From 64186add5cad0185f86d87b89ef65b53e2abb850 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 8 Aug 2025 07:16:19 +0000 Subject: [PATCH 1/5] build(deps): bump transformers in /jupyter/trustyai/ubi9-python-3.12 Bumps [transformers](https://github.com/huggingface/transformers) from 4.52.4 to 4.53.0. - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](https://github.com/huggingface/transformers/compare/v4.52.4...v4.53.0) --- updated-dependencies: - dependency-name: transformers dependency-version: 4.53.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] # Conflicts: # jupyter/trustyai/ubi9-python-3.12/requirements.txt --- jupyter/trustyai/ubi9-python-3.12/Pipfile | 2 +- jupyter/trustyai/ubi9-python-3.12/Pipfile.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) mode change 100755 => 100644 jupyter/trustyai/ubi9-python-3.12/Pipfile diff --git a/jupyter/trustyai/ubi9-python-3.12/Pipfile b/jupyter/trustyai/ubi9-python-3.12/Pipfile old mode 100755 new mode 100644 index 65df6a8725..dad02a2265 --- a/jupyter/trustyai/ubi9-python-3.12/Pipfile +++ b/jupyter/trustyai/ubi9-python-3.12/Pipfile @@ -17,7 +17,7 @@ torch = {version = "==2.6.0+cu126", index = "pytorch"} # More information available at: # - https://pypi.org/project/trustyai/ # - https://github.com/trustyai-explainability/trustyai-explainability-python/blob/main/requirements.txt -transformers = "~=4.52.1" +transformers = "~=4.53.0" datasets = "~=3.4.1" accelerate = "~=1.5.2" trustyai = "~=0.6.2" diff --git a/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock b/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock index 40a02d6678..0c6dc8f407 100644 --- a/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock +++ b/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "9abb20016435a97aa20886b724c50efc14170a456889bd1b2007524339703e5c" + "sha256": "7ff73879e048d80aa0b5d7a88cc8fa21805c4d8009535a98d6d27a1d56859153" }, "pipfile-spec": 6, "requires": { @@ -4356,12 +4356,12 @@ }, "transformers": { "hashes": [ - "sha256:203f5c19416d5877e36e88633943761719538a25d9775977a24fe77a1e5adfc7", - "sha256:aff3764441c1adc192a08dba49740d3cbbcb72d850586075aed6bd89b98203e6" + "sha256:7d8039ff032c01a2d7f8a8fe0066620367003275f023815a966e62203f9f5dd7", + "sha256:f89520011b4a73066fdc7aabfa158317c3934a22e3cd652d7ffbc512c4063841" ], "index": "pypi", "markers": "python_full_version >= '3.9.0'", - "version": "==4.52.4" + "version": "==4.53.0" }, "triton": { "hashes": [ From 531d713bfd24d88e68910961d1464aa671a9d714 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jiri=20Dan=C4=9Bk?= Date: Mon, 11 Aug 2025 09:49:45 +0200 Subject: [PATCH 2/5] NO-JIRA: bump `Transformers` dependency across Pipfiles and manifests, use 4.53 to fix CVEs and 4.55 to have the latest version in 3.12 image --- jupyter/trustyai/ubi9-python-3.11/Pipfile | 2 +- jupyter/trustyai/ubi9-python-3.12/Pipfile | 2 +- manifests/base/jupyter-trustyai-notebook-imagestream.yaml | 2 +- .../additional/jupyter-trustyai-cpu-py312-ubi9-imagestream.yaml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/jupyter/trustyai/ubi9-python-3.11/Pipfile b/jupyter/trustyai/ubi9-python-3.11/Pipfile index cf812c885e..96beffe464 100644 --- a/jupyter/trustyai/ubi9-python-3.11/Pipfile +++ b/jupyter/trustyai/ubi9-python-3.11/Pipfile @@ -17,7 +17,7 @@ torch = {version = "==2.6.0+cu126", index = "pytorch"} # More information available at: # - https://pypi.org/project/trustyai/ # - https://github.com/trustyai-explainability/trustyai-explainability-python/blob/main/requirements.txt -transformers = "~=4.52.1" +transformers = "~=4.53.3" datasets = "~=3.4.1" accelerate = "~=1.5.2" trustyai = "~=0.6.1" diff --git a/jupyter/trustyai/ubi9-python-3.12/Pipfile b/jupyter/trustyai/ubi9-python-3.12/Pipfile index dad02a2265..0e6c06ee3e 100644 --- a/jupyter/trustyai/ubi9-python-3.12/Pipfile +++ b/jupyter/trustyai/ubi9-python-3.12/Pipfile @@ -17,7 +17,7 @@ torch = {version = "==2.6.0+cu126", index = "pytorch"} # More information available at: # - https://pypi.org/project/trustyai/ # - https://github.com/trustyai-explainability/trustyai-explainability-python/blob/main/requirements.txt -transformers = "~=4.53.0" +transformers = "~=4.55.0" datasets = "~=3.4.1" accelerate = "~=1.5.2" trustyai = "~=0.6.2" diff --git a/manifests/base/jupyter-trustyai-notebook-imagestream.yaml b/manifests/base/jupyter-trustyai-notebook-imagestream.yaml index e614a883fe..8ba0572c4c 100644 --- a/manifests/base/jupyter-trustyai-notebook-imagestream.yaml +++ b/manifests/base/jupyter-trustyai-notebook-imagestream.yaml @@ -26,7 +26,7 @@ spec: [ {"name": "JupyterLab","version": "4.4"}, {"name": "TrustyAI", "version": "0.6"}, - {"name": "Transformers", "version": "4.50"}, + {"name": "Transformers", "version": "4.53"}, {"name": "Datasets", "version": "3.4"}, {"name": "Accelerate", "version": "1.5"}, {"name": "Torch", "version": "2.6"}, diff --git a/manifests/overlays/additional/jupyter-trustyai-cpu-py312-ubi9-imagestream.yaml b/manifests/overlays/additional/jupyter-trustyai-cpu-py312-ubi9-imagestream.yaml index b9a477e897..a189f8a103 100644 --- a/manifests/overlays/additional/jupyter-trustyai-cpu-py312-ubi9-imagestream.yaml +++ b/manifests/overlays/additional/jupyter-trustyai-cpu-py312-ubi9-imagestream.yaml @@ -25,7 +25,7 @@ spec: [ {"name": "JupyterLab","version": "4.4"}, {"name": "TrustyAI", "version": "0.6"}, - {"name": "Transformers", "version": "4.52"}, + {"name": "Transformers", "version": "4.55"}, {"name": "Datasets", "version": "3.4"}, {"name": "Accelerate", "version": "1.5"}, {"name": "Torch", "version": "2.6"}, From d4400d539a117eabf688528618045b87cff8d183 Mon Sep 17 00:00:00 2001 From: GitHub Actions Date: Mon, 11 Aug 2025 08:55:47 +0000 Subject: [PATCH 3/5] Update Pipfile.lock for Python 3.11 --- jupyter/trustyai/ubi9-python-3.11/Pipfile.lock | 8 ++++---- jupyter/trustyai/ubi9-python-3.11/requirements.txt | 6 +++--- jupyter/trustyai/ubi9-python-3.12/requirements.txt | 6 +++--- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/jupyter/trustyai/ubi9-python-3.11/Pipfile.lock b/jupyter/trustyai/ubi9-python-3.11/Pipfile.lock index cdb56cb699..3687739990 100644 --- a/jupyter/trustyai/ubi9-python-3.11/Pipfile.lock +++ b/jupyter/trustyai/ubi9-python-3.11/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "e9f4608f7a946e5665473441340d5fc2649ab2df42a5079f1c14eb64f6b262c9" + "sha256": "3aa54dcef2aa0048027af2b21c1db8fb626debc6323c5ab6887d111c883ad632" }, "pipfile-spec": 6, "requires": { @@ -4340,12 +4340,12 @@ }, "transformers": { "hashes": [ - "sha256:203f5c19416d5877e36e88633943761719538a25d9775977a24fe77a1e5adfc7", - "sha256:aff3764441c1adc192a08dba49740d3cbbcb72d850586075aed6bd89b98203e6" + "sha256:5aba81c92095806b6baf12df35d756cf23b66c356975fb2a7fa9e536138d7c75", + "sha256:b2eda1a261de79b78b97f7888fe2005fc0c3fabf5dad33d52cc02983f9f675d8" ], "index": "pypi", "markers": "python_full_version >= '3.9.0'", - "version": "==4.52.4" + "version": "==4.53.3" }, "triton": { "hashes": [ diff --git a/jupyter/trustyai/ubi9-python-3.11/requirements.txt b/jupyter/trustyai/ubi9-python-3.11/requirements.txt index 668e787b36..ee9eaa8a95 100644 --- a/jupyter/trustyai/ubi9-python-3.11/requirements.txt +++ b/jupyter/trustyai/ubi9-python-3.11/requirements.txt @@ -2999,9 +2999,9 @@ tqdm==4.67.1; python_version >= '3.7' \ traitlets==5.14.3; python_version >= '3.8' \ --hash=sha256:9ed0579d3502c94b4b3732ac120375cda96f923114522847de4b3bb98b96b6b7 \ --hash=sha256:b74e89e397b1ed28cc831db7aea759ba6640cb3de13090ca145426688ff1ac4f -transformers==4.52.4; python_full_version >= '3.9.0' \ - --hash=sha256:203f5c19416d5877e36e88633943761719538a25d9775977a24fe77a1e5adfc7 \ - --hash=sha256:aff3764441c1adc192a08dba49740d3cbbcb72d850586075aed6bd89b98203e6 +transformers==4.53.3; python_full_version >= '3.9.0' \ + --hash=sha256:5aba81c92095806b6baf12df35d756cf23b66c356975fb2a7fa9e536138d7c75 \ + --hash=sha256:b2eda1a261de79b78b97f7888fe2005fc0c3fabf5dad33d52cc02983f9f675d8 triton==3.2.0; platform_system == 'Linux' and platform_machine == 'x86_64' \ --hash=sha256:30ceed0eff2c4a73b14eb63e052992f44bbdf175f3fad21e1ac8097a772de7ee \ --hash=sha256:8009a1fb093ee8546495e96731336a33fb8856a38e45bb4ab6affd6dbc3ba220 \ diff --git a/jupyter/trustyai/ubi9-python-3.12/requirements.txt b/jupyter/trustyai/ubi9-python-3.12/requirements.txt index f5f01a2808..9418543da3 100644 --- a/jupyter/trustyai/ubi9-python-3.12/requirements.txt +++ b/jupyter/trustyai/ubi9-python-3.12/requirements.txt @@ -3040,9 +3040,9 @@ tqdm==4.67.1; python_version >= '3.7' \ traitlets==5.14.3; python_version >= '3.8' \ --hash=sha256:9ed0579d3502c94b4b3732ac120375cda96f923114522847de4b3bb98b96b6b7 \ --hash=sha256:b74e89e397b1ed28cc831db7aea759ba6640cb3de13090ca145426688ff1ac4f -transformers==4.52.4; python_full_version >= '3.9.0' \ - --hash=sha256:203f5c19416d5877e36e88633943761719538a25d9775977a24fe77a1e5adfc7 \ - --hash=sha256:aff3764441c1adc192a08dba49740d3cbbcb72d850586075aed6bd89b98203e6 +transformers==4.53.0; python_full_version >= '3.9.0' \ + --hash=sha256:7d8039ff032c01a2d7f8a8fe0066620367003275f023815a966e62203f9f5dd7 \ + --hash=sha256:f89520011b4a73066fdc7aabfa158317c3934a22e3cd652d7ffbc512c4063841 triton==3.2.0; platform_system == 'Linux' and platform_machine == 'x86_64' \ --hash=sha256:30ceed0eff2c4a73b14eb63e052992f44bbdf175f3fad21e1ac8097a772de7ee \ --hash=sha256:8009a1fb093ee8546495e96731336a33fb8856a38e45bb4ab6affd6dbc3ba220 \ From e3909ac7eed47aa1a536d88a9065bb3c7bdd8f19 Mon Sep 17 00:00:00 2001 From: GitHub Actions Date: Mon, 11 Aug 2025 09:59:37 +0000 Subject: [PATCH 4/5] Update Pipfile.lock for Python 3.12 --- jupyter/trustyai/ubi9-python-3.12/Pipfile.lock | 8 ++++---- jupyter/trustyai/ubi9-python-3.12/requirements.txt | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock b/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock index 0c6dc8f407..42701dfba8 100644 --- a/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock +++ b/jupyter/trustyai/ubi9-python-3.12/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "7ff73879e048d80aa0b5d7a88cc8fa21805c4d8009535a98d6d27a1d56859153" + "sha256": "fea856b1582a602b27f1a5ced1bd7d1b340dc66e53e912a80c256de20c65946e" }, "pipfile-spec": 6, "requires": { @@ -4356,12 +4356,12 @@ }, "transformers": { "hashes": [ - "sha256:7d8039ff032c01a2d7f8a8fe0066620367003275f023815a966e62203f9f5dd7", - "sha256:f89520011b4a73066fdc7aabfa158317c3934a22e3cd652d7ffbc512c4063841" + "sha256:15aa138a05d07a15b30d191ea2c45e23061ebf9fcc928a1318e03fe2234f3ae1", + "sha256:29d9b8800e32a4a831bb16efb5f762f6a9742fef9fce5d693ed018d19b106490" ], "index": "pypi", "markers": "python_full_version >= '3.9.0'", - "version": "==4.53.0" + "version": "==4.55.0" }, "triton": { "hashes": [ diff --git a/jupyter/trustyai/ubi9-python-3.12/requirements.txt b/jupyter/trustyai/ubi9-python-3.12/requirements.txt index 9418543da3..61b5e97466 100644 --- a/jupyter/trustyai/ubi9-python-3.12/requirements.txt +++ b/jupyter/trustyai/ubi9-python-3.12/requirements.txt @@ -3040,9 +3040,9 @@ tqdm==4.67.1; python_version >= '3.7' \ traitlets==5.14.3; python_version >= '3.8' \ --hash=sha256:9ed0579d3502c94b4b3732ac120375cda96f923114522847de4b3bb98b96b6b7 \ --hash=sha256:b74e89e397b1ed28cc831db7aea759ba6640cb3de13090ca145426688ff1ac4f -transformers==4.53.0; python_full_version >= '3.9.0' \ - --hash=sha256:7d8039ff032c01a2d7f8a8fe0066620367003275f023815a966e62203f9f5dd7 \ - --hash=sha256:f89520011b4a73066fdc7aabfa158317c3934a22e3cd652d7ffbc512c4063841 +transformers==4.55.0; python_full_version >= '3.9.0' \ + --hash=sha256:15aa138a05d07a15b30d191ea2c45e23061ebf9fcc928a1318e03fe2234f3ae1 \ + --hash=sha256:29d9b8800e32a4a831bb16efb5f762f6a9742fef9fce5d693ed018d19b106490 triton==3.2.0; platform_system == 'Linux' and platform_machine == 'x86_64' \ --hash=sha256:30ceed0eff2c4a73b14eb63e052992f44bbdf175f3fad21e1ac8097a772de7ee \ --hash=sha256:8009a1fb093ee8546495e96731336a33fb8856a38e45bb4ab6affd6dbc3ba220 \ From 19686aacee516e8c4bc59410d9ea496cc074c026 Mon Sep 17 00:00:00 2001 From: GitHub Actions Date: Mon, 11 Aug 2025 11:48:55 +0000 Subject: [PATCH 5/5] Update Pipfile.lock for Python 3.11 --- jupyter/pytorch+llmcompressor/ubi9-python-3.11/Pipfile.lock | 6 +++--- .../pytorch+llmcompressor/ubi9-python-3.11/requirements.txt | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/jupyter/pytorch+llmcompressor/ubi9-python-3.11/Pipfile.lock b/jupyter/pytorch+llmcompressor/ubi9-python-3.11/Pipfile.lock index 877cd2ea5a..6bd91e8ee2 100644 --- a/jupyter/pytorch+llmcompressor/ubi9-python-3.11/Pipfile.lock +++ b/jupyter/pytorch+llmcompressor/ubi9-python-3.11/Pipfile.lock @@ -7633,11 +7633,11 @@ }, "rich-toolkit": { "hashes": [ - "sha256:090b6c3f87261bc1ca4fe7fc9b0d3625b5af917ccdbcd316a26719e5d3ab20b9", - "sha256:e2404f1f088286f2f9d7f3a1a7591c8057792db466f6fecabfae283fa64126e2" + "sha256:3f5730e9f2d36d0bfe01cf723948b7ecf4cc355d2b71e2c00e094f7963128c09", + "sha256:ddb91008283d4a7989fd8ff0324a48773a7a2276229c6a3070755645538ef1bb" ], "markers": "python_version >= '3.8'", - "version": "==0.14.9" + "version": "==0.15.0" }, "rignore": { "hashes": [ diff --git a/jupyter/pytorch+llmcompressor/ubi9-python-3.11/requirements.txt b/jupyter/pytorch+llmcompressor/ubi9-python-3.11/requirements.txt index cf05f5d79e..4c4e845232 100644 --- a/jupyter/pytorch+llmcompressor/ubi9-python-3.11/requirements.txt +++ b/jupyter/pytorch+llmcompressor/ubi9-python-3.11/requirements.txt @@ -4242,9 +4242,9 @@ ray[cgraph]==2.48.0; python_version >= '3.9' \ rich==14.1.0; python_full_version >= '3.8.0' \ --hash=sha256:536f5f1785986d6dbdea3c75205c473f970777b4a0d6c6dd1b696aa05a3fa04f \ --hash=sha256:e497a48b844b0320d45007cdebfeaeed8db2a4f4bcf49f15e455cfc4af11eaa8 -rich-toolkit==0.14.9; python_version >= '3.8' \ - --hash=sha256:090b6c3f87261bc1ca4fe7fc9b0d3625b5af917ccdbcd316a26719e5d3ab20b9 \ - --hash=sha256:e2404f1f088286f2f9d7f3a1a7591c8057792db466f6fecabfae283fa64126e2 +rich-toolkit==0.15.0; python_version >= '3.8' \ + --hash=sha256:3f5730e9f2d36d0bfe01cf723948b7ecf4cc355d2b71e2c00e094f7963128c09 \ + --hash=sha256:ddb91008283d4a7989fd8ff0324a48773a7a2276229c6a3070755645538ef1bb rignore==0.6.4; python_version >= '3.8' \ --hash=sha256:028f62a7b0a6235bb3f03c9e7f342352e7fa4b3f08c761c72f9de8faee40ed9c \ --hash=sha256:0a8184fcf567bd6b6d7b85a0c138d98dd40f63054141c96b175844414c5530d7 \