Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	react-tsparticles

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update praxis-policy-core digest to 753d3c7
• chore(deps): update rust crate tokio-util to v0.7.19
• chore(deps): update github/codeql-action action to v4.38.0
• chore(deps): update python non-major (mypy, pre-commit, ruff)
• fix(deps): update npm non-major (@types/node, @types/react, @types/react-dom, autoprefixer, google-auth-library, lucide-react, mongodb, next, postcss, react, react-dom, resend)
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-python action to v7
• chore(deps): update actions/upload-artifact action to v7
• chore(deps): update dependency @types/node to v24
• chore(deps): update dependency mypy to v2
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency typescript to v7
• fix(deps): update dependency google-auth-library to v11
• fix(deps): update dependency lucide-react to v1
• fix(deps): update dependency motion to v13
• fix(deps): update dependency next to v16
• fix(deps): update dependency tsparticles to v4
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up pypi package ai-identity: no-result.

Files affected: sdk/langchain/pyproject.toml

---

Detected Dependencies

cargo (1)

integrations/cpex-ocsf-audit/Cargo.toml (11)

• praxis-policy-core 5b76fa6f6cd64ff54d7237c2fe3166ba397d6999 → [Updates: ``]
• async-trait 0.1
• base64 0.22
• chrono 0.4
• p256 0.14
• serde 1
• serde_json 1
• sha2 0.11
• tracing 0.1
• tokio 1
• tokio-util 0.7 → [Updates: 0.7]

github-actions (6)

.github/workflows/ci.yml (4)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• python 3.11

.github/workflows/codeql.yml (3)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

.github/workflows/evidence-anchor-mirror.yml (1)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]

.github/workflows/publish-langchain-sdk.yml (4)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065 → [Updates: v7.0.0]
• pypa/gh-action-pypi-publish v1.14.2@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
• python 3.11

.github/workflows/rust.yml (1)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]

.github/workflows/scorecard.yml (4)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7.0.1]
• github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938 → [Updates: v4.38.0]

npm (2)

landing-page/package.json (19)

• @vercel/analytics ^2.0.1
• @vercel/speed-insights ^2.0.0
• motion ^12.4.0 → [Updates: ^13.0.0]
• google-auth-library ^10.6.2 → [Updates: ^10.6.2, ^11.0.0]
• lucide-react ^0.487.0 → [Updates: ^0.577.0, ^1.0.0]
• mongodb ^7.2.0 → [Updates: ^7.2.0]
• next ^15.3.0 → [Updates: ^15.3.0, ^16.0.0]
• react ^19.2.4 → [Updates: ^19.2.4]
• react-dom ^19.2.4 → [Updates: ^19.2.4]
• react-tsparticles ^2.2.4
• resend ^6.12.3 → [Updates: ^6.12.3]
• tsparticles ^2.2.4 → [Updates: ^4.0.0]
• @types/node ^22.0.0 → [Updates: ^22.0.0, ^24.0.0]
• @types/react ^19.2.14 → [Updates: ^19.2.14]
• @types/react-dom ^19.2.3 → [Updates: ^19.2.3]
• autoprefixer ^10.4.0 → [Updates: ^10.4.0]
• postcss ^8.4.0 → [Updates: ^8.4.0]
• tailwindcss ^3.4.0 → [Updates: ^4.0.0]
• typescript ^5.5.0 → [Updates: ^7.0.0]

sdk/typescript/package.json (3)

• tsup ^8.0.0
• typescript ^5.4.0 → [Updates: ^7.0.0]
• node >=18

pep621 (1)

pyproject.toml (1)

• python >=3.11

pip_requirements (1)

requirements-dev.txt (3)

• ruff ==0.15.6 → [Updates: ==0.16.7]
• pre-commit ==4.5.1 → [Updates: ==4.6.2]
• mypy ==1.19.1 → [Updates: ==1.20.2, ==2.3.1]

poetry (2)

sdk/langchain/pyproject.toml (10)

• langchain >=0.3
• langchain-openai >=0.2
• ai-identity >=0.1.0
• httpx >=0.25
• crewai >=0.28
• pytest >=9.0.3
• pytest-asyncio >=0.21
• pytest-mock >=3.0
• ruff >=0.1
• mypy >=1.0

sdk/python/pyproject.toml (2)

• httpx >=0.25
• pydantic >=2.0

---

• Check this box to trigger a request for Renovate to run again on this repository