Skip to content

chore(deps): bump the uv group across 1 directory with 6 updates#123

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-b8da469611
Open

chore(deps): bump the uv group across 1 directory with 6 updates#123
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-b8da469611

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the uv group with 6 updates in the / directory:

Package From To
orjson 3.11.8 3.11.9
pydantic 2.13.3 2.13.4
pypdfium2 5.7.1 5.8.0
transformers 5.6.2 5.8.0
prek 0.3.11 0.3.13
ty 0.0.32 0.0.34

Updates orjson from 3.11.8 to 3.11.9

Release notes

Sourced from orjson's releases.

3.11.9

Changed

  • Build now depends on Rust 1.95 or later instead of 1.89.

Fixed

  • Fix building on Rust 1.95.
Changelog

Sourced from orjson's changelog.

3.11.9 - 2026-05-06

Changed

  • Build now depends on Rust 1.95 or later instead of 1.89.

Fixed

  • Fix building on Rust 1.95.
Commits

Updates pydantic from 2.13.3 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • See full diff in compare view

Updates pypdfium2 from 5.7.1 to 5.8.0

Release notes

Sourced from pypdfium2's releases.

5.8.0

Changes (Release 5.8.0)

Summary (pypdfium2)

  • Autoclose machinery update.
    • Encapsulate finalizer state in a mutable object.
    • Objects now remove themselves from their parent's kids cache on garbage collection / closing, to avoid accumulation.
    • Global ObjectTracker added (objects are grouped by type and remove themselves from the tracker on finalization likewise). This may allow to destroy and re-initalize the library during a session.
    • Fixed some issues and inconsistencies in autoclose hooks that were unmasked by the above changes.
      • PdfDocument.page_as_xobject() now registers the XObject as a child of dest_pdf rather than self.
      • Mark pageobjects (PdfObject) as untracked.
      • For pages registered as kids of a formenv, PdfPage.parent now points at the formenv. This means the .parent property should be seen as purely an autoclose hook and not something to use for other purposes.
      • Fixed a test case to use _detach_finalizer() instead of _finalizer.detach().
    • Changed DEBUG_AUTOCLOSE to hold a loglevel rather than just a bool. This lets us distinguish between noisy debug messages and actual warnings. The default level is now logging.WARNING.
    • Should any issues surface with these changes (e.g. hitting assertions, or performance concerns), please let us know. Provide logs with autoclose debugging enabled if applicable.
  • PdfPage.get_objects(): Added textpage passthrough parameter. This is required for PdfTextObj.extract(). Raise a meaningful exception if the textpage is missing. Demonstrate .extract() in pageobjects CLI.
  • PdfFont.get_base_name(), .get_family_name(): decoding errors option added, now defaults to "replace".
  • New helpers PdfFont.load_standard(), .STANDARD_FONTS and PdfDefaultTTFMap added.
  • Errchecks added to PdfPage.get_rotation(), .insert_obj() and PdfUnspHandler.setup().
  • New font diagnostic CLIs added (pypdfium2 fonts and default-fonts). Optional dependency tabulate.
  • In the CLI dispatcher, try to load only the module that is actually used.
  • CLI / setup_logging(): Fix warnings to be shown by removing an incorrect logging.captureWarnings(True) (that would require configuring the py.warnings logger or root logger). Instead, use just warnings.simplefilter("always") for now. Also, fix DEBUG_SYSFONTS being a boolean option. Share streamhandler across loggers.

Commits between 5.7.1 and 5.8.0 (latest commit first):

  • 9a41bfc [autorelease main] update 5.8.0
  • a2da0a1 Make just check happy
  • 9272319 Polish changelog
  • 0aa747a CLI/fonts: don't bother with standard fonts
  • 60f1c20 Share streamhandler across all loggers
  • a25cbc9 continue on changelog
  • 828baed DEBUG_AUTOCLOSE: distinguish between debug and warning messages
  • 2d4035d Continue polishing the changelog
  • b4a4c5d docs: add back |br| template for rst docs
  • 42382c2 sysfontinfo nits
  • e400ccc changelog: fix a typo found by codespell
  • d87ad30 Autoclose machinery improvements, objects tracker, new helpers (#426)
  • d9d8ad4 RTD: update to ubuntu-26.04
  • 07608ad Remove tabulate from req/docs.txt after all
  • 55564a0 build(deps): bump conda-incubator/setup-miniconda from 3 to 4
  • 885f9ff Fix unused import reported by autoflake
  • 8783f53 Continue on CLI dispatcher
  • 95639af Add new errchecks to get_rotation() and insert_obj()

... (truncated)

Commits
  • 9a41bfc [autorelease main] update 5.8.0
  • a2da0a1 Make just check happy
  • 9272319 Polish changelog
  • 0aa747a CLI/fonts: don't bother with standard fonts
  • 60f1c20 Share streamhandler across all loggers
  • a25cbc9 continue on changelog
  • 828baed DEBUG_AUTOCLOSE: distinguish between debug and warning messages
  • 2d4035d Continue polishing the changelog
  • b4a4c5d docs: add back |br| template for rst docs
  • 42382c2 sysfontinfo nits
  • Additional commits viewable in compare view

Updates transformers from 5.6.2 to 5.8.0

Release notes

Sourced from transformers's releases.

Release 5.8.0

Release v5.8.0

New Model additions

DeepSeek-V4

DeepSeek-V4 is the next-generation MoE (Mixture of Experts) language model from DeepSeek that introduces several architectural innovations over DeepSeek-V3. The architecture replaces Multi-head Latent Attention (MLA) with a hybrid local + long-range attention design, swaps residual connections for Manifold-Constrained Hyper-Connections (mHC), and bootstraps the first few MoE layers with a static token-id → expert-id hash table. This implementation covers DeepSeek-V4-Flash, DeepSeek-V4-Pro, and their -Base pretrained variants, which share the same architecture but differ in width, depth, expert count and weights.

Links: Documentation | Paper

Gemma 4 Assistant

Gemma 4 Assistant is a small, text-only model that enables speculative decoding for Gemma 4 models using the Multi-Token Prediction (MTP) method and associated candidate generator. The model shares the same Gemma4TextModel backbone as other Gemma 4 models but uses KV sharing throughout the entire model, allowing it to reuse the KV cache populated by the target model and skip the pre-fill phase entirely. This architecture includes cross-attention to make the most of the target model's context, allowing the assistant to accurately predict more drafted tokens per drafting round.

Links: Documentation

GraniteSpeechPlus

Granite Speech Plus is a variant of Granite Speech that enhances the projector by consuming the concatenation of the encoder's final hidden states with an arbitrary subset of its intermediate hidden states along the feature dimension. It is a multimodal speech-to-text model that can transcribe audio, provide speaker annotation and word level timestamps by responding to text prompts. The model inherits the same architecture components as Granite Speech including the speech encoder, query transformer projector, language model, and optional LoRA adapter.

Links: Documentation

Granite4Vision

Granite Vision 4.1 is a vision-language model from IBM Research designed for enterprise-grade document data extraction. It specializes in chart extraction (Chart2CSV, Chart2Summary, Chart2Code), table extraction (JSON, HTML, OTSL), and semantic key-value pair extraction. The model builds on LLaVA-NeXT with architectural innovations including SigLIP2 Vision Encoder, Window Q-Former Projectors, and DeepStack Feature Injection with 8 vision-to-LLM injection points.

Links: Documentation

EXAONE-4.5

EXAONE 4.5 is the first open-weight vision language model developed by LG AI Research, integrating a dedicated visual encoder into the existing EXAONE 4.0 framework to expand multimodal capabilities. The model features 33 billion parameters in total, including 1.2 billion parameters from the vision encoder, and achieves competitive performance in general benchmarks while outperforming similar-sized models in document understanding and Korean contextual reasoning. It builds on EXAONE 4.0 with key enhancements including an expanded vocabulary of 153,600 tokens, support for up to 256K token context windows, and a Multi-Token Prediction (MTP) mechanism.

Links: Documentation | Paper | Blog Post

PP-FormulaNet

... (truncated)

Commits

Updates prek from 0.3.11 to 0.3.13

Release notes

Sourced from prek's releases.

0.3.13

Release Notes

Released on 2026-05-06.

Bug fixes

  • Respect hook filters for message files (#2049)

Documentation

  • Add Godot Engine to users in README (#2047)

Contributors

Install prek 0.3.13

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.13/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.13/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.3.13

File Platform Checksum
prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
prek-x86_64-apple-darwin.tar.gz Intel macOS checksum
prek-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
prek-i686-pc-windows-msvc.zip x86 Windows checksum
prek-x86_64-pc-windows-msvc.zip x64 Windows checksum
prek-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
prek-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
prek-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.13

Released on 2026-05-06.

Bug fixes

  • Respect hook filters for message files (#2049)

Documentation

  • Add Godot Engine to users in README (#2047)

Contributors

0.3.12

Released on 2026-05-05.

Highlights

auto_update.cooldown_days is now available in both the user-level global config (~/.config/prek/prek.toml on Linux and macOS, or $XDG_CONFIG_HOME/prek/prek.toml when set; %APPDATA%\prek\prek.toml on Windows) and project config. Set a user default for prek auto-update, then override it per project when a repository needs a different update cadence.

[auto_update]
cooldown_days = 7

Enhancements

  • Add global auto-update cooldown config (#2041)
  • Add project auto-update cooldown config (#2044)
  • Support language: dart (#1146)

Bug fixes

  • Pass commit message file to workspace hooks (#2043)
  • Preserve non-UTF8 filenames from git (#2023)
  • ruby: put resolved Ruby's bin dir on $PATH for gem invocations (#2021)

Documentation

  • Update docs with the new logo and icon (#2025)
  • Point schema docs to SchemaStore (#2039)

... (truncated)

Commits

Updates ty from 0.0.32 to 0.0.34

Release notes

Sourced from ty's releases.

0.0.34

Release Notes

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.34

Released on 2026-05-01.

Bug fixes

  • Avoid panic in recursive protocol signature comparisons (#24665)
  • Avoid panics for syntax error targets in invalid unpacking assignments (#24663)
  • Fix unbounded type growth in nested-typevar substitutions (#24803)
  • Prevent string annotation tokens from leaking across notebook cells (#24919)
  • Support reference finding in stringified annotations (#24956)

LSP server

  • Add hover support for PEP 695 type aliases (#24926)
  • Offer string literal completion suggestions based on expected type (#24555)
  • Support Go-to Definition, Go-To Declaration, and Find References for TypedDict and NamedTuple initializers (#24897)
  • Support Annotated metadata in semantic tokens (#24890)

Core type checking

  • Add support for functools.partial (#24582)
  • Fix ParamSpec defaults and alias variance (#24479)
  • Fix TypeIs assignability with gradual types (#24928)
  • Infer dict(**TypedDict) in TypedDict context (#24709)
  • Support infer_variance for legacy TypeVar (#24930)
  • Support variance keywords in ParamSpec (#24927)
  • Sync vendored typeshed stubs (#24952). Typeshed diff
  • Unpack Union of TypedDict in various sites (#24958)

Diagnostics

  • Add missing error context node for protocol to protocol assignability (#24905)
  • Show a diagnostic for unsupported inferred Python version (#24581)

Performance

  • Lazily build TypeVar accumulations (#24782)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the uv group across 1 directory with 6 updates
640a756 
Bumps the uv group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [orjson](https://github.com/ijl/orjson) | `3.11.8` | `3.11.9` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.3` | `2.13.4` |
| [pypdfium2](https://github.com/pypdfium2-team/pypdfium2) | `5.7.1` | `5.8.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.6.2` | `5.8.0` |
| [prek](https://github.com/j178/prek) | `0.3.11` | `0.3.13` |
| [ty](https://github.com/astral-sh/ty) | `0.0.32` | `0.0.34` |



Updates `orjson` from 3.11.8 to 3.11.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.8...3.11.9)

Updates `pydantic` from 2.13.3 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.4/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.3...v2.13.4)

Updates `pypdfium2` from 5.7.1 to 5.8.0
- [Release notes](https://github.com/pypdfium2-team/pypdfium2/releases)
- [Commits](pypdfium2-team/pypdfium2@5.7.1...5.8.0)

Updates `transformers` from 5.6.2 to 5.8.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.6.2...v5.8.0)

Updates `prek` from 0.3.11 to 0.3.13
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.11...v0.3.13)

Updates `ty` from 0.0.32 to 0.0.34
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.32...0.0.34)

---
updated-dependencies:
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pypdfium2
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: transformers
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv
- dependency-name: prek
  dependency-version: 0.3.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: ty
  dependency-version: 0.0.34
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 7, 2026
@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants