Skip to content

Bump the production-dependencies group across 1 directory with 5 updates#503

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/production-dependencies-7c2acb2d4a
Closed

Bump the production-dependencies group across 1 directory with 5 updates#503
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/production-dependencies-7c2acb2d4a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
huggingface-hub 1.11.0 1.13.0
transformers 5.5.4 5.7.0
datasets 4.8.4 4.8.5
ultralytics 8.4.40 8.4.46
notebook-intelligence 2.3.2 4.6.0

Updates huggingface-hub from 1.11.0 to 1.13.0

Release notes

Sourced from huggingface-hub's releases.

[v1.13.0] new CLI commands and formatting, and HF URI parsing

🖥️ New CLI commands: repo cards, file listings, and dataset leaderboards

This release adds three new CLI capabilities for exploring Hub content. hf models card, hf datasets card, and hf spaces card fetch the README of any repo and print it to stdout, with --metadata (YAML frontmatter as JSON) and --text (prose only) flags for splitting the card into its structured and unstructured parts. Calling hf models ls <repo_id>, hf datasets ls <repo_id>, or hf spaces ls <repo_id> now switches from listing repos to listing files inside that repo, with --tree, -R, -h, and --revision options mirroring the existing hf buckets ls behavior. And hf datasets leaderboard <dataset_id> surfaces model scores submitted to a benchmark dataset, making it easy to compare models by score from the terminal.

# Get model card metadata as JSON
hf models card google/gemma-4-31B-it --metadata --format json
List files in a model repo (tree view with sizes)
hf models ls meta-llama/Llama-3.2-1B-Instruct --tree -h
Show top 5 models on SWE-bench
hf datasets leaderboard SWE-bench/SWE-bench_Verified --limit 5

📚 Documentation: CLI guide

🚀 Manage Spaces from the CLI

Three new hf spaces subcommands bring full lifecycle control to the terminal. hf spaces pause and hf spaces restart stop or rebuild a Space (with --factory-reboot for a clean rebuild), and hf spaces settings lets you configure sleep time and hardware in one call. A companion hf spaces hardware command lists all available hardware flavors with pricing, so you can discover options before changing settings. Pause and restart include a confirmation prompt (-y to skip) since they tear down the running container.

# Pause a Space when not in use (not billed while paused)
hf spaces pause username/my-space
Restart with a GPU
hf spaces settings username/my-space --hardware t4-medium --sleep-time 3600
List available hardware options
hf spaces hardware

📚 Documentation: CLI guide — Spaces

🔃 hf update replaces the auto-update prompt

The blocking interactive Y/n auto-update prompt at CLI startup is gone. It was catching too many non-interactive contexts (CI runners, Homebrew post-install hooks, Jupyter notebooks) and hanging automation. In its place, a single yellow stderr warning suggests running hf update — a new command that detects how hf was installed (Homebrew, standalone installer, or pip) and runs the right upgrade command. Set HF_HUB_DISABLE_UPDATE_CHECK=1 to silence the startup check entirely, for example in offline CI.

hf update

... (truncated)

Commits

Updates transformers from 5.5.4 to 5.7.0

Release notes

Sourced from transformers's releases.

Release v5.7.0

New Model additions

Laguna

Laguna is Poolside's mixture-of-experts language model family that extends standard SwiGLU MoE transformers with two key innovations. It features per-layer head counts allowing different decoder layers to have different query-head counts while sharing the same KV cache shape, and implements a sigmoid MoE router with auxiliary-loss-free load balancing that uses element-wise sigmoid of gate logits plus learned per-expert bias for router scoring.

Links: Documentation

DEIMv2

DEIMv2 (DETR with Improved Matching v2) is a real-time object detection model that extends DEIM with DINOv3 features and spans eight model sizes from X to Atto for diverse deployment scenarios. It uses a Spatial Tuning Adapter (STA) for larger variants to convert DINOv3's single-scale output into multi-scale features, while ultra-lightweight models employ pruned HGNetv2 backbones. The unified design achieves superior performance-cost trade-offs, with DEIMv2-X reaching 57.8 AP with only 50.3M parameters and DEIMv2-S being the first sub-10M model to exceed 50 AP on COCO.

Links: Documentation | Paper

Attention

Several attention-related bugs were fixed across multiple models, including a cross-attention cache type error in T5Gemma2 for long inputs, incorrect cached forward behavior in Qwen3.5's gated-delta-net linear attention, and a crash in GraniteMoeHybrid when no Mamba layers are present. Attention function dispatch was also updated to align with the latest model implementations.

Tokenizers

There was a bug in AutoTokenizer that caused the wrong tokenizer class to be initialized. This caused regressions in models like DeepSeek R1.

Generation

Continuous batching generation received several fixes and improvements, including correcting KV deduplication and memory estimation for long sequences (16K+), and removing misleading warnings about num_return_sequences and other unsupported features that were incorrectly firing even when functionality worked correctly. Documentation for per-request sampling parameters was also added.

... (truncated)

Commits

Updates datasets from 4.8.4 to 4.8.5

Release notes

Sourced from datasets's releases.

4.8.5

Main bug fixes

Other improvements and bug fixes

New Contributors

Full Changelog: huggingface/datasets@4.8.4...4.8.5

Commits

Updates ultralytics from 8.4.40 to 8.4.46

Commits

Updates notebook-intelligence from 2.3.2 to 4.6.0

Release notes

Sourced from notebook-intelligence's releases.

v4.6.0

What's Changed

New Contributors

Full Changelog: plmbr/notebook-intelligence@v4.5.0...v4.6.0

v4.5.0

What's Changed

New Contributors

Full Changelog: plmbr/notebook-intelligence@v4.4.0...v4.5.0

v4.4.0

  • Add Model Selection for Claude Code Mode.

... (truncated)

Commits
  • 07d1d68 Release 4.6.0 (#165)
  • cedb0a6 bump version to 4.6.0
  • 92afcdc fix claude session picker list scroll issue
  • 1765078 docs: restructure README and add operator/security/privacy guides (#158)
  • 25739e8 test: add TypeScript test infrastructure with Jest (#157)
  • 176e3ad fix(ui): disconnect configChanged handlers on component unmount (#156)
  • 482e730 fix(api): disconnect WebSocket message handlers when request ends (#155)
  • 662c0fe fix(claude): guard _send_claude_agent_request against disconnect race (#154)
  • 5dc80d1 fix(skill_github_import): reject tarball entries with absolute paths (#153)
  • 4c295cf fix(claude): normalize Anthropic credentials (#152)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major python:uv Pull requests that update python:uv code labels May 1, 2026
@github-actions

github-actions Bot commented May 1, 2026

Copy link
Copy Markdown

🚀 First Pull Request 🎉
Welcome to senselab, and thank you for submitting your first pull request!
We’re thrilled to have your contribution. Our team will review it as soon as possible.
Stay engaged, and let’s make behavioral data analysis even more powerful together!

@dependabot
Bump the production-dependencies group across 1 directory with 5 updates
584c59e 
Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.11.0` | `1.13.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.5.4` | `5.7.0` |
| [datasets](https://github.com/huggingface/datasets) | `4.8.4` | `4.8.5` |
| [ultralytics](https://github.com/ultralytics/ultralytics) | `8.4.40` | `8.4.46` |
| [notebook-intelligence](https://github.com/notebook-intelligence/notebook-intelligence) | `2.3.2` | `4.6.0` |



Updates `huggingface-hub` from 1.11.0 to 1.13.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.11.0...v1.13.0)

Updates `transformers` from 5.5.4 to 5.7.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.5.4...v5.7.0)

Updates `datasets` from 4.8.4 to 4.8.5
- [Release notes](https://github.com/huggingface/datasets/releases)
- [Commits](huggingface/datasets@4.8.4...4.8.5)

Updates `ultralytics` from 8.4.40 to 8.4.46
- [Release notes](https://github.com/ultralytics/ultralytics/releases)
- [Commits](ultralytics/ultralytics@v8.4.40...v8.4.46)

Updates `notebook-intelligence` from 2.3.2 to 4.6.0
- [Release notes](https://github.com/notebook-intelligence/notebook-intelligence/releases)
- [Changelog](https://github.com/notebook-intelligence/notebook-intelligence/blob/main/CHANGELOG.md)
- [Commits](plmbr/notebook-intelligence@v2.3.2...v4.6.0)

---
updated-dependencies:
- dependency-name: datasets
  dependency-version: 4.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: huggingface-hub
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: notebook-intelligence
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: transformers
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ultralytics
  dependency-version: 8.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the production-dependencies group with 5 updates Bump the production-dependencies group across 1 directory with 5 updates May 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/production-dependencies-7c2acb2d4a branch from 130ff0e to 584c59e Compare May 5, 2026 05:06
@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 2, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/production-dependencies-7c2acb2d4a branch June 2, 2026 05:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file major python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants