fix(deps): update machine-learning

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
fastapi-slim (changelog)	0.115.2 -> 0.115.3
huggingface-hub	0.25.2 -> 0.26.1
mypy (source, changelog)	1.12.1 -> 1.13.0
onnxruntime-gpu	1.18.1 -> 1.19.2
orjson (changelog)	3.10.7 -> 3.10.10
rich	13.9.2 -> 13.9.3
ruff (source, changelog)	0.7.0 -> 0.7.1

---

Release Notes

fastapi/fastapi (fastapi-slim)

v0.115.3

Compare Source

Upgrades

• ⬆️ Upgrade Starlette to >=0.40.0,<0.42.0. PR #​12469 by @​defnull.

Docs

• 📝 Fix broken link in docs. PR #​12495 by @​eltonjncorreia.

Translations

• 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/fastapi-cli.md. PR #​12444 by @​codingjenny.
• 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/deployment/index.md. PR #​12439 by @​codingjenny.
• 🌐 Add Portuguese translation for docs/pt/docs/how-to/testing-database.md. PR #​12472 by @​GuilhermeRameh.
• 🌐 Add Portuguese translation for docs/pt/docs/how-to/custom-docs-ui-assets.md. PR #​12473 by @​devluisrodrigues.
• 🌐 Add Portuguese translation for docs/pt/docs/advanced/response-headers.md. PR #​12458 by @​leonardopaloschi.
• 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/deployment/cloud.md. PR #​12440 by @​codingjenny.
• 🌐 Update Portuguese translation for docs/pt/docs/python-types.md. PR #​12428 by @​ceb10n.
• 🌐 Add Russian translation for docs/ru/docs/environment-variables.md. PR #​12436 by @​wisderfin.
• 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/resources/index.md. PR #​12443 by @​codingjenny.
• 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/about/index.md. PR #​12438 by @​codingjenny.
• 🌐 Add Portuguese translation for docs/pt/docs/tutorial/query-param-models.md. PR #​12414 by @​ceb10n.
• 🌐 Remove Portuguese translation for docs/pt/docs/deployment.md. PR #​12427 by @​ceb10n.
• 🌐 Add Portuguese translation for docs/pt/docs/tutorial/body-updates.md. PR #​12381 by @​andersonrocha0.
• 🌐 Add Portuguese translation for docs/pt/docs/advanced/response-cookies.md. PR #​12417 by @​Paulofalcao2002.

Internal

• 👷 Update issue manager workflow . PR #​12457 by @​alejsdev.
• 🔧 Update team, include YuriiMotov 🚀. PR #​12453 by @​tiangolo.
• 👷 Refactor label-approved, make it an internal script instead of an external GitHub Action. PR #​12280 by @​tiangolo.
• 👷 Fix smokeshow, checkout files on CI. PR #​12434 by @​tiangolo.
• 👷 Use uv in CI. PR #​12281 by @​tiangolo.
• ⬆ Update httpx requirement from <0.25.0,>=0.23.0 to >=0.23.0,<0.28.0. PR #​11509 by @​dependabot[bot].

huggingface/huggingface_hub (huggingface-hub)

v0.26.1: [v0.26.1] Hot-fix: fix Python 3.8 support for huggingface-cli commands

Compare Source

Full Changelog: huggingface/huggingface_hub@v0.26.0...v0.26.1

See https://github.com/huggingface/huggingface_hub/pull/2620 for more details.

v0.26.0: : Multi-tokens support, conversational VLMs and quality of life improvements

Compare Source

🔐 Multiple access tokens support

Managing fine-grained access tokens locally just became much easier and more efficient!
Fine-grained tokens let you create tokens with specific permissions, making them especially useful in production environments or when working with external organizations, where strict access control is essential.

To make managing these tokens easier, we've added a ✨ new set of CLI commands ✨ that allow you to handle them programmatically:

• Store multiple tokens on your machine by simply logging in with the login() command with each token:

huggingface-cli login

• Switch between tokens and choose the one that will be used for all interactions with the Hub:

huggingface-cli auth switch

• List available access tokens on your machine:

huggingface-cli auth list

• Delete a specific token from your machine with:

huggingface-cli logout [--token-name TOKEN_NAME]

✅ Nothing changes if you are using the HF_TOKEN environment variable as it takes precedence over the token set via the CLI. More details in the documentation. 🤗

• Support multiple tokens locally by @​hanouticelina in #​2549

⚡️ InferenceClient improvements

🖼️ Conversational VLMs support

Conversational vision-language models inference is now supported with InferenceClient's chat completion!

from huggingface_hub import InferenceClient

### works with remote url or base64 encoded url
image_url ="https://cdn.britannica.com/61/93061-050-99147DCE/Statue-of-Liberty-Island-New-York-Bay.jpg"

client = InferenceClient("meta-llama/Llama-3.2-11B-Vision-Instruct")
output = client.chat.completions.create(
    messages=[
        {
            "role": "user",
            "content": [
                {
                    "type": "image_url",
                    "image_url": {"url": image_url},
                },
                {
                    "type": "text",
                    "text": "Describe this image in one sentence.",
                },
            ],
        },
    ],
)

print(output.choices[0].message.content)

#A determine figure of Lady Liberty stands tall, holding a torch aloft, atop a pedestal on an island.

🔧 More complete support for inference parameters

You can now pass additional inference parameters to more task methods in the InferenceClient, including: image_classification, text_classification, image_segmentation, object_detection, document_question_answering and more!
For more details, visit the InferenceClient reference guide.

✅ Of course, all of those changes are also available in the AsyncInferenceClient async equivalent 🤗

• Support VLM in chat completion (+some specs updates) by @​Wauplin in #​2556
• [Inference Client] Add task parameters and a maintenance script of these parameters by @​hanouticelina in #​2561
• Document vision chat completion with Llama 3.2 11B V by @​Wauplin in #​2569

✨ HfApi

update_repo_settings can now be used to switch visibility status of a repo. This is a drop-in replacement for update_repo_visibility which is deprecated and will be removed in version v0.29.0.

- update_repo_visibility(repo_id, private=True)
+ update_repo_settings(repo_id, private=True)

• Feature: switch visibility with update_repo_settings by @​WizKnight in #​2541

📄 Daily papers API is now supported in huggingface_hub, enabling you to search for papers on the Hub and retrieve detailed paper information.

>>> from huggingface_hub import HfApi

>>> api = HfApi()

### List all papers with "attention" in their title
>>> api.list_papers(query="attention")

### Get paper information for the "Attention Is All You Need" paper
>>> api.paper_info(id="1706.03762")

• Daily Papers API by @​hlky in #​2554

🌐 📚 Documentation

Efforts from the Tamil-speaking community to translate guides and package references to TM! Check out the result here.

• Translated index.md and installation.md to Tamil by @​Raghul-M in #​2555

💔 Breaking changes

A few breaking changes have been introduced:

• cached_download(), url_to_filename(), filename_to_url() methods are now completely removed. From now on, you will have to use hf_hub_download() to benefit from the new cache layout.
• legacy_cache_layout argument from hf_hub_download() has been removed as well.

These breaking changes have been announced with a regular deprecation cycle.

Also, any templating-related utility has been removed from huggingface_hub. Client side templating is not necessary now that all conversational text-generation models in InferenceAPI are served with TGI.

Prepare for release 0.26 by @​hanouticelina in #​2579
Remove templating utility by @​Wauplin in #​2611

🛠️ Small fixes and maintenance

😌 QoL improvements

• docs: move translations to i18n by @​SauravMaheshkar in #​2566
• Preserve card metadata format/ordering on load->save by @​hlky in #​2570
• Remove raw HTML from error message content and improve request ID capture by @​hanouticelina in #​2584
• [Inference Client] Factorize inference payload build by @​hanouticelina in #​2601
• Use proper logging in auth module by @​hanouticelina in #​2604

🐛 fixes

• Use repo_type in HfApi.grant_access url by @​albertvillanova in #​2551
• Raise error if encountered in chat completion SSE stream by @​Wauplin in #​2558
• Add 500 HTTP Error to retry list by @​farzadab in #​2567
• Add missing documentation by @​adiaholic in #​2572
• Serialization: take into account meta tensor when splitting the state_dict by @​SunMarc in #​2591
• Fix snapshot download when local_dir is provided. by @​hanouticelina in #​2592
• Fix PermissionError while creating '.no_exist/' directory in cache by @​Wauplin in #​2594
• Fix 2609 - Import packaging by default by @​Wauplin in #​2610

🏗️ internal

• Fix test by @​Wauplin in #​2582
• Make SafeTensorsInfo.parameters a Dict instead of List by @​adiaholic in #​2585
• Fix tests listing text generation models by @​Wauplin in #​2593
• Skip flaky Repository test by @​Wauplin in #​2595
• Support python 3.12 by @​hanouticelina in #​2605

Significant community contributions

The following contributors have made significant changes to the library over the last release:

• @​SauravMaheshkar
  • docs: move translations to i18n (#​2566)
• @​WizKnight
  • Feature: switch visibility with update_repo_settings #​2537 (#​2541)
• @​hlky
  • Preserve card metadata format/ordering on load->save (#​2570)
  • Daily Papers API (#​2554)
• @​Raghul-M
  • Translated index.md and installation.md to Tamil (#​2555)

python/mypy (mypy)

v1.13.0

Compare Source

ijl/orjson (orjson)

v3.10.10

Compare Source

v3.10.9

Compare Source

v3.10.8

Compare Source

Textualize/rich (rich)

v13.9.3

Compare Source

Fixed

• Fixed broken regex that may have resulted in poor performance. https://github.com/Textualize/rich/pull/3535

astral-sh/ruff (ruff)

v0.7.1

Compare Source

Preview features

• Fix E221 and E222 to flag missing or extra whitespace around == operator (#​13890)
• Formatter: Alternate quotes for strings inside f-strings in preview (#​13860)
• Formatter: Join implicit concatenated strings when they fit on a line (#​13663)
• [pylint] Restrict iteration-over-set to only work on sets of literals (PLC0208) (#​13731)

Rule changes

• [flake8-type-checking] Support auto-quoting when annotations contain quotes (#​11811)

Server

• Avoid indexing the workspace for single-file mode (#​13770)

Bug fixes

• Make ARG002 compatible with EM101 when raising NotImplementedError (#​13714)

Other changes

• Introduce more Docker tags for Ruff (similar to uv) (#​13274)

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.