Skip to content

Comments

Bump the pip group across 1 directory with 3 updates#12

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/pip-0be980dc87
Open

Bump the pip group across 1 directory with 3 updates#12
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/pip-0be980dc87

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 4, 2025

Bumps the pip group with 3 updates in the / directory: langchain-community, langchain-core and transformers.

Updates langchain-community from 0.3.21 to 0.3.27

Release notes

Sourced from langchain-community's releases.

langchain-anthropic==0.3.22

Changes since langchain-anthropic==0.3.21

release(anthropic): 0.3.22 (#33394) fix(anthropic,standard-tests): carry over updates to v0.3 (#33393) chore: cap lib upper bounds, run sync (#33320) feat: (core, standard-tests) support PDF inputs in ToolMessages (#33183)

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates langchain-core from 0.3.75 to 0.3.80

Release notes

Sourced from langchain-core's releases.

langchain-core==0.3.80

Changes since langchain-core==0.3.79

release(core): 0.3.80 (#34039) fix(core): fix validation for input variables in f-string templates, restrict functionality supported by jinja2, mustache templates (GHSA-6qv9-48xg-fc7f) (#34038)

langchain-core==0.3.79

Changes since langchain-core==0.3.78

release(core): 0.3.79 (#33401) fix(core): handle parent/child mustache vars (#33346)

langchain-core==0.3.78

Changes since langchain-core==0.3.77

release(core): 0.3.78 (#33253) feat(core): add optional include_id param to convert_to_openai_messages function (#33248)

Commits

Updates transformers from 4.48.0 to 4.53.0

Release notes

Sourced from transformers's releases.

Release v4.53.0

Gemma3n

Gemma 3n models are designed for efficient execution on low-resource devices. They are capable of multimodal input, handling text, image, video, and audio input, and generating text outputs, with open weights for pre-trained and instruction-tuned variants. These models were trained with data in over 140 spoken languages.

Gemma 3n models use selective parameter activation technology to reduce resource requirements. This technique allows the models to operate at an effective size of 2B and 4B parameters, which is lower than the total number of parameters they contain. For more information on Gemma 3n's efficient parameter management technology, see the Gemma 3n page.

image

from transformers import pipeline
import torch
pipe = pipeline(
"image-text-to-text",
torch_dtype=torch.bfloat16,
model="google/gemma-3n-e4b",
device="cuda",
)
output = pipe(
"https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/bee.jpg",
text="<image_soft_token> in this image, there is"
)
print(output)

Dia

image

Dia is an opensource text-to-speech (TTS) model (1.6B parameters) developed by Nari Labs. It can generate highly realistic dialogue from transcript including nonverbal communications such as laughter and coughing. Furthermore, emotion and tone control is also possible via audio conditioning (voice cloning).

Model Architecture: Dia is an encoder-decoder transformer based on the original transformer architecture. However, some more modern features such as rotational positional embeddings (RoPE) are also included. For its text portion (encoder), a byte tokenizer is utilized while for the audio portion (decoder), a pretrained codec model DAC is used - DAC encodes speech into discrete codebook tokens and decodes them back into audio.

Kyutai Speech-to-Text

Kyutai STT is a speech-to-text model architecture based on the Mimi codec, which encodes audio into discrete tokens in a streaming fashion, and a Moshi-like autoregressive decoder. Kyutai’s lab has released two model checkpoints:

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 4, 2025
Bumps the pip group with 3 updates in the / directory: [langchain-community](https://github.com/langchain-ai/langchain), [langchain-core](https://github.com/langchain-ai/langchain) and [transformers](https://github.com/huggingface/transformers).


Updates `langchain-community` from 0.3.21 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.21...langchain==0.3.27)

Updates `langchain-core` from 0.3.75 to 0.3.80
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.75...langchain-core==0.3.80)

Updates `transformers` from 4.48.0 to 4.53.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.48.0...v4.53.0)

---
updated-dependencies:
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.80
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: transformers
  dependency-version: 4.53.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/pip-0be980dc87 branch from cddfb06 to ca8707a Compare December 30, 2025 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants