Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the pip group across 2 directories with 8 updates #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 18, 2024

Bumps the pip group with 6 updates in the /api directory:

Package From To
fastapi 0.85.2 0.109.1
langchain 0.0.181 0.2.3
python-multipart 0.0.6 0.0.7
pypdf 3.7.1 3.17.0
scikit-learn 1.2.1 1.5.0
llama-index 0.4.35.post1 0.10.13

Bumps the pip group with 4 updates in the /streamlit directory: langchain, scikit-learn, streamlit and transformers.

Updates fastapi from 0.85.2 to 0.109.1

Release notes

Sourced from fastapi's releases.

0.109.1

Security fixes

  • ⬆️ Upgrade minimum version of python-multipart to >=0.0.7 to fix a vulnerability when using form data with a ReDos attack. You can also simply upgrade python-multipart.

Read more in the advisory: Content-Type Header ReDoS.

Features

Refactors

  • ✅ Refactor tests for duplicate operation ID generation for compatibility with other tools running the FastAPI test suite. PR #10876 by @​emmettbutler.
  • ♻️ Simplify string format with f-strings in fastapi/utils.py. PR #10576 by @​eukub.
  • 🔧 Fix Ruff configuration unintentionally enabling and re-disabling mccabe complexity check. PR #10893 by @​jiridanek.
  • ✅ Re-enable test in tests/test_tutorial/test_header_params/test_tutorial003.py after fix in Starlette. PR #10904 by @​ooknimm.

Docs

Translations

  • 🌐 Add Spanish translation for docs/es/docs/external-links.md. PR #10933 by @​pablocm83.
  • 🌐 Update Korean translation for docs/ko/docs/tutorial/first-steps.md, docs/ko/docs/tutorial/index.md, docs/ko/docs/tutorial/path-params.md, and docs/ko/docs/tutorial/query-params.md. PR #4218 by @​SnowSuno.

... (truncated)

Commits

Updates langchain from 0.0.181 to 0.2.3

Release notes

Sourced from langchain's releases.

langchain==0.2.3

Release langchain==0.2.3

Changes since langchain==0.2.2

langchain[patch]: Release 0.2.3 (#22644) multiple: get rid of pyproject extras (#22581) langchain[minor]: add universal init_model (#22039)

langchain-together==0.1.3

Release langchain-together==0.1.3

Changes since langchain-together==0.1.2

together: bump langchain-core (#22616) together[patch]: Release 0.1.3 (#22615) together, upstage: bump minimum langchain-openai version (#22505) infra: rm unused # noqa violations (#22049) partners: bump core in packages implementing ls_params (#21868) core, standard tests, partner packages: add test for model params (#21677)

langchain-community==0.2.3

Release langchain-community==0.2.3

Changes since langchain-community==0.2.2

community[patch]: Release 0.2.3 (#22562) community[patch]: improve test setup to accurately test filtering of labels in neo4j (#22531) community[minor]: Add support for metadata indexing policy in Cassandra vector store (#22548) community[minor]: add user agent for web scraping loaders (#22480) community[minor]: Add native async support to SQLChatMessageHistory (#22065) community[minor]: Improve InMemoryVectorStore with ability to persist to disk and filter on metadata. (#22186) community[patch]: add detailed paragraph and example for BaichuanTextEmbeddings (#22031) community[minor]: Added filter search for LanceDB (#22461) community: fix huggingface deprecations (#22522) community[minor]: Vectara Integration Update - Streaming, FCS, Chat, updates to documentation and example notebooks (#21334)

langchain-nomic==0.1.2

Release langchain-nomic==0.1.2

Changes since langchain-nomic==0.1.1

nomic[patch]: Release 0.1.2 (#22561) embeddings: nomic embed vision (#22482)

langchain-mongodb==0.1.6

Release langchain-mongodb==0.1.6

Changes since langchain-mongodb==0.1.5

mongodb[patch]: Release 0.1.6 (#22501) community, milvus, pinecone, qdrant, mongo: Broadcast operation failure while using simsimd beyond v3.7.7 (#22271) infra: rm unused # noqa violations (#22049)

langchain-milvus==0.1.1

... (truncated)

Commits

Updates python-multipart from 0.0.6 to 0.0.7

Changelog

Sourced from python-multipart's changelog.

0.0.7 (2024-02-03)

  • Refactor header option parser to use the standard library instead of a custom RegEx #75.
Commits
  • c83e6da Version 0.0.7 (#77)
  • fb7d3c9 Bump pygments from 2.7.4 to 2.15.0 (#66)
  • 20f0ef6 ♻️ Refactor header option parser to use the standard library instead of a cus...
  • d3d16da Use latest invoke version (2.2.0) (#73)
  • 8e59feb Use single quotes to avoid special zsh chars '[' and ']' (#71)
  • 86d422c Update changelog URL (#68)
  • 3929f8e Move tests folder to root folder (#61)
  • See full diff in compare view

Updates pypdf from 3.7.1 to 3.17.0

Release notes

Sourced from pypdf's releases.

Version 3.17.0, 2023-10-29

What's new

Security (SEC)

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Developer Experience (DEV)

Maintenance (MAINT)

Testing (TST)

Code Style (STY)

Full Changelog

Version 3.16.4, 2023-10-10

What's new

Bug Fixes (BUG)

Maintenance (MAINT)

Full Changelog

Version 3.16.3, 2023-10-08

What's new

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 3.17.0, 2023-10-29

Security (SEC)

  • Infinite recursion when using PdfWriter(clone_from=reader) (#2264)

New Features (ENH)

  • Add parameter to select images to be removed (#2214)

Bug Fixes (BUG)

  • Correctly handle image mode 1 with FlateDecode (#2249)
  • Error when filling a value with parentheses #2268 (#2269)
  • Handle empty root outline (#2239)

Full Changelog

Version 3.16.4, 2023-10-10

Bug Fixes (BUG)

  • Avoid exceeding recursion depth when retrieving image mode (#2251)

Full Changelog

Version 3.16.3, 2023-10-08

Bug Fixes (BUG)

  • Invalid cm/tm in visitor functions (#2206)
  • Encrypt / decrypt Stream object dictionaries (#2228)
  • Support nested color spaces for the /DeviceN color space (#2241)
  • Images property fails if NullObject in list (#2215)

Developer Experience (DEV)

  • Unify mypy options and warn redundant workarounds (#2223)

Full Changelog

Version 3.16.2, 2023-09-24

Bug Fixes (BUG)

  • PDF size increases because of too high float writing precision (#2213)
  • Fix test_watermarking_reportlab_rendering() (#2203)

Full Changelog

Version 3.16.1, 2023-09-17

⚠️ The 'rename PdfWriter.create_viewer_preference to PdfWriter.create_viewer_preferences (#2190)' could be a breaking change for you, if you use it. As it was only introduced last week I'm confident enough that nobody will be affected though. Hence only the patch update.

... (truncated)

Commits

Updates scikit-learn from 1.2.1 to 1.5.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.5.0

We're happy to announce the 1.5.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Scikit-learn 1.4.2

We're happy to announce the 1.4.2 release.

This release only includes support for numpy 2.

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

Scikit-learn 1.4.1.post1

We're happy to announce the 1.4.1.post1 release.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

... (truncated)

Commits

Updates llama-index from 0.4.35.post1 to 0.10.13

Release notes

Sourced from llama-index's releases.

v0.10.13

New Features

  • Added a llama-pack for KodaRetriever, for on-the-fly alpha tuning (#11311)
  • Added support for mistral-large (#11398)
  • Last token pooling mode for huggingface embeddings models like SFR-Embedding-Mistral (#11373)
  • Added fsspec support to SimpleDirectoryReader (#11303)

Bug Fixes / Nits

  • Fixed an issue with context window + prompt helper (#11379)
  • Moved OpenSearch vector store to BasePydanticVectorStore (#11400)
  • Fixed function calling in fireworks LLM (#11363)
  • Made cohere embedding types more automatic (#11288)
  • Improve function calling in react agent (#11280)
  • Fixed MockLLM imports (#11376)

v0.10.12

No release notes provided.

v0.10.11

No release notes provided.

v0.10.10

No release notes provided.

v0.10.8

No release notes provided.

v0.10.7

New Features

  • Added Self-Discover llamapack (#10951)

Bug Fixes / Nits

  • Fixed linting in CICD (#10945)
  • Fixed using remote graph stores (#10971)
  • Added missing LLM kwarg in NoText response synthesizer (#10971)
  • Fixed openai import in rankgpt (#10971)
  • Fixed resolving model name to string in openai embeddings (#10971)
  • Off by one error in sentence window node parser (#10971)

v0.10.6

[0.10.6] - 2024-02-17

First, apologies for missing the changelog the last few versions. Trying to figure out the best process with 400+ packages.

At some point, each package will have a dedicated changelog.

... (truncated)

Changelog

Sourced from llama-index's changelog.

[0.10.13] - 2024-02-26

New Features

  • Added a llama-pack for KodaRetriever, for on-the-fly alpha tuning (#11311)
  • Added support for mistral-large (#11398)
  • Last token pooling mode for huggingface embeddings models like SFR-Embedding-Mistral (#11373)
  • Added fsspec support to SimpleDirectoryReader (#11303)

Bug Fixes / Nits

  • Fixed an issue with context window + prompt helper (#11379)
  • Moved OpenSearch vector store to BasePydanticVectorStore (#11400)
  • Fixed function calling in fireworks LLM (#11363)
  • Made cohere embedding types more automatic (#11288)
  • Improve function calling in react agent (#11280)
  • Fixed MockLLM imports (#11376)

[0.10.12] - 2024-02-22

New Features

  • Added llama-index-postprocessor-colbert-rerank package (#11057)
  • MyMagicAI LLM (#11263)
  • MariaTalk LLM (#10925)
  • Add retries to github reader (#10980)
  • Added FireworksAI embedding and LLM modules (#10959)

Bug Fixes / Nits

  • Fixed string formatting in weaviate (#11294)
  • Fixed off-by-one error in semantic splitter (#11295)
  • Fixed download_llama_pack for multiple files (#11272)
  • Removed BUILD files from packages (#11267)
  • Loosened python version reqs for all packages (#11267)
  • Fixed args issue with chromadb (#11104)

[0.10.11] - 2024-02-21

Bug Fixes / Nits

  • Fixed multi-modal LLM for async acomplete (#11064)
  • Fixed issue with llamaindex-cli imports (#11068)

[0.10.10] - 2024-02-20

I'm still a bit wonky with our publishing process -- apologies. This is just a version bump to ensure the changes that were supposed to happen in 0.10.9 actually did get published. (AF)

... (truncated)

Commits
  • 6d642a0 Logan/release v0.10.13 (#11408)
  • 78a4c9e fix prompt helper init (#11379)
  • 52383c7 Update opensearch vectorstore to PydanticVectorStore class (#11400)
  • 4077fee Astra DB Vector store, package rename for naming consistency (#11056)
  • 65290f5 Alpha Tuning Llama Pack: KodaRetriever (#11311)
  • 70d4a5c Only firefunction is function calling (#11363)
  • 3a10235 Elastic Search retrieval : Bug Fix for Cases when No Relationships Detected (...
  • 0b13b8d Add support for mistral-large (#11398)
  • 1f48dd9 Astra DB clients identify themselves as coming through LlamaIndex usage (#11396)
  • 6024956 Last token pooling for Huggingface models like SFR-Embedding-Mistral (#11373)
  • Additional commits viewable in compare view

Updates langchain from 0.0.164 to 0.2.3

Release notes

Sourced from langchain's releases.

langchain==0.2.3

Release langchain==0.2.3

Changes since langchain==0.2.2

langchain[patch]: Release 0.2.3 (#22644) multiple: get rid of pyproject extras (#22581) langchain[minor]: add universal init_model (#22039)

langchain-together==0.1.3

Release langchain-together==0.1.3

Changes since langchain-together==0.1.2

together: bump langchain-core (#22616) together[patch]: Release 0.1.3 (#22615) together, upstage: bump minimum langchain-openai version (#22505) infra: rm unused # noqa violations (#22049) partners: bump core in packages implementing ls_params (#21868) core, standard tests, partner packages: add test for model params (#21677)

langchain-community==0.2.3

Release langchain-community==0.2.3

Changes since langchain-community==0.2.2

community[patch]: Release 0.2.3 (#22562) community[patch]: improve test setup to accurately test filtering of labels in neo4j (#22531) community[minor]: Add support for metadata indexing policy in Cassandra vector store (#22548) community[minor]: add user agent for web scraping loaders (#22480) community[minor]: Add native async support to SQLChatMessageHistory (#22065) community[minor]: Improve InMemoryVectorStore with ability to persist to disk and filter on metadata. (#22186) community[patch]: add detailed paragraph and example for BaichuanTextEmbeddings (#22031) community[minor]: Added filter search for LanceDB (#22461) community: fix huggingface deprecations (#22522) community[minor]: Vectara Integration Update - Streaming, FCS, Chat, updates to documentation and example notebooks (#21334)

langchain-nomic==0.1.2

Release langchain-nomic==0.1.2

Changes since langchain-nomic==0.1.1

nomic[patch]: Release 0.1.2 (#22561) embeddings: nomic embed vision (#22482)

langchain-mongodb==0.1.6

Release langchain-mongodb==0.1.6

Changes since langchain-mongodb==0.1.5

mongodb[patch]: Release 0.1.6 (#22501) community, milvus, pinecone, qdrant, mongo: Broadcast operation failure while using simsimd beyond v3.7.7 (#22271) infra: rm unused # noqa violations (#22049)

langchain-milvus==0.1.1

... (truncated)

Commits

Updates scikit-learn from 1.2.1 to 1.5.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.5.0

We're happy to announce the 1.5.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_5_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Scikit-learn 1.4.2

We're happy to announce the 1.4.2 release.

This release only includes support for numpy 2.

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

Scikit-learn 1.4.1.post1

We're happy to announce the 1.4.1.post1 release.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1

This version supports Python versions 3.9 to 3.12.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

... (truncated)

Commits

Updates streamlit from 1.21.0 to 1.30.0

Release notes

Sourced from streamlit's releases.

1.30.0

What's Changed

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

Full Changelog: streamlit/streamlit@1.29.0...1.30.0

1.29.0

What's Changed

Breaking Changes 🛠

New Features 🎉

... (truncated)

Commits

Bumps the pip group with 6 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/tiangolo/fastapi) | `0.85.2` | `0.109.1` |
| [langchain](https://github.com/langchain-ai/langchain) | `0.0.181` | `0.2.3` |
| [python-multipart](https://github.com/andrew-d/python-multipart) | `0.0.6` | `0.0.7` |
| [pypdf](https://github.com/py-pdf/pypdf) | `3.7.1` | `3.17.0` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.2.1` | `1.5.0` |
| [llama-index](https://github.com/run-llama/llama_index) | `0.4.35.post1` | `0.10.13` |

Bumps the pip group with 4 updates in the /streamlit directory: [langchain](https://github.com/langchain-ai/langchain), [scikit-learn](https://github.com/scikit-learn/scikit-learn), [streamlit](https://github.com/streamlit/streamlit) and [transformers](https://github.com/huggingface/transformers).


Updates `fastapi` from 0.85.2 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](fastapi/fastapi@0.85.2...0.109.1)

Updates `langchain` from 0.0.181 to 0.2.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@v0.0.181...langchain==0.2.3)

Updates `python-multipart` from 0.0.6 to 0.0.7
- [Release notes](https://github.com/andrew-d/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.6...0.0.7)

Updates `pypdf` from 3.7.1 to 3.17.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@3.7.1...3.17.0)

Updates `scikit-learn` from 1.2.1 to 1.5.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.2.1...1.5.0)

Updates `llama-index` from 0.4.35.post1 to 0.10.13
- [Release notes](https://github.com/run-llama/llama_index/releases)
- [Changelog](https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md)
- [Commits](run-llama/llama_index@v0.4.35.post1...v0.10.13)

Updates `langchain` from 0.0.164 to 0.2.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@v0.0.181...langchain==0.2.3)

Updates `scikit-learn` from 1.2.1 to 1.5.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.2.1...1.5.0)

Updates `streamlit` from 1.21.0 to 1.30.0
- [Release notes](https://github.com/streamlit/streamlit/releases)
- [Commits](streamlit/streamlit@1.21.0...1.30.0)

Updates `transformers` from 4.28.1 to 4.38.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.28.1...v4.38.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-multipart
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pypdf
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: llama-index
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: streamlit
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: transformers
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 18, 2024
Copy link

coderabbitai bot commented Jun 18, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants