Bump the pip group across 10 directories with 17 updates #12

dependabot · 2024-07-14T15:59:06Z

Bumps the pip group with 2 updates in the /examples/research_projects/codeparrot/examples directory: transformers and scikit-learn.
Bumps the pip group with 15 updates in the /examples/research_projects/decision_transformer directory:

Package	From	To
scikit-learn	`1.0.2`	`1.5.0`
aiohttp	`3.9.4`	`3.9.5`
black	`24.3.0`	`24.4.2`
cryptography	`42.0.0`	`42.0.4`
dash	`2.15.0`	`2.17.1`
fonttools	`4.43.0`	`4.53.1`
gitpython	`3.1.41`	`3.1.43`
grpcio	`1.53.2`	`1.64.1`
pillow	`10.3.0`	`10.4.0`
pyarrow	`15.0.0`	`16.1.0`
requests	`2.32.0`	`2.32.3`
tensorflow	`2.11.1`	`2.17.0`
torch	`1.13.1`	`2.3.1`
tqdm	`4.66.3`	`4.66.4`
urllib3	`1.26.19`	`2.2.2`

Bumps the pip group with 1 update in the /examples/research_projects/deebert directory: transformers.
Bumps the pip group with 1 update in the /examples/research_projects/distillation directory: gitpython.
Bumps the pip group with 1 update in the /examples/research_projects/jax-projects/hybrid_clip directory: torch.
Bumps the pip group with 6 updates in the /examples/research_projects/lxmert directory:

Package	From	To
pyarrow	`15.0.0`	`16.1.0`
requests	`2.32.2`	`2.32.3`
torch	`1.13.1`	`2.3.1`
tqdm	`4.66.3`	`4.66.4`
urllib3	`1.26.19`	`2.2.2`
jupyter-core	`4.11.2`	`5.7.2`

Bumps the pip group with 1 update in the /examples/research_projects/pplm directory: transformers.
Bumps the pip group with 6 updates in the /examples/research_projects/visual_bert directory:

Package	From	To
pyarrow	`15.0.0`	`16.1.0`
requests	`2.32.2`	`2.32.3`
torch	`1.13.1`	`2.3.1`
tqdm	`4.66.3`	`4.66.4`
urllib3	`1.26.19`	`2.2.2`
jupyter-core	`4.11.2`	`5.7.2`

Bumps the pip group with 1 update in the /examples/research_projects/vqgan-clip directory: transformers.
Bumps the pip group with 1 update in the /examples/tensorflow/language-modeling-tpu directory: transformers.

Updates transformers from 4.38.0 to 4.42.4

Release notes

Sourced from transformers's releases.

Patch release v4.42.4

Mostly gemma2 support FA2 softcapping!

but also fix the sliding window for long context and other typos.

[Gemma2] Support FA2 softcapping (#31887) by @ArthurZucker

[ConvertSlow] make sure the order is preserved for addedtokens (#31902) by @ArthurZucker

Fixes to alternating SWA layers in Gemma2 (#31775) by @turboderp

Requires for torch.tensor before casting (#31755) by @echarlaix

Was off last week could not get this out, thanks all for your patience 🥳

Patch release v4.42.3

Make sure we have attention softcapping for "eager" GEMMA2 model

After experimenting, we noticed that for the 27b model mostly, softcapping is a must. So adding it back (it should have been there, but an error on my side made it disappear) sorry all! 😭

Gemma capping is a must for big models (#31698)

Patch release v4.42.2

Patch release

Thanks to our 2 contributors for their prompt fixing mostly applies for training and FA2!

Fix Gemma2 4d attention mask (#31674) by @hiyouga

don't zero out the attention_mask when using sliding window with flash attention (#31670) by @winglian

v4.42.1: Patch release

Patch release for commit:

[HybridCache] Fix get_seq_length method (#31661)

v4.42.0: Gemma 2, RTDETR, InstructBLIP, LLAVa Next, New Model Adder

New model additions

Gemma-2

The Gemma2 model was proposed in Gemma2: Open Models Based on Gemini Technology and Research by Gemma2 Team, Google. Gemma2 models are trained on 6T tokens, and released with 2 versions, 2b and 7b.

The abstract from the paper is the following:

This work introduces Gemma2, a new family of open language models demonstrating strong performance across academic benchmarks for language understanding, reasoning, and safety. We release two sizes of models (2 billion and 7 billion parameters), and provide both pretrained and fine-tuned checkpoints. Gemma2 outperforms similarly sized open models on 11 out of 18 text-based tasks, and we present comprehensive evaluations of safety and responsibility aspects of the models, alongside a detailed description of our model development. We believe the responsible release of LLMs is critical for improving the safety of frontier models, and for enabling the next wave of LLM innovations

Add gemma 2 by @ArthurZucker in #31659

RTDETR

... (truncated)

Commits

fc35907 v4.42.4
e002fcd [Gemma2] Support FA2 softcapping (#31887)
2e43416 [ConvertSlow] make sure the order is preserved for addedtokens (#31902)
c43fd9d Fixes to alternating SWA layers in Gemma2 (#31775)
0be998b Requires for torch.tensor before casting (#31755)
b7ee1e8 v4.42.3
da50b41 Gemma capping is a must for big models (#31698)
086c74e v4.42.2
8691867 Fix Gemma2 4d attention mask (#31674)
7edc993 don't zero out the attention_mask when using sliding window with flash attent...
Additional commits viewable in compare view

Updates scikit-learn from 1.1.2 to 1.5.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.5.0

We're happy to announce the 1.5.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn
Scikit-learn 1.4.2

We're happy to announce the 1.4.2 release.

This release only includes support for numpy 2.

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
Scikit-learn 1.4.1.post1

We're happy to announce the 1.4.1.post1 release.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn

... (truncated)

Commits

b51d0c9 trigger whell builder [cd build]
919ae9b MAINT Reoder what's new for 1.5 (#29039)
0ac28ad DOC Release highlights 1.5 (#29007)
729b54d test py3.12 against numpy 2 [cd build]
1e50434 set version
ffbe4ab DOC remove obsolete SVM example (#27108)
4647729 DOC Fix time complexity of MLP (#28592)
9bd7047 FIX convergence criterion of MeanShift (#28951)
b79420f FIX add long long for int32/int64 windows compat in NumPy 2.0 (#29029)
37f544d DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...
Additional commits viewable in compare view

Updates scikit-learn from 1.0.2 to 1.5.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.5.0

We're happy to announce the 1.5.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn
Scikit-learn 1.4.2

We're happy to announce the 1.4.2 release.

This release only includes support for numpy 2.

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
Scikit-learn 1.4.1.post1

We're happy to announce the 1.4.1.post1 release.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn

... (truncated)

Commits

b51d0c9 trigger whell builder [cd build]
919ae9b MAINT Reoder what's new for 1.5 (#29039)
0ac28ad DOC Release highlights 1.5 (#29007)
729b54d test py3.12 against numpy 2 [cd build]
1e50434 set version
ffbe4ab DOC remove obsolete SVM example (#27108)
4647729 DOC Fix time complexity of MLP (#28592)
9bd7047 FIX convergence criterion of MeanShift (#28951)
b79420f FIX add long long for int32/int64 windows compat in NumPy 2.0 (#29029)
37f544d DOC replace pandas with Polars in examples/gaussian_process/plot_gpr_co2.py (...
Additional commits viewable in compare view

Updates aiohttp from 3.9.4 to 3.9.5

Release notes

Sourced from aiohttp's releases.

3.9.5

Bug fixes

Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

Related issues and pull requests on GitHub: #8253.

Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

Related issues and pull requests on GitHub: #8332.

Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: #8335.

Changelog

Sourced from aiohttp's changelog.

3.9.5 (2024-04-16)

Bug fixes

Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

Related issues and pull requests on GitHub: :issue:8253.

Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

Related issues and pull requests on GitHub: :issue:8332.

Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: :issue:8335.

Commits

b844d42 Release v3.9.5 (#8340)
0415a4c Patchback/backports/3.9/5fd29467fb63efdfae1ace280cec36b1f8139567/pr 8290 (#8311)
f21c6f2 [PR #8335/5a6949da backport][3.9] Add Content-Disposition automatically (#8336)
7eecdff [PR #8332/482e6cdf backport][3.9] Add set_content_disposition test (#8333)
82fbe64 [PR #8324/4a8fd08b backport][3.9] Add missing changelogs (#8330)
01df7ec Bump version
7917ae2 Merge 3.1
See full diff in compare view

Updates black from 24.3.0 to 24.4.2

Release notes

Sourced from black's releases.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

Fix regression where certain complex f-strings failed to parse (#4332)

Performance

Fix bad performance on certain complex string literals (#4331)

24.4.1

Highlights

Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#3822)

Stable style

Fix crash involving indented dummy functions containing newlines (#4318)

Parser

Add support for type parameter defaults, a new syntactic feature added to Python 3.13 by PEP 696 (#4327)

Integrations

Github Action now works even when git archive is skipped (#4313)

24.4.0

Stable style

Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)

Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

Changelog

Sourced from black's changelog.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

Fix regression where certain complex f-strings failed to parse (#4332)

Performance

Fix bad performance on certain complex string literals (#4331)

24.4.1

Highlights

Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#3822)

Stable style

Fix crash involving indented dummy functions containing newlines (#4318)

Parser

Add support for type parameter defaults, a new syntactic feature added to Python 3.13 by PEP 696 (#4327)

Integrations

Github Action now works even when git archive is skipped (#4313)

24.4.0

Stable style

Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)

Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

Commits

3702ba2 Prepare release 24.4.2 (#4335)
e4aaa8a Fix incorrect f-string tokenization (#4332)
ba88fc3 Simplify string tokenization regexes (#4331)
5683242 New release template
e7fb048 Prepare release 24.4.1 (#4328)
3f0f8f1 Support PEP 696 (#4327)
2f88085 Github Action: Directly install from repo if export-subst is skipped (#4313)
12ce3db Move changelog entry to right section (#4326)
1354be2 Add support to style function definitions with newlines before function stubs...
f4b644b Prevent wrapping of multiline fstrings in parens (#4325)
Additional commits viewable in compare view

Updates cryptography from 42.0.0 to 42.0.4

Changelog

Sourced from cryptography's changelog.

42.0.4 - 2024-02-20

* Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to **Alexander-Programming** for reporting the issue. **CVE-2024-26130** * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields ``SMIMECapabilities`` and ``SignatureAlgorithmIdentifier`` should now be correctly encoded according to the definitions in :rfc:`2633` :rfc:`3370`. .. _v42-0-3:

42.0.3 - 2024-02-15

Fixed an initialization issue that caused key loading failures for some users.

.. _v42-0-2:

42.0.2 - 2024-01-30

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1. * Fixed an issue that prevented the use of Python buffer protocol objects in ``sign`` and ``verify`` methods on asymmetric keys. * Fixed an issue with incorrect keyword-argument naming with ``EllipticCurvePrivateKey`` :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange`, ``X25519PrivateKey`` :meth:`~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange`, ``X448PrivateKey`` :meth:`~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange`, and ``DHPrivateKey`` :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange`. .. _v42-0-1:

42.0.1 - 2024-01-24

Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign.
Resolved compatibility issue with loading certain RSA public keys in :func:~cryptography.hazmat.primitives.serialization.load_pem_public_key.

.. _v42-0-0:

Commits

fe18470 Bump for 42.0.4 release (#10445)
aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
df314bb backport actions m1 switch to 42.0.x (#10415)
c49a7a5 changelog and version bump for 42.0.3 (#10396)
396bcf6 fix provider loading take two (#10390) (#10395)
0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
2202123 changelog and version bump 42.0.2 (#10268)
f7032bd bump openssl in CI (#10298) (#10299)
002e886 Fixes #10294 -- correct accidental change to exchange kwarg (#10295) (#10296)
Additional commits viewable in compare view

Updates dash from 2.15.0 to 2.17.1

Release notes

Sourced from dash's releases.

Dash v2.17.1

Fixed

#2860 Fix dcc.Loading to apply overlay_style only to the children and not the spinner. Fixes #2858

#2854 Fix dcc.Dropdown resetting empty values to null and triggering callbacks. Fixes #2850

#2859 Fix base patch operators. fixes #2855

#2856 Fix multiple consecutive calls with same id to set_props only keeping the last props. Fixes #2852

#2867 Fix clientside no output callback. Fixes #2866

#2876 Fix pattern matching in callback running argument. Fixes #2863

Dash v2.17.0

Added

#2832 Add dash startup route setup on Dash init.

#2819 Add dash subcomponents receive additional parameters passed by the parent component. Fixes #2814.

#2826 When using Pages, allows for app.title and (new) app.description to be used as defaults for the page title and description. Fixes #2811.

#2795 Allow list of components to be passed as layout.

#2760 New additions to dcc.Loading resolving multiple issues:

delay_show and delay_hide props to prevent flickering during brief loading periods (similar to Dash Bootstrap Components dbc.Spinner)

overlay_style for styling the loading overlay, such as setting visibility and opacity for children

target_components specifies components/props triggering the loading spinner

custom_spinner enables using a custom component for loading messages instead of built-in spinners

display overrides the loading status with options for "show," "hide," or "auto"

#2822 Support no output callbacks. Fixes #1549

#2822 Add global set_props. Fixes #2803

Fixed

#2362 Global namespace not polluted any more when loading clientside callbacks.

#2833 Allow data url in link props. Fixes #2764

#2822 Fix side update (running/progress/cancel) dict ids. Fixes #2111

#2817 Change hashing algorithm from md5 to sha256. Fixes #2697

#2816 Fix dcc.Dropdown value not updated when option is removed. Fixes #2733

#2823 Fix None in "wait" methods causing incorrectly passing tests. Fixes #2818

Dash v2.16.1

Fixed

#2783 Remove dynamic loading.

Dash v2.16.0

Fixed

#2756 Prevent false dangerous link warning. Fixes #2743

#2752 Fixed issue with Windows build, for first time build on Windows, the dev needs to use npm run first-build

Changed

#2734 Configure CI for Python 3.10 #1863

#2735 Configure CI for Python 3.8 and 3.12, drop support for Python 3.6 and Python 3.7 #2736

... (truncated)

Changelog

Sourced from dash's changelog.

[2.17.1] - 2024-06-12

Fixed

#2860 Fix dcc.Loading to apply overlay_style only to the children and not the spinner. Fixes #2858

#2854 Fix dcc.Dropdown resetting empty values to null and triggering callbacks. Fixes #2850

#2859 Fix base patch operators. fixes #2855

#2856 Fix multiple consecutive calls with same id to set_props only keeping the last props. Fixes #2852

#2867 Fix clientside no output callback. Fixes #2866

#2876 Fix pattern matching in callback running argument. Fixes #2863

[2.17.0] - 2024-05-03

Added

#2832 Add dash startup route setup on Dash init.

#2819 Add dash subcomponents receive additional parameters passed by the parent component. Fixes #2814.

#2826 When using Pages, allows for app.title and (new) app.description to be used as defaults for the page title and description. Fixes #2811.

#2795 Allow list of components to be passed as layout.

#2760 New additions to dcc.Loading resolving multiple issues:

delay_show and delay_hide props to prevent flickering during brief loading periods (similar to Dash Bootstrap Components dbc.Spinner)

overlay_style for styling the loading overlay, such as setting visibility and opacity for children

target_components specifies components/props triggering the loading spinner

custom_spinner enables using a custom component for loading messages instead of built-in spinners

display overrides the loading status with options for "show," "hide," or "auto"

#2822 Support no output callbacks. Fixes #1549

#2822 Add global set_props. Fixes #2803

Fixed

#2362 Global namespace not polluted any more when loading clientside callbacks.

#2833 Allow data url in link props. Fixes #2764

#2822 Fix side update (running/progress/cancel) dict ids. Fixes #2111

#2817 Change hashing algorithm from md5 to sha256, Fixes #2697.

#2816 Fix dcc.Dropdown value not updated when option is removed. Fixes #2733.

#2823 Fix None in "wait" methods causing incorrectly passing tests. Fixes #2818

[2.16.1] - 2024-03-06

Fixed

#2783 Remove dynamic loading.

[2.16.0] - 2024-03-01

Fixed

#2756 Prevent false dangerous link warning. Fixes #2743

#2752 Fixed issue with Windows build, for first time build on Windows, the dev needs to use npm run first-build

... (truncated)

Commits

791c1eb Merge pull request #2884 from plotly/master-2.17.1
18f2f85 build
04e5e01 Master 2.17.1 build artifacts
d3ca2bf Merge branch 'dev' into master-2.17.1
553db47 Merge pull request #2883 from plotly/version-2.17.1
1753459 Version 2.17.1
efb9d32 Merge pull request #2876 from plotly/fix/pmc-side-updates
88a4c94 Set pch001 flaky
2be6047 Use lock instead of sleep
f7d5f2c Refactor functions to patternMatching.ts
Additional commits viewable in compare view

Updates fonttools from 4.43.0 to 4.53.1

Release notes

Sourced from fonttools's releases.

4.53.1

[feaLib] Improve the sharing of inline chained lookups (#3559)

[otlLib] Correct the calculation of OS/2.usMaxContext with reversed chaining contextual single substitutions (#3569)

[misc.visitor] Visitors search the inheritance chain of objects they are visiting (#3581)

4.53.0

[ttLib.removeOverlaps] Support CFF table to aid in downconverting CFF2 fonts (fonttools/fonttools#3528)

[avar] Fix crash when accessing not-yet-existing attribute (fonttools/fonttools#3550)

[docs] Add buildMathTable to otlLib.builder documentation (fonttools/fonttools#3540)

[feaLib] Allow UTF-8 with BOM when reading features (fonttools/fonttools#3495)

[SVGPathPen] Revert rounding coordinates to two decimal places by default (fonttools/fonttools#3543)

[varLib.instancer] Refix output filename decision-making (fonttools/fonttools#3545, fonttools/fonttools#3544, fonttools/fonttools#3548)

4.52.4

[varLib.cff] Restore and deprecate convertCFFtoCFF2 that was removed in 4.52.0 release as it is used by downstream projects (#3535).

4.52.3

Fixed a small syntax error in the reStructuredText-formatted NEWS.rst file which caused the upload to PyPI to fail for 4.52.2. No other code changes.

4.52.2

[varLib.interpolatable] Ensure that scipy/numpy output is JSON-serializable (#3522, #3526)

[housekeeping] Regenerate table lists, to fix pyinstaller packaging of the new VARC table (#3531, #3529)

[cffLib] Make CFFToCFF2 and CFF2ToCFF more robust (#3521, #3525)

4.52.1

Fixed a small syntax error in the reStructuredText-formatted NEWS.rst file which caused the upload to PyPI to fail for 4.52.0.
No other code changes.

4.52.0

Added support for the new VARC (Variable Composite) table that is being proposed to OpenType spec (#3395).
For more info: https://github.com/harfbuzz/boring-expansion-spec/blob/main/VARC.md

[ttLib.main] Fixed decompiling all tables (90fed08).

[feaLib] Don't reference the same lookup index multiple times within the same feature record, it is only applied once anyway (#3520).

[cffLib] Moved methods to desubroutinize, remove hints and unused subroutines from subset module to cffLib (#3517).

[varLib.instancer] Added support for partial-instancing CFF2 tables! Also, added method to down-convert from CFF2 to CFF 1.0, and CLI entry points to convert CFFCFF2 (#3506).

[subset] Prune unused user name IDs even with --name-IDs='*' (#3410).

[ttx] use GNU-style getopt to intermix options and positional arguments (#3509).

[feaLib.variableScalar] Fixed value_at_location() method (#3491)

[psCharStrings] Shorten output of encodeFloat (#3492).

[bezierTools] Fix infinite-recursion in calcCubicArcLength (#3502).

[avar2] Implement avar2 support in TTFont.getGlyphSet() (#3473).

4.51.0

[ttLib] Optimization on loading aux fields (#3464).

[ttFont] Add reorderGlyphs (#3468).

4.50.0

[pens] Added decomposing filter pens that draw components as regular contours (fonttools/fonttools#3460).

[instancer] Drop explicit no-op axes from TupleVariations (fonttools/fonttools#3457).

... (truncated)

Changelog

Sourced from fonttools's changelog.

4.53.1 (released 2024-07-05)

[feaLib] Improve the sharing of inline chained lookups (#3559)

[otlLib] Correct the calculation of OS/2.usMaxContext with reversed chaining contextual single substitutions (#3569)

[misc.visitor] Visitors search the inheritance chain of objects they are visiting (#3581)

4.53.0 (released 2024-05-31)

[ttLib.removeOverlaps] Support CFF table to aid in downconverting CFF2 fonts (#3528)

[avar] Fix crash when accessing not-yet-existing attribute (#3550)

[docs] Add buildMathTable to otlLib.builder documentation (#3540)

[feaLib] Allow UTF-8 with BOM when reading features (#3495)

[SVGPathPen] Revert rounding coordinates to two decimal places by default (#3543)

[varLib.instancer] Refix output filename decision-making (#3545, #3544, #3548)

4.52.4 (released 2024-05-27)

[varLib.cff] Restore and deprecate convertCFFtoCFF2 that was removed in 4.52.0 release as it is used by downstream projects (#3535).

4.52.3 (released 2024-05-27)

Fixed a small syntax error in the reStructuredText-formatted NEWS.rst file which caused the upload to PyPI to fail for 4.52.2. No other code changes.

4.52.2 (released 2024-05-27)

[varLib.interpolatable] Ensure that scipy/numpy output is JSON-serializable (#3522, #3526).

[housekeeping] Regenerate table lists, to fix pyinstaller packaging of the new VARC table (#3531, #3529).

[cffLib] Make CFFToCFF2 and CFF2ToCFF more robust (#3521, #3525).

4.52.1 (released 2024-05-24)

Fixed a small syntax error in the reStructuredText-formatted NEWS.rst file which caused the upload to PyPI to fail for 4.52.0. No other code changes.

4.52.0 (released 2024-05-24)

Added support for the new VARC (Variable Composite) table that is being proposed to OpenType spec (#3395). For more info: https://github.com/harfbuzz/boring-expansion-spec/blob/main/VARC.md

... (truncated)

Commits

d3e68f2 Release 4.53.1
f676472 Test for visitor inheritance
3546b9f Search the object's MRO for visitors
ee56bb0 Merge pull request #3578 from fonttools/pyup-scheduled-update-2024-07-01
7f473e1 Update uharfbuzz from 0.39.1 to 0.39.3
1b87761 Update scipy from 1.13.1 to 1.14.0
cf44801 Update reportlab from 4.2.0 to 4.2.2
221c518 Merge pull request #3571 from fonttools/dependabot/github_actions/pypa/gh-act...
68be9ae Merge pull request #3575 from fonttools/pyup-scheduled-update-2024-06-24
00f85a4 Update sympy from 1.12 to 1.12.1
Additional commits viewable in compare view

Updates gitpython from 3.1.41 to 3.1.43

Release notes

Sourced from gitpython's releases.

3.1.43

Particularly Important Changes

These are likely to affect you, please do take a careful look.

Issue and test deprecation warnings by @EliahKagan in gitpython-developers/GitPython#1886

Fix version_info cache invalidation, typing, parsing, and serialization by @EliahKagan in gitpython-developers/GitPython#1838

Document manual refresh path treatment by @EliahKagan in gitpython-developers/GitPython#1839

Improve static typing and docstrings related to git object types by @EliahKagan in gitpython-developers/GitPython#1859

Other Changes

Test in Docker with Alpine Linux on CI by @EliahKagan in gitpython-developers/GitPython#1826

Build online docs (RTD) with -W and dependencies by @EliahKagan in gitpython-developers/GitPython#1843

Suggest full-path refresh() in failure message by @EliahKagan in gitpython-developers/GitPython#1844

repo.blame and repo.blame_incremental now accept None as the rev parameter. by @Gaubbe in gitpython-developers/GitPython#1846

Make sure diff always uses the default diff driver when create_patch=True by @can-taslicukur in gitpython-developers/GitPython#1832

Revise docstrings, comments, and a few messages by @EliahKagan in gitpython-developers/GitPython#1850

Expand what is included in the API Reference by @EliahKagan in gitpython-developers/GitPython#1855

Restore building of documentation downloads by @EliahKagan in gitpython-developers/GitPython#1856

Revise type annotations slightly by @EliahKagan in gitpython-developers/GitPython#1860

Updating regex pattern to handle unicode whitespaces. by @jcole-crowdstrike in gitpython-developers/GitPython#1853

Use upgraded pip in test fixture virtual environment by @EliahKagan in gitpython-developers/GitPython#1864

lint: replac...
Description has been truncated

Bumps the pip group with 2 updates in the /examples/research_projects/codeparrot/examples directory: [transformers](https://github.com/huggingface/transformers) and [scikit-learn](https://github.com/scikit-learn/scikit-learn). Bumps the pip group with 15 updates in the /examples/research_projects/decision_transformer directory: | Package | From | To | | --- | --- | --- | | [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.0.2` | `1.5.0` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.4` | `3.9.5` | | [black](https://github.com/psf/black) | `24.3.0` | `24.4.2` | | [cryptography](https://github.com/pyca/cryptography) | `42.0.0` | `42.0.4` | | [dash](https://github.com/plotly/dash) | `2.15.0` | `2.17.1` | | [fonttools](https://github.com/fonttools/fonttools) | `4.43.0` | `4.53.1` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.41` | `3.1.43` | | [grpcio](https://github.com/grpc/grpc) | `1.53.2` | `1.64.1` | | [pillow](https://github.com/python-pillow/Pillow) | `10.3.0` | `10.4.0` | | [pyarrow](https://github.com/apache/arrow) | `15.0.0` | `16.1.0` | | [requests](https://github.com/psf/requests) | `2.32.0` | `2.32.3` | | [tensorflow](https://github.com/tensorflow/tensorflow) | `2.11.1` | `2.17.0` | | [torch](https://github.com/pytorch/pytorch) | `1.13.1` | `2.3.1` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.3` | `4.66.4` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.19` | `2.2.2` | Bumps the pip group with 1 update in the /examples/research_projects/deebert directory: [transformers](https://github.com/huggingface/transformers). Bumps the pip group with 1 update in the /examples/research_projects/distillation directory: [gitpython](https://github.com/gitpython-developers/GitPython). Bumps the pip group with 1 update in the /examples/research_projects/jax-projects/hybrid_clip directory: [torch](https://github.com/pytorch/pytorch). Bumps the pip group with 6 updates in the /examples/research_projects/lxmert directory: | Package | From | To | | --- | --- | --- | | [pyarrow](https://github.com/apache/arrow) | `15.0.0` | `16.1.0` | | [requests](https://github.com/psf/requests) | `2.32.2` | `2.32.3` | | [torch](https://github.com/pytorch/pytorch) | `1.13.1` | `2.3.1` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.3` | `4.66.4` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.19` | `2.2.2` | | [jupyter-core](https://github.com/jupyter/jupyter_core) | `4.11.2` | `5.7.2` | Bumps the pip group with 1 update in the /examples/research_projects/pplm directory: [transformers](https://github.com/huggingface/transformers). Bumps the pip group with 6 updates in the /examples/research_projects/visual_bert directory: | Package | From | To | | --- | --- | --- | | [pyarrow](https://github.com/apache/arrow) | `15.0.0` | `16.1.0` | | [requests](https://github.com/psf/requests) | `2.32.2` | `2.32.3` | | [torch](https://github.com/pytorch/pytorch) | `1.13.1` | `2.3.1` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.3` | `4.66.4` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.19` | `2.2.2` | | [jupyter-core](https://github.com/jupyter/jupyter_core) | `4.11.2` | `5.7.2` | Bumps the pip group with 1 update in the /examples/research_projects/vqgan-clip directory: [transformers](https://github.com/huggingface/transformers). Bumps the pip group with 1 update in the /examples/tensorflow/language-modeling-tpu directory: [transformers](https://github.com/huggingface/transformers). Updates `transformers` from 4.38.0 to 4.42.4 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v4.42.4) Updates `scikit-learn` from 1.1.2 to 1.5.0 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](scikit-learn/scikit-learn@1.1.2...1.5.0) Updates `scikit-learn` from 1.0.2 to 1.5.0 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](scikit-learn/scikit-learn@1.1.2...1.5.0) Updates `aiohttp` from 3.9.4 to 3.9.5 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.9.4...v3.9.5) Updates `black` from 24.3.0 to 24.4.2 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.3.0...24.4.2) Updates `cryptography` from 42.0.0 to 42.0.4 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.0...42.0.4) Updates `dash` from 2.15.0 to 2.17.1 - [Release notes](https://github.com/plotly/dash/releases) - [Changelog](https://github.com/plotly/dash/blob/dev/CHANGELOG.md) - [Commits](plotly/dash@v2.15.0...v2.17.1) Updates `fonttools` from 4.43.0 to 4.53.1 - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.43.0...4.53.1) Updates `gitpython` from 3.1.41 to 3.1.43 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.41...3.1.43) Updates `grpcio` from 1.53.2 to 1.64.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.53.2...v1.64.1) Updates `pillow` from 10.3.0 to 10.4.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@10.3.0...10.4.0) Updates `pyarrow` from 15.0.0 to 16.1.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@go/v15.0.0...r-16.1.0) Updates `requests` from 2.32.0 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.0...v2.32.3) Updates `tensorflow` from 2.11.1 to 2.17.0 - [Release notes](https://github.com/tensorflow/tensorflow/releases) - [Changelog](https://github.com/tensorflow/tensorflow/blob/master/RELEASE.md) - [Commits](tensorflow/tensorflow@v2.11.1...v2.17.0) Updates `torch` from 1.13.1 to 2.3.1 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v1.13.1...v2.3.1) Updates `tqdm` from 4.66.3 to 4.66.4 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.3...v4.66.4) Updates `urllib3` from 1.26.19 to 2.2.2 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...2.2.2) Updates `transformers` from 4.38.0 to 4.42.4 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v4.42.4) Updates `gitpython` from 3.1.41 to 3.1.43 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.41...3.1.43) Updates `torch` from 1.13.1 to 2.3.1 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v1.13.1...v2.3.1) Updates `pyarrow` from 15.0.0 to 16.1.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@go/v15.0.0...r-16.1.0) Updates `requests` from 2.32.2 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.0...v2.32.3) Updates `torch` from 1.13.1 to 2.3.1 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v1.13.1...v2.3.1) Updates `tqdm` from 4.66.3 to 4.66.4 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.3...v4.66.4) Updates `urllib3` from 1.26.19 to 2.2.2 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...2.2.2) Updates `jupyter-core` from 4.11.2 to 5.7.2 - [Release notes](https://github.com/jupyter/jupyter_core/releases) - [Changelog](https://github.com/jupyter/jupyter_core/blob/main/CHANGELOG.md) - [Commits](jupyter/jupyter_core@4.11.2...v5.7.2) Updates `transformers` from 4.38.0 to 4.42.4 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v4.42.4) Updates `pyarrow` from 15.0.0 to 16.1.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@go/v15.0.0...r-16.1.0) Updates `requests` from 2.32.2 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.0...v2.32.3) Updates `torch` from 1.13.1 to 2.3.1 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v1.13.1...v2.3.1) Updates `tqdm` from 4.66.3 to 4.66.4 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.3...v4.66.4) Updates `urllib3` from 1.26.19 to 2.2.2 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...2.2.2) Updates `jupyter-core` from 4.11.2 to 5.7.2 - [Release notes](https://github.com/jupyter/jupyter_core/releases) - [Changelog](https://github.com/jupyter/jupyter_core/blob/main/CHANGELOG.md) - [Commits](jupyter/jupyter_core@4.11.2...v5.7.2) Updates `transformers` from 4.38.0 to 4.42.4 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v4.42.4) Updates `transformers` from 4.38.0 to 4.42.4 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v4.42.4) --- updated-dependencies: - dependency-name: transformers dependency-type: direct:production dependency-group: pip - dependency-name: scikit-learn dependency-type: direct:production dependency-group: pip - dependency-name: scikit-learn dependency-type: direct:production dependency-group: pip - dependency-name: aiohttp dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-type: direct:production dependency-group: pip - dependency-name: dash dependency-type: direct:production dependency-group: pip - dependency-name: fonttools dependency-type: direct:production dependency-group: pip - dependency-name: gitpython dependency-type: direct:production dependency-group: pip - dependency-name: grpcio dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-type: direct:production dependency-group: pip - dependency-name: pyarrow dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-type: direct:production dependency-group: pip - dependency-name: tensorflow dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-type: direct:production dependency-group: pip - dependency-name: tqdm dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-type: direct:production dependency-group: pip - dependency-name: gitpython dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-type: direct:production dependency-group: pip - dependency-name: pyarrow dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-type: direct:production dependency-group: pip - dependency-name: tqdm dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: jupyter-core dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-type: direct:production dependency-group: pip - dependency-name: pyarrow dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-type: direct:production dependency-group: pip - dependency-name: tqdm dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: jupyter-core dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 14, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 10 directories with 17 updates #12

Bump the pip group across 10 directories with 17 updates #12

dependabot bot commented on behalf of github Jul 14, 2024

Bump the pip group across 10 directories with 17 updates #12

Are you sure you want to change the base?

Bump the pip group across 10 directories with 17 updates #12

Conversation

dependabot bot commented on behalf of github Jul 14, 2024

Patch release v4.42.4

Mostly gemma2 support FA2 softcapping!

Patch release v4.42.3

Make sure we have attention softcapping for "eager" GEMMA2 model

Patch release v4.42.2

Patch release

v4.42.1: Patch release

v4.42.0: Gemma 2, RTDETR, InstructBLIP, LLAVa Next, New Model Adder

New model additions

Gemma-2

RTDETR

Scikit-learn 1.5.0

Scikit-learn 1.4.2

Scikit-learn 1.4.1.post1

Scikit-learn 1.5.0

Scikit-learn 1.4.2

Scikit-learn 1.4.1.post1

3.9.5

Bug fixes

3.9.5 (2024-04-16)

Bug fixes

24.4.2

Parser

Performance

24.4.1

Highlights

Stable style

Parser

Integrations

24.4.0

Stable style

Preview style

Integrations

24.4.2

Parser

Performance

24.4.1

Highlights

Stable style

Parser

Integrations

24.4.0

Stable style

Preview style

Integrations

Dash v2.17.1

Fixed

Dash v2.17.0

Added

Fixed

Dash v2.16.1

Fixed

Dash v2.16.0

Fixed

Changed

[2.17.1] - 2024-06-12

Fixed

[2.17.0] - 2024-05-03

Added

Fixed

[2.16.1] - 2024-03-06

Fixed

[2.16.0] - 2024-03-01

Fixed

4.53.0

4.52.4

4.52.3

4.52.2

4.52.1

4.52.0

4.51.0

4.50.0

4.53.1 (released 2024-07-05)

4.53.0 (released 2024-05-31)

4.52.4 (released 2024-05-27)