Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update ghcr.io/astral-sh/uv:latest docker digest to 1025398
• chore(deps): update github actions dependencies (github/codeql-action, step-security/harden-runner)
• chore(deps): update python docker tag to v3.14.5
• fix(deps): update python: non-major updates (huggingface-hub, onnxruntime, onnxruntime-gpu, pydantic-settings, ruff, torch, ty, uvicorn)
• chore(deps): update actions/dependency-review-action action to v5
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): lock file maintenance

Detected Dependencies

dockerfile (2)

cpu.Dockerfile (2)

• ghcr.io/astral-sh/uv python3.13-bookworm@sha256:47965cdc9d53a515f68f78241161c901e70051ce428f12e791bd7fe19f6a631a
• ghcr.io/astral-sh/uv python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca

gpu.Dockerfile (3)

• nvidia/cuda 13.2.1-cudnn-devel-ubuntu24.04@sha256:6435dc5a825b0095648d87a3c91240fd7788a85fafaf215739544d389ab74366
• ghcr.io/astral-sh/uv latest@sha256:3b7b60a81d3c57ef471703e5c83fd4aaa33abcd403596fb22ab07db85ae91347 → [Updates: latest]
• docker.io/nvidia/cuda 13.2.1-cudnn-runtime-ubuntu24.04@sha256:1c0c68dbf3258d32b446a02cb4be05c8478b65d320d7856ad33c4bbdf898ca86

github-actions (4)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/dependency-review-action v4.9.0@2031cfc080254a8a887f58cffee85186f0e49e48 → [Updates: v5.0.0]

.github/workflows/docker-release.yml (7)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f

.github/workflows/ruff.yml (3)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• astral-sh/ruff-action v4.0.0@0ce1b0bf8b818ef400413f810f8a11cdbda0034b

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.1@a5ad31d6a139d249332a2605b85202e8c0b78450 → [Updates: v2.19.2]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.35.3@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4.35.4]

pep621 (1)

pyproject.toml (20)

• python ==3.14.4 → [Updates: ==3.14.5]
• fastapi ==0.136.1
• gitpython ==3.1.50
• huggingface-hub ==1.13.0 → [Updates: ==1.14.0]
• prometheus-client ==0.25.0
• pydantic-settings ==2.14.0 → [Updates: ==2.14.1]
• uvicorn ==0.46.0 → [Updates: ==0.47.0]
• ipykernel ==7.2.0
• pre-commit ==4.6.0
• ruff ==0.15.12 → [Updates: ==0.15.13]
• ty ==0.0.34 → [Updates: ==0.0.35]
• torch ==2.11.0 → [Updates: ==2.12.0]
• gliner ==0.2.26
• onnxruntime ==1.25.1 → [Updates: ==1.26.0]
• torch ==2.11.0 → [Updates: ==2.12.0]
• gliner ==0.2.26
• onnxruntime-gpu ==1.25.1 → [Updates: ==1.26.0]
• gradio ==6.14.0
• httpx ==0.28.1
• stamina ==26.1.0

pyenv (1)

.python-version (1)

• python 3.14.4 → [Updates: 3.14.5]

---

• Check this box to trigger a request for Renovate to run again on this repository