Skip to content

deps(deps): bump the pip group across 1 directory with 2 updates#70

Merged
bniladridas merged 1 commit into
mainfrom
dependabot/pip/pip-88b18ee65b
Jun 26, 2026
Merged

deps(deps): bump the pip group across 1 directory with 2 updates#70
bniladridas merged 1 commit into
mainfrom
dependabot/pip/pip-88b18ee65b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip group with 2 updates in the / directory: transformers and torch.

Updates transformers from 4.57.3 to 5.0.0rc3

Release notes

Sourced from transformers's releases.

Release candidate v5.0.0rc3

New models:

What's Changed

We are getting closer and closer to the official release! This RC is focused on removing more of the deprecated stuff, fixing some minors issues, doc updates.

... (truncated)

Commits

Updates torch from 2.9.1 to 2.12.1

Release notes

Sourced from torch's releases.

PyTorch 2.12.1 Release, bug fix release

This release is meant to fix the following regressions and silent correctness issues:

Regression fixes

  • Fix nondeterministic outputs in test_batch_invariance with FLASH_ATTN on NVIDIA B200 GPUs (#181248), fixed by updating Triton to 3.7.1 (#186814)
  • Fix illegal memory access in the Triton convolution2d_bwd_weight kernel on B100/B200 (sm100) GPUs (#187081), fixed by updating Triton to 3.7.1 (#186814)
  • Fix fill_ on byte-dtype views with misaligned storage offset (#186821)

Releng / Build

  • Drop CPython 3.13t from the binary build matrix (#182951)

PyTorch 2.12.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

Build Frontend

  • Strengthened SVE compile checks in FindARM.cmake, which may reject previously accepted but incorrect SVE configurations (#176646)

    Source builds that enable SVE now validate the compiler configuration more strictly. If a build previously passed with an incomplete or mismatched SVE setup, it may now fail during CMake configuration instead of later in compilation. Update the compiler/toolchain flags so they accurately describe the target SVE support, or disable SVE for that build.

  • Updated the minimum CUDA version required to build PyTorch from source to CUDA 12.6 (#178925)

    Building PyTorch from source with CUDA versions older than 12.6 is no longer supported. Users building custom binaries should install CUDA 12.6 or newer and make sure CUDA_HOME points to that installation.

    Version 2.11:

    CUDA_HOME=/usr/local/cuda-12.4 python setup.py develop

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 11, 2026
@nuntius-review

Copy link
Copy Markdown
Vesper

Reviewed commits

Commit Summary
459f86e deps(deps): bump the pip group across 1 directory with 2 updates

Here is an analysis of the proposed changes in requirements.txt.

1. Use of a Release Candidate (transformers==5.0.0rc3)

  • Issue: Pinned to a pre-release version (rc3) of a major new version (5.0.0). Release candidates are intended for testing and can contain bugs, undergo rapid changes, or be removed/replaced. Additionally, major version upgrades (v4 to v5) typically introduce breaking API changes that could break your codebase.
  • Recommendation: Use a stable, non-RC version of transformers (such as the latest stable 4.x release) unless you specifically require features from the 5.0.0 pre-release and have thoroughly tested your codebase against it.

2. Invalid PyTorch Version (torch==2.12.0)

  • Issue: torch==2.12.0 is not a valid or existing PyTorch version (as of early 2025, PyTorch is on version 2.6.x). This is highly likely a typo for 2.1.2 or 2.2.0.
  • Recommendation: Correct the version to a valid, existing PyTorch release (e.g., 2.1.2 or 2.5.1 depending on your compatibility requirements).

Suggested Changes

Assuming you want to use stable, valid versions of these libraries:

requirements.txt
@@ -2,4 +2,4 @@
 fastapi==0.128.0
-transformers==5.0.0rc3
+transformers==4.48.0
 uvicorn==0.40.0
-torch==2.12.0
+torch==2.1.2
 datasets==4.4.2

@nuntius-review nuntius-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vesper Analysis for 459f86e

Comment thread requirements.txt Outdated
fastapi==0.128.0
transformers==4.57.3
transformers==5.0.0rc3
uvicorn==0.40.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming you want to use stable, valid versions of these libraries:

Suggested change
uvicorn==0.40.0
transformers==4.48.0

Comment thread requirements.txt Outdated
uvicorn==0.40.0
torch==2.9.1
torch==2.12.0
datasets==4.4.2

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming you want to use stable, valid versions of these libraries:

Suggested change
datasets==4.4.2
torch==2.1.2

Bumps the pip group with 2 updates in the / directory: [transformers](https://github.com/huggingface/transformers) and [torch](https://github.com/pytorch/pytorch).


Updates `transformers` from 4.57.3 to 5.0.0rc3
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.57.3...v5.0.0rc3)

Updates `torch` from 2.9.1 to 2.12.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.9.1...v2.12.1)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.12.0
  dependency-type: direct:production
- dependency-name: transformers
  dependency-version: 5.0.0rc3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-88b18ee65b branch from 459f86e to 26c308d Compare June 26, 2026 20:06
@nuntius-review

Copy link
Copy Markdown

Vesper: Gemini quota exceeded

😅 Vesper hit a Gemini quota/rate limit and will pause auto-analysis for this PR.

Auto-analysis resumes after: 2026-06-26 20:36:30 UTC

You can retry immediately with /analyze.

@bniladridas
bniladridas merged commit 5add71b into main Jun 26, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/pip-88b18ee65b branch June 26, 2026 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant