Skip to content

build(deps): bump the pip group across 19 directories with 15 updates#180

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/AWS/bedrock/multimodal/rag/pip-7098b01c36
Open

build(deps): bump the pip group across 19 directories with 15 updates#180
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/AWS/bedrock/multimodal/rag/pip-7098b01c36

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 17, 2026

Bumps the pip group with 1 update in the /AWS/bedrock/multimodal/rag directory: pillow.
Bumps the pip group with 2 updates in the /AWS/bedrock/rag-solutions/rag-foundations-workshop directory: pillow and unstructured.
Bumps the pip group with 1 update in the /LLM/RAG/rag-bi/application directory: cryptography.
Bumps the pip group with 1 update in the /LLM/large_laguage_models/document_oriented_agent directory: unstructured.
Bumps the pip group with 1 update in the /LLM/large_laguage_models/mixtral_8x7b directory: protobuf.
Bumps the pip group with 1 update in the /LLM/llama_index/samples/llama-index-milvus-example directory: nltk.
Bumps the pip group with 2 updates in the /LLM/llama_index/samples/mixtral_ollama directory: nltk and flask.
Bumps the pip group with 1 update in the /LLM/src/observe_with_langfuse directory: nltk.
Bumps the pip group with 1 update in the /LLM/src/vector-search-api directory: flask.
Bumps the pip group with 4 updates in the /data_management/dvc directory: cryptography, protobuf, orjson and pyasn1.
Bumps the pip group with 1 update in the /kubernetes/src/odh_base_ml_platform directory: mlflow.
Bumps the pip group with 1 update in the /kubernetes/src/odh_base_ml_platform/advanced/model_deploy_pipeline/model_build_push directory: werkzeug.
Bumps the pip group with 2 updates in the /ml-serving/bento-ml/yolov5/utils/google_app_engine directory: flask and pip.
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_distilbert directory: protobuf and pyasn1.
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_stablediffusion directory: protobuf and pyasn1.
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_yolov5s directory: protobuf and pyasn1.
Bumps the pip group with 8 updates in the /model-vcs/mlflow/simple_mlflow_fastapi_k8s directory:

Package From To
sqlparse 0.4.4 0.5.4
protobuf 6.32.1 6.33.5
orjson 3.10.5 3.11.6
flask 3.0.0 3.1.3
werkzeug 3.0.1 3.1.6
pyasn1 0.6.0 0.6.3
mlflow 3.1.0 3.8.0rc0
tornado 6.5.2 6.5.5

Bumps the pip group with 6 updates in the /model-vcs/mlflow/sklearn_mlflow directory:

Package From To
pillow 10.3.0 12.1.1
sqlparse 0.5.0 0.5.4
protobuf 4.25.8 5.29.6
flask 3.0.0 3.1.3
pyasn1 0.6.1 0.6.3
mlflow 3.2.0 3.8.0rc0

Bumps the pip group with 2 updates in the /ray/zerocopy_loading directory: protobuf and ray.

Updates pillow from 10.3.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Other changes

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Documentation

Dependencies

Testing

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

Updates pillow from 10.3.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Other changes

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Documentation

Dependencies

Testing

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

Updates unstructured from 0.14.3 to 0.18.18

Release notes

Sourced from unstructured's releases.

0.18.18

Fixes

  • Prevent path traversal in email MSG attachment filenames Fixed a security vulnerability (GHSA-gm8q-m8mv-jj5m) where malicious attachment filenames containing path traversal sequences could write files outside the intended directory. The fix normalizes both Unix and Windows path separators before sanitizing filenames, preventing cross-platform path traversal attacks in partition_msg functions

0.18.17

Enhancement

Features

Fixes

0.18.16

Enhancement

  • Speed up function _assign_hash_ids by 34% (codeflash)

Features

Fixes

0.18.15

What's Changed

New Contributors

Full Changelog: Unstructured-IO/unstructured@0.18.14...0.18.15

0.18.14

Enhancements

  • Speed up function sentence_count by 59% (codeflash)

  • Speed up function check_for_nltk_package by 111% (codeflash)

... (truncated)

Changelog

Sourced from unstructured's changelog.

0.18.18

Fixes

  • Prevent path traversal in email MSG attachment filenames Fixed a security vulnerability (GHSA-gm8q-m8mv-jj5m) where malicious attachment filenames containing path traversal sequences could write files outside the intended directory. The fix normalizes both Unix and Windows path separators before sanitizing filenames, preventing cross-platform path traversal attacks in partition_msg functions

0.18.17

Enhancement

Features

Fixes

0.18.16

Enhancement

  • Speed up function _assign_hash_ids by 34% (codeflash)

Features

Fixes

0.18.15

Enhancements

  • Speed up function ElementHtml._get_children_html by 234% (codeflash)
  • Speed up function group_broken_paragraphs by 30% (codeflash)

Features

Fixes

  • Bumped dependencies via pip-compile to address the crit CVE in:

0.18.14

Enhancements

  • Speed up function sentence_count by 59% (codeflash)
  • Speed up function check_for_nltk_package by 111% (codeflash)
  • Speed up function under_non_alpha_ratio by 76% (codeflash)

... (truncated)

Commits
  • b01d35b fix: sanitize MSG attachment filenames to prevent path traversal (GHS… (#4117)
  • 1c519ef Security Fixes - CVE Remediation (#4115)
  • c79cf3a updated dependancies to resolve open CVEs and cut a new version (#4108)
  • 8fd07fd feat: Add simple script to sync fork with local branch (#4102)
  • ef68384 enhancement: Speed up function _assign_hash_ids by 34% (#4101)
  • 2d44d73 Luke/sept16 CVE (#4094)
  • ab55d86 ⚡️ Speed up method ElementHtml._get_children_html by 234% (#4087)
  • 6aee131 ⚡️ Speed up function group_broken_paragraphs by 30% (#4088)
  • 1030a69 fix: update deps to resolve cve (#4093)
  • e3854d2 Setup Codeflash Github Actions to optimize all future code (#4082)
  • Additional commits viewable in compare view

Updates cryptography from 44.0.1 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.

.. v46-0-4:


46.0.4 - 2026-01-27

  • Dropped support for win_arm64 wheels_.
  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

46.0.3 - 2025-10-15


* Fixed compilation when using LibreSSL 4.2.0.

.. _v46-0-2:


46.0.2 - 2025-09-30

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.

.. _v46-0-1:

46.0.1 - 2025-09-16


* Fixed an issue where users installing via ``pip`` on Python 3.14 development
  versions would not properly install a dependency.
* Fixed an issue building the free-threaded macOS 3.14 wheels.

.. _v46-0-0:


46.0.0 - 2025-09-16

  • BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been removed.

... (truncated)

Commits

Updates unstructured from 0.14.3 to 0.18.18

Release notes

Sourced from unstructured's releases.

0.18.18

Fixes

  • Prevent path traversal in email MSG attachment filenames Fixed a security vulnerability (GHSA-gm8q-m8mv-jj5m) where malicious attachment filenames containing path traversal sequences could write files outside the intended directory. The fix normalizes both Unix and Windows path separators before sanitizing filenames, preventing cross-platform path traversal attacks in partition_msg functions

0.18.17

Enhancement

Features

Fixes

0.18.16

Enhancement

  • Speed up function _assign_hash_ids by 34% (codeflash)

Features

Fixes

0.18.15

What's Changed

New Contributors

Full Changelog: Unstructured-IO/unstructured@0.18.14...0.18.15

0.18.14

Enhancements

  • Speed up function sentence_count by 59% (codeflash)

  • Speed up function check_for_nltk_package by 111% (codeflash)

... (truncated)

Changelog

Sourced from unstructured's changelog.

0.18.18

Fixes

  • Prevent path traversal in email MSG attachment filenames Fixed a security vulnerability (GHSA-gm8q-m8mv-jj5m) where malicious attachment filenames containing path traversal sequences could write files outside the intended directory. The fix normalizes both Unix and Windows path separators before sanitizing filenames, preventing cross-platform path traversal attacks in partition_msg functions

0.18.17

Enhancement

Features

Fixes

0.18.16

Enhancement

  • Speed up function _assign_hash_ids by 34% (codeflash)

Features

Fixes

0.18.15

Enhancements

  • Speed up function ElementHtml._get_children_html by 234% (codeflash)
  • Speed up function group_broken_paragraphs by 30% (codeflash)

Features

Fixes

  • Bumped dependencies via pip-compile to address the crit CVE in:

