@tduncan / Nvidia-Optimization-Stack-VLLM / commits / a4c4bb418e

[Security] Bump remaining Dependabot packages (excl. ignored) (#59315)

Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>

Juan Pérez de Algaba committed Sep 30, 2026 at 14:16 UTC a4c4bb418e051e57b4a87084d757d5710cc66129
19 files changed +372 -137
requirements/build/cpu.txt
+1 -1
@@ -1,7 +1,7 @@
1 cmake>=3.26.1
2 ninja
3 packaging>=24.2
4 -setuptools==77.0.3 # this version can reuse CMake build dir
4 +setuptools==78.1.1 # this version can reuse CMake build dir; >=78.1.1 for GHSA-5rjg-fvgr-3xxf
5 setuptools-scm>=8
6 setuptools-rust>=1.9.0
7 torch==2.13.0+cpu; platform_machine == "x86_64" or platform_machine == "s390x" or platform_machine == "aarch64"
requirements/build/cuda.txt
+1 -1
@@ -2,7 +2,7 @@
2 cmake>=3.26.1
3 ninja
4 packaging>=24.2
5 -setuptools>=77.0.3,<81.0.0
5 +setuptools>=78.1.1,<81.0.0
6 setuptools-scm>=8
7 setuptools-rust>=1.9.0
8 torch==2.13.0
requirements/build/rock.txt
+1 -1
@@ -9,7 +9,7 @@ torchaudio==2.11.0+rocm7.14.0
9 triton==3.7.1+git0263a6a6.rocm7.14.0
10 cmake>=3.26.1,<4
11 packaging>=26.2
12 -setuptools>=77.0.3,<80.0.0
12 +setuptools>=78.1.1,<80.0.0
13 setuptools-scm>=8
14 setuptools-rust>=1.9.0
15 wheel
requirements/build/rocm.txt
+1 -1
@@ -9,7 +9,7 @@ torchaudio==2.11.0+rocm7.14.0
9 triton==3.7.1+git0263a6a6
10 cmake>=3.26.1,<4
11 packaging>=26.2
12 -setuptools>=77.0.3,<80.0.0
12 +setuptools>=78.1.1,<80.0.0
13 setuptools-scm>=8
14 setuptools-rust>=1.9.0
15 wheel
requirements/build/rust.txt
+1 -1
@@ -1,5 +1,5 @@
1 # Dependencies for building Rust artifacts through setuptools-rust.
2 -setuptools>=77.0.3,<81.0.0
2 +setuptools>=78.1.1,<81.0.0
3 setuptools-scm>=9.2.0
4 setuptools-rust>=1.9.0
5 wheel
requirements/build/tpu.txt
+1 -1
@@ -1,7 +1,7 @@
1 --extra-index-url https://download.pytorch.org/whl/cpu
2 cmake>=3.26.1
3 ninja
4 -setuptools>=77.0.3,<81.0.0
4 +setuptools>=78.1.1,<81.0.0
5 setuptools-scm>=8
6 setuptools-rust>=1.9.0
7 torch==2.13.0+cpu
requirements/common.txt
+3 -3
@@ -3,7 +3,7 @@ cachetools
3 psutil
4 sentencepiece # Required for LLaMA tokenizer.
5 numpy
6 -requests >= 2.26.0
6 +requests >= 2.33.0
7 tqdm
8 blake3
9 py-cpuinfo
@@ -28,7 +28,7 @@ outlines_core == 0.2.14
28 lark == 1.2.2
29 xgrammar == 0.2.8; platform_machine == "x86_64" or platform_machine == "aarch64" or platform_machine == "arm64" or platform_machine == "s390x" or platform_machine == "ppc64le"
30 typing_extensions >= 4.10
31 -filelock >= 3.16.1 # need to contain https://github.com/tox-dev/filelock/pull/317
31 +filelock >= 3.20.3 # need to contain https://github.com/tox-dev/filelock/pull/317; GHSA floor
32 partial-json-parser # used for parsing partial JSON outputs
33 jsonschema >= 4.23.0 # required for MiniMax M3 tool schema validation
34 pyzmq >= 25.0.0
@@ -37,7 +37,7 @@ mistral_common[image] >= 1.11.6
37 opencv-python-headless >= 4.13.0 # required for video IO
38 pyyaml
39 six>=1.16.0; python_version > '3.11' # transitive dependency of pandas that needs to be the latest version for python 3.12
40 -setuptools>=77.0.3,<81.0.0; python_version > '3.11' # Setuptools is used by triton, we need to ensure a modern version is installed for 3.12+ so that it does not try to import distutils, which was removed in 3.12
40 +setuptools>=78.1.1,<81.0.0; python_version > '3.11' # used by triton; >=78.1.1 for GHSA-5rjg-fvgr-3xxf (83.x needed for GHSA-h35f-9h28-mq5c deferred)
41 einops # Required for Qwen2-VL.
42 compressed-tensors == 0.17.0 # required for compressed-tensors
43 depyf==0.20.0 # required for profiling and debugging with compilation config
requirements/cpu.txt
+1 -1
@@ -1,7 +1,7 @@
1 # Common dependencies
2 -r common.txt
3
4 -setuptools==77.0.3 # this version can reuse CMake build dir
4 +setuptools==78.1.1 # this version can reuse CMake build dir; >=78.1.1 for GHSA-5rjg-fvgr-3xxf
5
6 numba == 0.65.0 # Required for N-gram speculative decoding
7
requirements/rocm.txt
+1 -1
@@ -13,7 +13,7 @@ peft
13 pytest-asyncio
14 tensorizer==2.10.1
15 packaging>=24.2
16 -setuptools>=77.0.3,<80.0.0
16 +setuptools>=78.1.1,<80.0.0
17 setuptools-scm>=8
18 setuptools-rust>=1.9.0
19 runai-model-streamer[s3,gcs,azure]==0.15.7
requirements/test/cpu.txt
+68 -32
@@ -33,8 +33,9 @@ annotated-types==0.7.0
33 # via pydantic
34 anthropic==0.112.0
35 # via -r requirements/test/../common.txt
36 -anyio==4.14.1
36 +anyio==4.14.2
37 # via
38 + # -r requirements/test/cuda.in
39 # anthropic
40 # httpx
41 # httpx2
@@ -71,8 +72,10 @@ azure-storage-blob==12.28.0
72 # via runai-model-streamer-azure
73 backoff==2.2.1
74 # via -r requirements/test/cuda.in
74 -black==24.10.0
75 - # via datamodel-code-generator
75 +black==26.5.1
76 + # via
77 + # -r requirements/test/cuda.in
78 + # datamodel-code-generator
79 blake3==1.0.9
80 # via -r requirements/test/../common.txt
81 blobfile==3.0.0
@@ -147,8 +150,9 @@ coverage==7.10.6
150 # via pytest-cov
151 cramjam==2.9.0
152 # via fastparquet
150 -cryptography==46.0.5
153 +cryptography==50.0.1
154 # via
155 + # -r requirements/test/cuda.in
156 # azure-identity
157 # azure-storage-blob
158 # msal
@@ -239,17 +243,20 @@ fastrlock==0.8.2
243 # via cupy-cuda12x
244 fastsafetensors==0.3.3
245 # via -r requirements/test/cuda.in
242 -filelock==3.16.1
246 +filelock==4.0.7
247 # via
248 # -r requirements/test/../common.txt
249 # blobfile
250 # datasets
251 # huggingface-hub
252 + # python-discovery
253 # ray
254 # torch
255 # virtualenv
251 -fonttools==4.55.0
252 - # via matplotlib
256 +fonttools==4.66.1
257 + # via
258 + # -r requirements/test/cuda.in
259 + # matplotlib
260 frozendict==2.4.6
261 # via einx
262 frozenlist==1.5.0
@@ -314,16 +321,20 @@ h11==0.16.0
321 # httpcore
322 # httpcore2
323 # uvicorn
317 -h2==4.3.0
318 - # via httpx
324 +h2==4.4.1
325 + # via
326 + # -r requirements/test/cuda.in
327 + # httpx
328 harfile==0.5.0
329 # via schemathesis
330 hf-xet==1.6.0
331 # via huggingface-hub
332 hiredis==3.0.0
333 # via tensorizer
325 -hpack==4.1.0
326 - # via h2
334 +hpack==4.2.0
335 + # via
336 + # -r requirements/test/cuda.in
337 + # h2
338 html2text==2025.4.15
339 # via gpt-oss
340 httpcore==1.0.9
@@ -345,7 +356,9 @@ httpx==0.27.2
356 # perceptron
357 # schemathesis
358 httpx2==2.12.0
348 - # via mcp
359 + # via
360 + # -r requirements/test/cuda.in
361 + # mcp
362 huggingface-hub==1.31.0
363 # via
364 # -r requirements/test/../common.txt
@@ -468,13 +481,16 @@ lm-format-enforcer==0.11.3
481 # via -r requirements/test/../common.txt
482 loguru==0.7.3
483 # via compressed-tensors
471 -lxml==5.3.0
484 +lxml==6.1.3
485 # via
486 + # -r requirements/test/cuda.in
487 # blobfile
488 # gpt-oss
489 # sacrebleu
476 -mako==1.3.10
477 - # via alembic
490 +mako==1.4.3
491 + # via
492 + # -r requirements/test/cuda.in
493 + # alembic
494 markdown-it-py==3.0.0
495 # via rich
496 markupsafe==3.0.1
@@ -505,14 +521,15 @@ more-itertools==10.5.0
521 # via lm-eval
522 mpmath==1.3.0
523 # via sympy
508 -msal==1.34.0
524 +msal==1.39.0
525 # via
526 # azure-identity
527 # msal-extensions
528 msal-extensions==1.3.1
529 # via azure-identity
514 -msgpack==1.1.0
530 +msgpack==1.2.3
531 # via
532 + # -r requirements/test/cuda.in
533 # librosa
534 # ray
535 msgspec==0.21.1
@@ -649,8 +666,10 @@ opentelemetry-semantic-conventions-ai==0.4.13
666 # via -r requirements/test/../common.txt
667 optuna==3.6.1
668 # via genai-perf
652 -orjson==3.11.5
653 - # via genai-perf
669 +orjson==3.12.0
670 + # via
671 + # -r requirements/test/cuda.in
672 + # genai-perf
673 oss-harmony==0.0.11
674 # via -r requirements/test/../common.txt
675 outlines-core==0.2.14
@@ -677,6 +696,7 @@ packaging==24.2
696 # statsmodels
697 # transformers
698 # typepy
699 + # virtualenv
700 pandas==2.2.3
701 # via
702 # datasets
@@ -687,7 +707,7 @@ pandas==2.2.3
707 # statsmodels
708 partial-json-parser==0.2.1.1.post7
709 # via -r requirements/test/../common.txt
690 -pathspec==0.12.1
710 +pathspec==1.1.1
711 # via black
712 pathvalidate==3.2.1
713 # via pytablewriter
@@ -769,12 +789,14 @@ py-cpuinfo==9.0.0
789 # via -r requirements/test/../common.txt
790 py-spy==0.4.0
791 # via ray
772 -pyarrow==23.0.0
792 +pyarrow==25.0.1
793 # via
794 + # -r requirements/test/cuda.in
795 # datasets
796 # genai-perf
776 -pyasn1==0.6.1
797 +pyasn1==0.6.4
798 # via
799 + # -r requirements/test/cuda.in
800 # pyasn1-modules
801 # rsa
802 pyasn1-modules==0.4.2
@@ -821,13 +843,17 @@ pydantic-extra-types==2.10.5
843 # fastapi
844 # mistral-common
845 pydantic-settings==2.14.2
824 - # via fastapi
825 -pygments==2.18.0
846 # via
847 + # -r requirements/test/cuda.in
848 + # fastapi
849 +pygments==2.21.0
850 + # via
851 + # -r requirements/test/cuda.in
852 # pytest
853 # rich
829 -pyjwt==2.11.0
854 +pyjwt==2.15.1
855 # via
856 + # -r requirements/test/cuda.in
857 # mcp
858 # msal
859 pyparsing==3.2.0
@@ -872,6 +898,8 @@ python-dateutil==2.9.0.post0
898 # matplotlib
899 # pandas
900 # typepy
901 +python-discovery==1.6.1
902 + # via virtualenv
903 python-dotenv==1.2.2
904 # via
905 # pydantic-settings
@@ -880,10 +908,13 @@ python-json-logger==4.1.0
908 # via -r requirements/test/../common.txt
909 python-multipart==0.0.32
910 # via
911 + # -r requirements/test/cuda.in
912 # fastapi
913 # mcp
914 python-rapidjson==1.20
915 # via tritonclient
916 +pytokens==0.4.1
917 + # via black
918 pytrec-eval-terrier==0.5.7
919 # via mteb
920 pytz==2024.2
@@ -933,7 +964,7 @@ regex==2026.2.28
964 # sacrebleu
965 # tiktoken
966 # transformers
936 -requests==2.32.3
967 +requests==2.34.2
968 # via
969 # -r requirements/test/../common.txt
970 # azure-core
@@ -1036,7 +1067,7 @@ sentry-sdk==2.63.0
1067 # via fastapi-cloud-cli
1068 setproctitle==1.3.7
1069 # via -r requirements/test/../common.txt
1039 -setuptools==77.0.3
1070 +setuptools==80.10.2
1071 # via
1072 # -r requirements/test/../common.txt
1073 # model-hosting-container-standards
@@ -1284,8 +1315,9 @@ typing-inspection==0.4.2
1315 # pydantic-settings
1316 tzdata==2024.2
1317 # via pandas
1287 -urllib3==2.2.3
1318 +urllib3==2.8.0
1319 # via
1320 + # -r requirements/test/cuda.in
1321 # blobfile
1322 # botocore
1323 # docker
@@ -1305,8 +1337,10 @@ uvloop==0.22.1
1337 # via uvicorn
1338 vector-quantize-pytorch==1.21.2
1339 # via -r requirements/test/cuda.in
1308 -virtualenv==20.31.2
1309 - # via ray
1340 +virtualenv==21.14.0
1341 + # via
1342 + # -r requirements/test/cuda.in
1343 + # ray
1344 vocos==0.1.0
1345 # via -r requirements/test/cuda.in
1346 watchfiles==1.2.0
@@ -1317,8 +1351,10 @@ wcwidth==0.2.13
1351 # via ftfy
1352 websockets==16.0
1353 # via uvicorn
1320 -werkzeug==3.1.3
1321 - # via schemathesis
1354 +werkzeug==3.1.9
1355 + # via
1356 + # -r requirements/test/cuda.in
1357 + # schemathesis
1358 word2number==1.1
1359 # via lm-eval
1360 wrapt==1.17.2
requirements/test/cuda.in
+24
@@ -80,3 +80,27 @@ datasets>=3.3.0,<=3.6.0
80
81 openpyxl # required for perf comparison excel report
82 plotly # required for perf comparison html report
83 +
84 +# Dependabot GHSA floors for transitive test deps (excl. dependabot.yml ignores:
85 +# torch/torchvision/xformers/lm-format-enforcer/compressed-tensors/ray/lm-eval).
86 +# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
87 +urllib3>=2.7.0
88 +cryptography>=50.0.0
89 +pyjwt>=2.13.0
90 +pyasn1>=0.6.4
91 +python-multipart>=0.0.31
92 +anyio>=4.14.2
93 +httpx2>=2.12.0
94 +werkzeug>=3.1.6
95 +mako>=1.3.12
96 +black>=26.3.1
97 +msgpack>=1.2.1
98 +lxml>=6.1.0
99 +pyarrow>=23.0.1
100 +orjson>=3.11.6
101 +hpack>=4.2.0
102 +h2>=4.4.1
103 +pydantic-settings>=2.14.2
104 +virtualenv>=20.36.1
105 +fonttools>=4.60.2
106 +pygments>=2.20.0
requirements/test/cuda.txt
+68 -32
@@ -36,8 +36,9 @@ anthropic==0.112.0
36 # via
37 # -c requirements/common.txt
38 # -r requirements/test/../common.txt
39 -anyio==4.14.1
39 +anyio==4.14.2
40 # via
41 + # -r requirements/test/cuda.in
42 # anthropic
43 # httpx
44 # httpx2
@@ -76,8 +77,10 @@ azure-storage-blob==12.28.0
77 # via runai-model-streamer-azure
78 backoff==2.2.1
79 # via -r requirements/test/cuda.in
79 -black==24.10.0
80 - # via datamodel-code-generator
80 +black==26.5.1
81 + # via
82 + # -r requirements/test/cuda.in
83 + # datamodel-code-generator
84 blake3==1.0.9
85 # via -r requirements/test/../common.txt
86 blobfile==3.0.0
@@ -154,8 +157,9 @@ coverage==7.10.6
157 # via pytest-cov
158 cramjam==2.9.0
159 # via fastparquet
157 -cryptography==46.0.5
160 +cryptography==50.0.1
161 # via
162 + # -r requirements/test/cuda.in
163 # azure-identity
164 # azure-storage-blob
165 # msal
@@ -257,18 +261,21 @@ fastsafetensors==0.3.3
261 # via
262 # -c requirements/cuda.txt
263 # -r requirements/test/cuda.in
260 -filelock==3.16.1
264 +filelock==4.0.7
265 # via
266 # -c requirements/common.txt
267 # -r requirements/test/../common.txt
268 # blobfile
269 # datasets
270 # huggingface-hub
271 + # python-discovery
272 # ray
273 # torch
274 # virtualenv
270 -fonttools==4.55.0
271 - # via matplotlib
275 +fonttools==4.66.1
276 + # via
277 + # -r requirements/test/cuda.in
278 + # matplotlib
279 frozendict==2.4.6
280 # via einx
281 frozenlist==1.5.0
@@ -333,16 +340,20 @@ h11==0.16.0
340 # httpcore
341 # httpcore2
342 # uvicorn
336 -h2==4.3.0
337 - # via httpx
343 +h2==4.4.1
344 + # via
345 + # -r requirements/test/cuda.in
346 + # httpx
347 harfile==0.5.0
348 # via schemathesis
349 hf-xet==1.6.0
350 # via huggingface-hub
351 hiredis==3.0.0
352 # via tensorizer
344 -hpack==4.1.0
345 - # via h2
353 +hpack==4.2.0
354 + # via
355 + # -r requirements/test/cuda.in
356 + # h2
357 html2text==2025.4.15
358 # via gpt-oss
359 httpcore==1.0.9
@@ -364,7 +375,9 @@ httpx==0.27.2
375 # perceptron
376 # schemathesis
377 httpx2==2.12.0
367 - # via mcp
378 + # via
379 + # -r requirements/test/cuda.in
380 + # mcp
381 huggingface-hub==1.31.0
382 # via
383 # -c requirements/common.txt
@@ -497,13 +510,16 @@ lm-format-enforcer==0.11.3
510 # -r requirements/test/../common.txt
511 loguru==0.7.3
512 # via compressed-tensors
500 -lxml==5.3.0
513 +lxml==6.1.3
514 # via
515 + # -r requirements/test/cuda.in
516 # blobfile
517 # gpt-oss
518 # sacrebleu
505 -mako==1.3.10
506 - # via alembic
519 +mako==1.4.3
520 + # via
521 + # -r requirements/test/cuda.in
522 + # alembic
523 markdown-it-py==3.0.0
524 # via rich
525 markupsafe==3.0.1
@@ -539,14 +555,15 @@ more-itertools==10.5.0
555 # via lm-eval
556 mpmath==1.3.0
557 # via sympy
542 -msal==1.34.0
558 +msal==1.39.0
559 # via
560 # azure-identity
561 # msal-extensions
562 msal-extensions==1.3.1
563 # via azure-identity
548 -msgpack==1.1.0
564 +msgpack==1.2.3
565 # via
566 + # -r requirements/test/cuda.in
567 # librosa
568 # ray
569 msgspec==0.21.1
@@ -733,8 +750,10 @@ opentelemetry-semantic-conventions-ai==0.4.13
750 # -r requirements/test/../common.txt
751 optuna==3.6.1
752 # via genai-perf
736 -orjson==3.11.5
737 - # via genai-perf
753 +orjson==3.12.0
754 + # via
755 + # -r requirements/test/cuda.in
756 + # genai-perf
757 oss-harmony==0.0.11
758 # via
759 # -c requirements/common.txt
@@ -765,6 +784,7 @@ packaging==24.2
784 # statsmodels
785 # transformers
786 # typepy
787 + # virtualenv
788 pandas==2.2.3
789 # via
790 # datasets
@@ -775,7 +795,7 @@ pandas==2.2.3
795 # statsmodels
796 partial-json-parser==0.2.1.1.post7
797 # via -r requirements/test/../common.txt
778 -pathspec==0.12.1
798 +pathspec==1.1.1
799 # via black
800 pathvalidate==3.2.1
801 # via pytablewriter
@@ -862,12 +882,14 @@ py-cpuinfo==9.0.0
882 # via -r requirements/test/../common.txt
883 py-spy==0.4.0
884 # via ray
865 -pyarrow==23.0.0
885 +pyarrow==25.0.1
886 # via
887 + # -r requirements/test/cuda.in
888 # datasets
889 # genai-perf
869 -pyasn1==0.6.1
890 +pyasn1==0.6.4
891 # via
892 + # -r requirements/test/cuda.in
893 # pyasn1-modules
894 # rsa
895 pyasn1-modules==0.4.2
@@ -915,13 +937,17 @@ pydantic-extra-types==2.10.5
937 # fastapi
938 # mistral-common
939 pydantic-settings==2.14.2
918 - # via fastapi
919 -pygments==2.18.0
940 # via
941 + # -r requirements/test/cuda.in
942 + # fastapi
943 +pygments==2.21.0
944 + # via
945 + # -r requirements/test/cuda.in
946 # pytest
947 # rich
923 -pyjwt==2.11.0
948 +pyjwt==2.15.1
949 # via
950 + # -r requirements/test/cuda.in
951 # mcp
952 # msal
953 pyparsing==3.2.0
@@ -966,6 +992,8 @@ python-dateutil==2.9.0.post0
992 # matplotlib
993 # pandas
994 # typepy
995 +python-discovery==1.6.1
996 + # via virtualenv
997 python-dotenv==1.2.2
998 # via
999 # pydantic-settings
@@ -974,10 +1002,13 @@ python-json-logger==4.1.0
1002 # via -r requirements/test/../common.txt
1003 python-multipart==0.0.32
1004 # via
1005 + # -r requirements/test/cuda.in
1006 # fastapi
1007 # mcp
1008 python-rapidjson==1.20
1009 # via tritonclient
1010 +pytokens==0.4.1
1011 + # via black
1012 pytrec-eval-terrier==0.5.7
1013 # via mteb
1014 pytz==2024.2
@@ -1028,7 +1059,7 @@ regex==2026.2.28
1059 # sacrebleu
1060 # tiktoken
1061 # transformers
1031 -requests==2.32.3
1062 +requests==2.34.2
1063 # via
1064 # -c requirements/common.txt
1065 # -r requirements/test/../common.txt
@@ -1133,7 +1164,7 @@ sentry-sdk==2.63.0
1164 # via fastapi-cloud-cli
1165 setproctitle==1.3.7
1166 # via -r requirements/test/../common.txt
1136 -setuptools==77.0.3
1167 +setuptools==80.10.2
1168 # via
1169 # -c requirements/common.txt
1170 # -r requirements/test/../common.txt
@@ -1395,8 +1426,9 @@ typing-inspection==0.4.2
1426 # pydantic-settings
1427 tzdata==2024.2
1428 # via pandas
1398 -urllib3==2.2.3
1429 +urllib3==2.8.0
1430 # via
1431 + # -r requirements/test/cuda.in
1432 # blobfile
1433 # botocore
1434 # docker
@@ -1416,8 +1448,10 @@ uvloop==0.22.1
1448 # via uvicorn
1449 vector-quantize-pytorch==1.21.2
1450 # via -r requirements/test/cuda.in
1419 -virtualenv==20.31.2
1420 - # via ray
1451 +virtualenv==21.14.0
1452 + # via
1453 + # -r requirements/test/cuda.in
1454 + # ray
1455 vocos==0.1.0
1456 # via -r requirements/test/cuda.in
1457 watchfiles==1.2.0
@@ -1428,8 +1462,10 @@ wcwidth==0.2.13
1462 # via ftfy
1463 websockets==16.0
1464 # via uvicorn
1431 -werkzeug==3.1.3
1432 - # via schemathesis
1465 +werkzeug==3.1.9
1466 + # via
1467 + # -r requirements/test/cuda.in
1468 + # schemathesis
1469 word2number==1.1
1470 # via lm-eval
1471 wrapt==1.17.2
requirements/test/rocm.in
+23
@@ -80,6 +80,29 @@ datasets>=3.3.0,<=3.6.0
80 openpyxl # required for perf comparison excel report
81 plotly # required for perf comparison html report
82
83 +# Dependabot GHSA floors for transitive test deps (excl. dependabot.yml ignores).
84 +# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
85 +urllib3>=2.7.0
86 +cryptography>=50.0.0
87 +pyjwt>=2.13.0
88 +pyasn1>=0.6.4
89 +python-multipart>=0.0.31
90 +anyio>=4.14.2
91 +httpx2>=2.12.0
92 +werkzeug>=3.1.6
93 +mako>=1.3.12
94 +black>=26.3.1
95 +msgpack>=1.2.1
96 +lxml>=6.1.0
97 +pyarrow>=23.0.1
98 +orjson>=3.11.6
99 +hpack>=4.2.0
100 +h2>=4.4.1
101 +pydantic-settings>=2.14.2
102 +virtualenv>=20.36.1
103 +fonttools>=4.60.2
104 +pygments>=2.20.0
105 +
106 # ROCm-specific extras (not in CUDA cuda.in)
107 rapidfuzz
108 # torchgeo also pulled in `lightning` transitively; disabled for the same
requirements/test/rocm.txt
+56 -26
@@ -33,8 +33,9 @@ anthropic==0.93.0
33 # via
34 # -c requirements/common.txt
35 # -r requirements/test/../common.txt
36 -anyio==4.13.0
36 +anyio==4.14.2
37 # via
38 + # -r requirements/test/rocm.in
39 # anthropic
40 # httpx
41 # httpx2
@@ -76,7 +77,9 @@ backoff==2.2.1
77 bitsandbytes==0.50.0
78 # via -r requirements/test/rocm.in
79 black==26.3.1
79 - # via datamodel-code-generator
80 + # via
81 + # -r requirements/test/rocm.in
82 + # datamodel-code-generator
83 blake3==1.0.8
84 # via -r requirements/test/../common.txt
85 blobfile==3.0.0
@@ -107,7 +110,7 @@ certifi==2026.2.25
110 # httpx
111 # requests
112 # sentry-sdk
110 -cffi==1.17.1
113 +cffi==2.1.1
114 # via
115 # cryptography
116 # soundfile
@@ -156,8 +159,9 @@ coverage==7.13.5
159 # via pytest-cov
160 cramjam==2.11.0
161 # via fastparquet
159 -cryptography==46.0.0
162 +cryptography==50.0.1
163 # via
164 + # -r requirements/test/rocm.in
165 # azure-identity
166 # azure-storage-blob
167 # google-auth
@@ -258,7 +262,9 @@ filelock==3.25.2
262 # torch
263 # virtualenv
264 fonttools==4.62.1
261 - # via matplotlib
265 + # via
266 + # -r requirements/test/rocm.in
267 + # matplotlib
268 frozendict==2.4.7
269 # via einx
270 frozenlist==1.8.0
@@ -326,16 +332,20 @@ h11==0.16.0
332 # httpcore
333 # httpcore2
334 # uvicorn
329 -h2==4.3.0
330 - # via httpx
335 +h2==4.4.1
336 + # via
337 + # -r requirements/test/rocm.in
338 + # httpx
339 harfile==0.5.0
340 # via schemathesis
341 hf-xet==1.6.0
342 # via huggingface-hub
343 hiredis==3.3.1
344 # via tensorizer
337 -hpack==4.1.0
338 - # via h2
345 +hpack==4.2.0
346 + # via
347 + # -r requirements/test/rocm.in
348 + # h2
349 html2text==2025.4.15
350 # via gpt-oss
351 httpcore==1.0.9
@@ -357,7 +367,9 @@ httpx==0.27.2
367 # perceptron
368 # schemathesis
369 httpx2==2.12.0
360 - # via mcp
370 + # via
371 + # -r requirements/test/rocm.in
372 + # mcp
373 huggingface-hub==1.31.0
374 # via
375 # -c requirements/common.txt
@@ -492,13 +504,16 @@ logistro==2.0.1
504 # kaleido
505 loguru==0.7.3
506 # via compressed-tensors
495 -lxml==6.0.2
507 +lxml==6.1.3
508 # via
509 + # -r requirements/test/rocm.in
510 # blobfile
511 # gpt-oss
512 # sacrebleu
500 -mako==1.3.10
501 - # via alembic
513 +mako==1.4.3
514 + # via
515 + # -r requirements/test/rocm.in
516 + # alembic
517 markdown-it-py==4.0.0
518 # via rich
519 markupsafe==3.0.3
@@ -538,14 +553,15 @@ more-itertools==10.8.0
553 # lm-eval
554 mpmath==1.3.0
555 # via sympy
541 -msal==1.35.1
556 +msal==1.39.0
557 # via
558 # azure-identity
559 # msal-extensions
560 msal-extensions==1.3.1
561 # via azure-identity
547 -msgpack==1.1.2
562 +msgpack==1.2.3
563 # via
564 + # -r requirements/test/rocm.in
565 # librosa
566 # ray
567 msgspec==0.21.0
@@ -705,6 +721,7 @@ optuna==3.6.1
721 # via genai-perf
722 orjson==3.11.7
723 # via
724 + # -r requirements/test/rocm.in
725 # genai-perf
726 # kaleido
727 oss-harmony==0.0.11
@@ -843,10 +860,13 @@ py-spy==0.4.1
860 # via ray
861 pyarrow==23.0.1
862 # via
863 + # -r requirements/test/rocm.in
864 # datasets
865 # genai-perf
848 -pyasn1==0.6.3
849 - # via pyasn1-modules
866 +pyasn1==0.6.4
867 + # via
868 + # -r requirements/test/rocm.in
869 + # pyasn1-modules
870 pyasn1-modules==0.4.2
871 # via google-auth
872 pybase64==1.4.3
@@ -889,14 +909,18 @@ pydantic-extra-types==2.11.1
909 # via
910 # fastapi
911 # mistral-common
892 -pydantic-settings==2.13.1
893 - # via fastapi
894 -pygments==2.19.2
912 +pydantic-settings==2.15.0
913 + # via
914 + # -r requirements/test/rocm.in
915 + # fastapi
916 +pygments==2.21.0
917 # via
918 + # -r requirements/test/rocm.in
919 # pytest
920 # rich
898 -pyjwt==2.12.1
921 +pyjwt==2.15.1
922 # via
923 + # -r requirements/test/rocm.in
924 # mcp
925 # msal
926 pyparsing==3.3.2
@@ -949,8 +973,9 @@ python-dotenv==1.2.2
973 # uvicorn
974 python-json-logger==4.1.0
975 # via -r requirements/test/../common.txt
952 -python-multipart==0.0.26
976 +python-multipart==0.0.32
977 # via
978 + # -r requirements/test/rocm.in
979 # fastapi
980 # mcp
981 python-rapidjson==1.23
@@ -1007,7 +1032,7 @@ regex==2026.2.28
1032 # sacrebleu
1033 # tiktoken
1034 # transformers
1010 -requests==2.32.5
1035 +requests==2.34.2
1036 # via
1037 # -c requirements/common.txt
1038 # -r requirements/test/../common.txt
@@ -1347,8 +1372,9 @@ typing-inspection==0.4.2
1372 # mcp
1373 # pydantic
1374 # pydantic-settings
1350 -urllib3==2.6.3
1375 +urllib3==2.8.0
1376 # via
1377 + # -r requirements/test/rocm.in
1378 # blobfile
1379 # botocore
1380 # docker
@@ -1369,7 +1395,9 @@ uvloop==0.22.1
1395 vector-quantize-pytorch==1.28.0
1396 # via -r requirements/test/rocm.in
1397 virtualenv==21.2.0
1372 - # via ray
1398 + # via
1399 + # -r requirements/test/rocm.in
1400 + # ray
1401 vocos==0.1.0
1402 # via -r requirements/test/rocm.in
1403 watchfiles==1.1.1
@@ -1381,7 +1409,9 @@ wcwidth==0.6.0
1409 websockets==16.0
1410 # via uvicorn
1411 werkzeug==3.1.6
1384 - # via schemathesis
1412 + # via
1413 + # -r requirements/test/rocm.in
1414 + # schemathesis
1415 word2number==1.1
1416 # via lm-eval
1417 wrapt==2.1.2
requirements/test/xpu.in
+20
@@ -61,3 +61,23 @@ opentelemetry-semantic-conventions-ai>=0.4.1
61
62 cohere_melody>=0.11.1 # required for cohere command reasoning/tool parser tests
63 cohere>=7.0.0 # required for cohere chat v2 api tests (protocol/serving import cohere.types)
64 +
65 +# Dependabot GHSA floors for transitive test deps (excl. dependabot.yml ignores).
66 +urllib3>=2.7.0
67 +cryptography>=50.0.0
68 +pyjwt>=2.13.0
69 +pyasn1>=0.6.4
70 +python-multipart>=0.0.31
71 +anyio>=4.14.2
72 +httpx2>=2.12.0
73 +werkzeug>=3.1.6
74 +mako>=1.3.12
75 +msgpack>=1.2.1
76 +lxml>=6.1.0
77 +pyarrow>=23.0.1
78 +orjson>=3.11.6
79 +hpack>=4.2.0
80 +h2>=4.4.1
81 +pydantic-settings>=2.14.2
82 +fonttools>=4.60.2
83 +pygments>=2.20.0
requirements/test/xpu.txt
+41 -8
@@ -33,6 +33,7 @@ anthropic==0.122.0
33 # -r requirements/test/../common.txt
34 anyio==4.14.2
35 # via
36 + # -r requirements/test/xpu.in
37 # anthropic
38 # httpx
39 # httpx2
@@ -130,6 +131,7 @@ coverage==7.15.4
131 # via pytest-cov
132 cryptography==50.0.0
133 # via
134 + # -r requirements/test/xpu.in
135 # azure-identity
136 # azure-storage-blob
137 # google-auth
@@ -219,7 +221,9 @@ filelock==3.32.3
221 # modelscope
222 # torch
223 fonttools==4.64.0
222 - # via matplotlib
224 + # via
225 + # -r requirements/test/xpu.in
226 + # matplotlib
227 frozenlist==1.8.0
228 # via
229 # aiohttp
@@ -270,17 +274,23 @@ h11==0.16.0
274 # httpcore
275 # httpcore2
276 # uvicorn
277 +h2==4.4.1
278 + # via -r requirements/test/xpu.in
279 harfile==0.5.0
280 # via schemathesis
281 hf-xet==1.6.0
282 # via huggingface-hub
283 hiredis==3.4.1
284 # via tensorizer
285 +hpack==4.2.0
286 + # via
287 + # -r requirements/test/xpu.in
288 + # h2
289 html2text==2025.4.15
290 # via gpt-oss
291 httpcore==1.0.9
292 # via httpx
283 -httpcore2==2.10.0
293 +httpcore2==2.13.1
294 # via httpx2
295 httptools==0.8.0
296 # via uvicorn
@@ -293,8 +303,9 @@ httpx==0.28.1
303 # fastapi-cloud-cli
304 # huggingface-hub
305 # model-hosting-container-standards
296 -httpx2==2.10.0
306 +httpx2==2.13.1
307 # via
308 + # -r requirements/test/xpu.in
309 # mcp
310 # openai
311 huggingface-hub==1.31.0
@@ -311,6 +322,8 @@ huggingface-hub==1.31.0
322 # transformers
323 humanize==4.16.0
324 # via runai-model-streamer
325 +hyperframe==6.1.0
326 + # via h2
327 hypothesis==6.165.10
328 # via
329 # hypothesis-graphql
@@ -441,14 +454,18 @@ loguru==0.7.3
454 # via compressed-tensors
455 lxml==6.1.1
456 # via
457 + # -r requirements/test/xpu.in
458 # blobfile
459 # gpt-oss
460 # sacrebleu
461 +mako==1.4.3
462 + # via -r requirements/test/xpu.in
463 markdown-it-py==4.2.0
464 # via rich
465 markupsafe==3.0.3
466 # via
467 # jinja2
468 + # mako
469 # werkzeug
470 matplotlib==3.11.1
471 # via -r requirements/test/xpu.in
@@ -495,7 +512,9 @@ msal==1.38.0
512 msal-extensions==1.3.1
513 # via azure-identity
514 msgpack==1.2.1
498 - # via librosa
515 + # via
516 + # -r requirements/test/xpu.in
517 + # librosa
518 msgspec==0.21.1
519 # via -r requirements/test/../common.txt
520 mteb==2.19.4
@@ -638,6 +657,8 @@ opentelemetry-semantic-conventions-ai==0.5.1
657 # -c requirements/common.txt
658 # -r requirements/test/../common.txt
659 # -r requirements/test/xpu.in
660 +orjson==3.12.0
661 + # via -r requirements/test/xpu.in
662 oss-harmony==0.0.11
663 # via
664 # -c requirements/common.txt
@@ -730,9 +751,13 @@ psutil==7.2.2
751 py-cpuinfo==9.0.0
752 # via -r requirements/test/../common.txt
753 pyarrow==25.0.1
733 - # via datasets
754 + # via
755 + # -r requirements/test/xpu.in
756 + # datasets
757 pyasn1==0.6.4
735 - # via pyasn1-modules
758 + # via
759 + # -r requirements/test/xpu.in
760 + # pyasn1-modules
761 pyasn1-modules==0.4.2
762 # via google-auth
763 pybase64==1.5.0
@@ -774,15 +799,19 @@ pydantic-extra-types==2.11.1
799 # fastapi
800 # mistral-common
801 pydantic-settings==2.15.0
777 - # via fastapi
802 + # via
803 + # -r requirements/test/xpu.in
804 + # fastapi
805 pyelftools==0.33
806 # via triton-xpu
807 pygments==2.21.0
808 # via
809 + # -r requirements/test/xpu.in
810 # pytest
811 # rich
812 pyjwt==2.13.0
813 # via
814 + # -r requirements/test/xpu.in
815 # mcp
816 # msal
817 pyparsing==3.3.2
@@ -832,6 +861,7 @@ python-json-logger==4.2.0
861 # via -r requirements/test/../common.txt
862 python-multipart==0.0.32
863 # via
864 + # -r requirements/test/xpu.in
865 # fastapi
866 # mcp
867 pytrec-eval-terrier==0.5.10
@@ -1193,6 +1223,7 @@ umf==1.1.0
1223 # torch
1224 urllib3==2.7.0
1225 # via
1226 + # -r requirements/test/xpu.in
1227 # blobfile
1228 # botocore
1229 # docker
@@ -1218,7 +1249,9 @@ wcwidth==0.8.3
1249 websockets==17.0.1
1250 # via uvicorn
1251 werkzeug==3.1.8
1221 - # via schemathesis
1252 + # via
1253 + # -r requirements/test/xpu.in
1254 + # schemathesis
1255 word2number==1.1
1256 # via lm-eval
1257 xgrammar==0.2.8
requirements/xpu.txt
+1 -1
@@ -8,7 +8,7 @@ cmake>=3.26.1
8 packaging>=24.2
9 setuptools-scm>=8
10 setuptools-rust>=1.9.0
11 -setuptools>=77.0.3,<81.0.0
11 +setuptools>=78.1.1,<81.0.0
12 wheel
13 jinja2>=3.1.6
14 datasets # for benchmark scripts
rust/Cargo.lock
+57 -24
@@ -379,7 +379,7 @@ dependencies = [
379 "getrandom 0.2.17",
380 "instant",
381 "pin-project-lite",
382 - "rand 0.8.5",
382 + "rand 0.8.6",
383 "tokio",
384 ]
385
@@ -493,6 +493,15 @@ dependencies = [
493 "alloc-stdlib",
494 ]
495
496 +[[package]]
497 +name = "bs58"
498 +version = "0.5.1"
499 +source = "registry+https://github.com/rust-lang/crates.io-index"
500 +checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
501 +dependencies = [
502 + "tinyvec",
503 +]
504 +
505 [[package]]
506 name = "bstr"
507 version = "1.12.1"
@@ -2174,10 +2183,12 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
2183 checksum = "1a3546dc96b6d42c5f24902af9e2538e82e39ad350b0c766eb3fbf2d8f3d8359"
2184 dependencies = [
2185 "jiff-static",
2186 + "jiff-tzdb-platform",
2187 "log",
2188 "portable-atomic",
2189 "portable-atomic-util",
2190 "serde_core",
2191 + "windows-sys 0.61.2",
2192 ]
2193
2194 [[package]]
@@ -2191,6 +2202,21 @@ dependencies = [
2202 "syn 2.0.117",
2203 ]
2204
2205 +[[package]]
2206 +name = "jiff-tzdb"
2207 +version = "0.1.8"
2208 +source = "registry+https://github.com/rust-lang/crates.io-index"
2209 +checksum = "142bd39932ad231f10513df9ab62661fead8719872150b7ad02a2df79f4e141e"
2210 +
2211 +[[package]]
2212 +name = "jiff-tzdb-platform"
2213 +version = "0.1.3"
2214 +source = "registry+https://github.com/rust-lang/crates.io-index"
2215 +checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
2216 +dependencies = [
2217 + "jiff-tzdb",
2218 +]
2219 +
2220 [[package]]
2221 name = "jobserver"
2222 version = "0.1.34"
@@ -3039,7 +3065,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
3065 checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
3066 dependencies = [
3067 "phf_shared",
3042 - "rand 0.8.5",
3068 + "rand 0.8.6",
3069 ]
3070
3071 [[package]]
@@ -3379,9 +3405,9 @@ checksum = "e0c5ccf5294c6ccd63a74f1565028353830a9c2f5eb0c682c355c471726a6e3f"
3405
3406 [[package]]
3407 name = "pyo3"
3382 -version = "0.28.3"
3408 +version = "0.29.2"
3409 source = "registry+https://github.com/rust-lang/crates.io-index"
3384 -checksum = "91fd8e38a3b50ed1167fb981cd6fd60147e091784c427b8f7183a7ee32c31c12"
3410 +checksum = "4688ddedf473e32662b9b067670129a8afb8c18e351482c70d62ba4a88171e8b"
3411 dependencies = [
3412 "libc",
3413 "once_cell",
@@ -3393,18 +3419,18 @@ dependencies = [
3419
3420 [[package]]
3421 name = "pyo3-build-config"
3396 -version = "0.28.3"
3422 +version = "0.29.2"
3423 source = "registry+https://github.com/rust-lang/crates.io-index"
3398 -checksum = "e368e7ddfdeb98c9bca7f8383be1648fd84ab466bf2bc015e94008db6d35611e"
3424 +checksum = "f41027e41b4bd03f6e60f9f417fe24a6341a6bb744edd62b6f709f2a52ea30e9"
3425 dependencies = [
3426 "target-lexicon",
3427 ]
3428
3429 [[package]]
3430 name = "pyo3-ffi"
3405 -version = "0.28.3"
3431 +version = "0.29.2"
3432 source = "registry+https://github.com/rust-lang/crates.io-index"
3407 -checksum = "7f29e10af80b1f7ccaf7f69eace800a03ecd13e883acfacc1e5d0988605f651e"
3433 +checksum = "e591a95526fead067432c3b3a33fc74770b87b1e04e73671090d9c2055a2b327"
3434 dependencies = [
3435 "libc",
3436 "pyo3-build-config",
@@ -3412,9 +3438,9 @@ dependencies = [
3438
3439 [[package]]
3440 name = "pyo3-macros"
3415 -version = "0.28.3"
3441 +version = "0.29.2"
3442 source = "registry+https://github.com/rust-lang/crates.io-index"
3417 -checksum = "df6e520eff47c45997d2fc7dd8214b25dd1310918bbb2642156ef66a67f29813"
3443 +checksum = "73225868fc1cd84eef2c3c230ddb91273bf1de46aeb8a4248da76d32a0924a1c"
3444 dependencies = [
3445 "proc-macro2",
3446 "pyo3-macros-backend",
@@ -3424,22 +3450,21 @@ dependencies = [
3450
3451 [[package]]
3452 name = "pyo3-macros-backend"
3427 -version = "0.28.3"
3453 +version = "0.29.2"
3454 source = "registry+https://github.com/rust-lang/crates.io-index"
3429 -checksum = "c4cdc218d835738f81c2338f822078af45b4afdf8b2e33cbb5916f108b813acb"
3455 +checksum = "571575aa3749fa6216757dd47d2a3e7ef360f329a40f0666a9fbd14889024952"
3456 dependencies = [
3457 "heck",
3458 "proc-macro2",
3433 - "pyo3-build-config",
3459 "quote",
3460 "syn 2.0.117",
3461 ]
3462
3463 [[package]]
3464 name = "pythonize"
3440 -version = "0.28.0"
3465 +version = "0.29.0"
3466 source = "registry+https://github.com/rust-lang/crates.io-index"
3442 -checksum = "0b79f670c9626c8b651c0581011b57b6ba6970bb69faf01a7c4c0cfc81c43f95"
3467 +checksum = "6ec376e1216e0c929a74964ce2020012a1a39f32d80e78aa688721219ea7fb89"
3468 dependencies = [
3469 "pyo3",
3470 "serde",
@@ -3475,9 +3500,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
3500
3501 [[package]]
3502 name = "rand"
3478 -version = "0.8.5"
3503 +version = "0.8.6"
3504 source = "registry+https://github.com/rust-lang/crates.io-index"
3480 -checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
3505 +checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
3506 dependencies = [
3507 "libc",
3508 "rand_chacha 0.3.1",
@@ -3899,9 +3924,9 @@ dependencies = [
3924
3925 [[package]]
3926 name = "rustls-webpki"
3902 -version = "0.103.9"
3927 +version = "0.103.15"
3928 source = "registry+https://github.com/rust-lang/crates.io-index"
3904 -checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
3929 +checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
3930 dependencies = [
3931 "ring",
3932 "rustls-pki-types",
@@ -4276,15 +4301,17 @@ dependencies = [
4301
4302 [[package]]
4303 name = "serde_with"
4279 -version = "3.18.0"
4304 +version = "3.22.0"
4305 source = "registry+https://github.com/rust-lang/crates.io-index"
4281 -checksum = "dd5414fad8e6907dbdd5bc441a50ae8d6e26151a03b1de04d89a5576de61d01f"
4306 +checksum = "ee78f1fbe43ac4a0e47aadb3dbd357b69eb0d3793e948624cd03dd2750ab1c0a"
4307 dependencies = [
4308 "base64 0.22.1",
4309 + "bs58",
4310 "chrono",
4311 "hex",
4312 "indexmap 1.9.3",
4313 "indexmap 2.13.0",
4314 + "jiff",
4315 "schemars 0.9.0",
4316 "schemars 1.2.1",
4317 "serde_core",
@@ -4295,9 +4322,9 @@ dependencies = [
4322
4323 [[package]]
4324 name = "serde_with_macros"
4298 -version = "3.18.0"
4325 +version = "3.22.0"
4326 source = "registry+https://github.com/rust-lang/crates.io-index"
4300 -checksum = "d3db8978e608f1fe7357e211969fd9abdcae80bac1ba7a3369bb7eb6b404eb65"
4327 +checksum = "8705578779c2b6bd90d84d66eb2e206b708b1a4d7b9f17641b293545bf1c7e46"
4328 dependencies = [
4329 "darling 0.23.0",
4330 "proc-macro2",
@@ -4973,6 +5000,12 @@ dependencies = [
5000 "serde_json",
5001 ]
5002
5003 +[[package]]
5004 +name = "tinyvec"
5005 +version = "1.13.3"
5006 +source = "registry+https://github.com/rust-lang/crates.io-index"
5007 +checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee"
5008 +
5009 [[package]]
5010 name = "tls-listener"
5011 version = "0.11.2"
@@ -5549,7 +5582,7 @@ dependencies = [
5582 "getopts",
5583 "log",
5584 "phf_codegen",
5552 - "rand 0.8.5",
5585 + "rand 0.8.6",
5586 ]
5587
5588 [[package]]
rust/Cargo.toml
+3 -3
@@ -78,8 +78,8 @@ prometheus-client-derive-encode = "0.5.0"
78 prost = "0.14.3"
79 prost-types = "0.14.3"
80 protox = "0.9.1"
81 -pyo3 = "0.28.3"
82 -pythonize = "0.28.0"
81 +pyo3 = "0.29.0"
82 +pythonize = "0.29.0"
83 rand = "0.9.2"
84 rand_distr = "0.5.1"
85 rayon = "1.11.0"
@@ -97,7 +97,7 @@ serde_default = "0.2.0"
97 serde_json = { version = "1.0.145", features = ["preserve_order"] }
98 serde_repr = "0.1.20"
99 serde_tuple = "1.1.3"
100 -serde_with = "3.18.0"
100 +serde_with = "3.21.0"
101 serial_test = { version = "3.2.0", features = ["file_locks"] }
102 sha2 = "0.10.9"
103 smallvec = "1.15.1"