Bump the uv group across 1 directory with 6 updates by dependabot[bot] · Pull Request #369 · intel/AI-PC-Samples

dependabot · 2026-03-02T23:53:42Z

Bumps the uv group with 6 updates in the /AI-Upscaling-With-NPU directory:

Package	From	To
filelock	`3.13.1`	`3.20.3`
fonttools	`4.56.0`	`4.60.2`
nbconvert	`7.16.6`	`7.17.0`
pillow	`11.0.0`	`12.1.1`
setuptools	`70.2.0`	`78.1.1`
tornado	`6.4.2`	`6.5`

Updates filelock from 3.13.1 to 3.20.3

Release notes

Sourced from filelock's releases.

3.20.3

What's Changed

Fix TOCTOU symlink vulnerability in SoftFileLock by @gaborbernat in tox-dev/filelock#465

Full Changelog: tox-dev/filelock@3.20.2...3.20.3

3.20.2

What's Changed

Support Unix systems without O_NOFOLLOW by @mwilliamson in tox-dev/filelock#463

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in tox-dev/filelock#464

New Contributors

@mwilliamson made their first contribution in tox-dev/filelock#463

Full Changelog: tox-dev/filelock@3.20.1...3.20.2

3.20.1

What's Changed

CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by @gaborbernat in tox-dev/filelock#461

Full Changelog: tox-dev/filelock@3.20.0...3.20.1

3.20.0

What's Changed

Add tox.toml to sdist by @mtelka in tox-dev/filelock#436

Update docs with example by @znichollscr in tox-dev/filelock#438

Add 3.14 support and drop 3.9 by @gaborbernat in tox-dev/filelock#448

New Contributors

@mtelka made their first contribution in tox-dev/filelock#436

@znichollscr made their first contribution in tox-dev/filelock#438

Full Changelog: tox-dev/filelock@3.19.1...3.20.0

3.19.1

What's Changed

add 3.14t (free threading) to matrix by @paultiq in tox-dev/filelock#433

Increase test coverage by @paultiq in tox-dev/filelock#434

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

3.25.0 (2026-03-01)

✨ feat(async): add AsyncReadWriteLock :pr:506

Standardize .github files to .yaml suffix

build(deps): bump actions/download-artifact from 7 to 8 :pr:503 - by :user:dependabot[bot]

build(deps): bump actions/upload-artifact from 6 to 7 :pr:502 - by :user:dependabot[bot]

Move SECURITY.md to .github/SECURITY.md

Add security policy

Add permissions to check workflow :pr:500

[pre-commit.ci] pre-commit autoupdate :pr:499 - by :user:pre-commit-ci[bot]

3.24.3 (2026-02-19)

🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire :pr:495

🐛 fix(ci): add trailing blank line after changelog entries :pr:492

3.24.2 (2026-02-16)

🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race :pr:491

🐛 fix(test): resolve flaky write non-starvation test :pr:490

📝 docs: restructure using Diataxis framework :pr:489

3.24.1 (2026-02-15)

🐛 fix(soft): resolve Windows deadlock and test race condition :pr:488

3.24.0 (2026-02-14)

✨ feat(lock): add lifetime parameter for lock expiration (#68) :pr:486

✨ feat(lock): add cancel_check to acquire (#309) :pr:487

🐛 fix(api): detect same-thread self-deadlock :pr:481

✨ feat(mode): respect POSIX default ACLs (#378) :pr:483

🐛 fix(win): eliminate lock file race in threaded usage :pr:484

✨ feat(lock): add poll_interval to constructor :pr:482

🐛 fix(unix): auto-fallback to SoftFileLock on ENOSYS :pr:480

... (truncated)

Commits

41b42dd Fix TOCTOU symlink vulnerability in SoftFileLock (#465)
f2e7d40 [pre-commit.ci] pre-commit autoupdate (#464)
5088854 Support Unix systems without O_NOFOLLOW (#463)
377f622 [pre-commit.ci] pre-commit autoupdate (#460)
4724d7f Fix TOCTOU symlink vulnerability in lock file creation (#461)
cb69414 Bump actions/upload-artifact from 5 to 6 (#459)
0769294 Bump actions/download-artifact from 6 to 7 (#458)
414193a [pre-commit.ci] pre-commit autoupdate (#457)
1456797 [pre-commit.ci] pre-commit autoupdate (#456)
8d6bf90 Bump actions/checkout from 5 to 6 (#455)
Additional commits viewable in compare view

Updates fonttools from 4.56.0 to 4.60.2

Release notes

Sourced from fonttools's releases.

4.60.2

Backport release Same as 4.61.0 but without "Drop support for EOL Python 3.9" change to allow downstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (#3994, #3999).

4.60.1

[ufoLib] Reverted accidental method name change in UFOReader.getKerningGroupConversionRenameMaps that broke compatibility with downstream projects like defcon (#3948, #3947, robotools/defcon#478).

[ufoLib] Added test coverage for getKerningGroupConversionRenameMaps method (#3950).

[subset] Don't try to subset BASE table; pass it through by default instead (#3949).

[subset] Remove empty BaseRecord entries in MarkBasePos lookups (#3897, #3892).

[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (#3946).

[subset] Remove duplicate features when subsetting (#3945).

[Docs] Added documentation for the visitor module (#3944).

4.60.0

[pointPen] Allow reverseFlipped parameter of DecomposingPointPen to take a ReverseFlipped enum value to control whether/how to reverse contour direction of flipped components, in addition to the existing True/False. This allows to set ReverseFlipped.ON_CURVE_FIRST to ensure that the decomposed outline starts with an on-curve point before being reversed, for better consistency with other segment-oriented contour transformations. The change is backward compatible, and the default behavior hasn't changed (#3934).

[filterPen] Added ContourFilterPointPen, base pen for buffered contour operations, and OnCurveStartPointPen filter to ensure contours start with an on-curve point (#3934).

[cu2qu] Fixed difference in cython vs pure-python complex division by real number (#3930).

[varLib.avar] Refactored and added some new sub-modules and scripts (#3926).

varLib.avar.build module to build avar (and a missing fvar) binaries into a possibly empty TTFont,

varLib.avar.unbuild module to print a .designspace snippet that would generate the same avar binary,

varLib.avar.map module to take TTFont and do the mapping, in user/normalized space,

varLib.avar.plan module moved from varLib.avarPlanner.

The bare fonttools varLib.avar script is deprecated, in favour of fonttools varLib.avar.build (or unbuild).

[interpolatable] Clarify linear_sum_assignment backend options and minimal dependency usage (#3927).

[post] Speed up build_psNameMapping (#3923).

[ufoLib] Added typing annotations to fontTools.ufoLib (#3875).

4.59.2

[varLib] Clear USE_MY_METRICS component flags when inconsistent across masters (#3912).

[varLib.instancer] Avoid negative advance width/height values when instatiating HVAR/VVAR, (unlikely in well-behaved fonts) (#3918).

[subset] Fix shaping behaviour when pruning empty mark sets (#3915, harfbuzz/harfbuzz#5499).

[cu2qu] Fixed dot() product of perpendicular vectors not always returning exactly 0.0 in all Python implementations (#3911)

[varLib.instancer] Implemented fully-instantiating avar2 fonts (#3909).

[feaLib] Allow float values in VariableScalar's axis locations (#3906, #3907).

[cu2qu] Handle special case in calc_intersect for degenerate cubic curves where 3 to 4 control points are equal (#3904).

4.59.1

[featureVars] Update OS/2.usMaxContext if possible after addFeatureVariationsRaw (#3894).

[vhmtx] raise TTLibError('not enough data...') when hmtx/vmtx are truncated (#3843, #3901).

[feaLib] Combine duplicate features that have the same set of lookups regardless of the order in which those lookups are added to the feature (#3895).

[varLib] Deprecate varLib.mutator in favor of varLib.instancer. The latter provides equivalent full (static font) instancing in addition to partial VF instancing.
CLI users should replace fonttools varLib.mutator with fonttools varLib.instancer. API users should migrate to fontTools.varLib.instancer.instantiateVariableFont (#2680).

4.59.0

Removed hard-dependency on pyfilesystem2 (fs package) from fonttools[ufo] extra. This is replaced by the fontTools.misc.filesystem package, a stdlib-only, drop-in replacement for the subset of the pyfilesystem2's API used by fontTools.ufoLib. The latter should continue to work with the upstream fs (we even test with/without). However, clients who wish to continue using fs can do so by depending on it directly instead of via the fonttools[ufo] extra (#3885, #3620).

[xmlWriter] Replace illegal XML characters (e.g. control or non-characters) with "?" when dumping to ttx (#3868, #71).

[varLib.hvar] Fixed vertical metrics fields copy/pasta error (#3884).

Micro optimizations in ttLib and sstruct modules (#3878, #3879).

[unicodedata] Add Garay script to RTL_SCRIPTS (#3882).

... (truncated)

Changelog

Sourced from fonttools's changelog.

4.60.2 (released 2025-12-09)

Backport release Same as 4.61.0 but without "Drop support for EOL Python 3.9" change to allow downstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (#3994, #3999).

4.61.0 (released 2025-11-28)

[varLib.main]: SECURITY Only use basename(vf.filename) to prevent path traversal attacks when running fonttools varLib command, or code which invokes fonttools.varLib.main(). Fixes CVE-2025-66034, see: GHSA-768j-98cg-p3fv.

[feaLib] Sort BaseLangSysRecords by tag (#3986).

Drop support for EOL Python 3.9 (#3982).

[instancer] Support --remove-overlaps for fonts with CFF2 table (#3975).

[CFF2ToCFF] Add --remove-overlaps option (#3976).

[feaLib] Raise an error for rsub with NULL target (#3979).

[bezierTools] Fix logic bug in curveCurveIntersections (#3963).

[feaLib] Error when condition sets have the same name (#3958).

[cu2qu.ufo] skip processing empty glyphs to support sparse kerning masters (#3956).

[unicodedata] Update to Unicode 17. Require unicodedata2 >= 17.0.0 when installed with 'unicode' extra.

4.60.1 (released 2025-09-29)

[ufoLib] Reverted accidental method name change in UFOReader.getKerningGroupConversionRenameMaps that broke compatibility with downstream projects like defcon (#3948, #3947, robotools/defcon#478).

[ufoLib] Added test coverage for getKerningGroupConversionRenameMaps method (#3950).

[subset] Don't try to subset BASE table; pass it through by default instead (#3949).

[subset] Remove empty BaseRecord entries in MarkBasePos lookups (#3897, #3892).

[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (#3946).

[subset] Remove duplicate features when subsetting (#3945).

[Docs] Added documentation for the visitor module (#3944).

4.60.0 (released 2025-09-17)

[pointPen] Allow reverseFlipped parameter of DecomposingPointPen to take a ReverseFlipped enum value to control whether/how to reverse contour direction of flipped components, in addition to the existing True/False. This allows to set ReverseFlipped.ON_CURVE_FIRST to ensure that the decomposed outline starts with an on-curve point before being reversed, for better consistency with other segment-oriented contour transformations. The change is backward compatible, and the default behavior hasn't changed (#3934).

[filterPen] Added ContourFilterPointPen, base pen for buffered contour operations, and OnCurveStartPointPen filter to ensure contours start with an on-curve point (#3934).

[cu2qu] Fixed difference in cython vs pure-python complex division by real number (#3930).

[varLib.avar] Refactored and added some new sub-modules and scripts (#3926).

varLib.avar.build module to build avar (and a missing fvar) binaries into a possibly empty TTFont,

varLib.avar.unbuild module to print a .designspace snippet that would generate the same avar binary,

... (truncated)

Commits

78ba5e8 Release 4.60.2
c3f9979 macos-13 runner is no more, use macos-15-intel
8016403 Revert "Merge pull request #3982 from fonttools/drop-py39"
e691e3b Release 4.61.0
c2d540f Update NEWS.rst
3859753 Update NEWS.rst
26eb070 black
5ff73af Merge commit from fork
a696d5b varLib: only use the basename(vf.filename)
b00bc45 varLib_test: test path traversal in variable-font filename
Additional commits viewable in compare view

Updates nbconvert from 7.16.6 to 7.17.0

Release notes

Sourced from nbconvert's releases.

v7.17.0

7.17.0

(Full Changelog)

Enhancements made

Add support for arbitrary browser arguments #2227 (@shreve, @Carreau, @krassowski)

Bugs fixed

Fix QtPNGExporter returning empty bytes on macOS #2264 (@h3pdesign, @Carreau, @QuLogic)

Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) #2261 (@h3pdesign, @krassowski, @mberlanda, @minrk, @salmankadaya, @th3gowtham)

Fix get_export_names and get_exporter default args #2228 (@shreve, @krassowski)

PyPA-Compliant Summary #2226 (@hackowitz-af, @Carreau)

Maintenance and upkeep improvements

avoid cov environment on free-threaded Pythons #2267 (@minrk)

update pre-commit, and fix all issues. #2238 (@Carreau)

Drop test on 3.9, test on 3.13, 3.14, 3.14t #2237 (@Carreau)

Bump the actions group across 1 directory with 2 updates #2231 (@Carreau, @krassowski)

Replace @flaky.flaky decorate with pytest marker #2229 (@mgorny, @Carreau)

update to mermaid 11.10.0 #2224 (@bollwyvl, @krassowski)

Drop support for Python 3.8, fix the CI tests #2221 (@shreve, @minrk)

Documentation improvements

Use intersphinx_registry #2232 (@Carreau, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@bollwyvl (activity) | @Carreau (activity) | @h3pdesign (activity) | @hackowitz-af (activity) | @krassowski (activity) | @mberlanda (activity) | @mgorny (activity) | @minrk (activity) | @MSeal (activity) | @QuLogic (activity) | @salmankadaya (activity) | @shreve (activity) | @th3gowtham (activity)

Changelog

Sourced from nbconvert's changelog.

7.17.0

(Full Changelog)

Enhancements made

Add support for arbitrary browser arguments #2227 (@shreve, @Carreau, @krassowski)

Bugs fixed

Fix QtPNGExporter returning empty bytes on macOS #2264 (@h3pdesign, @Carreau, @QuLogic)

Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD) #2261 (@h3pdesign, @krassowski, @mberlanda, @minrk, @salmankadaya, @th3gowtham)

Fix get_export_names and get_exporter default args #2228 (@shreve, @krassowski)

PyPA-Compliant Summary #2226 (@hackowitz-af, @Carreau)

Maintenance and upkeep improvements

avoid cov environment on free-threaded Pythons #2267 (@minrk)

update pre-commit, and fix all issues. #2238 (@Carreau)

Drop test on 3.9, test on 3.13, 3.14, 3.14t #2237 (@Carreau)

Bump the actions group across 1 directory with 2 updates #2231 (@Carreau, @krassowski)

Replace @flaky.flaky decorate with pytest marker #2229 (@mgorny, @Carreau)

update to mermaid 11.10.0 #2224 (@bollwyvl, @krassowski)

Drop support for Python 3.8, fix the CI tests #2221 (@shreve, @minrk)

Documentation improvements

Use intersphinx_registry #2232 (@Carreau, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@bollwyvl (activity) | @Carreau (activity) | @h3pdesign (activity) | @hackowitz-af (activity) | @krassowski (activity) | @mberlanda (activity) | @mgorny (activity) | @minrk (activity) | @MSeal (activity) | @QuLogic (activity) | @salmankadaya (activity) | @shreve (activity) | @th3gowtham (activity)

Commits

21b35d8 Publish 7.17.0
c9ac1d1 Fix CVE-2025-53000: Secure Inkscape Windows path (registry first + block CWD)...
b13276d avoid cov environment on free-threaded Pythons (#2267)
7c7055f [pre-commit.ci] auto fixes from pre-commit.com hooks
74f3ddd Fix QtPNGExporter returning empty bytes on macOS
216550b fix links
39777ac try to comment fialing test
7b591ca ruff-check
6ec7638 parent
59414b3 fix mypy
Additional commits viewable in compare view

Updates pillow from 11.0.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Patch libavif for svt-av1 4.0 compatibility #9413 [@hugovk]

Other changes

Fix OOB Write with invalid tile extents #9427 [@radarhere]

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Deprecate getdata(), in favour of new get_flattened_data() #9292 [@radarhere]

Documentation

Specify APNG duration type when opening #9368 [@radarhere]

Added release notes for #9350 #9366 [@radarhere]

Update ImageMorph documentation #9349 [@radarhere]

Docs: update major bump cadence #9334 [@hugovk]

Add release notes for #9070 #9320 [@radarhere]

Updated Ubuntu version #9306 [@radarhere]

Update macOS tested Pillow versions #9265 [@radarhere]

Dependencies

Update harfbuzz to 12.3.0 #9355 [@radarhere]

Update xz to 5.8.2 #9343 [@radarhere]

Updated libjpeg-turbo to 3.1.3 #9333 [@radarhere]

Updated zlib-ng to 2.3.2 #9324 [@radarhere]

Updated libpng to 1.6.53 #9325 [@radarhere]

Update actions/checkout action to v6 #9323 [@renovate[bot]]

Update dependency mypy to v1.19.0 #9322 [@renovate[bot]]

Updated libpng to 1.6.51 #9305 [@radarhere]

Updated brotli to 1.2.0 #9284 [@radarhere]

Update libimagequant to 4.4.1 #9301 [@radarhere]

Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 #9312 [@radarhere]

Updated harfbuzz to 12.2.0 #9289 [@radarhere]

Update github-actions #9277 [@renovate[bot]]

Testing

Replace pre-commit with prek #9360 [@hugovk]

Test PyQt6 on Python 3.14 on Windows #9353 [@radarhere]

Test 32-bit Windows on Windows Server 2022 #9345 [@radarhere]

Correct variable type #9335 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

Commits

5158d98 12.1.1 version bump
9000313 Fix OOB Write with invalid tile extents (#9427)
cd01118 Patch libavif for svt-av1 4.0 compatibility
46f45f6 12.1.0 version bump
c9ac097 Simplify band splitting (#9291)
3baedf2 Deprecate getdata(), in favour of new get_flattened_data() (#9292)
b51a036 Specify APNG duration type when opening (#9368)
8d08e31 Add release notes for #9348 (#9369)
432707e Added release notes for #9348
2d58910 Specify APNG duration type when opening
Additional commits viewable in compare view

Updates setuptools from 70.2.0 to 78.1.1

Changelog

Sourced from setuptools's changelog.

v78.1.1

Bugfixes

More fully sanitized the filename in PackageIndex._download. (#4946)

v78.1.0

Features

Restore access to _get_vc_env with a warning. (#4874)

v78.0.2

Bugfixes

Postponed removals of deprecated dash-separated and uppercase fields in setup.cfg. All packages with deprecated configurations are advised to move before 2026. (#4911)

v78.0.1

Misc

#4909

v78.0.0

Bugfixes

Reverted distutils changes that broke the monkey patching of command classes. (#4902)

Deprecations and Removals

Setuptools no longer accepts options containing uppercase or dash characters in setup.cfg.

... (truncated)

Commits

8e4868a Bump version: 78.1.0 → 78.1.1
100e9a6 Merge pull request #4951
8faf1d7 Add news fragment.
2ca4a9f Rely on re.sub to perform the decision in one expression.
e409e80 Extract _sanitize method for sanitizing the filename.
250a6d1 Add a check to ensure the name resolves relative to the tmpdir.
d8390fe Extract _resolve_download_filename with test.
4e1e893 Merge https://github.com/jaraco/skeleton
3a3144f Fix typo: pyproject.license -> project.license (#4931)
d751068 Fix typo: pyproject.license -> project.license
Additional commits viewable in compare view

Updates tornado from 6.4.2 to 6.5

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2 releases/v3.2.1 releases/v3.2.0 releases/v3.1.1 releases/v3.1.0 releases/v3.0.2

... (truncated)

Commits

ab5f354 Merge pull request #3498 from bdarnell/final-6.5
3623024 Final release notes for 6.5.0
b39b892 Merge pull request #3497 from bdarnell/multipart-log-spam
cc61050 httputil: Raise errors instead of logging in multipart/form-data parsing
ae4a4e4 asyncio: Preserve contextvars across SelectorThread on Windows (#3479)
197ff13 Merge pull request #3496 from bdarnell/undeprecate-set-event-loop
c3d906c requirements: Upgrade tox to 4.26.0
a838977 testing: Remove deprecation warning filter for set_event_loop
d8e0d36 build: Fix free-threaded build, mark speedups module as no-GIL
bfe7489 Merge pull request #3492 from bdarnell/relnotes-6.5
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 6 updates in the /AI-Upscaling-With-NPU directory: | Package | From | To | | --- | --- | --- | | [filelock](https://github.com/tox-dev/py-filelock) | `3.13.1` | `3.20.3` | | [fonttools](https://github.com/fonttools/fonttools) | `4.56.0` | `4.60.2` | | [nbconvert](https://github.com/jupyter/nbconvert) | `7.16.6` | `7.17.0` | | [pillow](https://github.com/python-pillow/Pillow) | `11.0.0` | `12.1.1` | | [setuptools](https://github.com/pypa/setuptools) | `70.2.0` | `78.1.1` | | [tornado](https://github.com/tornadoweb/tornado) | `6.4.2` | `6.5` | Updates `filelock` from 3.13.1 to 3.20.3 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.13.1...3.20.3) Updates `fonttools` from 4.56.0 to 4.60.2 - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.56.0...4.60.2) Updates `nbconvert` from 7.16.6 to 7.17.0 - [Release notes](https://github.com/jupyter/nbconvert/releases) - [Changelog](https://github.com/jupyter/nbconvert/blob/main/CHANGELOG.md) - [Commits](jupyter/nbconvert@v7.16.6...v7.17.0) Updates `pillow` from 11.0.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.0.0...12.1.1) Updates `setuptools` from 70.2.0 to 78.1.1 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v70.2.0...v78.1.1) Updates `tornado` from 6.4.2 to 6.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.4.2...v6.5.0) --- updated-dependencies: - dependency-name: filelock dependency-version: 3.20.3 dependency-type: indirect dependency-group: uv - dependency-name: fonttools dependency-version: 4.60.2 dependency-type: indirect dependency-group: uv - dependency-name: nbconvert dependency-version: 7.17.0 dependency-type: indirect dependency-group: uv - dependency-name: pillow dependency-version: 12.1.1 dependency-type: indirect dependency-group: uv - dependency-name: setuptools dependency-version: 78.1.1 dependency-type: indirect dependency-group: uv - dependency-name: tornado dependency-version: '6.5' dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 2, 2026

praveenkk123 approved these changes Mar 2, 2026

View reviewed changes

praveenkk123 merged commit 3a62a66 into main Mar 2, 2026
2 of 3 checks passed

praveenkk123 deleted the dependabot/uv/AI-Upscaling-With-NPU/uv-182ab99265 branch March 2, 2026 23:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the uv group across 1 directory with 6 updates#369

Bump the uv group across 1 directory with 6 updates#369
praveenkk123 merged 1 commit intomainfrom
dependabot/uv/AI-Upscaling-With-NPU/uv-182ab99265

dependabot bot commented on behalf of github Mar 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 2, 2026

3.20.3

What's Changed

3.20.2

What's Changed

New Contributors

3.20.1

What's Changed

3.20.0

What's Changed

New Contributors

3.19.1

What's Changed

4.60.2

4.60.1

4.60.0

4.59.2

4.59.1

4.59.0

4.60.2 (released 2025-12-09)

4.61.0 (released 2025-11-28)

4.60.1 (released 2025-09-29)

4.60.0 (released 2025-09-17)

v7.17.0

7.17.0

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

7.17.0

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

12.1.1

Dependencies

Other changes

12.1.0

Deprecations

Documentation

Dependencies

Testing

Changelog (Pillow)

11.1.0 and newer

v78.1.1

Bugfixes

v78.1.0

Features

v78.0.2

Bugfixes

v78.0.1

Misc

v78.0.0

Bugfixes

Deprecations and Removals

Release notes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant