build(deps): bump the python-minor-patch group across 1 directory with 19 updates by dependabot[bot] · Pull Request #117 · ncoevoet/facet

dependabot · 2026-08-26T23:50:20Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the python-minor-patch group with 19 updates in the / directory:

Package	From	To
uvicorn	`0.52.1`	`0.52.4`
transformers	`5.15.0`	`5.15.1`
bitsandbytes	`0.50.0`	`0.50.1`
filelock	`3.32.2`	`3.32.4`
huggingface-hub	`1.26.0`	`1.28.0`
hypothesis	`6.165.2`	`6.165.10`
llvmlite	`0.48.0`	`0.49.0`
ml-dtypes	`0.5.4`	`0.6.0`
narwhals	`2.24.0`	`2.25.0`
numba	`0.66.0`	`0.67.0`
optree	`0.19.1`	`0.20.0`
pre-commit	`4.6.1`	`4.6.2`
protobuf	`7.35.1`	`7.36.0`
python-discovery	`1.5.1`	`1.5.2`
ruff	`0.16.1`	`0.16.4`
starlette	`1.4.1`	`1.6.0`
sympy	`1.13.1`	`1.14.0`
typing-inspection	`0.4.2`	`0.4.4`
virtualenv	`21.7.1`	`21.7.4`

Updates uvicorn from 0.52.1 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Commits

8988c23 Stabilize macOS Python 3.13 signal shutdown tests (#3084)
898ddca Update PyPI publish action to version 1.14.2 (#3083)
3869f8a Restore Mermaid diagram rendering (#3080)
64148a9 Version 0.52.4 (#3079)
9e9e569 docs: correct release example PR number (#3072)
b783dac Remove duplicate Date header from SansIO WebSocket handshakes (#3078)
27019b2 chore(deps): bump the python-packages group across 1 directory with 11 update...
1b64273 Fix a typo in index.md (#3006)
a68da60 Version 0.52.3 (#3068)
6e3bb4c Use zttp 0.0.24 fast receive path (#3067)
Additional commits viewable in compare view

Updates transformers from 5.15.0 to 5.15.1

Release notes

Sourced from transformers's releases.

Patch release: v5.15.1

Patch release v5.15.1

This patch most notably solves a few issues with DFlash and MTP candidate generators, as well as an issue where images could sometimes not be processed on accelerator if using Lanczos filter.

It contains the following commits:

Fix DFlash candidate token device mismatch with device_map="auto" (#47877) by @sywangyi and @Cyrilvallez

Align logit distributions for CandidateGenerators using sampling (#48007) by @Cyrilvallez

Fix MTP config when mlp_layer_types is absent (#48015) by @Cyrilvallez

Fallback from 'lanczos' to 'bicubic' when on cuda (#48026) by @zucchini-nlp

Fix gemma4 video to device (#47896) by @guarin

Commits

550d7b3 Release: v5.15.1
7e9f99c Fix MTP config when mlp_layer_types is absent (#48015)
6e336fd Fix gemma4 video to device (#47896)
c79e26a Fallback from 'lanczos' to 'bicubic' when on cuda (#48026)
d93f042 Align logit distributions for CandidateGenerators using sampling (#48007)
69bc61d Fix DFlash candidate token device mismatch with device_map="auto" (#47877)
See full diff in compare view

Updates bitsandbytes from 0.50.0 to 0.50.1

Release notes

Sourced from bitsandbytes's releases.

0.50.1: RTX Spark Support

This release adds support for additional hardware platforms and improves performance on RTX Spark / DGX Spark.

Highlights

Support added for NVIDIA RTX Spark products running Windows on ARM64 (#2038, #2037, #2032)

Improved 4bit GEMM dispatch heuristics for NVIDIA GB10 (#2030)

Support for AMD CDNA5 hardware (e.g. MI455X)

What's Changed

Add ROCm CDNA5 (gfx1250) support by @zjin-lcf in bitsandbytes-foundation/bitsandbytes#2023

chore(deps): bump the actions group with 3 updates by @dependabot[bot] in bitsandbytes-foundation/bitsandbytes#2022

Update README by @matthewdouglas in bitsandbytes-foundation/bitsandbytes#2024

Fix truncated FP4 constant in Triton dequantize_fp4_tree by @Anai-Guo in bitsandbytes-foundation/bitsandbytes#2026

docs: add installation instructions for NVIDIA Spark (ARM64) devices by @mfuntowicz in bitsandbytes-foundation/bitsandbytes#2037

fix: missing compilation flag on recent msvc version by @mfuntowicz in bitsandbytes-foundation/bitsandbytes#2032

build: Add Windows ARM64 build with CUDA 13.4 for RTX Spark by @matthewdouglas in bitsandbytes-foundation/bitsandbytes#2038

Add sm121 (GB10) tier to the 4-bit GEMM dispatch heuristic by @yashb98 in bitsandbytes-foundation/bitsandbytes#2030

New Contributors

@zjin-lcf made their first contribution in bitsandbytes-foundation/bitsandbytes#2023

@Anai-Guo made their first contribution in bitsandbytes-foundation/bitsandbytes#2026

@yashb98 made their first contribution in bitsandbytes-foundation/bitsandbytes#2030

Full Changelog: bitsandbytes-foundation/bitsandbytes@0.50.0...0.50.1

Commits

37d2a93 Release 0.50.1
0b3a226 Add sm121 (GB10) tier to the 4-bit GEMM dispatch heuristic
557bfc2 build: Add Windows ARM64 build with CUDA 13.4 for RTX Spark (#2038)
930274c Merge pull request #2032 from mfuntowicz/fix/cuda_121_win
0330f40 Merge branch 'main' into fix/cuda_121_win
d799cfd Gate /Zc:preprocessor to cl.exe only
915aa03 Merge pull request #2037 from mfuntowicz/docs/rtx-spark-install-guidelines
cf86065 docs: add installation instructions for NVIDIA Spark (ARM64) devices
b459659 fix: missing compilation flag on recent msvc version
a2b90e6 Fix truncated FP4 constant in Triton dequantize_fp4_tree (#2026)
Additional commits viewable in compare view

Updates filelock from 3.32.2 to 3.32.4

Release notes

Sourced from filelock's releases.

3.32.4

What's Changed

🐛 fix: retry transient denials on open and claim read by @gaborbernat in tox-dev/filelock#705

🧪 test: deflake six scheduled-run failures by @gaborbernat in tox-dev/filelock#704

🧪 test: cover a reclaimed private record for real by @gaborbernat in tox-dev/filelock#706

🧪 test(fork): fork once the event loop has closed by @gaborbernat in tox-dev/filelock#714

🔧 chore: batch dependency updates weekly on Tuesday by @gaborbernat in tox-dev/filelock#713

escape the hostname every marker publishes by @dxbjavid in tox-dev/filelock#709

Full Changelog: tox-dev/filelock@3.32.3...3.32.4

3.32.3

What's Changed

🧪 test(strict): deflake close-fault injections on graalpy by @gaborbernat in tox-dev/filelock#697

📄 docs: publish llms.txt from the docs build by @gaborbernat in tox-dev/filelock#700

🐛 fix(fork): survive audit events during interpreter shutdown by @gaborbernat in tox-dev/filelock#703

Full Changelog: tox-dev/filelock@3.32.2...3.32.3

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.4 (2026-08-23)

StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705

WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705

Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

3.32.3 (2026-08-13)

The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

3.32.2 (2026-07-29)

A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:691

3.32.1 (2026-07-26)

Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

3.32.0 (2026-07-21)

SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685

Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683

... (truncated)

Commits

cb493d6 Release 3.32.4
fe07a11 escape the hostname every marker publishes (#709)
232732f 🔧 chore: batch dependency updates weekly on Tuesday (#713)
2966eb5 🧪 test(fork): fork once the event loop has closed (#714)
61511eb build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#712)
f12a52f build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#711)
54c7b6c [pre-commit.ci] pre-commit autoupdate (#710)
49f8035 🧪 test: cover a reclaimed private record for real (#706)
bb16d39 🧪 test: deflake six scheduled-run failures (#704)
13b82a6 🐛 fix: retry transient denials on open and claim read (#705)
Additional commits viewable in compare view

Updates huggingface-hub from 1.26.0 to 1.28.0

Release notes

Sourced from huggingface-hub's releases.

[v1.28.0] Hardware discovery and managed engine images for Inference Endpoints and more

🔎 Discover deployable hardware with hf endpoints hardware

Deploying an Inference Endpoint requires five hardware flags (--vendor, --region, --accelerator, --instance-type, --instance-size) whose valid values depend on each other, and until now there was no way to learn them from the CLI. The new hf endpoints hardware command lists the valid combinations along with the price per replica per hour and your namespace's accelerator quota, filtered by default to the hardware you can deploy on right now. The same data is available in the SDK via list_inference_endpoints_hardware(), which flattens the API response into InferenceEndpointHardware objects you can filter programmatically.
>>> hf endpoints hardware --vendor aws --region eu-west-1
VENDOR REGION    ACCELERATOR INSTANCE_TYPE INSTANCE_SIZE MEMORY_GB GPU_MEMORY_GB PRICE_PER_HOUR QUOTA STATUS
------ --------- ----------- ------------- ------------- --------- ------------- -------------- ----- ---------
aws    eu-west-1 cpu         intel-spr     x1                  2.0                        0.033 0/60  available
aws    eu-west-1 cpu         intel-spr     x2                  4.0                        0.067 0/60  available
aws    eu-west-1 gpu         nvidia-a10g   x1                 30.0            24            1.0 0/16  available
aws    eu-west-1 gpu         nvidia-t4     x1                 15.0            16            0.5 1/30  available
[Inference Endpoints] Add hf endpoints hardware to list available instances by @hanouticelina in #4672

🚀 Managed engine images and multi-accelerator parallelism for Inference Endpoints

custom_image now accepts the engine-specific container types supported by the API: key the dictionary with the engine name (vLLM, sGLang, tgi, tei, llamacpp, hfServe, ...) instead of leaving it flat, and each engine takes the usual container fields plus its own tuning options. Any dict without a top-level url is forwarded to the API untouched, so engines added to the API later will work without upgrading huggingface_hub, and update_inference_endpoint now handles the same payload shapes as create_inference_endpoint. On the CLI, hf endpoints deploy and hf endpoints update gain --engine, --tensor-parallel-size and --data-parallel-size, and update also accepts --custom-image, --health-route and --port. This matters because vLLM and SGLang default to a single accelerator while an endpoint is allocated every accelerator of its instance — the API now rejects that misconfiguration, and these flags are how you set things right.
$ hf endpoints deploy gpt-oss-120b-vllm --repo openai/gpt-oss-120b --framework custom \
    --accelerator gpu --instance-size x8 --instance-type nvidia-h200 --region us-east-1 --vendor aws \
    --engine vllm --custom-image vllm/vllm-openai:v0.23.0 --tensor-parallel-size 8
Retune a running endpoint
$ hf endpoints update gpt-oss-120b-vllm --tensor-parallel-size 4 --data-parallel-size 2
💔 Breaking change: huggingface_hub.constants.INFERENCE_ENDPOINT_IMAGE_KEYS is removed. It was never exported at the package root nor documented, but code reading it directly will now get an AttributeError.

[Inference Endpoints] Support managed engine images in custom_image by @hanouticelina in #4671

[CLI] Add --tensor-parallel-size / --data-parallel-size to hf endpoints deploy and update by @moon-bot-app[bot] in #4661

🤖 Inference

[Inference Providers] deepinfra: add text-to-speech support by @ovuruska in #4559

[Inference Providers] deepinfra: add feature-extraction support by @ovuruska in #4656

🖥️ CLI

[CLI] Keep hf extensions off the metered GitHub REST API by @hanouticelina in #4659

🐛 Bug and typo fixes

[CLI] Fix scheduled upload of a single file in a subfolder by @dfedoryshchev in #4619

[Download] Fix tqdm_class ignored by the Xet transfer bar by @bharadwaj-pendyala in #4647

... (truncated)

Commits

b2da2d4 Release: v1.28.0
a718e44 Release: v1.28.0.rc0
7105c3d [CLI] Add --tensor-parallel-size / --data-parallel-size to `hf endpoints depl...
a3d9d8a [Inference Endpoints] Omit model.task instead of sending null on create (#4...
909b162 [Inference Endpoints] Add hf endpoints hardware to list available instances...
5ac9711 Do not use a redirect's Content-Length as file size in get_hf_file_metadata (...
99aba55 [Docs] Normalize malformed docstring parameter entries (#4623)
2e6c67d [Inference Providers] deepinfra: add feature-extraction (embeddings) support ...
7a522f0 docs: remove obsolete Repository guide references (#4679)
aa40a65 [Download] Fix ResolvedRevision string value after pickle/copy (#4692)
Additional commits viewable in compare view

Updates hypothesis from 6.165.2 to 6.165.10

Commits

6384dee Bump hypothesis version to 6.165.10 and update changelog
c7ca59d Merge pull request #4864 from dgutson/claude-stateful-and-example
3fc38f1 claude: teach /hypothesis about stateful tests and @example
16f24b7 Merge pull request #4862 from Zac-HD/claude/upstream-regex-issues-fkke9q
48ce446 Bump hypothesis version to 6.165.9 and update changelog
d559a69 Merge pull request #4860 from Liam-DeVoe/optimize-single-branch-one-of
3a19d89 fix context flag restoration
2408c99 drop unecessary empty check
3f94912 Clarify re.ASCII wording in changelog entry
9d0a9a8 Fix from_regex handling of negative classes, re.ASCII, and zero-min repeats
Additional commits viewable in compare view

Updates llvmlite from 0.48.0 to 0.49.0

Release notes

Sourced from llvmlite's releases.

0.49.0

Please find the detailed release notes here: https://llvmlite.readthedocs.io/en/v0.49.0/

Commits

b5a0ba7 Merge pull request #1468 from swap357/release0.49
3b78f51 Apply suggestion from @sklam
1e8c285 update changelog for merge commit 1469
914f3ea update release date
c5a940d add update pr to pr list
df5dd6f update changelog for 0.49.0
ab86042 Merge pull request #1469 from sklam/docs/pick_ptr_provenance
ad125de Merge pull request #1465 from sklam/iss/ptr_provenance
d3c227e Merge pull request #1457 from swap357/changelog_0.49
9254641 change date on changelog
Additional commits viewable in compare view

Updates ml-dtypes from 0.5.4 to 0.6.0

Release notes

Sourced from ml-dtypes's releases.

v0.6.0

Added new 16-bit complex types: ml_dtypes.complex32 (based on float16) and ml_dtypes.bcomplex32 (based on bfloat16) (#351).

Added new 1-bit integer types: ml_dtypes.int1 and ml_dtypes.uint1.

Added __format__ method to custom float, complex, and integer types (#341). Previously, formatting custom scalars (e.g. in f-strings) fell back to string formatting, which could truncate exponents or fail on numeric format specifiers.

ml_dtypes.finfo and ml_dtypes.iinfo now allow passing an array object to their constructor (#350).

Fixed equality comparison (==, !=) when comparing custom dtypes against incompatible types like strings or None.

Dropped support for Python 3.9, which reached end-of-life in October 2025.

Dropped support for Python 3.13 free-threading, because cibuildwheel dropped support.

Dropped support for NumPy < 2.0.

Added support for Python 3.15.

Switched build system to scikit-build-core and CMake (#361).

Updated Eigen dependency to v5.0.1.

Changelog

Sourced from ml-dtypes's changelog.

[0.6.0] - 2026-08-13

Added new 16-bit complex types: ml_dtypes.complex32 (based on float16) and ml_dtypes.bcomplex32 (based on bfloat16) (#351).

Added new 1-bit integer types: ml_dtypes.int1 and ml_dtypes.uint1.

Added __format__ method to custom float, complex, and integer types (#341). Previously, formatting custom scalars (e.g. in f-strings) fell back to string formatting, which could truncate exponents or fail on numeric format specifiers.

ml_dtypes.finfo and ml_dtypes.iinfo now allow passing an array object to their constructor (#350).

Fixed equality comparison (==, !=) when comparing custom dtypes against incompatible types like strings or None.

Dropped support for Python 3.9, which reached end-of-life in October 2025.

Dropped support for Python 3.13 free-threading, because cibuildwheel dropped support.

Dropped support for NumPy < 2.0.

Added support for Python 3.15.

Switched build system to scikit-build-core and CMake (#361).

Updated Eigen dependency to v5.0.1.

Commits

6bc762d Merge pull request #389 from hawkinsp:release
ce2c7bf Prepare v0.6.0 release.
66a7982 Merge pull request #390 from hawkinsp:npy2
2c29114 Drop support for NumPy 1.x.
3a8d5da Merge pull request #388 from hawkinsp:build
dec45f7 Merge pull request #387 from hawkinsp:format
2e0e13e Clean up scikit-build-core configuration in pyproject.toml.
90bebd5 Implement format for custom float, complex, and int dtypes.
f9c6392 Merge pull request #368 from jax-ml:dependabot/github_actions/actions/downloa...
14396b0 Merge pull request #384 from jax-ml:dependabot/github_actions/actions/setup-p...
Additional commits viewable in compare view

Updates narwhals from 2.24.0 to 2.25.0

Release notes

Sourced from narwhals's releases.

Narwhals v2.25.0

Changes

🚀 Performance improvements

perf: remove redundant work in eager when/then, schema resolution, selectors, and module lookups (#3797)

✨ Enhancements

feat: add str.strip_chars_{start,end} (#3843)

feat: Add maintain_order argument to {Expr, Series}.list.unique (#3697)

feat(typing): Introduce PluginName NewType so plugin backends can type check (#3794)

feat(ibis): Add support for Expr.list.median for ibis backend (#3791)

🐞 Bug fixes

fix: follow left-hand-index alignment rule for pandas-like concat (#3866)

fix: null propagation for str boolean methods (#3865)

fix: consistently place null's in with_row_index(order_by=...) (#3863)

fix: honor schema column selection/order in pandas-like from_dicts (#3856)

fix: use exact quantile for median on the pyarrow backend (#3855)

fix: order Categorical columns by value in the pyarrow backend (#3862)

fix: is_in was not preserving nulls where possible (#3859)

fix: preserve nulls in pandas-like Expr.dt.ordinal_day (#3805)

fix: resolve failing cross-references in documentation (#3790)

📖 Documentation

docs: reorganise contributing.md and add useful make commands (#3836)

fix: resolve failing cross-references in documentation (#3790)

docs: Add Intella to "resources" (#3788)

🛠️ Other improvements

ci: pin pandas in scikit-lego job to get ci green (#3860)

chore: Bump pyrefly 1.2, remove some unnecessary pyrefly: ignores (#3848)

chore: fix pandas nightly (#3849)

chore: Remove pins in pyproject.toml, as dependencies are pinned in uv.lock anyway (#3847)

chore: prek autoupdate (#3828)

chore: add trailing-whitespace precommit (#3826)

chore: Update uv lock, pre-commit hooks and fix linting issues (#3813)

refactor: Dispatch IO functions via *Namespace methods (#3793)

ci: fix lightgbm downstream test (#3801)

chore: refactor compliant implementations to use expression_args instead of **expressifiable_args (#3766)

chore: Small performance and robustness cleanups (#3798)

chore: prek autoupdate (#3858)

chore: prek autoupdate (#3846)

ci: consolidate action updates in renovate and add zizmor pre-commit hook (#3835)

test: split cat.get_categories tests for expr and series (#3814)

... (truncated)

Commits

c481508 release: Bump version to 2.25.0
813f3bb update build process, remove push to stable branch (#3868)
bc34ee7 fix: follow left-hand-index alignment rule for pandas-like concat (#3866)
f5ba091 fix: null propagation for str boolean methods (#3865)
d2b5bcc fix: consistently place null's in with_row_index(order_by=...) (#3863)
93fb199 fix: honor schema column selection/order in pandas-like from_dicts (#3856)
799eabf feat: add str.strip_chars_{start,end} (#3843)
2ae3429 ci: pin pandas in scikit-lego job to get ci green (#3860)
618f9b8 fix: use exact quantile for median on the pyarrow backend (#3855)
c679eba fix: order Categorical columns by value in the pyarrow backend (#3862)
Additional commits viewable in compare view

Updates numba from 0.66.0 to 0.67.0

Release notes

Sourced from numba's releases.

0.67.0

Major Numba release, adding NumPy 2.5 support. Please view the release notes here: https://numba.readthedocs.io/en/0.67.0/release/0.67.0-notes.html

Commits

3190b91 Merge pull request #10772 from swap357/release0.67
f68f603 add current pr on 0.67 pr list
86a975c update final release date for 0.67
c7f14cf Merge pull request #10726 from swap357/pin_deps_0.67
123fa28 update test refs and pin dependencies for release0.67
0c89330 Merge pull request #10724 from swap357/changelog_0.67
ffaa017 Merge pull request #10723 from swap357/update_version_support_table_0.67.0rc1
af0d879 fix wrapping on release notes
a5e4654 Update docs/source/release/0.67.0-notes.rst
e85720e Update docs/source/release/0.67.0-notes.rst
Additional commits viewable in compare view

Updates optree from 0.19.1 to 0.20.0

Release notes

Sourced from optree's releases.

optree v0.20.0

Added

Preserve dict insertion order on unflatten for the Python tree_flatten_one_level path mirroring the C++ path by @XuehaiPan in #280.

Add built-in frozendict support for Python 3.15+ (PEP 814), with PyTreeKind.FROZENDICT, optree.treespec_frozendict(), optree.treespec.frozendict(), and optree.typing.FrozenDict by @XuehaiPan in #274.

Migrate to Python_FIND_ABI for CMake's FindPython by @XuehaiPan in #292.

Add Python 3.15 and Python 3.15t support by @XuehaiPan in #293.

Changed

Update minimal version of typing-extensions to 4.10.0 for typing_extensions.TypeIs by @XuehaiPan in #285.

Fixed

Define Py_GIL_DISABLED for free-threaded debug builds on Windows when building the C extension to work around an upstream CMake FindPython bug by @XuehaiPan in #285.

Correct rare-case bugs from adversarial audit across deadlocks, caching, serialization, memory safety, and Python frontend by @XuehaiPan in #290.

Fix a deadlock when registering or unregistering a pytree node concurrently with flattening, caused by releasing the GIL while holding the registry lock by @XuehaiPan in #290.

Fix a deadlock when a duplicate registration or an unregistration of an unregistered type formats its error message, which runs the type's __repr__ while the registry lock is held and wedges any thread that is flattening by @XuehaiPan in #290.

Fix registering an already-registered collections.namedtuple subclass or PyStructSequence emitting the override warning even though the registration is rejected, which raised UserWarning instead of ValueError under warnings-as-errors by @XuehaiPan in #290.

Fix a deadlock when unregistering a pytree node drops the last reference to its flatten or unflatten function, so a __del__ or weakref callback re-entered the registry while its lock was held by @XuehaiPan in #290.

Fix a deadlock while flattening on free-threading builds, caused by acquiring the non-recursive dictionary insertion order lock twice by @XuehaiPan in #290.

Fix a spurious SystemError from optree._C.get_registry_size() when a concurrent registration slipped between its two reads by @XuehaiPan in #290.

Fix optree.tree_iter() hanging uninterruptibly when the is_leaf predicate or a custom flatten function advances the same iterator, now reported as a RuntimeError by @XuehaiPan in #290.

Fix the type caches handing an interpreter a value owned by another one, by keying them on the interpreter in addition to the type address by @XuehaiPan in #290.

Fix the type caches retaining entries for a finalized interpreter, which leaked immortal keys and could be inherited by a fresh interpreter reusing the same ID by @XuehaiPan in #290.

Fix a deadlock in the PyStructSequence field cache, caused by re-acquiring the GIL while still holding the cache lock by @XuehaiPan in #290.

Fix the type caches publishing an entry that a failed cleanup registration would orphan, leaving a value owned by an interpreter with no callback able to evict it, whether the publish preceded that registration or raced another thread still performing it by @XuehaiPan in #290.

Fix optree.structseq_fields() and the struct sequence accessors reporting the trailing hidden field names for unnamed sequence slots, by mapping each field to the slot its member offset names; the pure Python fallback, which cannot read those offsets, recovers the positions from a probe instance instead of assuming the unnamed slots trail the named ones by @XuehaiPan in #290.

Fix the treespec repr printing the raw unnamed-field marker as if it were a keyword argument, now rendered as <unnamed@N> by @XuehaiPan in #290.

Fix StructSequenceEntry reporting an unnamed sequence slot as field='unnamed field', which reads as a real field name, now reported by its index by @XuehaiPan in #290.

Fix PyTreeSpec.__setstate__() accepting a malformed state, which could read out of bounds or abort the interpreter when the treespec was later used by @XuehaiPan in #290.

Fix PyTreeSpec.__getstate__() returning the treespec's internal mutable containers, so mutating the pickled state corrupted an otherwise immutable treespec by @XuehaiPan in #290.

Fix PyTreeSpec.__setstate__() borrowing the key lists from the state it was given rather than copying them, so mutating that state afterwards silently reordered the restored treespec by @XuehaiPan in #290.

Fix pickling a PyTreeSpec with protocol 0 or 1 aborting the interpreter, by reducing through copyreg.__newobj__ by @XuehaiPan in #290.

Fix PyTreeSpec.compose(), PyTreeSpec.broadcast_to_common_suffix(), treespec_transform(), and treespec_from_collection() silently rebinding a custom node to a different registration when an empty namespace adopted a non-empty one by @XuehaiPan in #290.

Fix PyTreeSpec.broadcast_to_common_suffix() sorting the argument treespec's dictionary keys in place while building its key-mismatch error message, corrupting a treespec the caller still holds by @XuehaiPan in #290.

Fix the dictionary key order being lost when a treespec built under the global namespace is promoted to an insertion-ordered namespace by @XuehaiPan in #290.

Fix treespec_from_collection() on a leaf reporting an escalated UserWarning as a confusing SystemErr... Description has been truncated

…h 19 updates Bumps the python-minor-patch group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.52.4` | | [transformers](https://github.com/huggingface/transformers) | `5.15.0` | `5.15.1` | | [bitsandbytes](https://github.com/bitsandbytes-foundation/bitsandbytes) | `0.50.0` | `0.50.1` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.32.2` | `3.32.4` | | [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.26.0` | `1.28.0` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.165.10` | | [llvmlite](https://github.com/numba/llvmlite) | `0.48.0` | `0.49.0` | | [ml-dtypes](https://github.com/jax-ml/ml_dtypes) | `0.5.4` | `0.6.0` | | [narwhals](https://github.com/narwhals-dev/narwhals) | `2.24.0` | `2.25.0` | | [numba](https://github.com/numba/numba) | `0.66.0` | `0.67.0` | | [optree](https://github.com/metaopt/optree) | `0.19.1` | `0.20.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `7.35.1` | `7.36.0` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.5.1` | `1.5.2` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.4` | | [starlette](https://github.com/Kludex/starlette) | `1.4.1` | `1.6.0` | | [sympy](https://github.com/sympy/sympy) | `1.13.1` | `1.14.0` | | [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` | | [virtualenv](https://github.com/pypa/virtualenv) | `21.7.1` | `21.7.4` | Updates `uvicorn` from 0.52.1 to 0.52.4 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.52.1...0.52.4) Updates `transformers` from 5.15.0 to 5.15.1 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.15.0...v5.15.1) Updates `bitsandbytes` from 0.50.0 to 0.50.1 - [Release notes](https://github.com/bitsandbytes-foundation/bitsandbytes/releases) - [Changelog](https://github.com/bitsandbytes-foundation/bitsandbytes/blob/main/CHANGELOG.md) - [Commits](bitsandbytes-foundation/bitsandbytes@0.50.0...0.50.1) Updates `filelock` from 3.32.2 to 3.32.4 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.32.2...3.32.4) Updates `huggingface-hub` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/huggingface/huggingface_hub/releases) - [Commits](huggingface/huggingface_hub@v1.26.0...v1.28.0) Updates `hypothesis` from 6.165.2 to 6.165.10 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.165.10) Updates `llvmlite` from 0.48.0 to 0.49.0 - [Release notes](https://github.com/numba/llvmlite/releases) - [Commits](numba/llvmlite@v0.48.0...v0.49.0) Updates `ml-dtypes` from 0.5.4 to 0.6.0 - [Release notes](https://github.com/jax-ml/ml_dtypes/releases) - [Changelog](https://github.com/jax-ml/ml_dtypes/blob/main/CHANGELOG.md) - [Commits](jax-ml/ml_dtypes@v0.5.4...v0.6.0) Updates `narwhals` from 2.24.0 to 2.25.0 - [Release notes](https://github.com/narwhals-dev/narwhals/releases) - [Commits](narwhals-dev/narwhals@v2.24.0...v2.25.0) Updates `numba` from 0.66.0 to 0.67.0 - [Release notes](https://github.com/numba/numba/releases) - [Commits](numba/numba@0.66.0...0.67.0) Updates `optree` from 0.19.1 to 0.20.0 - [Release notes](https://github.com/metaopt/optree/releases) - [Changelog](https://github.com/metaopt/optree/blob/main/CHANGELOG.md) - [Commits](metaopt/optree@v0.19.1...v0.20.0) Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `protobuf` from 7.35.1 to 7.36.0 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `python-discovery` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](tox-dev/python-discovery@1.5.1...1.5.2) Updates `ruff` from 0.16.1 to 0.16.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.1...0.16.4) Updates `starlette` from 1.4.1 to 1.6.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@1.4.1...1.6.0) Updates `sympy` from 1.13.1 to 1.14.0 - [Release notes](https://github.com/sympy/sympy/releases) - [Commits](sympy/sympy@sympy-1.13.1...sympy-1.14.0) Updates `typing-inspection` from 0.4.2 to 0.4.4 - [Release notes](https://github.com/pydantic/typing-inspection/releases) - [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md) - [Commits](pydantic/typing-inspection@v0.4.2...v0.4.4) Updates `virtualenv` from 21.7.1 to 21.7.4 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.7.1...21.7.4) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.52.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: transformers dependency-version: 5.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: bitsandbytes dependency-version: 0.50.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: filelock dependency-version: 3.32.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: huggingface-hub dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: hypothesis dependency-version: 6.165.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: llvmlite dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: ml-dtypes dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: narwhals dependency-version: 2.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: numba dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: optree dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: protobuf dependency-version: 7.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: python-discovery dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.16.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: starlette dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: sympy dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: typing-inspection dependency-version: 0.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: virtualenv dependency-version: 21.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-01T13:54:07Z

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 26, 2026

dependabot Bot closed this Sep 1, 2026

dependabot Bot deleted the dependabot/pip/python-minor-patch-e1b2fb1152 branch September 1, 2026 13:54

Navigation Menu

build(deps): bump the python-minor-patch group across 1 directory with 19 updates - #117

build(deps): bump the python-minor-patch group across 1 directory with 19 updates#117
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-minor-patch-e1b2fb1152

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.52.4

Fixed

Version 0.52.3

Changed

Version 0.52.2

Fixed

0.52.4 (August 18, 2026)

Fixed

0.52.3 (August 13, 2026)

Changed

0.52.2 (August 13, 2026)

Fixed

Patch release: v5.15.1

Patch release v5.15.1

0.50.1: RTX Spark Support

Highlights

What's Changed

New Contributors

3.32.4

What's Changed

3.32.3

What's Changed

[v1.28.0] Hardware discovery and managed engine images for Inference Endpoints and more

🔎 Discover deployable hardware with hf endpoints hardware

🚀 Managed engine images and multi-accelerator parallelism for Inference Endpoints

🤖 Inference

🖥️ CLI

🐛 Bug and typo fixes

0.49.0

v0.6.0

[0.6.0] - 2026-08-13

Narwhals v2.25.0

Changes

🚀 Performance improvements

✨ Enhancements

🐞 Bug fixes

📖 Documentation

🛠️ Other improvements

0.67.0

optree v0.20.0

Added

Changed

Fixed

Uh oh!

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading

🔎 Discover deployable hardware with `hf endpoints hardware`