deps(lora): bump the lora-deps group across 1 directory with 8 updates - #1122
Open
dependabot[bot] wants to merge 2 commits into
Conversation
Updates the requirements on [transformers](https://github.com/huggingface/transformers), [tqdm](https://github.com/tqdm/tqdm), [sentence-transformers](https://github.com/huggingface/sentence-transformers), [bitsandbytes](https://github.com/bitsandbytes-foundation/bitsandbytes), [matplotlib](https://github.com/matplotlib/matplotlib), [fastapi](https://github.com/fastapi/fastapi), [onnxruntime](https://github.com/microsoft/onnxruntime) and [azure-ai-ml](https://github.com/Azure/azure-sdk-for-python) to permit the latest version. Updates `transformers` to 5.14.1 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.13.0...v5.14.1) Updates `tqdm` to 4.69.1 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.68.4...v4.69.1) Updates `sentence-transformers` to 5.6.1 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](huggingface/sentence-transformers@v5.6.0...v5.6.1) Updates `bitsandbytes` to 0.50.0 - [Release notes](https://github.com/bitsandbytes-foundation/bitsandbytes/releases) - [Changelog](https://github.com/bitsandbytes-foundation/bitsandbytes/blob/main/CHANGELOG.md) - [Commits](bitsandbytes-foundation/bitsandbytes@0.49.2...0.50.0) Updates `matplotlib` to 3.11.1 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.11.0...v3.11.1) Updates `fastapi` to 0.140.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.140.0) Updates `onnxruntime` to 1.28.0 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](microsoft/onnxruntime@v1.27.0...v1.28.0) Updates `azure-ai-ml` to 1.34.1 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-ai-ml_1.34.0...azure-ai-ml_1.34.1) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.14.1 dependency-type: direct:production dependency-group: lora-deps - dependency-name: tqdm dependency-version: 4.69.1 dependency-type: direct:production dependency-group: lora-deps - dependency-name: sentence-transformers dependency-version: 5.6.1 dependency-type: direct:production dependency-group: lora-deps - dependency-name: bitsandbytes dependency-version: 0.50.0 dependency-type: direct:production dependency-group: lora-deps - dependency-name: matplotlib dependency-version: 3.11.1 dependency-type: direct:production dependency-group: lora-deps - dependency-name: fastapi dependency-version: 0.140.0 dependency-type: direct:production dependency-group: lora-deps - dependency-name: onnxruntime dependency-version: 1.28.0 dependency-type: direct:production dependency-group: lora-deps - dependency-name: azure-ai-ml dependency-version: 1.34.1 dependency-type: direct:production dependency-group: lora-deps ... Signed-off-by: dependabot[bot] <support@github.com>
|
|
||
| # Use specific provider | ||
| maker = WebsiteMaker(provider_name='azure') # or 'openai', 'local' | ||
| maker = WebsiteMaker(provider_name="azure") # or 'openai', 'local' |
Contributor
There was a problem hiding this comment.
Semgrep identified an issue in your code:
Possibly found usage of AI: OpenAI
To resolve this comment:
🔧 No guidance has been designated for this issue. Fix according to your organization's approved methods.
💬 Ignore this finding
Reply with Semgrep commands to ignore this finding.
/fp <comment>for false positive/ar <comment>for acceptable risk/other <comment>for all other reasons
Alternatively, triage in Semgrep AppSec Platform to ignore the finding created by detect-generic-ai-oai.
You can view more details about this finding in the Semgrep AppSec Platform.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on transformers, tqdm, sentence-transformers, bitsandbytes, matplotlib, fastapi, onnxruntime and azure-ai-ml to permit the latest version.
Updates
transformersto 5.14.1Release notes
Sourced from transformers's releases.
Commits
a08ace4Release: v4.14.11ccf4f1Fix deepgemm on multiple devices (#47323)c98cc10[FP8] Bump kernels version (#47344)e035e45Fix assisted decoding for models with EncoderDecoder cache & OlmoHybrid (#47361)0eb5e03Fix sdpa prefill with position_bias (#47359)2fa8c19v5.14.06c9318efix feature extraction8f23330Small improvement (#47348)76613e6Add Inkling model (#47347)f5a67a4🚨 Pass tp_plan from lm_heads (#47253)Updates
tqdmto 4.69.1Release notes
Sourced from tqdm's releases.
Commits
93370ffbump version, merge pull requests #1781, #1773, #1778, #1775, #1780, #1746238501fdocs: fix redundant word typo in tests_synchronisation.pyb78624acontrib.logging: preserve filters9f92bc6remove unnecessary comments494372eFix AttributeError inclose()on failed__init__796cea1misc tidy164ef73rich: misc fixesf18c88efix properly90f5970minor tidyef15578fix: handle total=inf in format_meter to avoid OverflowErrorUpdates
sentence-transformersto 5.6.1Release notes
Sourced from sentence-transformers's releases.
... (truncated)
Commits
7d3eb16Release v5.6.1286dcf3[tests] Skip bf16 + Windows + CPU forwards, as they can WindowsError on tor...30bad93[ci] Exclude librosa/numba/llvmlite on Python 3.13 (#3835)9ca6bbc🚨 Fix position_ids offsetting for RoBERTa-family models when flattening input...Updates
bitsandbytesto 0.50.0Release notes
Sourced from bitsandbytes's releases.
... (truncated)
Changelog
Sourced from bitsandbytes's changelog.
... (truncated)
Commits
c5d481bci: skip-existing on PyPI publishba9bc38Release 0.50.0f54075eUpdate supported platforms in installation guide (#2019)fbbfc09Update README (#2017)c23a72e(docs) update XPU section (#2016)7d1f6a2docs: update AMD section (#2015)6721333chore(deps): bump softprops/action-gh-release in the actions group (#2013)dde003bfix(rocm): avoid SIMT workgroup-count resonance (#2012)f2233a6fix(optim): honor user-provided max_unorm in LAMB (+ 8-bit arg guards) (#1998)a229e65cleanup: remove unused CUDA install scripts (#2009)Updates
matplotlibto 3.11.1Release notes
Sourced from matplotlib's releases.
Commits
3c1757aREL: v3.11.1792c6b5DOC: Prepare for 3.11.1aaff9f6Merge branch 'v3.11.0-doc' into v3.11.xd4f4527Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...6ad4bcfMerge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...7fb74d3Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...c624aecBackport PR #32038: Fix occasional misalignment in reported mouse position (a...8eda2b7Backport PR #32037: Bump the actions group with 3 updatesa0e7ae5Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...9001323Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...Updates
fastapito 0.140.0Release notes
Sourced from fastapi's releases.
Commits
255b912🔖 Release version 0.140.0 (#16050)892eacd📝 Update release notes0270829⚡️ Reduce memory usage in dependencies (#16049)ae031be📝 Update release notesf3644b3📝 Fix links in docs (#15967)1e24ca0📝 Update release notes513c396👷 Add CI memory benchmark (#16046)a64dfbb📝 Update release notes4f15548📝 Add Library Skills documentation (#16041)704fbe1📝 Update release notesUpdates
onnxruntimeto 1.28.0Release notes
Sourced from onnxruntime's releases.
... (truncated)
Commits
da9b5e3Fix Windows zip artifact to include .inc header files (#29874)45de2a8Fix NuGet packaging to include .inc files alongside .h headers (#29868)0368187ORT 1.28.0 release cherry-pick round 2 (#29821)e1bbb64ORT 1.28.0 release cherry-pick round 1 (#29771)a06675eFix web e2e (npm/vite) and Python DML CI pipelines (#29609)c4f1961Bump onnx to 1.22.0 and protobuf to 6.33.5 to fix security CVEs (#29606)e0ad071[CUDA] Enable native SM90, block_size=32, and fused bias for fpA_intB MatMulN...a1fc71e[CUDA] Fix QMoE profiler cross-stream race and CUDA-graph-capture safety (#29...5eb4aeeFix CustomOp forward compatibility: cap version instead of rejecting (#29574)7a12371adjusts conv kernel to use get/set by offset helpers (#29463)Updates
azure-ai-mlto 1.34.1Release notes
Sourced from azure-ai-ml's releases.
Commits
1521637Update CHANGELOG.mddecb482Update CHANGELOG.md76233f8Cherrypick- Fix BatchEndpoint.defaults regression: restore attribute-access o...0b2bbd2Cherry-pick for Fix batchendpoint defaults serialisation (#47497) (#47606)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions