Skip to content

chore: dependabot updates#3098

Open
anish-sahoo wants to merge 17 commits into
mainfrom
dependabot-updates
Open

chore: dependabot updates#3098
anish-sahoo wants to merge 17 commits into
mainfrom
dependabot-updates

Conversation

@anish-sahoo

@anish-sahoo anish-sahoo commented Jul 9, 2026

Copy link
Copy Markdown
Member

Adds all the new safe dependency updates from dependabot prs

Updates

  • GitHub Actions: actions/checkout 6 -> 7 (#3068)
  • Go: github.com/getkin/kin-openapi 0.139.0 -> 0.140.0 (#3079)
  • Go: golang.org/x/net 0.53.0 -> 0.55.0 (#3092)
  • Rust: nix 0.31.2 -> 0.31.3 (#3084)
  • Rust: jsonschema 0.29.1 -> 0.46.6 (#3085) REVERTED — breaking API change (error.instance_path field changed to method), plus pulled in aws-lc-sys which requires cmake and breaks the manylinux wheel build
  • Python: transformers 5.2.0 -> 5.3.0 in examples/experimental/resnet-managed-weights (#3090)
  • Python: transformers 5.2.0 -> 5.3.0 in examples/streaming-text (#3091)
  • Python: transformers 5.2.0 -> 5.3.0 in examples/z-image-turbo (#3093)

dependabot Bot and others added 16 commits June 25, 2026 17:08
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.139.0 to 0.140.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.139.0...v0.140.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [nix](https://github.com/nix-rust/nix) from 0.31.2 to 0.31.3.
- [Changelog](https://github.com/nix-rust/nix/blob/master/CHANGELOG.md)
- [Commits](nix-rust/nix@v0.31.2...v0.31.3)

---
updated-dependencies:
- dependency-name: nix
  dependency-version: 0.31.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jsonschema](https://github.com/Stranger6667/jsonschema) from 0.29.1 to 0.46.6.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.29.1...cli-v0.46.6)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.46.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 4.52.3 to 5.3.0.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.52.3...v5.3.0)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 5.0.0rc3 to 5.3.0.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.0.0rc3...v5.3.0)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.55.0.
- [Commits](golang/net@v0.53.0...v0.55.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 5.0.0rc3 to 5.3.0.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.0.0rc3...v5.3.0)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…ntal/resnet-managed-weights/transformers-5.3.0' into dependabot
…/getkin/kin-openapi-0.140.0' into dependabot
@anish-sahoo anish-sahoo requested a review from a team as a code owner July 9, 2026 18:48
@ask-bonk

ask-bonk Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

@anish-sahoo Bonk workflow was cancelled.

View workflow run · To retry, trigger Bonk again.

@ask-bonk

ask-bonk Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

LGTM

github run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant