Skip to content

chore(deps): bump the backend-minor-patch group with 4 updates - #767

Merged
JArmandoAnaya merged 2 commits into
mainfrom
dependabot/uv/backend-minor-patch-3fa65746a5
Aug 25, 2026
Merged

chore(deps): bump the backend-minor-patch group with 4 updates#767
JArmandoAnaya merged 2 commits into
mainfrom
dependabot/uv/backend-minor-patch-3fa65746a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-patch group with 4 updates: uvicorn, transformers, ruff and ultralytics.

Updates uvicorn from 0.52.3 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)
Commits

Updates transformers from 5.15.0 to 5.15.1

Release notes

Sourced from transformers's releases.

Patch release: v5.15.1

Patch release v5.15.1

This patch most notably solves a few issues with DFlash and MTP candidate generators, as well as an issue where images could sometimes not be processed on accelerator if using Lanczos filter.

It contains the following commits:

Commits

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates ultralytics from 8.4.121 to 8.4.124

Release notes

Sourced from ultralytics's releases.

v8.4.124 - Restore dynamic image sizes for NMS exports (#25874)

🌟 Summary

🚀 Ultralytics v8.4.124 restores reliable dynamic-size inference for exports with embedded NMS, while improving training stability, deployment compatibility, performance, and documentation.

📊 Key Changes

  • Dynamic NMS exports restored — PR #25874

    • ONNX, OpenVINO, and TensorRT exports with dynamic=True and nms=True once again support runtime image heights and widths.
    • Exported NMS now consistently respects the configured max_det limit instead of using the number of anchors from the export image size.
    • NMS coordinate normalization now uses the actual input dimensions at inference time.
    • Dynamic ONNX OBB exports are padded appropriately so candidate selection is not limited by the traced image size.
    • The existing export test matrix remains unchanged, preserving broad backend coverage.

  • Improved CoreML attention export

    • CoreML mlprogram exports now use a more compatible attention implementation to avoid GPU compilation crashes on recent Apple systems.
    • This is scoped to CoreML export and does not alter normal model execution.

  • More efficient RT-DETR training and TensorRT inference

    • RT-DETR denoising queries are capped at the configured query budget, preventing dense images from causing excessive memory use.
    • RT-DETR TensorRT Top-K processing now uses grouped selection for faster candidate filtering.

  • Training reliability fixes

    • Resumed training now preserves the weights from the checkpoint instead of accidentally reloading the original pretrained weights.
    • Training seeds now reach dataloader workers, making different seeds produce different augmentation and sampling sequences while preserving reproducibility.
    • Dataset construction no longer mutates shared training configuration values.
    • Deterministic training settings are always cleared when training finishes or fails.
    • AutoBatch now raises a clear error when no tested batch size fits, rather than silently falling back to an unrelated default.

  • Prediction and result-processing improvements

    • Reusing a model for predict() or track() no longer carries filters such as classes, max_det, or NMS settings into later calls.
    • GPU-to-CPU transfers in Results.save_txt(), save_crop(), and summary() are consolidated, reducing per-object synchronization overhead.
    • Segmentation mask encoding now transfers data to the CPU more efficiently.
    • Depth tensor inputs now use the expected BGR image order.
    • Coordinate restoration now handles stretched, nonuniform resizing correctly.

  • Export and platform updates

    • ONNX INT8 export uses less peak memory by releasing intermediate graphs earlier.
    • TensorRT dynamic optimization profiles now handle dynamic input dimensions more safely.
    • macOS dependency constraints avoid affected NumPy releases associated with Accelerate warnings.
    • Platform documentation now describes depth datasets, depth-map viewing, training requirements, and updated workflow behavior.
    • Hailo documentation now reflects current hardware names, AI HAT+ support, compiler generations, precision notes, and fixed-shape deployment requirements.
    • Tracking documentation now identifies TrackTrack as the default tracker for documented workflows.
    • CoreML documentation includes an updated YOLO26 INT8 deployment tutorial.

🎯 Purpose & Impact

  • More dependable deployment across input sizes 📐 — Dynamic exported models can process images at runtime sizes without silently bypassing confidence filtering or the max_det limit.
  • Correcter detections and coordinates 🎯 — Runtime-aware normalization and nonuniform scaling fixes help ensure boxes, keypoints, and OBB predictions remain accurately positioned.
  • Lower memory use and faster execution ⚡ — RT-DETR query capping, grouped Top-K selection, consolidated GPU transfers, and improved ONNX memory handling benefit both training and inference.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the backend-minor-patch group with 4 updates
1e0645e 
Bumps the backend-minor-patch group with 4 updates: [uvicorn](https://github.com/Kludex/uvicorn), [transformers](https://github.com/huggingface/transformers), [ruff](https://github.com/astral-sh/ruff) and [ultralytics](https://github.com/ultralytics/ultralytics).


Updates `uvicorn` from 0.52.3 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.3...0.52.4)

Updates `transformers` from 5.15.0 to 5.15.1
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.15.0...v5.15.1)

Updates `ruff` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.4)

Updates `ultralytics` from 8.4.121 to 8.4.124
- [Release notes](https://github.com/ultralytics/ultralytics/releases)
- [Commits](ultralytics/ultralytics@v8.4.121...v8.4.124)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: transformers
  dependency-version: 5.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: ultralytics
  dependency-version: 8.4.124
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added backend visionset Python distribution — kernel, server, cli, mcp, formats dependencies Dependency updates (Dependabot) labels Aug 24, 2026
@JArmandoAnaya

JArmandoAnaya commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

@copilot Check what is the error and fix it.

Copilot AI commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

@copilot Check what is the error and fix it.

The failure came from the OpenAPI contract drift gate during astral-sh/setup-uv: fetch failed while trying to download uv version metadata (network/transient action fetch issue), not from the dependency bumps themselves. I checked the latest CI run on this branch (32863301545), and it currently has 0 failed jobs so far, including that gate passing.

Copilot AI requested a review from JArmandoAnaya August 25, 2026 15:05
@JArmandoAnaya
JArmandoAnaya merged commit 10bdd2a into main Aug 25, 2026
16 checks passed
@JArmandoAnaya
JArmandoAnaya deleted the dependabot/uv/backend-minor-patch-3fa65746a5 branch August 25, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JArmandoAnaya JArmandoAnaya Awaiting requested review from JArmandoAnaya

Assignees

No one assigned

Labels

backend visionset Python distribution — kernel, server, cli, mcp, formats dependencies Dependency updates (Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@JArmandoAnaya