Bump the uv group across 2 directories with 3 updates by dependabot[bot] · Pull Request #1390 · getzep/graphiti

dependabot · 2026-04-08T22:09:17Z

Bumps the uv group with 2 updates in the / directory: transformers and langchain-core.
Bumps the uv group with 3 updates in the /mcp_server directory: transformers, langchain-core and cryptography.

Updates transformers from 4.57.5 to 5.0.0rc3

Release notes

Sourced from transformers's releases.

Release candidate v5.0.0rc3

New models:

[GLM-4.7] GLM-Lite Supoort by @zRzRzRzRzRzRzR in huggingface/transformers#43031

[GLM-Image] AR Model Support for GLM-Image by @zRzRzRzRzRzRzR in huggingface/transformers#43100

Add LWDetr model by @sbucaille in huggingface/transformers#40991

Add LightOnOCR model implementation by @baptiste-aubertin in huggingface/transformers#41621

What's Changed

We are getting closer and closer to the official release! This RC is focused on removing more of the deprecated stuff, fixing some minors issues, doc updates.

Update Japanese README to match English version by @lilin-1 in huggingface/transformers#43069

[docs] Deploying by @stevhliu in huggingface/transformers#42263

[docs] inference engines by @stevhliu in huggingface/transformers#42932

Fix typos: Remove duplicate duplicate words words by @efeecllk in huggingface/transformers#43040

[style] Rework ruff rules and update all files by @Cyrilvallez in huggingface/transformers#43144

[CB] Minor fix in kwargs by @remi-or in huggingface/transformers#43147

[Bug] qwen2_5_omni: cap generation length to be less than the max_position_embedding in DiT by @sniper35 in huggingface/transformers#43068

Fix some deprecated practices in torch 2.9 by @Cyrilvallez in huggingface/transformers#43167

Fix Fuyu processor width dimension bug in _get_num_multimodal_tokens by @Abhinavexists in huggingface/transformers#43137

Inherit from PreTrainedTokenizerBase by @juliendenize in huggingface/transformers#43143

Generation config boolean defaults by @zucchini-nlp in huggingface/transformers#43000

Fix failing BartModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43160

fix failure of llava/pixtral by @sywangyi in huggingface/transformers#42985

GemmaTokenizer: remove redundant whitespace pre-tokenizer by @vaibhav-research in huggingface/transformers#43106

Support auto_doctring in Processors by @yonigozlan in huggingface/transformers#42101

Fix failing BitModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43164

[Fp8] Fix experts by @vasqu in huggingface/transformers#43154

Docs: improve wording for documentation build instructions by @Sailnagale in huggingface/transformers#43007

[makefile] Cleanup and improve the rules by @Cyrilvallez in huggingface/transformers#43171

Some new models added stuff that was already removed by @Cyrilvallez in huggingface/transformers#43179

Fixes and compilation warning in torchao docs by @merveenoyan in huggingface/transformers#42909

[cache] Remove all deprecated classes by @Cyrilvallez in huggingface/transformers#43168

Bump huggingface_hub minimal version by @Wauplin in huggingface/transformers#43188

Rework check_config_attributes.py by @Cyrilvallez in huggingface/transformers#43191

Fix generation config validation by @zucchini-nlp in huggingface/transformers#43175

[style] Use 'x | y' syntax for processors as well by @Wauplin in huggingface/transformers#43189

Remove deprecated objects by @Cyrilvallez in huggingface/transformers#43170

fix chunked prefill implementation issue-43082 by @marcndo in huggingface/transformers#43132

Reduce add_dates verbosity by @yonigozlan in huggingface/transformers#43184

Add support for MiniMax-M2 by @rogeryoungh in huggingface/transformers#42028

Fix failing salesforce-ctrl, xlm & gpt-neo model generation tests by @Sai-Suraj-27 in huggingface/transformers#43180

Less verbose library helpers by @Cyrilvallez in huggingface/transformers#43197

run all test files on CircleCI by @ydshieh in huggingface/transformers#43146

Clamp temperature to >=1.0 for Dia generation by @Haseebasif7 in huggingface/transformers#43029

Fix spelling typos in comments and code by @raimbekovm in huggingface/transformers#43046

[docs] llama.cpp by @stevhliu in huggingface/transformers#43185

... (truncated)

Commits

cb5079f v5.0.0rc3
d1808f2 [ci] Fixing some failing tests for important models (#43231)
3d27645 Add LightOnOCR model implementation (#41621)
77146cc fix crash in when running FSDP2+TP (#43226)
61317f5 [CB] Ensure parallel decoding test passes using FA (#43277)
1efe1a6 Fix failing PegasusX, Mvp & LED model integration tests (#43245)
e8ae373 [consistency] Ensure models are added to the _toctree.yml (#43264)
c85be98 [docs] tensorrt-llm (#43176)
38022fd [style] Fix init isort and align makefile and CI (#43260)
e977446 Fix failing Hiera, SwiftFormer & LED Model integration tests (#43225)
Additional commits viewable in compare view

Updates langchain-core from 1.2.22 to 1.2.28

Release notes

Sourced from langchain-core's releases.

langchain-core==1.2.28

Changes since langchain-core==1.2.27

release(core): release 1.2.28 (#36614) fix(core): add more sanitization to templates (#36612)

langchain-core==1.2.27

Changes since langchain-core==1.2.26

release(core): 1.2.27 (#36586) fix(core): handle symlinks in deprecated prompt save path (#36585) chore: add comment explaining pygments>=2.20.0 (#36570)

Credit to Jeff Ponte (@JDP-Security) for reporting the symlink resolution issue in #36585.

langchain-core==1.2.26

Changes since langchain-core==1.2.25

release(core): 1.2.26 (#36511) fix(core): add init validator and serialization mappings for Bedrock models (#34510) feat(core): add ChatBaseten to serializable mapping (#36510) chore(core): drop gpt-3.5-turbo from docstrings (#36497) fix(core): correct parameter names in filter_messages docstring example (#36462)

langchain-core==1.2.25

Changes since langchain-core==1.2.24

release(core): 1.2.25 (#36473) fix(core): harden check for txt files in deprecated prompt loading functions (#36471) fix(core): fixed typos in the documentation (#36459)

Credit to Jeff Ponte (@JDP-Security) for reporting the symlink resolution issue resolved in #36471.

langchain-core==1.2.24

Changes since langchain-core==1.2.23

release(core): 1.2.24 (#36434) feat(core): impute placeholder filenames for OpenAI file inputs (#36433) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) fix(core): add "computer" to _WellKnownOpenAITools (#36261)

langchain-core==1.2.23

Changes since langchain-core==1.2.22

release(core): 1.2.23 (#36323) revert: Revert "fix(core): trace invocation params in metadata" (#36322) chore: bump requests from 2.32.5 to 2.33.0 in /libs/core (#36243)

Commits

dd7c3eb release(core): release 1.2.28 (#36614)
af2ed47 fix(core): add more sanitization to templates (#36612)
7e5858d release(standard-tests): 1.1.6 (#36610)
fe99cb2 fix(standard-tests): update standard tests for sandbox backends (#36036)
65bbd47 chore(model-profiles): refresh model profile data (#36596)
6486404 release(core): 1.2.27 (#36586)
7629c74 fix(core): handle symlinks in deprecated prompt save path (#36585)
ce21bf4 ci: convert working-directory to validated dropdown (#36575)
b8698ea release(ollama): 1.1.0 (#36574)
3beba77 feat(ollama): support response_format (#34612)
Additional commits viewable in compare view

Updates transformers from 4.55.4 to 5.0.0rc3

Release notes

Sourced from transformers's releases.

Release candidate v5.0.0rc3

New models:

[GLM-4.7] GLM-Lite Supoort by @zRzRzRzRzRzRzR in huggingface/transformers#43031

[GLM-Image] AR Model Support for GLM-Image by @zRzRzRzRzRzRzR in huggingface/transformers#43100

Add LWDetr model by @sbucaille in huggingface/transformers#40991

Add LightOnOCR model implementation by @baptiste-aubertin in huggingface/transformers#41621

What's Changed

We are getting closer and closer to the official release! This RC is focused on removing more of the deprecated stuff, fixing some minors issues, doc updates.

Update Japanese README to match English version by @lilin-1 in huggingface/transformers#43069

[docs] Deploying by @stevhliu in huggingface/transformers#42263

[docs] inference engines by @stevhliu in huggingface/transformers#42932

Fix typos: Remove duplicate duplicate words words by @efeecllk in huggingface/transformers#43040

[style] Rework ruff rules and update all files by @Cyrilvallez in huggingface/transformers#43144

[CB] Minor fix in kwargs by @remi-or in huggingface/transformers#43147

[Bug] qwen2_5_omni: cap generation length to be less than the max_position_embedding in DiT by @sniper35 in huggingface/transformers#43068

Fix some deprecated practices in torch 2.9 by @Cyrilvallez in huggingface/transformers#43167

Fix Fuyu processor width dimension bug in _get_num_multimodal_tokens by @Abhinavexists in huggingface/transformers#43137

Inherit from PreTrainedTokenizerBase by @juliendenize in huggingface/transformers#43143

Generation config boolean defaults by @zucchini-nlp in huggingface/transformers#43000

Fix failing BartModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43160

fix failure of llava/pixtral by @sywangyi in huggingface/transformers#42985

GemmaTokenizer: remove redundant whitespace pre-tokenizer by @vaibhav-research in huggingface/transformers#43106

Support auto_doctring in Processors by @yonigozlan in huggingface/transformers#42101

Fix failing BitModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43164

[Fp8] Fix experts by @vasqu in huggingface/transformers#43154

Docs: improve wording for documentation build instructions by @Sailnagale in huggingface/transformers#43007

[makefile] Cleanup and improve the rules by @Cyrilvallez in huggingface/transformers#43171

Some new models added stuff that was already removed by @Cyrilvallez in huggingface/transformers#43179

Fixes and compilation warning in torchao docs by @merveenoyan in huggingface/transformers#42909

[cache] Remove all deprecated classes by @Cyrilvallez in huggingface/transformers#43168

Bump huggingface_hub minimal version by @Wauplin in huggingface/transformers#43188

Rework check_config_attributes.py by @Cyrilvallez in huggingface/transformers#43191

Fix generation config validation by @zucchini-nlp in huggingface/transformers#43175

[style] Use 'x | y' syntax for processors as well by @Wauplin in huggingface/transformers#43189

Remove deprecated objects by @Cyrilvallez in huggingface/transformers#43170

fix chunked prefill implementation issue-43082 by @marcndo in huggingface/transformers#43132

Reduce add_dates verbosity by @yonigozlan in huggingface/transformers#43184

Add support for MiniMax-M2 by @rogeryoungh in huggingface/transformers#42028

Fix failing salesforce-ctrl, xlm & gpt-neo model generation tests by @Sai-Suraj-27 in huggingface/transformers#43180

Less verbose library helpers by @Cyrilvallez in huggingface/transformers#43197

run all test files on CircleCI by @ydshieh in huggingface/transformers#43146

Clamp temperature to >=1.0 for Dia generation by @Haseebasif7 in huggingface/transformers#43029

Fix spelling typos in comments and code by @raimbekovm in huggingface/transformers#43046

[docs] llama.cpp by @stevhliu in huggingface/transformers#43185

... (truncated)

Commits

cb5079f v5.0.0rc3
d1808f2 [ci] Fixing some failing tests for important models (#43231)
3d27645 Add LightOnOCR model implementation (#41621)
77146cc fix crash in when running FSDP2+TP (#43226)
61317f5 [CB] Ensure parallel decoding test passes using FA (#43277)
1efe1a6 Fix failing PegasusX, Mvp & LED model integration tests (#43245)
e8ae373 [consistency] Ensure models are added to the _toctree.yml (#43264)
c85be98 [docs] tensorrt-llm (#43176)
38022fd [style] Fix init isort and align makefile and CI (#43260)
e977446 Fix failing Hiera, SwiftFormer & LED Model integration tests (#43225)
Additional commits viewable in compare view

Updates langchain-core from 1.2.22 to 1.2.28

Release notes

Sourced from langchain-core's releases.

langchain-core==1.2.28

Changes since langchain-core==1.2.27

release(core): release 1.2.28 (#36614) fix(core): add more sanitization to templates (#36612)

langchain-core==1.2.27

Changes since langchain-core==1.2.26

release(core): 1.2.27 (#36586) fix(core): handle symlinks in deprecated prompt save path (#36585) chore: add comment explaining pygments>=2.20.0 (#36570)

Credit to Jeff Ponte (@JDP-Security) for reporting the symlink resolution issue in #36585.

langchain-core==1.2.26

Changes since langchain-core==1.2.25

release(core): 1.2.26 (#36511) fix(core): add init validator and serialization mappings for Bedrock models (#34510) feat(core): add ChatBaseten to serializable mapping (#36510) chore(core): drop gpt-3.5-turbo from docstrings (#36497) fix(core): correct parameter names in filter_messages docstring example (#36462)

langchain-core==1.2.25

Changes since langchain-core==1.2.24

release(core): 1.2.25 (#36473) fix(core): harden check for txt files in deprecated prompt loading functions (#36471) fix(core): fixed typos in the documentation (#36459)

Credit to Jeff Ponte (@JDP-Security) for reporting the symlink resolution issue resolved in #36471.

langchain-core==1.2.24

Changes since langchain-core==1.2.23

release(core): 1.2.24 (#36434) feat(core): impute placeholder filenames for OpenAI file inputs (#36433) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) fix(core): add "computer" to _WellKnownOpenAITools (#36261)

langchain-core==1.2.23

Changes since langchain-core==1.2.22

release(core): 1.2.23 (#36323) revert: Revert "fix(core): trace invocation params in metadata" (#36322) chore: bump requests from 2.32.5 to 2.33.0 in /libs/core (#36243)

Commits

dd7c3eb release(core): release 1.2.28 (#36614)
af2ed47 fix(core): add more sanitization to templates (#36612)
7e5858d release(standard-tests): 1.1.6 (#36610)
fe99cb2 fix(standard-tests): update standard tests for sandbox backends (#36036)
65bbd47 chore(model-profiles): refresh model profile data (#36596)
6486404 release(core): 1.2.27 (#36586)
7629c74 fix(core): handle symlinks in deprecated prompt save path (#36585)
ce21bf4 ci: convert working-directory to validated dropdown (#36575)
b8698ea release(ollama): 1.1.0 (#36574)
3beba77 feat(ollama): support response_format (#34612)
Additional commits viewable in compare view

Updates cryptography from 46.0.6 to 46.0.7

Changelog

Sourced from cryptography's changelog.

46.0.7 - 2026-04-07

* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be passed to APIs that accept Python buffers, which could lead to buffer overflow. **CVE-2026-39892** * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.

.. _v46-0-6:

Commits

622d672 46.0.7 release (#14602)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 2 updates in the / directory: [transformers](https://github.com/huggingface/transformers) and [langchain-core](https://github.com/langchain-ai/langchain). Bumps the uv group with 3 updates in the /mcp_server directory: [transformers](https://github.com/huggingface/transformers), [langchain-core](https://github.com/langchain-ai/langchain) and [cryptography](https://github.com/pyca/cryptography). Updates `transformers` from 4.57.5 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.57.5...v5.0.0rc3) Updates `langchain-core` from 1.2.22 to 1.2.28 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.2.28) Updates `transformers` from 4.55.4 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.57.5...v5.0.0rc3) Updates `langchain-core` from 1.2.22 to 1.2.28 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.2.28) Updates `cryptography` from 46.0.6 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.6...46.0.7) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production dependency-group: uv - dependency-name: langchain-core dependency-version: 1.2.28 dependency-type: indirect dependency-group: uv - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: indirect dependency-group: uv - dependency-name: langchain-core dependency-version: 1.2.28 dependency-type: indirect dependency-group: uv - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 8, 2026

dependabot bot mentioned this pull request Apr 8, 2026

Bump the uv group across 2 directories with 1 update #1387

Closed

dependabot bot deployed to development April 8, 2026 22:09 Active

dependabot bot temporarily deployed to development April 8, 2026 22:09 Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the uv group across 2 directories with 3 updates#1390

Bump the uv group across 2 directories with 3 updates#1390
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-aef1c603de

dependabot bot commented on behalf of github Apr 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 8, 2026

Release candidate v5.0.0rc3

New models:

What's Changed

langchain-core==1.2.28

langchain-core==1.2.27

langchain-core==1.2.26

langchain-core==1.2.25

langchain-core==1.2.24

langchain-core==1.2.23

Release candidate v5.0.0rc3

New models:

What's Changed

langchain-core==1.2.28

langchain-core==1.2.27

langchain-core==1.2.26

langchain-core==1.2.25

langchain-core==1.2.24

langchain-core==1.2.23

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants