Skip to content

build(deps): bump the vision-maintenance group across 1 directory with 6 updates - #68

Open
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/pip/infra/vision-trainer/vision-maintenance-61c839c460
Open

build(deps): bump the vision-maintenance group across 1 directory with 6 updates#68
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/pip/infra/vision-trainer/vision-maintenance-61c839c460

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the vision-maintenance group with 6 updates in the /infra/vision-trainer directory:

Package From To
fastapi 0.116.1 0.141.1
uvicorn 0.35.0 0.52.3
python-multipart 0.0.31 0.0.32
pyyaml 6.0.2 6.0.3
ultralytics 8.3.203 8.4.121
mlflow 3.14.0 3.15.1

Updates fastapi from 0.116.1 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.35.0 to 0.52.3

Release notes

Sourced from uvicorn's releases.

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.2

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

... (truncated)

Commits

Updates python-multipart from 0.0.31 to 0.0.32

Release notes

Sourced from python-multipart's releases.

Version 0.0.32

What's Changed

Full Changelog: Kludex/python-multipart@0.0.31...0.0.32

Changelog

Sourced from python-multipart's changelog.

0.0.32 (2026-06-04)

  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
Commits

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates ultralytics from 8.3.203 to 8.4.121

Release notes

Sourced from ultralytics's releases.

v8.4.121 - Fix OpenVINO INT8 detection head scope (#25841)

🌟 Summary

v8.4.121 improves OpenVINO INT8 export reliability for YOLO26 models while delivering broad Platform API, dataset, annotation, deployment, and documentation updates. 🚀

📊 Key Changes

  • Fixed OpenVINO INT8 detection-head handling by @​glenn-jocher:

    • Replaced fragile PyTorch-based layer matching with exact names from the converted OpenVINO graph.
    • Keeps Detect decoding, DFL, and Sigmoid operations in floating point as intended.
    • Preserves strict NNCF validation during quantization.
    • Verified with a successful YOLO26n-P2 INT8 export using 55 exact ignored operations, with no unwanted FakeQuantize nodes. ✅
    • This directly addresses export failures reported in Sentry and is the most important change in this release.

  • Expanded Ultralytics Platform API documentation:

    • Documented the generated ultralytics-platform Python SDK alongside REST examples.
    • Updated endpoint paths, authentication, pagination, rate limits, response formats, and OpenAPI guidance.
    • Added coverage for images, dataset ingestion, exports, storage integrations, billing, usage, trash, training, deployments, and account APIs.
    • Clarified that workspace API keys have owner-level permissions and are managed by workspace owners.

  • Improved Platform dataset and annotation workflows 🏷️:

    • Added clearer documentation for URL, cloud-storage, and On Premise dataset imports.
    • Documented class merging/deletion, conflict handling, dataset readiness checks, clustering, version restore, and expanded annotation controls.
    • Added support documentation for COCO and NDJSON imports, while clarifying that Pascal VOC XML labels are not imported.
    • Documented annotation visibility controls, copy/paste workflows, and new keyboard shortcuts.

  • Updated Platform account, billing, and team documentation 💳:

    • Added the Usage tab, detailed credit metering, monthly credit expiration, auto top-up behavior, seat billing, renewals, and downgrade effects.
    • Clarified workspace roles, owner-only API keys, team invitations, seat reuse, ownership transfer, and team deletion.
    • Expanded activity exports, trash permissions, storage usage, and account deletion guidance.

  • Improved deployment and inference documentation 🌐:

    • Clarified dedicated endpoint lifecycle operations, authentication, rate limits, model replacement, health checks, metrics, logs, and capacity behavior.
    • Documented video inference, endpoint-specific API references, depth response options, and generated deployment URLs.

  • Security and CI improvements 🔒:

    • Prevented checkout credentials from being copied into Docker images.
    • Moved workflow secrets into environment variables instead of embedding them in scripts.
    • Updated self-hosted runner cleanup actions to v1.4.39.
    • Reduced individual SlowTests attempts from 180 to 120 minutes while retaining one retry.
    • Changed Dependabot GitHub Actions checks from daily to weekly.

  • Dependency and documentation maintenance 📚:

    • Bumped the package version to 8.4.121.
    • Allowed newer setuptools and NNCF versions, including NNCF 3.x.
    • Updated Rust inference examples to ultralytics-inference 0.0.35.
    • Corrected task banners and documentation to consistently represent YOLO26’s supported task coverage.

🎯 Purpose & Impact

... (truncated)

Commits
  • 3702ebe Fix OpenVINO INT8 detection head scope (#25841)
  • c3702da Bound SlowTests retry attempts (#25839)
  • c1b8d9d Update nncf requirement from <3.0.0,>=2.14.0 to >=2.14.0,<4.0.0 (#25825)
  • 476858d Update setuptools requirement from <81.0.0 to <85.0.0 (#25826)
  • e623868 Bump eviden-actions/clean-self-hosted-runner from v1.4.38 to v1.4.39 in /.git...
  • 72d20a8 Update the supported tasks banner and the task enumerations (#25807)
  • cb8f42c Standardize .github configuration (#25822)
  • 0805931 Document the ultralytics-platform SDK across the Platform docs (#25823)
  • e13eb54 Fix spelling in Platform account settings (#25821)
  • 0449ea0 Bump ultralytics-inference version to 0.0.35 in documentation (#25818)
  • Additional commits viewable in compare view

Updates mlflow from 3.14.0 to 3.15.1

Release notes

Sourced from mlflow's releases.

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

Bug fixes:

  • [Model Registry] Skip env_pack on ARM client images (#24762, @​qyc)
  • [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (#24799, @​PattaraS)

Documentation updates:

v3.15.0

MLflow 3.15.0 includes several major features and improvements

Major New Features

  • 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
  • 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
  • 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
  • ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
  • 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

  • [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
  • [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
  • [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
  • [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
  • [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
  • [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
  • [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
  • [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
  • [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
  • [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
  • [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
  • [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
  • [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
  • [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
  • [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
  • [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
  • [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.15.1 (2026-08-03)

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

Bug fixes:

  • [Model Registry] Skip env_pack on ARM client images (#24762) (#24835, @​qyc)
  • [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (+ lint rule) (#24799) (#24813, @​PattaraS)

Documentation updates:

3.15.0 (2026-07-31)

MLflow 3.15.0 includes several major features and improvements

Major New Features

  • 🧩 MCP Registry: A centralized catalog for registering, versioning, and sharing Model Context Protocol servers — with semantic-versioned configs, promotable aliases, tags, auto-discovered tools, and ready-made connection instructions for Claude Code and .mcp.json. Manage it from the UI, REST API, or Python!
  • 🤖 MLflow Assistant enhancements: The in-app AI assistant now supports multiple LLM providers (Claude Code, Codex, and OpenAI-compatible/Gateway endpoints) chosen from a single settings page, displays live per-session token usage and estimated cost in the composer, and is easier to set up — mlflow agent setup can enable it in one prompt, with API keys stored securely in the Gateway's LLM Connections.
  • 🗂️ Sharable table views: Save named views of the Runs table — capturing columns, order, widths, filters, and sort — and share them by URL.
  • ⚡ Proxy-less artifact upload/download via presigned URLs: Large artifact transfers can now bypass the tracking server and talk directly to cloud storage (e.g. S3) through presigned URLs, cutting server load and timeouts on big files. We fall back to proxied transfer automatically for backward compatibility.
  • 🖼️ Multi-modal attachments in LLM judges: {{ trace }} judges created with make_judge() can now see images captured in trace spans via a new get_span_image tool, which fetches attachments as base64 data URLs and passes them to multimodal models (Anthropic, Gemini, and OpenAI-compatible via litellm) — enabling evaluation of vision tasks, screenshots, and other visual content.

Other Assorted Features & Improvements:

  • [Tracing / Tracking] Add Pydantic AI 2.x autologging support (#24721, @​B-Step62)
  • [Tracing / UI] [3/3] Add action recommendation for low-value issue detection result (#24580, @​B-Step62)
  • [Gateway] Support per-endpoint budget policies in the AI Gateway (#24370, @​joelrobin18)
  • [Evaluation / Gateway] Add sap-ai-core:/ provider for SAP AI Core Orchestration v2 with extra_headers support (#24356, @​shivamxtech)
  • [Model Registry] [Model Registry] Migrate UC model artifact download to native temp-creds (#24576, @​AknA13)
  • [Gateway / Tracing / UI] [2/3] Simplify issue detection start modal (#24579, @​B-Step62)
  • [Tracing / UI] [1/3] Run issue detection in the background (#24578, @​B-Step62)
  • [Tracing] [BUG] Fix otel parent context propagation (#24444, @​iyashk)
  • [Model Registry] [Model Registry] Gate UC model-registry client on native /api/2.1 endpoints (#24517, @​AknA13)
  • [Docs / Tracking] Enable artifacts-only mode with workspaces (#24452, @​kramaranya)
  • [Tracing / UI] Stop eagerly prefetching full neighboring traces in tracing UI (#24411, @​DaoDaoNoCode)
  • [Docs / Gateway] Authenticate OpenAI-protocol coding agents through the RBAC gateway (#24294, @​joshuawong-db)
  • [Tracing] feat: add search traces to typescript sdk (#23660, @​WUMIKE233)
  • [Prompts / UI] Add per-tool cards with a Monaco JSON editor and Format action to the Playground (#24129, @​tanghaoji)
  • [Prompts / UI] Redesign Playground Tools settings with an Add-tools entry flow (#24102, @​tanghaoji)
  • [] feat: add Cursor model catalog with Auto and Composer 2.5 pricing (#24078, @​TomeHirata)
  • [Tracing / Tracking] Support numeric assessment trace filters (#23948, @​tanghaoji)

Bug fixes:

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot
dependabot Bot force-pushed the dependabot/pip/infra/vision-trainer/vision-maintenance-61c839c460 branch from 4b8ee47 to 78bb32b Compare August 10, 2026 19:28
@hoang12122 ChatGPT Codex Connector

hoang12122 commented Aug 21, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot
build(deps): bump the vision-maintenance group across 1 directory wit…
03f0353 
…h 6 updates

Bumps the vision-maintenance group with 6 updates in the /infra/vision-trainer directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.116.1` | `0.141.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.35.0` | `0.52.3` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.31` | `0.0.32` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [ultralytics](https://github.com/ultralytics/ultralytics) | `8.3.203` | `8.4.121` |
| [mlflow](https://github.com/mlflow/mlflow) | `3.14.0` | `3.15.1` |



Updates `fastapi` from 0.116.1 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.116.1...0.141.1)

Updates `uvicorn` from 0.35.0 to 0.52.3
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.35.0...0.52.3)

Updates `python-multipart` from 0.0.31 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.31...0.0.32)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `ultralytics` from 8.3.203 to 8.4.121
- [Release notes](https://github.com/ultralytics/ultralytics/releases)
- [Commits](ultralytics/ultralytics@v8.3.203...v8.4.121)

Updates `mlflow` from 3.14.0 to 3.15.1
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.14.0...v3.15.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vision-maintenance
- dependency-name: mlflow
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vision-maintenance
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vision-maintenance
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vision-maintenance
- dependency-name: ultralytics
  dependency-version: 8.4.114
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vision-maintenance
- dependency-name: uvicorn
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vision-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/infra/vision-trainer/vision-maintenance-61c839c460 branch from 78bb32b to 03f0353 Compare August 21, 2026 16:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hoang12122