chore(deps): Bump several depedencies to resolve open high CVEs

[lawrence-u10d]

Note

Bumps and recompiles dependencies (switching to uv), updates typing for table model init to match transformers 4.57.1, adjusts tests for Pillow 12, and releases 1.1.2.

• Dependencies:
  • Recompile requirements with uv; bump numerous packages (e.g., transformers==4.57.1, torch==2.9.1, pillow==12.0.0, opencv-python==4.12.0.88).
  • Loosen opencv-python in requirements/base.in to >=4.12 and exclude pip/setuptools from lock outputs.
• Code Fixes:
  • Update UnstructuredTableTransformerModel.initialize signature to model: Union[str, Path] to satisfy stricter typing in DetrImageProcessor.from_pretrained.
• Tests:
  • Cast random image arrays to np.uint8 in test_get_page_elements for Pillow 12 compatibility.
• Versioning:
  • Bump __version__ to 1.1.2 and update CHANGELOG.md.

^{Written by Cursor Bugbot for commit a9548ab. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	jupyterlab@​4.4.2 ⏵ 4.5.0	+1	+1			-20
	psutil@​7.0.0 ⏵ 7.1.3	+1
	tornado@​6.5 ⏵ 6.5.2	+1
	ipython@​9.2.0 ⏵ 8.37.0	+1
	torch@​2.7.0 ⏵ 2.9.1		+2
	onnxruntime@​1.22.0 ⏵ 1.23.2	+1
	onnx@​1.18.0 ⏵ 1.19.1	+1
	transformers@​4.51.3 ⏵ 4.57.1		+10
	debugpy@​1.8.14 ⏵ 1.8.17	+1
	matplotlib@​3.10.3 ⏵ 3.10.7	+1
	mypy@​1.15.0 ⏵ 1.18.2	+1
	notebook@​7.4.2 ⏵ 7.4.7
	numpy@​2.2.5 ⏵ 2.2.6	+1
	pandas@​2.2.3 ⏵ 2.3.3	+1
	huggingface-hub@​0.31.2 ⏵ 0.36.0	-3
	torchvision@​0.22.0 ⏵ 0.24.1	+1
	fonttools@​4.58.0 ⏵ 4.60.1	+1
	pillow@​11.2.1 ⏵ 12.0.0		+15
	black@​25.1.0 ⏵ 25.11.0
	pdfminer-six@​20250506 ⏵ 20251107	+1	+6
	pytest@​8.3.5 ⏵ 9.0.1	-3
	fsspec@​2025.3.2 ⏵ 2025.10.0
	prompt-toolkit@​3.0.51 ⏵ 3.0.52	+1
	accelerate@​1.7.0 ⏵ 1.12.0	+1
	hf-xet@​1.2.0
	jupyterlab-widgets@​3.0.15 ⏵ 3.0.16	+4
	opencv-python@​4.11.0.86 ⏵ 4.12.0.88	+1
	coverage@​7.8.0 ⏵ 7.12.0	+1
	jupyter-server@​2.16.0 ⏵ 2.17.0	+1
	click@​8.2.0 ⏵ 8.3.1
	pyflakes@​3.3.2 ⏵ 3.4.0	+1
	pygments@​2.19.1 ⏵ 2.19.2	+1
See 68 more rows in the dashboard

View full report