Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-class-properties
npm	@babel/plugin-proposal-object-rest-spread
npm	@babel/polyfill
npm	codecov
npm	eslint-plugin-flow-vars
npm	popper.js

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update dependency ramda to ^0.32.0
• fix(deps): update dependency bootstrap to v5
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): pin dependencies (actions/setup-node, astral-sh/setup-uv)
• fix(deps): update dependency google-api-python-client to v2.191.0
• fix(deps): update dependency django to v6
• fix(deps): update dependency django-anymail to v14
• fix(deps): update dependency eslint to v10
• fix(deps): update dependency jsdom to v28
• fix(deps): update dependency newrelic to v11
• fix(deps): update dependency nyc to v18
• fix(deps): update dependency redis to v7
• fix(deps): update dependency stylelint-config-standard-scss to v17
• fix(deps): update dependency webpack-bundle-analyzer to v5
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency cheerio to v1.2.0
• fix(deps): update dependency flow-bin to ^0.303.0
• chore(deps): update dependency hypothesis to v6
• fix(deps): update dependency formik to v2
• fix(deps): update dependency url-join to v5
• chore(deps): lock file maintenance

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency social-auth-app-django to v5.6.0 [security]
• fix(deps): update dependency pillow to v12 [security]
• fix(deps): update dependency wagtail to v6 [security]
• fix(deps): update dependency pygsheets to v2.0.6
• chore(deps): update postgres docker tag to v18.3
• chore(deps): update python docker tag to v3.14
• fix(deps): update dependency beautifulsoup4 to v4.14.3
• fix(deps): update dependency mitol-django-common to v2025.12.23.2
• fix(deps): update dependency sass to ~1.97.0
• chore(deps): update dependency normalize-url to v9
• chore(deps): update dependency pytest to v9
• chore(deps): update node.js to v24
• fix(deps): update dependency django-filter to v25
• fix(deps): update dependency hubspot-api-client to v12
• fix(deps): update dependency jquery to v4
• fix(deps): update dependency mitol-django-hubspot-api to v2025
• fix(deps): update dependency query-string to v9
• fix(deps): update dependency react-markdown to v10
• fix(deps): update dependency reactstrap to v9
• fix(deps): update react monorepo (major) (eslint-plugin-react-hooks, react, react-dom, react-test-renderer)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency hypothesis to v4.57.1
• chore(deps): update dependency ubuntu to v24
• fix(deps): update dependency django-oauth-toolkit to v3
• fix(deps): update dependency django-webpack-loader to v3
• fix(deps): update dependency eslint-plugin-mocha to v11
• fix(deps): update dependency flow-typed to v4
• fix(deps): update dependency google-auth to v2
• fix(deps): update dependency mini-css-extract-plugin to v2
• fix(deps): update dependency postcss-loader to v8
• fix(deps): update dependency react-ga to v3
• fix(deps): update dependency react-google-recaptcha to v3
• fix(deps): update dependency react-redux to v9
• fix(deps): update dependency redux to v5
• fix(deps): update dependency redux-actions to v3
• fix(deps): update dependency redux-query to v3
• fix(deps): update dependency sass-loader to v16
• fix(deps): update dependency style-loader to v4
• fix(deps): update dependency styled-components to v6
• fix(deps): update dependency webpack-bundle-tracker to v3
• fix(deps): update dependency webpack-dev-middleware to v7
• fix(deps): update material-components-web monorepo to v14 (major) (@material/layout-grid, @material/top-app-bar)
• fix(deps): update react-router monorepo to v7 (major) (react-router, react-router-dom)

Detected Dependencies

docker-compose (3)

docker-compose-notebook.yml

docker-compose.override.yml

docker-compose.yml (4)

• postgres 18.2 → [Updates: 18.3]
• redis 8.6.1
• nginx 1.29.5
• node 22.22.0 → [Updates: 24.14.0]

dockerfile (2)

Dockerfile (3)

• python 3.13-slim → [Updates: 3.14-slim]
• node 22-slim → [Updates: 24-slim]
• python 3.13-slim → [Updates: 3.14-slim]

Dockerfile-nb

github-actions (4)

.github/workflows/ci.yml (12)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/setup-uv v7 → [Updates: v7]
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v2-beta → [Updates: v2-beta]
• actions/cache v5@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• codecov/codecov-action v5@671740ac38dd9b0130fbe1cec585b89eea48d3de
• postgres 18.2 → [Updates: 18.3]
• redis 8.6.1
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]
• node 22.22.0 → [Updates: 24.14.0]

.github/workflows/new-issues.yml (1)

• mitodl/ol-github-workflows main

.github/workflows/production.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• akhileshns/heroku-deploy e3eb99d45a8e2ec5dca08735e089607befa4bf28
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

.github/workflows/release-candiate.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• akhileshns/heroku-deploy e3eb99d45a8e2ec5dca08735e089607befa4bf28
• ubuntu 22.04 → [Updates: 24.04]
• ubuntu 22.04 → [Updates: 24.04]

npm (1)

package.json (122)

• @babel/cli ^7.4.3
• @babel/core ^7.3.4
• @babel/eslint-parser ^7.26.8
• @babel/plugin-proposal-class-properties ^7.3.4
• @babel/plugin-proposal-object-rest-spread ^7.3.4
• @babel/plugin-syntax-dynamic-import ^7.2.0
• @babel/plugin-transform-flow-strip-types ^7.3.4
• @babel/plugin-transform-react-constant-elements ^7.2.0
• @babel/plugin-transform-react-inline-elements ^7.2.0
• @babel/plugin-transform-react-jsx ^7.3.0
• @babel/polyfill ^7.2.5
• @babel/preset-env ^7.5.5
• @babel/preset-flow ^7.25.9
• @babel/preset-react ^7.0.0
• @babel/register ^7.0.0
• @fancyapps/fancybox ^3.5.7
• @material/layout-grid ^0.41.0 → [Updates: ^14.0.0]
• @material/top-app-bar ^1.1.1 → [Updates: ^14.0.0]
• @sentry/browser ^10.0.0
• @trust/webcrypto ^0.9.2
• @typescript-eslint/eslint-plugin ^8.26.0
• @typescript-eslint/parser ^8.26.0
• autoprefixer ^10.0.0
• babel-loader ^10.0.0
• bootstrap ^4.4.1 → [Updates: ^5.0.0]
• casual-browserify ^1.5.19-2
• chai ^6.0.0
• chai-as-promised ^8.0.0
• codecov ^3.7.1
• css-loader ^7.0.0
• decimal.js-light ^2.5.0
• enzyme ^3.9.0
• enzyme-adapter-react-16 ^1.12.1
• eslint 8.57.1 → [Updates: 10.0.2]
• eslint-config-google ^0.14.0
• eslint-config-mitodl ^2.1.0
• eslint-config-prettier ^10.0.0
• eslint-plugin-babel ^5.3.0
• eslint-plugin-flow-vars ^0.5.0
• eslint-plugin-flowtype ^8.0.3
• eslint-plugin-mocha ^6.3.0 → [Updates: ^11.0.0]
• eslint-plugin-react ^7.19.0
• expose-loader ^5.0.0
• express ^5.0.0
• fetch-mock ^12.0.0
• flow ^0.2.3
• flow-bin ^0.95.1 → [Updates: ^0.303.0]
• flow-typed ^3.2.1 → [Updates: ^4.0.0]
• formik ^1.5.1 → [Updates: ^2.0.0]
• history ^5.0.0
• hls.js ^1.0.0
• isomorphic-fetch ^3.0.0
• jquery ^3.5.1 → [Updates: ^4.0.0]
• jsdom ^26.0.0 → [Updates: ^28.0.0]
• lodash ^4.17.21
• mini-css-extract-plugin ^0.12.0 → [Updates: ^2.0.0]
• minimist ^1.2.6
• mocha ^11.0.0
• named-urls ^2.0.0
• nyc ^17.0.0 → [Updates: ^18.0.0]
• object.entries ^1.0.4
• popper.js ^1.16.0
• postcss-loader ^6.1.1 → [Updates: ^8.0.0]
• posthog-js ^1.171.0
• prettier ^3.0.3
• prettier-plugin-django-alpine ^1.1.1
• prop-types ^15.5.10
• query-string ^6.4.0 → [Updates: ^9.0.0]
• raf ^3.4.1
• ramda ^0.30.0 → [Updates: ^0.32.0]
• react ^16.8.4 → [Updates: ^19.0.0]
• react-addons-shallow-compare ^15.6.0
• react-day-picker ^9.0.0
• react-device-detect ^2.0.0
• react-document-title ^2.0.3
• react-dom ^16.8.4 → [Updates: ^19.0.0]
• react-ga ^2.2.0 → [Updates: ^3.0.0]
• react-google-recaptcha ^1.0.5 → [Updates: ^3.0.0]
• react-hot-loader ^4.8.0
• react-markdown ^5.0.3 → [Updates: ^10.0.0]
• react-picky ^5.3.2
• react-redux ^5.0.5 → [Updates: ^9.0.0]
• react-router ^4.1.1 → [Updates: ^7.0.0]
• react-router-dom ^4.1.1 → [Updates: ^7.0.0]
• react-select ^5.0.0
• react-test-renderer ^16.8.4 → [Updates: ^19.0.0]
• reactstrap ^8.0.0 → [Updates: ^9.0.0]
• redux ^3.7.2 → [Updates: ^5.0.0]
• redux-actions ^2.2.1 → [Updates: ^3.0.0]
• redux-asserts ^0.0.12
• redux-logger ^3.0.6
• redux-query ^2.3.1 → [Updates: ^3.0.0]
• reselect ^5.0.0
• sass ~1.64.2 → [Updates: ~1.97.0]
• sass-lint ^1.13.1
• sass-loader ^12.1.0 → [Updates: ^16.0.0]
• shelljs ^0.10.0
• sinon ^21.0.0
• slick-carousel 1.8.1
• style-loader ^3.2.1 → [Updates: ^4.0.0]
• styled-components ^4.2.0 → [Updates: ^6.0.0]
• stylelint ^17.0.0
• stylelint-config-standard-scss ^15.0.0 → [Updates: ^17.0.0]
• unzipper ^0.12.0
• url-join ^4.0.0 → [Updates: ^5.0.0]
• url-loader ^4.1.1
• waait ^1.0.4
• webpack ^5.76.0
• webpack-bundle-analyzer ^4.6.1 → [Updates: ^5.0.0]
• webpack-bundle-tracker 1.8.1 → [Updates: 3.2.3]
• webpack-cli ^6.0.0
• webpack-dev-middleware ^5.0.0 → [Updates: ^7.0.0]
• webpack-hot-middleware ^2.25.0
• yup ^1.0.0
• eslint-plugin-react-hooks ^5.2.0 → [Updates: ^7.0.0]
• node 22.22.0 → [Updates: 24.14.0]
• cheerio 1.0.0-rc.12 → [Updates: 1.2.0]
• js-yaml ^4.0.0
• kind-of 6.0.3
• minimist 1.2.8
• merge ^2.1.1
• normalize-url ^8.0.0 → [Updates: ^9.0.0]

pep621 (1)

pyproject.toml (59)

• python >=3.13,<4
• Pillow ==10.4.0 → [Updates: ==12.1.1]
• PyNaCl ==1.6.2
• beautifulsoup4 ==4.8.2 → [Updates: ==4.14.3]
• boto3 ==1.42.59
• celery ==5.6.2
• celery-redbeat ==2.3.3
• dj-database-url ==3.1.2
• django ==4.2.28 → [Updates: ==6.0.2]
• django-anymail ==13.1 → [Updates: ==14.0]
• django-filter >=23.4,<24 → [Updates: >=25.2,<26]
• django-hijack ==3.7.6
• django-ipware ==7.0.1
• django-oauth-toolkit ==1.7.1 → [Updates: ==3.2.0]
• django-redis >=6.0.0,<7
• django-robots ==6.1
• django-silk >=5.0.3,<6
• django-storages ==1.14.6
• django-user-agents ==0.4.0
• django-webpack-loader ==1.8.1 → [Updates: ==3.2.3]
• djangorestframework ==3.16.1
• edx-api-client ==1.14.0
• google-api-python-client ==2.190.0 → [Updates: ==2.191.0]
• google-auth ==1.35.0 → [Updates: ==2.48.0]
• hubspot-api-client >=6.1.0,<7 → [Updates: >=12,<13]
• ipython >=9.0.0,<10
• mitol-django-authentication ==2025.3.17
• mitol-django-common ==2025.8.19 → [Updates: ==2025.12.23.2]
• mitol-django-digital-credentials ==2023.12.19
• mitol-django-hubspot-api ==2023.12.19 → [Updates: ==2025.12.18]
• mitol-django-mail ==2025.6.24
• mitol-django-oauth-toolkit-extensions ==2025.3.17
• mitol-django-olposthog >=2025.0.0,<2026
• newrelic >=10.0.0,<11 → [Updates: >=11.5,<12]
• pdftotext >=3.0.0,<4
• psycopg2 ==2.9.11
• pycountry ==26.2.16
• pygsheets ==2.0.2 → [Updates: ==2.0.6]
• redis ==4.6.0 → [Updates: ==7.2.1]
• requests >=2.31.0,<3
• sentry-sdk >=2.0.0,<3
• social-auth-app-django >=5.4.0,<6 → [Updates: >=5.4.0,<6]
• ulid-py >=1.1.0,<2
• user-agents ==2.2.0
• user-util ==2.0.0
• uwsgi ==2.0.31
• wagtail ==5.2.8 → [Updates: ==6.3.6]
• wagtail-metadata ==5.0.0
• xmltodict >=1.0.0,<2
• zeep ==4.3.2
• factory-boy ==3.3.3
• faker ==40.5.1
• flaky ==3.8.1
• freezegun ==1.5.5
• hypothesis ==4.24.6 → [Updates: ==4.57.1, ==6.151.9]
• nplusone >=0.8.1
• pytest >=8.0.0,<9 → [Updates: >=9.0.2,<10]
• pytest-cov >=2.6.1
• uv_build >=0.10.0,<0.11.0

pyenv (1)

.python-version (1)

• python 3.13 → [Updates: 3.14]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository