[dependabot]

Bumps the python-minor-patch group with 9 updates:

Package	From	To
ruff	0.16.8	0.16.10
mypy	2.3.1	2.4.0
cyclonedx-bom	7.4.0	7.5.0
semgrep	1.177.0	1.179.0
commitizen	4.18.1	4.19.2
langgraph	1.2.11	1.2.14
cryptography	50.0.1	50.0.2
sqlalchemy	2.0.54	2.1.4
sentence-transformers	6.0.1	6.1.0

Updates ruff from 0.16.8 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

0.16.9

Released on 2026-09-24.

Preview features

• [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

• [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
• [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

• Update LibCST-based fixes for Python 3.15 (#28616)

... (truncated)

Commits

• 3265ed1 Bump version to 0.16.10 (#29055)
• e786964 Authorize shared PR security-review workflow to publish findings (#29052)
• a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
• b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
• 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
• 317e0a3 [ty] Bound nested callable signature display (#29049)
• 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
• 56180bc [ty] Specialize instance members once (#29043)
• aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
• 2d25346 [ty] Improve unresolved-import documentation (#29039)
• Additional commits viewable in compare view

Updates mypy from 2.3.1 to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.15 Support

Mypy 2.4 supports running on Python 3.15 and type checking most Python 3.15 features. This includes the new builtin sentinel type for sentinel values (PEP 661), which mypy now supports (see below for details). Lazy imports (PEP 810) and unpacking in comprehensions (PEP 798) are also supported. Closed TypedDicts (PEP 728) have been supported since mypy 2.2, but the extra_items TypedDict argument, also introduced in PEP 728, is still unsupported. Support for extra_items will be added in a future mypy release.

Native Parser Enabled by Default

Mypy now uses the new native parser by default. It's based on the Ruff parser, and it's significantly faster than the legacy parser, which uses the stdlib ast module. The native parser also has other benefits:

• You can target newer Python versions and use recent Python syntax even when running mypy on an older Python version. For example, you can use --python-version 3.15 when running mypy on Python 3.14.
• Stub files can use syntax that is newer than the target Python version. For example, stubs can use the PEP 695 generic class syntax (class Box[T]: ...) when running on or targeting Python 3.10.
• Parallel type checking requires the native parser.

The legacy parser is still available through --no-native-parser, or native_parser = False in the config file (native_parser = false under [tool.mypy] in pyproject.toml). We are planning to remove the legacy parser in early 2027. If you run into a problem with the native parser, please report it on the issue tracker.

Unlike the legacy parser, the native parser doesn't support type comments for variables defined by for and with statements. These type comments are silently ignored, and the types of the variables are

... (truncated)

Commits

• 935ba8a Bump version to 2.4.0
• 334a678 Add link for PR 22066 in mypy 2.4 changelog (#22082)
• fe69660 Finalize mypy 2.4 changelog (#22080)
• 541fd87 Various mypy 2.4 changelog updates (#22077)
• b231182 Update native parser docs (#22078)
• 04fe42c Initial Changelog for Mypy 2.4 (#22071)
• 0617494 Quick fix for non UTF-8 encodings with new parser (#22066)
• b2f9b60 Bump librt to 0.16.0 (#22067)
• 9d798dc Sync typeshed (#22054)
• 0861bb6 Reduce max protocol stack size to 20 (#22053)
• Additional commits viewable in compare view

Updates cyclonedx-bom from 7.4.0 to 7.5.0

Release notes

Sourced from cyclonedx-bom's releases.

v7.5.0 (2026-09-29)

Features

• deps: Support chardet v7 (#1110, e1e1040)

---

What's Changed

• chore: fix dep constriants by @​jkowalleck in CycloneDX/cyclonedx-python#1111
• feat(deps): support chardet v7 by @​tamird in CycloneDX/cyclonedx-python#1110
• chore(deps-dev): Update uv requirement from 0.12.10 to 0.12.17 by @​dependabot[bot] in CycloneDX/cyclonedx-python#1108
• chore(deps): Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by @​dependabot[bot] in CycloneDX/cyclonedx-python#1103

New Contributors

• @​tamird made their first contribution in CycloneDX/cyclonedx-python#1110

Full Changelog: CycloneDX/cyclonedx-python@v7.4.0...v7.5.0

Changelog

Sourced from cyclonedx-bom's changelog.

v7.5.0 (2026-09-29)

Features

• deps: Support chardet v7 (#1110, e1e1040)

Commits

• fc11987 chore(release): 7.5.0
• 963f80f chore(deps): Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#1103)
• 0bcfff0 chore(deps-dev): Update uv requirement from 0.12.10 to 0.12.17 (#1108)
• e1e1040 feat(deps): support chardet v7 (#1110)
• 1a8a953 chore: fix dep constriants (#1111)
• See full diff in compare view

Updates semgrep from 1.177.0 to 1.179.0

Release notes

Sourced from semgrep's releases.

Release v1.179.0

1.179.0 - 2026-10-01

### Added

• Semgrep Supply Chain now parses Bun bun.lock lockfiles (text format, lockfileVersion 1) paired with a package.json manifest, including the dependency relationships between packages. The deprecated binary bun.lockb format is still unsupported. (SC-2419)

### Changed

• Pro: Stabilize file processing order in inter-file analysis, which was previously arbitrary but deterministic. We believe this is very unlikely to affect findings but there is a theoretical path by which it could in certain rare cases. (stabilize)

• c grammar update (v0.24.2):

  • No verified user-facing improvements: Agent feature assessment was not run for this grammar.

  (c-v0.24.2)

• cpp grammar update (v0.23.4):

  • C++ target parsing now supports attributes on namespace definitions and preserves their arguments in the AST.
  • C++ target parsing now supports reference typedef declarators, including references to arrays and functions.
  • C++ target parsing now supports C++20 lambda pack init-captures such as [...values = args] and [&...values = args]. Capture-sensitive matching remains an existing limitation.
  • C++ target parsing now supports GNU inline-assembly output operands that are expressions, including pointer dereferences and array accesses.
  • C++ target parsing now supports composite type arguments in alignas declarations, such as alignas(int *), while preserving the alignment argument.
  • C++ target parsing now accepts single-digit hexadecimal escapes in string literals, such as "\xA", while retaining support for longer hexadecimal escapes.

  (cpp-v0.23.4)

• Update the html grammar to v0.23.2. (html-v0.23.2)

• r grammar update (v1.3.0):

  • R target parsing now supports unary and binary help expressions (?) and exponentiation written with **.
  • R target parsing correctly represents hexadecimal fractional and exponent literals, including imaginary forms, and decimal or exponent notation with the L suffix.
  • R target parsing now supports quoted namespace and slot names, such as "base"::"mean" and x@"slot".
  • R parsing preserves else branches placed on a new line within braced expressions.
  • R string parsing preserves literal newlines and excludes raw-string delimiters from string values. Short hexadecimal and Unicode escape spellings are accepted; escape decoding remains unchanged.
  • R parsing preserves omitted argument positions in calls and subscripts, and retains the indexed expression for single-index subscripts.

  (r-v1.3.0)

• sfapex grammar update (v2.3):

  • Apex target parsing now supports null-coalescing expressions using ??, preserving both operands.
  • Apex target parsing now supports DML operations with explicit as user and as system security modes, retaining the mode, operation targets, and optional upsert key.
  • Apex target parsing now supports numeric package-version expressions such as Package.Version.1.2.
  • Apex target parsing now recognizes the webservice modifier and annotations with empty argument lists.
  • Apex target parsing now accepts whitespace within relational and shift operators, including compound shift assignments.
  • Embedded SOQL parsing in Apex now supports dotted TYPEOF operands, functions such as convertTimezone, and HAVING comparisons on grouped fields.
  • Apex target parsing now supports multiple top-level method declarations followed by executable statements in anonymous Apex.
  • Apex parsing now preserves native java: qualifiers on types and supports java:-prefixed field-access expressions.
  • Apex patterns now distinguish safe navigation (?.) from ordinary field and method access (.).

  (sfapex-v2.3)

... (truncated)

Changelog

Sourced from semgrep's changelog.

1.179.0 - 2026-10-01

### Added

• Semgrep Supply Chain now parses Bun bun.lock lockfiles (text format, lockfileVersion 1) paired with a package.json manifest, including the dependency relationships between packages. The deprecated binary bun.lockb format is still unsupported. (SC-2419)

### Changed

• Pro: Stabilize file processing order in inter-file analysis, which was previously arbitrary but deterministic. We believe this is very unlikely to affect findings but there is a theoretical path by which it could in certain rare cases. (stabilize)

• c grammar update (v0.24.2):

  • No verified user-facing improvements: Agent feature assessment was not run for this grammar.

  (c-v0.24.2)

• cpp grammar update (v0.23.4):

  • C++ target parsing now supports attributes on namespace definitions and preserves their arguments in the AST.
  • C++ target parsing now supports reference typedef declarators, including references to arrays and functions.
  • C++ target parsing now supports C++20 lambda pack init-captures such as [...values = args] and [&...values = args]. Capture-sensitive matching remains an existing limitation.
  • C++ target parsing now supports GNU inline-assembly output operands that are expressions, including pointer dereferences and array accesses.
  • C++ target parsing now supports composite type arguments in alignas declarations, such as alignas(int *), while preserving the alignment argument.
  • C++ target parsing now accepts single-digit hexadecimal escapes in string literals, such as "\xA", while retaining support for longer hexadecimal escapes.

  (cpp-v0.23.4)

• Update the html grammar to v0.23.2. (html-v0.23.2)

• r grammar update (v1.3.0):

  • R target parsing now supports unary and binary help expressions (?) and exponentiation written with **.
  • R target parsing correctly represents hexadecimal fractional and exponent literals, including imaginary forms, and decimal or exponent notation with the L suffix.
  • R target parsing now supports quoted namespace and slot names, such as "base"::"mean" and x@"slot".
  • R parsing preserves else branches placed on a new line within braced expressions.
  • R string parsing preserves literal newlines and excludes raw-string delimiters from string values. Short hexadecimal and Unicode escape spellings are accepted; escape decoding remains unchanged.
  • R parsing preserves omitted argument positions in calls and subscripts, and retains the indexed expression for single-index subscripts.

  (r-v1.3.0)

• sfapex grammar update (v2.3):

  • Apex target parsing now supports null-coalescing expressions using ??, preserving both operands.
  • Apex target parsing now supports DML operations with explicit as user and as system security modes, retaining the mode, operation targets, and optional upsert key.
  • Apex target parsing now supports numeric package-version expressions such as Package.Version.1.2.
  • Apex target parsing now recognizes the webservice modifier and annotations with empty argument lists.
  • Apex target parsing now accepts whitespace within relational and shift operators, including compound shift assignments.
  • Embedded SOQL parsing in Apex now supports dotted TYPEOF operands, functions such as convertTimezone, and HAVING comparisons on grouped fields.
  • Apex target parsing now supports multiple top-level method declarations followed by executable statements in anonymous Apex.
  • Apex parsing now preserves native java: qualifiers on types and supports java:-prefixed field-access expressions.
  • Apex patterns now distinguish safe navigation (?.) from ordinary field and method access (.).

  (sfapex-v2.3)

### Fixed

... (truncated)

Commits

• fed9646 chore: release 1.179.0
• a8fc986 fix(deps): bump pyjwt pin from ~=2.13.0 to >=2.15.0,<3 (semgrep/semgrep-propr...
• 313161c chore(ci): point semgrep-compare trigger at new Argo Workflows hostname (semg...
• b1b7d76semgrep/semgrep-proprietary#7139
• 01c5bebsemgrep/semgrep-proprietary#7135
• 5e3db32semgrep/semgrep-proprietary#7150
• 3133459semgrep/semgrep-proprietary#7157
• e44447b test: disable automatic maintenance in temporary Git repositories (semgrep/se...
• 5b7f795semgrep/semgrep-proprietary#7155
• 2260e46 feat(lockfile-parsers): Add supply chain parser for bun.lock (semgrep/semgrep...
• Additional commits viewable in compare view

Updates commitizen from 4.18.1 to 4.19.2

Release notes

Sourced from commitizen's releases.

v4.19.2 (2026-10-07)

Fix

• tags: give ignored tag formats precedence over version formats

v4.19.1 (2026-10-03)

Refactor

• bump: use VersionIncrement ordering for bump detection (#2097)

v4.19.0 (2026-09-22)

Feat

• add extensible commit filters

Changelog

Sourced from commitizen's changelog.

v4.19.2 (2026-10-07)

Fix

• tags: give ignored tag formats precedence over version formats

v4.19.1 (2026-10-03)

Refactor

• bump: use VersionIncrement ordering for bump detection (#2097)

v4.19.0 (2026-09-22)

Feat

• add extensible commit filters

Commits

• 57217c3 bump: version 4.19.1 → 4.19.2
• 6ef4a34 fix(tags): give ignored tag formats precedence over version formats
• 2bcb46f ci(deps): bump gitpython from 3.1.59 to 3.1.62 (#2103)
• d7aabd4 ci(deps): bump virtualenv from 21.2.0 to 21.7.13 (#2102)
• b90e2d3 ci(deps): bump urllib3 from 2.7.0 to 2.8.0 (#2101)
• f565e81 docs(cli/screenshots): update CLI screenshots
• b2eb0cb bump: version 4.19.0 → 4.19.1
• 667de74 refactor(bump): use VersionIncrement ordering for bump detection (#2097)
• 642b8be docs: add galaxy provider plugin docs (#2096)
• cc2f522 docs: document additional_dependencies for pre-commit plugin hooks
• Additional commits viewable in compare view

Updates langgraph from 1.2.11 to 1.2.14

Release notes

Sourced from langgraph's releases.

langgraph==1.2.14

Changes since 1.2.13

• release(langgraph): 1.2.14 (#9215)

langgraph==1.2.13

Changes since 1.2.12

• fix(langgraph): fork before replaying an update checkpoint the thread moved past (#9170)
• fix(langgraph): keep an update_state on an older checkpoint out of its other branches (#9165)
• fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
• release(langgraph): 1.2.13 (#9205)
• fix(langgraph): don't walk history for a DeltaChannel that was never written (#9141)
• fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8548)
• chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
• fix(langgraph): hydrate subgraph delta channels with the caller-resolved saver (#8538)
• fix(langgraph): stop reporting answered interrupts in get_state (#9103)
• chore(deps-dev): bump the minor-and-patch group across 1 directory with 5 updates (#9155)
• chore(deps-dev): bump the minor-and-patch group in /libs/checkpoint-conformance with 2 updates (#9145)
• chore(deps): bump the minor-and-patch group in /libs/sdk-py with 5 updates (#9149)
• chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/langgraph (#9160)
• chore(deps-dev): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/langgraph (#9156)
• chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/langgraph (#9140)
• chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/langgraph (#9138)
• chore(deps): bump pyjwt from 2.14.0 to 2.15.0 in /libs/langgraph (#9139)
• chore(deps): bump pyjwt from 2.13.0 to 2.14.0 in /libs/langgraph (#9126)

langgraph==1.2.12

Changes since 1.2.11

• release(langgraph): 1.2.12 (#8987)
• chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/langgraph (#8958)
• feat(langgraph): add response_schema to interrupt() (#8886)
• fix(langgraph): type undeclared v3 stream projections (#8596)
• chore(langgraph): bump mistune to 3.3.4 (#8804)
• chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8779)
• chore(deps): bump the minor-and-patch group across 1 directory with 4 updates (#8782)
• chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/langgraph (#8792)
• chore(deps): bump the major group in /libs/langgraph with 2 updates (#8783)
• fix(langgraph): detect subgraphs from bytecode instead of source (#8569)

Commits

• 70dd640 release(langgraph): 1.2.14 (#9215)
• 55b0e36 release(sdk-py): 0.4.6 (#9214)
• d89c7e1 fix(sdk-py): percent-encode thread_id and assistant_id in thread stream reque...
• 2d94208 fix(langgraph): fork before replaying an update checkpoint the thread moved p...
• 456e2b1 fix(langgraph): keep an update_state on an older checkpoint out of its other ...
• 1b84cb0 fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
• 8e15e0d release(langgraph): 1.2.13 (#9205)
• 524b320 fix(langgraph): don't walk history for a DeltaChannel that was never written ...
• 9a0394d fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8...
• 7dc9195 chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
• Additional commits viewable in compare view

Updates cryptography from 50.0.1 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.
.. _v50-0-1:

Commits

• 4dda5c7 [50.0.x] Bump for 50.0.2 release + changelog (#15733)
• 70c881c [50.0.x] Bump pyo3 to 0.29.2 (#15731)
• a8c45c4 [50.0.x] Build abi3.abi3t wheels for CPython 3.15+ (#15496) (#15732)
• See full diff in compare view

Updates sqlalchemy from 2.0.54 to 2.1.4

Release notes

Sourced from sqlalchemy's releases.

2.1.4

Released: October 7, 2026

orm

• [orm] [bug] [regression] Fixed regression caused by #13333 where assigning a MetaData object to the metadata attribute of a mapped Declarative class, in order to place that class's Table in a MetaData collection other than that of the _orm.registry, would emit a warning that the attribute name metadata should be left reserved. The warning is now emitted only when the metadata attribute is assigned to an object other than a MetaData.

  References: #13659

engine

• [engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected. The cursor is now closed immediately, as was the case in 1.3 and as is already the case for INSERT, UPDATE, DELETE and _sql.text() statements.

  This change is also backported to: 2.0.55

  References: #13640

• [engine] [bug] Fixed issue in the _engine.Connection.execution_options.logging_token option where setting the value to None or another false value would raise AttributeError if a logging token had not already been established on that _engine.Connection, such as on a newly checked out connection, when the option was set at the _engine.Engine level, or when the token was reset to None more than once. Regression introduced in 2.0.30 as part of #11210.

  This change is also backported to: 2.0.55

  References: #13641

• [engine] [bug] [regression] Fixed regression where iterating a Result directly would create reference cycles that prevented the Result along with the DBAPI

... (truncated)

Commits

• See full diff in compare view

Updates sentence-transformers from 6.0.1 to 6.1.0

Release notes

Sourced from sentence-transformers's releases.

v6.1.0 - Documentation and input handling improvements

This is a small release with refreshed inference benchmarks, clearer documentation, and a few improvements to multimodal input handling.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==6.1.0
Inference only, use one of:
pip install sentence-transformers==6.1.0
pip install sentence-transformers[onnx-gpu]==6.1.0
pip install sentence-transformers[onnx]==6.1.0
pip install sentence-transformers[openvino]==6.1.0
Multimodal dependencies (optional):
pip install sentence-transformers[image]==6.1.0
pip install sentence-transformers[audio]==6.1.0
pip install sentence-transformers[video]==6.1.0
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==6.1.0

Changes

• Refreshed the inference benchmarks and efficiency guide, clarified benchmark labels, and documented ONNX CPU thread tuning (#3977, #4007, #3987).
• Added a shared input formats guide and SPARSEUP to the pretrained sparse model tables (#4036, #4038).
• Improved multimodal input handling and chat-template argument routing (#4037, #4048).
• Corrected loss formulas and argument descriptions in docstrings, clarified custom-module import requirements, and fixed links, typos, and optional type annotations.

For existing multimodal dict inputs, message content now follows each input's key order, which can change embeddings or scores. Video-frame URLs without recognizable image extensions need an explicit frame wrapper to remain one video. See #4037 for details.

All Changes

• [docs] Document that optional imports in a custom module become load-time requirements by @​abtonmoy in huggingface/sentence-transformers#3922
• [docs] Name the metric on the quality axis of the backend benchmark figures by @​tomaarsen in huggingface/sentence-transformers#3977
• docs: fix Constrastive/heaqp typos and subject-verb agreement by @​simpleqt in huggingface/sentence-transformers#3983
• docs: drop stale margin/squared Args from triplet loss docstrings by @​simpleqt in huggingface/sentence-transformers#3981
• docs: fix cross-encoder link and 'show case' wording in examples READMEs by @​simpleqt in huggingface/sentence-transformers#3982
• Correct the inverted CoSENT loss formula in two docstrings by @​vineethsaivs in huggingface/sentence-transformers#3984
• Fix implicit Optional annotations by @​VenishPaneliya in huggingface/sentence-transformers#3990
• [docs] Clarify sparse COO inputs for semantic_search by @​tomaarsen in huggingface/sentence-transformers#4001
• [docs] Refresh inference benchmarks and promote efficiency guides by @​tomaarsen in huggingface/sentence-transformers#4007
• [docs] Describe the MarginMSE target as the signed margin by @​MaxFreedomPollard in huggingface/sentence-transformers#4009
• Document ONNX CPU thread tuning and benchmark settings by @​ErnisBadmae in huggingface/sentence-transformers#3987
• docs: Document shared input formats across model archetypes by @​tomaarsen in huggingface/sentence-transformers#4036
• [docs] Add SPARSEUP to pretrained sparse models by @​tomaarsen in huggingface/sentence-transformers#4038
• Support multiple items per modality in one input by @​tomaarsen in huggingface/sentence-transformers#4037
• Fix load_audio_from_video routing in chat templates by @​tomaarsen in huggingface/sentence-transformers#4048

... (truncated)

Commits

• b0bf399 Release v6.1.0
• 55f2f9c Fix load_audio_from_video routing in chat templates (#4048)
• ad8e77b Support multiple items per modality in one input (#4037)
• ad356eb [docs] Add SPARSEUP to pretrained sparse models (#4038)
• 5f1bfb0 docs: Document shared input formats across model archetypes (#4036)
• b0ef5ef Document ONNX CPU thread tuning and benchmark settings (#3987)
• 6a841ce [docs] Describe the MarginMSE target as the signed margin (#4009)
• dc0d7c3 [docs] Refresh inference benchmarks and promote efficiency guides (#4007)
• 1a4b62a [docs] Clarify sparse COO inputs for semantic_search (#4001)
• 24d718f Fix implicit Optional annotations (#3990)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.