Skip to content

build(deps): bump the version-all group across 1 directory with 18 updates#519

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/version-all-a13a649015
Open

build(deps): bump the version-all group across 1 directory with 18 updates#519
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/version-all-a13a649015

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the version-all group with 17 updates in the / directory:

Package From To
huggingface-hub 0.34.4 1.7.1
pandas 2.3.2 3.0.1
pillow 11.3.0 12.1.1
tqdm 4.67.1 4.67.3
modal 1.1.4 1.3.5
python-dotenv 1.1.1 1.2.2
gitpython 3.1.45 3.1.46
fastmcp 3.1.0 3.1.1
litellm 1.80.10 1.82.2
tenacity 9.1.2 9.1.4
websockets 15.0.1 16.0
multi-swe-bench 1.1.1 1.1.2
pre-commit 4.3.0 4.5.1
psutil 7.0.0 7.2.2
pyright 1.1.405 1.1.408
ruff 0.13.0 0.15.6
pytest 8.4.2 9.0.2

Updates huggingface-hub from 0.34.4 to 1.7.1

Release notes

Sourced from huggingface-hub's releases.

[v1.7.0] pip-installable CLI extensions and multiple QoL improvements

This release brings major improvements to the hf CLI with extension discoverability, unified list commands, and multiple QoL improvements in the CLI.

🎉 The Homebrew formula of the Hugging Face CLI has been renamed to hf. Existing users just need to run brew update - Homebrew handles the rename automatically. New users can install with brew install hf.

🧩 CLI Extensions: pip-installable packages and discoverability

The hf CLI extensions system gets a major upgrade in this release. Extensions can now be full Python packages (with a pyproject.toml) installed in isolated virtual environments, in addition to the existing shell script approach. This means extension authors can use Python dependencies without conflicting with the user's system. The install command auto-detects whether a GitHub repo is a script or a Python package and handles both transparently.

A new hf extensions search command lets users discover available extensions directly from the terminal by querying GitHub repositories tagged with the hf-extension topic. Results are sorted by stars and show whether each extension is already installed locally. Additionally, a comprehensive guide on how to build, publish, and make extensions discoverable has been added to the documentation.

# Install a Python-based extension
hf extensions install alvarobartt/hf-mem
Discover available extensions
hf extensions search
NAME   REPO                    STARS DESCRIPTION                         INSTALLED

claude hanouticelina/hf-claude     2 Extension for hf CLI to launch... yes
agents hanouticelina/hf-agents       HF extension to run local coding...

📚 Documentation: Create a CLI extension

🔐 hf auth login CLI update

A new --force flag lets you explicitly go through the full login flow again when needed, for example to switch tokens.

# Already logged in — returns immediately
hf auth login
Force re-login to switch tokens
hf auth login --force

📚 Documentation: CLI guide

📦 Xet optimizations and fixes

hf-xet has been bumped to v1.4.2 with some optimizations:

  • Avoid duplicate sha256 computation when uploading to a model/dataset repo
  • Skip sha256 computation when uploading to a bucket

... (truncated)

Commits
  • 9b518ff Release: v1.7.1
  • 4171dde Merge branch 'v1.7-release' of github.com:huggingface/huggingface_hub into v1...
  • f2d9fd3 Merge branch 'main' into v1.7-release
  • 787603e feat: pass skip_sha256=True to hf_xet for bucket uploads (#3900)
  • 72871b9 Prepare for v1.8.0 release (#3927)
  • 3770383 Release: v1.7.0
  • c062fb7 Merge branch 'main' into v1.7-release
  • 141fcfd feat: pass pre-computed SHA-256 to hf_xet upload (#3876)
  • f945c6f Validate release notes have no extra PRs from other releases (#3926)
  • c94df18 Release: v1.7.0.rc1
  • Additional commits viewable in compare view

Updates pandas from 2.3.2 to 3.0.1

Release notes

Sourced from pandas's releases.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

See the announcement blog post and the detailed release notes for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 3.0.0rc2

No release notes provided.

Pandas 3.0.0rc1

... (truncated)

Commits
  • e04b26f RLS: 3.0.1 (#64206)
  • 47909e6 [backport 3.0.x] ENH: Add item() method to ExtensionArray class (#64134) (#64...
  • a061bfd Backport PR #64199 on branch 3.0.x (DOC: cleanup 3.0.1 whatsnew) (#64201)
  • 085a385 [backport 3.0.x] BUG: Fix read_hdf failing on generic datetime64 dtype (#6400...
  • 5f17047 [backport 3.0.x] BUG: use fill_null fallback for bug in pyarrow 21 on Windows...
  • 0d3a8cb Backport PR #64122 on branch 3.0.x (REG: Allow RE2 syntax in str.contains and...
  • 78e1917 Backport PR #64185 on branch 3.0.x (TST: remove fixed xfail for PyArrow 23.0....
  • 75a42ca Backport PR #64168 on branch 3.0.x (TST: add legacy file generation and tests...
  • 46d443f Backport PR #64092 on branch 3.0.x (BUG: DataFrame.loc fills b'' instead of N...
  • 9d67932 Backport PR #64068 on branch 3.0.x (BUG: fixed to_timedelta with list of int ...
  • Additional commits viewable in compare view

Updates pillow from 11.3.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Other changes

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Documentation

Dependencies

Testing

... (truncated)

Commits

Updates tqdm from 4.67.1 to 4.67.3

Release notes

Sourced from tqdm's releases.

tqdm v4.67.3 stable

tqdm v4.67.2 stable

  • support pandas>=3 (#1703 <- #1701, #1650, #1700)
  • fix format_interval for negative numbers (#1703)
  • misc linting
  • framework updates (#1704)
    • bump CI workflow & pre-commit dependencies
    • add pyupgrade
    • add py3.13 support
    • fix py3.7 tests
    • update setuptools-scm usage
    • support auto-dedented docstrings when building docs in py3.13
  • tests: relax flaky benchmarks
Commits

Updates modal from 1.1.4 to 1.3.5

Commits

Updates python-dotenv from 1.1.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

v1.2.1

What's Changed

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits

Updates gitpython from 3.1.45 to 3.1.46

Release notes

Sourced from gitpython's releases.

3.1.46

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.45...3.1.46

Commits
  • 9e24eb6 Prepare next release
  • b8bb60e Merge pull request #2094 from George-Ogden/join-pathlike
  • c8b58c0 Update test/test_tree.py
  • 88e2614 Allow joining path to tree
  • 9fa28ae Add failing tests for joining paths
  • 6d66a02 Merge pull request #2093 from gitpython-developers/dependabot/submodules/git/...
  • f738029 Bump git/ext/gitdb from 65321a2 to 4c63ee6
  • eecc28d Merge pull request #2086 from George-Ogden/true-pathlike
  • 0cb55fb Revert "Add tests with non-ascii characters"
  • 1710626 Add tests with non-ascii characters
  • Additional commits viewable in compare view

Updates fastmcp from 3.1.0 to 3.1.1

Release notes

Sourced from fastmcp's releases.

v3.1.1: 'Tis But a Patch

Pins pydantic-monty<0.0.8 to fix a breaking change in Monty that affects code mode. Monty 0.0.8 removed the external_functions constructor parameter, causing MontySandboxProvider to fail. This patch caps the version so existing installs work correctly.

What's Changed

Fixes 🐞

Full Changelog: PrefectHQ/fastmcp@v3.1.0...v3.1.1

Commits

Updates litellm from 1.80.10 to 1.82.2

Release notes

Sourced from litellm's releases.

litellm-trace-dev-v1.81.16

What's Changed

... (truncated)

Commits

Updates tenacity from 9.1.2 to 9.1.4

Release notes

Sourced from tenacity's releases.

9.1.4

What's Changed

Full Changelog: jd/tenacity@9.1.3...9.1.4

9.1.3

What's Changed

New Contributors

Full Changelog: jd/tenacity@9.1.2...9.1.3

Commits
  • d4e868d Fix retry() annotations with async sleep= function (#555)
  • 24415eb support async sleep for sync fn (#551)
  • 3bf33b4 chore: drop Python 3.9 support (EOL) (#552)
  • 7027da3 chore(deps): bump the github-actions group with 2 updates (#550)
  • 21ae7d0 docs: fix syntax error in wait_chain docstring example (#548)
  • ef12c9e chore(deps): bump actions/checkout in the github-actions group (

@dependabot
build(deps): bump the version-all group across 1 directory with 18 up…
57a0f23 
…dates

Bumps the version-all group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.34.4` | `1.7.1` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.2` | `3.0.1` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.1.1` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.67.1` | `4.67.3` |
| [modal](https://github.com/modal-labs/modal-client) | `1.1.4` | `1.3.5` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.45` | `3.1.46` |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.1.0` | `3.1.1` |
| [litellm](https://github.com/BerriAI/litellm) | `1.80.10` | `1.82.2` |
| [tenacity](https://github.com/jd/tenacity) | `9.1.2` | `9.1.4` |
| [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `16.0` |
| [multi-swe-bench](https://github.com/multi-swe-bench/multi-swe-bench) | `1.1.1` | `1.1.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.1` |
| [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.2.2` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.405` | `1.1.408` |
| [ruff](https://github.com/astral-sh/ruff) | `0.13.0` | `0.15.6` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` |



Updates `huggingface-hub` from 0.34.4 to 1.7.1
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.34.4...v1.7.1)

Updates `pandas` from 2.3.2 to 3.0.1
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.2...v3.0.1)

Updates `pillow` from 11.3.0 to 12.1.1
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.1.1)

Updates `tqdm` from 4.67.1 to 4.67.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.67.1...v4.67.3)

Updates `modal` from 1.1.4 to 1.3.5
- [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_GO_JS.md)
- [Commits](modal-labs/modal-client@v1.1.4...py/v1.3.5)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.2)

Updates `gitpython` from 3.1.45 to 3.1.46
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.45...3.1.46)

Updates `fastmcp` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.1.0...v3.1.1)

Updates `litellm` from 1.80.10 to 1.82.2
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

Updates `tenacity` from 9.1.2 to 9.1.4
- [Release notes](https://github.com/jd/tenacity/releases)
- [Commits](jd/tenacity@9.1.2...9.1.4)

Updates `websockets` from 15.0.1 to 16.0
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@15.0.1...16.0)

Updates `multi-swe-bench` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/multi-swe-bench/multi-swe-bench/releases)
- [Commits](https://github.com/multi-swe-bench/multi-swe-bench/commits)

Updates `hf-xet` from 1.3.1 to 1.4.2
- [Release notes](https://github.com/huggingface/xet-core/releases)
- [Commits](huggingface/xet-core@v1.3.1...v1.4.2)

Updates `pre-commit` from 4.3.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.1)

Updates `psutil` from 7.0.0 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@release-7.0.0...release-7.2.2)

Updates `pyright` from 1.1.405 to 1.1.408
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.405...v1.1.408)

Updates `ruff` from 0.13.0 to 0.15.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.0...0.15.6)

Updates `pytest` from 8.4.2 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.2)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: pandas
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: pillow
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: tqdm
  dependency-version: 4.67.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: modal
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: gitpython
  dependency-version: 3.1.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: fastmcp
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: litellm
  dependency-version: 1.82.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: tenacity
  dependency-version: 9.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: websockets
  dependency-version: '16.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: multi-swe-bench
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: hf-xet
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: pyright
  dependency-version: 1.1.408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: ruff
  dependency-version: 0.15.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: version-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants