Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/coderamp-labs/gitingest). ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] chore(deps): update docker/setup-qemu-action action to v3.7.0 - [ ] chore(deps): update ytanikin/pr-conventional-commits action to v1.5.2 - [ ] chore(deps): update actions/attest-build-provenance action to v4 - [ ] chore(deps): update actions/cache action to v6 - [ ] chore(deps): update actions/checkout action to v7 - [ ] chore(deps): update actions/create-github-app-token action to v3 - [ ] chore(deps): update actions/dependency-review-action action to v5 - [ ] chore(deps): update actions/setup-python action to v7 - [ ] chore(deps): update actions/stale action to v11 - [ ] chore(deps): update aws-actions/configure-aws-credentials action to v6 - [ ] chore(deps): update docker/build-push-action action to v7 - [ ] chore(deps): update docker/login-action action to v4 - [ ] chore(deps): update docker/metadata-action action to v6 - [ ] chore(deps): update docker/setup-buildx-action action to v4 - [ ] chore(deps): update docker/setup-qemu-action action to v4 - [ ] chore(deps): update github artifact actions (major) (`actions/download-artifact`, `actions/upload-artifact`) - [ ] chore(deps): update github/codeql-action action to v4 - [ ] chore(deps): update googleapis/release-please-action action to v5 - [ ] **Create all rate-limited PRs at once** ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update pypa/gh-action-pypi-publish digest to dc37677](../pull/572) - [ ] [chore(deps): update actions/checkout action to v5.1.0](../pull/563) - [ ] [chore(deps): update actions/dependency-review-action action to v4.9.0](../pull/519) - [ ] [chore(deps): update dependency python to v3.14.7](../pull/500) - [ ] [chore(deps): update docker/build-push-action action to v6.19.2](../pull/567) - [ ] [chore(deps): update docker/login-action action to v3.7.0](../pull/535) - [ ] [chore(deps): update docker/metadata-action action to v5.10.0](../pull/597) - [ ] [chore(deps): update docker/setup-buildx-action action to v3.12.0](../pull/598) - [ ] [chore(deps): update github/codeql-action action to v3.38.0](../pull/518) - [ ] [chore(deps): update step-security/harden-runner action to v2.21.1](../pull/528) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies docker-compose (1)

compose.yml

dockerfile (1)

Dockerfile (2) - `python 3.13.5-slim@sha256:4c2cf9917bd1cbacc5e9b07320025bdb7cdf2df7b0ceaccb55e9dd7e30987419` → [Updates: `3.14.7-slim`] - `python 3.13.5-slim@sha256:4c2cf9917bd1cbacc5e9b07320025bdb7cdf2df7b0ceaccb55e9dd7e30987419` → [Updates: `3.14.7-slim`]

github-actions (12)

.github/workflows/ci.yml (5) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7.0.0`] - `actions/cache v4` → [Updates: `v6`] - `pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd` .github/workflows/codeql.yml (5) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2` → [Updates: `v3.38.0`, `v4.38.0`] - `github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2` → [Updates: `v3.38.0`, `v4.38.0`] - `github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2` → [Updates: `v3.38.0`, `v4.38.0`] .github/workflows/dependency-review.yml (3) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `actions/dependency-review-action v4.7.1@da24556b548a50705dd671f47852072ea4c105d9` → [Updates: `v4.9.0`, `v5.0.0`] .github/workflows/deploy-pr.yml (6) - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `thollander/actions-comment-pull-request v3` - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `thollander/actions-comment-pull-request v3` .github/workflows/docker-build.ecr.yml (7) - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `aws-actions/configure-aws-credentials v4` → [Updates: `v6`] - `aws-actions/amazon-ecr-login v2` - `docker/metadata-action v5` → [Updates: `v6`] - `docker/setup-qemu-action v3` → [Updates: `v4`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/build-push-action v6` → [Updates: `v7`] .github/workflows/docker-build.ghcr.yml (8) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `docker/login-action v3.5.0@184bdaa0721073962dff0199f1fb9940f07167d1` → [Updates: `v3.7.0`, `v4.6.0`] - `docker/metadata-action v5.8.0@c1e51972afc2121e065aed6d45c65596fe445f3f` → [Updates: `v5.10.0`, `v6.2.0`] - `docker/setup-qemu-action v3.6.0@29109295f81e9208d7d86ff1c6c12d2833863392` → [Updates: `v3.7.0`, `v4.4.0`] - `docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435` → [Updates: `v3.12.0`, `v4.4.1`] - `docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83` → [Updates: `v6.19.2`, `v7.4.0`] - `actions/attest-build-provenance v2.4.0@e8998f949152b193b063cb0ec769d69d929409be` → [Updates: `v4.2.2`] .github/workflows/pr-title-check.yml (2) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `ytanikin/pr-conventional-commits 1.4.2@b72758283dcbee706975950e96bc4bf323a8d8c0` → [Updates: `1.5.2`] .github/workflows/publish_to_pypi.yml (8) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `actions/setup-python v5.6.0@a26af69be951a213d495a4c3e4e4022e16d87065` → [Updates: `v7.0.0`] - `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.1`] - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0` → [Updates: `v8.0.1`] - `pypa/gh-action-pypi-publish release/v1@76f52bc884231f62b9a034ebfe128415bbaabdfc` → [Updates: `release/v1`] - `python 3.13` → [Updates: `3.14`] .github/workflows/rebase-needed.yml (1) - `eps1lon/actions-label-merge-conflict v3` .github/workflows/release-please.yml (3) - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `googleapis/release-please-action v4` → [Updates: `v5`] .github/workflows/scorecard.yml (3) - `step-security/harden-runner v2.13.0@ec9f2d5744a09debf3a187a3f4f675c53b671911` → [Updates: `v2.21.1`] - `actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v5.1.0`, `v7.0.1`] - `github/codeql-action v3.29.9@df559355d593797519d70b90fc8edd5db049e7a2` → [Updates: `v3.38.0`, `v4.38.0`] .github/workflows/stale.yml (1) - `actions/stale v9` → [Updates: `v11`]

pip_requirements (2)

requirements-dev.txt requirements.txt (8) - `boto3 >=1.28.0` - `click >=8.0.0` - `fastapi >=0.109.1` - `loguru >=0.7.0` - `pathspec >=0.12.1` - `starlette >=0.40.0` - `tiktoken >=0.7.0` - `uvicorn >=0.11.7`

poetry (1)

pyproject.toml (10) - `click >=8.0.0` - `gitpython >=3.1.0` - `loguru >=0.7.0` - `pathspec >=0.12.1` - `starlette >=0.40.0` - `tiktoken >=0.7.0` - `typing_extensions >= 4.0.0` - `boto3 >=1.28.0` - `fastapi >=0.109.1` - `uvicorn >=0.11.7`

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository