Bump the python-packages group in /api-server/qna-eval with 20 updates #935

dependabot · 2025-08-11T08:18:39Z

Bumps the python-packages group in /api-server/qna-eval with 20 updates:

Package	From	To
anyio	`4.9.0`	`4.10.0`
charset-normalizer	`3.4.2`	`3.4.3`
huggingface-hub	`0.34.3`	`0.34.4`
lm-format-enforcer	`0.10.11`	`0.11.2`
memray	`1.17.2`	`1.18.0`
nvidia-cudnn-cu12	`9.11.0.98`	`9.12.0.46`
nvidia-ml-py	`12.575.51`	`13.580.65`
nvidia-nccl-cu12	`2.27.6`	`2.27.7`
openai	`1.98.0`	`1.99.6`
outlines	`1.2.0`	`1.2.2`
pydantic-core	`2.37.2`	`2.38.0`
rpds-py	`0.26.0`	`0.27.0`
safetensors	`0.5.3`	`0.6.2`
textual	`5.2.0`	`5.3.0`
tiktoken	`0.9.0`	`0.11.0`
torch	`2.7.1`	`2.8.0`
torchvision	`0.22.1`	`0.23.0`
tornado	`6.5.1`	`6.5.2`
transformers	`4.54.1`	`4.55.0`
virtualenv	`20.33.0`	`20.33.1`

Updates anyio from 4.9.0 to 4.10.0

Release notes

Sourced from anyio's releases.

4.10.0

Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

Added various class methods to wrap existing sockets as listeners or socket streams:

SocketListener.from_socket()

SocketStream.from_socket()

UNIXSocketStream.from_socket()

UDPSocket.from_socket()

ConnectedUDPSocket.from_socket()

UNIXDatagramSocket.from_socket()

ConnectedUNIXDatagramSocket.from_socket()

Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @agronholm and @tapetersen)

Added the ability to specify the thread name in start_blocking_portal() (#818; PR by @davidbrochart)

Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. (#896; PR by @graingert)

Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)

Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's

Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later

Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. (#913; PR by @Enegg)

Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size (#915; PR by @11kkw)

Migrated testing and documentation dependencies from extras to dependency groups

Fixed compatibility of anyio.to_interpreter with Python 3.14.0b2 (#926; PR by @hroncok)

Fixed SyntaxWarning on Python 3.14 about return in finally (#816)

Fixed RunVar name conflicts. RunVar instances with the same name should not share storage (#880; PR by @vimfu)

Renamed the BrokenWorkerIntepreter exception to BrokenWorkerInterpreter. The old name is available as a deprecated alias. (#938; PR by @ayussh-verma)

Fixed an edge case in CapacityLimiter on asyncio where a task, waiting to acquire a limiter gets cancelled and is subsequently granted a token from the limiter, but before the cancellation is delivered, and then fails to notify the next waiting task (#947)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

4.10.0

Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

Added various class methods to wrap existing sockets as listeners or socket streams:

SocketListener.from_socket()

SocketStream.from_socket()

UNIXSocketStream.from_socket()

UDPSocket.from_socket()

ConnectedUDPSocket.from_socket()

UNIXDatagramSocket.from_socket()

ConnectedUNIXDatagramSocket.from_socket()

Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups ([#905](https://github.com/agronholm/anyio/issues/905) <https://github.com/agronholm/anyio/pull/905>_; PR by @agronholm and @tapetersen)

Added the ability to specify the thread name in start_blocking_portal() ([#818](https://github.com/agronholm/anyio/issues/818) <https://github.com/agronholm/anyio/issues/818>_; PR by @davidbrochart)

Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. ([#896](https://github.com/agronholm/anyio/issues/896) <https://github.com/agronholm/anyio/pull/896>_; PR by @graingert)

Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)

Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's

Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later

Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. ([#913](https://github.com/agronholm/anyio/issues/913) <https://github.com/agronholm/anyio/pull/913>_; PR by @Enegg)

Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size ([#915](https://github.com/agronholm/anyio/issues/915) <https://github.com/agronholm/anyio/pull/915>_; PR by @11kkw)

Migrated testing and documentation dependencies from extras to dependency groups

Fixed compatibility of anyio.to_interpreter with Python 3.14.0b2 ([#926](https://github.com/agronholm/anyio/issues/926) <https://github.com/agronholm/anyio/issues/926>_; PR by @hroncok)

Fixed SyntaxWarning on Python 3.14 about return in finally ([#816](https://github.com/agronholm/anyio/issues/816) <https://github.com/agronholm/anyio/issues/816>_)

... (truncated)

Commits

0cf55b8 Bumped up the version
b029df5 Updated the to_interpreter module to use the public API on Python 3.14 (#956)
01f02cf Incorporated EP2025 sprint feedback and added a new section (#955)
d896480 [pre-commit.ci] pre-commit autoupdate (#954)
0282b81 Added the BufferedByteReceiveStream.feed_data() method (#945)
19e5477 Fixed a cancellation edge case for asyncio CapacityLimiter (#952)
4666df3 [pre-commit.ci] pre-commit autoupdate (#946)
38c2567 [pre-commit.ci] pre-commit autoupdate (#942)
3db73ac Add missing imports for Readcting to cancellation in worker threads example (...
2eda004 Added an example on how to use move_on_after() with shielding
Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.3

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Changelog

Sourced from charset-normalizer's changelog.

3.4.3 (2025-08-09)

Changed

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)

automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.

Support for Python 3.14

Fixed

sdist archive contained useless directories.

automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.

Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Commits

46f662d Release 3.4.3 (#638)
1a059b2 🔧 skip building on freethreaded as we're not confident it is stable
2275e3d 📝 final note in CHANGELOG.md
c96acdf 📝 update release date on CHANGELOG.md
43e5460 📝 update README.md
f277074 🔧 automatically lower confidence on small bytes str on non Unicode res...
15ae241 🐛 automatically fallback on valid UTF-16 or UTF-32 even if the md says it...
37397c1 🔧 enable 3.14 in nox test_mypyc session
cb82537 ⏪ revert license due to compat python 3.7 issue setuptools
6a2efeb 🎨 fix linter errors
Additional commits viewable in compare view

Updates huggingface-hub from 0.34.3 to 0.34.4

Release notes

Sourced from huggingface-hub's releases.

[v0.34.4] Support Image to Video inference + QoL in jobs API, auth and utilities

Biggest update is the support of Image-To-Video task with inference provider Fal AI

[Inference] Support image to video task #3289 by @hanouticelina
>>> from huggingface_hub import InferenceClient
>>> client = InferenceClient()
>>> video = client.image_to_video("cat.jpg", model="Wan-AI/Wan2.2-I2V-A14B", prompt="turn the cat into a tiger")
>>> with open("tiger.mp4", "wb") as f:
 ...     f.write(video)
And some quality of life improvements:

Add type to job owner #3291 by @drbh

Include HF_HUB_DISABLE_XET in the environment dump #3290 by @hanouticelina

Whoami: custom message only on unauthorized #3288 by @Wauplin

Add validation warnings for repository limits in upload_large_folder #3280 by @davanstrien

Add timeout info to Jobs guide docs #3281 by @davanstrien

[Jobs] Use current or stored token in a Job secrets #3272 by @lhoestq

Fix bash history expansion in hf jobs example #3277 by @nyuuzyou

Full Changelog: huggingface/huggingface_hub@v0.34.3...v0.34.4

Commits

84a92a9 Release: v0.34.4
6196ac2 Add type to job owner (#3291)
4f6975f Include HF_HUB_DISABLE_XET in the environment dump (#3290)
3720a50 [Inference] Support image to video task (#3289)
bb5e4c7 Whoami: custom message only on unauthorized (#3288)
a725256 Add validation warnings for repository limits in upload_large_folder (#3280)
a181b0f Add timeout info to Jobs guide docs (#3281)
4d38925 [Jobs] Use current or stored token in a Job secrets (#3272)
1580ce1 Fix bash history expansion in hf jobs example (#3277)
See full diff in compare view

Updates lm-format-enforcer from 0.10.11 to 0.11.2

Release notes

Sourced from lm-format-enforcer's releases.

v0.11.2

Minor fixes for vLLM V1 integration

v0.11.1

Added use_bitmask flag to TokenEnforcerTokenizerData which causes the allowed tokens data to be torch tensor bitmask based, for smooth vLLM V1 integration. This is a breaking change if you directly use the TokenEnforcer.get_allowed_tokens() function as its return type has changed.

v0.10.12

Minor improvements required for vLLM V1 Engine support

Changelog

Sourced from lm-format-enforcer's changelog.

v0.11.2

Minor fixes for vLLM V1 integration

v0.11.1

Added use_bitmask flag to TokenEnforcerTokenizerData which causes the allowed tokens data to be torch tensor bitmask based, for smooth vLLM V1 integration. This is a breaking change if you directly use the TokenEnforcer.get_allowed_tokens() function as its return type has changed.

v0.10.12

Ignoring leading ^ / trailing $ in json schema regexes, required for vLLM V1 support

Commits

21b3619 v0.11.2 - Minor fixes for vLLM V1 integration
ec70f01 v0.11.1: Bitmasks (#168)
566a20a Minor improvements for vLLM V1 engine support (#167)
See full diff in compare view

Updates memray from 1.17.2 to 1.18.0

Release notes

Sourced from memray's releases.

v1.18.0

What's Changed

Add Usage Over Time button to topBar by @ruchika2ar in bloomberg/memray#767

Drop wheels for old platforms by @godlygeek in bloomberg/memray#742

Fix a race condition under Textual 3.3.0 by @godlygeek in bloomberg/memray#777

Wheelfix by @abstractedfox in bloomberg/memray#773

Update textual snapshots and update valgrind ignore file by @pablogsal in bloomberg/memray#792

build(deps-dev): bump form-data from 3.0.1 to 3.0.4 by @dependabot[bot] in bloomberg/memray#794

Update test_exercise_3.py by @jcarnaxide in bloomberg/memray#754

Add a timeout to the socket in memray attach by @ZeroIntensity in bloomberg/memray#753

Add modal bar button to download plot data as CSV by @ruchika2ar in bloomberg/memray#769

Hide memory graph button for temporal flamegraph by @ruchika2ar in bloomberg/memray#770

Print peak memory usage for stats reporter by @ruchika2ar in bloomberg/memray#771

Standardize byte amounts to SI units across all reporters by @adesidaseyi in bloomberg/memray#774

build(deps): bump pypa/cibuildwheel from 2.23.2 to 3.1.1 by @dependabot[bot] in bloomberg/memray#795

Enable 32-bit Linux wheel builds with cibuildwheel 3.x by @pablogsal in bloomberg/memray#796

tests: Discover pytest tests only in tests/ by @godlygeek in bloomberg/memray#798

Revise handling of removed profile functions by @godlygeek in bloomberg/memray#803

Support Python 3.14 by @godlygeek in bloomberg/memray#804

attach: Support attaching with sys.remote_exec by @godlygeek in bloomberg/memray#805

Support free threading by @godlygeek in bloomberg/memray#808

build(deps): bump pypa/cibuildwheel from 3.1.1 to 3.1.3 by @dependabot[bot] in bloomberg/memray#806

build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in bloomberg/memray#809

Prepare for 1.18.0 release by @pablogsal in bloomberg/memray#810

New Contributors

@ruchika2ar made their first contribution in bloomberg/memray#767

@abstractedfox made their first contribution in bloomberg/memray#773

@adesidaseyi made their first contribution in bloomberg/memray#774

Full Changelog: bloomberg/memray@v1.17.2...v1.18.0

Changelog

Sourced from memray's changelog.

memray 1.18.0 (2025-08-07)

Features


- Add a button to the flame graph and table reports for downloading a CSV of the source data of the graph showing RSS and heap memory usage over time. ([#769](https://github.com/bloomberg/memray/issues/769))
- Peak memory usage is now included in the stats reporter. ([#771](https://github.com/bloomberg/memray/issues/771))
- Python 3.14 is now supported. ([#804](https://github.com/bloomberg/memray/issues/804))
- ``memray attach`` now supports attaching to a process using the new built-in ``sys.remote_exec`` when running in Python 3.14, rather than needing to use a debugger to inject itself. Since this is faster and safer, it is the new default, but you can still use the old methods by passing ``--method=gdb`` or ``--method=lldb`` to ``memray attach``. ([#805](https://github.com/bloomberg/memray/issues/805))
- Free-threaded builds of Python 3.14 are now supported. ([#808](https://github.com/bloomberg/memray/issues/808))
Deprecations and Removals

We no longer provide musllinux_1_1 wheels. Previously they were provided for Python 3.7 through 3.13, now we provide musllinux_1_2 wheels for those Python versions instead. The manylinux project dropped support for musllinux_1_1 on November 1st, 2024. (#742)
We no longer provide manylinux2010 wheels. Previously they were provided for Python 3.7 through 3.12, now we provide manylinux2014 wheels for those Python versions instead. The manylinux project dropped support for manylinux2010 on August 1st, 2022. (#742)

Bug Fixes


- Update all Memray reporters to consistently use kilobytes rather than kibibytes and ensure that the proper SI unit labels are used. ([#774](https://github.com/bloomberg/memray/issues/774))
- Fix a bug that could have resulted in a use-after-free in a program where Memray's profile hooks were uninstalled by a call to ``PyEval_SetProfileAllThreads``. ([#803](https://github.com/bloomberg/memray/issues/803))
- Fix a potential use-after-free bug in ``memray attach``. ([#808](https://github.com/bloomberg/memray/issues/808))

Commits

c57be78 Prepare for 1.18.0 release
5bd58bb build(deps): bump actions/download-artifact from 4 to 5
894fde9 build(deps): bump pypa/cibuildwheel from 3.1.1 to 3.1.3
d2f71f7 ci: Produce wheels for free-threaded Python 3.14
a742c94 tests: Declare extensions support free-threading
2bcaca3 attach: Ensure --duration thread is non-daemon
bf689c4 Stop the world to fetch threads' initial stacks
eb32e97 flamegraph: Fix title of empty temporal report
9458f4b Recognize and handle the mimalloc allocator
aed27b6 tests: Make PYTHONMALLOC=malloc optional
Additional commits viewable in compare view

Updates nvidia-cudnn-cu12 from 9.11.0.98 to 9.12.0.46

Updates nvidia-ml-py from 12.575.51 to 13.580.65

Updates nvidia-nccl-cu12 from 2.27.6 to 2.27.7

Updates openai from 1.98.0 to 1.99.6

Release notes

Sourced from openai's releases.

v1.99.6

1.99.6 (2025-08-09)

Full Changelog: v1.99.5...v1.99.6

Bug Fixes

types: re-export more tool call types (8fe5741)

Chores

internal: update comment in script (e407bb5)

update @stainless-api/prism-cli to v5.15.0 (a1883fc)

v1.99.5

1.99.5 (2025-08-08)

Full Changelog: v1.99.4...v1.99.5

Bug Fixes

client: fix verbosity parameter location in Responses (2764ff4)

v1.99.4

1.99.4 (2025-08-08)

Full Changelog: v1.99.3...v1.99.4

Bug Fixes

types: rename chat completion tool (8d3bf88)

types: revert ChatCompletionToolParam to a TypedDict (3f4ae72)

v1.99.3

1.99.3 (2025-08-07)

Full Changelog: v1.99.2...v1.99.3

Bug Fixes

responses: add output_text back (585a4f1)

v1.99.2

1.99.2 (2025-08-07)

Full Changelog: v1.99.1...v1.99.2

Features

... (truncated)

Changelog

Sourced from openai's changelog.

1.99.6 (2025-08-09)

Full Changelog: v1.99.5...v1.99.6

Bug Fixes

types: re-export more tool call types (8fe5741)

Chores

internal: update comment in script (e407bb5)

update @stainless-api/prism-cli to v5.15.0 (a1883fc)

1.99.5 (2025-08-08)

Full Changelog: v1.99.4...v1.99.5

Bug Fixes

client: fix verbosity parameter location in Responses (2764ff4)

1.99.4 (2025-08-08)

Full Changelog: v1.99.3...v1.99.4

Bug Fixes

types: rename chat completion tool (8d3bf88)

types: revert ChatCompletionToolParam to a TypedDict (3f4ae72)

1.99.3 (2025-08-07)

Full Changelog: v1.99.2...v1.99.3

Bug Fixes

responses: add output_text back (585a4f1)

1.99.2 (2025-08-07)

Full Changelog: v1.99.1...v1.99.2

Features

api: adds GPT-5 and new API features: platform.openai.com/docs/guides/gpt-5 (ed370d8)

Bug Fixes

... (truncated)

Commits

4d8c14c release: 1.99.6
4df1261 chore(internal): update comment in script
5dc3476 chore: update @stainless-api/prism-cli to v5.15.0
52c48df fix(types): re-export more tool call types
7aa3c78 release: 1.99.5
f4e41b8 fix(client): fix verbosity parameter location in Responses
09f98ac release: 1.99.4
05a35a5 fix(types): revert ChatCompletionToolParam to a TypedDict
458a542 fix(types): rename chat completion tool
2ae42a3 codegen metadata
Additional commits viewable in compare view

Updates outlines from 1.2.0 to 1.2.2

Release notes

Sourced from outlines's releases.

Outlines v1.2.2

What's Changed

Fix a bug in the outlines_core backend for the Transformers model about the token to string conversion by @RobinPicard in dottxt-ai/outlines#1716

Fix a bug regarding the eos_token in the LlamaCpp tokenizer by @RobinPicard in dottxt-ai/outlines#1712

Fix a bug related to the device of the bitmasks for torch tensors by @RobinPicard in dottxt-ai/outlines#1714

Full Changelog: dottxt-ai/outlines@1.2.1...1.2.2

Outlines v1.2.1

What's Changed

Create our own logits processor for Xgrammar, add support for mlx by @RobinPicard in dottxt-ai/outlines#1706

Turn tokens into strings before building the Outlines-Core Vocabulary by @RobinPicard in dottxt-ai/outlines#1707

Full Changelog: dottxt-ai/outlines@1.2.0...1.2.1

Commits

8cecc55 Fix bug related to the device of the bitmasks and logits for torch
446700e Fix a bug regarding the eos_token in the LlamaCpp tokenizer
a8464ac Fix bug in outlines_core for transformers about token-str conversion
a04b941 Turn tokens into strings before building the Outlines-Core Vocabulary
b81c918 Create our own logits processor for Xgrammar, add support for mlx
See full diff in compare view

Updates pydantic-core from 2.37.2 to 2.38.0

Release notes

Sourced from pydantic-core's releases.

v2.38.0 2025-08-04

What's Changed

Switch to PEP 639 license information by @Viicos in pydantic/pydantic-core#1769

Simplify ValidationError.from_exception_data() docstring by @kinuax in pydantic/pydantic-core#1768

feat: make TzInfo instantiable without any arguments by @PrettyWood in pydantic/pydantic-core#1777

fix: make everything work on nightly by @PrettyWood in pydantic/pydantic-core#1776

Bump serde_json from 1.0.140 to 1.0.142 by @dependabot[bot] in pydantic/pydantic-core#1772

Build wheels for GraalPy by @msimacek in pydantic/pydantic-core#1771

bump speedate to 0.17 by @davidhewitt in pydantic/pydantic-core#1778

Implement val_temporal_unit for deciding how datetimes and dates timestamps get validated. by @ollz272 in pydantic/pydantic-core#1751

New Contributors

@kinuax made their first contribution in pydantic/pydantic-core#1768

@msimacek made their first contribution in pydantic/pydantic-core#1771

Full Changelog: pydantic/pydantic-core@v2.37.2...v2.38.0

Commits

57e4411 release: 2.38.0 (#1779)
a1b8757 Implement val_temporal_unit for deciding how datetimes and dates timestamps g...
4c4ac6e bump speedate to 0.17 (#1778)
46796b6 Build wheels for GraalPy (#1771)
1a945f6 Bump serde_json from 1.0.140 to 1.0.142 (#1772)
1ea1fef fix: make everything work on nightly (#1776)
68a1e7b feat: make TzInfo instantiable without any arguments (#1777)
1b3815c Benchmarks for perf (#1756)
04b296b Simplify ValidationError.from_exception_data() docstring (#1768)
550ee16 Switch to PEP 639 license information (#1769)
Additional commits viewable in compare view

Updates rpds-py from 0.26.0 to 0.27.0

Release notes

Sourced from rpds-py's releases.

v0.27.0

What's Changed

Bump astral-sh/setup-uv from 6.3.1 to 6.4.1 by @dependabot[bot] in crate-py/rpds#148

Bump github/codeql-action from 3.29.2 to 3.29.3 by @dependabot[bot] in crate-py/rpds#149

Allow packaging of wheels for riscv64 architecture by @ffgan in crate-py/rpds#150

New Contributors

@ffgan made their first contribution in crate-py/rpds#150

Full Changelog: crate-py/rpds@v0.26.0...v0.27.0

Commits

c7cd37d Tag a release for RISC
7adac99 Merge pull request #150 from ffgan/feature/allow_riscv_package
439ad44 fix format error
2091f27 downgrade riscv64 manylinux version
29a539f Merge branch 'crate-py:main' into feature/allow_riscv_package
7546f2d Allow packaging of wheels for riscv64 architecture
8ede3f4 Merge pull request #149 from crate-py/dependabot/github_actions/github/codeql...
0840694 Merge pull request #148 from crate-py/dependabot/github_actions/astral-sh/set...
725aabe Bump github/codeql-action from 3.29.2 to 3.29.3
db4a842 Bump astral-sh/setup-uv from 6.3.1 to 6.4.1
See full diff in compare view

Updates safetensors from 0.5.3 to 0.6.2

Release notes

Sourced from safetensors's releases.

v0.6.2

What's Changed

Fixing clippy in 1.89 by @Narsil in huggingface/safetensors#644

Fixing the version check for uint support in torch. by @Narsil in huggingface/safetensors#643

Full Changelog: huggingface/safetensors@v0.6.1...v0.6.2

v0.6.1

What's Changed

Rust release upgrade (cache v1 is discontinued). by @Narsil in huggingface/safetensors#627

Re-adding support for u16, u32, u64. by @Narsil in huggingface/safetensors#629

Adding _safe_open_handle. by @Narsil in huggingface/safetensors#608

Fix test_simple.py for 0.6.0 by @xanderlent in huggingface/safetensors#634

GH action... once again. by @Narsil in huggingface/safetensors#635

Preparing for patch 6.0.1. by @Narsil in huggingface/safetensors#638

New Contributors

@xanderlent made their first contribution in huggingface/safetensors#634

Full Changelog: huggingface/safetensors@v0.6.0...v0.6.1

v0.6.1-rc0

What's Changed

Rust release upgrade (cache v1 is discontinued). by @Narsil in huggingface/safetensors#627

Re-adding support for u16, u32, u64. by @Narsil in huggingface/safetensors#629

Adding _safe_open_handle. by @Narsil in huggingface/safetensors#608

Fix test_simple.py for 0.6.0 by @xanderlent in huggingface/safetensors#634

GH action... once again. by @Narsil in huggingface/safetensors#635

Preparing for patch 6.0.1. by @Narsil in huggingface/safetensors#638

New Contributors

@xanderlent made their first contribution in huggingface/safetensors#634

Full Changelog: huggingface/safetensors@v0.6.0...v0.6.1-rc0

v0.6.0

Biggest changes

Added support for FP4/FP6 https://www.opencompute.org/documents/ocp-microscaling-formats-mx-v1-0-spec-final-pdf Support is still nascent in most frameworks (will require torch 2.8 which isn't released yet, and that will only support fp4 with caveats), however being an openspec supported by hardware manufacturers (and therefore hardware support most likely), it fits the bill of implementing it in safetensors (rather than all custom quantized formats existing in the wild in various frameworks.

What FP4/FP6 mean, is that now a element of a tensor may have a non byte-aligned size/access. If you store a single fp4, then there is 4 bit on that byte that is outside of the spec. For now, safetensors library will simply raise MisalignedByte exception whenever an operation leads to unused/unaligned bits within a byte. Since most tensors are larger power of 2s, this shouldn't come up too often in practice. Raising an exception now means we have freedom later to actually implement a behavior which could align with tensor libraries.

In that regard Dtype.size() is now deprecated, as it returns the size of the dtype in bytes, and we now favor bitsize() and it's up to users for now to handle something like len * bitsize() / 8 (and verifying the division is acceptable)

On that note, and for Pytorch users specifically, torch doesn't actually implement fp4, it has a dtype called float4_e2m1fn_x2 which actually represents 2 fp4. This is why torch shouldn't have any alignement problems for now (but cannot implement fp6). But that also means that the shape of a [2, 2] tensor for floa4, contains actually 8 values. safetensors will actuallly silently cast a tensor of shape, [x, y, ...z] into [x, y, ..., z/2], using the last dimension to "swallow" , the x2 contained within the types. Again, there is no definite behavior just yet, so this might be subject to change.

What's Changed

Add safestructures to Featured Projects by @rachthree in huggingface/safetensors#570

... (truncated)

Commits

aa6c43d Patch release 0.6.2
2b25340 Fixing the version check for uint support in torch. (#643)
5eecd29 Fixing clippy in 1.89 (#644)
94f5d38 Preparing for patch 6.0.1. (#638)
b9ccdc6 GH action... once again. (#635)
7dfa63c Fix test_simple.py for 0.6.0 (#634)
48933f3 Adding _safe_open_handle. (#608)
8814598 Re-adding support for u16, u32, u64. (#629)
6544bf2Description has been truncated

Bumps the python-packages group in /api-server/qna-eval with 20 updates: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.9.0` | `4.10.0` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.4.3` | | [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.34.3` | `0.34.4` | | [lm-format-enforcer](https://github.com/noamgat/lm-format-enforcer) | `0.10.11` | `0.11.2` | | [memray](https://github.com/bloomberg/memray) | `1.17.2` | `1.18.0` | | [nvidia-cudnn-cu12](https://developer.nvidia.com/cuda-zone) | `9.11.0.98` | `9.12.0.46` | | [nvidia-ml-py](https://forums.developer.nvidia.com) | `12.575.51` | `13.580.65` | | [nvidia-nccl-cu12](https://developer.nvidia.com/cuda-zone) | `2.27.6` | `2.27.7` | | [openai](https://github.com/openai/openai-python) | `1.98.0` | `1.99.6` | | [outlines](https://github.com/dottxt-ai/outlines) | `1.2.0` | `1.2.2` | | [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.37.2` | `2.38.0` | | [rpds-py](https://github.com/crate-py/rpds) | `0.26.0` | `0.27.0` | | [safetensors](https://github.com/huggingface/safetensors) | `0.5.3` | `0.6.2` | | [textual](https://github.com/Textualize/textual) | `5.2.0` | `5.3.0` | | [tiktoken](https://github.com/openai/tiktoken) | `0.9.0` | `0.11.0` | | [torch](https://github.com/pytorch/pytorch) | `2.7.1` | `2.8.0` | | [torchvision](https://github.com/pytorch/vision) | `0.22.1` | `0.23.0` | | [tornado](https://github.com/tornadoweb/tornado) | `6.5.1` | `6.5.2` | | [transformers](https://github.com/huggingface/transformers) | `4.54.1` | `4.55.0` | | [virtualenv](https://github.com/pypa/virtualenv) | `20.33.0` | `20.33.1` | Updates `anyio` from 4.9.0 to 4.10.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst) - [Commits](agronholm/anyio@4.9.0...4.10) Updates `charset-normalizer` from 3.4.2 to 3.4.3 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.2...3.4.3) Updates `huggingface-hub` from 0.34.3 to 0.34.4 - [Release notes](https://github.com/huggingface/huggingface_hub/releases) - [Commits](huggingface/huggingface_hub@v0.34.3...v0.34.4) Updates `lm-format-enforcer` from 0.10.11 to 0.11.2 - [Release notes](https://github.com/noamgat/lm-format-enforcer/releases) - [Changelog](https://github.com/noamgat/lm-format-enforcer/blob/main/CHANGELOG.md) - [Commits](noamgat/lm-format-enforcer@v0.10.11...v0.11.2) Updates `memray` from 1.17.2 to 1.18.0 - [Release notes](https://github.com/bloomberg/memray/releases) - [Changelog](https://github.com/bloomberg/memray/blob/main/NEWS.rst) - [Commits](bloomberg/memray@v1.17.2...v1.18.0) Updates `nvidia-cudnn-cu12` from 9.11.0.98 to 9.12.0.46 Updates `nvidia-ml-py` from 12.575.51 to 13.580.65 Updates `nvidia-nccl-cu12` from 2.27.6 to 2.27.7 Updates `openai` from 1.98.0 to 1.99.6 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v1.98.0...v1.99.6) Updates `outlines` from 1.2.0 to 1.2.2 - [Release notes](https://github.com/dottxt-ai/outlines/releases) - [Commits](dottxt-ai/outlines@1.2.0...1.2.2) Updates `pydantic-core` from 2.37.2 to 2.38.0 - [Release notes](https://github.com/pydantic/pydantic-core/releases) - [Commits](pydantic/pydantic-core@v2.37.2...v2.38.0) Updates `rpds-py` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/crate-py/rpds/releases) - [Commits](crate-py/rpds@v0.26.0...v0.27.0) Updates `safetensors` from 0.5.3 to 0.6.2 - [Release notes](https://github.com/huggingface/safetensors/releases) - [Changelog](https://github.com/huggingface/safetensors/blob/main/RELEASE.md) - [Commits](huggingface/safetensors@v0.5.3...v0.6.2) Updates `textual` from 5.2.0 to 5.3.0 - [Release notes](https://github.com/Textualize/textual/releases) - [Changelog](https://github.com/Textualize/textual/blob/main/CHANGELOG.md) - [Commits](Textualize/textual@v5.2.0...v5.3.0) Updates `tiktoken` from 0.9.0 to 0.11.0 - [Release notes](https://github.com/openai/tiktoken/releases) - [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md) - [Commits](openai/tiktoken@0.9.0...0.11.0) Updates `torch` from 2.7.1 to 2.8.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.7.1...v2.8.0) Updates `torchvision` from 0.22.1 to 0.23.0 - [Release notes](https://github.com/pytorch/vision/releases) - [Commits](pytorch/vision@v0.22.1...0.23.0) Updates `tornado` from 6.5.1 to 6.5.2 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.1...v6.5.2) Updates `transformers` from 4.54.1 to 4.55.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@4.54.1...v4.55.0) Updates `virtualenv` from 20.33.0 to 20.33.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.33.0...20.33.1) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: charset-normalizer dependency-version: 3.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: huggingface-hub dependency-version: 0.34.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: lm-format-enforcer dependency-version: 0.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: memray dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: nvidia-cudnn-cu12 dependency-version: 9.12.0.46 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: nvidia-ml-py dependency-version: 13.580.65 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: nvidia-nccl-cu12 dependency-version: 2.27.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: openai dependency-version: 1.99.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: outlines dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pydantic-core dependency-version: 2.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: rpds-py dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: safetensors dependency-version: 0.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: textual dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: tiktoken dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: torch dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: torchvision dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: tornado dependency-version: 6.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: transformers dependency-version: 4.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: virtualenv dependency-version: 20.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 11, 2025

s-akhtar-baig merged commit 47bc7d6 into main Aug 12, 2025
10 checks passed

s-akhtar-baig deleted the dependabot/pip/api-server/qna-eval/python-packages-0f47b0dfa1 branch August 12, 2025 21:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the python-packages group in /api-server/qna-eval with 20 updates #935

Bump the python-packages group in /api-server/qna-eval with 20 updates #935

Uh oh!

dependabot bot commented on behalf of github Aug 11, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the python-packages group in /api-server/qna-eval with 20 updates #935

Bump the python-packages group in /api-server/qna-eval with 20 updates #935

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 11, 2025

4.10.0

Version history

Version 3.4.3

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

3.4.3 (2025-08-09)

Changed

Added

Fixed

Misc

[v0.34.4] Support Image to Video inference + QoL in jobs API, auth and utilities

v0.11.2

v0.11.1

v0.10.12

v0.11.2

v0.11.1

v0.10.12

v1.18.0

What's Changed

New Contributors

memray 1.18.0 (2025-08-07)

v1.99.6

1.99.6 (2025-08-09)

Bug Fixes

Chores

v1.99.5

1.99.5 (2025-08-08)

Bug Fixes

v1.99.4

1.99.4 (2025-08-08)

Bug Fixes

v1.99.3

1.99.3 (2025-08-07)

Bug Fixes

v1.99.2

1.99.2 (2025-08-07)

Features

1.99.6 (2025-08-09)

Bug Fixes

Chores

1.99.5 (2025-08-08)

Bug Fixes

1.99.4 (2025-08-08)

Bug Fixes

1.99.3 (2025-08-07)

Bug Fixes

1.99.2 (2025-08-07)

Features

Bug Fixes

Outlines v1.2.2

What's Changed

Outlines v1.2.1

What's Changed

v2.38.0 2025-08-04

What's Changed

New Contributors

v0.27.0

What's Changed

New Contributors

v0.6.2

What's Changed

v0.6.1

What's Changed

New Contributors

v0.6.1-rc0

What's Changed

New Contributors

v0.6.0

Biggest changes

What's Changed

Uh oh!

Uh oh!