build(deps): bump the pip-minor-patch-updates group across 2 directories with 4 updates by dependabot[bot] · Pull Request #101 · microsoft/dstoolkit-devcontainers

dependabot · 2025-11-01T23:09:33Z

Bumps the pip-minor-patch-updates group with 1 update in the / directory: ruff.
Bumps the pip-minor-patch-updates group with 3 updates in the /src/sample_pytorch_gpu_project/.devcontainer directory: torch, torchvision and mlflow.

Updates ruff from 0.13.2 to 0.14.3

Release notes

Sourced from ruff's releases.

0.14.3

Release Notes

Released on 2025-10-30.

Preview features

Respect --output-format with --watch (#21097)

[pydoclint] Fix false positive on explicit exception re-raising (DOC501, DOC502) (#21011)

[pyflakes] Revert to stable behavior if imports for module lie in alternate branches for F401 (#20878)

[pylint] Implement stop-iteration-return (PLR1708) (#20733)

[ruff] Add support for additional eager conversion patterns (RUF065) (#20657)

Bug fixes

Fix finding keyword range for clause header after statement ending with semicolon (#21067)

Fix syntax error false positive on nested alternative patterns (#21104)

[ISC001] Fix panic when string literals are unclosed (#21034)

[flake8-django] Apply DJ001 to annotated fields (#20907)

[flake8-pyi] Fix PYI034 to not trigger on metaclasses (PYI034) (#20881)

[flake8-type-checking] Fix TC003 false positive with future-annotations (#21125)

[pyflakes] Fix false positive for __class__ in lambda expressions within class definitions (F821) (#20564)

[pyupgrade] Fix false positive for TypeVar with default on Python <3.13 (UP046,UP047) (#21045)

Rule changes

Add missing docstring sections to the numpy list (#20931)

[airflow] Extend airflow.models..Param check (AIR311) (#21043)

[airflow] Warn that airflow....DAG.create_dagrun has been removed (AIR301) (#21093)

[refurb] Preserve digit separators in Decimal constructor (FURB157) (#20588)

Server

Avoid sending an unnecessary "clear diagnostics" message for clients supporting pull diagnostics (#21105)

Documentation

[flake8-bandit] Fix correct example for S308 (#21128)

Other changes

Clearer error message when line-length goes beyond threshold (#21072)

Contributors

@danparizher

@jvacek

@ntBre

@augustelalande

@prakhar1144

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.3

Released on 2025-10-30.

Preview features

Respect --output-format with --watch (#21097)

[pydoclint] Fix false positive on explicit exception re-raising (DOC501, DOC502) (#21011)

[pyflakes] Revert to stable behavior if imports for module lie in alternate branches for F401 (#20878)

[pylint] Implement stop-iteration-return (PLR1708) (#20733)

[ruff] Add support for additional eager conversion patterns (RUF065) (#20657)

Bug fixes

Fix finding keyword range for clause header after statement ending with semicolon (#21067)

Fix syntax error false positive on nested alternative patterns (#21104)

[ISC001] Fix panic when string literals are unclosed (#21034)

[flake8-django] Apply DJ001 to annotated fields (#20907)

[flake8-pyi] Fix PYI034 to not trigger on metaclasses (PYI034) (#20881)

[flake8-type-checking] Fix TC003 false positive with future-annotations (#21125)

[pyflakes] Fix false positive for __class__ in lambda expressions within class definitions (F821) (#20564)

[pyupgrade] Fix false positive for TypeVar with default on Python <3.13 (UP046,UP047) (#21045)

Rule changes

Add missing docstring sections to the numpy list (#20931)

[airflow] Extend airflow.models..Param check (AIR311) (#21043)

[airflow] Warn that airflow....DAG.create_dagrun has been removed (AIR301) (#21093)

[refurb] Preserve digit separators in Decimal constructor (FURB157) (#20588)

Server

Avoid sending an unnecessary "clear diagnostics" message for clients supporting pull diagnostics (#21105)

Documentation

[flake8-bandit] Fix correct example for S308 (#21128)

Other changes

Clearer error message when line-length goes beyond threshold (#21072)

Contributors

@danparizher

@jvacek

@ntBre

@augustelalande

@prakhar1144

@TaKO8Ki

... (truncated)

Commits

8737a2d Bump v0.14.3 (#21152)
3be3a10 [ty] Don't provide completions when in class or function definition (#21146)
13375d0 [ty] Use the top materialization of classes for narrowing in class-patterns f...
c0b04d4 [ty] Update "constraint implication" relation to work on constraints between ...
1c7ea69 [flake8-type-checking] Fix TC003 false positive with future-annotations...
9bacd19 [ty] Fix lookup of __new__ on instances (#21147)
f0fe6d6 Fix syntax error false positive on nested alternative patterns (#21104)
10bda3d [pyupgrade] Fix false positive for TypeVar with default on Python <3.13 (...
e55bc94 [ty] Reachability and narrowing for enum methods (#21130)
1b0ee46 [ty] Use range instead of custom IntIterable (#21138)
Additional commits viewable in compare view

Updates torch from 2.8.0 to 2.9.0

Release notes

Sourced from torch's releases.

2.9 Release Notes

PyTorch 2.9.0 Release Notes

Highlights

Backwards Incompatible Changes

Deprecations

New Features

Improvements

Bug fixes

Performance

Documentation

Developers

Security

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

... (truncated)

Commits

0fabc3b CUDA aarch64 12.6 and 12.8 builds fix triton constraints (#165022)
26e023a [MPS] Update OS version in error message (#164949)
6f12be2 CUDA 13.0 builds fix on Amazon Linux 2023 (#164893)
42f0c2c update the baseline data for the operator benchmark (#164789)
b015422 fix cpp extension distributed warning spew (#164785)
d4c4307 Fix docker build issue after 164575 (#164779)
3b57315 [ROCm] Increase binary build timeout to 5 hours (300 minutes) (#164770)
c74f057 Pin conda version for Docker builds (#164579)
fd36458 [Cherry-Pick] Work Around exposing statically linked libstdc++ CXX11 ABI stro...
2f6387e [CherrryPick][2.9] Cherry pick request for `Reapply "Make functionalization V...
Additional commits viewable in compare view

Updates torchvision from 0.23.0 to 0.24.0

Release notes

Sourced from torchvision's releases.

Torchvision 0.24 release

Improving KeyPoints and Rotated boxes support!

We are releasing a tutorial on how to use KeyPoint transformations in our Transforms on KeyPoints with a preview below!

[!NOTE] These features are still in BETA status. The API are unlikely to change, but we may have some rough edges and we may make some slight bug fixes in future releases. Please let us know if you encounter any issue!

Detailed changes

Improvements

[ops] Improve efficiency of the box_area and box_iou functions by eliminating the intermediate to "xyxy" conversion (#8992) [ops] Update box operations to support arbitrary batch dimensions (#9058) [utils] Add control for the background color of label text boxes (#9204) [transforms] Add support for uint8 image format to the GaussianNoise transform (#9169) [transforms] Accelerate the resize transform on machines with AVX512 (#9190) [transforms] Better error handling in RandomApply for empty list of transforms (#9130) [documentation] New tutorial for KeyPoints transforms (#9209) [documentation] Various documentation improvements (#9186, #9180, #9172) [code quality] Various code quality improvements (#9193, #9161, #9201, #9218, #9160)

Bug Fixes and deprecations

[transforms] Fix output of some geometric transforms for rotated boxes (#9181, #9175) [transforms] Fix clamping for key points and add sanitization feature (#9236, #9235) [datasets] Update download links to official repo for the Caltech-101 & 256 datasets (#9205) [ops] Raise error in drop_block[2,3]d by enforcing odd-sized block sizes (#9157) [io] Removed deprecated video_reader video decoding backend. (#9208)

Contributors

🎉 We're grateful for our community, which helps us improve Torchvision by submitting issues and PRs, and providing feedback and suggestions. The following persons have contributed patches for this release: @alperenunlu, @AndreiMoraru123, @atalman, @AntoineSimoulin, @5had3z, @dcasbol, @GdoongMathew, @hrsvrn, @JonasKlotz, @zklaus, @NicolasHug, @rdong8, @scotts, @get9, @diaz-esparza, @ZainRizvi, @Callidior, and @pytorch/xla-devs

Commits

7a9db90 Update min version to 3.10 for release 2.9 (#9239) (#9240)
0429d73 [release/0.24] cherrypicks for keypoints fix (#9238)
b919bd0 [release/0.24] cherrypicks for windows failing jobs (#9230)
973f5cd [release/0.24] Cherry pick (#9217)
e437e35 [release/0.24] update version (#9214)
fa174c6 [release/0.24] Remove prototype (#9211)
13b32e2 [release/0.24] Update jobs branch (#9212)
15f9128 Skeleton for keypoints tutorial (#9209)
a8dc530 Don't build video decoder homemade backend by default (#9208)
3010ff2 Address internal linters (#9201)
Additional commits viewable in compare view

Updates mlflow from 3.1.4 to 3.5.1

Release notes

Sourced from mlflow's releases.

v3.5.1

MLflow 3.5.1 is a patch release that includes several bug fixes and improvements.

Features:

[CLI] Add CLI command to list registered scorers by experiment (#18255, @alkispoly-db)

[Deployments] Add configuration option for long-running deployments client requests (#18363, @BenWilson2)

[Deployments] Create set_databricks_monitoring_sql_warehouse_id API (#18346, @dbrx-euirim)

[Prompts] Show instructions for prompt optimization on prompt registry (#18375, @TomeHirata)

Bug fixes:

[Evaluation] Validate if trace is None before accessing the value in mlflow.genai.evaluate (#18285, @srinathmkce)

[Evaluation] Revert "Add atomicity to job_start API (#18226)" (@serena-ruan)

[MCP] Move fastmcp to optional mcp extra (#18422, @harupy)

[Model Registry] Fix serialization bug in file store (#18365, @BenWilson2)

[Scoring] Pin uvloop<0.22 to fix mlserver compatibility (#18370, @harupy)

[Tracing] Fix a forward-compatibility issue with Span to_dict (#18439, @serena-ruan)

[Tracing] Whitelist notebook trace UI renderer to allow display with default security settings (#18446, @TomeHirata)

[Tracing] Fix attribute error in StrandsAgent tracing (#18409, @B-Step62)

[Tracing] Adjust truncation logic in trace previews (#18412, @BenWilson2)

[Tracing] Revert "Fix response handling in log_spans (#18280)" (#18349, @serena-ruan)

[Tracking] Adjust util for remote tracking server declaration (#18411, @BenWilson2)

[Tracking] Handle Databricks FMAPI style in openai autolog (#18354, @TomeHirata)

[Tracking] Fetch config after adding first record (#18338, @serena-ruan)

[UI] Fix span ID parsing in the UI (#18419, @daniellok-db)

[UI] Fix Chat message parsing within the trace summary view modal (#18454, @daniellok-db)

[UI] Fix an issue with display of the assessments pane in the UI (#18333, @BenWilson2)

Documentation updates:

[Docs] Fix Kubernetes Deployment Tutorial Code (#18381, @Maeril)

[Docs] Update the documentation around requirements for optimize_prompts (#18398, @TomeHirata)

[Docs] Fix example FastAPI in track user sessions (#18388, @maxscheijen)

v3.5.0

MLflow 3.5.0 includes several major features and improvements!

Major Features

🤖 Tracing support for Claude Code SDK: MLflow now provides a tracing integration for both the Claude Code CLI and SDK! Configure the autologging integration to track your prompts, Claude's responses, tool calls, and more. Check out this doc page to get started. (#18022, @smoorjani)

🎯 Flexible Prompt Optimization API: Introduced a new flexible API for prompt optimization with support for model switching and the GEPA algorithm, enabling more efficient prompt tuning with fewer rollouts. See the documentation to get started. (#18183, #18031, @TomeHirata)

🎨 Enhanced UI Onboarding: Improved in-product onboarding experience with trace quickstart drawer and updated homepage guidance to help users discover MLflow's latest features. (#18098, #18187, @B-Step62)

🔐 Security Middleware for Tracking Server: Added a security middleware layer to protect against DNS rebinding, CORS attacks, and other security threats. Read the documentation for configuration details. (#17910, @BenWilson2)

Features

[Tracing / Tracking] Add unlink_traces_from_run batch operation (#18316, @harupy)

[Tracing] Add batch trace link/unlink operations to DatabricksTracingRestStore (#18295, @harupy)

[Tracking] Claude Code SDK autologging support (#18022, @smoorjani)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.5.1 (2025-10-21)

MLflow 3.5.1 is a patch release that includes several bug fixes and improvements.

Features:

[CLI] Add CLI command to list registered scorers by experiment (#18255, @alkispoly-db)

[Deployments] Add configuration option for long-running deployments client requests (#18363, @BenWilson2)

[Deployments] Create set_databricks_monitoring_sql_warehouse_id API (#18346, @dbrx-euirim)

[Prompts] Show instructions for prompt optimization on prompt registry (#18375, @TomeHirata)

Bug fixes:

[Evaluation] Validate if trace is None before accessing the value in mlflow.genai.evaluate (#18285, @srinathmkce)

[Evaluation] Revert "Add atomicity to job_start API (#18226)" (@serena-ruan)

[MCP] Move fastmcp to optional mcp extra (#18422, @harupy)

[Model Registry] Fix serialization bug in file store (#18365, @BenWilson2)

[Scoring] Pin uvloop<0.22 to fix mlserver compatibility (#18370, @harupy)

[Tracing] Fix a forward-compatibility issue with Span to_dict (#18439, @serena-ruan)

[Tracing] Whitelist notebook trace UI renderer to allow display with default security settings (#18446, @TomeHirata)

[Tracing] Fix attribute error in StrandsAgent tracing (#18409, @B-Step62)

[Tracing] Adjust truncation logic in trace previews (#18412, @BenWilson2)

[Tracing] Revert "Fix response handling in log_spans (#18280)" (#18349, @serena-ruan)

[Tracking] Adjust util for remote tracking server declaration (#18411, @BenWilson2)

[Tracking] Handle Databricks FMAPI style in openai autolog (#18354, @TomeHirata)

[Tracking] Fetch config after adding first record (#18338, @serena-ruan)

[UI] Fix span ID parsing in the UI (#18419, @daniellok-db)

[UI] Fix Chat message parsing within the trace summary view modal (#18454, @daniellok-db)

[UI] Fix an issue with display of the assessments pane in the UI (#18333, @BenWilson2)

Documentation updates:

[Docs] Fix Kubernetes Deployment Tutorial Code (#18381, @Maeril)

[Docs] Update the documentation around requirements for optimize_prompts (#18398, @TomeHirata)

[Docs] Fix example FastAPI in track user sessions (#18388, @maxscheijen)

3.5.0 (2025-10-16)

MLflow 3.5.0 includes several major features and improvements!

Major Features

⚙️ Job Execution Backend: Introduced a new job execution backend infrastructure for running asynchronous tasks with individual execution pools, job search capabilities, and transient error handling. (#17676, #18012, #18070, #18071, #18112, #18049, @WeichenXu123)

🎯 Flexible Prompt Optimization API: Introduced a new flexible API for prompt optimization with support for model switching and the GEPA algorithm, enabling more efficient prompt tuning with fewer rollouts. See the documentation to get started. (#18183, #18031, @TomeHirata)

🎨 Enhanced UI Onboarding: Improved in-product onboarding experience with trace quickstart drawer and updated homepage guidance to help users discover MLflow's latest features. (#18098, #18187, @B-Step62)

🔐 Security Middleware for Tracking Server: Added a security middleware layer to protect against DNS rebinding, CORS attacks, and other security threats. Read the documentation for configuration details. (#17910, @BenWilson2)

Features

[Tracing / Tracking] Add unlink_traces_from_run batch operation (#18316, @harupy)

... (truncated)

Commits

c4ee72f Fix chat message parsing in summary view (#18454)
6e1c8fa Remove X-Frame-Options for notebook trace renderer (#18446)
d1facbc Fix Span to_dict format to be loadable with from_dict in old versions (#18439)
a03e133 Fix span ID parsing in the UI (#18419)
82fb4df [DOC-FIX] Fix Kubernetes Deployment Tutorial Code (#18381)
3cb519d Fix attribute error in StrandsAgent tracing (#18409)
90e0c40 Add configuration option for long-running deployments client requests (#18363)
9bea5b1 Show instructions for prompt optimization on prompt registry (#18375)
45376b3 Move fastmcp to optional mcp extra (#18422)
9c51398 Adjust util for remote tracking server declaration (#18411)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ies with 4 updates Bumps the pip-minor-patch-updates group with 1 update in the / directory: [ruff](https://github.com/astral-sh/ruff). Bumps the pip-minor-patch-updates group with 3 updates in the /src/sample_pytorch_gpu_project/.devcontainer directory: [torch](https://github.com/pytorch/pytorch), [torchvision](https://github.com/pytorch/vision) and [mlflow](https://github.com/mlflow/mlflow). Updates `ruff` from 0.13.2 to 0.14.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.13.2...0.14.3) Updates `torch` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.8.0...v2.9.0) Updates `torchvision` from 0.23.0 to 0.24.0 - [Release notes](https://github.com/pytorch/vision/releases) - [Commits](pytorch/vision@0.23.0...v0.24.0) Updates `mlflow` from 3.1.4 to 3.5.1 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.1.4...v3.5.1) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.14.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-minor-patch-updates - dependency-name: torch dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-minor-patch-updates - dependency-name: torchvision dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-minor-patch-updates - dependency-name: mlflow dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-minor-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2025

fujikosu approved these changes Nov 2, 2025

View reviewed changes

fujikosu merged commit 3055b9b into main Nov 2, 2025
2 checks passed

fujikosu deleted the dependabot/pip/pip-minor-patch-updates-fabd52c6c8 branch November 2, 2025 09:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the pip-minor-patch-updates group across 2 directories with 4 updates#101

build(deps): bump the pip-minor-patch-updates group across 2 directories with 4 updates#101
fujikosu merged 1 commit intomainfrom
dependabot/pip/pip-minor-patch-updates-fabd52c6c8

dependabot Bot commented on behalf of github Nov 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 1, 2025

0.14.3

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.14.3

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

2.9 Release Notes

PyTorch 2.9.0 Release Notes

Highlights

Backwards Incompatible Changes

Torchvision 0.24 release

Improving KeyPoints and Rotated boxes support!

Detailed changes

Improvements

Bug Fixes and deprecations

Contributors

v3.5.1

v3.5.0

Major Features

Features

3.5.1 (2025-10-21)

3.5.0 (2025-10-16)

Major Features

Features

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant