Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): Lock file maintenance

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update patch dependencies (@biomejs/biome, actions/checkout, boto3, botocore, fastapi, filelock, jose, litellm, ruff, ty)
• fix(deps): update minor dependencies (onnxruntime, onnxruntime-gpu, platformdirs)

Detected Dependencies

bun (2)

package.json (1)

• node >=24.18.0

packages/core-ts/package.json (11)

• @modelcontextprotocol/sdk ^1.29.0
• better-sqlite3 ^13.0.1
• env-paths ^4.0.0
• jose ^6.2.3 → [Updates: ^6.2.4]
• @biomejs/biome ^2.5.4 → [Updates: ^2.5.5]
• @types/better-sqlite3 ^7.6.13
• @types/node ^26.1.1
• @vitest/coverage-v8 ^4.1.10
• typescript ^7.0.2
• vitest ^4.1.10
• node >=24.18.0

github-actions (4)

.github/workflows/cd.yml (16)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• n24q02m/better-semantic-release v1.2.1@95d056deb7b7edcf6b4be69536aec70624355333
• n24q02m/better-semantic-release v1.2.1@95d056deb7b7edcf6b4be69536aec70624355333
• python-semantic-release/publish-action v10.6.1@5a5718ce47b892ef699f2972dae122297771d641
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• node 24

.github/workflows/ci.yml (29)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920
• dawidd6/action-send-mail v18@94de994a9f6fffee200243214e17002e2920bb59
• node 24
• semgrep/semgrep sha256:98c2572fced2474539fd27cab3207ebd8e95e4e7aab4c3b381fdc5e2641d9941

.github/workflows/e2e-t0.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• oven-sh/setup-bun v2.2.0@0c5077e51419868618aeaa5fe8019c62421857d6

.github/workflows/opencode.yml (6)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a

mise (1)

.mise.toml

pep621 (4)

packages/core-py/pyproject.toml (20)

• python ==3.13.*
• fastmcp >=3.4.4
• httpx >=0.28.1
• httpcore >=1.0.9
• cryptography >=49.0.0
• authlib >=1.7.2
• starlette >=1.3.1
• pydantic >=2.12.5,<3
• loguru >=0.7.3
• platformdirs >=4.10.0 → [Updates: >=4.11.0]
• tomli-w >=1.2.0
• filelock >=3.30.3 → [Updates: >=3.32.0]
• pytest >=9.1.1
• pytest-asyncio >=1.4.0
• pytest-cov >=7.1.0
• pytest-timeout >=2.4.0
• ruff >=0.15.22 → [Updates: >=0.16.0]
• telethon >=1.44.0
• ty >=0.0.61 → [Updates: >=0.0.63]
• litellm >=1.92.0 → [Updates: >=1.93.0]

packages/embedding-daemon/pyproject.toml (13)

• python ==3.13.*
• fastapi >=0.139.2 → [Updates: >=0.140.0]
• uvicorn >=0.51.0
• onnxruntime >=1.27.0 → [Updates: >=1.28.0]
• numpy >=2.5.1
• httpx >=0.28.1
• pydantic >=2.12.5,<3
• httpx >=0.28.1
• pytest >=9.1.1
• pytest-cov >=7.1.0
• ruff >=0.15.22 → [Updates: >=0.16.0]
• ty >=0.0.61 → [Updates: >=0.0.63]
• onnxruntime-gpu >=1.27.0 → [Updates: >=1.28.0]

scripts/audit/pyproject.toml (2)

• python ==3.13.*
• psutil >=7.2.2

scripts/e2e/pyproject.toml (11)

• python ==3.13.*
• httpx >=0.28.1
• boto3 >=1.43.51 → [Updates: >=1.43.56]
• botocore >=1.43.51 → [Updates: >=1.43.56]
• pyyaml >=6.0.3
• jinja2 >=3.1.6
• mcp >=1.28.1
• starlette >=1.3.1
• pytest >=9.1.1
• pytest-asyncio >=1.4.0
• respx >=0.23.1

---

• Check this box to trigger a request for Renovate to run again on this repository