Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-class-properties
npm	@babel/plugin-proposal-object-rest-spread
npm	babel-eslint
npm	babel-preset-latest
npm	codecov
npm	eslint-plugin-flow-vars
npm	react-load-script

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (47)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	@babel/plugin-syntax-dynamic-import	2020-01-13
npm	@contently/videojs-annotation-comments	2020-01-30
npm	@material/toolbar	2019-06-12
npm	@silvermine/videojs-quality-selector	2023-11-15
npm	babel-plugin-jsx	2015-07-20
npm	enzyme	2019-12-20
npm	enzyme-adapter-react-15	2022-11-04
npm	eslint-config-google	2019-09-02
npm	eslint-config-mitodl	2024-07-11
npm	eslint-plugin-babel	2020-06-30
npm	eslint-plugin-react	2025-04-03
npm	isomorphic-fetch	2020-09-23
npm	jsdom-global	2017-05-08
npm	moment	2023-12-27
npm	object.entries	2025-03-15
npm	prop-types	2022-01-05
npm	react-document-title	2017-04-12
npm	react-dropbox-chooser	2017-10-19
npm	react-ga	2022-06-16
npm	react-transition-group	2022-08-01
npm	redux	2023-12-23
npm	redux-actions	2024-07-21
npm	redux-asserts	2019-08-22
npm	redux-hammock	2021-05-21
npm	redux-logger	2019-03-29
npm	redux-thunk	2023-12-04
npm	rmwc	2024-10-24
npm	sass-lint	2019-04-26
npm	style-loader	2024-04-08
npm	url-loader	2020-10-09
npm	victory	2025-01-14
npm	videojs-contrib-quality-levels	2024-03-06
npm	videojs-hls-quality-selector	2024-03-13
npm	videojs-hotkeys	2024-10-12
npm	videojs-youtube	2023-04-26
npm	webpack-hot-middleware	2024-02-01
pep621	ddt	2024-02-26
pep621	dj-static	2014-07-11
pep621	django-encrypted-model-fields	2022-02-24
pep621	factory-boy	2025-02-03
pep621	html5lib	2020-06-22
pep621	ipdb	2023-03-09
pep621	nplusone	2018-05-21
pep621	pytest-pep8	2014-04-27
pep621	python-dateutil	2024-03-01
pep621	requests-mock	2024-03-29
pep621	semantic-version	2022-05-26

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency acorn to v8.18.0
• Update dependency flow-bin to v0.328.0
• Update dependency mini-css-extract-plugin to v2.10.2
• Update dependency mocha to v11.8.0
• Update dependency sinon to v21.1.2
• Update dependency uv_build to >=0.12.1,<0.13.0
• Update dependency video.js to v8.24.0
• Update dependency webpack to v5.109.2
• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update astral-sh/setup-uv action to v9
• Update babel monorepo to v8 (@babel/core, @babel/plugin-transform-flow-strip-types, @babel/plugin-transform-react-constant-elements, @babel/plugin-transform-react-inline-elements, @babel/preset-env, @babel/preset-react, @babel/register)
• Update codecov/codecov-action action to v7
• Update dependency babel-plugin-istanbul to v8
• Update dependency django-filter to v26
• Update dependency django-health-check to v4
• Update dependency django-redis to v7
• Update dependency eslint to v10
• Update dependency eslint-config-mitodl to v2
• Update dependency eslint-plugin-mocha to v12
• Update dependency faker to v40
• Update dependency jquery to v4
• Update dependency jsdom to v30
• Update dependency nyc to v18
• Update dependency prettier-eslint-cli to v9
• Update dependency pycountry to v26
• Update dependency pytz to v2026
• Update dependency redis
• Update dependency sass-loader to v17
• Update dependency sinon to v22
• Update dependency smart-open to v8
• Update dependency structlog to v26
• Update dependency victory to v37
• Update dependency webpack-cli to v7
• Update dependency webpack-dev-middleware to v8
• Update material-components-web monorepo (major) (@material/base, @material/button, @material/checkbox, @material/dialog, @material/drawer, @material/layout-grid, @material/list, @material/menu, @material/radio, @material/textfield, @material/toolbar, @material/typography, material-components-web)
• Update react monorepo (major) (eslint-plugin-react-hooks, react, react-dom, react-test-renderer)
• Update react-router monorepo (major) (react-router, react-router-dom)
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update docker/dockerfile:1 Docker digest to ecfaec9
• Update mitodl/ol-python-base:3.13 Docker digest to 87868d9
• Update nginx:1.31.3 Docker digest to 8541484
• Update postgres:18.4 Docker digest to a02db8c
• Update mitodl/ol-python-base Docker tag to v3.14
• Update postgres Docker tag to v18.6
• Update quay.io/keycloak/keycloak Docker tag to v26.7.1
• Update dependency setuptools to v84

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency social-auth-app-django to v5.6.0 [SECURITY]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency cryptography to v50 [SECURITY]
• Update dependency django to v5 [SECURITY]
• Replace dependency babel-eslint with @babel/eslint-parser ^7.11.0
• Update dependency postcss to v8.5.26
• Update dependency @sentry/browser to v10.70.0
• Update dependency cheerio to v1.2.0
• Update dependency jsdom to v27.4.0
• Update material-components-web monorepo (@material/base, @material/button, @material/checkbox, @material/dialog, @material/drawer, @material/layout-grid, @material/list, @material/menu, @material/radio, @material/textfield, @material/toolbar, @material/typography, material-components-web)
• Update Node.js
• Update dependency react-redux to v9
• Update dependency react-transition-group to v4
• Update dependency rmwc to v14
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update Node.js to 40ad9f3

Detected Dependencies

docker-compose (2)

docker-compose-notebook.yml

docker-compose.yml (6)

• postgres 18.4@sha256:3a82e1f56c8f0f5616a11103ac3d47e632c3938698946a7ad26da0df1334744a → [Updates: 18.6, 18.4]
• redis 8.6.3@sha256:4d25e2fe601f7ffaeb4437cb6ced3518bc36edf34ebe98863c80836943d94529 → [Updates: 8.8.0]
• nginx 1.31.3@sha256:5a88c9c45479443d7be2eadc894b4ed0a9801bae03d97a5760ae13b5c2005942 → [Updates: 1.31.3]
• odl_video_python unknown version
• odl_video_python unknown version
• quay.io/keycloak/keycloak 26.4.7@sha256:9409c59bdfb65dbffa20b11e6f18b8abb9281d480c7ca402f51ed3d5977e6007 → [Updates: 26.7.1]

dockerfile (3)

Dockerfile (3)

• docker/dockerfile 1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89 → [Updates: 1]
• node 24.16.0@sha256:9c1d881a5b3354362cd134d15b6eee789313833caa720c3cb6ea8862925d6eb8 → [Updates: 24.18.1, 24.16.0]
• mitodl/ol-python-base 3.13@sha256:bed30417e5474b2902fd7a274d91e706314ea041f88121ae9afad831fc6e4bc9 → [Updates: 3.14, 3.13]

Dockerfile-nb (1)

• odl_video_python unknown version

Dockerfile-node (1)

• node 24.16.0@sha256:9c1d881a5b3354362cd134d15b6eee789313833caa720c3cb6ea8862925d6eb8 → [Updates: 24.18.1, 24.16.0]

github-actions (2)

.github/workflows/actions-static-analysis.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• zizmorcore/zizmor-action v0.6.2@3dc1ecc9bcb9e94e9b2c709687979e1298497054

.github/workflows/ci.yml (10)

• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7]
• actions/setup-node v6@249970729cb0ef3589644e2896645e5dc5ba9c38 → [Updates: v7]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• postgres 18.4@sha256:3a82e1f56c8f0f5616a11103ac3d47e632c3938698946a7ad26da0df1334744a → [Updates: 18.6, 18.4]
• redis 8.6.3@sha256:4d25e2fe601f7ffaeb4437cb6ced3518bc36edf34ebe98863c80836943d94529 → [Updates: 8.8.0]
• node 24.16.0 → [Updates: 24.19.0]

npm (1)

package.json (105)

• @babel/core ^7.28.0 → [Updates: ^8.0.0]
• @babel/plugin-proposal-class-properties ^7.18.6
• @babel/plugin-proposal-object-rest-spread ^7.20.7
• @babel/plugin-syntax-dynamic-import ^7.8.3
• @babel/plugin-transform-flow-strip-types ^7.27.1 → [Updates: ^8.0.0]
• @babel/plugin-transform-react-constant-elements ^7.27.1 → [Updates: ^8.0.0]
• @babel/plugin-transform-react-inline-elements ^7.27.1 → [Updates: ^8.0.0]
• @babel/preset-env ^7.28.0 → [Updates: ^8.0.0]
• @babel/preset-react ^7.27.1 → [Updates: ^8.0.0]
• @babel/register ^7.27.1 → [Updates: ^8.0.0]
• @contently/videojs-annotation-comments ^2.0.1
• @material/base ^0.29.0 → [Updates: ^0.41.0, ^14.0.0]
• @material/button ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/checkbox ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/dialog ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/drawer ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/layout-grid ^0.24.0 → [Updates: ^0.41.0, ^14.0.0]
• @material/list ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/menu ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/radio ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/textfield ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• @material/toolbar ^0.33.0 → [Updates: ^0.44.0, ^2.0.0]
• @material/typography ^0.28.0 → [Updates: ^0.44.0, ^14.0.0]
• @sentry/browser 10.68.0 → [Updates: 10.70.0]
• @silvermine/videojs-quality-selector ^1.3.1
• autoprefixer ^10.0.0
• babel-eslint ^10.0.0 → [Updates: ^7.11.0]
• babel-loader ^10.0.0
• babel-plugin-istanbul ^7.0.0 → [Updates: ^8.0.0]
• babel-plugin-jsx ^1.2.0
• babel-preset-latest ^6.24.1
• casual-browserify ^1.5.12
• chai ^6.0.0
• chai-as-promised ^8.0.0
• codecov ^3.7.1
• css-loader ^7.0.0
• enzyme ^3.11.0
• enzyme-adapter-react-15 ^1.4.4
• eslint 6.8.0 → [Updates: 10.8.1]
• eslint-config-google ^0.14.0
• eslint-config-mitodl ^0.2.0 → [Updates: ^2.0.0]
• eslint-plugin-babel ^5.3.0
• eslint-plugin-flow-vars ^0.5.0
• eslint-plugin-mocha ^6.3.0 → [Updates: ^12.0.0]
• eslint-plugin-react ^7.19.0
• eslint-plugin-react-hooks ^5.2.0 → [Updates: ^7.0.0]
• express ^5.0.0
• flow-bin 0.277.1 → [Updates: 0.328.0]
• isomorphic-fetch ^3.0.0
• jquery ^3.5.0 → [Updates: ^4.0.0]
• jsdom ^27.0.0 → [Updates: ^27.0.0, ^30.0.0]
• jsdom-global ^3.0.2
• lodash ^4.17.21
• mini-css-extract-plugin ^2.0.0 → [Updates: ^2.0.0]
• mocha ^11.0.0 → [Updates: ^11.0.0]
• moment ^2.29.4
• nyc ^17.0.0 → [Updates: ^18.0.0]
• object.entries ^1.1.1
• postcss ^8.5.6 → [Updates: ^8.5.6]
• postcss-loader ^8.1.1
• prettier-eslint-cli ^5.0.0 → [Updates: ^9.0.0]
• prop-types ^15.5.10
• ramda ^0.32.0
• react ^15.6.1 → [Updates: ^19.0.0]
• react-addons-shallow-compare ^15.6.0
• react-document-title ^2.0.3
• react-dom ^15.6.1 → [Updates: ^19.0.0]
• react-dropbox-chooser ^0.0.5
• react-ga ^3.0.0
• react-load-script ^0.0.6
• react-redux ^5.0.5 → [Updates: ^9.0.0]
• react-router ^4.2.0 → [Updates: ^8.0.0]
• react-router-dom ^4.2.2 → [Updates: ^7.0.0]
• react-test-renderer ^15.6.1 → [Updates: ^19.0.0]
• react-transition-group ^2.3.1 → [Updates: ^4.0.0]
• redux ^5.0.0
• redux-actions ^3.0.0
• redux-asserts ^0.0.12
• redux-hammock ^0.3.0
• redux-logger ^3.0.6
• redux-thunk ^3.0.0
• rmwc ^1.4.1 → [Updates: ^14.0.0]
• sanitize-filename ^1.6.1
• sass 1.102.0
• sass-lint ^1.10.2
• sass-loader ^16.0.0 → [Updates: ^17.0.0]
• sinon ^21.0.0 → [Updates: ^21.0.0, ^22.0.0]
• style-loader ^4.0.0
• url-loader ^4.1.0
• victory ^0.27.0 → [Updates: ^37.0.0]
• video.js ^8.0.0 → [Updates: ^8.0.0]
• videojs-contrib-quality-levels ^4.1.0
• videojs-hls-quality-selector ^2.0.0
• videojs-hotkeys ^0.2.25
• videojs-youtube ^3.0.1
• webpack ^5.99.9 → [Updates: ^5.99.9]
• webpack-bundle-tracker ^3.2.1
• webpack-cli ^6.0.1 → [Updates: ^7.0.0]
• webpack-dev-middleware ^7.4.2 → [Updates: ^8.0.0]
• webpack-hot-middleware ^2.26.1
• node 24.16.0 → [Updates: 24.19.0]
• yarn 1.22.22
• acorn ^8.0.0 → [Updates: ^8.0.0]
• material-components-web ^0.33.0 → [Updates: ^0.44.0, ^14.0.0]
• cheerio 1.0.0-rc.2 → [Updates: 1.2.0]

pep621 (1)

pyproject.toml (56)

• python >=3.12,<4
• beautifulsoup4 >=4.9.0,<5
• boto3 >=1.36.21,<2
• celery >=5.2.2,<6
• celery-redbeat >=2.0.0,<3
• cryptography >=49,<50 → [Updates: >=50,<51]
• dj-database-url >=3.0.0,<4
• dj-static >=0.0.6,<0.0.7
• django ==4.2.30 → [Updates: ==5.2.16]
• django-encrypted-model-fields >=0.6.5,<0.7
• django-health-check >=3.24.0,<4 → [Updates: >=4.4.4,<5]
• django-hijack >=3.7.1,<4
• django-redis >=6.0.0,<7 → [Updates: >=7,<8]
• django-webpack-loader >=3.0.0,<4
• djangorestframework >=3.11.2,<4
• google-api-python-client >=2.58.0,<3
• google-auth >=2.11.0,<3
• google-auth-oauthlib >=1.0.0,<2
• html5lib >=1.1,<2
• httplib2 >=0.32,<0.33
• Pillow >=10.0.0,<13
• ipython >=9.0.0,<10
• psycopg2 >=2.9.10,<3
• pycountry >=24.0.0,<25 → [Updates: >=26.2.16,<27]
• python-dateutil >=2.8.1,<3
• pytz >=2025.2,<2026 → [Updates: >=2026.3,<2027]
• redis >=6.0.0,<7 → [Updates: >=8.1,<9]
• requests >=2.20.0,<3
• sentry-sdk >=2.0.0,<3
• smart-open >=7.1.0,<8 → [Updates: >=8.0.1,<9]
• social-auth-app-django >=5.4.0,<6 → [Updates: >=5.4.0,<6]
• structlog >=25.0.0,<26 → [Updates: >=26.1,<27]
• mitol-django-observability >=2026.1.0
• urllib3 >=2.0.0,<3
• mitol-django-transcoding >=2026.5.21.1,<2027
• django-filter >=25.1,<26 → [Updates: >=26.1,<27]
• setuptools >=83,<84 → [Updates: >=84,<85]
• granian >=2.5.4,<3
• ddt >=1.6.0,<2
• factory-boy >=3.3.3,<4
• faker >=37.0.0,<38 → [Updates: >=40.36,<41]
• ipdb <0.14
• moto >=5.0.28,<6
• nplusone >=1.0.0,<2
• pdbpp >=0.12.1,<0.13
• pytest >=9.0.3,<10
• pytest-cov >=7.0.0,<8
• pytest-django >=4.5.2,<5
• pytest-env >=1.0.0,<2
• pytest-mock >=3.10.0,<4
• pytest-pep8 >=1.0.6,<2
• requests-mock >=1.10.0,<2
• semantic-version >=2.10.0,<3
• ruff >=0.16,<0.17
• mitol-drf-lint ==2026.4.2
• uv_build >=0.11.26,<0.12.0 → [Updates: >=0.12.1,<0.13.0]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository