Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (1)

Datasource	Package	Last Updated
pip_requirements	zstandard	2025-09-14

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): pin dependencies (docker.io/almalinux, vespaengine/vespa)
• chore(deps): pin dependencies (actions/checkout, actions/setup-java, docker.io/vespaengine/vespa-build-almalinux-8)
• chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
• chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
• chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.2.0
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
• chore(deps): update docker.io/almalinux docker tag to v10
• chore(deps): update github actions (major) (actions/checkout, actions/setup-java, java-jdk)
• chore(deps): lock file maintenance
• 🔐 Create all pending approval PRs at once 🔐

Vulnerabilities

Important

0/9 CVEs have Renovate fixes.

poetry

tests/performance/ecommerce_hybrid_search/dataprep/pyproject.toml

torch

• PYSEC-2025-189
• PYSEC-2025-190
• PYSEC-2025-192
• PYSEC-2025-193
• PYSEC-2025-194
• PYSEC-2025-195
• PYSEC-2025-196
• PYSEC-2025-197
• PYSEC-2025-210

Detected Dependencies

dockerfile (2)

docker/Dockerfile.alma8 (1)

• docker.io/almalinux 8 → [Updates: 10, 8]

docker/Dockerfile.alma9 (1)

• vespaengine/vespa unknown version → [Updates: undefined]

github-actions (2)

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v7, v4]
• docker.io/vespaengine/vespa-build-almalinux-8 latest → [Updates: latest]

.github/workflows/verify-test-apps.yml (3)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-java v4 → [Updates: v6, v4]
• java-jdk 17 → [Updates: 25]

maven (23)

tests/config/config_class_plugin/app/pom.xml

tests/config/config_proxy/simplebundle/pom.xml

tests/config/integrationtests/config_test/pom.xml

tests/config/supermodel/supermodelbundle/pom.xml

tests/config/urldownload/bundle/pom.xml

tests/container/assemble_container_plugin/project1/pom.xml

tests/container/assemble_container_plugin/project2/pom.xml

tests/container/jdischandler_logger/logging-bundle/pom.xml

tests/container/onnx/onnx_bundle/pom.xml

tests/container/zk_reconfig/zookeeper_test/pom.xml

tests/docproc/generate_field_openai/bundle/pom.xml

tests/docproc/generate_field/bundle/pom.xml

tests/performance/configserver/defbundle/pom.xml

tests/performance/container_tensor_eval/tensor-eval/pom.xml

tests/performance/container/query_profile_compilation/project/pom.xml

tests/performance/programmatic_feed_client/java-feed-client/pom.xml

tests/pom.xml (10)

• org.apache.maven.plugins:maven-compiler-plugin 3.15.0 → [Updates: 3.16.0]
• org.ow2.asm:asm 9.10.1
• org.codehaus.mojo:exec-maven-plugin 3.6.3 → [Updates: 3.6.4]
• org.apache.maven.plugins:maven-assembly-plugin 3.8.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6 → [Updates: 3.6.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.apache.maven.plugins:maven-dependency-plugin 3.11.0
• org.apache.maven.plugins:maven-install-plugin 3.1.4 → [Updates: 3.2.0]
• org.apache.maven.plugins:maven-jar-plugin 3.5.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-resources-plugin 3.5.0

tests/search/concretedocs/concretedocs/pom.xml

tests/search/concretedocs/concretedocs2/pom.xml

tests/search/documentapi/project/pom.xml

tests/search/event-loggging/project/pom.xml

tests/search/struct_and_map_types/inherited_struct/concretedocs/pom.xml

tests/search/wasfound/project/pom.xml

pip_requirements (2)

tests/performance/ecommerce_hybrid_search/common/requirements.txt (9)

• docker >=7.2.0
• elasticsearch >=9.4.1
• pyvespa >=1.2.4
• vespacli >=8.730.36
• tqdm >=4.70.0
• requests >=2.34.2
• zstandard >=0.25.0
• urllib3 >=2.7.0
• cryptography >=50.0.0

tests/performance/ecommerce_hybrid_search/requirements.txt

poetry (1)

tests/performance/ecommerce_hybrid_search/dataprep/pyproject.toml (3)

• torch >=2.10.0
• pillow >=12.1.1
• orjson >=3.11.6

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository