Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/internetarchive/openlibrary).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update actions/labeler action to v7
- [ ] Update actions/setup-node action to v7
- [ ] Update actions/setup-python action to v7
- [ ] Update actions/stale action to v11
- [ ] Update astral-sh/setup-uv action to v10
- [ ] Update babel monorepo to v8 (`@babel/core`, `@babel/preset-env`)
- [ ] Update dependency @eslint/js to v10
- [ ] Update dependency datatables.net-dt to v3
- [ ] Update dependency diff to v9
- [ ] Update dependency flot to v4
- [ ] Update dependency globals to v17
- [ ] Update dependency gunicorn to v26
- [ ] Update dependency isbn3 to v2
- [ ] Update dependency jquery to v4
- [ ] Update dependency luqum to v1
- [ ] Update dependency multipart to v2
- [ ] Update dependency nameparser to v2
- [ ] Update dependency node to v24
- [ ] Update dependency prometheus-fastapi-instrumentator to v8
- [ ] Update dependency qrcode to v8
- [ ] Update dependency simplejson to v4
- [ ] Update dependency stylelint to v17
- [ ] Update dependency tesseract.js to v7
- [ ] Update dependency wikitextparser to v2
- [ ] Update docker/build-push-action action to v7
- [ ] Update docker/login-action action to v4
- [ ] Update docker/setup-buildx-action action to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update JS dependencies (non-major)](../pull/12995) (`@axe-core/playwright`, `@eslint/js`, `@internetarchive/elements`, `@playwright/test`, `@sentry/browser`, `@tiptap/extension-hard-break`, `@tiptap/extension-image`, `@tiptap/extension-placeholder`, `@tiptap/pm`, `@tiptap/starter-kit`, `@vitejs/plugin-vue`, `form-data`, `prettier`, `qs`, `slick-carousel`, `stylelint-declaration-strict-value`, `vite`, `vue`)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] Update anthropics/claude-code-action digest to 3b8197d
- [ ] Update vendor/infogami digest to 7cb5b9e
- [ ] Update codecov/codecov-action action to v7.1.1
- [ ] Update dependency slick-carousel to v2
- [ ] Update haproxy Docker tag to v3
- [ ] Update ubuntu Docker tag to v26

## Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

- [ ] Update dependency @tiptap/core to v3.30.4 [SECURITY]

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency python-multipart to v0.0.31 [SECURITY]](../pull/13172)
- [ ] [Update dependency Pillow to v12.3.0 [SECURITY]](../pull/13189)
- [ ] [Update dependency svgo to v4.1.0 [SECURITY]](../pull/13196)
- [ ] [Update dependency cryptography to v50 [SECURITY]](../pull/13043)
- [ ] [Update actions/deploy-pages action to v5.0.1](../pull/13623)
- [ ] [Update dependency eslint to v9.39.5](../pull/13504)
- [ ] [Update Python dependencies (non-major)](../pull/12929) (`APScheduler`, `beautifulsoup4`, `fastapi`, `feedparser`, `httpx`, `ijson`, `internetarchive`, `luqum`, `lxml`, `mypy`, `nameparser`, `psycopg2`, `pydantic`, `pydantic-settings`, `pymarc`, `pytest`, `ruff`, `sentry-sdk`, `uvicorn`)
- [ ] [Update Python to v3.14.7](../pull/12996)
- [ ] [Update actions/checkout action to v7](../pull/13580)
- [ ] [Update actions/github-script action to v9](../pull/13582)
- [ ] [Update dependency chart.js to v4](../pull/12761)
- [ ] [Update dependency chartjs-plugin-datalabels to v2](../pull/12808)
- [ ] [Update eslint (major)](../pull/13607) (`@babel/eslint-parser`, `eslint`, `eslint-plugin-no-jquery`, `eslint-plugin-vue`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (8)

compose.infogami-local.yaml

compose.near-prod.yaml

compose.override.yaml

compose.production.yaml (3)

- `haproxy 2.9.15` → [Updates: `3.4.4`]
- `haproxy 2.9.15` → [Updates: `3.4.4`]
- `prom/node-exporter v1.12.1`

compose.selinux.yaml

compose.staging.yaml (1)

- `prom/node-exporter v1.12.1`

compose.yaml (1)

- `solr 10.0.0`

scripts/solr_builder/compose.yaml (2)

- `solr 10.0.0`
- `solr 10.0.0`

dockerfile (6)

docker/Dockerfile.olbase (1)

- `python 3.14.5-slim-trixie` → [Updates: `3.14.7-slim-trixie`]

docker/Dockerfile.oldev

docker/mockservices/Dockerfile (1)

- `python 3.14-slim`

scripts/monitoring/Dockerfile

scripts/solr_builder/Dockerfile (1)

- `ubuntu jammy` → [Updates: `resolute`]

scripts/solr_builder/Dockerfile.olpython

git-submodules (1)

.gitmodules (1)

- `vendor/infogami 1fd8b760ff69bfe755bf8313b8ec48de9002cef4` → [Updates: `undefined`]

github-actions (17)

.github/workflows/auto_assign_reviewer.yml (1)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/code_review_action.yml (1)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/docs_gh_pages.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/configure-pages v6.0.0@45bfe0192ca1faeb007ade9deae92b16b8254a0d`
- `actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9`
- `actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128` → [Updates: `v5.0.1`]
- `node 22` → [Updates: `24`]

.github/workflows/issue_enrichment.yml (2)

- `actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262` → [Updates: `v7.0.1`]
- `anthropics/claude-code-action v1@700e7f8316990de46bed556429765647af760efc` → [Updates: `v1`]

.github/workflows/javascript_tests.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.1`]
- `node 24`

.github/workflows/new_comment_digest.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1` → [Updates: `v7.0.0`]
- `actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1` → [Updates: `v7.0.0`]
- `python 3.x`
- `python 3.x`

.github/workflows/new_pr_labeler.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`

.github/workflows/olbase.yaml (10)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.3.0`]
- `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.6.0`]
- `docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8` → [Updates: `v7.3.0`]
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f` → [Updates: `v4.3.0`]
- `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.6.0`]
- `docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8` → [Updates: `v7.3.0`]
- `docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9` → [Updates: `v4.6.0`]
- `ubuntu 24.04-arm`

.github/workflows/pm_on_call_notification.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/github-script v7.1.0@f28e40c7f34bde8b3046d885e986cb6290c5673b` → [Updates: `v9.0.0`]
- `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d`

.github/workflows/pm_stale_pr_messenger.yml (1)

- `actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11.0.0`]

.github/workflows/pm_stale_ticket_labeler.yml (1)

- `actions/stale v10.4.0@1e223db275d687790206a7acac4d1a11bd6fe629` → [Updates: `v11.0.0`]

.github/workflows/pr_autoresponder.yml (2)

- `actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262` → [Updates: `v7.0.1`]
- `anthropics/claude-code-action v1@700e7f8316990de46bed556429765647af760efc` → [Updates: `v1`]

.github/workflows/pr_changes_requested.yml (1)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/pr_update_labeler.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/labeler v6.2.0@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d` → [Updates: `v7.0.0`]

.github/workflows/python_tests.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-python v6.3.0@ece7cb06caefa5fff74198d8649806c4678c61a1` → [Updates: `v7.0.0`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990` → [Updates: `v10.1.0`]
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.1`]

.github/workflows/trigger-i18n.yml

.github/workflows/weekly_status_report.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v6.5.0@249970729cb0ef3589644e2896645e5dc5ba9c38` → [Updates: `v7.0.0`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`

npm (1)

package.json (64)

- `@axe-core/playwright ^4.12.1` → [Updates: `^4.12.1`]
- `@babel/core ^7.24.7` → [Updates: `^8.0.0`]
- `@babel/eslint-parser ^7.28.6` → [Updates: `^8.0.0`]
- `@babel/preset-env ^7.29.3` → [Updates: `^8.0.0`]
- `@custom-elements-manifest/analyzer ^0.11.0`
- `@ericblade/quagga2 ^1.7.4`
- `@eslint/js ^9.39.4` → [Updates: `^9.39.4`, `^10.0.0`]
- `@internetarchive/elements ^0.2.5` → [Updates: `^0.2.5`]
- `@playwright/test ^1.60.0` → [Updates: `^1.60.0`]
- `@sentry/browser ^10.60.0` → [Updates: `^10.60.0`]
- `@tiptap/core ^3.20.4` → [Updates: `^3.20.4`]
- `@tiptap/extension-hard-break ^3.26.0` → [Updates: `^3.26.0`]
- `@tiptap/extension-image ^3.22.1` → [Updates: `^3.22.1`]
- `@tiptap/extension-placeholder ^3.20.4` → [Updates: `^3.20.4`]
- `@tiptap/pm ^3.20.4` → [Updates: `^3.20.4`]
- `@tiptap/starter-kit ^3.20.4` → [Updates: `^3.20.4`]
- `@vitejs/plugin-vue ^6.0.6` → [Updates: `^6.0.6`]
- `@vitest/browser-playwright ^5.0.0` → [Updates: `^5.0.0`]
- `axe-core ^4.13.0`
- `bundlesize2 ^0.0.35`
- `chart.js 2.9.4` → [Updates: `4.5.1`]
- `chartjs-plugin-datalabels 0.7.0` → [Updates: `2.2.0`]
- `concurrently ^10.0.0`
- `datatables.net-dt 1.13.11` → [Updates: `3.0.3`]
- `diff ^4.0.4` → [Updates: `^9.0.0`]
- `eslint ^9.39.4` → [Updates: `^9.39.4`, `^10.0.0`]
- `eslint-plugin-no-jquery ^3.1.1` → [Updates: `^6.0.0`]
- `eslint-plugin-vue ^9.32.0` → [Updates: `^10.0.0`]
- `flot 0.8.3` → [Updates: `4.2.6`]
- `globals ^15.14.0` → [Updates: `^17.0.0`]
- `isbn3 1.2.19` → [Updates: `2.0.11`]
- `jquery 3.7.1` → [Updates: `4.0.0`]
- `jquery-colorbox 1.6.4`
- `jquery-ui 1.14.2`
- `jquery-ui-touch-punch 0.2.3`
- `jsdom ^30.0.1` → [Updates: `^30.0.1`]
- `lit ^3.2.1`
- `lucene-query-parser 1.2.0`
- `postcss-lit ^1.4.1`
- `prettier ^3.5.3` → [Updates: `^3.5.3`]
- `prismjs ^1.30.0`
- `slick-carousel 1.6.0` → [Updates: `1.8.1`, `2.0.0`]
- `stylelint ^16.26.1` → [Updates: `^17.0.0`]
- `stylelint-declaration-strict-value ^1.11.1` → [Updates: `^1.11.1`]
- `stylelint-prettier ^5.0.3`
- `svgo 4` → [Updates: `4`]
- `tesseract.js ^4.1.4` → [Updates: `^7.0.0`]
- `tiptap-markdown ^0.9.0`
- `vite ^8.0.5` → [Updates: `^8.0.5`]
- `vitest ^5.0.0` → [Updates: `^5.0.0`]
- `vitest-browser-lit ^1.0.1`
- `vitest-browser-vue ^3.1.0`
- `vue ^3.5.34` → [Updates: `^3.5.34`]
- `vue-async-computed ^4.0.1`
- `vue-multiselect ^3.5.0`
- `workbox-cacheable-response ^7.4.1`
- `workbox-core ^7.4.1`
- `workbox-expiration ^7.4.1`
- `workbox-recipes ^7.4.1`
- `workbox-routing ^7.4.1`
- `workbox-strategies ^7.4.1`
- `node ^24.0.0`
- `form-data 4.0.5` → [Updates: `4.0.6`]
- `qs 6.15.2` → [Updates: `6.16.0`]

pep621 (1)

pyproject.toml (1)

- `python >=3.14.5,<3.14.6` → [Updates: `>=3.14.7,<3.14.8`]

pip_requirements (6)

docker/mockservices/requirements.txt (4)

- `fastapi ==0.115.0` → [Updates: `==0.141.1`]
- `httpx ==0.27.2` → [Updates: `==0.28.1`]
- `python-multipart ==0.0.20` → [Updates: `==0.0.31`]
- `uvicorn ==0.30.6` → [Updates: `==0.52.4`]

requirements_scripts.txt (3)

- `mwparserfromhell ==0.7.2`
- `nameparser ==1.1.3` → [Updates: `==1.4.0`, `==2.2.0`]
- `wikitextparser ==0.56.4` → [Updates: `==2.0.0`]

requirements_test.txt (8)

- `debugpy >=1.6.4`
- `mypy ==2.1.0` → [Updates: `==2.3.1`]
- `pymemcache ==4.0.0`
- `pytest ==9.0.3` → [Updates: `==9.1.1`]
- `pytest-asyncio ==1.4.0`
- `pytest-httpx ==0.36.2`
- `ruff ==0.16.1` → [Updates: `==0.16.7`]
- `WebTest ==3.0.7`

requirements.txt (40)

- `aiofiles ==25.1.0`
- `amightygirl.paapi5-python-sdk ==1.0.0`
- `APScheduler ==3.11.2` → [Updates: `==3.11.3`]
- `Babel ==2.18.0`
- `beautifulsoup4 ==4.14.3` → [Updates: `==4.15.0`]
- `cryptography ==44.0.2` → [Updates: `==50.0.0`]
- `eventer ==0.1.1`
- `fastapi ==0.136.3` → [Updates: `==0.141.1`]
- `feedparser ==6.0.12` → [Updates: `==6.0.14`]
- `flup-py3 ==1.0.3`
- `Genshi ==0.7.11`
- `pyopds2 3d5b3b0f9d993b5385be013de105f98bb7d3b203`
- `pyopds2_openlibrary e18e79f9a06afeaabe59d7dd8d50b1646db0646c`
- `webpy 2598dfe693ff931a9c67196f0b904b13637ec19f`
- `gunicorn ==23.0.0` → [Updates: `==26.2.0`]
- `httpx ==0.28.1`
- `ijson ==3.5.0` → [Updates: `==3.5.1`]
- `internetarchive ==5.9.0` → [Updates: `==5.11.1`]
- `isbnlib ==3.10.14`
- `Jinja2 ==3.1.6`
- `luqum ==0.11.0` → [Updates: `==0.14.0`, `==1.0.0`]
- `lxml ==6.1.1` → [Updates: `==6.1.3`]
- `multipart ==1.3.1` → [Updates: `==2.0.0`]
- `Pillow ==12.2.0` → [Updates: `==12.3.0`]
- `prometheus-fastapi-instrumentator ==7.1.0` → [Updates: `==8.1.0`]
- `psycopg2 ==2.9.12` → [Updates: `==2.9.13`]
- `pydantic ==2.13.4` → [Updates: `==2.13.5`]
- `pydantic-settings ==2.9.1` → [Updates: `==2.15.0`]
- `pymarc ==5.3.1` → [Updates: `==5.4.0`]
- `python-dateutil ==2.9.0.post0`
- `python-memcached ==1.62`
- `python-multipart ==0.0.32`
- `PyYAML ==6.0.3`
- `qrcode ==7.4.2` → [Updates: `==8.2`]
- `requests ==2.34.2`
- `sentry-sdk ==2.61.1` → [Updates: `==2.69.1`]
- `simplejson ==3.20.2` → [Updates: `==4.1.2`]
- `statsd ==4.0.1`
- `uvicorn ==0.49.0` → [Updates: `==0.52.4`]
- `validate_email ==1.3`

scripts/gh_scripts/requirements.txt (1)

- `requests ==2.34.2`

scripts/monitoring/requirements.txt (2)

- `APScheduler ==3.11.2` → [Updates: `==3.11.3`]
- `py-spy ==0.4.2`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Renovate Dependency Dashboard documentation, then inspect the relevant files listed in the dashboard, such as .github/workflows/*, docker/Dockerfile.olbase, compose.yaml, and .gitmodules. Select one specific update, review its generated PR and status checks, and consider it done only when that update is validated without unrelated dashboard changes.

Written by the indexing model from the issue text.