0.18.14

Enhancements

  • Speed up function sentence_count by 59% (codeflash)
  • Speed up function check_for_nltk_package by 111% (codeflash)
  • Speed up function under_non_alpha_ratio by 76% (codeflash)

... (truncated)

Commits
  • b01d35b fix: sanitize MSG attachment filenames to prevent path traversal (GHS… (#4117)
  • 1c519ef Security Fixes - CVE Remediation (#4115)
  • c79cf3a updated dependancies to resolve open CVEs and cut a new version (#4108)
  • 8fd07fd feat: Add simple script to sync fork with local branch (#4102)
  • ef68384 enhancement: Speed up function _assign_hash_ids by 34% (#4101)
  • 2d44d73 Luke/sept16 CVE (#4094)
  • ab55d86 ⚡️ Speed up method ElementHtml._get_children_html by 234% (#4087)
  • 6aee131 ⚡️ Speed up function group_broken_paragraphs by 30% (#4088)
  • 1030a69 fix: update deps to resolve cve (#4093)
  • e3854d2 Setup Codeflash Github Actions to optimize all future code (#4082)
  • Additional commits viewable in compare view

Updates protobuf from 4.25.8 to 5.29.6

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

... (truncated)

Commits

Updates nltk from 3.8.2 to 3.9.3

Changelog

Sourced from nltk's changelog.

Version 3.9.3 2026-02-21

  • Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader (#3468)
  • Block path traversal/arbitrary reads in nltk.data for protocol-less refs (#3467)
  • Block path traversal/abs paths in corpus readers and FS pointers (#3479, #3480)
  • Validate external StanfordSegmenter JARs using SHA256 (#3477)
  • Add optional sandbox enforcement for filestring() (#3485)
  • Maintenance: downloader/zipped models, CI/tooling updates

Thanks to the following contributors to 3.9.3: Chris Clauss, Eric Kafe, HyperPS, purificant, Shivansh-Game, Christopher Smith

Version 3.9.2 2025-10-01

  • Update download checksums to use SHA256 in built index
  • Fix percentage escape in new-style string formatting
  • replace shortened URLs using goo.gl
  • Make Wordnet interoperable with various taggers and tagged corpora
  • Fix saving PerceptronTagger
  • Document how to reproduce old Wordnet studies
  • properly initialize Portuguese corpus reader
  • support for mixed rules conversion into Chomsky Normal Form
  • only import tkinter if a GUI is needed
  • issue #2112 with Corenlp
  • new environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL
  • Lesk defaults to most frequent sense in case of ties

Thanks to the following contributors to 3.9.2: Jose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu, Samer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq, Christopher Smith, Ryan Mannion

Version 3.9.1 2024-08-19

  • Fixed bug that prevented wordnet from loading

Version 3.9 2024-08-18

  • Fix security vulnerability CVE-2024-39705 (breaking change)
  • Replace pickled models (punkt, chunker, taggers) by new pickle-free "_tab" packages
  • No longer sort Wordnet synsets and relations (sort in calling function when required)
  • Only strip the last suffix in Wordnet Morphy, thus restricting synsets() results
  • Add Python 3.12 support
  • Many other minor fixes

Thanks to the following contributors to 3.8.2: Tom Aarsen, Cat Lee Ball, Veralara Bernhard, Carlos Brandt, Konstantin Chernyshev, Michael Higgins, Eric Kafe, Vivek Kalyan, David Lukes, Rob Malouf, purificant, Alex Rudnick, Liling Tan, Akihiro Yamazaki.

Version 3.8.1 2023-01-02

  • Resolve RCE vulnerability in localhost WordNet Browser (#3100)

... (truncated)

Commits

@dependabot
build(deps): bump the pip group across 19 directories with 15 updates
c15877e 
Bumps the pip group with 1 update in the /AWS/bedrock/multimodal/rag directory: [pillow](https://github.com/python-pillow/Pillow).
Bumps the pip group with 2 updates in the /AWS/bedrock/rag-solutions/rag-foundations-workshop directory: [pillow](https://github.com/python-pillow/Pillow) and [unstructured](https://github.com/Unstructured-IO/unstructured).
Bumps the pip group with 1 update in the /LLM/RAG/rag-bi/application directory: [cryptography](https://github.com/pyca/cryptography).
Bumps the pip group with 1 update in the /LLM/large_laguage_models/document_oriented_agent directory: [unstructured](https://github.com/Unstructured-IO/unstructured).
Bumps the pip group with 1 update in the /LLM/large_laguage_models/mixtral_8x7b directory: [protobuf](https://github.com/protocolbuffers/protobuf).
Bumps the pip group with 1 update in the /LLM/llama_index/samples/llama-index-milvus-example directory: [nltk](https://github.com/nltk/nltk).
Bumps the pip group with 2 updates in the /LLM/llama_index/samples/mixtral_ollama directory: [nltk](https://github.com/nltk/nltk) and [flask](https://github.com/pallets/flask).
Bumps the pip group with 1 update in the /LLM/src/observe_with_langfuse directory: [nltk](https://github.com/nltk/nltk).
Bumps the pip group with 1 update in the /LLM/src/vector-search-api directory: [flask](https://github.com/pallets/flask).
Bumps the pip group with 4 updates in the /data_management/dvc directory: [cryptography](https://github.com/pyca/cryptography), [protobuf](https://github.com/protocolbuffers/protobuf), [orjson](https://github.com/ijl/orjson) and [pyasn1](https://github.com/pyasn1/pyasn1).
Bumps the pip group with 1 update in the /kubernetes/src/odh_base_ml_platform directory: [mlflow](https://github.com/mlflow/mlflow).
Bumps the pip group with 1 update in the /kubernetes/src/odh_base_ml_platform/advanced/model_deploy_pipeline/model_build_push directory: [werkzeug](https://github.com/pallets/werkzeug).
Bumps the pip group with 2 updates in the /ml-serving/bento-ml/yolov5/utils/google_app_engine directory: [flask](https://github.com/pallets/flask) and [pip](https://github.com/pypa/pip).
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_distilbert directory: [protobuf](https://github.com/protocolbuffers/protobuf) and [pyasn1](https://github.com/pyasn1/pyasn1).
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_stablediffusion directory: [protobuf](https://github.com/protocolbuffers/protobuf) and [pyasn1](https://github.com/pyasn1/pyasn1).
Bumps the pip group with 2 updates in the /ml-serving/custom-serving/fastapi/ray/ray_yolov5s directory: [protobuf](https://github.com/protocolbuffers/protobuf) and [pyasn1](https://github.com/pyasn1/pyasn1).
Bumps the pip group with 8 updates in the /model-vcs/mlflow/simple_mlflow_fastapi_k8s directory:

| Package | From | To |
| --- | --- | --- |
| [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.4.4` | `0.5.4` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.32.1` | `6.33.5` |
| [orjson](https://github.com/ijl/orjson) | `3.10.5` | `3.11.6` |
| [flask](https://github.com/pallets/flask) | `3.0.0` | `3.1.3` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.0.1` | `3.1.6` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.0` | `0.6.3` |
| [mlflow](https://github.com/mlflow/mlflow) | `3.1.0` | `3.8.0rc0` |
| [tornado](https://github.com/tornadoweb/tornado) | `6.5.2` | `6.5.5` |

Bumps the pip group with 6 updates in the /model-vcs/mlflow/sklearn_mlflow directory:

| Package | From | To |
| --- | --- | --- |
| [pillow](https://github.com/python-pillow/Pillow) | `10.3.0` | `12.1.1` |
| [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.0` | `0.5.4` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `4.25.8` | `5.29.6` |
| [flask](https://github.com/pallets/flask) | `3.0.0` | `3.1.3` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.3` |
| [mlflow](https://github.com/mlflow/mlflow) | `3.2.0` | `3.8.0rc0` |

Bumps the pip group with 2 updates in the /ray/zerocopy_loading directory: [protobuf](https://github.com/protocolbuffers/protobuf) and [ray](https://github.com/ray-project/ray).


Updates `pillow` from 10.3.0 to 12.1.1
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.3.0...12.1.1)

Updates `pillow` from 10.3.0 to 12.1.1
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.3.0...12.1.1)

Updates `unstructured` from 0.14.3 to 0.18.18
- [Release notes](https://github.com/Unstructured-IO/unstructured/releases)
- [Changelog](https://github.com/Unstructured-IO/unstructured/blob/main/CHANGELOG.md)
- [Commits](Unstructured-IO/unstructured@0.14.3...0.18.18)

Updates `cryptography` from 44.0.1 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.1...46.0.5)

Updates `unstructured` from 0.14.3 to 0.18.18
- [Release notes](https://github.com/Unstructured-IO/unstructured/releases)
- [Changelog](https://github.com/Unstructured-IO/unstructured/blob/main/CHANGELOG.md)
- [Commits](Unstructured-IO/unstructured@0.14.3...0.18.18)

Updates `protobuf` from 4.25.8 to 5.29.6
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `nltk` from 3.8.2 to 3.9.3
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.8.2...3.9.3)

Updates `nltk` from 3.8.2 to 3.9.3
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.8.2...3.9.3)

Updates `flask` from 3.0.1 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.1...3.1.3)

Updates `werkzeug` from 3.0.3 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.0.3...3.1.6)

Updates `nltk` from 3.8.2 to 3.9.3
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.8.2...3.9.3)

Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.1...3.1.3)

Updates `cryptography` from 44.0.1 to 46.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.1...46.0.5)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `orjson` from 3.9.10 to 3.11.6
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.9.10...3.11.6)

Updates `pyasn1` from 0.5.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `pyopenssl` from 25.0.0 to 26.0.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@25.0.0...26.0.0)

Updates `mlflow` from 3.1.4 to 3.8.0rc0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.1.4...v3.8.0rc0)

Updates `werkzeug` from 3.0.3 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.0.3...3.1.6)

Updates `flask` from 2.2.5 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.1...3.1.3)

Updates `pip` from 23.3 to 26.0
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@23.3...26.0)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pyasn1` from 0.5.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pyasn1` from 0.5.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pyasn1` from 0.5.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `sqlparse` from 0.4.4 to 0.5.4
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.4.4...0.5.4)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `orjson` from 3.10.5 to 3.11.6
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.9.10...3.11.6)

Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.1...3.1.3)

Updates `werkzeug` from 3.0.1 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.0.3...3.1.6)

Updates `pyasn1` from 0.6.0 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `mlflow` from 3.1.0 to 3.8.0rc0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.1.4...v3.8.0rc0)

Updates `tornado` from 6.5.2 to 6.5.5
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.2...v6.5.5)

Updates `pillow` from 10.3.0 to 12.1.1
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.3.0...12.1.1)

Updates `sqlparse` from 0.5.0 to 0.5.4
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.4.4...0.5.4)

Updates `protobuf` from 4.25.8 to 5.29.6
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.1...3.1.3)

Updates `werkzeug` from 3.0.3 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.0.3...3.1.6)

Updates `pyasn1` from 0.6.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.5.1...v0.6.3)

Updates `mlflow` from 3.2.0 to 3.8.0rc0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.1.4...v3.8.0rc0)

Updates `protobuf` from 6.32.1 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `ray` from 2.44.0 to 2.54.0
- [Release notes](https://github.com/ray-project/ray/releases)
- [Commits](ray-project/ray@ray-2.44.0...ray-2.54.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.1.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 12.1.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: unstructured
  dependency-version: 0.18.18
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: unstructured
  dependency-version: 0.18.18
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 5.29.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: nltk
  dependency-version: 3.9.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: nltk
  dependency-version: 3.9.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: indirect
  dependency-group: pip
- dependency-name: nltk
  dependency-version: 3.9.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: indirect
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: indirect
  dependency-group: pip
- dependency-name: orjson
  dependency-version: 3.11.6
  dependency-type: indirect
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: pyopenssl
  dependency-version: 26.0.0
  dependency-type: indirect
  dependency-group: pip
- dependency-name: mlflow
  dependency-version: 3.8.0rc0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pip
  dependency-version: '26.0'
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: sqlparse
  dependency-version: 0.5.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: orjson
  dependency-version: 3.11.6
  dependency-type: indirect
  dependency-group: pip
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: mlflow
  dependency-version: 3.8.0rc0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: tornado
  dependency-version: 6.5.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 12.1.1
  dependency-type: indirect
  dependency-group: pip
- dependency-name: sqlparse
  dependency-version: 0.5.4
  dependency-type: indirect
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 5.29.6
  dependency-type: indirect
  dependency-group: pip
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: indirect
  dependency-group: pip
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: mlflow
  dependency-version: 3.8.0rc0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: indirect
  dependency-group: pip
- dependency-name: ray
  dependency-version: 2.54.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants