Dependency Dashboard

[oep-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update github actions (actions/checkout, actions/setup-python, astral-sh/setup-uv, docker/setup-qemu-action, github/codeql-action, ossf/scorecard-action, pypa/cibuildwheel, renovatebot/github-action, softprops/action-gh-release, step-security/harden-runner)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency jupyterlab to v4.6.2 [security]
• fix(deps): update dependency certifi to ~=2026.7.22
• fix(deps): update dependency attrs to v26
• fix(deps): update dependency cryptography to v49
• fix(deps): update dependency opencv-python to v5
• fix(deps): update dependency openvino to v2026
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (12)

.github/workflows/build-docs.yaml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d
• actions/upload-pages-artifact v5@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/build-package-pypi.yaml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• nschloe/action-cached-lfs-checkout v1.2.5@385a8ecc719e50b8c71af6ab01a624b486b7c3bc
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v3@718ea10b132b3b2eba29c1007bb80653f286566b → [Updates: v3]

.github/workflows/build-package-test-pypi.yaml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• nschloe/action-cached-lfs-checkout v1.2.5@385a8ecc719e50b8c71af6ab01a624b486b7c3bc
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v3@718ea10b132b3b2eba29c1007bb80653f286566b → [Updates: v3]

.github/workflows/build-wheels.yaml (9)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• pypa/cibuildwheel v4.1.0@294735312765b09d24a2fbec22660ce817587d55 → [Updates: v4.1.1]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/codeql.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.3]
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.3]

.github/workflows/collect-sbom-library.yaml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

.github/workflows/dependency-review.yaml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• ubuntu 24.04

.github/workflows/pre-merge-tests.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1 → [Updates: v7.0.0]
• astral-sh/setup-uv v8.2.0@fac544c07dec837d0ccb6301d7b5580bf5edae39 → [Updates: v9.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/renovate-config-validator.yml (1)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

.github/workflows/renovate.yml (3)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• renovatebot/github-action v46.1.17@dd5302ec17783b2fc721b19ae7209b57b1587765 → [Updates: v46.2.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a → [Updates: v2.4.4]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.3]

.github/workflows/security-scan.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]

pep621 (1)

pyproject.toml (37)

• attrs ~=25.3 → [Updates: ~=26.1]
• certifi ~=2026.5.20 → [Updates: ~=2026.7.22]
• cryptography ~=48.0 → [Updates: ~=49.0]
• defusedxml ~=0.7
• imageio-ffmpeg ~=0.6
• joblib ~=1.5
• omegaconf ~=2.3
• opencv-python ~=4.11 → [Updates: ~=5.0]
• openvino-model-api ~=0.3
• openvino ~=2025.2 → [Updates: ~=2026.2]
• orjson ~=3.10
• ovmsclient ~=2023.1
• pathvalidate ~=3.3
• pillow ~=12.0
• python-dotenv ~=1.1
• requests ~=2.32
• semver ~=3.0
• simplejson ~=4.1
• tqdm ~=4.67
• urllib3 ~=2.5
• pydantic ==2.13.4
• pre-commit ~=4.2
• pytest ~=9.0
• pytest-cov ~=6.0 → [Updates: ~=7.1]
• pytest-env ~=1.1
• pytest-html ~=4.1
• pytest-mock ~=3.10
• vcrpy ~=8.2
• datumaro ~=1.11
• myst-parser ~=2.0 → [Updates: ~=5.1]
• sphinx ~=7.2 → [Updates: ~=9.1]
• sphinx-rtd-theme ~=1.3 → [Updates: ~=3.1]
• ipywidgets ~=8.1
• jupyter-core >=5.8.1
• jupyterlab ~=4.4 → [Updates: ~=4.4]
• mistune ~=3.2
• pandas ~=2.3 → [Updates: ~=3.0]