Bump the pip group across 4 directories with 6 updates by dependabot[bot] · Pull Request #413 · microsoft/olive-recipes

dependabot · 2026-05-11T19:15:10Z

Bumps the pip group with 5 updates in the /.aitk/requirements directory:

Package	From	To
onnx	`1.17.0`	`1.21.0`
torch	`2.6.0`	`2.7.1+cu128`
transformers	`4.51.3`	`5.0.0rc3`
urllib3	`2.6.3`	`2.7.0`
diffusers	`0.35.0`	`0.38.0`

Bumps the pip group with 5 updates in the /.aitk/requirements/General directory:

Package	From	To
onnx	`1.17.0`	`1.21.0`
torch	`2.7.0`	`2.8.0`
transformers	`4.51.3`	`5.0.0rc3`
urllib3	`2.6.3`	`2.7.0`
diffusers	`0.35.0`	`0.38.0`

Bumps the pip group with 3 updates in the /meta-llama-Llama-3.1-8B-Instruct/QAIRT directory: pillow, transformers and urllib3.
Bumps the pip group with 2 updates in the /sd-legacy-stable-diffusion-v1-5/olive directory: transformers and diffusers.

Updates onnx from 1.17.0 to 1.21.0

Release notes

Sourced from onnx's releases.

v1.21.0

ONNX v1.21.0 is now available with exciting new features! We would like to thank everyone who contributed to this release! Please visit onnx.ai to learn more about ONNX and associated projects.

What's Changed

Breaking Changes and Deprecations

Remove defunct model hub integration by @andife in onnx/onnx#7678

Spec and Operator

Revert opset 25 version bump by @titaiwangms in onnx/onnx#7441

Add 2 bit support to onnx by @vraspar in onnx/onnx#7446

Bump opset version to 26 by @titaiwangms in onnx/onnx#7469

Remove enforcement to node determinism attribute by @titaiwangms in onnx/onnx#7473

Export functions by @cyyever in onnx/onnx#7505

[Reland] Cumulative Product Operator by @titaiwangms in onnx/onnx#7400

Fix Div integer semantics to use trunc division by @MagellaX in onnx/onnx#7585

Clarify DFT behavior when inverse=True and onesided=True (irfft) by @simonbyrne in onnx/onnx#7574

Specify 0/0 case in LpNormalization by @titaiwangms in onnx/onnx#7618

Clarify NonMaxSuppression IoU threshold uses strict comparison by @Copilot in onnx/onnx#7619

Relax model domain requirement from MUST to SHOULD by @Copilot in onnx/onnx#7668

Add BitCast operator for bitwise type reinterpretation by @Copilot in onnx/onnx#7527

Reference Implementation

Fix CenterCropPad: compare target shape with dimension, not axis index by @Copilot in onnx/onnx#7522

Vectorize sigmoid op implementation by @justinchuby in onnx/onnx#7556

Fixing verbose logging error at verbose=3 for reference_evaluator by @rothej in onnx/onnx#7597

Clean up reference evaluator tests by @VedantMadane in onnx/onnx#7684

Utilities and Tools

Add version check for test_executable_permission_check by @andife in onnx/onnx#7511

Fix index out of bounds in version converter adapters by @rothej in onnx/onnx#7493

Fix default attribute values in shape inference by @matteosal in onnx/onnx#7602

Fix Softmax-family shape inference for scalar inputs by @MagellaX in onnx/onnx#7625

Fix/merge models value info by @MagellaX in onnx/onnx#7608

Add version converter adapters for opset 15, 16, 17, 18 by @alexkvitkevich in onnx/onnx#7677

shape_inference: Validate expected size of scalar tensor in ParseData by @skottmckay in onnx/onnx#7675

Build, CI and Tests

Force labels in PRs by @titaiwangms in onnx/onnx#7442

Fix reuse by @andife in onnx/onnx#7463

Change precedence from 'aggregate' to 'override' for generating scripts by @andife in onnx/onnx#7458

a) 3.14-dev -> 3.14, b) reduce template injection thread by @andife in onnx/onnx#7461

Export register functions by @cyyever in onnx/onnx#7496

Fix Python executable detection in virtual environments by @aoguntayo in onnx/onnx#7485

Merged Release Workflows for Windows by @Raghul-M in onnx/onnx#7509

Bump nanobind to 2.10.2 by @cyyever in onnx/onnx#7479

Fix freebsd build by @cyyever in onnx/onnx#7518

Revert ONNX CMake changes by @cyyever in onnx/onnx#7515

Export functions used in PyTorch by @cyyever in onnx/onnx#7524

Export protobuf symbols by @cyyever in onnx/onnx#7525

Fix CMAKE_ARGS parsing for windows compatibility by @hmaarrfk in onnx/onnx#7532

Replace deprecated github action "test-results-action" by @andife in onnx/onnx#7552

Wheels for python 3.14t by @andife in onnx/onnx#7558

Clarify permissions comment and update dependencies install by @andife in onnx/onnx#7577

... (truncated)

Commits

be2b5fd Update VERSION_NUMBER to final release version (#7772)
c751ddb Update VERSION_NUMBER to rc4 (#7759)
866038e [rel-1.21.0] Cherry-pick bug and security fixes for RC4 (#7737, #7751) (#7758)
e6c12c5 update version to rc3 (#7743)
33afebf Cherry pick commit (#7740)
a51ac07 update release to rc2 (#7732)
089fcda fix windows build ; upload (#7727)
fbbe45b Cherry pick commits into the release branch (#7718)
624108e update release branch version to 1.21.0rc1 (#7714)
b65e6e1 [Cherry-Pick] Merge commits from main for security fixes (#7688)
Additional commits viewable in compare view

Updates torch from 2.6.0 to 2.7.1+cu128

Updates transformers from 4.51.3 to 5.0.0rc3

Release notes

Sourced from transformers's releases.

Release candidate v5.0.0rc3

New models:

[GLM-4.7] GLM-Lite Supoort by @zRzRzRzRzRzRzR in huggingface/transformers#43031

[GLM-Image] AR Model Support for GLM-Image by @zRzRzRzRzRzRzR in huggingface/transformers#43100

Add LWDetr model by @sbucaille in huggingface/transformers#40991

Add LightOnOCR model implementation by @baptiste-aubertin in huggingface/transformers#41621

What's Changed

We are getting closer and closer to the official release! This RC is focused on removing more of the deprecated stuff, fixing some minors issues, doc updates.

Update Japanese README to match English version by @lilin-1 in huggingface/transformers#43069

[docs] Deploying by @stevhliu in huggingface/transformers#42263

[docs] inference engines by @stevhliu in huggingface/transformers#42932

Fix typos: Remove duplicate duplicate words words by @efeecllk in huggingface/transformers#43040

[style] Rework ruff rules and update all files by @Cyrilvallez in huggingface/transformers#43144

[CB] Minor fix in kwargs by @remi-or in huggingface/transformers#43147

[Bug] qwen2_5_omni: cap generation length to be less than the max_position_embedding in DiT by @sniper35 in huggingface/transformers#43068

Fix some deprecated practices in torch 2.9 by @Cyrilvallez in huggingface/transformers#43167

Fix Fuyu processor width dimension bug in _get_num_multimodal_tokens by @Abhinavexists in huggingface/transformers#43137

Inherit from PreTrainedTokenizerBase by @juliendenize in huggingface/transformers#43143

Generation config boolean defaults by @zucchini-nlp in huggingface/transformers#43000

Fix failing BartModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43160

fix failure of llava/pixtral by @sywangyi in huggingface/transformers#42985

GemmaTokenizer: remove redundant whitespace pre-tokenizer by @vaibhav-research in huggingface/transformers#43106

Support auto_doctring in Processors by @yonigozlan in huggingface/transformers#42101

Fix failing BitModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43164

[Fp8] Fix experts by @vasqu in huggingface/transformers#43154

Docs: improve wording for documentation build instructions by @Sailnagale in huggingface/transformers#43007

[makefile] Cleanup and improve the rules by @Cyrilvallez in huggingface/transformers#43171

Some new models added stuff that was already removed by @Cyrilvallez in huggingface/transformers#43179

Fixes and compilation warning in torchao docs by @merveenoyan in huggingface/transformers#42909

[cache] Remove all deprecated classes by @Cyrilvallez in huggingface/transformers#43168

Bump huggingface_hub minimal version by @Wauplin in huggingface/transformers#43188

Rework check_config_attributes.py by @Cyrilvallez in huggingface/transformers#43191

Fix generation config validation by @zucchini-nlp in huggingface/transformers#43175

[style] Use 'x | y' syntax for processors as well by @Wauplin in huggingface/transformers#43189

Remove deprecated objects by @Cyrilvallez in huggingface/transformers#43170

fix chunked prefill implementation issue-43082 by @marcndo in huggingface/transformers#43132

Reduce add_dates verbosity by @yonigozlan in huggingface/transformers#43184

Add support for MiniMax-M2 by @rogeryoungh in huggingface/transformers#42028

Fix failing salesforce-ctrl, xlm & gpt-neo model generation tests by @Sai-Suraj-27 in huggingface/transformers#43180

Less verbose library helpers by @Cyrilvallez in huggingface/transformers#43197

run all test files on CircleCI by @ydshieh in huggingface/transformers#43146

Clamp temperature to >=1.0 for Dia generation by @Haseebasif7 in huggingface/transformers#43029

Fix spelling typos in comments and code by @raimbekovm in huggingface/transformers#43046

[docs] llama.cpp by @stevhliu in huggingface/transformers#43185

... (truncated)

Commits

cb5079f v5.0.0rc3
d1808f2 [ci] Fixing some failing tests for important models (#43231)
3d27645 Add LightOnOCR model implementation (#41621)
77146cc fix crash in when running FSDP2+TP (#43226)
61317f5 [CB] Ensure parallel decoding test passes using FA (#43277)
1efe1a6 Fix failing PegasusX, Mvp & LED model integration tests (#43245)
e8ae373 [consistency] Ensure models are added to the _toctree.yml (#43264)
c85be98 [docs] tensorrt-llm (#43176)
38022fd [style] Fix init isort and align makefile and CI (#43260)
e977446 Fix failing Hiera, SwiftFormer & LED Model integration tests (#43225)
Additional commits viewable in compare view

Updates urllib3 from 2.6.3 to 2.7.0

Release notes

Sourced from urllib3's releases.

2.7.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security

Addressed high-severity security issues. Impact was limited to specific use cases detailed in the accompanying advisories; overall user exposure was estimated to be marginal.

Decompression-bomb safeguards of the streaming API were bypassed:

When HTTPResponse.drain_conn() was called after the response had been read and decompressed partially. (Reported by @Cycloctane)

During the second HTTPResponse.read(amt=N) or HTTPResponse.stream(amt=N) call when the response was decompressed using the official Brotli library. (Reported by @kimkou2024)

See GHSA-mf9v-mfxr-j63j for details.

HTTP pools created using ProxyManager.connection_from_url did not strip sensitive headers specified in Retry.remove_headers_on_redirect when redirecting to a different host. (GHSA-qccp-gfcp-xxvc reported by @christos-spearbit)

Deprecations and Removals

Used FutureWarning instead of DeprecationWarning for better visibility of existing deprecation notices. Rescheduled the removal of deprecated features to version 3.0. (urllib3/urllib3#3763)

Removed support for end-of-life Python 3.9. (urllib3/urllib3#3720)

Removed support for end-of-life PyPy3.10. (urllib3/urllib3#4979)

Bumped the minimum supported pyOpenSSL version to 19.0.0. (urllib3/urllib3#3777)

Bugfixes

Fixed a bug where HTTPResponse.read(amt=None) was ignoring decompressed data buffered from previous partial reads. (urllib3/urllib3#3636)

Fixed a bug where HTTPResponse.read() could cache only part of the response after a partial read when cache_content=True. (urllib3/urllib3#4967)

Fixed HTTPResponse.stream() and HTTPResponse.read_chunked() to handle amt=0. (urllib3/urllib3#3793)

Updated _TYPE_BODY type alias to include missing Iterable[str], matching the documented and runtime behavior of chunked request bodies. (urllib3/urllib3#3798)

Fixed LocationParseError when paths resembling schemeless URIs were passed to HTTPConnectionPool.urlopen(). (urllib3/urllib3#3352)

Fixed BaseHTTPResponse.readinto() type annotation to accept memoryview in addition to bytearray, matching the io.RawIOBase.readinto contract and enabling use with io.BufferedReader without type errors. (urllib3/urllib3#3764)

Changelog

Sourced from urllib3's changelog.

2.7.0 (2026-05-07)

Security

Addressed high-severity security issues. Impact was limited to specific use cases detailed in the accompanying advisories; overall user exposure was estimated to be marginal.

Decompression-bomb safeguards of the streaming API were bypassed:

When HTTPResponse.drain_conn() was called after the response had been read and decompressed partially.

During the second HTTPResponse.read(amt=N) or HTTPResponse.stream(amt=N) call when the response was decompressed using the official Brotli <https://pypi.org/project/brotli/>__ library.

See GHSA-mf9v-mfxr-j63j <https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j>__ for details.

HTTP pools created using ProxyManager.connection_from_url did not strip sensitive headers specified in Retry.remove_headers_on_redirect when redirecting to a different host. (GHSA-qccp-gfcp-xxvc <https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc>__)

Deprecations and Removals

Used FutureWarning instead of DeprecationWarning for better visibility of existing deprecation notices. Rescheduled the removal of deprecated features to version 3.0. ([#3763](https://github.com/urllib3/urllib3/issues/3763) <https://github.com/urllib3/urllib3/issues/3763>__)

Removed support for end-of-life Python 3.9. ([#3720](https://github.com/urllib3/urllib3/issues/3720) <https://github.com/urllib3/urllib3/issues/3720>__)

Removed support for end-of-life PyPy3.10. ([#4979](https://github.com/urllib3/urllib3/issues/4979) <https://github.com/urllib3/urllib3/issues/4979>__)

Bumped the minimum supported pyOpenSSL version to 19.0.0. ([#3777](https://github.com/urllib3/urllib3/issues/3777) <https://github.com/urllib3/urllib3/issues/3777>__)

Bugfixes

Fixed a bug where HTTPResponse.read(amt=None) was ignoring decompressed data buffered from previous partial reads. ([#3636](https://github.com/urllib3/urllib3/issues/3636) <https://github.com/urllib3/urllib3/issues/3636>__)

Fixed a bug where HTTPResponse.read() could cache only part of the response after a partial read when cache_content=True.

... (truncated)

Commits

9a950b9 Release 2.7.0
5ec0de4 Merge commit from fork
2bdcc44 Merge commit from fork
f45b0df Fix a misleading example for ProxyManager (#4970)
577193c Switch to nightly PyPy3.11 in CI for now (#4984)
e90af45 Avoid infinite loop in HTTPResponse.read_chunked when amt=0 (#4974)
67ed74f Bump dev dependencies (#4972)
3abd481 Upgrade mypy to version 1.20.2 (#4978)
2b8725d Drop support for EOL PyPy3.10 (#4979)
2944b2a Upgrade setup-chrome and setup-firefox to fix warnings (#4973)
Additional commits viewable in compare view

Updates diffusers from 0.35.0 to 0.38.0

Release notes

Sourced from diffusers's releases.

Diffusers 0.38.0: New image and audio pipelines, Core library improvements, and more

New Pipelines

LLaDA2

LLaDA2 is a family of discrete diffusion language models that generate text through block-wise iterative refinement. Instead of autoregressive token-by-token generation, LLaDA2 starts with a fully masked sequence and progressively unmasks tokens by confidence over multiple refinement steps.

PR: huggingface/diffusers#13226

Docs: https://huggingface.co/docs/diffusers/main/api/pipelines/llada2

Nucleus-MoE

NucleusMoE-Image is a 2B active 17B parameter model trained with efficiency at its core. Our novel architecture highlights the scalability of a sparse MoE architecture for Image generation.

PR: huggingface/diffusers#13317

Docs: https://huggingface.co/docs/diffusers/main/api/pipelines/nucleusmoe_image

Thanks to @sippycoder for the contribution.

Ernie-Image

ERNIE-Image is a powerful and highly efficient image generation model with 8B parameters.

PR: huggingface/diffusers#13432

Docs: https://huggingface.co/docs/diffusers/main/api/pipelines/ernie_image

Thanks to @HsiaWinter for the contribution.

LongCat-AudioDiT

LongCat-AudioDiT is a text-to-audio diffusion model from Meituan LongCat.

PR: huggingface/diffusers#13483

Docs: https://huggingface.co/docs/diffusers/main/api/pipelines/longcat_audio_dit

Thanks to @RuixiangMa for the contribution.

Ace-Step 1.5

ACE-Step 1.5 generates variable-length stereo audio at 48 kHz (10 seconds to 10 minutes) from text prompts and optional lyrics. The full system pairs a Language Model planner with a Diffusion Transformer (DiT) synthesizer; this pipeline wraps the DiT half of that stack, and consists of three components: an AutoencoderOobleck VAE that compresses waveforms into 25 Hz stereo latents, a Qwen3-based text encoder for prompt and lyric conditioning, and an AceStepTransformer1DModel DiT that operates in the VAE latent space using flow matching.

PR: huggingface/diffusers#13095

Docs: https://huggingface.co/docs/diffusers/main/api/pipelines/ace_step

Thanks to @ChuxiJ for the contribution.

Flux.2 Small Decoder

Make your Flux.2 decoding faster with this new small decoder model from the Black Forest Labs. You can check it out here. It was contributed by @huemin-art in this PR.

... (truncated)

Commits

275869d Release: v0.38.0-release
42a46e4 Fix missing latents_bn_std dtype cast in VAE normalization (#13299)
1a8a17b Add ACE-Step pipeline for text-to-music generation (#13095)
303c1d8 [Ernie-Image] Add lora support (#13575)
716f246 Fix UniPC scheduler device mismatch when using offloading (#13489)
a5bc046 NucleusMoE docs (#13661)
4744648 [ci] use tokenizers stable installtion in CI. (#13562)
50cb2db feat: support ring attention with arbitrary KV sequence lengths (#13545)
0fff459 Fix ErnieImagePipeline pre-computed prompt_embeds + num_images_per_prompt sha...
2173c55 [docs] fix typo in AutoencoderOobleck docs (#13642) (#13645)
Additional commits viewable in compare view

Updates onnx from 1.17.0 to 1.21.0

Release notes

Sourced from onnx's releases.

v1.21.0

ONNX v1.21.0 is now available with exciting new features! We would like to thank everyone who contributed to this release! Please visit onnx.ai to learn more about ONNX and associated projects.

What's Changed

Breaking Changes and Deprecations

Remove defunct model hub integration by @andife in onnx/onnx#7678

Spec and Operator

Revert opset 25 version bump by @titaiwangms in onnx/onnx#7441

Add 2 bit support to onnx by @vraspar in onnx/onnx#7446

Bump opset version to 26 by @titaiwangms in onnx/onnx#7469

Remove enforcement to node determinism attribute by @titaiwangms in onnx/onnx#7473

Export functions by @cyyever in onnx/onnx#7505

[Reland] Cumulative Product Operator by @titaiwangms in onnx/onnx#7400

Fix Div integer semantics to use trunc division by @MagellaX in onnx/onnx#7585

Clarify DFT behavior when inverse=True and onesided=True (irfft) by @simonbyrne in onnx/onnx#7574

Specify 0/0 case in LpNormalization by @titaiwangms in onnx/onnx#7618

Clarify NonMaxSuppression IoU threshold uses strict comparison by @Copilot in onnx/onnx#7619

Relax model domain requirement from MUST to SHOULD by @Copilot in onnx/onnx#7668

Add BitCast operator for bitwise type reinterpretation by @Copilot in onnx/onnx#7527

Reference Implementation

Fix CenterCropPad: compare target shape with dimension, not axis index by @Copilot in onnx/onnx#7522

Vectorize sigmoid op implementation by @justinchuby in onnx/onnx#7556

Fixing verbose logging error at verbose=3 for reference_evaluator by @rothej in onnx/onnx#7597

Clean up reference evaluator tests by @VedantMadane in onnx/onnx#7684

Utilities and Tools

Add version check for test_executable_permission_check by @andife in onnx/onnx#7511

Fix index out of bounds in version converter adapters by @rothej in onnx/onnx#7493

Fix default attribute values in shape inference by @matteosal in onnx/onnx#7602

Fix Softmax-family shape inference for scalar inputs by @MagellaX in onnx/onnx#7625

Fix/merge models value info by @MagellaX in onnx/onnx#7608

Add version converter adapters for opset 15, 16, 17, 18 by @alexkvitkevich in onnx/onnx#7677

shape_inference: Validate expected size of scalar tensor in ParseData by @skottmckay in onnx/onnx#7675

Build, CI and Tests

Force labels in PRs by @titaiwangms in onnx/onnx#7442

Fix reuse by @andife in onnx/onnx#7463

Change precedence from 'aggregate' to 'override' for generating scripts by @andife in onnx/onnx#7458

a) 3.14-dev -> 3.14, b) reduce template injection thread by @andife in onnx/onnx#7461

Export register functions by @cyyever in onnx/onnx#7496

Fix Python executable detection in virtual environments by @aoguntayo in onnx/onnx#7485

Merged Release Workflows for Windows by @Raghul-M in onnx/onnx#7509

Bump nanobind to 2.10.2 by @cyyever in onnx/onnx#7479

Fix freebsd build by @cyyever in onnx/onnx#7518

Revert ONNX CMake changes by @cyyever in onnx/onnx#7515

Export functions used in PyTorch by @cyyever in onnx/onnx#7524

Export protobuf symbols by @cyyever in onnx/onnx#7525

Fix CMAKE_ARGS parsing for windows compatibility by @hmaarrfk in onnx/onnx#7532

Replace deprecated github action "test-results-action" by @andife in onnx/onnx#7552

Wheels for python 3.14t by @andife in onnx/onnx#7558

Clarify permissions comment and update dependencies install by @andife in onnx/onnx#7577

... (truncated)

Commits

be2b5fd Update VERSION_NUMBER to final release version (#7772)
c751ddb Update VERSION_NUMBER to rc4 (#7759)
866038e [rel-1.21.0] Cherry-pick bug and security fixes for RC4 (#7737, #7751) (#7758)
e6c12c5 update version to rc3 (#7743)
33afebf Cherry pick commit (#7740)
a51ac07 update release to rc2 (#7732)
089fcda fix windows build ; upload (#7727)
fbbe45b Cherry pick commits into the release branch (#7718)
624108e update release branch version to 1.21.0rc1 (#7714)
b65e6e1 [Cherry-Pick] Merge commits from main for security fixes (#7688)
Additional commits viewable in compare view

Updates torch from 2.6.0 to 2.7.1+cu128

Updates transformers from 4.51.3 to 5.0.0rc3

Release notes

Sourced from transformers's releases.

Release candidate v5.0.0rc3

New models:

[GLM-4.7] GLM-Lite Supoort by @zRzRzRzRzRzRzR in huggingface/transformers#43031

[GLM-Image] AR Model Support for GLM-Image by @zRzRzRzRzRzRzR in huggingface/transformers#43100

Add LWDetr model by @sbucaille in huggingface/transformers#40991

Add LightOnOCR model implementation by @baptiste-aubertin in huggingface/transformers#41621

What's Changed

We are getting closer and closer to the official release! This RC is focused on removing more of the deprecated stuff, fixing some minors issues, doc updates.

Update Japanese README to match English version by @lilin-1 in huggingface/transformers#43069

[docs] Deploying by @stevhliu in huggingface/transformers#42263

[docs] inference engines by @stevhliu in huggingface/transformers#42932

Fix typos: Remove duplicate duplicate words words by @efeecllk in huggingface/transformers#43040

[style] Rework ruff rules and update all files by @Cyrilvallez in huggingface/transformers#43144

[CB] Minor fix in kwargs by @remi-or in huggingface/transformers#43147

[Bug] qwen2_5_omni: cap generation length to be less than the max_position_embedding in DiT by @sniper35 in huggingface/transformers#43068

Fix some deprecated practices in torch 2.9 by @Cyrilvallez in huggingface/transformers#43167

Fix Fuyu processor width dimension bug in _get_num_multimodal_tokens by @Abhinavexists in huggingface/transformers#43137

Inherit from PreTrainedTokenizerBase by @juliendenize in huggingface/transformers#43143

Generation config boolean defaults by @zucchini-nlp in huggingface/transformers#43000

Fix failing BartModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43160

fix failure of llava/pixtral by @sywangyi in huggingface/transformers#42985

GemmaTokenizer: remove redundant whitespace pre-tokenizer by @vaibhav-research in huggingface/transformers#43106

Support auto_doctring in Processors by @yonigozlan in huggingface/transformers#42101

Fix failing BitModelIntegrationTest by @Sai-Suraj-27 in huggingface/transformers#43164

[Fp8] Fix experts by @vasqu in huggingface/transformers#43154

Docs: improve wording for documentation build instructions by @Sailnagale in huggingface/transformers#43007

[makefile] Cleanup and improve the rules by @Cyrilvallez in huggingface/transformers#43171

Some new models added stuff that was already removed by @Cyrilvallez in huggingface/transformers#43179

Fixes and compilation warning in torchao docs by @merveenoyan in huggingface/transformers#42909

[cache] Remove all deprecated classes by @Cyrilvallez in huggingface/transformers#43168

Bump huggingface_hub minimal version by @Wauplin in huggingface/transformers#43188

Rework check_config_attributes.py by @Cyrilvallez in huggingface/transformers#43191

Fix generation config validation by @zucchini-nlp in huggingface/transformers#43175

[style] Use 'x | y' syntax for processors as well by @Wauplin in huggingface/transformers#43189

Remove deprecated objects by @Cyrilvallez in huggingface/transformers#43170

fix chunked prefill implementation issue-43082 by @marcndo in huggingface/transformers#43132

Reduce add_dates verbosity by @yonigozlan in huggingface/transformers#43184

Add support for MiniMax-M2 by @rogeryoungh in huggingface/transformers#42028

Fix failing salesforce-ctrl, xlm & gpt-neo model generation tests by @Sai-Suraj-27 in huggingface/transformers#43180

Less verbose library helpers by @Cyrilvallez in huggingface/transformers#43197

run all test files on CircleCI by @ydshieh in huggingface/transformers#43146

Clamp temperature to >=1.0 for Dia generation by @Haseebasif7 in huggingface/transformers#43029

Fix spelling typos in comments and code by @raimbekovm in huggingface/transformers#43046

[docs] llama.cpp by @stevhliu in huggingface/transformers#43185

... (truncated)

Commits

cb5079f v5.0.0rc3
d1808f2 [ci] Fixing some failing tests for important models (#43231)
3d27645 Add LightOnOCR model implementation (#41621)
77146cc fix crash in when running FSDP2+TP (#43226)
61317f5 [CB] Ensure parallel decoding test passes using FA (#43277)

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Bumps the pip group with 5 updates in the /.aitk/requirements directory: | Package | From | To | | --- | --- | --- | | [onnx](https://github.com/onnx/onnx) | `1.17.0` | `1.21.0` | | torch | `2.6.0` | `2.7.1+cu128` | | [transformers](https://github.com/huggingface/transformers) | `4.51.3` | `5.0.0rc3` | | [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` | | [diffusers](https://github.com/huggingface/diffusers) | `0.35.0` | `0.38.0` | Bumps the pip group with 5 updates in the /.aitk/requirements/General directory: | Package | From | To | | --- | --- | --- | | [onnx](https://github.com/onnx/onnx) | `1.17.0` | `1.21.0` | | torch | `2.7.0` | `2.8.0` | | [transformers](https://github.com/huggingface/transformers) | `4.51.3` | `5.0.0rc3` | | [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` | | [diffusers](https://github.com/huggingface/diffusers) | `0.35.0` | `0.38.0` | Bumps the pip group with 3 updates in the /meta-llama-Llama-3.1-8B-Instruct/QAIRT directory: [pillow](https://github.com/python-pillow/Pillow), [transformers](https://github.com/huggingface/transformers) and [urllib3](https://github.com/urllib3/urllib3). Bumps the pip group with 2 updates in the /sd-legacy-stable-diffusion-v1-5/olive directory: [transformers](https://github.com/huggingface/transformers) and [diffusers](https://github.com/huggingface/diffusers). Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.6.0 to 2.7.1+cu128 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.6.0 to 2.7.1+cu128 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.6.0 to 2.7.1+cu128 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.6.0 to 2.7.1+cu128 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.6.0 to 2.7.1+cu128 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.7.0 to 2.8.0 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.7.0 to 2.8.0 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.7.0 to 2.8.0 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.7.0 to 2.8.0 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `diffusers` from 0.35.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `onnx` from 1.17.0 to 1.21.0 - [Release notes](https://github.com/onnx/onnx/releases) - [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md) - [Commits](onnx/onnx@v1.17.0...v1.21.0) Updates `torch` from 2.7.0 to 2.8.0 Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `pillow` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.2.0) Updates `transformers` from 4.50.1 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `pillow` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.2.0) Updates `transformers` from 4.50.1 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `pillow` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.2.0) Updates `transformers` from 4.50.1 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `pillow` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.2.0) Updates `transformers` from 4.50.1 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `urllib3` from 2.6.3 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.3...2.7.0) Updates `pillow` from 12.1.0 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.0...12.2.0) Updates `transformers` from 4.50.1 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `diffusers` from 0.31.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `diffusers` from 0.31.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `diffusers` from 0.31.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) Updates `diffusers` from 0.31.0 to 0.38.0 - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.35.0...v0.38.0) Updates `transformers` from 4.51.3 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) --- updated-dependencies: - dependency-name: diffusers dependency-version: 0.38.0 dependency-type: direct:production - dependency-name: diffusers dependency-version: 0.38.0 dependency-type: direct:production - dependency-name: diffusers dependency-version: 0.38.0 dependency-type: direct:production - dependency-name: onnx dependency-version: 1.21.0 dependency-type: direct:production - dependency-name: onnx dependency-version: 1.21.0 dependency-type: direct:production - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production - dependency-name: torch dependency-version: 2.7.1+cu128 dependency-type: direct:production - dependency-name: torch dependency-version: 2.8.0 dependency-type: direct:production - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot AI review requested due to automatic review settings May 11, 2026 19:15

dependabot Bot requested a review from a team as a code owner May 11, 2026 19:15

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 11, 2026

dependabot Bot requested a review from a team as a code owner May 11, 2026 19:15

Copilot AI reviewed May 11, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/pip/dot-aitk/requirements/pip-c25375981f branch from c472b11 to c275bfb Compare May 12, 2026 02:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 4 directories with 6 updates#413

Bump the pip group across 4 directories with 6 updates#413
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dot-aitk/requirements/pip-c25375981f

dependabot Bot commented on behalf of github May 11, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.21.0

What's Changed

Breaking Changes and Deprecations

Spec and Operator

Reference Implementation

Utilities and Tools

Build, CI and Tests

Release candidate v5.0.0rc3

New models:

What's Changed

2.7.0

🚀 urllib3 is fundraising for HTTP/2 support

Security

Deprecations and Removals

Bugfixes

2.7.0 (2026-05-07)

Security

Deprecations and Removals

Bugfixes

Diffusers 0.38.0: New image and audio pipelines, Core library improvements, and more

New Pipelines

LLaDA2

Nucleus-MoE

Ernie-Image

LongCat-AudioDiT

Ace-Step 1.5

Flux.2 Small Decoder

v1.21.0

What's Changed

Breaking Changes and Deprecations

Spec and Operator

Reference Implementation

Utilities and Tools

Build, CI and Tests

Release candidate v5.0.0rc3

New models:

What's Changed

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 11, 2026 •

edited

Loading