Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update patch dependencies (ruff, ty)
• fix(deps): update minor dependencies (huggingface-hub, step-security/harden-runner)
• fix(deps): update astral-sh/setup-uv action to v10
• fix(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/bot-governance.yml

.github/workflows/cd.yml (13)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• n24q02m/better-semantic-release v1.3.0@c6051539169a3434b4739ddce1a88a56c50f2b53
• n24q02m/better-semantic-release v1.3.0@c6051539169a3434b4739ddce1a88a56c50f2b53
• python-semantic-release/publish-action v10.6.1@5a5718ce47b892ef699f2972dae122297771d641
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9 → [Updates: v10.0.1]
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1

.github/workflows/ci.yml (12)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9 → [Updates: v10.0.1]
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• dawidd6/action-send-mail v18@94de994a9f6fffee200243214e17002e2920bb59
• astral-sh/uv latest
• python ${{ matrix.python-version }}

.github/workflows/integration.yml (8)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9 → [Updates: v10.0.1]
• actions/setup-python v7.0.0@5fda3b95a4ea91299a34e894583c3862153e4b97
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• astral-sh/uv latest
• python 3.13

.github/workflows/opencode.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• anomalyco/opencode latest@77fc88c8ade8e5a620ebbe1197f3a572d29ae91a

.github/workflows/pr-title.yml (2)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40 → [Updates: v2.21.0]
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

mise (1)

.mise.toml

pep621 (1)

pyproject.toml (15)

• numpy >=2.4.6,<2.5
• onnxruntime >1.20.0
• tqdm >=4.70.0
• requests >=2.34.2
• tokenizers >=0.23.1,<1.0
• huggingface-hub >=1.27.0,<2.0 → [Updates: >=1.28.0,<2.0]
• loguru >=0.7.3
• pytest >=9.1.1
• pytest-cov >=7.1.0
• pytest-xdist >=3.8.0
• pytest-timeout >=2.4.0
• syrupy >=5.5.3
• ruff >=0.16.1 → [Updates: >=0.16.2]
• ty >=0.0.65 → [Updates: >=0.0.71]
• llama-cpp-python >=0.3.34 → [Updates: >=0.3.35]

---

• Check this box to trigger a request for Renovate to run again on this repository