From 386c9ddc23cbdac7209f7d7648cd101451343c13 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 8 May 2026 16:28:46 +0000
Subject: [PATCH] Bump the pip group across 1 directory with 4 updates

Bumps the pip group with 4 updates in the /backend directory: [pydantic](https://github.com/pydantic/pydantic), [scikit-learn](https://github.com/scikit-learn/scikit-learn), [torch](https://github.com/pytorch/pytorch) and [python-jose](https://github.com/mpdavis/python-jose).


Updates `pydantic` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.3.0...v2.4.0)

Updates `scikit-learn` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.3.0...1.5.0)

Updates `torch` from 2.0.1 to 2.8.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](https://github.com/pytorch/pytorch/compare/v2.0.1...v2.8.0)

Updates `python-jose` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.4.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-version: 1.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: torch
  dependency-version: 2.8.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-jose
  dependency-version: 3.4.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/requirements.txt | 8 ++++----
 backend/setup.py         | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index ba6561f..13f081e 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -3,14 +3,14 @@
 # Core dependencies
 fastapi==0.103.1
 uvicorn[standard]==0.23.2
-pydantic==2.3.0
+pydantic==2.4.0
 sqlalchemy==2.0.20
 alembic==1.12.0
 psycopg2-binary==2.9.7
 asyncpg==0.28.0
 
 # Authentication and security
-python-jose[cryptography]==3.3.0
+python-jose[cryptography]==3.4.0
 passlib[bcrypt]==1.7.4
 python-multipart==0.0.6
 
@@ -20,8 +20,8 @@ numpy==1.25.2
 fastf1==3.0.6
 
 # ML/AI
-scikit-learn==1.3.0
-torch==2.0.1
+scikit-learn==1.5.0
+torch==2.8.0
 faiss-cpu==1.7.4
 
 # Async and networking
diff --git a/backend/setup.py b/backend/setup.py
index c576dec..7332ce7 100644
--- a/backend/setup.py
+++ b/backend/setup.py
@@ -10,9 +10,9 @@
         "sqlalchemy>=2.0.0,<2.1.0",
         "alembic>=1.10.0,<1.11.0",
         "asyncpg>=0.27.0,<0.28.0",
-        "python-jose[cryptography]>=3.3.0,<3.4.0",
+        "python-jose[cryptography]>=3.3.0,<3.5.0",
         "passlib[bcrypt]>=1.7.4,<1.8.0",
-        "pydantic>=1.10.0,<2.0.0",
+        "pydantic>=1.10.0,<3.0.0",
         "python-multipart>=0.0.5,<0.0.6",
         "aiofiles>=0.8.0,<0.9.0",
         "pytest>=7.3.1,<7.4.0",