Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update python docker tag to v3.14.6
• fix(deps): update python: non-major updates (fastapi, gradio, huggingface-hub, ipykernel, ruff, ty, uvicorn)
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github actions dependencies (actions/checkout, docker/setup-qemu-action, github/codeql-action)
• chore(deps): update dockerfile base images (docker.io/nvidia/cuda, ghcr.io/astral-sh/uv, nvidia/cuda)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

cpu.Dockerfile (2)

• ghcr.io/astral-sh/uv python3.13-bookworm@sha256:47965cdc9d53a515f68f78241161c901e70051ce428f12e791bd7fe19f6a631a
• ghcr.io/astral-sh/uv python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca

gpu.Dockerfile (3)

• nvidia/cuda 13.2.1-cudnn-devel-ubuntu24.04@sha256:6435dc5a825b0095648d87a3c91240fd7788a85fafaf215739544d389ab74366 → [Updates: 13.3.0-cudnn-devel-ubuntu24.04]
• ghcr.io/astral-sh/uv latest@sha256:440fd6477af86a2f1b38080c539f1672cd22acb1b1a47e321dba5158ab08864d → [Updates: latest]
• docker.io/nvidia/cuda 13.2.1-cudnn-runtime-ubuntu24.04@sha256:1c0c68dbf3258d32b446a02cb4be05c8478b65d320d7856ad33c4bbdf898ca86 → [Updates: 13.3.0-cudnn-runtime-ubuntu24.04]

github-actions (4)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docker-release.yml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• docker/setup-qemu-action v4.0.0@ce360397dd3f832beb865e1373c09c0e9f86d70a → [Updates: v4.1.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf

.github/workflows/ruff.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• astral-sh/ruff-action v4.0.0@0ce1b0bf8b818ef400413f810f8a11cdbda0034b

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.0@7211b7c8077ea37d8641b6271f6a365a22a5fbfa → [Updates: v4.36.2]

pep621 (1)

pyproject.toml (20)

• python ==3.14.5 → [Updates: ==3.14.6]
• fastapi ==0.136.3 → [Updates: ==0.137.0]
• gitpython ==3.1.50
• huggingface-hub ==1.16.4 → [Updates: ==1.19.0]
• prometheus-client ==0.25.0
• pydantic-settings ==2.14.1
• uvicorn ==0.48.0 → [Updates: ==0.49.0]
• ipykernel ==7.2.0 → [Updates: ==7.3.0]
• pre-commit ==4.6.0
• ruff ==0.15.14 → [Updates: ==0.15.17]
• ty ==0.0.39 → [Updates: ==0.0.49]
• torch ==2.12.0
• gliner ==0.2.26
• onnxruntime ==1.26.0
• torch ==2.12.0
• gliner ==0.2.26
• onnxruntime-gpu ==1.26.0
• gradio ==6.15.0 → [Updates: ==6.18.0]
• httpx ==0.28.1
• stamina ==26.1.0

pyenv (1)

.python-version (1)

• python 3.14.5 → [Updates: 3.14.6]

---

• Check this box to trigger a request for Renovate to run again on this repository