chore(deps): Bump several depedencies to resolve open high CVEs (#451)

<!-- CURSOR_SUMMARY -->
> [!NOTE]
> Bumps and recompiles dependencies (switching to uv), updates typing
for table model init to match transformers 4.57.1, adjusts tests for
Pillow 12, and releases 1.1.2.
> 
> - **Dependencies**:
> - Recompile requirements with uv; bump numerous packages (e.g.,
`transformers==4.57.1`, `torch==2.9.1`, `pillow==12.0.0`,
`opencv-python==4.12.0.88`).
> - Loosen `opencv-python` in `requirements/base.in` to `>=4.12` and
exclude `pip`/`setuptools` from lock outputs.
> - **Code Fixes**:
> - Update `UnstructuredTableTransformerModel.initialize` signature to
`model: Union[str, Path]` to satisfy stricter typing in
`DetrImageProcessor.from_pretrained`.
> - **Tests**:
> - Cast random image arrays to `np.uint8` in `test_get_page_elements`
for Pillow 12 compatibility.
> - **Versioning**:
>   - Bump `__version__` to `1.1.2` and update `CHANGELOG.md`.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
a9548ab. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: lawrence-u10d

CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.1.2
+
+* chore(deps): Bump several depedencies to resolve open high CVEs
+* fix: Exclude pip and setuptools pinning based on cursor comment
+* fix: With the newer version of transformers 4.57.1, the type checking became stricter, and mypy correctly flagged that DetrImageProcessor.from_pretrained() expects str | PathLike[Any], not a model object.
+* fix: Update test to explicitly cast numpy array to uint8 for Pillow 12.0.0 compatibility
+
 ## 1.1.1
 
 * Add NotImplementedError when trying to single index a TextRegions, reflecting the fact that it won't behave correctly at the moment.

requirements/base.in

@@ -2,7 +2,7 @@
 python-multipart
 huggingface-hub
 numpy
-opencv-python!=4.7.0.68
+opencv-python>=4.12
 onnx
 onnxruntime>=1.18.0
 matplotlib

requirements/base.txt

@@ -1,41 +1,39 @@
-#
-# This file is autogenerated by pip-compile with Python 3.12
-# by the following command:
-#
-#    pip-compile requirements/base.in
-#
-accelerate==1.7.0
+# This file was autogenerated by uv via the following command:
+#    uv pip compile requirements/base.in -o requirements/base.txt --no-emit-package pip --no-emit-package setuptools
+accelerate==1.12.0
     # via -r requirements/base.in
-certifi==2025.4.26
+certifi==2025.11.12
     # via requests
-cffi==1.17.1
+cffi==2.0.0
     # via cryptography
-charset-normalizer==3.4.2
+charset-normalizer==3.4.4
     # via
     #   pdfminer-six
     #   requests
 coloredlogs==15.0.1
     # via onnxruntime
 contourpy==1.3.2
     # via matplotlib
-cryptography==44.0.3
+cryptography==46.0.3
     # via pdfminer-six
 cycler==0.12.1
     # via matplotlib
-filelock==3.18.0
+filelock==3.20.0
     # via
     #   huggingface-hub
     #   torch
     #   transformers
-flatbuffers==25.2.10
+flatbuffers==25.9.23
     # via onnxruntime
-fonttools==4.58.0
+fonttools==4.60.1
     # via matplotlib
-fsspec==2025.3.2
+fsspec==2025.10.0
     # via
     #   huggingface-hub
     #   torch
-huggingface-hub==0.31.2
+hf-xet==1.2.0
+    # via huggingface-hub
+huggingface-hub==0.36.0
     # via
     #   -r requirements/base.in
     #   accelerate
@@ -44,38 +42,41 @@ huggingface-hub==0.31.2
     #   transformers
 humanfriendly==10.0
     # via coloredlogs
-idna==3.10
+idna==3.11
     # via requests
 jinja2==3.1.6
     # via torch
-kiwisolver==1.4.8
+kiwisolver==1.4.9
     # via matplotlib
-markupsafe==3.0.2
+markupsafe==3.0.3
     # via jinja2
-matplotlib==3.10.3
+matplotlib==3.10.7
     # via -r requirements/base.in
+ml-dtypes==0.5.4
+    # via onnx
 mpmath==1.3.0
     # via sympy
 networkx==3.4.2
     # via torch
-numpy==2.2.5
+numpy==2.2.6
     # via
     #   -r requirements/base.in
     #   accelerate
     #   contourpy
     #   matplotlib
+    #   ml-dtypes
     #   onnx
     #   onnxruntime
     #   opencv-python
     #   pandas
     #   scipy
     #   torchvision
     #   transformers
-onnx==1.18.0
+onnx==1.19.1
     # via -r requirements/base.in
-onnxruntime==1.22.0
+onnxruntime==1.23.2
     # via -r requirements/base.in
-opencv-python==4.11.0.86
+opencv-python==4.12.0.88
     # via -r requirements/base.in
 packaging==25.0
     # via
@@ -84,25 +85,25 @@ packaging==25.0
     #   matplotlib
     #   onnxruntime
     #   transformers
-pandas==2.2.3
+pandas==2.3.3
     # via -r requirements/base.in
-pdfminer-six==20250506
+pdfminer-six==20251107
     # via -r requirements/base.in
-pillow==11.2.1
+pillow==12.0.0
     # via
     #   matplotlib
     #   torchvision
-protobuf==6.31.0
+protobuf==6.33.1
     # via
     #   onnx
     #   onnxruntime
-psutil==7.0.0
+psutil==7.1.3
     # via accelerate
-pycparser==2.22
+pycparser==2.23
     # via cffi
-pyparsing==3.2.3
+pyparsing==3.2.5
     # via matplotlib
-pypdfium2==4.30.1
+pypdfium2==5.0.0
     # via -r requirements/base.in
 python-dateutil==2.9.0.post0
     # via
@@ -112,21 +113,21 @@ python-multipart==0.0.20
     # via -r requirements/base.in
 pytz==2025.2
     # via pandas
-pyyaml==6.0.2
+pyyaml==6.0.3
     # via
     #   accelerate
     #   huggingface-hub
     #   timm
     #   transformers
-rapidfuzz==3.13.0
+rapidfuzz==3.14.3
     # via -r requirements/base.in
-regex==2024.11.6
+regex==2025.11.3
     # via transformers
-requests==2.32.3
+requests==2.32.5
     # via
     #   huggingface-hub
     #   transformers
-safetensors==0.5.3
+safetensors==0.7.0
     # via
     #   accelerate
     #   timm
@@ -139,33 +140,31 @@ sympy==1.14.0
     # via
     #   onnxruntime
     #   torch
-timm==1.0.15
+timm==1.0.22
     # via -r requirements/base.in
-tokenizers==0.21.1
+tokenizers==0.22.1
     # via transformers
-torch==2.7.0
+torch==2.9.1
     # via
     #   -r requirements/base.in
     #   accelerate
     #   timm
     #   torchvision
-torchvision==0.22.0
+torchvision==0.24.1
     # via timm
 tqdm==4.67.1
     # via
     #   huggingface-hub
     #   transformers
-transformers==4.51.3
+transformers==4.57.1
     # via -r requirements/base.in
-typing-extensions==4.13.2
+typing-extensions==4.15.0
     # via
+    #   cryptography
     #   huggingface-hub
     #   onnx
     #   torch
 tzdata==2025.2
     # via pandas
-urllib3==2.4.0
+urllib3==2.5.0
     # via requests
-
-# The following packages are considered to be unsafe in a requirements file:
-# setuptools