Dependency Dashboard

[anaconda-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update conda-incubator/setup-miniconda action to v3.3.0
• chore(deps): update dependency typing-extensions to v4.15.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update conda-incubator/setup-miniconda action to v4
• chore(deps): update dependency pandas to v3
• chore(deps): update dependency psutil to v7
• chore(deps): update dependency xgboost to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up pypi package ae5-tools: no-result.

Files affected: setup.py

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency scikit-learn to v1.5.0 [security]
• chore(deps): update dependency mlflow to v3 [security]
• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update conda-incubator/setup-miniconda digest to fc2d68f
• chore(deps): update registry.access.redhat.com/ubi8/ubi:latest docker digest to cd12997
• chore(deps): update dependency xgboost to v2.1.4
• chore(deps): update dependency numpy to v2.4.4
• chore(deps): update dependency pandas to v2.3.3
• chore(deps): update dependency psutil to v6.1.1
• chore(deps): update dependency scipy to v1.17.1
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

151/151 CVEs have Renovate fixes.

pip_requirements

test/fixtures/models/model/requirements.txt

mlflow

• GHSA-3v79-q7ph-j75h (fixed in >= 2.10.0)
• GHSA-43c4-9qgj-x742 (fixed in > 2.14.1)
• GHSA-46r5-x6jq-v8g6 (fixed in > 3.10.1)
• GHSA-49m6-vrr9-2cqm (fixed in > 2.17.2)
• GHSA-4qq5-mxxx-m6gg (fixed in >= 2.8.0)
• GHSA-4rj2-9gcx-5qhx (fixed in >= 2.19.0)
• GHSA-4rqf-8pfm-p36r (fixed in >= 2.17.0rc0)
• GHSA-4x5p-f36r-mxxr (fixed in >= 3.4.0rc0)
• GHSA-554w-xh4j-8w64 (fixed in >= 2.9.2)
• GHSA-59v3-898r-qwhj (fixed in >= 2.9.2)
• GHSA-5cvj-7rg6-jggj (fixed in >= 2.22.4)
• GHSA-5mvj-wmgj-7q8c (fixed in > 2.9.2)
• GHSA-5p3h-7fwh-92rc (fixed in >= 2.9.2)
• GHSA-5q6c-ffvg-xcm9 (fixed in >= 2.9.0)
• GHSA-5r3q-93q3-f978 (fixed in >= 2.9.2)
• GHSA-6749-m5cp-6cg7 (fixed in >= 2.10.0)
• GHSA-6xj8-rrqx-r4cv (fixed in >= 2.22.0rc0)
• GHSA-76cg-cfhx-373f (fixed in > 2.14.1)
• GHSA-7p8j-qv6x-f4g4 (fixed in > 2.14.1)
• GHSA-7qhf-v65m-g5f3 (fixed in > 3.10.1)
• GHSA-8f8q-q2j7-7j2m (fixed in >= 2.11.3)
• GHSA-cv6c-7963-wxcg (fixed in > 2.14.1)
• GHSA-cwgg-w6mp-w9hg (fixed in > 2.14.1)
• GHSA-cxfr-5q3r-2rc2 (fixed in >= 2.9.2)
• GHSA-f42m-mvfv-cgw5 (fixed in > 2.9.2)
• GHSA-f798-qm4r-23r5 (fixed in >= 2.8.1)
• GHSA-f82r-jj5r-6g97 (fixed in >= 2.12.1)
• GHSA-fh64-r2vc-xvhr (fixed in >= 3.11.1)
• GHSA-fhff-qmm8-h2fp (fixed in >= 3.9.0rc0)
• GHSA-g6pg-52vf-843h (fixed in > 3.8.1)
• GHSA-ghv6-9r9j-wh4j (fixed in > 2.14.1)
• GHSA-gq3w-7jj3-x7gr (fixed in >= 3.8.0rc0)
• GHSA-hh8p-p8mp-gqhm (fixed in >= 2.9.2)
• GHSA-hq88-wg7q-gp4g (fixed in >= 2.10.0)
• GHSA-hvc6-42vf-jhf8 (fixed in >= 2.9.2)
• GHSA-j46q-5pxx-8vmw (fixed in >= 2.11.3)
• GHSA-j62r-wxqq-f3gf (fixed in >= 2.12.1)
• GHSA-j8mg-pqc5-x9gj (fixed in > 2.14.1)
• GHSA-m49c-5c52-6696 (fixed in > 2.9.2)
• GHSA-p4jx-q62p-x5jr (fixed in >= 2.10.1)
• GHSA-pgqp-8h46-6x4j (fixed in >= 3.5.0)
• GHSA-pqcv-qw2r-r859 (fixed in > 2.13.1)
• GHSA-q2r8-vmq7-fpx2 (fixed in >= 3.8.0rc0)
• GHSA-q3gw-8236-5jw4 (fixed in > 2.13.2)
• GHSA-qg8p-32gr-gh6x (fixed in >= 2.9.2)
• GHSA-qpgc-w4mg-6v92 (fixed in >= 2.16.0)
• GHSA-r23q-823p-vmf7 (fixed in >= 3.8.1)
• GHSA-v945-r3rc-6fjm (fixed in >= 2.9.2)
• GHSA-vhcx-3pq2-4fvc (fixed in >= 3.9.0rc0)
• GHSA-vwhf-3v6x-wff8 (fixed in >= 2.9.0)
• GHSA-wf7f-8fxf-xfxc (fixed in > 3.4.0)
• GHSA-wqxf-447m-6f5f (fixed in >= 2.9.0)
• GHSA-wv8q-4f85-2p8p (fixed in >= 2.9.2)
• GHSA-wxj7-3fx5-pp9m (fixed in >= 2.22.2)
• GHSA-x38x-g6gr-jqff (fixed in > 2.14.1)
• GHSA-xch3-2f9x-wh9f (fixed in >= 3.8.0rc0)
• PYSEC-2023-252 (fixed in >= 2.9.2)
• PYSEC-2023-253 (fixed in >= 2.9.2)
• PYSEC-2023-260 (fixed in >= 2.9.1)
• PYSEC-2023-281 (fixed in >= 2.9.2)
• PYSEC-2023-309 (fixed in >= 2.9.2)
• PYSEC-2024-224 (fixed in >= 2.16.0)
• PYSEC-2024-239 (fixed in >= 2.9.0)
• PYSEC-2024-240 (fixed in >= 2.10.0)
• PYSEC-2024-241 (fixed in >= 2.10.0)
• PYSEC-2024-242 (fixed in >= 2.11.3)
• PYSEC-2024-243 (fixed in >= 2.10.0)
• PYSEC-2024-244 (fixed in >= 2.12.1)
• PYSEC-2024-51 (fixed in >= 2.10.1)
• PYSEC-2025-17 (fixed in >= 2.19.0)
• PYSEC-2025-52 (fixed in >= 3.1.0)

scikit-learn

• GHSA-jw8x-6495-233v (fixed in >= 1.5.0)
• PYSEC-2024-110 (fixed in >= 1.5.0)

pip_setup

setup.py

mlflow

• GHSA-3v79-q7ph-j75h (fixed in >= 2.10.0)
• GHSA-43c4-9qgj-x742 (fixed in > 2.14.1)
• GHSA-46r5-x6jq-v8g6 (fixed in > 3.10.1)
• GHSA-49m6-vrr9-2cqm (fixed in > 2.17.2)
• GHSA-4qq5-mxxx-m6gg (fixed in >= 2.8.0)
• GHSA-4rj2-9gcx-5qhx (fixed in >= 2.19.0)
• GHSA-4rqf-8pfm-p36r (fixed in >= 2.17.0rc0)
• GHSA-4x5p-f36r-mxxr (fixed in >= 3.4.0rc0)
• GHSA-554w-xh4j-8w64 (fixed in >= 2.9.2)
• GHSA-59v3-898r-qwhj (fixed in >= 2.9.2)
• GHSA-5cvj-7rg6-jggj (fixed in >= 2.22.4)
• GHSA-5mvj-wmgj-7q8c (fixed in > 2.9.2)
• GHSA-5p3h-7fwh-92rc (fixed in >= 2.9.2)
• GHSA-5q6c-ffvg-xcm9 (fixed in >= 2.9.0)
• GHSA-5r3q-93q3-f978 (fixed in >= 2.9.2)
• GHSA-6749-m5cp-6cg7 (fixed in >= 2.10.0)
• GHSA-6xj8-rrqx-r4cv (fixed in >= 2.22.0rc0)
• GHSA-76cg-cfhx-373f (fixed in > 2.14.1)
• GHSA-7p8j-qv6x-f4g4 (fixed in > 2.14.1)
• GHSA-7qhf-v65m-g5f3 (fixed in > 3.10.1)
• GHSA-83fm-w79m-64r5 (fixed in >= 2.3.1)
• GHSA-8f8q-q2j7-7j2m (fixed in >= 2.11.3)
• GHSA-cv6c-7963-wxcg (fixed in > 2.14.1)
• GHSA-cxfr-5q3r-2rc2 (fixed in >= 2.9.2)
• GHSA-f42m-mvfv-cgw5 (fixed in > 2.9.2)
• GHSA-f798-qm4r-23r5 (fixed in >= 2.8.1)
• GHSA-f82r-jj5r-6g97 (fixed in >= 2.12.1)
• GHSA-ffw3-6378-cqgp (fixed in >= 2.6.0)
• GHSA-fh64-r2vc-xvhr (fixed in >= 3.11.1)
• GHSA-fhff-qmm8-h2fp (fixed in >= 3.9.0rc0)
• GHSA-fmxj-6h9g-6vw3 (fixed in >= 2.5.0)
• GHSA-g6pg-52vf-843h (fixed in > 3.8.1)
• GHSA-ghv6-9r9j-wh4j (fixed in > 2.14.1)
• GHSA-gq3w-7jj3-x7gr (fixed in >= 3.8.0rc0)
• GHSA-hh8p-p8mp-gqhm (fixed in >= 2.9.2)
• GHSA-hq88-wg7q-gp4g (fixed in >= 2.10.0)
• GHSA-hvc6-42vf-jhf8 (fixed in >= 2.9.2)
• GHSA-j46q-5pxx-8vmw (fixed in >= 2.11.3)
• GHSA-j62r-wxqq-f3gf (fixed in >= 2.12.1)
• GHSA-j8mg-pqc5-x9gj (fixed in > 2.14.1)
• GHSA-m49c-5c52-6696 (fixed in > 2.9.2)
• GHSA-p4jx-q62p-x5jr (fixed in >= 2.10.1)
• GHSA-pgqp-8h46-6x4j (fixed in >= 3.5.0)
• GHSA-pqcv-qw2r-r859 (fixed in > 2.13.1)
• GHSA-q2r8-vmq7-fpx2 (fixed in >= 3.8.0rc0)
• GHSA-q3gw-8236-5jw4 (fixed in > 2.13.2)
• GHSA-qg8p-32gr-gh6x (fixed in >= 2.9.2)
• GHSA-qpgc-w4mg-6v92 (fixed in >= 2.16.0)
• GHSA-r23q-823p-vmf7 (fixed in >= 3.8.1)
• GHSA-v945-r3rc-6fjm (fixed in >= 2.9.2)
• GHSA-vhcx-3pq2-4fvc (fixed in >= 3.9.0rc0)
• GHSA-vwhf-3v6x-wff8 (fixed in >= 2.9.0)
• GHSA-wf7f-8fxf-xfxc (fixed in > 3.4.0)
• GHSA-wqxf-447m-6f5f (fixed in >= 2.9.0)
• GHSA-wv8q-4f85-2p8p (fixed in >= 2.9.2)
• GHSA-wxj7-3fx5-pp9m (fixed in >= 2.22.2)
• GHSA-x38x-g6gr-jqff (fixed in > 2.14.1)
• GHSA-x422-6qhv-p29g (fixed in >= 2.3.1)
• GHSA-xch3-2f9x-wh9f (fixed in >= 3.8.0rc0)
• PYSEC-2023-252 (fixed in >= 2.9.2)
• PYSEC-2023-253 (fixed in >= 2.9.2)
• PYSEC-2023-260 (fixed in >= 2.9.1)
• PYSEC-2023-280 (fixed in >= 2.6.0)
• PYSEC-2023-281 (fixed in >= 2.9.2)
• PYSEC-2023-308 (fixed in >= 2.5.0)
• PYSEC-2023-309 (fixed in >= 2.9.2)
• PYSEC-2023-68 (fixed in >= 2.3.1)
• PYSEC-2023-69 (fixed in >= 2.3.1)
• PYSEC-2024-224 (fixed in >= 2.16.0)
• PYSEC-2024-239 (fixed in >= 2.9.0)
• PYSEC-2024-240 (fixed in >= 2.10.0)
• PYSEC-2024-241 (fixed in >= 2.10.0)
• PYSEC-2024-242 (fixed in >= 2.11.3)
• PYSEC-2024-243 (fixed in >= 2.10.0)
• PYSEC-2024-244 (fixed in >= 2.12.1)
• PYSEC-2024-51 (fixed in >= 2.10.1)
• PYSEC-2025-17 (fixed in >= 2.19.0)
• PYSEC-2025-52 (fixed in >= 3.1.0)

Detected Dependencies

dockerfile (1)

container/Dockerfile (1)

• registry.access.redhat.com/ubi8/ubi latest@sha256:d5e2d1ddf34b573673581940f1341c7b3301ff8efde28f17100b31a3df7d94b6 → [Updates: latest]

github-actions (2)

.github/workflows/pull-request.yml (2)

• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332 → [Updates: v4.3.1, v6.0.2, v4]
• conda-incubator/setup-miniconda v3@a4260408e20b96e80095f42ff7f1a15b27dd94ca → [Updates: v3.3.0, v4.0.1, v3]

.github/workflows/python-publish.yml (2)

• actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332 → [Updates: v4.3.1, v6.0.2, v4]
• conda-incubator/setup-miniconda v3@a4260408e20b96e80095f42ff7f1a15b27dd94ca → [Updates: v3.3.0, v4.0.1, v3]

helm-values (1)

helm/values.yaml

pep621 (1)

pyproject.toml (1)

• versioneer ==0.29

pip_requirements (1)

test/fixtures/models/model/requirements.txt (8)

• mlflow ==2.6.0 → [Updates: ==3.11.1]
• numpy ==2.1.0 → [Updates: ==2.4.4]
• pandas ==2.0.3 → [Updates: ==2.3.3, ==3.0.2]
• psutil ==6.0.0 → [Updates: ==6.1.1, ==7.2.2]
• scikit-learn ==1.3.0 → [Updates: ==1.5.0]
• scipy ==1.11.1 → [Updates: ==1.17.1]
• typing-extensions ==4.7.1 → [Updates: ==4.15.0]
• xgboost ==2.1.1 → [Updates: ==2.1.4, ==3.2.0]

pip_setup (1)

setup.py (3)

• mlflow >=2.3.0 → [Updates: >=3.11.1]
• ae5-tools >=0.7,<1.0
• pydantic >=2.0,<3

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository