chore(deps): bump the dev-dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #12 · intel/torch-tweak

dependabot · 2026-10-12T13:42:56Z

Bumps the dev-dependencies group with 4 updates in the / directory: datasets, diffusers, transformers and uv.

Updates datasets from 5.0.1 to 5.1.0

Release notes

5.1.0

New Formats

Harbor ⚓: RL environments:

Add harbor benchmarks by @lhoestq in huggingface/datasets#8729

Vortex 🌀: High performance columnar data

Add support for datasets backed by vortex file format by @robert3005 in huggingface/datasets#8502

Bio formats 🧬: store biological data like DNA sequences, protein chains, and 3D molecular structures

feat(fasta): add lightweight FASTA file format support by @behroozazarkhalili in huggingface/datasets#7923

Decode BioSequence and BioStructure records with universal newlines by @behroozazarkhalili in huggingface/datasets#8600

Add lightweight FASTQ file format support by @behroozazarkhalili in huggingface/datasets#7924

feat: Add GenBank file format support for biological sequence data by @behroozazarkhalili in huggingface/datasets#7951

Add lightweight PDB (Protein Data Bank) file support by @behroozazarkhalili in huggingface/datasets#7926

feat: Add mmCIF file support for macromolecular structures by @behroozazarkhalili in huggingface/datasets#7925

feat(features): add BioSequence and BioStructure decodable features by @behroozazarkhalili in huggingface/datasets#8542

Dataset Features

Add a strategy argument to split_dataset_by_node for iterable datasets by @behroozazarkhalili in huggingface/datasets#8565

Allow IterableDataset.push_to_hub num_shards above dataset.num_shards by @behroozazarkhalili in huggingface/datasets#8716

Other improvements and bug fixes

Fix fixed size binary by @Alex-PLACET in huggingface/datasets#8281

Fix offline simulation with huggingface_hub 1.27 by @hanouticelina in huggingface/datasets#8414

Fix info from data_dir/data_files or malformed yaml by @lhoestq in huggingface/datasets#8462

Forward iter_arrow, is_typed and features from RepeatExamplesIterable by @ebarkhordar in huggingface/datasets#8395

Fix archive path check allowing sibling-directory escapes by @icn5381 in huggingface/datasets#8490

disallow hdf5 external links by @lhoestq in huggingface/datasets#8523

Fix deepcopy bottleneck in state_dict() by @yuxin00j in huggingface/datasets#8387

Optimize PyArrow block shuffling with dynamic rebatched chunk interleaving by @yuxin00j in huggingface/datasets#8407

Fix Pdf.decode_example raising TypeError on remote non-Hub paths by @behroozazarkhalili in huggingface/datasets#8566

Fix dead PDF processing link in README by @aarushkandukoori in huggingface/datasets#8512

Forward max_buffer_input_shards from IterableDatasetDict.shuffle by @vineethsaivs in huggingface/datasets#8594

Preserve storage options across URL hops by @tandede in huggingface/datasets#8496

Better error when a column written as null gets values in a later batch by @ebarkhordar in huggingface/datasets#8591

Advance the user-supplied generator in Dataset.shuffle even on cache hits by @BenYang12 in huggingface/datasets#8589

Bump fsspec upper bound to 2026.7.0 by @roshanjrajan in huggingface/datasets#8561

Shard the sources when skipping a distributed IterableDataset by @ebarkhordar in huggingface/datasets#8569

Fix infinite repetition of empty iterable datasets by @Jokasa7 in huggingface/datasets#8577

Reject a non-callable generator in GeneratorConfig by @LeSingh1 in huggingface/datasets#8585

Fix async map checkpoint accounting across repeated resumes by @SBrouck in huggingface/datasets#8575

[httpx migration] Import httpx from huggingface_hub, require huggingface_hub>=1.31.0 by @Wauplin in huggingface/datasets#8598

chore: enable Dependabot weekly GitHub Actions bumps by @hf-dependantbot-rollout[bot] in huggingface/datasets#8221

[docs] Fix legacy hf CLI references (datasets) by @Wauplin in huggingface/datasets#8657

Scope GITHUB_TOKEN permissions per job by @hf-security-analysis[bot] in huggingface/datasets#8672

Pin GitHub Actions to commit SHAs by @hf-security-analysis[bot] in huggingface/datasets#8673

Fix push_to_hub for IterableDataset with unknown features by @davanstrien in huggingface/datasets#8658

Vectorize interleave_datasets index generation (probabilities + first/all_exhausted) by @saforem2 in huggingface/datasets#8318

Fix torchcodec docs links by @pratikgx in huggingface/datasets#8700

[docs] Fix HF_HOME example in cache guide by @ZainnQureshii in huggingface/datasets#8694

Fix broken internal anchor link in share.mdx by @aarushkandukoori in huggingface/datasets#8666

Keep Json fields inside a struct from being double-encoded when some struct rows are null by @breken-ai in huggingface/datasets#8712

... (truncated)

Commits

efe6ea4 release 5.1.0 (#8745)
7f58239 harbor: fix paths on windows (#8739)
c657c2d fix default iterable dataset dict and polars exports (#8632)
278d485 Fix repeated Arrow rebatch checkpoint restoration (#8727)
b83f8b5 Speed up JSON export of indexed datasets (#8662)
2989571 Preserve source shards when shuffling iterable datasets (#8670)
dcf79fd Bump huggingface_hub upper bound to <3.0 (datasets) (#8678)
f63c726 Fix IterableDataset.filter with arrow, pandas and polars formats (#8725)
0358671 Allow IterableDataset.push_to_hub num_shards above dataset.num_shards (#8716)
a826eb2 Fix epoch iteration after skipping or taking a streaming subset (#8707)
Additional commits viewable in compare view

Updates diffusers from 0.40.0 to 0.41.0

Release notes

Sourced from diffusers's releases.

Diffusers 0.41.0: QwenImage 2.1 pipeline and more

[!TIP] This release brings Qwen-Image 2.1 to Diffusers, with text-to-image generation, image editing, native transparency, and LoRA training.

Starting with this release, we’re adopting the Transformers release philosophy: coordinating minor releases around new model integrations, while including the other changes merged since the previous release. Patch releases remain focused on fixes. See our release policy.

Qwen-Image 2.1

Qwen-Image 2.1 unifies image generation and editing in one model. Its visual generation component has 7B parameters, and it supports multiple reference images and native RGBA output for transparent images. Check out the docs for more details.

Thanks to @naykun for the model integration (#14804).

Other highlights

Tensor-parallel checkpoint loading: each rank reads its own slice of sharded weights directly, reducing the memory needed during loading. (#14544)

LTX-2.5 DFR: new pipelines support generation with keyframe slots and composable spatial and temporal refinement. (#14567)

Cosmos 3: SeaCache support and mixed W8A8/W8A16 denoising for ModelOpt FP8 checkpoints. (#14663, #14664)

Modular Diffusers: Wan 2.2 VACE gains modular blocks, and loading from existing local paths avoids unnecessary weight downloads. (#14432, #14797)

More single-file loaders: support for Krea 2 and MiniMax-H3. (#14914, #14839)

Tests: We removed the monolithic test_pipelines_common.py test suite to establish more modularity and transparent implementation of tests. Refer to huggingface/diffusers#14669 for more details.

Deprecations and compatibility

🚨 ONNX support is deprecated; use Optimum for ONNX Runtime workflows. (#14658)

Previously deprecated APIs have been removed, including the LuminaText2ImgPipeline and Lumina2Text2ImgPipeline aliases. Use LuminaPipeline and Lumina2Pipeline instead. Older integrations should review the removed code paths before upgrading.

Thanks to everyone who contributed to this release!

All commits

[docs] Clean up links by @stevhliu in #14535

docs: fix 14 typos in docs, comments and docstrings by @iridescentWen in #14541

[docs] LTX-2.5 Modular Pipeline Docs by @dg845 in #14450

[agent docs] add lora test instructions. by @sayakpaul in #14549

refactor bria pipeline tests to the new mixin structure by @akshan-main in #14547

feat: improve issue reminder workflow and introduce conditional autoclose by @sayakpaul in #14477

[tests] AOT compilation failure fixes by @sayakpaul in #14553

[tests] skip hunyuan framepack group offloading tests by @sayakpaul in #14551

[tests] remove autoencodertestermixin and rename new one. by @sayakpaul in #14555

tests: fix CUDA OOM in VidTok slicing/tiling tests by @sayakpaul in #14554

refactor bria fibo edit pipeline tests to the new mixin structure by @akshan-main in #14577

refactor bria fibo pipeline tests to the new mixin structure by @akshan-main in #14570

refactor deepfloyd if pipeline tests to the new mixin structure by @akshan-main in #14580

Deprecate 'fp16_safetensors' command in CLI documentation by @sayakpaul in #14583

Fix duplicated words and a misspelling in messages and docstrings by @Sreekant13 in #14287

Fibo Edit: multi-reference conditioning and batching by @ShivamShrirao in #14566

[tests] Add Config to Exclude Modules from Leaf-Level Group Offloading by @dg845 in #14564

[tests] refactor flux control lora tests by @sayakpaul in #14557

[tests] migrate test_pipelines.py to use pytest. by @sayakpaul in #14222

... (truncated)

Commits

086bf95 Release: v0.41.0-release
7717798 [tests] remove test_pipelines_common.py (#14669)
899c9f3 [chore] remove force_upcast from autoencoder flux2 (#14946)
da1d382 Configure fixed sampling sigmas on QwenImage21Pipeline (#14950)
c2798cc [tests] refactor the pipeline-level attention processor tests (#14701)
cff9daf [modular] Echo team joy future academy jd echo by @Gelercatty (#14941)
9aababd Fix: Deprecating Siglip2ImageProcessorFast (#14781)
8b33bfc agent docs: support only what released checkpoints use (#14750)
357f873 [Bugfix] Fix Cosmos3 FP8 tensor parallelism (#14921)
4156630 Tag Krea 2 text encoder outputs as denoiser_input_fields (#14925)
Additional commits viewable in compare view

Updates transformers from 5.18.0 to 5.19.0

Release notes

Sourced from transformers's releases.

Release v5.19.0

New Model additions

EmbeddingGemma2

EmbeddingGemma 2 is a multimodal embedding model from Google built on the Gemma 4 architecture. It encodes text, images, audio, and video, individually or combined in one input, into a shared 768-dimensional vector space for cross-modal retrieval, semantic similarity, clustering, and classification. It uses Matryoshka Representation Learning, so embeddings can be truncated to 512, 256, or 128 dimensions. It also offers configurable visual and video token budgets, and unused vision or audio towers can be disabled at load time to save memory.

Links: Documentation

Smthn smthn (#49364) by @vasqu in #49364

Breaking changes

All MoE models whose routers compute logits now return them when output_router_logits=True, following the Qwen3-MoE pattern (a router_logits recorder on the base model, MoeModelOutputWithPast from the backbone, and a MoE causal LM output from the head), so code that relied on the previous outputs or their absence should read the router logits from these output classes.

🚨 Return router logits from every MoE model that computes them (#48920) by @qgallouedec

Owlv2ForObjectDetection.embed_image_query now selects the query box with the highest objectness score, as in the original OWLv2 notebook, instead of the OWL-ViT heuristic, so image-guided query embeddings and detections may differ from earlier releases.

🚨 Select the OWLv2 image query by objectness (#49200) by @qgallouedec

The "paged|" prefix for SDPA and flash attention implementations is deprecated, so users should set the regular attention implementation (e.g. sdpa or flash_attention_2) for continuous batching instead of paged|sdpa or paged|flash_attention_2.

🚨 Attention 🚨 Deprecate "paged|" prefix for SDPA and flash (#49112) by @remi-or

The regular flash and SDPA attention functions (flash_attention.py, sdpa_attention.py) now support continuous batching directly, and "paged|..." implementations for these are redirected to them, while eager still requires the "paged|eager" prefix.

🚨 Attention 🚨 Make regular attention support CB (#49101) by @remi-or

In continuous batching, the cache update for the index-based and block-table paths is now fused into a single call, which slightly changes the cache update function's behavior and affects any custom code that calls the separate update paths.

🚨 [CB] 🚨 Fuse update for index and block table path (#49088) by @remi-or

Continuous batching internals changed in preparation for removing "paged": `max

🚨 [CB] 🚨 Little fixes before removing "paged" (#49069) by @remi-or

Parallelization

Expert parallelism gains a token-dispatch implementation, selected via the new ep_dispatch_experts plan rule and now the default for Qwen3 MoE and Mellum, which removes the requirement that EP size equal TP size. The Trainer was also adapted to work with expert parallelism, and the docs now note that PEFT adapters support tensor parallelism. A CI-related fix for pipeline-parallel chart2table inference was also included.

[distributed]: adapt Trainer to work Expert Parallel (#48873) by @3outeille in #48873

[distributed] Add expert-parallel token dispatch, default for Qwen3 MoE (#48865) by @3outeille in #48865

Fix pp chart2table inference (#49225) by @zucchini-nlp in #49225

[docs] TP for PEFT adapters (#49060) by @stevhliu in #49060

Cache

... (truncated)

Commits

c4c4605 v5.19.0
92cd495 Smthn smthn (#49364)
a7e8ff2 Revert "[CI] Temporarily disable AMD scheduled CI trigger" (#49271) (#49362)
571c5cc ALM testx fIxing... (#49355)
b4526a7 Fix DataCollatorForLanguageModeling ignoring seed=0 (#49349)
5a27d2d Fix explicit kernelization modes for evaluation models (#49339)
23c21ac fix(cohere_compass): add video to input_modalities (#49320) (#49323)
f1d0d9f GPT-OSS: read the clamped SwiGLU's alpha and limit from the config (#49346)
9921402 [distributed] Default MoE ep_plans to token dispatch (#49160)
8625785 [distributed]: adapt Trainer to work Expert Parallel (#48873)
Additional commits viewable in compare view

Updates uv from 0.12.22 to 0.12.24

Release notes

Sourced from uv's releases.

0.12.24

Release Notes

Released on 2026-10-08.

Enhancements

Remove orphaned temporary build environments with uv cache prune (#22171)

Accept PEP 508 marker operators directly before grouped expressions (#22309)

Reject malformed requirements-file options instead of partially parsing or ignoring them (#22317)

Show underlying filesystem and registry errors when managed Python uninstallation fails (#22362)

Identify the invalid source URL in Python mirror errors (#22364)

Preview features

Display preferred advisory IDs in uv audit reports, prioritizing PYSEC, GHSA, then CVE identifiers (#22292)

Configuration

Support custom installation mirrors for GraalPy (#22269)

Support custom installation mirrors for Pyodide (#22271)

Allow UV_NO_CACHE=false to override no-cache = true in configuration (#22324)

Report more precise error locations for invalid trusted-host ports and preview-feature list entries (#22144)

Performance

Speed up later commands after creating an environment by warming its interpreter cache (#21304)

Reduce code-signature verification work for ARM64 macOS releases with 16 KiB signature pages (#22246)

Enforce resource limits when parsing package indexes and --find-links pages with astral-html (#22203)

Reduce standalone uv-build executable size by 7.5% by omitting unused Zstandard support (#22242)

Reduce uv's binary size by about 232 KB by simplifying configuration deserialization (#22144)

Reduce Python download error formatting code size by sharing its formatter (#22141)

Bug fixes

Verify supplied hashes even when hash presence is disabled with --no-require-hashes or require-hashes = false (#22369)

Honor exact managed Python patch pins when creating script environments instead of following patch upgrades (#22360)

Prevent dependency overrides and constraints from activating optional dependencies when their extras are not selected (#22237)

Exclude optional dependencies from exports when their extras are activated only in incompatible environments (#22234)

Give explicit uv publish --trusted-publishing values precedence over configuration (#22279)

Allow UV_OFFLINE=false to override offline = true in configuration (#22283)

Allow UV_SYSTEM_CERTS=false to override system-certs = true in configuration (#22291)

Allow uv auth login over IPv6 loopback addresses (#22306)

Resolve GitHub dependencies whose Git references contain # or % characters (#22281)

Recognize existing Pyodide interpreters as satisfying Pyodide Python requests (#22322)

Preserve JSON output from uv version and uv self version with a single --quiet flag (#22280)

Preserve trailing spaces and tabs in passwords returned by subprocess keyrings (#22284)

Restore wheel incompatibility hints when WHEEL metadata contains multiple expanded Tag: rows (#22235)

Preserve Windows wheel-script rename errors unless a cross-drive copy fallback applies (#22302)

Prevent workspace-cache assertion failures after modifying a project at the workspace root (#22236)

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.24

Released on 2026-10-08.

Enhancements

Remove orphaned temporary build environments with uv cache prune (#22171)

Accept PEP 508 marker operators directly before grouped expressions (#22309)

Reject malformed requirements-file options instead of partially parsing or ignoring them (#22317)

Show underlying filesystem and registry errors when managed Python uninstallation fails (#22362)

Identify the invalid source URL in Python mirror errors (#22364)

Preview features

Display preferred advisory IDs in uv audit reports, prioritizing PYSEC, GHSA, then CVE identifiers (#22292)

Configuration

Support custom installation mirrors for GraalPy (#22269)

Support custom installation mirrors for Pyodide (#22271)

Allow UV_NO_CACHE=false to override no-cache = true in configuration (#22324)

Report more precise error locations for invalid trusted-host ports and preview-feature list entries (#22144)

Performance

Speed up later commands after creating an environment by warming its interpreter cache (#21304)

Reduce code-signature verification work for ARM64 macOS releases with 16 KiB signature pages (#22246)

Enforce resource limits when parsing package indexes and --find-links pages with astral-html (#22203)

Reduce standalone uv-build executable size by 7.5% by omitting unused Zstandard support (#22242)

Reduce uv's binary size by about 232 KB by simplifying configuration deserialization (#22144)

Reduce Python download error formatting code size by sharing its formatter (#22141)

Bug fixes

Verify supplied hashes even when hash presence is disabled with --no-require-hashes or require-hashes = false (#22369)

Honor exact managed Python patch pins when creating script environments instead of following patch upgrades (#22360)

Prevent dependency overrides and constraints from activating optional dependencies when their extras are not selected (#22237)

Exclude optional dependencies from exports when their extras are activated only in incompatible environments (#22234)

Give explicit uv publish --trusted-publishing values precedence over configuration (#22279)

Allow UV_OFFLINE=false to override offline = true in configuration (#22283)

Allow UV_SYSTEM_CERTS=false to override system-certs = true in configuration (#22291)

Allow uv auth login over IPv6 loopback addresses (#22306)

Resolve GitHub dependencies whose Git references contain # or % characters (#22281)

Recognize existing Pyodide interpreters as satisfying Pyodide Python requests (#22322)

Preserve JSON output from uv version and uv self version with a single --quiet flag (#22280)

Preserve trailing spaces and tabs in passwords returned by subprocess keyrings (#22284)

Restore wheel incompatibility hints when WHEEL metadata contains multiple expanded Tag: rows (#22235)

Preserve Windows wheel-script rename errors unless a cross-drive copy fallback applies (#22302)

Prevent workspace-cache assertion failures after modifying a project at the workspace root (#22236)

Hide the ignored --keyring-provider option from uv auth help (#19520)

... (truncated)

Commits

5411378 Bump version to 0.12.24 (#22371)
213e6de Clarify integration test style in agent guidance (#22372)
35deef2 Skip Python setup in static version and credential tests (#22370)
bbddf2f Share requirements-file arguments across commands (#22145)
9a123eb Deserialize trusted hosts and preview features directly (#22144)
57a9256 Share archive decoding across reader types (#22143)
3e3374b Verify hashes even when they are not required (#22369)
d3c092a Move installation layout operations out of Python types (#22367)
1be3e88 Accept PEP 508 marker operators before parentheses (#22309)
e27def7 Retain Python download request errors directly (#22366)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…4 updates Bumps the dev-dependencies group with 4 updates in the / directory: [datasets](https://github.com/huggingface/datasets), [diffusers](https://github.com/huggingface/diffusers), [transformers](https://github.com/huggingface/transformers) and [uv](https://github.com/astral-sh/uv). Updates `datasets` from 5.0.1 to 5.1.0 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.1...5.1.0) Updates `diffusers` from 0.40.0 to 0.41.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.40.0...v0.41.0) Updates `transformers` from 5.18.0 to 5.19.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.18.0...v5.19.0) Updates `uv` from 0.12.22 to 0.12.24 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/0.12.24/CHANGELOG.md) - [Commits](astral-sh/uv@0.12.22...0.12.24) --- updated-dependencies: - dependency-name: datasets dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: diffusers dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: transformers dependency-version: 5.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: uv dependency-version: 0.12.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 12, 2026

dependabot Bot requested a review from a team as a code owner October 12, 2026 13:43

lukaszstolarczuk approved these changes Oct 12, 2026

View reviewed changes

lukaszstolarczuk merged commit c9bd09b into main Oct 12, 2026
6 checks passed

lukaszstolarczuk deleted the dependabot/uv/dev-dependencies-65c96d50d0 branch October 12, 2026 16:40

Navigation Menu

Repository navigation

chore(deps): bump the dev-dependencies group across 1 directory with 4 updates - #12

chore(deps): bump the dev-dependencies group across 1 directory with 4 updates#12
lukaszstolarczuk merged 1 commit into
mainfrom
dependabot/uv/dev-dependencies-65c96d50d0

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026

5.1.0

New Formats

Dataset Features

Other improvements and bug fixes

Diffusers 0.41.0: QwenImage 2.1 pipeline and more

Qwen-Image 2.1

All commits

Release v5.19.0

New Model additions

EmbeddingGemma2

Breaking changes

Parallelization

Cache

0.12.24

Release Notes

Enhancements

Preview features

Configuration

Performance

Bug fixes

0.12.24

Enhancements

Preview features

Configuration

Performance

Bug fixes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant