Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Found renovate config warnings

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (5)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@testing-library/dom	2025-07-27
npm	class-variance-authority	2024-11-26
npm	clsx	2024-04-23
npm	markdown-it-container	2023-12-05
npm	ulidx	2024-08-25

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): pin dependencies (apache/iceberg-rest-fixture, curlimages/curl, docker/dockerfile, ghcr.io/marimo-team/marimohub, minio/mc, minio/minio, node, python)
• chore(deps): pin dependencies (@kubernetes/client-node, @playwright/test, @tanstack/react-query-devtools, @types/markdown-it, @types/markdown-it-container, @types/nodemailer, @vitejs/plugin-react, markdown-it, markdown-it-container, openapi-typescript, vitepress, vue)
• chore(deps): pin dependencies (@types/react, @types/react-dom, react, react-dom)
• chore(deps): update all non-major dependencies (@ai-sdk/openai-compatible, @cloudflare/sandbox, @cloudflare/workers-types, @hono/node-server, @hono/zod-openapi, @oxlint/plugins, @pierre/diffs, @smithy/node-http-handler, @types/node, actions/cache, ai, apache/iceberg-rest-fixture, better-all, curlimages/curl, ghcr.io/astral-sh/uv, hyparquet, ip-address@<=10.3.0, jose, postcss@<=8.5.22, python, shell-quote@<=1.8.4, simple-icons, smol-toml, tar, vite, vite-plus, vitepress-plugin-llms)
• chore(deps): update dependency @tanstack/react-form to v1.33.3
• chore(deps): update dependency @vitest/coverage-v8 to v4.1.10
• chore(deps): update dependency vue to ^3.5.38
• chore(deps): update tailwindcss monorepo to v4.3.3 (@tailwindcss/vite, tailwindcss)
• chore(deps): update tanstack-query monorepo to v5.101.4 (@tanstack/react-query, @tanstack/react-query-devtools)
• chore(deps): update aws-sdk-js-v3 monorepo to v3.1101.0 (@aws-sdk/client-s3, @aws-sdk/client-secrets-manager)
• chore(deps): update dependency @playwright/test to ^1.61.0
• chore(deps): update dependency lucide-react to v1.28.0
• chore(deps): update dependency oxlint to v1.76.0
• chore(deps): update opentelemetry-js monorepo (@opentelemetry/context-async-hooks, @opentelemetry/core, @opentelemetry/exporter-metrics-otlp-http, @opentelemetry/exporter-prometheus, @opentelemetry/exporter-trace-otlp-http, @opentelemetry/resources, @opentelemetry/sdk-metrics, @opentelemetry/sdk-trace-base, @opentelemetry/sdk-trace-node)
• chore(deps): update react-spectrum monorepo (react-aria-components, tailwindcss-react-aria-components)
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/create-github-app-token action to v3
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update astral-sh/setup-uv action to v10
• chore(deps): update azure/setup-helm action to v5
• chore(deps): update dependency @cloudflare/workers-types to v5
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency @types/markdown-it-container to v4
• chore(deps): update dependency js-yaml@<4.0.0 to v5
• chore(deps): update dependency js-yaml@>=4.0.0 <4.3.1 to v5
• chore(deps): update dependency jsdom to v30
• chore(deps): update dependency linkify-it@<=5.0.1 to v6
• chore(deps): update dependency markdown-it to v15
• chore(deps): update dependency nanoid to v6
• chore(deps): update dependency protobufjs@>=7.5.0 <=7.6.4 to v8
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency undici@>=7.0.0 <7.29.0 to v8
• chore(deps): update dependency vitepress>vite to v8
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update pnpm to v11
• chore(deps): update pnpm/action-setup action to v6
• chore(deps): update slackapi/slack-github-action action to v4
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency @codemirror/view to v6.43.8
• chore(deps): update dependency @testing-library/user-event to v14.6.4
• chore(deps): update dependency @kubernetes/client-node to v2

Detected Dependencies

docker-compose (1)

scripts/dev-services/compose.yaml (4)

• minio/minio RELEASE.2025-04-22T22-12-26Z → [Updates: RELEASE.2025-04-22T22-12-26Z]
• minio/mc RELEASE.2025-04-16T18-13-26Z → [Updates: RELEASE.2025-04-16T18-13-26Z]
• apache/iceberg-rest-fixture 1.10.0 → [Updates: 1.10.1, 1.10.0]
• curlimages/curl 8.10.1 → [Updates: 8.21.0, 8.10.1]

dockerfile (2)

apps/server/Dockerfile (3)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89 → [Updates: 1]
• node 24-slim@sha256:6f7b03f7c2c8e2e784dcf9295400527b9b1270fd37b7e9a7285cf83b6951452d → [Updates: 24-slim]
• node 24-slim@sha256:6f7b03f7c2c8e2e784dcf9295400527b9b1270fd37b7e9a7285cf83b6951452d → [Updates: 24-slim]

images/marimo-sandbox/Dockerfile (3)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89 → [Updates: 1]
• python 3.13-slim@sha256:6771159cd4fa5d9bba1258caf0b82e6b73458c694d178ad97c5e925c2d0e1a91 → [Updates: 3.14-slim, 3.13-slim]
• ghcr.io/astral-sh/uv 0.12.1@sha256:cf4eedcaa81655197f625739489effcbe71b61ceb1506f332c3facae5deceded → [Updates: 0.12.5]

github-actions (13)

.github/workflows/autofix.yml (3)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb
• autofix-ci/action v1.3.4@c5b2d67aa2274e7b5a18224e8171550871fc7e4a

.github/workflows/catalog-conformance.yml (2)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb

.github/workflows/chart.yml (2)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5]

.github/workflows/ci.yml (6)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/cla.yml (2)

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v3]
• iainmcgin/cla-github-action v3.2.0@0d27e5a16278d4adb6b0c4b92f08ad27b0a21dc8

.github/workflows/e2e.yml (8)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• pnpm/action-setup v4@b906affcce14559ad1aafd4ab0e942779e9f58b1 → [Updates: v6]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9 → [Updates: v10.0.1]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]

.github/workflows/object-browser-conformance.yml (4)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb
• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb

.github/workflows/publish-sandbox-image.yml (4)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/workflows/release-tag.yml (2)

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547 → [Updates: v3]
• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]

.github/workflows/release.yml (10)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/metadata-action v5@c299e40c65443455700f0fdfc63efafe5b349051 → [Updates: v6]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• azure/setup-helm v4@1a275c3b69536ee54be43f2070a358922e12c8d4 → [Updates: v5]
• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• slackapi/slack-github-action v3.0.5@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc → [Updates: v4.0.0]
• slackapi/slack-github-action v3.0.5@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc → [Updates: v4.0.0]

.github/workflows/sandbox-image.yml (1)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]

.github/workflows/schemas.yml (1)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]

.github/workflows/storage-conformance.yml (2)

• actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7]
• voidzero-dev/setup-vp v1@250f29ce396baf5e8f24498e17c0dfdebabc26eb

helm-values (1)

charts/marimohub/values.yaml (1)

• ghcr.io/marimo-team/marimohub sha256:65768bd13e4d2de57df93db6c507335cf6193eeafea5f9f1d142bd703431ea23 → [Updates: ``]

nodenv (1)

.node-version (1)

• node 24

npm (38)

apps/docs/package.json (6)

• @types/markdown-it ^14.1.2 → [Updates: 14.1.2]
• @types/markdown-it-container ^2.0.10 → [Updates: 2.0.11, ^4.0.0]
• markdown-it ^14.2.0 → [Updates: 14.2.0, ^15.0.0]
• markdown-it-container ^4.0.0 → [Updates: 4.0.0]
• vitepress ^1.6.3 → [Updates: 1.6.4]
• vue ^3.5.13 → [Updates: 3.5.38, ^3.5.38]

apps/e2e/package.json (1)

• @playwright/test ^1.50.0 → [Updates: 1.61.0, ^1.61.0]

apps/server/package.json

package.json (15)

• node >=24.0.0
• pnpm 10.34.5 → [Updates: 11.19.0]
• brace-expansion@>=5.0.0 <5.0.9 5.0.9
• hono 4.12.34 → [Updates: 4.13.2]
• ip-address@<=10.3.0 10.3.1 → [Updates: 10.4.0]
• js-yaml@<4.0.0 3.15.1 → [Updates: 5.2.3]
• js-yaml@>=4.0.0 <4.3.1 4.3.1 → [Updates: 5.2.3]
• linkify-it@<=5.0.1 5.0.2 → [Updates: 6.1.0]
• nanoid 3.3.18 → [Updates: 6.0.0]
• postcss@<=8.5.22 8.5.23 → [Updates: 8.5.25]
• protobufjs@>=7.5.0 <=7.6.4 7.6.5 → [Updates: 8.7.1]
• shell-quote@<=1.8.4 1.9.0 → [Updates: 1.10.0]
• tar 7.5.21 → [Updates: 7.5.22]
• undici@>=7.0.0 <7.29.0 ^7.29.0 → [Updates: ^8.0.0]
• vitepress>vite ^6.4.3 → [Updates: ^8.0.0]

packages/api/package.json (1)

• fflate ^0.8.2

packages/auth-cloudflare-access/package.json

packages/auth-dev/package.json

packages/auth-oidc/package.json

packages/client/package.json (1)

• openapi-typescript ^7.4.0 → [Updates: 7.13.0]

packages/compute-cloudflare/package.json

packages/compute-commons/package.json

packages/compute-container/package.json

packages/compute-coreweave/package.json

packages/compute-e2b/package.json

packages/compute-kubernetes/package.json (1)

• @kubernetes/client-node ^1.0.0 → [Updates: 1.4.0, ^2.0.0]

packages/compute-local/package.json

packages/compute-modal/package.json

packages/config/package.json

packages/core/package.json

packages/credentials-aws/package.json

packages/credentials-coreweave/package.json

packages/duckdb-wasm-runtime/package.json

packages/notify-slack/package.json

packages/notify-smtp/package.json (2)

• nodemailer ^9.0.3 → [Updates: ^9.0.3]
• @types/nodemailer ^8.0.1 → [Updates: 8.0.1]

packages/notify-webhook/package.json

packages/object-browser-azure/package.json

packages/object-browser-commons/package.json

packages/object-browser-gcs/package.json

packages/object-browser-s3/package.json

packages/secrets-aws/package.json

packages/storage-azure/package.json

packages/storage-fs/package.json

packages/storage-gcs/package.json

packages/storage-r2/package.json

packages/storage-s3/package.json

packages/ts-config/package.json

packages/web/package.json (10)

• @pierre/diffs ^1.2.11 → [Updates: ^1.2.11]
• @tanstack/react-query ^5.90.21 → [Updates: ^5.90.21]
• react ^19.1.1 → [Updates: ^19.1.1]
• react-aria-components ^1.16.0 → [Updates: ^1.16.0]
• react-dom ^19.1.1 → [Updates: ^19.1.1]
• react-router-dom ^7.18.2
• @tanstack/react-query-devtools ^5.91.3 → [Updates: 5.101.0, ^5.101.0]
• @types/react ^19.1.10 → [Updates: 19.2.17, ^19.2.17]
• @types/react-dom ^19.1.7 → [Updates: 19.2.3, ^19.2.3]
• @vitejs/plugin-react ^6.0.4 → [Updates: 6.0.4]

pnpm-workspace.yaml (76)

• @ai-sdk/openai-compatible ^3.0.17 → [Updates: ^3.0.17]
• @aws-sdk/client-s3 ^3.1066.0 → [Updates: ^3.1066.0]
• @aws-sdk/client-secrets-manager ^3.1066.0 → [Updates: ^3.1066.0]
• @azure/core-auth ^1.11.0
• @azure/identity ^4.13.1
• @azure/storage-blob ^12.33.0
• @cloudflare/sandbox ^0.12.1 → [Updates: ^0.12.1]
• @cloudflare/workers-types ^4.20260610.1 → [Updates: ^4.20260610.1, ^5.0.0]
• @codemirror/autocomplete ^6.20.3
• @codemirror/commands ^6.10.4
• @codemirror/lang-sql ^6.10.0
• @codemirror/language ^6.12.4
• @codemirror/lint ^6.9.7
• @codemirror/search ^6.7.1
• @codemirror/state ^6.7.1
• @codemirror/view ^6.43.7 → [Updates: ^6.43.7]
• @duckdb/duckdb-wasm 1.32.0
• @hono/node-server ^2.0.10 → [Updates: ^2.0.10]
• @hono/otel ^1.1.2
• @hono/zod-openapi ^1.2.2 → [Updates: ^1.2.2]
• @marimo-team/codemirror-sql ^0.3.0
• @opentelemetry/api ^1.9.0
• @opentelemetry/context-async-hooks ^2.9.0 → [Updates: ^2.9.0]
• @opentelemetry/core ^2.9.0 → [Updates: ^2.9.0]
• @opentelemetry/exporter-metrics-otlp-http ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/exporter-prometheus ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/exporter-trace-otlp-http ^0.220.0 → [Updates: ^0.221.0]
• @opentelemetry/resources ^2.9.0 → [Updates: ^2.9.0]
• @opentelemetry/sdk-metrics ^2.9.0 → [Updates: ^2.9.0]
• @opentelemetry/sdk-trace-base ^2.9.0 → [Updates: ^2.9.0]
• @opentelemetry/sdk-trace-node ^2.9.0 → [Updates: ^2.9.0]
• @oxlint/plugins 1.67.0 → [Updates: 1.76.0]
• @smithy/node-http-handler ^4.9.1 → [Updates: ^4.9.1]
• @tailwindcss/vite ^4.3.0 → [Updates: ^4.3.0]
• @tanstack/react-form ^1.33.0 → [Updates: ^1.33.0]
• @tanstack/react-store ^0.11.0 → [Updates: ^0.11.0]
• @testing-library/dom ^10.4.1
• @testing-library/jest-dom ^6.9.1 → [Updates: ^7.0.0]
• @testing-library/react ^16.3.2
• @testing-library/user-event ^14.6.1 → [Updates: ^14.6.1]
• @types/node ^25.9.3 → [Updates: ^25.9.3]
• @vitest/coverage-v8 4.1.8 → [Updates: 4.1.10]
• ai ^7.0.42 → [Updates: ^7.0.42]
• better-all ^0.0.7 → [Updates: ^0.0.8]
• class-variance-authority ^0.7.1
• clsx ^2.1.1
• codemirror ^6.0.2
• csv-parse ^7.0.1 → [Updates: ^7.0.1]
• google-auth-library ^11.0.0 → [Updates: ^11.0.0]
• hono ^4.12.34
• hyparquet ^1.26.2 → [Updates: ^1.26.2]
• jose ^6.1.3 → [Updates: ^6.1.3]
• jsdom ^29.1.1 → [Updates: ^30.0.0]
• lucide-react ^1.17.0 → [Updates: ^1.17.0]
• modal ^0.9.0
• oauth4webapi ^3.8.6 → [Updates: ^3.8.6]
• ofetch ^1.5.1
• openapi-fetch ^0.17.0
• oxlint 1.67.0 → [Updates: 1.76.0]
• simple-icons ^16.27.0 → [Updates: ^16.27.0]
• smol-toml ^1.7.0 → [Updates: ^1.7.0]
• sonner ^2.0.7 → [Updates: ^2.0.7]
• sql-formatter ^15.8.2
• tailwind-merge ^3.6.0
• tailwindcss ^4.3.0 → [Updates: ^4.3.0]
• tailwindcss-react-aria-components ^2.1.1 → [Updates: ^2.1.1]
• tsx ^4.23.1 → [Updates: ^4.23.1]
• tw-animate-css ^1.4.0
• typescript ^6.0.3 → [Updates: ^7.0.0]
• ulidx ^2.4.1
• vite 0.1.24 → [Updates: 0.2.7]
• vite-plus 0.1.24 → [Updates: 0.2.7]
• vitepress-plugin-llms ^1.13.2 → [Updates: ^1.13.2]
• vitest 0.1.24
• yaml ^2.9.0
• zod ^4.3.6

regex (1)

images/marimo-sandbox/Dockerfile (1)

• marimo 0.23.16

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository