chore(deps): bump the pip group across 5 directories with 10 updates

dependabot[bot] · web-flow · commit 8748361272fc · 2026-06-15T20:51:01.000Z
Bumps the pip group with 1 update in the /docker/pytorch/2.11/cpu directory: [torch](https://github.com/pytorch/pytorch). Bumps the pip group with 1 update in the /docker/pytorch/2.11/cuda directory: [torch](https://github.com/pytorch/pytorch). Bumps the pip group with 2 updates in the /docker/ray directory: [torch](https://github.com/pytorch/pytorch) and [pip](https://github.com/pypa/pip). Bumps the pip group with 8 updates in the /docker/xgboost directory: | Package | From | To | | --- | --- | --- | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.20` | `2.7.0` | | [cryptography](https://github.com/pyca/cryptography) | `46.0.7` | `48.0.1` | | [flask](https://github.com/pallets/flask) | `1.1.1` | `3.1.3` | | [requests](https://github.com/psf/requests) | `2.32.3` | `2.33.0` | | [werkzeug](https://github.com/pallets/werkzeug) | `0.15.6` | `3.1.6` | | [pyarrow](https://github.com/apache/arrow) | `22.0.0` | `23.0.1` | | [jinja2](https://github.com/pallets/jinja) | `2.11.3` | `3.1.6` | | [wheel](https://github.com/pypa/wheel) | `0.45.1` | `0.46.2` | Bumps the pip group with 7 updates in the /docker/xgboost/3.0-5 directory: | Package | From | To | | --- | --- | --- | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.20` | `2.7.0` | | [cryptography](https://github.com/pyca/cryptography) | `46.0.7` | `48.0.1` | | [flask](https://github.com/pallets/flask) | `1.1.1` | `3.1.3` | | [requests](https://github.com/psf/requests) | `2.32.3` | `2.33.0` | | [werkzeug](https://github.com/pallets/werkzeug) | `0.15.6` | `3.1.6` | | [jinja2](https://github.com/pallets/jinja) | `2.11.3` | `3.1.6` | | [wheel](https://github.com/pypa/wheel) | `0.45.1` | `0.46.2` | Updates `torch` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.11.0...v2.12.0) Updates `torch` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.11.0...v2.12.0) Updates `torch` from 2.10.0 to 2.12.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.11.0...v2.12.0) Updates `pip` from 26.0.1 to 26.1 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@26.0.1...26.1) Updates `urllib3` from 1.26.20 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.20...2.7.0) Updates `cryptography` from 46.0.7 to 48.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.7...48.0.1) Updates `flask` from 1.1.1 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...3.1.3) Updates `requests` from 2.32.3 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.33.0) Updates `werkzeug` from 0.15.6 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.15.6...3.1.6) Updates `pyarrow` from 22.0.0 to 23.0.1 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-22.0.0...apache-arrow-23.0.1) Updates `jinja2` from 2.11.3 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.11.3...3.1.6) Updates `wheel` from 0.45.1 to 0.46.2 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.45.1...0.46.2) Updates `urllib3` from 1.26.20 to 2.7.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.20...2.7.0) Updates `cryptography` from 46.0.7 to 48.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.7...48.0.1) Updates `flask` from 1.1.1 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...3.1.3) Updates `requests` from 2.32.3 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.33.0) Updates `werkzeug` from 0.15.6 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.15.6...3.1.6) Updates `jinja2` from 2.11.3 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.11.3...3.1.6) Updates `wheel` from 0.45.1 to 0.46.2 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.45.1...0.46.2) --- updated-dependencies: - dependency-name: torch dependency-version: 2.12.0 dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-version: 2.12.0 dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-version: 2.12.0 dependency-type: direct:production dependency-group: pip - dependency-name: pip dependency-version: '26.1' dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyarrow dependency-version: 23.0.1 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: wheel dependency-version: 0.46.2 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: wheel dependency-version: 0.46.2 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/docker/pytorch/2.11/cpu/pyproject.toml b/docker/pytorch/2.11/cpu/pyproject.toml
@@ -3,7 +3,7 @@ name = "pytorch-dlc-cpu"
 version = "2.11.0"
 requires-python = ">=3.12,<3.13"
 dependencies = [
-    "torch==2.11.0",
+    "torch==2.12.0",
     "torchvision==0.26.0",
     "torchaudio==2.11.0",
     "deepspeed==0.18.8",
@@ -14,7 +14,7 @@ dependencies = [
     "requests",
     "packaging",
     "urllib3>=2.7.0",
-    "python-multipart>=0.0.27",
+    "python-multipart>=0.0.32",
     "GitPython>=3.1.50",
     "Mako>=1.3.12",
     "mpi4py",
@@ -26,7 +26,7 @@ dependencies = [
 [project.optional-dependencies]
 sagemaker = [
     "smclarify",
-    "sagemaker>=3.4.0",
+    "sagemaker>=3.13.1",
     "sagemaker-pytorch-training",
     "sagemaker-training",
     "mlflow>=3.9.0",
@@ -40,7 +40,7 @@ sagemaker = [
     "seaborn",
     "cloudpickle",
     "s3fs>=2026.2.0",
-    "aiohttp>=3.14.0",
+    "aiohttp>=3.14.1",
 ]
 
 [tool.uv]
diff --git a/docker/pytorch/2.11/cuda/pyproject.toml b/docker/pytorch/2.11/cuda/pyproject.toml
@@ -3,7 +3,7 @@ name = "pytorch-dlc"
 version = "2.11.0"
 requires-python = ">=3.12,<3.13"
 dependencies = [
-    "torch==2.11.0",
+    "torch==2.12.0",
     "torchvision==0.26.0",
     "torchaudio==2.11.0",
     "deepspeed==0.18.8",
@@ -14,15 +14,15 @@ dependencies = [
     "requests",
     "packaging",
     "urllib3>=2.7.0",
-    "python-multipart>=0.0.27",
+    "python-multipart>=0.0.32",
     "GitPython>=3.1.50",
     "Mako>=1.3.12",
 ]
 
 [project.optional-dependencies]
 sagemaker = [
     "smclarify",
-    "sagemaker>=3.4.0",
+    "sagemaker>=3.13.1",
     "sagemaker-pytorch-training",
     "sagemaker-training",
     "mlflow>=3.9.0",
@@ -36,7 +36,7 @@ sagemaker = [
     "seaborn",
     "cloudpickle",
     "s3fs>=2026.2.0",
-    "aiohttp>=3.14.0",
+    "aiohttp>=3.14.1",
 ]
 
 [tool.uv]
diff --git a/docker/ray/pyproject.toml b/docker/ray/pyproject.toml
@@ -4,7 +4,7 @@ version = "1.1.0"
 requires-python = "==3.13.*"
 dependencies = [
     "awscli==1.44.49",
-    "pip==26.0.1",
+    "pip==26.1",
     "boto3==1.42.59",
     "fastapi==0.133.1",
     "httpx==0.28.1",
@@ -16,7 +16,7 @@ dependencies = [
     "ray[serve]==2.55.1",
     "scikit-learn==1.8.0",
     "soundfile==0.13.1",
-    "torch==2.10.0",
+    "torch==2.12.0",
     "torchaudio==2.10.0",
     "torchcodec==0.10.0",
     "torchvision==0.25.0",
diff --git a/docker/xgboost/3.0-5/requirements.txt b/docker/xgboost/3.0-5/requirements.txt
@@ -1,15 +1,15 @@
 boto3==1.17.52
 botocore==1.20.52
 certifi==2025.4.26
-cryptography==46.0.7
+cryptography==48.0.1
 cuda-python==12.6.0
 dask-cuda==24.12.00
 dask[dataframe]==2024.11.2
-Flask==1.1.1
+Flask==3.1.3
 gevent==23.9.1
 gunicorn==23.0.0
 itsdangerous==2.0.1
-jinja2==2.11.3
+jinja2==3.1.6
 MarkupSafe==1.1.1
 matplotlib==3.9.2
 multi-model-server==1.1.2
@@ -21,13 +21,13 @@ psutil==5.8.0
 pynvml==11.4.1
 python-dateutil==2.8.2
 PyYAML==6.0.1
-requests==2.32.3
+requests==2.33.0
 retrying==1.3.3
 sagemaker-containers==2.8.6.post2
 sagemaker-inference==1.5.5
 scikit-learn==1.5.2
 scipy==1.15.0
 setuptools<81
-urllib3==1.26.20
-Werkzeug==0.15.6
-wheel==0.45.1
+urllib3==2.7.0
+Werkzeug==3.1.6
+wheel==0.46.2
diff --git a/docker/xgboost/pyproject.toml b/docker/xgboost/pyproject.toml
@@ -7,7 +7,7 @@ dependencies = [
     "boto3==1.38.0",
     "botocore==1.38.0",
     "certifi==2025.4.26",
-    "cryptography==46.0.7",
+    "cryptography==48.0.1",
     "cuda-python==12.9.0",
     "dask-cuda==26.4.0",
     "dask[dataframe]==2026.1.1",
@@ -24,19 +24,19 @@ dependencies = [
     "pynvml==12.0.0",
     "python-dateutil==2.9.0",
     "PyYAML==6.0.1",
-    "requests==2.32.3",
+    "requests==2.33.0",
     "retrying==1.3.3",
     "sagemaker-containers==2.8.6.post2",
     "sagemaker-inference==1.5.5",
     "scikit-learn==1.8.0",
     "scipy==1.15.0",
     "setuptools>=80.9.0,<81",
     "urllib3==2.7.0",
-    "Werkzeug==3.1.8",
-    "pyarrow==22.0.0",
-    "protobuf>=3.20.0,<=3.20.3",
+    "Werkzeug==3.1.6",
+    "pyarrow==23.0.1",
+    "protobuf<=7.35.1,>=7.35.1",
     "fonttools>=4.60.2",
-    "idna>=3.7",
+    "idna>=3.18",
 ]
 
 [tool.uv]
diff --git a/test/xgboost/requirements.txt b/test/xgboost/requirements.txt
@@ -1 +1 @@
-sagemaker>=2,<3
+sagemaker>=3.13.1,<4

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-sagemaker>=2,<3`
	`1`	`+sagemaker>=3.13.1,<4`