medvlsm

medvlsm copied to clipboard

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.4 to 3.9.4. Release notes Sourced from aiohttp's releases. 3.9.4 Bug fixes The asynchronous internals now set the underlying causes when assigning exceptions to the future objects...

dependabot[bot]

Bumps [idna](https://github.com/kjd/idna) from 3.4 to 3.7. Release notes Sourced from idna's releases. v3.7 What's Changed Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time...

dependabot[bot]

Bumps [transformers](https://github.com/huggingface/transformers) from 4.35.2 to 4.38.0. Release notes Sourced from transformers's releases. v4.38: Gemma, Depth Anything, Stable LM; Static Cache, HF Quantizer, AQLM New model additions 💎 Gemma 💎 Gemma...

dependabot[bot]

Bumps [pillow](https://github.com/python-pillow/Pillow) from 9.5.0 to 10.3.0. Release notes Sourced from pillow's releases. 10.3.0 https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html Changes CVE-2024-28219: Use strncpy to avoid buffer overflow #7928 [@​hugovk] Use functools.lru_cache for hopper() #7912 [@​hugovk]...

dependabot[bot]

Bumps [black](https://github.com/psf/black) from 21.4b2 to 24.3.0. Release notes Sourced from black's releases. 24.3.0 Highlights This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black...

dependabot[bot]

Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3. Release notes Sourced from jinja2's releases. 3.1.3 This is a fix release for the 3.1.x feature branch. Fix for GHSA-h5c8-rqwp-cp95. You are affected if...

dependabot[bot]

Bumps [fonttools](https://github.com/fonttools/fonttools) from 4.39.3 to 4.43.0. Release notes Sourced from fonttools's releases. 4.43.0 [subset] Set up lxml XMLParser(resolve_entities=False) when parsing OT-SVG documents to prevent XML External Entity (XXE) attacks (9f61271dc):...

dependabot[bot]

Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.31 to 3.1.41. Release notes Sourced from gitpython's releases. 3.1.41 - fix Windows security issue The details about the Windows security issue can be found in this...

dependabot[bot]

Bumps [scipy](https://github.com/scipy/scipy) from 1.9.1 to 1.11.1. Release notes Sourced from scipy's releases. SciPy 1.11.1 Release Notes SciPy 1.11.1 is a bug-fix release with no new features compared to 1.11.0. In...

dependabot[bot]

Bumps [pyarrow](https://github.com/apache/arrow) from 11.0.0 to 14.0.1. Commits ba53748 MINOR: [Release] Update versions for 14.0.1 529f376 MINOR: [Release] Update .deb/.rpm changelogs for 14.0.1 b84bbca MINOR: [Release] Update CHANGELOG.md for 14.0.1 f141709...

dependabot[bot]