Bump the ml-runtime group across 1 directory with 6 updates by dependabot[bot] · Pull Request #4 · paulolemko/lemko_tools_api

dependabot · 2026-05-25T14:04:05Z

Bumps the ml-runtime group with 6 updates in the / directory:

Package	From	To
torch	`2.3.1+cpu`	`2.13.0+cpu`
torchaudio	`2.3.1+cpu`	`2.11.0+cpu`
nemo-toolkit	`2.4.0`	`2.7.3`
transformers	`4.56.0`	`5.14.1`
datasets	`4.0.0`	`5.0.1`
nltk	`3.9.1`	`3.10.0`

Updates torch from 2.3.1+cpu to 2.13.0+cpu

Updates torchaudio from 2.3.1+cpu to 2.11.0+cpu

Updates nemo-toolkit from 2.4.0 to 2.7.3

Release notes

Sourced from nemo-toolkit's releases.

NVIDIA Neural Modules 2.7.3

Highlights

This release addresses known security issues. For the latest NVIDIA Vulnerability Disclosure Information visit https://www.nvidia.com/en-us/security/, for acknowledgement please reach out to the NVIDIA PSIRT team at PSIRT@nvidia.com

Uncategorized:

beep boop 🤖: Bumping nemo to v2.7.3 by @nemo-automation-bot[bot] :: PR: #15552

remove experimental sclite file by @nithinraok :: PR: #15572

fix: Remove nemo_class arg in import_hf.py by @chtruong814 :: PR: #15596

fix: Use RestrictedUnpickler in nemo.lightning.io.mixin by @chtruong814 :: PR: #15597

cp: fix: Remove diskcache from requirements (15630) into r2.7.0 by @chtruong814 :: PR: #15635

NVIDIA Neural Modules 2.7.2

ASR

cp: Fix numba-cuda and cuda-python installation and usage (#15506) by @chtruong814 :: PR: #15540

Uncategorized:

beep boop 🤖: Bumping nemo to v2.7.2 by @nemo-automation-bot[bot] :: PR: #15535

NVIDIA Neural Modules 2.7.1

ASR

cp: Fix cuda-python usage for CUDA graphs ([#15416](https://github.com/nvidia/nemo/issues/15416)) by @ko3n1g :: PR: #15471

Uncategorized:

... (truncated)

Commits

1d4ee42 fix: Remove diskcache from requirements (#15630) (#15635)
76810d5 fix: Use RestrictedUnpickler in nemo.lightning.io.mixin (#15597)
57f7169 fix: Remove nemo_class arg in import_hf.py (#15596)
ecd2f43 remove experimental sclite file (#15572)
b70f579 beep boop 🤖: Bumping nemo to v2.7.3
3d73c48 Fix numba-cuda and cuda-python installation and usage (#15506) (#15540)
f079b4d beep boop 🤖: Bumping nemo to v2.7.2
e0da10d cp: Fix cuda-python usage for CUDA graphs ([#15416](https://github.com/nvidia/nemo/issues/15416)) (#15471)
f41512c cp: Update release workflow to include generated changelog (#15429) (#15430)
2b77028 chore: Remove pre-release suffix for 2.7.0 (#15415)
Additional commits viewable in compare view

Updates transformers from 4.56.0 to 5.14.1

Release notes

Sourced from transformers's releases.

Patch release: v5.14.1

Patch release v5.14.1

This patch solves a few issues which appeared when integrating Inkling model, most notably an issue affecting models using EncoderDecoderCache during assisted generation. It also fixes an issue that could appear during prefill with StaticCache and sdpa without padding for Inkling which uses a position_bias. It contains the following commits:

Fix sdpa prefill with position_bias (#47359) by @Cyrilvallez

Fix assisted decoding for models with EncoderDecoder cache & OlmoHybrid (#47361) by @Cyrilvallez

[FP8] Bump kernels version (#47344) by @vasqu

Fix deepgemm on multiple devices (#47323) by @IlyasMoutawwakil

Release v5.14.0

New Model additions

Inkling (fresh from Thinking Machines): 975B total, 41B active

Add Inkling model #47347 by @molbap @Cyrilvallez @eustlb and @zucchini-nlp

Inkling is a general-purpose multimodal model that accepts text, image and audio inputs and generates text outputs. It is intended for use in English and other languages, and across multiple coding languages. The model is designed to be used by developers building AI- powered applications, including agentic and tool-use systems, coding assistants, chatbots, and retrieval-augmented generation systems, and is suitable for general-purpose conversational use, instruction-following, and other natural language and multimodal tasks. It is released with open weights to support research, fine-tuning and integration into third-party products by downstream developers.

