Skip to content

Bump the uv-batch group across 1 directory with 29 updates#464

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-batch-0d1506aa57
Open

Bump the uv-batch group across 1 directory with 29 updates#464
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-batch-0d1506aa57

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the uv-batch group with 28 updates in the / directory:

Package From To
requests 2.32.5 2.33.1
chardet 5.2.0 7.4.3
psutil 7.1.3 7.2.2
rapidfuzz 3.10.1 3.14.5
websockets 15.0.1 16.0
regex 2025.10.23 2026.4.4
opencv-python 4.12.0.88 4.13.0.92
oneocr 1.0.10 1.0.12
groq 0.33.0 1.2.0
torchcodec 0.8.1 0.11.1
torchaudio 2.8.0 2.11.0
torch 2.8.0 2.11.0
pillow 12.0.0 12.2.0
openai 2.6.1 2.32.0
jaconv 0.4.1 0.5.0
pyobjc 10.3.2 12.1
pyqt6 6.10.2 6.11.0
tokenizers 0.22.1 0.22.2
curl-cffi 0.13.0 0.15.0
py7zr 1.0.0 1.1.0
uv 0.9.30 0.11.7
pip 25.3 26.0.1
onnxruntime 1.23.2 1.24.3
google-genai 1.70.0 1.73.1
pytest 9.0.2 9.0.3
hypothesis 6.151.11 6.152.1
pre-commit 4.5.1 4.6.0
ruff 0.15.9 0.15.11

Updates requests from 2.32.5 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits

Updates chardet from 5.2.0 to 7.4.3

Release notes

Sourced from chardet's releases.

7.4.3

Patch release: fixes a crash when input contains null bytes inside a <meta charset> declaration.

Bug Fixes

  • Fixed ValueError: embedded null character crash when input contained a <meta charset> declaration with a null byte in the encoding name (e.g. b'<meta charset="\x00utf-8">'). codecs.lookup() raises ValueError on embedded nulls, and lookup_encoding() was only catching LookupError. Also added defensive ValueError catches in _validate_bytes() and _to_utf8() for completeness. (#369, thanks @​DRMacIver for the report)

Full Changelog: chardet/chardet@7.4.2...7.4.3

7.4.2

Patch release: fixes a crash on short inputs and closes a bunch of WHATWG/IANA alias gaps.

Bug Fixes

  • Fixed RuntimeError: pipeline must always return at least one result on ~2% of all possible two-byte inputs (e.g. b"\xf9\x92"). Multi-byte encodings like CP932 and Johab could score above the structural confidence threshold on very short inputs, but then statistical scoring would return nothing, leaving an empty result list instead of falling through to the fallback. (#367, #368, thanks @​jasonwbarnett)

Improvements

  • Added ~90 encoding aliases from the WHATWG Encoding Standard and IANA Character Sets registry so that <meta charset> labels like x-cp1252, x-sjis, dos-874, csUTF8, and the cswindows* family all resolve correctly through the markup detection stage. Every alias was driven by a failing spec-compliance test, not speculative. (#366)
  • Added a spec-compliance test suite covering Python decode round-trips for all 86 registry encodings, WHATWG label resolution, IANA preferred MIME names, and Unicode/RFC conformance (BOM sniffing, UTF-8 boundary cases, UTF-16 surrogate pairs). This is the test suite that would have caught the 7.4.1 BOM bug before release. (#366)

Full Changelog: chardet/chardet@7.4.1...7.4.2

7.4.1

Bug Fixes

  • BOM-prefixed UTF-16/32 input now returns utf-16/utf-32 instead of utf-16-le/utf-16-be/utf-32-le/utf-32-be. The endian-specific codecs don't strip the BOM on decode, so callers were getting a stray U+FEFF at the start of their text. BOM-less detection is unchanged. (#364, #365)

Full Changelog: chardet/chardet@7.4.0...7.4.1

chardet 7.4.0 brings accuracy up to 99.3% (from 98.6% in 7.3.0) and significantly faster cold start thanks to a new dense model format.

What's New

Performance:

  • New dense zlib-compressed model format (v2) drops cold start (import + first detect) from ~75ms to ~13ms with mypyc

Accuracy (98.6% → 99.3%):

  • Eliminated train/test data overlap via content fingerprinting
  • Added MADLAD-400 and Wikipedia as supplemental training sources
  • Improved non-ASCII bigram scoring: high-byte bigrams are now preserved during training and weighted by per-bigram IDF
  • Encoding-aware substitution filtering (substitutions only apply for characters the target encoding can't represent)
  • Increased training samples from 15K to 25K per language/encoding pair

Bug fixes:

  • Added dedicated structural analyzers for CP932, CP949, and Big5-HKSCS (these were previously sharing their base encoding's byte-range analyzer, missing extended ranges)

Metrics

| | chardet 7.4.0 (mypyc) | chardet 6.0.0 | charset-normalizer 3.4.6 |

... (truncated)

Changelog

Sourced from chardet's changelog.

7.4.3 (2026-04-13)

Bug Fixes:

  • Fixed ValueError: embedded null character crash when input contained a <meta charset> declaration with a null byte in the encoding name (e.g. b'<meta charset="\x00utf-8">'). codecs.lookup() raises ValueError on embedded nulls, and lookup_encoding() was only catching LookupError. Also added defensive ValueError catches in _validate_bytes() and _to_utf8() for completeness. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude, [#369](https://github.com/chardet/chardet/issues/369) <https://github.com/chardet/chardet/issues/369>_)

7.4.2 (2026-04-12)

Bug Fixes:

  • Fixed RuntimeError: pipeline must always return at least one result on ~2% of all possible two-byte inputs (e.g. b"\xf9\x92"). Multi-byte encodings like CP932 and Johab could score above the structural confidence threshold on very short inputs, but then statistical scoring would return nothing, leaving the pipeline with an empty result list instead of falling through to the no_match_encoding fallback. (Jason Barnett <https://github.com/jasonwbarnett>_ via Claude, [#367](https://github.com/chardet/chardet/issues/367) <https://github.com/chardet/chardet/issues/367>, [#368](https://github.com/chardet/chardet/issues/368) <https://github.com/chardet/chardet/pull/368>)

Improvements:

  • Added ~90 encoding aliases from the WHATWG Encoding Standard and IANA Character Sets registry so that <meta charset> labels like x-cp1252, x-sjis, dos-874, csUTF8, and the cswindows* family all resolve correctly through the markup detection stage. Every alias was driven by a failing spec-compliance test. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude, [#366](https://github.com/chardet/chardet/issues/366) <https://github.com/chardet/chardet/pull/366>_)
  • Added a spec-compliance test suite covering Python decode round-trips for all 86 registry encodings, WHATWG web-platform label resolution, IANA preferred MIME names, and Unicode/RFC conformance (BOM sniffing, UTF-8 boundary cases, UTF-16 surrogate pairs). This is the test suite that would have caught the 7.4.1 BOM bug before release. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude, [#366](https://github.com/chardet/chardet/issues/366) <https://github.com/chardet/chardet/pull/366>_)

7.4.1 (2026-04-07)

... (truncated)

Commits
  • 8f404a5 docs: set 7.4.3 release date to 2026-04-13
  • 7a6667f docs: fix changelog attribution for #369
  • a1fc986 docs: changelog for 7.4.3
  • 0af01d6 Fix ValueError crash on null bytes in charset declarations (#369)
  • 08e4ebc ci: parallelize riscv64 builds across 5 RISE runners
  • 2f6e1e9 ci: use python3 -m pip on riscv64 runner
  • 204623d ci: invoke cibuildwheel manually on riscv64 runner
  • 78c1d20 ci: use native runners for aarch64/riscv64 instead of QEMU
  • 3cc0960 docs: changelog for 7.4.2
  • 9079efc Fix RuntimeError on ~2% of two-byte inputs (#368)
  • Additional commits viewable in compare view

Updates psutil from 7.1.3 to 7.2.2

Changelog

Sourced from psutil's changelog.

7.2.2 — 2026-01-28 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:2705: [Linux]: :meth:Process.wait now uses pidfd_open() + poll() (no busy loop). Requires Linux >= 5.3 and Python >= 3.9.
  • :gh:2705: [macOS], [BSD]: :meth:Process.wait now uses kqueue() (no busy loop).

Bug fixes

  • :gh:2701, [macOS]: fix compilation error on macOS < 10.7. (patch by :user:Sergey Fedorov <barracuda156>)
  • :gh:2707, [macOS]: fix potential memory leaks in error paths of :meth:Process.memory_full_info and :meth:Process.threads.
  • :gh:2708, [macOS]: :meth:Process.cmdline and :meth:Process.environ may fail with OSError: [Errno 0] Undefined error (from sysctl(KERN_PROCARGS2)). They now raise :exc:AccessDenied instead.

7.2.1 — 2025-12-29 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:2699, [FreeBSD], [NetBSD]: :func:heap_info does not detect small allocations (<= 1K). In order to fix that, we now flush internal jemalloc cache before fetching the metrics.

7.2.0 — 2025-12-23 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:1275: new :func:heap_info and :func:heap_trim functions, providing direct access to the platform's native C :term:heap allocator (glibc, mimalloc, libmalloc). Useful to create tools to detect memory leaks.
  • :gh:2403, [Linux]: publish wheels for Linux musl.
  • :gh:2680: unit tests are no longer installed / part of the distribution. They now live under tests/ instead of psutil/tests.

Bug fixes

  • :gh:2684, [FreeBSD], [critical]: compilation fails on FreeBSD 14 due to missing include.
  • :gh:2691, [Windows]: fix memory leak in :func:net_if_stats due to missing Py_CLEAR.

Compatibility notes

... (truncated)

Commits
  • 9eea97d Pre-release
  • 938ac64 Rm sphinxcontrib.googleanalytics; override layout.html
  • 9dcbb7e Add sphinxcontrib-googleanalytics to requirements.txt
  • 76eaf9a Try to add google analytics to doc
  • de1cafa Update doc mentioning Process.wait() internal details
  • bb30943 Refact can_use_pidfd_open() and can_use_kqueue()
  • a571717 #2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)
  • 8b98c3e Pre-release
  • 700b7e6 [macOS] fix potential leaks in error paths (#2707)
  • 7cc7923 Windows / cmdline(): be more defensive in free()ing in case of error
  • Additional commits viewable in compare view

Updates rapidfuzz from 3.10.1 to 3.14.5

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.5

Fixed

  • fix release ci attempting to upload a pyodide wheel

Release 3.14.4

Added

  • add risc64 wheels
  • add support for taskflow 4.0.0

Changed

  • upgrade to Cython==3.2.4.

Fixed

  • fix type hints for extractOne when no score_cutoff is provided

Release 3.14.3

Fixed

  • add missing pypy and freethreaded linux wheels

Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremely long to build under emulation

Release 3.14.2

Changed

  • upgrade to Cython==3.1.6
  • enable free threading

Release 3.14.1

Fixed

  • Fully disable line tracing in release builds

Release 3.14.0

Changed

  • upgrade to Cython==3.1.3. This enables compilation with free threaded python.
  • upgrade to rapidfuzz-cpp==3.3

Added

  • add support for freethreaded Python
  • add python 3.14 wheels

Removed

  • dropped support for Python3.9
  • drop 32 bit linux wheels

Fixed

  • remove unused hook-dirs from pyinstaller config to fix a warning
  • fixed WRatio for a length ratio of exactly 8.0

Release 3.13.0

Added

... (truncated)

Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.5] - 2026-08-07 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix release ci attempting to upload a pyodide wheel

[3.14.4] - 2026-04-06 ^^^^^^^^^^^^^^^^^^^^^ Added

  • add risc64 wheels
  • add support for taskflow 4.0.0

Changed

* upgrade to ``Cython==3.2.4``.

Fixed

* fix type hints for extractOne when no score_cutoff is provided

[3.14.3] - 2025-11-01
^^^^^^^^^^^^^^^^^^^^^
Fixed

  • add missing pypy and freethreaded linux wheels

Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^ Changed

* upgrade to ``Cython==3.1.6``
* enable free threading

[3.14.1] - 2025-09-08 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* Fully disable line tracing in release builds

[3.14.0] - 2025-08-27
^^^^^^^^^^^^^^^^^^^^^
Changed
&lt;/tr&gt;&lt;/table&gt;
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/edf9f3c2d016c878dae1511301f8b4a501bba871&quot;&gt;&lt;code&gt;edf9f3c&lt;/code&gt;&lt;/a> fix release ci</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/3d8470bf60062dda5c200517f61a8ff43e3e9ef2&quot;&gt;&lt;code&gt;3d8470b&lt;/code&gt;&lt;/a> enable verbose publish</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7fd4ee202b5e3cc9f158f505a33d934a68c14148&quot;&gt;&lt;code&gt;7fd4ee2&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/9691cf1bf985eaf59f6c968f3d7cd8e59054ebaa&quot;&gt;&lt;code&gt;9691cf1&lt;/code&gt;&lt;/a> tag release</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/fd16748843be7d1a4842604fa3429e3943e80e5c&quot;&gt;&lt;code&gt;fd16748&lt;/code&gt;&lt;/a> ci: switch riscv64 from QEMU to native RISE runner</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7f7d58b91a2716eaaec939a72b476ab1bf1ead1b&quot;&gt;&lt;code&gt;7f7d58b&lt;/code&gt;&lt;/a> ci: add riscv64 wheel builds via QEMU</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f4b56942bdbbb99bba556656ea8a0aef1e8c12f0&quot;&gt;&lt;code&gt;f4b5694&lt;/code&gt;&lt;/a> Bump pypa/cibuildwheel from 3.3.1 to 3.4.0 in the github-actions group</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f2873ce9868285eca1d05d8645791d76a2b545fe&quot;&gt;&lt;code&gt;f2873ce&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/4e48509d858454ea994521f90ae8c5d66eb15073&quot;&gt;&lt;code&gt;4e48509&lt;/code&gt;&lt;/a> support Taskflow 4.0.0</li>
<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/70480396a66fadabd897407ce289978dec2c13c0&quot;&gt;&lt;code&gt;7048039&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 4 updates</li>
<li>Additional commits viewable in <a href="https://github.com/rapidfuzz/RapidFuzz/compare/v3.10.1...v3.14.5&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Updates websockets from 15.0.1 to 16.0

Release notes

Sourced from websockets's releases.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • d4303a5 Release version 16.0.
  • 851bcd7 Bump pypa/cibuildwheel from 3.3.0 to 3.3.1
  • 740c8d3 Temporarily remove the trio implementation.
  • 92ea055 Add missing changelog entry.
  • ba74244 Document bug fix.
  • 9410483 Pin sphinx to avoid error in sphinxcontrib-trio.
  • 8e4d408 Document asyncio's TLS read buffer.
  • cb3500b Stop referring to the asyncio implementation as new.
  • 6563a9c The threading implementation supports max_queue.
  • 9f17e92 Clarify that protocol_mutex protects pending_pings.
  • Additional commits viewable in compare view

Updates regex from 2025.10.23 to 2026.4.4

Changelog

Sourced from regex's changelog.

Version: 2026.5.9

Reverse matching with full unicode casefolding could lead to out-of-range string indexes.

Version: 2026.4.4

A fix for older Python versions before free-threading was  supported.

Version: 2026.4.3

More fixes for free-threading.

Version: 2026.3.32

Fixed segfault.

Version: 2026.3.31

Fixed bug again.

Version: 2026.3.30

Fixed bug.

Version: 2026.3.28

Fixed version.

Version: 2026.3.27

Various fixes, including ones to improve free-threading support.

Version: 2026.2.28

Replaced atomic operations with mutex on pattern object for free-threaded Python.

Version: 2026.2.26

PR [#598](https://github.com/mrabarnett/mrab-regex/issues/598): Fix race condition in storage caching with atomic operations.

Replaced use of PyUnicode_GET_LENGTH with PyUnicode_GetLength.

Version: 2026.2.19

Added \z as alias of \Z, like in re module.

Added prefixmatch as alias of match, like in re module.

Version: 2026.1.15

... (truncated)

Commits
  • bc57b04 A fix for older Python versions before free-threading was supported.
  • 773e213 More fixes for free-threading.
  • 5d51c75 Fixed segfault.
  • 2aff2db Fixed bug again.
  • 16af8ae Fixed bug.
  • 2356563 Fixed bug.
  • f579e8f Fixed version.
  • 55315a0 Fixed version.
  • 923d78e Various fixes, including ones to improve free-threading support.
  • df2d5ac Replaced atomic operations with mutex on pattern object for free-threaded Pyt...
  • Additional commits viewable in compare view

Updates opencv-python from 4.12.0.88 to 4.13.0.92

Release notes

Sourced from opencv-python's releases.

4.13.0.92

Follow up release for 4.13.0 with X server dependency fix. See #28438 for details.

4.13.0.90

Complete OpenCV 4.13.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

Python specific:

  • Manylinux 2_28 support, Numpy 2.4 support, Python 3.14 support
  • Tuned Python bindings for logging #27812
  • Marked Feature2D.detectAndCompute mask as optional in Python type stubs #27544
  • Marked distCoeffs/R/D as optional in calib3d functions #27564
  • Added DLPACK support #27581, #27861
  • Fixed memory leaks in pybindings #27738
  • Add PathLike type hints for args annotated with CV_WRAP_FILE_PATH #27767
  • Fixed memory leak in pyopencv_to for path-like objects #28047
  • Tunned Python bindings: use export_name as resolved typename for AliasTypeNode #27997
  • python: fix pytest-cov false warnings by using compile() with full file path in exec_file_wrapper #28093
  • Fixed python scalar typing issues #27620
  • Fixed bug in ifdef state machine in header parser for bindings #27393
  • Wrap GridType field in cv::findCirclesGrid parameters structure #27689
Commits

Updates oneocr from 1.0.10 to 1.0.12

Commits

Updates groq from 0.33.0 to 1.2.0

Release notes

Sourced from groq's releases.

v1.2.0

1.2.0 (2026-04-18)

Full Changelog: v1.1.2...v1.2.0

Features

  • internal: implement indices array format for query and form serialization (80ca975)

Bug Fixes

  • client: preserve hardcoded query params when merging with user params (ff12a20)
  • ensure file data are only sent as 1 parameter (f67099c)

Performance Improvements

  • client: optimize file structure copying in multipart requests (22d711f)

Chores

  • tests: bump steady to v0.20.1 (f031213)
  • tests: bump steady to v0.20.2 (66e56a7)
  • tests: bump steady to v0.22.1 (65e6535)

Documentation

v1.1.2

1.1.2 (2026-03-25)

Full Changelog: v1.1.1...v1.1.2

Bug Fixes

  • deps: bump minimum typing-extensions version (3ef90d5)
  • pydantic: do not pass by_alias unless set (f84dd8c)
  • sanitize endpoint path params (4e57480)

Chores

  • ci: skip lint on metadata-only changes (e34867c)
  • internal: tweak CI branches (5ec9308)
  • internal: update gitignore (29f97bf)
  • tests: bump steady to v0.19.4 (7c9854e)

... (truncated)

Changelog

Sourced from groq's changelog.

1.2.0 (2026-04-18)

Full Changelog: v1.1.2...v1.2.0

Features

  • internal: implement indices array format for query and form serialization (80ca975)

Bug Fixes

  • client: preserve hardcoded query params when merging with user params (ff12a20)
  • ensure file data are only sent as 1 parameter (f67099c)

Performance Improvements

  • client: optimize file structure copying in multipart requests (22d711f)

Chores

  • tests: bump steady to v0.20.1 (f031213)
  • tests: bump steady to v0.20.2 (66e56a7)
  • tests: bump steady to v0.22.1 (65e6535)

Documentation

1.1.2 (2026-03-25)

Full Changelog: v1.1.1...v1.1.2

Bug Fixes

  • deps: bump minimum typing-extensions version (3ef90d5)
  • pydantic: do not pass by_alias unless set (f84dd8c)
  • sanitize endpoint path params (4e57480)

Chores

  • ci: skip lint on metadata-only changes (e34867c)
  • internal: tweak CI branches (5ec9308)
  • internal: update gitignore (29f97bf)
  • tests: bump steady to v0.19.4 (7c9854e)
  • tests: bump steady to v0.19.5 (e3a0370)
  • tests: bump steady to v0.19.6 (001301b)

... (truncated)

Commits

Updates torchcodec from 0.8.1 to 0.11.1

Release notes

Sourced from torchcodec's releases.

TorchCodec 0.11.1

We are releasing TorchCodec 0.11.1 as a bug-fix release, and it is compatible with torch 2.11.

The fix:

In 0.11, we began uploading CUDA 13.0 linux wheels to PyPI, so pip install torchcodec would install a CUDA enabled wheel. This caused an error at import time for users without the necessary CUDA libraries, or for users who only wanted to use CPU decoding.

Torchcodec 0.11.1 reverts this change, so pip install torchcodec will install the CPU wheel. We will resume uploading CUDA wheels as torch does in torchcodec version 0.12!

As before, CUDA wheels are available by specifying the index-url argument:

pip install torchcodec --index-url --index-url https://download.pytorch.org/whl/cu130

TorchCodec 0.11

TorchCodec 0.11 is out! This release brings CUDA decoding improvements and improved HDR metadata and rotation support in VideoDecoder, as well as output fps support!

CUDA decoder performance improvements

We made significant improvements to the CUDA decoder throughput, available via the “beta” backend:

  • #1232 fixed a bug in the decoder cache, allowing more than one decoder instance to be cached per video configuration. The fix doesn’t affect single-threaded pipelines, but drastically improves the throughput of multi-threaded decoding.
  • #1227 improved cache performance further.
  • #1243 added an LRU eviction policy for the cache, which will improve the cache hit when decoding lots of different video configurations.
  • #1246 added the set_nvdec_cache_capacity() which allows the user to control the cache size. Larger cache sizes are typically more performant, and more memory consuming.

These are available via the “beta” backend”.

⚠️ Note that in the next release, the “beta” backend will become the default backend. This will be a transparent and backward-compatible change. Users who want to stay on the less efficient FFmpeg backend should use:

with set_cuda_backend("ffmpeg"):
    decoder = VideoDecoder(..., device="cuda")

Read more about this in the CUDA utilities section!

FPS Resampling

get_frames_played_in_range() now accepts a fps parameter to resample video at a target frame rate, duplicating or dropping frames as necessary to match the desired output FPS:

decoder = VideoDecoder(path)
# If a source video is 25 fps, a 1-second range will contain 25 frames.
# We can use the fps argument to resample to 5 fps, which gives us 5 frames:
frames_5fps = decoder.get_frames_played_in_range(start_seconds=1, stop_seconds=2, fps=5)

Read the VideoDecoder docs for more details!

(#1148)

Rotation Support

... (truncated)

Commits

Updates torchaudio from 2.8.0 to 2.11.0

Release notes

Sourced from torchaudio's releases.

TorchAudio 2.11

This release is compatible with torch 2.11 and is compatible with future versions of torch. No new features were added.

TorchAudio 2.10

This release is compatible with torch 2.10. No new features were added.

The C++ and CUDA extensions that were previously marked for deprecation are preserved and will remain in torchaudio (lfilter, RNNTLoss, CUCT, forced_align, and overdrive.).

This release marks the finalization of the TorchAudio migration described in pytorch/audio#3902.

TorchAudio 2.9.1 Release

This is a patch release, which is compatible with PyTorch 2.9.1. There are no new features added.

TorchAudio 2.9 release

Deprecated APIs

Most APIs marked as drop are now removed.

Migration of load() and save() to TorchCodec

We are consolidating the decoding and encoding capabilities of PyTorch in TorchCodec. torchaudio.load() and torchaudio.save() still exist, but their underlying implementation now relies on TorchCodec.

C++ and CUDA extension

We're still working towards preserving forced_align, lfilter, overdrive, RNNT, and CUCTC.

Commits
  • 34c52a6 [Release 2.11] update test-infra refs and version (#4178)
  • 96200d4 Retain init args as attributes in MelScale and InverseMelScale (#4126)
  • e284e58 Remove pinning against torch version (#4171)
  • e123269 Fix building on GCC 14.2 (#4163)
  • d17635f Update version to 2.11 (#4167)
  • cc9f515 Fix CMUARCTIC text transcripts reader. (#4164)
  • ad99271 Fix unused-variable issues, mostly relating to AMD/HIP
  • 0764cfd Upgrade GitHub Actions for Node 24 compatibility (#4156)
  • fbf1d75 [Python STABLE ABI] Port pybind11 extension modules to torch stable libraries...
  • 744912e Update JIT checks for scripting and tracing (#4160)
  • Additional commits viewable in compare view

Updates torch from 2.8.0 to 2.11.0

Release notes

Sourced from torch's releases.

PyTorch 2.11.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

Release Engineering

... (truncated)

Commits
  • 70d99e9 [release only] Increase timeout for rocm libtorch and manywheel builds (#178006)
  • 3e05c5a [MPS] Properly handle conjugated tensors in bmm (#178010)
  • db741c7 [MPS] fix compiling of SDPA producing nan results (#178009)
  • 483b55d Update pytorch_sphinx_theme2 version to 0.4.6 (#177616)
  • 7f2cdeb [windows][smoke test] Add an option to install cuda if required cuda/cudnn on...
  • 76fd078 [release-only] Fix libtorch builds. Fix lint (#177299)
  • fa384de [Inductor][MPS] Fix half-precision type mismatches in Metal shader codegen (#...
  • 036b25f Let stable::from_blob accept a lambda as deleter (cherry-pick) (#176440)
  • 41f8e3e [CI] Stop using G3 runners (#177161)
  • e2fa295 [CD] Unpin cuda-bindings dependencies (#177159)
  • Additional commits viewable in compare view

Updates pillow from 12.0.0 to 12.2.0

Release notes

Sourced from...

Description has been truncated

Bumps the uv-batch group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.1` |
| [chardet](https://github.com/chardet/chardet) | `5.2.0` | `7.4.3` |
| [psutil](https://github.com/giampaolo/psutil) | `7.1.3` | `7.2.2` |
| [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) | `3.10.1` | `3.14.5` |
| [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `16.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2025.10.23` | `2026.4.4` |
| [opencv-python](https://github.com/opencv/opencv-python) | `4.12.0.88` | `4.13.0.92` |
| [oneocr](https://github.com/AuroraWright/oneocr) | `1.0.10` | `1.0.12` |
| [groq](https://github.com/groq/groq-python) | `0.33.0` | `1.2.0` |
| [torchcodec](https://github.com/pytorch/torchcodec) | `0.8.1` | `0.11.1` |
| [torchaudio](https://github.com/pytorch/audio) | `2.8.0` | `2.11.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.8.0` | `2.11.0` |
| [pillow](https://github.com/python-pillow/Pillow) | `12.0.0` | `12.2.0` |
| [openai](https://github.com/openai/openai-python) | `2.6.1` | `2.32.0` |
| [jaconv](https://github.com/ikegami-yukino/jaconv) | `0.4.1` | `0.5.0` |
| [pyobjc](https://github.com/ronaldoussoren/pyobjc) | `10.3.2` | `12.1` |
| [pyqt6](https://www.riverbankcomputing.com/software/pyqt/) | `6.10.2` | `6.11.0` |
| [tokenizers](https://github.com/huggingface/tokenizers) | `0.22.1` | `0.22.2` |
| [curl-cffi](https://github.com/lexiforest/curl_cffi) | `0.13.0` | `0.15.0` |
| [py7zr](https://github.com/miurahr/py7zr) | `1.0.0` | `1.1.0` |
| [uv](https://github.com/astral-sh/uv) | `0.9.30` | `0.11.7` |
| [pip](https://github.com/pypa/pip) | `25.3` | `26.0.1` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.23.2` | `1.24.3` |
| [google-genai](https://github.com/googleapis/python-genai) | `1.70.0` | `1.73.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.11` | `6.152.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.9` | `0.15.11` |



Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `chardet` from 5.2.0 to 7.4.3
- [Release notes](https://github.com/chardet/chardet/releases)
- [Changelog](https://github.com/chardet/chardet/blob/main/docs/changelog.rst)
- [Commits](chardet/chardet@5.2.0...7.4.3)

Updates `psutil` from 7.1.3 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v7.1.3...v7.2.2)

Updates `rapidfuzz` from 3.10.1 to 3.14.5
- [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases)
- [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst)
- [Commits](rapidfuzz/RapidFuzz@v3.10.1...v3.14.5)

Updates `websockets` from 15.0.1 to 16.0
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@15.0.1...16.0)

Updates `regex` from 2025.10.23 to 2026.4.4
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2025.10.23...2026.4.4)

Updates `opencv-python` from 4.12.0.88 to 4.13.0.92
- [Release notes](https://github.com/opencv/opencv-python/releases)
- [Commits](https://github.com/opencv/opencv-python/commits)

Updates `oneocr` from 1.0.10 to 1.0.12
- [Commits](https://github.com/AuroraWright/oneocr/commits)

Updates `groq` from 0.33.0 to 1.2.0
- [Release notes](https://github.com/groq/groq-python/releases)
- [Changelog](https://github.com/groq/groq-python/blob/main/CHANGELOG.md)
- [Commits](groq/groq-python@v0.33.0...v1.2.0)

Updates `torchcodec` from 0.8.1 to 0.11.1
- [Release notes](https://github.com/pytorch/torchcodec/releases)
- [Commits](meta-pytorch/torchcodec@v0.8.1...v0.11.1)

Updates `torchaudio` from 2.8.0 to 2.11.0
- [Release notes](https://github.com/pytorch/audio/releases)
- [Commits](pytorch/audio@v2.8.0...v2.11.0)

Updates `torch` from 2.8.0 to 2.11.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.8.0...v2.11.0)

Updates `pillow` from 12.0.0 to 12.2.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.0.0...12.2.0)

Updates `openai` from 2.6.1 to 2.32.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.6.1...v2.32.0)

Updates `jaconv` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/ikegami-yukino/jaconv/releases)
- [Changelog](https://github.com/ikegami-yukino/jaconv/blob/master/CHANGES.rst)
- [Commits](ikegami-yukino/jaconv@v0.4.1...v0.5.0)

Updates `pyobjc` from 10.3.2 to 12.1
- [Release notes](https://github.com/ronaldoussoren/pyobjc/releases)
- [Changelog](https://github.com/ronaldoussoren/pyobjc/blob/main/docs/changelog.rst)
- [Commits](ronaldoussoren/pyobjc@v10.3.2...v12.1)

Updates `pyqt6` from 6.10.2 to 6.11.0

Updates `tokenizers` from 0.22.1 to 0.22.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Changelog](https://github.com/huggingface/tokenizers/blob/main/RELEASE.md)
- [Commits](huggingface/tokenizers@v0.22.1...v0.22.2)

Updates `curl-cffi` from 0.13.0 to 0.15.0
- [Release notes](https://github.com/lexiforest/curl_cffi/releases)
- [Changelog](https://github.com/lexiforest/curl_cffi/blob/main/docs/changelog.rst)
- [Commits](lexiforest/curl_cffi@v0.13.0...v0.15.0)

Updates `py7zr` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/miurahr/py7zr/releases)
- [Changelog](https://github.com/miurahr/py7zr/blob/master/docs/Changelog.rst)
- [Commits](miurahr/py7zr@v1.0.0...v1.1.0)

Updates `uv` from 0.9.30 to 0.11.7
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.9.30...0.11.7)

Updates `pip` from 25.3 to 26.0.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.3...26.0.1)

Updates `onnxruntime` from 1.23.2 to 1.24.3
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.23.2...v1.24.3)

Updates `google-genai` from 1.70.0 to 1.73.1
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v1.70.0...v1.73.1)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `hypothesis` from 6.151.11 to 6.152.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.11...hypothesis-python-6.152.1)

Updates `pre-commit` from 4.5.1 to 4.6.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0)

Updates `ruff` from 0.15.9 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.9...0.15.11)

Updates `setuptools` from 82.0.1 to 81.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v81.0.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: chardet
  dependency-version: 7.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: rapidfuzz
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: websockets
  dependency-version: '16.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: regex
  dependency-version: 2026.4.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: opencv-python
  dependency-version: 4.13.0.92
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: oneocr
  dependency-version: 1.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-batch
- dependency-name: groq
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: torchcodec
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: torchaudio
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: torch
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: openai
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: jaconv
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: pyobjc
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: pyqt6
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: tokenizers
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-batch
- dependency-name: curl-cffi
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: py7zr
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: uv
  dependency-version: 0.11.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: pip
  dependency-version: 26.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-batch
- dependency-name: onnxruntime
  dependency-version: 1.24.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: google-genai
  dependency-version: 1.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-batch
- dependency-name: hypothesis
  dependency-version: 6.152.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-batch
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-batch
- dependency-name: setuptools
  dependency-version: 81.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uv-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 22, 2026
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants