Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update ghcr.io/astral-sh/uv:latest docker digest to b1e6993
• chore(deps): update github actions dependencies (actions/upload-artifact, docker/build-push-action, step-security/harden-runner)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update python: non-major updates (fastapi, gliner, gradio, huggingface-hub, onnxruntime, onnxruntime-gpu, prometheus-client, ruff, torch, ty, uvicorn)
• chore(deps): update python docker tag to v3.14.4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

cpu.Dockerfile (2)

• ghcr.io/astral-sh/uv python3.13-bookworm@sha256:47965cdc9d53a515f68f78241161c901e70051ce428f12e791bd7fe19f6a631a
• ghcr.io/astral-sh/uv python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca

gpu.Dockerfile (3)

• nvidia/cuda 13.2.0-cudnn-devel-ubuntu24.04@sha256:9a8b00be0596b5a2a088249ef1d5ed8e5cdd45bc662a4e6937e57af0cc495d1f
• ghcr.io/astral-sh/uv latest@sha256:90bbb3c16635e9627f49eec6539f956d70746c409209041800a0280b93152823 → [Updates: latest]
• docker.io/nvidia/cuda 13.2.0-cudnn-runtime-ubuntu24.04@sha256:7a31e9bfb2086e4b1ac08aa8e4718d7860730ecc6a9882d2f1e5ed6239f8ef5b

github-actions (4)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.16.1@fe104658747b27e96e4f7e80cd0a94068e53901d → [Updates: v2.17.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48

.github/workflows/docker-release.yml (7)

• step-security/harden-runner v2.16.1@fe104658747b27e96e4f7e80cd0a94068e53901d → [Updates: v2.17.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• actions/cache v5.0.4@668228422ae6a00e4ad889ee87cd7109ec5666a7
• docker/build-push-action v7.0.0@d08e5c354a6adb9ed34480a06d141179aa583294 → [Updates: v7.1.0]

.github/workflows/ruff.yml (3)

• step-security/harden-runner v2.16.1@fe104658747b27e96e4f7e80cd0a94068e53901d → [Updates: v2.17.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/ruff-action v3.6.1@4919ec5cf1f49eff0871dbcea0da843445b837e6

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.16.1@fe104658747b27e96e4f7e80cd0a94068e53901d → [Updates: v2.17.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f → [Updates: v7.0.1]
• github/codeql-action v4.35.1@c10b8064de6f491fea524254123dbe5e09572f13

pep621 (1)

pyproject.toml (20)

• python ==3.13.9 → [Updates: ==3.14.4]
• fastapi ==0.135.1 → [Updates: ==0.135.3]
• gitpython ==3.1.46
• huggingface-hub ==1.7.1 → [Updates: ==1.10.1]
• prometheus-client ==0.24.1 → [Updates: ==0.25.0]
• pydantic-settings ==2.13.1
• uvicorn ==0.41.0 → [Updates: ==0.44.0]
• ipykernel ==7.2.0
• pre-commit ==4.5.1
• ruff ==0.15.6 → [Updates: ==0.15.10]
• ty ==0.0.23 → [Updates: ==0.0.29]
• torch ==2.10.0 → [Updates: ==2.11.0]
• gliner ==0.2.25 → [Updates: ==0.2.26]
• onnxruntime ==1.24.3 → [Updates: ==1.24.4]
• torch ==2.10.0 → [Updates: ==2.11.0]
• gliner ==0.2.25 → [Updates: ==0.2.26]
• onnxruntime-gpu ==1.24.3 → [Updates: ==1.24.4]
• gradio ==6.9.0 → [Updates: ==6.12.0]
• httpx ==0.28.1
• stamina ==25.2.0

pyenv (1)

.python-version (1)

• python 3.13.9 → [Updates: 3.14.4]

---

• Check this box to trigger a request for Renovate to run again on this repository