TIPSv2

Links: Documentation

Add TIPSv2 (#46347) by @Ternura143 in #46347

TIPSv2 DPT

Links: Documentation

Add TIPSv2 (#46347) by @Ternura143 in #46347

🚨 Breaking changes

... (truncated)

Commits

a08ace4 Release: v4.14.1
1ccf4f1 Fix deepgemm on multiple devices (#47323)
c98cc10 [FP8] Bump kernels version (#47344)
e035e45 Fix assisted decoding for models with EncoderDecoder cache & OlmoHybrid (#47361)
0eb5e03 Fix sdpa prefill with position_bias (#47359)
2fa8c19 v5.14.0
6c9318e fix feature extraction
8f23330 Small improvement (#47348)
76613e6 Add Inkling model (#47347)
f5a67a4 🚨 Pass tp_plan from lm_heads (#47253)
Additional commits viewable in compare view

Updates datasets from 4.0.0 to 5.0.1

Release notes

Sourced from datasets's releases.

5.0.1

Bug fixes

Fix version string in init.py by @qgallouedec in huggingface/datasets#8244

fix conda build by @lhoestq in huggingface/datasets#8250

Fix JSON loader schema inference for files starting with a UTF-8 BOM (#8241) by @archievi in huggingface/datasets#8243

Support hermes traces by @lhoestq in huggingface/datasets#8255

Fix batch(by_column=...) crashing after shard/shuffle/split by @pkooij in huggingface/datasets#8259

fix traces streaming by @lhoestq in huggingface/datasets#8277

support droid agent traces by @cfahlgren1 in huggingface/datasets#8263

Fix CI: commit operation equality (hfh 1.20.0) and pytest parametrize collection error by @Wauplin in huggingface/datasets#8283

Fix lance auth by @lhoestq in huggingface/datasets#8301

Fix symlink-following arbitrary file write in archive extraction by @AAtomical in huggingface/datasets#8303

Bug Fix: Resuming Twice Resets the Dataloader by @francesco-bertolotti in huggingface/datasets#8295

Bump fsspec and simpler wds compr by @lhoestq in huggingface/datasets#8337

fix: validate Arrow IPC record batches by @XciD in huggingface/datasets#8350

Make the dataset fingerprint independent of Arrow chunking by @SuryanshSS1011 in huggingface/datasets#8339

Fix casting a nullable LargeList to a different inner type by @vineethsaivs in huggingface/datasets#8346

docs: replace AutoFeatureExtractor with AutoImageProcessor in image preprocessing docs by @gautamkishore in huggingface/datasets#8326

Fix column drop in Arrow path of axis=1 concatenation by @ebarkhordar in huggingface/datasets#8342

Raise on length mismatch in batched IterableDataset.map by @sohumt123 in huggingface/datasets#8332

Fix require_storage_embed recursing into require_storage_cast by @vineethsaivs in huggingface/datasets#8349

Fix path traversal via metadata file_name in folder-based builders by @Kaif10 in huggingface/datasets#8325

Support batched=True in Dataset.to_dict by @vineethsaivs in huggingface/datasets#8333

Fix hdf5 external files by @lhoestq in huggingface/datasets#8355

remove bad require_storage test by @lhoestq in huggingface/datasets#8357

ensure fiels are in repo by @lhoestq in huggingface/datasets#8356

Keep flat numeric columns with nulls numeric in numpy format by @ebarkhordar in huggingface/datasets#8352

Fix bucket dataset card handling and push metadata accounting by @pjh4993 in huggingface/datasets#8354

Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 by @ebarkhordar in huggingface/datasets#8358

