Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies
• chore(deps): pin ghcr.io/freinold/gliner-api docker tag to 33e69e0
• chore(deps): update python docker tag to v3.14.6
• chore(deps): update github actions dependencies (actions/cache, astral-sh/ruff-action, docker/build-push-action, docker/login-action, docker/setup-buildx-action, docker/setup-qemu-action, github/codeql-action, step-security/harden-runner)
• fix(deps): update python: non-major updates (fastapi, gitpython, gradio, huggingface-hub, ruff, torch, ty, uvicorn)
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

compose.yaml (1)

• ghcr.io/freinold/gliner-api latest → [Updates: latest]

dockerfile (1)

Dockerfile (2)

• ghcr.io/astral-sh/uv python3.13-trixie → [Updates: python3.13-trixie]
• ghcr.io/astral-sh/uv python3.13-trixie-slim → [Updates: python3.13-trixie-slim]

github-actions (4)

.github/workflows/dependency-review.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

.github/workflows/docker-release.yml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• docker/setup-qemu-action v4.1.0@06116385d9baf250c9f4dcb4858b16962ea869c3 → [Updates: v4.2.0]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• actions/cache v6.0.0@2c8a9bd7457de244a408f35966fab2fb45fda9c8 → [Updates: v6.1.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]

.github/workflows/ruff.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• astral-sh/ruff-action v4.0.0@0ce1b0bf8b818ef400413f810f8a11cdbda0034b → [Updates: v4.1.0]

.github/workflows/scorecard.yml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411 → [Updates: v2.20.0]
• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4.37.0]

pep621 (1)

pyproject.toml (17)

• python ==3.14.5 → [Updates: ==3.14.6]
• fastapi ==0.138.0 → [Updates: ==0.139.0]
• gitpython ==3.1.50 → [Updates: ==3.1.51]
• huggingface-hub ==1.20.1 → [Updates: ==1.23.0]
• prometheus-client ==0.25.0
• pydantic-settings ==2.14.2
• uvicorn ==0.49.0 → [Updates: ==0.51.0]
• torch ==2.12.1 → [Updates: ==2.13.0]
• gliner ==0.2.27
• onnxruntime ==1.27.0
• gradio ==6.19.0 → [Updates: ==6.20.0]
• httpx ==0.28.1
• stamina ==26.1.0
• ipykernel ==7.3.0
• pre-commit ==4.6.0
• ruff ==0.15.19 → [Updates: ==0.15.21]
• ty ==0.0.53 → [Updates: ==0.0.59]

pyenv (1)

.python-version (1)

• python 3.14.5 → [Updates: 3.14.6]

---

• Check this box to trigger a request for Renovate to run again on this repository