chore(deps): bump the uv group across 1 directory with 10 updates

[dependabot]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[greptile-apps]

Greptile Summary

This PR updates Python dependency versions and refreshes the uv lockfile. The main changes are:

• Bumps transformers, torch, and pytest version ranges in pyproject.toml.
• Updates resolved package versions and artifacts in uv.lock.
• Adds the transitive packages required by the refreshed dependency set.

Confidence Score: 5/5

The dependency refresh appears merge-safe based on the changed package manifests and lockfile.

Only dependency constraints and resolved lockfile entries changed, with no code-path modifications identified.

T-Rex Logs

What T-Rex did

• T-Rex validated the base-state constraint lock and attempted tests with transformers 4.57.1, torch 2.8.0, and pytest 8.4.2, observing that uv lock --check passed but sync, smoke, and pytest failed due to the lack of a CPython 3.14 wheel.
• T-Rex updated to the head state with constraint lock at transformers 5.3.0, torch 2.12.1, and pytest 9.0.3, and then executed uv lock --check, uv sync --frozen --all-extras --dev, direct dependency imports, and uv run pytest -q, all of which succeeded.

_{Ran code and verified through T-Rex}

_{Reviews (1): Last reviewed commit: "chore(deps): bump the uv group across 1 ..." | Re-trigger Greptile}