Keep integers on the python read path for fixed-shape ArrayXD columns with nulls by @ebarkhordar in huggingface/datasets#8363

Rebatch arrow source before formatting in IterableDataset.filter to fix resume data loss by @ebarkhordar in huggingface/datasets#8360

Decode Json() columns in Dataset.to_pandas() by @ebarkhordar in huggingface/datasets#8344

fix buckets on windows by @lhoestq in huggingface/datasets#8369

Fix DatasetDict.push_to_hub leaving removed splits in the dataset card by @pjh4993 in huggingface/datasets#8367

Preserve nullable integer columns in to_json/to_csv/to_sql by @ebarkhordar in huggingface/datasets#8366

Docs

docs: fix duplicate "to" in IterableDataset push-to-hub example by @DaoyuanLi2816 in huggingface/datasets#8252

Clarify dataset creation vs loading workflows in create_dataset tutorial by @zanvari in huggingface/datasets#8235

New Contributors

@DaoyuanLi2816 made their first contribution in huggingface/datasets#8252

@zanvari made their first contribution in huggingface/datasets#8235

@archievi made their first contribution in huggingface/datasets#8243

@pkooij made their first contribution in huggingface/datasets#8259

@AAtomical made their first contribution in huggingface/datasets#8303

@francesco-bertolotti made their first contribution in huggingface/datasets#8295

@XciD made their first contribution in huggingface/datasets#8350

@SuryanshSS1011 made their first contribution in huggingface/datasets#8339

@vineethsaivs made their first contribution in huggingface/datasets#8346

... (truncated)

Commits

921c2a7 release: 5.0.1 (#8370)
c6fc5cd Preserve nullable integer columns in to_json/to_csv/to_sql (#8366)
6747b87 Fix DatasetDict.push_to_hub leaving removed splits in the dataset card (#8367)
b305031 fix buckets on windows (#8369)
030a3e5 Decode Json() columns in Dataset.to_pandas() (#8344)
0f207a0 Rebatch arrow source before formatting in IterableDataset.filter to fix resum...
adad35d Keep integers on the python read path for fixed-shape ArrayXD columns with nu...
8966746 Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 (#8358)
b8e861a Fix bucket dataset card handling and push metadata accounting (#8354)
521a590 Keep flat numeric columns with nulls numeric in numpy format (#8352)
Additional commits viewable in compare view

Updates nltk from 3.9.1 to 3.10.0

Release notes

Sourced from nltk's releases.

v3.10.0-rc1

What's Changed

CHILDES corpus reader: lazy loading (fixes #1340) by @nschneid in nltk/nltk#1341

Stanseg by @casperlehmann in nltk/nltk#1350

Add optional CCG semantics computation by @tanin47 in nltk/nltk#1321

address of free software foundation updated by @Lightyagami1 in nltk/nltk#1347

Added a verification for empty tokens by @gnardari in nltk/nltk#1353

use data.load for vader lexicon by @afgiel in nltk/nltk#1303

Ensure that proper exceptions are caught correctly by @pombredanne in nltk/nltk#1343

Reset CCGVar everytime we invoke lexicon.fromstring() and skip the unicode test because it fails on python2.7 by @tanin47 in nltk/nltk#1354

Add tanin as an author :) by @tanin47 in nltk/nltk#1355

framenet.py: remove unnecessary str() call that causes problems for names with Unicode characters by @nschneid in nltk/nltk#1360

remove u because it doesn't work in Python 3.0 to 3.2 by @tanin47 in nltk/nltk#1362

moved the import for dispersion_plot out of the else block by @dennisobrien in nltk/nltk#1364

Raise warning for infinite recursion by @alvations in nltk/nltk#1365

Patch None TypeError in align_blocks() by @alvations in nltk/nltk#1366

Safer try-except for catching infinite recursion by @alvations in nltk/nltk#1368

Collections refactor by @nschneid in nltk/nltk#1382

Handles fringe cases in BLEU by @alvations in nltk/nltk#1383

Allow specifying substitution cost in edit distance by @dnc1994 in nltk/nltk#1386

Pl196x fixes by @pkasprzyk in nltk/nltk#1359

Docs/ngrams by @ColCarroll in nltk/nltk#1403

Fix conll.py by @germanferrero in nltk/nltk#1402

Aline by @geoffbacon in nltk/nltk#1407

Handle empty files in a corpus by @alexisdimi in nltk/nltk#1411

fixed bug: StackDecoder would throw exception if it's unable to finish… by @hikui in nltk/nltk#1405

add hikui to authors by @hikui in nltk/nltk#1412

removes download-cache pip flag from tox config by @fievelk in nltk/nltk#1415

Added three tokenizers, one detokenizer and two tokenizer-related word/char list corpora by @alvations in nltk/nltk#1282

Much faster Vader sentiment tagging by @georgeberry in nltk/nltk#1409

Fixes doctest in is_cjk() and REPP tokenizer wrapper by @alvations in nltk/nltk#1420

Fixed doctest for UnicharsCorpusReader and NonbreakingPrefixesCorpusReader by @alvations in nltk/nltk#1422

Updated senna version in docstring by @alvations in nltk/nltk#1431

Removes Python 2.6 and Python 3.1-3.3 code, Improves Python 3.5 syntax by @adamn in nltk/nltk#1429

Cleanup by @dimazest in nltk/nltk#1432

Fix zero division & log(0) in PunktTrainer._col_log_likelihood by @mrecachinas in nltk/nltk#1247

Update stanford_segmenter.py by @janissl in nltk/nltk#1444

explained data format for constructor by @drevicko in nltk/nltk#1450

Use a more efficient idiom for flattening nested lists by @rmalouf in nltk/nltk#1447

improved documentation of load_array() by @drevicko in nltk/nltk#1452

changed "list or iterator" to "sequence" by @drevicko in nltk/nltk#1453

Deal gracefully with degenerate cases. by @drevicko in nltk/nltk#1454

deal with (hopefully) all degenerate cases by @drevicko in nltk/nltk#1455

Enable unordered comparison for gaac clustering by @alvations in nltk/nltk#1456

Rewrite porter.py by @ExplodingCabbage in nltk/nltk#1261

Update naivebayes.py by @andyreagan in nltk/nltk#1461

Fixes bug where download status not returned. by @nsfabina in nltk/nltk#1468

Use lcon and rcon variables in conllned() when trace is False - Issue #1474 by @timleslie in nltk/nltk#1475

Use shutil.copyfileobj for unzipping by @ikorolev93 in nltk/nltk#1478

Fixing Chen&Cherry method 6 smoothing in BLEU score by @alvations in nltk/nltk#1477

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.1 2026-07-29

Expand ~ in env-var paths

Validate types after WordNet app pickle deserialization

Fix uncontrolled search path in HunposTagger

Use exact thirds in masi_distance

Avoid retaining bllip import exceptions

Fix word_tokenize: pad opening single quote before multi-letter words.

Implement Tree.pformat_latex_forest.

Prevent module hijacking in inline imports.

Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

Enforce the stricter nltk.pathsec security policy by default

Document the new security model and migration guidance

Harden resource loading against path traversal and SSRF/DNS-rebinding

Harden downloader path handling and block XML entity expansion

Close remaining corpus-reader security edge cases

Replace unsafe exec() usage in the utility CLI

Warn on unpickling user-provided pickles

Add HuggingFace datasets integration (nltk.huggingface)

Align TnT with Brants (2000) specifications

Fix PorterStemmer irregular-form lowercasing in NLTK mode

Fix TransitionParser sparse index dtype for scikit-learn 1.9

Fix TextCat tie handling

Fix WordNet object comparisons for incompatible types

Cache WordNet max depth lazily for lch_similarity()

Fix CCG variable direction, substitution, and type-raising bugs

Fix Jaro similarity for single-character and empty-string cases

Improve CI and release-maintenance workflows

Thanks to the following contributors to 3.10.0: 13rac1, alvations, bowiechen, devesh-2002, ekaf, elias-ba, haosenwang1018, HyperPS, ihitamandal, jancallewaert, jhnwnstd, JuanIMartinezB, Lemm1, LinZiyuu, Mr-Neutr0n, PastelStorm, scruge1, Syzygy2048, ylwango613, yzhaoinuw

Version 3.9.4 2026-03-24

Support Python 3.14

Fix bug in Levenshtein distance when substitution_cost > 2

Fix bug in Treebank detokeniser re quote ordering

Fix bug in Jaro similarity for empty strings

Several security enhancements

Fix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder

... (truncated)

Commits

bd49f90 allow escaped brackets in Tree.fromstring (#3694)
27b8ad6 don't crash chomsky_normal_form on terminals with siblings (#3693)
52227d2 Use os.name for Windows path handling (#3605)
06c0e2c Avoid RIBES zero division on empty inputs (#3604)
a167389 Treat missing unzip output as stale (#3607)
c94c967 Fix EOF empty document bug in IEER corpus reader (#3648)
94a259c Enforce restrictive primitive type checking in pathsec wrappers (#3692)
5ac475d fix(security): isolate Stanford Java options and clean temp files (#3683)
986f26e ci(deps): bump the github-actions group with 3 updates (#3691)
f26b375 fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502)...
Additional commits viewable in compare view

dependabot · 2026-05-25T14:04:06Z

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the ml-runtime group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | torch | `2.3.1+cpu` | `2.13.0+cpu` | | torchaudio | `2.3.1+cpu` | `2.11.0+cpu` | | [nemo-toolkit](https://github.com/nvidia/nemo) | `2.4.0` | `2.7.3` | | [transformers](https://github.com/huggingface/transformers) | `4.56.0` | `5.14.1` | | [datasets](https://github.com/huggingface/datasets) | `4.0.0` | `5.0.1` | | [nltk](https://github.com/nltk/nltk) | `3.9.1` | `3.10.0` | Updates `torch` from 2.3.1+cpu to 2.13.0+cpu Updates `torchaudio` from 2.3.1+cpu to 2.11.0+cpu Updates `nemo-toolkit` from 2.4.0 to 2.7.3 - [Release notes](https://github.com/nvidia/nemo/releases) - [Commits](NVIDIA-NeMo/Speech@v2.4.0...v2.7.3) Updates `transformers` from 4.56.0 to 5.14.1 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.56.0...v5.14.1) Updates `datasets` from 4.0.0 to 5.0.1 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@4.0.0...5.0.1) Updates `nltk` from 3.9.1 to 3.10.0 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@3.9.1...v3.10.0) --- updated-dependencies: - dependency-name: datasets dependency-version: 4.8.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ml-runtime - dependency-name: nemo-toolkit dependency-version: 2.7.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ml-runtime - dependency-name: nltk dependency-version: 3.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ml-runtime - dependency-name: torch dependency-version: 2.12.0+cpu dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ml-runtime - dependency-name: torchaudio dependency-version: 2.11.0+cpu dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ml-runtime - dependency-name: transformers dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ml-runtime ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot changed the title ~~Bump the ml-runtime group with 6 updates~~ Bump the ml-runtime group across 1 directory with 6 updates Jun 22, 2026

dependabot Bot force-pushed the dependabot/pip/ml-runtime-12a8151b44 branch 2 times, most recently from d69c609 to 32354e1 Compare June 29, 2026 04:23

dependabot Bot force-pushed the dependabot/pip/ml-runtime-12a8151b44 branch from 32354e1 to a950615 Compare August 3, 2026 04:19

Navigation Menu

Repository navigation

Bump the ml-runtime group across 1 directory with 6 updates - #4

Bump the ml-runtime group across 1 directory with 6 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ml-runtime-12a8151b44

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

NVIDIA Neural Modules 2.7.3

Highlights

Uncategorized:

NVIDIA Neural Modules 2.7.2

ASR

Uncategorized:

NVIDIA Neural Modules 2.7.1

ASR

Uncategorized:

Patch release: v5.14.1

Patch release v5.14.1

Release v5.14.0

New Model additions

Inkling (fresh from Thinking Machines): 975B total, 41B active

TIPSv2

TIPSv2 DPT

🚨 Breaking changes

5.0.1

Bug fixes

Docs

New Contributors

v3.10.0-rc1

What's Changed

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading