Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (4)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@google-cloud/local-auth	2024-01-08
pip_requirements	Flask-Session	2024-03-26
pre-commit	PyCQA/flake8	2025-06-20

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update all non-major dependencies (a2a-sdk, langchain-core, langchain-google-genai, mcp)
• chore(deps): update ci-configs (alessandrojcm/commitlint-pre-commit-hook, astral-sh/ruff-pre-commit, pre-commit/mirrors-mypy)
• chore(deps): update dependency googleapis to v173
• chore(deps): update Node.js to v24
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency mcp to v2

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package indykite/ops-common: no-result.

Files affected: .pre-commit-config.yaml

---

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency @modelcontextprotocol/sdk to v1.24.0 [SECURITY]
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v43

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

npm

a2a/iag-mcp-demo/drive_mcp/vendor/package.json

@modelcontextprotocol/sdk

• GHSA-w48q-cv73-mx4w (fixed in >= 1.24.0)

Detected Dependencies

docker-compose (2)

a2a/iag-demo/docker-compose.yaml (4)

• chatbot latest
• orchestrator-agent latest
• retriever-agent latest
• weather-agent latest

a2a/iag-mcp-demo/docker-compose.yaml (6)

• chatbot latest
• orchestrator-agent latest
• retriever-agent latest
• analyst-agent latest
• weather-agent latest
• drive-mcp latest

dockerfile (10)

a2a/iag-demo/chatbot/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-demo/orchestrator_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-demo/retriever_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-demo/weather_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-mcp-demo/analyst_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-mcp-demo/chatbot/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-mcp-demo/drive_mcp/Dockerfile (1)

• node 22-slim@sha256:6c74791e557ce11fc957704f6d4fe134a7bc8d6f5ca4403205b2966bd488f6b3 → [Updates: 24-slim]

a2a/iag-mcp-demo/orchestrator_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-mcp-demo/retriever_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

a2a/iag-mcp-demo/weather_agent/Dockerfile (1)

• python 3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6

github-actions (1)

.github/workflows/pre-commit-cache.yaml (2)

• indykite/.github master → [Updates: master]
• indykite/.github master → [Updates: master]

html (108)

banking/static/pages/components/buttons.html (1)

• moment.js 2.30.1

banking/static/pages/components/forms.html (1)

• moment.js 2.30.1

banking/static/pages/components/modals.html (1)

• moment.js 2.30.1

banking/static/pages/components/notifications.html (1)

• moment.js 2.30.1

banking/static/pages/components/typography.html (1)

• moment.js 2.30.1

banking/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

banking/static/pages/examples/404.html (1)

• moment.js 2.30.1

banking/static/pages/examples/500.html (1)

• moment.js 2.30.1

banking/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

banking/static/pages/examples/lock.html (1)

• moment.js 2.30.1

banking/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

banking/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

banking/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

banking/static/pages/settings.html (1)

• moment.js 2.30.1

banking/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

banking/static/pages/transactions.html (1)

• moment.js 2.30.1

banking/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

banking/templates/includes/scripts.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/components/buttons.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/components/forms.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/components/modals.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/components/notifications.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/components/typography.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/404.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/500.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/lock.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/settings.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/transactions.html (1)

• moment.js 2.30.1

canbank-iag/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

canbank-iag/templates/includes/scripts.html (1)

• moment.js 2.30.1

canbank/static/pages/components/buttons.html (1)

• moment.js 2.30.1

canbank/static/pages/components/forms.html (1)

• moment.js 2.30.1

canbank/static/pages/components/modals.html (1)

• moment.js 2.30.1

canbank/static/pages/components/notifications.html (1)

• moment.js 2.30.1

canbank/static/pages/components/typography.html (1)

• moment.js 2.30.1

canbank/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/404.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/500.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/lock.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

canbank/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

canbank/static/pages/settings.html (1)

• moment.js 2.30.1

canbank/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

canbank/static/pages/transactions.html (1)

• moment.js 2.30.1

canbank/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

canbank/templates/includes/scripts.html (1)

• moment.js 2.30.1

capture/static/pages/components/buttons.html (1)

• moment.js 2.30.1

capture/static/pages/components/forms.html (1)

• moment.js 2.30.1

capture/static/pages/components/modals.html (1)

• moment.js 2.30.1

capture/static/pages/components/notifications.html (1)

• moment.js 2.30.1

capture/static/pages/components/typography.html (1)

• moment.js 2.30.1

capture/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

capture/static/pages/examples/404.html (1)

• moment.js 2.30.1

capture/static/pages/examples/500.html (1)

• moment.js 2.30.1

capture/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

capture/static/pages/examples/lock.html (1)

• moment.js 2.30.1

capture/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

capture/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

capture/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

capture/static/pages/settings.html (1)

• moment.js 2.30.1

capture/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

capture/static/pages/transactions.html (1)

• moment.js 2.30.1

capture/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

capture/templates/includes/scripts.html (1)

• moment.js 2.30.1

get-started/static/pages/components/buttons.html (1)

• moment.js 2.30.1

get-started/static/pages/components/forms.html (1)

• moment.js 2.30.1

get-started/static/pages/components/modals.html (1)

• moment.js 2.30.1

get-started/static/pages/components/notifications.html (1)

• moment.js 2.30.1

get-started/static/pages/components/typography.html (1)

• moment.js 2.30.1

get-started/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/404.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/500.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/lock.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

get-started/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

get-started/static/pages/settings.html (1)

• moment.js 2.30.1

get-started/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

get-started/static/pages/transactions.html (1)

• moment.js 2.30.1

get-started/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

get-started/templates/includes/scripts.html (1)

• moment.js 2.30.1

music/static/pages/components/buttons.html (1)

• moment.js 2.30.1

music/static/pages/components/forms.html (1)

• moment.js 2.30.1

music/static/pages/components/modals.html (1)

• moment.js 2.30.1

music/static/pages/components/notifications.html (1)

• moment.js 2.30.1

music/static/pages/components/typography.html (1)

• moment.js 2.30.1

music/static/pages/dashboard/dashboard.html (1)

• moment.js 2.30.1

music/static/pages/examples/404.html (1)

• moment.js 2.30.1

music/static/pages/examples/500.html (1)

• moment.js 2.30.1

music/static/pages/examples/forgot-password.html (1)

• moment.js 2.30.1

music/static/pages/examples/lock.html (1)

• moment.js 2.30.1

music/static/pages/examples/reset-password.html (1)

• moment.js 2.30.1

music/static/pages/examples/sign-in.html (1)

• moment.js 2.30.1

music/static/pages/examples/sign-up.html (1)

• moment.js 2.30.1

music/static/pages/settings.html (1)

• moment.js 2.30.1

music/static/pages/tables/bootstrap-tables.html (1)

• moment.js 2.30.1

music/static/pages/transactions.html (1)

• moment.js 2.30.1

music/static/pages/upgrade-to-pro.html (1)

• moment.js 2.30.1

music/templates/includes/scripts.html (1)

• moment.js 2.30.1

npm (1)

a2a/iag-mcp-demo/drive_mcp/vendor/package.json (3)

• @google-cloud/local-auth ^3.0.1
• @modelcontextprotocol/sdk 1.0.1 → [Updates: 1.24.0]
• googleapis ^144.0.0 → [Updates: ^173.0.0]

pip_requirements (9)

a2a/iag-demo/chatbot/requirements.txt (7)

• a2a-sdk >=1.0.0a0
• flask >=3.0.0
• flask-cors >=4.0.0
• Flask-Session >=0.5.0
• httpx >=0.27.0
• packaging >=21.0
• python-dotenv >=1.0.0

a2a/iag-demo/orchestrator_agent/requirements.txt (10)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• ddgs >=8.0.0
• httpx >=0.27.0
• langchain-community >=0.4.0
• langchain-core >=1.2.5
• langchain-google-genai >=2.0.0
• langchain-ollama >=1.0.0
• python-dotenv >=1.0.0
• PyYAML >=6.0
• uvicorn >=0.35.0

a2a/iag-demo/retriever_agent/requirements.txt (10)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• httpx >=0.27.0
• langchain-core >=1.2.5
• langchain-google-genai >=2.0.0
• langchain-ollama >=1.0.0
• mcp >=1.0.0
• pydantic >=2.7.4
• python-dotenv >=1.0.0
• PyYAML >=6.0
• uvicorn >=0.35.0

a2a/iag-demo/weather_agent/requirements.txt (5)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• httpx >=0.27.0
• mcp >=1.0.0
• python-dotenv >=1.0.0
• uvicorn >=0.35.0

a2a/iag-mcp-demo/analyst_agent/requirements.txt (10)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• httpx >=0.27.0
• langchain-core ==1.4.9 → [Updates: ==1.5.2]
• langchain-google-genai ==4.2.7 → [Updates: ==4.3.2]
• langchain-ollama >=1.0.0
• mcp ==1.28.1 → [Updates: ==1.29.0, ==2.0.0]
• pydantic >=2.7.4
• python-dotenv >=1.0.0
• PyYAML >=6.0
• uvicorn >=0.35.0

a2a/iag-mcp-demo/chatbot/requirements.txt (7)

• a2a-sdk >=1.0.0a0
• flask >=3.0.0
• flask-cors >=4.0.0
• Flask-Session >=0.5.0
• httpx >=0.27.0
• packaging >=21.0
• python-dotenv >=1.0.0

a2a/iag-mcp-demo/orchestrator_agent/requirements.txt (10)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• ddgs >=8.0.0
• httpx >=0.27.0
• langchain-community >=0.4.0
• langchain-core >=1.2.5
• langchain-google-genai >=2.0.0
• langchain-ollama >=1.0.0
• python-dotenv >=1.0.0
• PyYAML >=6.0
• uvicorn >=0.35.0

a2a/iag-mcp-demo/retriever_agent/requirements.txt (10)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• httpx >=0.27.0
• langchain-core ==1.4.9 → [Updates: ==1.5.2]
• langchain-google-genai ==4.2.7 → [Updates: ==4.3.2]
• langchain-ollama >=1.0.0
• mcp ==1.28.1 → [Updates: ==1.29.0, ==2.0.0]
• pydantic >=2.7.4
• python-dotenv >=1.0.0
• PyYAML >=6.0
• uvicorn >=0.35.0

a2a/iag-mcp-demo/weather_agent/requirements.txt (5)

• a2a-sdk ==1.1.0 → [Updates: ==1.1.2]
• httpx >=0.27.0
• mcp ==1.28.1 → [Updates: ==1.29.0, ==2.0.0]
• python-dotenv >=1.0.0
• uvicorn >=0.35.0

pipenv (7)

banking/Pipfile

canbank-iag/Pipfile

canbank/Pipfile

capture/Pipfile

get-started/Pipfile

music/Pipfile

Pipfile

pre-commit (1)

.pre-commit-config.yaml (13)

• indykite/ops-common ea309d10f775a930d20f3fccb58fb93ecdd99fef
• renovatebot/pre-commit-hooks 2a27c9fda39c7c05bc7488a10920c7700979c263 → [Updates: 43.263.6]
• alessandrojcm/commitlint-pre-commit-hook v9.25.0@1d7031e6d0bbfce76e5a625b0cec24fb22e517a0 → [Updates: v9.26.0]
• pre-commit/pre-commit-hooks v6.0.0@3e8a8703264a2f4a69428a0aa4dcb512790b2c8c
• abravalheri/validate-pyproject v0.25@4b2e70d08cb2ccd26d1fba73588de41c7a5d50b7
• astral-sh/ruff-pre-commit v0.15.18@77039ccbba72c8aede339c5f8ae29b42aced0a2e → [Updates: v0.16.0]
• PyCQA/bandit 1.9.4@92ae8b82fb422a639f0ed8d99e96cea769594e08
• PyCQA/isort 9.0.0a3@dac090ce4d9ee313d086e2e89ab1acb8c2664fa1
• PyCQA/flake8 7.3.0@c48217e1fc006c2dddd14df54e83b67da15de5cd
• PyCQA/pylint v4.0.6@8a396357098337ba8be714fffdf2d00947a9778c
• psf/black-pre-commit-mirror 26.5.1@4160603246a6b365d4a2af661c6d71b0a0f50478
• pre-commit/mirrors-mypy v2.1.0@d2823d321df3af8f878f7ee3414dc94d037145b9 → [Updates: v2.3.0]
• gitleaks/gitleaks v8.30.1@83d9cd684c87d95d656c1458ef04895a7f1cbd8e

renovate-config (1)

.github/renovate.json5

---

@indykite/ops, here's your overview of Renovate-managed dependencies