Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@mui/base

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update codecov/codecov-action action to v5.4.3
• chore(deps): update opensearchproject/opensearch docker tag to v2.19.2
• chore(deps): update redis docker tag to v7.4.3
• chore(deps): update yarn to v4.9.1
• fix(deps): update dependency ruff to v0.11.10
• chore(deps): update nginx docker tag to v1.28.0
• chore(deps): update node.js to v22.16.0
• fix(deps): update dependency cairosvg to v2.8.2
• fix(deps): update dependency litellm to v1.70.2
• fix(deps): update dependency onnxruntime to v1.22.0
• chore(deps): update dependency jest-extended to v5
• chore(deps): update dependency stylelint-config-standard-scss to v15
• chore(deps): update opensearchproject/opensearch docker tag to v3
• chore(deps): update peter-evans/create-or-update-comment action to v4
• chore(deps): update redis docker tag to v8
• fix(deps): update dependency cryptography to v45
• fix(deps): update dependency django-guardian to v3
• fix(deps): update dependency next-router-mock to v1
• fix(deps): update dependency posthog to v4
• fix(deps): update dependency redis to v6
• fix(deps): update dependency ulid-py to v1
• fix(deps): update material-ui monorepo to v7 (major) (@mui/material, @mui/material-nextjs, @mui/system)
• fix(deps): update nextjs monorepo to v15 (major) (@next/bundle-analyzer, @next/eslint-plugin-next, eslint-config-next)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• fix(deps): update dependency django-anymail to v13
• fix(deps): update dependency django-oauth-toolkit to v3

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update actions/setup-node digest to 49933ea
• chore(deps): update actions/setup-python digest to a26af69
• fix(deps): update python
• chore(deps): update dependency eslint to v9
• chore(deps): update dependency ubuntu to v24
• chore(deps): update postgres docker tag to v17
• fix(deps): update dependency tika to v3
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose-notebook.yml

docker-compose.apps.yml

• node 22.14

docker-compose.codespaces.yml

docker-compose.opensearch.base.yml

• opensearchproject/opensearch 2.19.1

docker-compose.opensearch.cluster.yml

docker-compose.opensearch.single-node.yml

docker-compose.services.yml

• postgres 12.22
• redis 7.4.2
• apache/tika 2.5.0

docker-compose.yml

dockerfile

Dockerfile

• python 3.12-slim

Dockerfile-nb

frontends/main/Dockerfile.web

• node 22-alpine

nginx/Dockerfile

• nginx 1.27.4

github-actions

.github/workflows/ci.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• snok/install-poetry v1@76e04a911780d5b312d89783f7b1cd627778900a
• actions/setup-python v5@8d9ed9ac5c53483de85588cdf95a591a75ab9f55
• codecov/codecov-action v5.4.0@0565863a31f2c772f9f0395002a31e3f06189574
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• SimenB/github-actions-cpu-cores v2@97ba232459a8e02ff6121db9362b09661c875ab8
• codecov/codecov-action v5.4.0@0565863a31f2c772f9f0395002a31e3f06189574
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• openapi-generators/openapitools-generator-action v1
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• openapi-generators/openapitools-generator-action v1
• postgres 12.22
• redis 7.4.2
• ubuntu 22.04
• ubuntu 22.04
• node ^22.0.0
• ubuntu 22.04
• ubuntu 22.04
• node ^22
• ubuntu 22.04
• node ^22.0.0
• ubuntu 22.04
• node ^22.0.0

.github/workflows/openapi-diff.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• peter-evans/find-comment v3@3eae4d37986fb5a8592848f6a574fdf654e61f9e
• peter-evans/create-or-update-comment v3@23ff15729ef2fc348714a3bb66d2f655ca9066f2
• ubuntu 22.04

.github/workflows/production.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• akhileshns/heroku-deploy e3eb99d45a8e2ec5dca08735e089607befa4bf28
• jcoene/fastly-purge-action master
• ubuntu 22.04
• ubuntu 22.04

.github/workflows/publish-pages.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-node v4@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
• actions/upload-pages-artifact v3@56afc609e74202658d3ffba0e8f6dda462b719fa
• actions/deploy-pages v4@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
• ubuntu 22.04
• node ^22.0.0
• ubuntu 22.04

.github/workflows/release-candidate.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• akhileshns/heroku-deploy e3eb99d45a8e2ec5dca08735e089607befa4bf28
• jcoene/fastly-purge-action master
• ubuntu 22.04
• ubuntu 22.04

npm

frontends/api/package.json

• @tanstack/react-query ^5.66.0
• axios ^1.6.3
• @faker-js/faker ^9.0.0
• @testing-library/react ^16.1.0
• enforce-unique ^1.3.0
• jest ^29.7.0
• jest-when ^3.6.0
• lodash ^4.17.21
• react ^19

frontends/main/package.json

• @ebay/nice-modal-react ^1.2.13
• @emotion/cache ^11.13.1
• @emotion/styled ^11.11.0
• @mitodl/course-search-utils 3.3.2
• @mitodl/smoot-design ^6.2.2
• @next/bundle-analyzer ^14.2.15
• @remixicon/react ^4.2.0
• @sentry/nextjs ^9.0.0
• @tanstack/react-query ^5.66
• classnames ^2.5.1
• formik ^2.4.6
• iso-639-1 ^3.1.4
• lodash ^4.17.21
• moment ^2.30.1
• next ^15.0.2
• next-nprogress-bar ^2.4.2
• posthog-js ^1.157.2
• react ^19.0.0
• react-dom ^19.0.0
• react-slick ^0.30.2
• slick-carousel ^1.8.1
• tiny-invariant ^1.3.3
• yup ^1.4.0
• @faker-js/faker ^9.0.0
• @testing-library/jest-dom ^6.4.8
• @testing-library/react ^16.1.0
• @testing-library/user-event ^14.5.2
• @types/jest ^29.5.12
• @types/lodash ^4.17.7
• @types/node ^22.0.0
• @types/react ^19
• @types/react-dom ^19
• @types/react-slick ^0.23.13
• @types/slick-carousel ^1
• eslint 8.57.1
• eslint-config-next ^14.2.7
• http-proxy-middleware ^3.0.0
• jest ^29.7.0
• jest-extended ^4.0.2
• jest-next-dynamic-ts ^0.1.1
• ts-jest ^29.2.4
• typescript ^5

frontends/ol-components/package.json

• @dnd-kit/core ^6.0.8
• @dnd-kit/sortable ^10.0.0
• @dnd-kit/utilities ^3.2.1
• @emotion/react ^11.11.1
• @emotion/styled ^11.11.0
• @mui/base 5.0.0-beta.70
• @mui/lab 6.0.0-dev.240424162023-9968b4889d
• @mui/material ^6.4.5
• @mui/material-nextjs ^6.4.3
• @mui/system ^6.4.3
• @remixicon/react ^4.2.0
• @testing-library/dom ^10.4.0
• @types/react-dom ^19
• @types/tinycolor2 ^1.4.6
• classnames ^2.5.1
• lodash ^4.17.21
• material-ui-popup-state ^5.1.0
• next ^15.0.2
• react ^19.0.0
• react-dom ^19.0.0
• react-select ^5.7.7
• react-share ^5.0.3
• react-slick ^0.30.2
• tiny-invariant ^1.3.1
• tinycolor2 ^1.6.0
• validator ^13.11.0
• @chromatic-com/storybook ^3.0.0
• @faker-js/faker ^9.0.0
• @storybook/addon-actions ^8.2.9
• @storybook/addon-essentials ^8.2.9
• @storybook/addon-interactions ^8.2.9
• @storybook/addon-links ^8.2.9
• @storybook/addon-mdx-gfm ^8.2.9
• @storybook/addon-onboarding ^8.2.9
• @storybook/addon-webpack5-compiler-swc ^3.0.0
• @storybook/blocks ^8.2.9
• @storybook/nextjs ^8.2.9
• @storybook/preview-api ^8.2.9
• @storybook/react ^8.2.9
• @storybook/test ^8.2.9
• @storybook/types ^8.2.9
• @testing-library/react ^16.1.0
• @testing-library/user-event ^14.5.2
• @types/react-slick ^0
• dotenv ^16.4.5
• lodash ^4.17.21
• prop-types ^15.8.1
• storybook ^8.2.9
• typescript ^5.5.4
• webpack ^5.94.0
• @mitodl/smoot-design *

frontends/ol-test-utilities/package.json

• @faker-js/faker ^9.0.0
• @testing-library/react ^16.1.0
• css-mediaquery ^0.1.2
• dom-accessibility-api ^0.7.0
• lodash ^4.17.21
• moment-timezone ^0.5.47
• next-router-mock ^0.9.13
• tiny-invariant ^1.3.1
• @types/lodash ^4.17.7
• @types/react ^19.0.6
• react ^19.0.0

frontends/ol-utilities/package.json

• @dnd-kit/core ^6.0.8
• @dnd-kit/sortable ^10.0.0
• @dnd-kit/utilities ^3.2.1
• @faker-js/faker ^9.0.0
• classnames ^2.3.2
• currency-symbol-map ^5.1.0
• decimal.js-light ^2.5.1
• html-entities ^2.4.0
• lodash ^4.17.21
• moment ^2.29.4
• qs ^6.11.0
• react-helmet-async ^2.0.3
• striptags ^3.2.0
• @testing-library/react ^16.1.0
• @testing-library/user-event ^14.5.2
• @types/validator ^13.7.6
• casual-browserify ^1.5.19-2
• css-mediaquery ^0.1.2
• tiny-invariant ^1.3.1
• next ^15
• react 19

frontends/package.json

• @jest/environment ^29.7.0
• @next/eslint-plugin-next ^14.2.7
• @swc/core ^1.4.11
• @swc/jest ^0.2.26
• @testing-library/jest-dom ^6.4.2
• @testing-library/react ^16.1.0
• @testing-library/user-event ^14.5.2
• @types/css-mediaquery ^0.1.1
• @types/jest ^29.5.2
• @types/jest-when ^3.5.2
• @types/react-infinite-scroller ^1.2.3
• @typescript-eslint/eslint-plugin ^8.0.0
• @typescript-eslint/typescript-estree ^8.0.0
• cross-fetch ^4.0.0
• eslint 8.57.1
• eslint-config-mitodl ^2.1.0
• eslint-config-prettier ^10.0.0
• eslint-import-resolver-typescript ^4.0.0
• eslint-plugin-import ^2.29.1
• eslint-plugin-jest ^28.6.0
• eslint-plugin-mdx ^3.0.0
• eslint-plugin-react ^7.34.3
• eslint-plugin-react-hooks ^5.0.0
• eslint-plugin-styled-components-a11y ^2.1.35
• eslint-plugin-testing-library ^7.0.0
• jest ^29.7.0
• jest-environment-jsdom ^29.5.0
• jest-extended ^4.0.2
• jest-fail-on-console ^3.3.1
• jest-watch-typeahead ^2.2.2
• jest-when ^3.6.0
• postcss-styled-syntax ^0.7.0
• prettier ^3.3.3
• prettier-plugin-django-alpine ^1.2.6
• stylelint ^16.0.0
• stylelint-config-standard-scss ^14.0.0
• ts-node ^10.9.2
• type-fest ^4.18.3
• typescript ^5.4.3

package.json

• syncpack ^13.0.0
• node ^22.0.0
• yarn ^4.1.1
• @types/react ^19.0.0
• @types/react-dom ^19.0.0
• yarn 4.9.0

pep621

pyproject.toml

• poetry_core >=1.0.0

poetry

pyproject.toml

• python ~3.12
• Django 4.2.21
• attrs ^25.0.0
• base36 ^0.1.1
• beautifulsoup4 ^4.8.2
• boto3 ^1.26.155
• cairosvg 2.7.1
• celery ^5.3.1
• celery-redbeat ^2.3.2
• cffi ^1.15.1
• cryptography ^44.0.0
• dateparser ^1.2.0
• deepmerge ^2.0
• dj-database-url ^2.0.0
• dj-static ^0.0.6
• django-anymail ^12.0
• django-bitfield ^2.2.0
• django-cache-memoize ^0.2.0
• django-cors-headers ^4.0.0
• django-filter ^2.4.0
• django-guardian ^2.4.0
• django-health-check 9cfe2eaec5a15219513a36210b34875c03c64fe4
• django-hijack ^3.4.1
• django-imagekit ^5.0.0
• django-ipware ^7.0.0
• django-json-widget ^2.0.0
• django-oauth-toolkit ^2.3.0
• django-redis ^5.2.0
• django-scim2 ^0.19.1
• django-server-status ^0.7.0
• django-storages ^1.13.2
• djangorestframework ^3.14.0
• drf-jwt ^1.19.2
• drf-nested-routers ^0.94.0
• drf-spectacular ^0.28.0
• feedparser ^6.0.10
• google-api-python-client ^2.89.0
• html2text ^2025.0.0
• html5lib ^1.1
• ipython ^9.0.0
• isodate ^0.7.2
• jedi ^0.19.0
• langchain ^0.3.11
• langchain-experimental ^0.3.4
• langchain-openai ^0.3.2
• litellm 1.66.1
• llama-index ^0.12.6
• llama-index-agent-openai ^0.4.1
• llama-index-llms-openai ^0.3.12
• lxml ^5.0.0
• markdown ^3.7
• markdown2 ^2.4.8
• mitol-django-scim ^2025.3.31
• named-enum ^1.4.0
• nested-lookup ^0.2.25
• nh3 ^0.2.14
• ocw-data-parser ^0.35.1
• onnxruntime 1.21.0
• openai ^1.55.3
• opensearch-dsl ^2.0.0
• opensearch-py ^2.0.0
• opentelemetry-api >=1.31.0
• opentelemetry-exporter-otlp >=1.31.0
• opentelemetry-instrumentation-celery >=0.52b0
• opentelemetry-instrumentation-django >=0.52b0
• opentelemetry-instrumentation-psycopg >=0.52b0
• opentelemetry-instrumentation-redis >=0.52b0
• opentelemetry-instrumentation-requests >=0.52b0
• opentelemetry-sdk >=1.31.0
• pluggy ^1.3.0
• posthog ^3.5.0
• psycopg ^3.2.4
• psycopg2 ^2.9.6
• pycountry ^24.6.1
• pygithub ^2.0.0
• pyparsing ^3.2.1
• pytest-lazy-fixtures ^1.1.1
• python-dateutil ^2.8.2
• python-rapidjson ^1.8
• pyyaml ^6.0.0
• qdrant-client ^1.12.0
• redis ^5.0.0
• requests ^2.31.0
• retry2 ^0.9.5
• ruff 0.11.5
• selenium ^4.30.0
• sentry-sdk ^2.25.1
• social-auth-app-django ^5.2.0
• social-auth-core ^4.4.2
• static3 ^0.7.0
• tika ^2.6.0
• tiktoken ^0.9.0
• tldextract ^5.0.0
• toolz ^1.0.0
• ulid-py ^0.2.0
• urllib3 ^2.0.0
• uwsgi ^2.0.29
• uwsgitop ^0.12
• wrapt ^1.14.1
• youtube-transcript-api ^1.0.0
• bpython ^0.25
• ddt ^1.6.0
• factory_boy ^3.3.0
• faker ^37.0.0
• ipdb ^0.13.13
• moto ^5.0.0
• nplusone ^1.0.0
• pdbpp ^0.11.6
• pytest ^8.0.0
• pytest-cov ^6.0.0
• pytest-django ^4.5.2
• pytest-env ^1.0.0
• pytest-freezegun ^0.4.2
• pytest-mock ^3.10.0
• responses ^0.25.0
• ruff ^0.11.0
• safety ^3.0.0
• semantic-version ^2.10.0
• freezegun ^1.4.0
• pytest-xdist ^3.6.1
• anys ^0.3.0
• locust ^2.31.2
• traceback-with-variables ^2.1.1

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository