Skip to content

deps: bump the runtime group across 1 directory with 8 updates - #30

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/runtime-de914492fb
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/runtime-de914492fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •

Copy link
Copy Markdown

Bumps the runtime group with 8 updates in the / directory:

Package From To
typer 0.26.8 0.27.1
torch 2.12.1 2.13.0
transformers 5.13.0 5.15.0
datasets 5.0.0 5.0.1
huggingface-hub 1.22.0 1.27.0
pypdf 5.9.0 6.15.0
langchain-text-splitters 0.3.11 1.1.2
gradio 6.20.0 6.22.0

Updates typer from 0.26.8 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0

Breaking Changes

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates torch from 2.12.1 to 2.13.0

Release notes

Sourced from torch's releases.

PyTorch 2.13.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Tracked Regressions

ROCm wheels break torch.compile on CPU in environments without a GPU

Running a torch==2.13.0+rocm7.2 wheel in an environment where no GPU is available (torch.cuda.is_available() is False) breaks torch.compile on the CPU path: the first compile raises RuntimeError: Can't detect vectorized ISA for CPU (#189194). This is a regression from torch==2.12.1+rocm7.2, which compiles CPU code fine (detecting e.g. VecAVX2) in the same setup. The 2.13 ROCm wheel appears to rely on something present in the ROCm builder image to detect the CPU vectorized ISA, so it works when run on a ROCm image but fails on a plain CPU-only image.

Workaround: run the +rocm wheel on a ROCm image, or install a standard CPU/CUDA build for GPU-less environments.

Backwards Incompatible Changes

  • Stop building CPython 3.13t (free-threaded) binaries (#182951)

    Upstream pypa/manylinux removed CPython 3.13t (free-threaded) on 2026-05-07, because 3.13t was experimental and has been superseded by the now-non-experimental CPython 3.14t. As a result, PyTorch 2.13 no longer ships cp313t wheels (Linux, Triton, and related artifacts). Users on the free-threaded interpreter should move to Python 3.14t.

    PyTorch 2.12:

    # cp313t (free-threaded 3.13) wheels were available
    python3.13t -m pip install torch

    PyTorch 2.13:

... (truncated)

Commits
  • cf30153 [release/2.13] Strip +PTX from CUDA arch list on release/RC builds (#188914) ...
  • 3e3e24b [release/2.13] Restrict cuda-bindings to Python < 3.15 for CUDA 12.9 builds (...
  • 7986b06 [release/2.13] Bump binary build timeout 280 -> 400 minutes (#188551)
  • 0bdbc26 [release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (#188443)
  • 9cabb45 [release/2.13] Update manywheel docker image pin to 78e737ad (#188409)
  • 78e737a [release/2.13] Revert "Tighten generalized scatter graph target (#184075)" (#...
  • 0bb9b5b [release/2.13] Revert "dynamo: round-trip torch.cuda.stream ctx mgr across gr...
  • aaac2bf [release/2.13] Revert "[Reland] Port D104346887/PR 182675 for index_add fast ...
  • 9330813 Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (#188192)
  • 4e077a7 Remove setuptools upper bound (#188190)
  • Additional commits viewable in compare view

Updates transformers from 5.13.0 to 5.15.0

Release notes

Sourced from transformers's releases.

Release: v5.15.0

Release v5.15.0

New Model additions

Meta Muse Glimmer

Muse Glimmer, released today, is Meta’s new multimodal model, especially designed for agentic use cases. Distilled from Muse to 30B parameters, and released under the Apache 2.0 license, it can be deployed to local setups for privacy-aware applications such as coding, document analysis, personal assistants, Claw- or Hermes-like setups.

Muse Glimmer is a dense 30B parameter model consisting of:

  • 2B ViT-style encoder for vision (Perception Encoder)
  • 28B parameter text decoder

We're covering it in the following blogpost: http://hf.co/blog/muse-glimmer


GraniteMoeSWA & GraniteSWA

Links: Documentation

Links: Documentation


A.X-K1 & A.X-K2

Links: Documentation

Links: Documentation


Cosmos3 Edge

Links: Documentation

... (truncated)

Commits
  • 5eddc12 Release: v5.15.0
  • 7bfaf47 Add MuseGlimmer (#47867)
  • 4bd3150 Revert "Fix CodeLlama tokenizer dropping leading whitespace on decode (#47488...
  • fd12552 Fix cached_files silently returning stale file on read-only filesystem (EROFS...
  • e8ea728 Fix PhimoeIntegrationTest (#46539)
  • 9436284 make examples under doc device agnostic (#47812)
  • 87b0711 cancel deterministic for XPU in gemma4 tests (#47790)
  • 5d6dff8 Serialize post-mlinter-review after post-link to avoid PR description race (#...
  • 96869d7 Use content hash for mlinter review deduplication (#47830)
  • e1d50b2 Add new args in auto-docstring (#47737)
  • Additional commits viewable in compare view

Updates datasets from 5.0.0 to 5.0.1

Release notes

Sourced from datasets's releases.

5.0.1

Bug fixes

Docs

New Contributors

... (truncated)

Commits
  • 921c2a7 release: 5.0.1 (#8370)
  • c6fc5cd Preserve nullable integer columns in to_json/to_csv/to_sql (#8366)
  • 6747b87 Fix DatasetDict.push_to_hub leaving removed splits in the dataset card (#8367)
  • b305031 fix buckets on windows (#8369)
  • 030a3e5 Decode Json() columns in Dataset.to_pandas() (#8344)
  • 0f207a0 Rebatch arrow source before formatting in IterableDataset.filter to fix resum...
  • adad35d Keep integers on the python read path for fixed-shape ArrayXD columns with nu...
  • 8966746 Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 (#8358)
  • b8e861a Fix bucket dataset card handling and push metadata accounting (#8354)
  • 521a590 Keep flat numeric columns with nulls numeric in numpy format (#8352)
  • Additional commits viewable in compare view

Updates huggingface-hub from 1.22.0 to 1.27.0

Release notes

Sourced from huggingface-hub's releases.

[v1.27.0] Automatic hf-cli skill install, engine flags for Inference Endpoints & more

🤖 The hf-cli skill installs itself and stays in sync

The hf-cli skill teaches AI agents how to use the hf CLI, but until now you had to know it existed and install it by hand. The standalone installers (bash and PowerShell) now install it globally by default, pass --exclude-skill / -ExcludeSkill to skip — and hf update refreshes it afterwards, without ever bringing it back if you opted out or removed it. Any hf command also hints, at most once a day, when the skill is missing or was generated by another hf version. The hint is purely local, never installs anything on its own, and is silenced by HF_HUB_DISABLE_UPDATE_CHECK=1.

# The installer sets up the skill for you...
>>> curl -LsSf https://hf.co/cli/install.sh | bash -s
[INFO] Installing the hf-cli skill for AI agents...
Installed 'hf-cli' to central location: ~/.agents/skills/hf-cli
[INFO] Pass --exclude-skill to skip it.
...or skip it entirely
>>> curl -LsSf https://hf.co/cli/install.sh | bash -s -- --exclude-skill
[INFO] Skipping the hf-cli skill (--exclude-skill)

  • [CLI] Install & refresh the hf-cli skill (installer, update, hints) by @​Wauplin in #4608

⚙️ Engine flags for Inference Endpoints, at deploy time and after

--container-command / --container-args no longer require --custom-image. That gate was conservative CLI scoping, not an API constraint: model.command and model.args are top-level fields of the endpoint payload and apply to managed engine images too, which is how the vLLM engine docs recommend passing engine flags. They can now also be changed after deploy — hf endpoints update gained both flags, and HfApi.update_inference_endpoint / InferenceEndpoint.update the matching container_command / container_args parameters. Values replace rather than append: pass an empty string to reset to the image default, or omit the flag to leave it untouched. --health-route and --port still require --custom-image, since they only exist on the custom image payload.

# Engine flags at deploy time, no custom image required anymore
>>> hf endpoints deploy my-endpoint --repo gpt2 --framework pytorch \
      --accelerator cpu --instance-size x2 --instance-type intel-icl \
      --region us-east-1 --vendor aws \
      --container-args "--max-model-len 8192"
Change engine flags on an existing endpoint (previously UI / raw API only)
>>> hf endpoints update my-endpoint --container-args "--enable-auto-tool-choice --tool-call-parser lfm2"
Reset to the image defaults
>>> hf endpoints update my-endpoint --container-args ""

  • [Inference Endpoints] Allow container command/args without custom image + support them in update by @​gary149 in #4628

🚀 Baseten joins the inference providers

Baseten is now supported for the conversational task. It serves an OpenAI-compatible chat completions API, so there are no provider-specific quirks: target it with provider="baseten" and your own key, or let auto-routing pick it for any model already mapped on the Hub.

>>> from huggingface_hub import InferenceClient
>>> client = InferenceClient(provider="baseten", api_key="<BASETEN_API_KEY>")
>>> out = client.chat_completion(
...     model="zai-org/GLM-5.2",
...     messages=[{"role": "user", "content": "Hello!"}],
</tr></table>

... (truncated)

Commits
  • a7d85da Release: v1.27.0
  • 1ea6f21 Release: v1.27.0.rc0
  • f4c8347 [Inference Endpoints] Allow container command/args without custom image + sup...
  • 9a3222e Bump the actions group with 10 updates (#4636)
  • db2c685 [HfFileSystem] Fix bucket prefix collisions (#4630)
  • 0234ea1 [HfApi] Add region to ExpandSpaceProperty_T (#4641)
  • 77969c8 [Xet] Bump minimum hf-xet to 1.5.2 (#4640)
  • b4f4e92 [Inference] Add Baseten as inference provider (#3414)
  • b9dddd9 [Cache] Don't try to delete snapshot files twice when deleting a revision (#4...
  • 62b8e19 [CLI] Install & refresh the hf-cli skill (installer, update, hints) (#4608)
  • Additional commits viewable in compare view

Updates pypdf from 5.9.0 to 6.15.0

Release notes

Sourced from pypdf's releases.

Version 6.15.0, 2026-08-06

What's new

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901) by @​PJBrs
  • Allow keeping original PDF header in non-incremental clone mode (#3918) by @​pctablet505
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @​PJBrs
  • Add actions base class (#3552) by @​j-t-1

Bug Fixes (BUG)

Documentation (DOC)

Maintenance (MAINT)

Full Changelog

Version 6.14.2, 2026-06-23

What's new

Security (SEC)

Full Changelog

Version 6.14.1, 2026-06-23

What's new

Security (SEC)

Full Changelog

Version 6.14.0, 2026-06-22

What's new

Security (SEC)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.15.0, 2026-08-06

Security (SEC)

  • Improve performance of read_until_whitespace (#3947)
  • Limit CID width range and width count when loading fonts (#3946)
  • Limit token length for ToUnicode entries (#3944)

Deprecations (DEP)

  • Deprecate previously missed inline_images setter as well (#3897)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901)
  • Allow keeping original PDF header in non-incremental clone mode (#3918)
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831)
  • Add actions base class (#3552)

Bug Fixes (BUG)

  • Expand low-bit samples for images without a filter (#3938)
  • Decode low-bit DeviceRGB images as RGB instead of palette (#3929)
  • Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937)

Documentation (DOC)

  • Image and attachment filenames are unsanitized (#3942)

Maintenance (MAINT)

  • Update charset mappings (#3935)

Full Changelog

Version 6.14.2, 2026-06-23

Security (SEC)

  • Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline images (#3892)

Full Changelog

Version 6.14.1, 2026-06-23

Security (SEC)

  • Detect end of stream during inline image end marker detection (#3891)

Full Changelog

Version 6.14.0, 2026-06-22

Security (SEC)

  • Apply general limit for requested image size (#3888)
  • Speed up recovery when reading broken cross-reference table (#3887)

New Features (ENH)

... (truncated)

Commits
  • 7f226a2 REL: 6.15.0
  • 4959848 SEC: Improve performance of read_until_whitespace (#3947)
  • 51cb6ac SEC: Limit CID width range and width count when loading fonts (#3946)
  • afba808 SEC: Limit token length for ToUnicode entries (#3944)
  • aa2f37d DOC: Image and attachment filenames are unsanitized (#3942)
  • 760ba28 DOC: Further clarify security policy
  • 55bd85c BUG: Expand low-bit samples for images without a filter (#3938)
  • 4807cb4 ROB: Tolerate malformed /FontBBox when building font descriptors (#3895)
  • ce9320b DEV: Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#3941)
  • 8b6f6fd ENH: Add ActualText tag when we produce RTL appearance stream (#3901)
  • Additional commits viewable in compare view

Updates langchain-text-splitters from 0.3.11 to 1.1.2

Release notes

Sourced from langchain-text-splitters's releases.

langchain-deepseek==1.1.0

Changes since langchain-deepseek==1.0.1

chore(infra): bump langchain-tests floor to 1.1.9 (#37610) chore: bump idna from 3.10 to 3.15 in /libs/partners/deepseek (#37560) ci(infra): harden Dependabot version-bound preservation (#37510) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/deepseek (#37341) chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/deepseek (#37282) chore: bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/deepseek (#37283) chore(docs): update x handle references (#37081) chore(model-profiles): refresh model profile data (#37015) chore(model-profiles): refresh model profile data (#37005) hotfix: bump min core versions (#36996) feat(core): add content-block-centric streaming (v2) (#36834) ci(infra): add pytest-xdist to partner test groups (#36988) chore(model-profiles): refresh model profile data (#36982) hotfix(ci): remove nobenchmark flag (#36959) chore(partners): standardize integration test invocation (#36958) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/deepseek (#36787) chore: add comment explaining pygments>=2.20.0 (#36570) chore(model-profiles): refresh model profile data (#36554) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/deepseek (#36256) chore(partners): bump langchain-core min to 1.2.21 (#36183) fix(core,model-profiles): add missing ModelProfile fields, warn on schema drift (#36129) ci: suppress pytest streaming output in CI (#36092) ci: avoid unnecessary dep installs in lint targets (#36046) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/deepseek (#35868) fix(deepseek): accept base_url as alias for api_base (#35789) feat(model-profiles): new fields + Makefile target (#35788) chore(model-profiles): refresh model profile data (#35646) fix(deepseek): use proper URL parsing for azure endpoint detection (#35455) fix(deepseek): Tool Choice to required for Azure Deployment in case specific function dict is given (#34848) fix(model-profiles): sort generated profiles by model ID for stable diffs (#35344) fix(infra): fix trailing comma regex in profile generation script (#35333) chore: bump model profiles (#35294) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/partners/deepseek (#35156) feat(model-profiles): add text_inputs and text_outputs (#35084) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) chore: enrich pyproject.toml files (#34980) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) chore: upgrade urllib3 to 2.6.3 (#34940) chore: update twitter URLs (#34736) chore: ban relative imports on all packages (#34691) fix(openai): filter function_call blocks in token counting (#34396) release(openai): 1.1.6: update max input tokens for gpt-5 series (#34419) release(openai): 1.1.5 (#34409)

... (truncated)

Commits
  • 58c4e5b release(text-splitters): 1.1.2 (#36822)
  • c289bf1 fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...
  • b7447c6 fix(infra): skip serdes tests in min-version release step (#36818)
  • 41c0cc5 release(openai): 1.1.14 (#36820)
  • 0516156 fix(openai): use SSRF-safe transport for image token counting (#36819)
  • 338aa81 fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#3...
  • 51e9548 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797)
  • e85c418 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (#36798)
  • 789126e chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (#36799)
  • 937b3eb chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (#36800)
  • Additional commits viewable in compare view

Updates gradio from 6.20.0 to 6.22.0

Release notes

Sourced from

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/runtime-de914492fb branch 4 times, most recently from 2b0568a to c4d7470 Compare August 9, 2026 18:55
Bumps the runtime group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [typer](https://github.com/fastapi/typer) | `0.26.8` | `0.27.1` |
| [torch](https://github.com/pytorch/pytorch) | `2.12.1` | `2.13.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.13.0` | `5.15.0` |
| [datasets](https://github.com/huggingface/datasets) | `5.0.0` | `5.0.1` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.22.0` | `1.27.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `5.9.0` | `6.15.0` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `0.3.11` | `1.1.2` |
| [gradio](https://github.com/gradio-app/gradio) | `6.20.0` | `6.22.0` |



Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)

Updates `torch` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.12.1...v2.13.0)

Updates `transformers` from 5.13.0 to 5.15.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.13.0...v5.15.0)

Updates `datasets` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/huggingface/datasets/releases)
- [Commits](huggingface/datasets@5.0.0...5.0.1)

Updates `huggingface-hub` from 1.22.0 to 1.27.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.22.0...v1.27.0)

Updates `pypdf` from 5.9.0 to 6.15.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.9.0...6.15.0)

Updates `langchain-text-splitters` from 0.3.11 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==0.3.11...langchain-text-splitters==1.1.2)

Updates `gradio` from 6.20.0 to 6.22.0
- [Release notes](https://github.com/gradio-app/gradio/releases)
- [Changelog](https://github.com/gradio-app/gradio/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gradio-app/gradio/compare/gradio@6.20.0...gradio@6.22.0)

---
updated-dependencies:
- dependency-name: datasets
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime
- dependency-name: gradio
  dependency-version: 6.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: huggingface-hub
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: runtime
- dependency-name: pypdf
  dependency-version: 6.14.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: runtime
- dependency-name: torch
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: transformers
  dependency-version: 5.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/runtime-de914492fb branch from c4d7470 to 1eaabdf Compare August 14, 2026 16:32
@dependabot @github

dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 16, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/runtime-de914492fb branch August 16, 2026 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants