chore(deps)(deps): bump marimo from 0.23.16 to 0.24.0 in the python-dependencies group

[dependabot]

Bumps the python-dependencies group with 1 update: marimo.

Updates marimo from 0.23.16 to 0.24.0

Release notes

Sourced from marimo's releases.

0.24.0

What's Changed

This release improves the user experience for working with data sources in the marimo editor. It also makes a small breaking change to mo.ui.file_browser, restricting navigation outside the target directory by default with restrict_navigation=True. Like all our releases, it includes many other enhancements and bug fixes.

🤗 Hugging Face Hub integration

Hugging Face Hub is now a first-class remote storage backend. Hugging Face Hub (huggingface_hub.HfApi) usage is automatically detected, with your HuggingFace data appearing in the storage sidebar.

• Browse datasets, models, spaces, and buckets, with lazy listing/download/signed-URL support via HfApi.
• Bucket paths are namespaced like repos (buckets///...), matching the Hugging Face Hub API.
• Read files directly with hf:// URLs from Polars, pandas, or DuckDB.

Read the docs to learn more.

🛢️ Preview variables bound to data sources

Variables bound to data sources and remote storage backends are now decorated with small icons indicating the connection. Hover over the icon to see details about the connection, or click it to open the relevant section in the data sources sidebar panel.

📥 A unified export dialog

The marimo editor now includes a simple, unified, and customizable export dialog, allowing you to export notebooks to various formats and customize the options for each export type.

export-dialog-demo.mp4

🤖 AI capabilities in the chat sidebar

Give your AI access to capabilities like web search directly from the siderbar:

Screen.Recording.2026-08-10.at.5.14.09.PM.mov

All changes

✨ Enhancements

• add capabilities UI for chat sidebar (#10502)
• Infer file browser initial path from initial value (#10362)
• Make editor code lens configurable via display.code_lens (#10512)
• Migrate frontend to AI SDK v7 (#10486)
• Enable editor code lens (#10507)
• Improve discoverability of collapse/expand all sections commands (#10464)
• Raise upper bound on uv_build to <=0.13.0 (#10467)
• Update LLM model catalog (#10440)
• Report missing Chromium for PDF export (#10453)
• Add Hugging Face Hub as a remote storage backend (#10419)
• Unified export dialog UI (#10429)

... (truncated)

Commits

• 854f7f2 release: 0.24.0 (#10577)
• 5e3dabc fix: improve hover hit-area of code-lens (#10576)
• 17c9490 chat sidebar: mark Code Mode as beta (#10569)
• 7f71cca chore: align Renovate and pnpm release cooldowns (#10572)
• c583cd8 chore(deps): update dependency mermaid to v11.16.1 [security] (#10234)
• 5436647 chore(deps): update dependency dompurify to v3.4.13 [security] (#10491)
• a110544 chore(deps): update dependency form-data to >=4.0.6 [security] (#10231)
• ac699cf chore(deps): update dependency postcss to v8.5.23 [security] (#10322)
• 0acc980 [pre-commit.ci] pre-commit autoupdate (#10504)
• 1e23704 chore: drop the vacuous new_superfences version gate (#10395)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions