Skip to content

chore(deps): bump the all-dependencies group with 4 updates - #191

Merged
tiadams merged 1 commit into
mainfrom
dependabot/uv/all-dependencies-054bfa80b2
Mar 18, 2026
Merged

chore(deps): bump the all-dependencies group with 4 updates#191
tiadams merged 1 commit into
mainfrom
dependabot/uv/all-dependencies-054bfa80b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 4 updates: cachetools, openai, sentence-transformers and weaviate-client.

Updates cachetools from 7.0.4 to 7.0.5

Changelog

Sourced from cachetools's changelog.

v7.0.5 (2026-03-09)

  • Minor @cachedmethod performance improvements.
Commits

Updates openai from 2.26.0 to 2.28.0

Release notes

Sourced from openai's releases.

v2.28.0

2.28.0 (2026-03-13)

Full Changelog: v2.27.0...v2.28.0

Features

v2.27.0

2.27.0 (2026-03-13)

Full Changelog: v2.26.0...v2.27.0

Features

  • api: api update (60ab24a)
  • api: manual updates (b244b09)
  • api: manual updates (d806635)
  • api: sora api improvements: character api, video extensions/edits, higher resolution exports. (58b70d3)

Bug Fixes

  • api: repair merged videos resource (742d8ee)

Chores

  • internal: codegen related update (4e6498e)
  • internal: codegen related update (93af129)
  • match http protocol with ws protocol instead of wss (026f9de)
  • use proper capitalization for WebSockets (a2f9b07)
Changelog

Sourced from openai's changelog.

2.28.0 (2026-03-13)

Full Changelog: v2.27.0...v2.28.0

Features

2.27.0 (2026-03-13)

Full Changelog: v2.26.0...v2.27.0

Features

  • api: api update (60ab24a)
  • api: manual updates (b244b09)
  • api: manual updates (d806635)
  • api: sora api improvements: character api, video extensions/edits, higher resolution exports. (58b70d3)

Bug Fixes

  • api: repair merged videos resource (742d8ee)

Chores

  • internal: codegen related update (4e6498e)
  • internal: codegen related update (93af129)
  • match http protocol with ws protocol instead of wss (026f9de)
  • use proper capitalization for WebSockets (a2f9b07)
Commits

Updates sentence-transformers from 5.2.3 to 5.3.0

Release notes

Sourced from sentence-transformers's releases.

v5.3.0 - Improved Contrastive Learning, New Losses, and Transformers v5 Compatibility

This minor version brings several improvements to contrastive learning: MultipleNegativesRankingLoss now supports alternative InfoNCE formulations (symmetric, GTE-style) and optional hardness weighting for harder negatives. Two new losses are introduced, GlobalOrthogonalRegularizationLoss for embedding space regularization and CachedSpladeLoss for memory-efficient SPLADE training. The release also adds a faster hashed batch sampler, fixes GroupByLabelBatchSampler for triplet losses, and ensures full compatibility with the latest Transformers v5 versions.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.3.0
Inference only, use one of:
pip install sentence-transformers==5.3.0
pip install sentence-transformers[onnx-gpu]==5.3.0
pip install sentence-transformers[onnx]==5.3.0
pip install sentence-transformers[openvino]==5.3.0

Updated MultipleNegativesRankingLoss (a.k.a. InfoNCE)

MultipleNegativesRankingLoss received two major upgrades: support for alternative InfoNCE formulations from the literature, and optional hardness weighting to up-weight harder negatives.

Support other InfoNCE variants (#3607)

MultipleNegativesRankingLoss now supports several well-known contrastive loss variants from the literature through new directions and partition_mode parameters. Previously, this loss only supported the standard forward direction (query → doc). You can now configure which similarity interactions are included in the loss:

  • "query_to_doc" (default): For each query, its matched document should score higher than all other documents.
  • "doc_to_query": The symmetric reverse — for each document, its matched query should score higher than all other queries.
  • "query_to_query": For each query, all other queries should score lower than its matched document.
  • "doc_to_doc": For each document, all other documents should score lower than its matched query.

The partition_mode controls how scores are normalized: "joint" computes a single softmax over all directions, while "per_direction" computes a separate softmax per direction and averages the losses.

These combine to reproduce several loss formulations from the literature:

Standard InfoNCE (default, unchanged behavior):

loss = MultipleNegativesRankingLoss(model)
# equivalent to directions=("query_to_doc",), partition_mode="joint"

Symmetric InfoNCE (Günther et al. 2024) — adds the reverse direction so both queries and documents are trained to find their match:

loss = MultipleNegativesRankingLoss(
    model,
    directions=("query_to_doc", "doc_to_query"),
    partition_mode="per_direction",
)

GTE improved contrastive loss (Li et al. 2023) — adds same-type negatives (query <-> query, doc <-> doc) for a stronger training signal, especially useful with pairs-only data:

loss = MultipleNegativesRankingLoss(
</tr></table> 

... (truncated)

Commits
  • ce48ecc Merge branch 'main' into v5.3-release
  • cec08f8 Fix citation for EmbeddingGemma paper (#3687)
  • c29b3a6 Release v5.3.0
  • 55c13de Prep docs main page for v5.3.0 (#3686)
  • 72e75f7 [tests] Add slow reproduction tests for most common models (#3681)
  • 237e441 [fix] Fix model card generation with set_transform with new column names (#...
  • 7f180b4 [feat] Add hardness-weighted contrastive learning to losses (#3667)
  • 5890086 Disallow query_to_query/doc_to_doc with partition_mode="per_direction" due to...
  • 6518c36 CE trainer: Removed IterableDataset from train and eval dataset type hints (#...
  • 1e0e84c Add tips for adjusting batch size to improve processing speed (#3672)
  • Additional commits viewable in compare view

Updates weaviate-client from 4.20.3 to 4.20.4

Changelog

Sourced from weaviate-client's changelog.

Version 4.20.4

This patch version includes: - Include client version in GRPC requests - Add support for the new multi2vec_google_gemini module

Commits
  • c0b796e Merge pull request #1982 from weaviate/changelog_4_20_4
  • dfa8ae4 Add changelog for v4.20.4
  • 3a0958c Merge pull request #1977 from weaviate/multi2vec-google-aistudio-vectorizer-c...
  • 106f225 Merge branch 'main' into multi2vec-google-aistudio-vectorizer-config
  • 5ca709e Merge pull request #1980 from weaviate/client_version_grpc
  • 55e56f0 Dont overwrite version from additional headers
  • 79ee3d0 Add client version to GRPC headers
  • 2ccdaa1 chore: rename multi2vec_google_aistudio config to multi2vec_google_gemini
  • ce63311 feat: add multi2vec_google_aistudio vectorizer config
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 4 updates: [cachetools](https://github.com/tkem/cachetools), [openai](https://github.com/openai/openai-python), [sentence-transformers](https://github.com/huggingface/sentence-transformers) and [weaviate-client](https://github.com/weaviate/weaviate-python-client).


Updates `cachetools` from 7.0.4 to 7.0.5
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.0.4...v7.0.5)

Updates `openai` from 2.26.0 to 2.28.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.26.0...v2.28.0)

Updates `sentence-transformers` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v5.2.3...v5.3.0)

Updates `weaviate-client` from 4.20.3 to 4.20.4
- [Release notes](https://github.com/weaviate/weaviate-python-client/releases)
- [Changelog](https://github.com/weaviate/weaviate-python-client/blob/main/docs/changelog.rst)
- [Commits](weaviate/weaviate-python-client@v4.20.3...v4.20.4)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: openai
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sentence-transformers
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: weaviate-client
  dependency-version: 4.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 16, 2026
@tiadams
tiadams merged commit b5bd6a7 into main Mar 18, 2026
8 checks passed
@tiadams
tiadams deleted the dependabot/uv/all-dependencies-054bfa80b2 branch March 18, 2026 13:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant