Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dockerfile base images
• chore(deps): update github actions dependencies (actions/checkout, docker/setup-buildx-action, github/codeql-action, step-security/harden-runner)
• chore(deps): update python docker tag to v3.14.2
• fix(deps): update python: non-major updates (fastapi, gitpython, pre-commit, ruff, stamina, ty, uvicorn)
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/upload-artifact action to v6
• fix(deps): update dependency gradio to v6
• fix(deps): update dependency huggingface-hub to v1
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

cpu.Dockerfile (2)

• ghcr.io/astral-sh/uv python3.13-bookworm@sha256:0c22f927b3438ddb9d546b97031cfb85e64fd4792f3fbd57db7bd0c62942d734 → [Updates: python3.13-bookworm]
• ghcr.io/astral-sh/uv python3.13-bookworm-slim@sha256:e91a8524945f7bf05a32f81282ce4be695ecd5d1e79eb8345ef25185ea36c87a → [Updates: python3.13-bookworm-slim]

gpu.Dockerfile (3)

• nvidia/cuda 13.0.2-cudnn-devel-ubuntu24.04@sha256:e071e85c52ad91fc9ea24158ff5330876b2d1a5c4ac83ccc6066976835873c01
• ghcr.io/astral-sh/uv latest@sha256:fef8e5fb8809f4b57069e919ffcd1529c92b432a2c8d8ad1768087b0b018d840 → [Updates: latest]
• docker.io/nvidia/cuda 13.0.2-cudnn-runtime-ubuntu24.04@sha256:14d94b039cb94bbd5da559f303b46bc4b0d5d6c24ab1a9d7b186e566ed3400dc

github-actions (4)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2 → [Updates: v2.14.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261

.github/workflows/docker-release.yml (7)

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2 → [Updates: v2.14.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• docker/setup-qemu-action v3.7.0@c7c53464625b32c7a7e944ae62b3e17d2b600130
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/ruff.yml (3)

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2 → [Updates: v2.14.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• astral-sh/ruff-action v3.5.1@57714a7c8a2e59f32539362ba31877a1957dded1

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.13.3@df199fb7be9f65074067a9eb93f12bb4c5547cf2 → [Updates: v2.14.0]
• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v6.0.0]
• github/codeql-action v4.31.6@fe4161a26a8629af62121b670040955b330f9af2 → [Updates: v4.31.9]

pep621 (1)

pyproject.toml (20)

• python ==3.13.9 → [Updates: ==3.14.2]
• fastapi ==0.123.3 → [Updates: ==0.128.0]
• gitpython ==3.1.45 → [Updates: ==3.1.46]
• huggingface-hub ==0.36.0 → [Updates: ==1.2.4]
• prometheus-client ==0.23.1
• pydantic-settings ==2.12.0
• uvicorn ==0.38.0 → [Updates: ==0.40.0]
• ipykernel ==7.1.0
• pre-commit ==4.5.0 → [Updates: ==4.5.1]
• ruff ==0.14.7 → [Updates: ==0.14.10]
• ty ==0.0.1a29 → [Updates: ==0.0.10]
• torch ==2.9.1
• gliner ==0.2.24
• onnxruntime ==1.23.2
• torch ==2.9.1
• gliner ==0.2.24
• onnxruntime-gpu ==1.23.2
• gradio ==5.50.0 → [Updates: ==6.2.0]
• httpx ==0.28.1
• stamina ==25.1.0 → [Updates: ==25.2.0]

pyenv (1)

.python-version (1)

• python 3.13.9 → [Updates: 3.14.2]

---

• Check this box to trigger a request for Renovate to run again on this repository