpcomponents.client5:httpclient5 5.6.2` → [Updates: `5.6.4`]

</details>

<details><summary>examples/vespa-chinese-linguistics/pom.xml (4)</summary>

 - `com.google.inject:guice 7.0.0`
 - `com.huaban:jieba-analysis 1.0.3`
 - `org.junit.jupiter:junit-jupiter 5.10.1` → [Updates: `5.14.4`, `6.1.3`]
 - `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.15.0`]

</details>

<details><summary>incremental-search/search-as-you-type/pom.xml</summary>


</details>

<details><summary>incremental-search/search-suggestions/pom.xml</summary>


</details>

<details><summary>model-inference/pom.xml</summary>


</details>

<details><summary>news/app-6-recommendation-with-searchers/pom.xml</summary>


</details>

<details><summary>news/app-7-parent-child/pom.xml</summary>


</details>

<details><summary>pom.xml</summary>


</details>

<details><summary>text-image-search/pom.xml (1)</summary>

 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

<details><summary>use-case-shopping/pom.xml (3)</summary>

 - `org.apache.httpcomponents:httpclient 4.5.14`
 - `org.apache.httpcomponents:httpcore 4.4.16`
 - `org.codehaus.mojo:exec-maven-plugin 3.2.0` → [Updates: `3.6.3`]

</details>

</blockquote>
</details>

<details><summary>pep621 (2)</summary>
<blockquote>

<details><summary>examples/book-search/frontend/pyproject.toml (1)</summary>

 - `python >=3.11`

</details>

<details><summary>examples/mcp-server-app/script/pyproject.toml (3)</summary>

 - `python >=3.9`
 - `Faker ==40.36.0`
 - `tzdata ==2026.2` → [Updates: `==2026.3`]

</details>

</blockquote>
</details>

<details><summary>pip_requirements (9)</summary>
<blockquote>

<details><summary>examples/agentic-streamlit-chatbot/advanced_app/requirements.txt</summary>


</details>

<details><summary>examples/agentic-streamlit-chatbot/simple_app/requirements.txt</summary>


</details>

<details><summary>examples/google-cloud/cloud-functions/python/requirements.txt (1)</summary>

 - `functions-framework ==3.*`

</details>

<details><summary>hypencoder/requirements.txt</summary>


</details>

<details><summary>news/requirements.txt</summary>


</details>

<details><summary>reverse-image-search/script/requirements.txt (10)</summary>

 - `torch >=2.13.0`
 - `transformers >=5.0.0`
 - `torchvision >=0.20.0`
 - `pillow >=12.3.0`
 - `numpy >=2.0.0`
 - `datasets >=3.0.0`
 - `pyvespa >=1.1.2`
 - `huggingface_hub >=0.26.0`
 - `hf-transfer >=0.1.8`
 - `httpx >=0.28.0`

</details>

<details><summary>test/requirements.txt</summary>


</details>

<details><summary>text-video-search/src/python/requirements.txt</summary>


</details>

<details><summary>visual-retrieval-colpali/src/legacy-requirements.txt (155)</summary>

 - `accelerate ==1.13.0` → [Updates: `==1.14.0`]
 - `aiohappyeyeballs ==2.6.2` → [Updates: `==2.7.1`]
 - `aiosignal ==1.4.0`
 - `annotated-types ==0.7.0` → [Updates: `==0.8.0`]
 - `anyio ==4.13.0` → [Updates: `==4.14.2`]
 - `apsw ==3.53.2.0` → [Updates: `==3.53.4.0`]
 - `apswutils ==0.1.2`
 - `async-timeout ==5.0.1`
 - `attrs ==26.1.0`
 - `beautifulsoup4 ==4.15.0`
 - `blis ==1.3.3`
 - `cachetools ==7.1.4` → [Updates: `==7.1.7`]
 - `catalogue ==2.0.10`
 - `certifi ==2026.5.20` → [Updates: `==2026.7.22`]
 - `cffi ==2.0.0` → [Updates: `==2.1.1`]
 - `charset-normalizer ==3.4.7` → [Updates: `==3.4.9`]
 - `click ==8.4.1` → [Updates: `==8.4.2`]
 - `cloudpathlib ==0.24.0`
 - `colpali-engine ==0.3.17`
 - `confection ==1.3.3`
 - `contourpy ==1.3.3`
 - `cryptography ==48.0.1` → [Updates: `==50.0.0`]
 - `cycler ==0.12.1`
 - `cymem ==2.0.13`
 - `datasets ==5.0.0` → [Updates: `==5.0.1`]
 - `dill ==0.4.1`
 - `docker ==7.1.0` → [Updates: `==7.2.0`]
 - `einops ==0.8.2`
 - `eval-type-backport ==0.4.0`
 - `exceptiongroup ==1.3.1`
 - `fastcore ==1.13.3` → [Updates: `==1.14.5`, `==2.2.6`]
 - `fastlite ==0.2.4`
 - `filelock ==3.29.3` → [Updates: `==3.32.2`]
 - `fonttools ==4.63.0`
 - `frozenlist ==1.8.0`
 - `fsspec ==2026.4.0` → [Updates: `==2026.7.0`]
 - `google-ai-generativelanguage ==0.12.0`
 - `google-api-core ==2.31.0` → [Updates: `==2.34.0`]
 - `google-api-python-client ==2.197.0` → [Updates: `==2.198.0`]
 - `google-auth ==2.53.0` → [Updates: `==2.56.3`]
 - `google-auth-httplib2 ==0.4.0` → [Updates: `==0.4.1`]
 - `google-generativeai ==0.8.6`
 - `googleapis-common-protos ==1.75.0` → [Updates: `==1.75.1`]
 - `gputil ==1.4.0`
 - `grpcio ==1.81.0` → [Updates: `==1.83.0`]
 - `grpcio-status ==1.81.0` → [Updates: `==1.83.0`]
 - `h11 ==0.16.0`
 - `h2 ==4.3.0` → [Updates: `==4.4.1`]
 - `hf-xet ==1.5.1` → [Updates: `==1.6.0`]
 - `hpack ==4.1.0` → [Updates: `==4.2.0`]
 - `httpcore ==1.0.9`
 - `httplib2 ==0.32.0`
 - `httptools ==0.8.0`
 - `httpx ==0.28.1`
 - `huggingface-hub ==1.18.0` → [Updates: `==1.27.0`]
 - `hyperframe ==6.1.0`
 - `idna ==3.18`
 - `itsdangerous ==2.2.0`
 - `jinja2 ==3.1.6`
 - `joblib ==1.5.3`
 - `kiwisolver ==1.5.0`
 - `langcodes ==3.5.1`
 - `language-data ==1.4.0`
 - `loguru ==0.7.3`
 - `lucide-fasthtml ==0.0.9`
 - `lxml ==6.1.1`
 - `marisa-trie ==1.4.1`
 - `markdown-it-py ==4.2.0`
 - `markupsafe ==3.0.3`
 - `matplotlib ==3.10.9` → [Updates: `==3.11.1`]
 - `mdurl ==0.1.2`
 - `mpmath ==1.4.1`
 - `mteb ==2.15.3` → [Updates: `==2.18.16`]
 - `multidict ==6.7.1`
 - `multiprocess ==0.70.19`
 - `murmurhash ==1.0.15`
 - `networkx ==3.6.1`
 - `numpy ==2.4.6` → [Updates: `==2.5.1`]
 - `oauthlib ==3.3.1`
 - `packaging ==26.2` → [Updates: `==26.3`]
 - `pandas ==3.0.3` → [Updates: `==3.0.5`]
 - `pdf2image ==1.17.0`
 - `peft ==0.19.1` → [Updates: `==0.20.0`]
 - `pillow ==12.3.0`
 - `pip ==26.1.2` → [Updates: `==26.2.1`]
 - `polars ==1.41.2` → [Updates: `==1.43.2`]
 - `preshed ==3.0.13`
 - `propcache ==0.5.2`
 - `proto-plus ==1.28.0` → [Updates: `==1.28.3`]
 - `protobuf ==7.35.0` → [Updates: `==7.35.1`]
 - `psutil ==7.2.2`
 - `pyarrow ==24.0.0` → [Updates: `==25.0.0`]
 - `pyasn1 ==0.6.4`
 - `pyasn1-modules ==0.4.2`
 - `pycparser ==3.0`
 - `pydantic ==2.13.4`
 - `pydantic-core ==2.47.0` → [Updates: `==2.48.0`]
 - `pygments ==2.20.0`
 - `pyparsing ==3.3.2`
 - `pypdf ==6.14.2` → [Updates: `==6.15.0`]
 - `python-dateutil ==2.9.0.post0`
 - `python-dotenv ==1.2.2`
 - `python-fasthtml ==0.14.2` → [Updates: `==0.14.11`]
 - `python-multipart ==0.0.32`
 - `pytrec-eval-terrier ==0.5.10`
 - `pytz ==2026.2` → [Updates: `==2026.3.post1`]
 - `pyvespa ==1.2.1` → [Updates: `==1.2.4`]
 - `pyyaml ==6.0.3`
 - `regex ==2026.5.9` → [Updates: `==2026.7.19`]
 - `requests ==2.34.2`
 - `requests-toolbelt ==1.0.0`
 - `rich ==15.0.0`
 - `rsa ==4.9.1`
 - `safetensors ==0.8.0`
 - `scikit-learn ==1.9.0`
 - `scipy ==1.17.1` → [Updates: `==1.18.0`]
 - `seaborn ==0.13.2`
 - `sentence-transformers ==5.5.1` → [Updates: `==5.7.0`]
 - `sentencepiece ==0.2.1` → [Updates: `==0.2.2`]
 - `setuptools ==83.0.0` → [Updates: `==84.0.0`]
 - `shad4fast ==1.3.1`
 - `shellingham ==1.5.4`
 - `six ==1.17.0`
 - `smart-open ==7.6.1` → [Updates: `==7.7.1`, `==8.0.1`]
 - `sniffio ==1.3.1`
 - `soupsieve ==2.8.4` → [Updates: `==2.9.2`]
 - `spacy ==3.8.14` → [Updates: `==3.8.15`]
 - `spacy-legacy ==3.0.12`
 - `spacy-loggers ==1.0.5`
 - `srsly ==2.5.3`
 - `starlette ==1.3.1` → [Updates: `==1.6.0`]
 - `sympy ==1.14.0`
 - `tenacity ==9.1.4`
 - `thinc ==9.1.1`
 - `threadpoolctl ==3.6.0`
 - `tokenizers ==0.23.1`
 - `torch ==2.13.0`
 - `tqdm ==4.68.2` → [Updates: `==4.70.0`]
 - `transformers ==5.12.0` → [Updates: `==5.14.1`]
 - `typer ==0.26.7` → [Updates: `==0.27.1`]
 - `typing-extensions ==4.15.0` → [Updates: `==4.16.0`]
 - `tzdata ==2026.2` → [Updates: `==2026.3`]
 - `uritemplate ==4.2.0`
 - `urllib3 ==2.7.0`
 - `uvicorn ==0.49.0` → [Updates: `==0.52.1`]
 - `uvloop ==0.22.1`
 - `vespacli ==8.703.17` → [Updates: `==8.733.3`]
 - `vidore-benchmark ==5.0.0`
 - `wasabi ==1.1.3`
 - `watchfiles ==1.2.0`
 - `weasel ==1.0.0`
 - `websockets ==16.0` → [Updates: `==16.1.1`, `==17.0.1`]
 - `wrapt ==2.2.1` → [Updates: `==2.3.0`]
 - `xxhash ==3.7.0` → [Updates: `==3.8.1`]
 - `yarl ==1.24.2` → [Updates: `==1.24.5`]

</details>

</blockquote>
</details>

<details><summary>poetry (3)</summary>
<blockquote>

<details><summary>examples/workshop-ecommerce/pyproject.toml (4)</summary>

 - `jupyter >=1.1.1`
 - `pandas >=2.3.3`
 - `pyvespa >=0.62.0`
 - `vespacli >=8.591.16`

</details>

<details><summary>rag-blueprint/eval/pyproject.toml (4)</summary>

 - `lightgbm >=4.6.0`
 - `pandas >=2.3.0`
 - `pyvespa >=0.57.0`
 - `scikit-learn >=1.7.0`

</details>

<details><summary>visual-retrieval-colpali/pyproject.toml (8)</summary>

 - `python-fasthtml ==0.14.2` → [Updates: `==0.14.11`]
 - `uvicorn ==0.49.0` → [Updates: `==0.52.1`]
 - `pyvespa >=0.50.0`
 - `vidore-benchmark >=5.0.0,<5.1.0`
 - `colpali-engine ==0.3.17`
 - `shad4fast >=1.2.1`
 - `transformers ==5.12.0` → [Updates: `==5.14.1`]
 - `h11 >=0.16.0`

</details>

</blockquote>
</details>

<details><summary>renovate-config (1)</summary>
<blockquote>

<details><summary>renovate.json</summary>


</details>

</blockquote>
</details>

<details><summary>terraform (3)</summary>
<blockquote>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/alerts/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

<details><summary>examples/operations/monitoring/vespa-grafana-terraform/modules/dashboards/main.tf (1)</summary>

 - `grafana >= 1.28.2`

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Navigation Menu

Uh oh!

Dependency Dashboard #1283

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Datasource	Package	Last Updated
bundler	jekyll	`2025-01-29`
github-actions	vespa-engine/setup-vespa-cli-action	`2024-08-12`
gomod	github.com/GoogleCloudPlatform/functions-framework-go	`2025-03-27`
pip_requirements	aiosignal	`2025-07-03`
pip_requirements	async-timeout	`2024-11-06`
pip_requirements	contourpy	`2025-07-26`
pip_requirements	cycler	`2023-10-07`
pip_requirements	gputil	`2018-12-18`
pip_requirements	h11	`2025-04-24`
pip_requirements	hf-transfer	`2025-01-07`
pip_requirements	httpcore	`2025-04-24`
pip_requirements	hyperframe	`2025-01-22`
pip_requirements	itsdangerous	`2024-04-16`
pip_requirements	jinja2	`2025-03-05`
pip_requirements	loguru	`2024-12-06`
pip_requirements	lucide-fasthtml	`2024-09-10`
pip_requirements	mdurl	`2022-08-14`
pip_requirements	oauthlib	`2025-06-19`
pip_requirements	pdf2image	`2024-01-07`
pip_requirements	pyasn1-modules	`2025-03-28`
pip_requirements	python-dateutil	`2024-03-01`
pip_requirements	requests-toolbelt	`2023-05-01`
pip_requirements	rsa	`2025-04-16`
pip_requirements	seaborn	`2024-01-25`
pip_requirements	shad4fast	`2024-11-09`
pip_requirements	shellingham	`2023-10-24`
pip_requirements	six	`2024-12-04`
pip_requirements	sniffio	`2024-02-25`
pip_requirements	`spacy-legacy`	`2024-01-25`
pip_requirements	spacy-loggers	`2023-09-11`
pip_requirements	sympy	`2025-04-27`
pip_requirements	threadpoolctl	`2025-03-13`
pip_requirements	uritemplate	`2025-06-02`
pip_requirements	vidore-benchmark	`2025-02-19`
pip_requirements	wasabi	`2024-05-31`
poetry	h11	`2025-04-24`
poetry	`jupyter`	`2024-08-30`
poetry	shad4fast	`2024-11-09`
poetry	vidore-benchmark	`2025-02-19`

Uh oh!

Dependency Dashboard #1283

Description

Abandoned Dependencies

Pending Approval

Open

Vulnerabilities

Detected Dependencies

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions