Bump the python-dependencies group with 3 updates

[dependabot]

Updates the requirements on torch, torchvision and numpy to permit the latest version.
Updates torch to 2.9.1

Release notes

Sourced from torch's releases.

PyTorch 2.9.1 Release, bug fix release

This release is meant to fix the following issues (regressions / silent correctness):

Tracked Regressions

Significant Memory Regression in F.conv3d with bfloat16 Inputs in PyTorch 2.9.0 (#166643) This release provides work around this issue. If you are impacted please install nvidia-cudnn package version 9.15+ from pypi. (#166480) (#167111)

Torch.compile

Fix Inductor bug when compiling Gemma (#165601) Fix InternalTorchDynamoError in bytecode_transformation (#166036) Fix silent correctness error_on_graph_break bug where non-empty checkpoint results in unwanted graph break resumption (#166586) Improve performance by avoiding recompilation with mark_static_address with cudagraphs (#162208) Improve performance by caching get_free_symbol_uses in torch inductor (#166338) Fix fix registration design for inductor graph partition for vLLM (#166458) (#165815) (#165514) Fix warning spamming in torch.compile (#166993) Fix exception related to uninitialized tracer_output variable (#163169) Fix crash in torch.bmm and torch.compile with PyTorch release 2.9.0 (#166457)

Other

Fix warning spamming on new APIs to control TF32 behavior (#166956) Fix distributed crash with non-contiguous gather inputs (#166181) Fix indexing on large tensor causes invalid configuration argument (#166974) Fix numeric issue in CUDNN_ATTENTION (#166912) (#166570) Fix symmetric memory issue with fused_scaled_matmul_reduce_scatter (#165086) Improve libtorch stable ABI documentation (#163899) Fix image display on pypi project description section (#166404)

Changelog

Sourced from torch's changelog.

Releasing PyTorch

• Release Compatibility Matrix
  • PyTorch CUDA Support Matrix
• Release Cadence
• General Overview
  • Frequently Asked Questions
• Cutting a release branch preparations
• Cutting release branches
  • pytorch/pytorch
  • PyTorch ecosystem libraries
  • Making release branch specific changes for PyTorch
  • Making release branch specific changes for ecosystem libraries
• Running Launch Execution team Core XFN sync
• Drafting RCs (https://github.com/pytorch/pytorch/blob/main/Release Candidates) for PyTorch and domain libraries
  • Release Candidate Storage
  • Release Candidate health validation
  • Cherry Picking Fixes
    • How to do Cherry Picking
  • Cherry Picking Reverts
• Preparing and Creating Final Release Candidate
• Promoting RCs to Stable
• Additional Steps to prepare for release day
  • Modify release matrix
  • Open Google Colab issue
• Patch Releases
  • Patch Release Criteria
  • Patch Release Process
    • Patch Release Process Description
    • Triage
    • Issue Tracker for Patch releases
    • Building a release schedule / cherry picking
    • Building Binaries / Promotion to Stable
• Hardware / Software Support in Binary Build Matrix
  • Python
  • Accelerator Software
    • Special support cases
  • Operating Systems
• Submitting Tutorials
• Special Topics
  • Updating submodules for a release
  • Triton dependency for the release

Release Compatibility Matrix

Following is the Release Compatibility Matrix for PyTorch releases:

... (truncated)

Commits

• d38164a Enable Doc builds for: Minor Releases RCs. Minor and Patch Releases final RC ...
• b002562 Add doc for Symmetric Memory (#167477)
• 5811a8d [cuDNN][SDPA][Convolution] Expose cuDNN runtime version in CUDA hooks (#167327)
• f36c764 [dynamo][ez] Initialize tracer_output to None by default. (#167366)
• 6877288 Change forkserver test to only run below 3.13.8 (#167361)
• 9976b77 Cherry-pick LibTorch Stable ABI documentation (#167112 #166661 #163899) (#167...
• e6bcbbe [Inductor] No longer throw error in bmm out_dtype lowering due to tem… (#166922)
• 8f658d7 don't produce invalid grid configs (#166973) (#167158)
• 3d27d95 [GraphPartition] cache get_free_symbol_uses (#166338) (#166994)
• a06141f Delete deprecated fp32 precision warnings (#166956) (#166998)
• Additional commits viewable in compare view

Updates torchvision to 0.24.1

Release notes

Sourced from torchvision's releases.

TorchVision 0.24.1 Release

This is a patch release, which is compatible with PyTorch 2.9.1. There are no new features added.

Commits

• d801a34 [release-only] bump version to 0.24.1
• 7a9db90 Update min version to 3.10 for release 2.9 (#9239) (#9240)
• 0429d73 [release/0.24] cherrypicks for keypoints fix (#9238)
• b919bd0 [release/0.24] cherrypicks for windows failing jobs (#9230)
• 973f5cd [release/0.24] Cherry pick (#9217)
• e437e35 [release/0.24] update version (#9214)
• fa174c6 [release/0.24] Remove prototype (#9211)
• 13b32e2 [release/0.24] Update jobs branch (#9212)
• 15f9128 Skeleton for keypoints tutorial (#9209)
• a8dc530 Don't build video decoder homemade backend by default (#9208)
• Additional commits viewable in compare view

Updates numpy from 1.26.4 to 2.4.0

Release notes

Sourced from numpy's releases.

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired deprecations and bug fixes as well.

This release supports Python versions 3.11-3.14

Highlights

Apart from annotations and same_value kwarg, the 2.4 highlights are mostly of interest to downstream developers. They should help in implementing new user dtypes.

• Many annotation improvements. In particular, runtime signature introspection.
• New casting kwarg 'same_value' for casting by value.
• New PyUFunc_AddLoopsFromSpec function that can be used to add user sort loops using the ArrayMethod API.
• New __numpy_dtype__ protocol.

Deprecations

Setting the strides attribute is deprecated

Setting the strides attribute is now deprecated since mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a new view (no copy) via:

• np.lib.stride_tricks.strided_window_view if applicable,
• np.lib.stride_tricks.as_strided for the general case,
• or the np.ndarray constructor (buffer is the original array) for a light-weight version.

(gh-28925)

Positional out argument to np.maximum, np.minimum is deprecated

Passing the output array out positionally to numpy.maximum and numpy.minimum is deprecated. For example, np.maximum(a, b, c) will emit a deprecation warning, since c is treated as the output buffer rather than a third input.

Always pass the output with the keyword form, e.g. np.maximum(a, b, out=c). This makes intent clear and simplifies type annotations.

(gh-29052)

align= must be passed as boolean to np.dtype()

... (truncated)

Changelog

Sourced from numpy's changelog.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

The things to check are the cibuildwheel version in .github/workflows/wheels.yml and the openblas versions in openblas_requirements.txt.

Make a release PR

Four documents usually need to be updated or created for the release PR:

• The changelog
• The release notes
• The .mailmap file
• The pyproject.toml file

These changes should be made in an ordinary PR against the maintenance branch. Other small, miscellaneous fixes may be part of this PR. The commit message might be something like::

REL: Prepare for the NumPy 2.4.0 release

Create 2.4.0-changelog.rst.
Update 2.4.0-notes.rst.
Update .mailmap.
Update pyproject.toml

Set the release version

Check the pyproject.toml file and set the release version and update the classifier if needed::

$ gvim pyproject.toml

Check the doc/source/release.rst file

make sure that the release notes have an entry in the release.rst file::

... (truncated)

Commits

• c5ab79c Merge pull request #30487 from charris/prepare-2.4.0.2
• 05e379a REL: Prepare for the NumPy 2.4.0 release (2)
• 485f1c4 REL: Prepare for the NumPy 2.4.0 release (1) (#30486)
• c683481 REL: Prepare for the NumPy 2.4.0 release (#30439)
• 11d9ed2 Merge pull request #30459 from charris/backport-30456
• 2a17ddb TYP: restore generic.__hash__ (#30456)
• d04a429 Merge pull request #30432 from charris/backport-30426
• f94a148 fix more data races in mtrand.pyx (#30426)
• 06a9d42 Merge pull request #30420 from charris/backport-30418
• 30819cd Merge pull request #30419 from charris/backport-30373
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[kovtcharov-amd]

double check newer numpy works, I recall it was failing.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml