Skip to content

build(deps): bump the minor-and-patch group with 4 updates - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/minor-and-patch-8dc06cfe97
Open

build(deps): bump the minor-and-patch group with 4 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/minor-and-patch-8dc06cfe97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates: faiss-cpu, sqlalchemy, astrbot and ruff.

Updates faiss-cpu from 1.15.0 to 1.15.1

Release notes

Sourced from faiss-cpu's releases.

v1.15.1

See CHANGELOG.md for the full list of changes.

Changelog

Sourced from faiss-cpu's changelog.

[1.15.1] - 2026-09-15

Added

  • 3b3711c112fbf7dfb9c64b6fcf90ffc3ca412548 Add explicit IVFPQ scanner distance modes (#5632)
  • 4fdbc9dc18adbfef3cd410a2446aa4c757320a8a Support ZeroCopyIOReader for IndexRaBitQ deserialization (#5629)
  • b5a14632a6f2bfdc824c86d683b9d6e9205c2604 Run the eight SIMD kernel tests that no build executed (#5620)
  • e6bd1d252caa5b9315a04390269d382845984ae2 Add AVX512 VPOPCNT dynamic dispatch level (#5531)
  • 7f4cedda9c384de652c7bd5690db0f808d668216 Add staged RaBitQ storage to HNSW (#5526)
  • cfbf4ec5ff68d0bca4701d0b24b8a0736e110932 SVS: allow option to disable vector storing (#5525)
  • cda4f6e7133c629e502c2ea9bc51e0ef51847ab1 Expose IndexBinaryIVF.set_direct_map_type via the C API (#5451)
  • 256980cb6ea6610e4b0edf497a038086df8bbfce Add SVE low-dimensional nearest fast path and spherical SuperKMeans support (#5530)
  • 3a716ead1a3c4562fe6e96d982d26789c58e19ed Add Windows ARM64 support to CI (#5544)
  • 7059eaf7da7eddda62e71367e684d4bdedd7f94f Add AVX512 bitplane kernel for multi-bit RaBitQ inner product (#5522)
  • a424dcb809fd725c44dd976d9063febd4837d16a faiss HNSW: add opt-in deterministic lock-free graph build (faiss::hnsw_deterministic_build) (#5486)
  • da3191e754b49ca67b6503a9262e96ce5a3d8ed8 IDSelectorWithContext: extend context hook to IVFPQ/PQR, multibit RaBitQ, and Panorama scanners (#5491)
  • edddbc998e858f16330f9b226dfd72f73d4d1d46 IDSelectorWithContext: scan-context hook for locality-aware selectors (#5490)

Changed

  • 3bb48643ab8ea9e50162b354d2463270acd6ed9c Pin faiss-gpu-cuvs RAPIDS deps to the 26.06 build series (#5643)
  • 6bbb068ad8dab612b84304400846da1b14539085 Measure 20-byte Hamming codes eight at a time (#5587)
  • 3c7042f17a467c38d99f490ef39e4dfa615dc510 Let the binary Hamming paths reach the VPOPCNT kernels
  • 9f993087b07e83f026248addb01dd99e99b15a3e Name the SIMD level masks after what they hold (#5600)
  • e2cf9e1ebf24c14b888fa69eee96713aa6d64b1a Accept ragged code sizes in faiss::hammings(), and fix the vectorization axis for wide codes (#5520)
  • 545550f6a27031c2269881d97237fd6a5bef15df Use unittest assertions and f-strings in test_index_composite (#5571)
  • af9eeffcf70d7795107c2b0511bdba507ac45339 Reserve cs vector capacity in hammings_knn_mc_impl to avoid reallocations (#5548)
  • 317a207bcacfcfa695d98289c3f4ea562b782837 ARM SVE optimization for L2 distance kernels adapted to new simd_impl structure (#5098)
  • 2027d3b33144dbf19674b540ec0e31b2f842b1cc Make cuVS dispatch opt-in rather than build-implied (#5529)
  • a39e2606887bbacc6c8f54e783c4b42da00cf4b3 Fold multi-GPU CAGRA build into train(), delete trainMultiGpu (#5521)
  • 1f93154314afbef210f0ebebeab840da22f9ec7d Revert D114685755: Fold multi-GPU CAGRA build into train(), delete trainMultiGpu
  • 6644dcfa5576221b1a4417fd766a8b2af71d869e Fold multi-GPU CAGRA build into train(), delete trainMultiGpu (#5500)
  • 80a16564f86530dbf0bfaf96c2b71feffeb5093f Enable Faiss dynamic dispatch for OVIS and VeST fbpkgs (#5515)
  • 2688c34f942c8462d97c8632c720a53653456270 Parallelize the k-means++ D^2 seeding update (#5457)
  • 76c67b7b736ca80c2b3ea29528434d6583adc88b Update default Panorama batch size to 1024 (#5441)
  • 3b50babc5914570576b09da043f64dfd7d62a075 Optimize RVV batch-4 distance kernels (#5469)

Fixed

  • 7c3b55c01b8418dc044881625a260fceae9c712b Make Panorama bounds checks overflow-safe (#5616)
  • fb2d57a3121c073828d2ed7d04ccf09d8bea771c Fix leak and unbounded lists[] in OnDisk invlist deserialization (#5560)
  • fc13c81fb8b22f76e4c2c7bd2f027bd049b9a207 Stop aarch64 falling back to SIMDLevel::NONE in faiss dispatch (#5572)
  • 00928e3f7628b8288c17cfece5ee9600a8287f56 Fix ROCm CI: build in a dedicated conda env instead of the runner's broken base (#5545)
  • 1e5780fbbfbe191f3ed3517f93ace8301239e9b2 Fix OOB read in Panorama::reconstruct via IndexPreTransform (T287094917) (#5562)
  • 2ed4c106e9fb9686e7727e5daf8ad6ad1e164109 Fix: Windows SIMD detection (#5497)
  • b4c66ba6031d1f659163e43430f8ce745b0dbe79 Fix reverse_index_factory/get_code_size round-trip for HNSW, IMI and IVFPQR (#5564)
  • c0084f5cd2534236acda05cf7b8e0fc8062ddec3 Clamp EDEN unbiased L2 distances to be non-negative (#5569)
  • 6457e941f5f4808303bb480679cb78df0df51934 Contain DirectoryArchiver entries within the extraction root (#5561)
  • ac60182fc009476c91a2788e639191d1f624157f RaBitQ: Fix zero residual sign convention (#5553)
  • 1a0cfa64e015923d5009d8c7d917aa591e9eac9a Apply the deserialization byte limit to SVS IVF (#5568)
  • 718002f7cf269f3f3752dde04a4cc3f8eabb0050 Fix distance conversion in IndexBinaryFromFloat for non-L2 metrics (#5549)
  • 02ea14372c9983f3eaa15698512180dc62ea234d Fix range_search_max_results to respect all similarity metrics (#5533)
  • bd7087453e6d2262b6e6c76ab0cfa1e2dfeddebf fix(faiss): use is_similarity_metric for IndexShardsIVF merge (#5541)

... (truncated)

Commits
  • 75c755c Add missing CHANGELOG entry for #5632 in v1.15.1 (#5651)
  • d63faea Increment to next release, v1.15.1 (#5645)
  • 3b3711c Add explicit IVFPQ scanner distance modes (#5632)
  • 3bb4864 Pin faiss-gpu-cuvs RAPIDS deps to the 26.06 build series (#5643)
  • 7c3b55c Make Panorama bounds checks overflow-safe (#5616)
  • fb2d57a Fix leak and unbounded lists[] in OnDisk invlist deserialization (#5560)
  • a74867c faiss HNSW: delete the flag and the lock-based graph build (#5611)
  • 4fdbc9d Support ZeroCopyIOReader for IndexRaBitQ deserialization (#5629)
  • b5a1463 Run the eight SIMD kernel tests that no build executed (#5620)
  • 6bbb068 Measure 20-byte Hamming codes eight at a time (#5587)
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.52 to 2.0.54

Release notes

Sourced from sqlalchemy's releases.

2.0.54

Released: September 15, 2026

platform

  • [platform] [change] Binary wheels are no longer built for Python 3.7. PyPI now rejects wheel files whose filename does not begin with the normalized project name, and the packaging tools that can be installed on Python 3.7 do not produce such a filename. As a result, SQLAlchemy 2.0.44 was the last release to publish Python 3.7 wheels to PyPI, and releases 2.0.45 and later have been available on Python 3.7 only as a source distribution; the wheel builds for Python 3.7 are now removed. Python 3.7 remains supported by the 2.0 series.

  • [platform] [bug] Fixed issue where the Cython extensions were compiled without the freethreading_compatible directive, so that they did not declare themselves as safe to run without the GIL. On a free-threaded Python interpreter such as Python 3.13t or 3.14t, importing SQLAlchemy would cause the interpreter to re-enable the GIL, emitting a RuntimeWarning. The directive is now set when building for Python 3.13 and above, and a test has been added which confirms that importing SQLAlchemy on a free-threaded build does not enable the GIL.

    References: #13592

2.0.53

Released: September 14, 2026

orm

  • [orm] [bug] Fixed issue where an expression passed to _orm.with_expression() that embedded a _sql.select(), such as a correlated _sql.exists(), would fail to populate the attribute correctly on the second and subsequent executions of an otherwise identical statement, when the _orm.query_expression() attribute was loaded by a relationship loader that emits a second query, i.e. _orm.selectinload(), _orm.lazyload() or _orm.immediateload().

    References: #13560

  • [orm] [bug] Fixed memory issue where mapped classes, along with their Table and _orm.Mapper objects, would not be garbage collected after the _orm.registry in which they were mapped had been disposed and dereferenced. The issue would occur for mappings that made use of _orm.relationship() together with constructs such as an

... (truncated)

Commits

Updates astrbot from 4.28.0 to 4.28.1

Release notes

Sourced from astrbot's releases.

v4.28.1

[4.28.1] - 2026-09-14

We live in stories we collectively believe in.

我们活在共同相信的故事里。

Additions and Optimizations

  • Added paginated ChatUI history loading and improved chat settings, the message composer, and streaming interactions. Reasoning is now displayed by default, and workspace code previews use Shiki highlighting. (#9667, #10021, #10020, #10023)
  • Added provider source filters and sticky group headers to model selection, and improved provider configuration dialogs. (#10084, #10007)
  • Added adaptive input image processing for the built-in Agent: resize or convert images when needed and turn animated images into frame montages. Preserve static image dimensions in CUA sandboxes and warn when images may exceed provider upload limits. (#9703, #10071)
  • Unified /new and /reset to start a new conversation, with permissions configurable in command management. (#10004)
  • Added desktop update download progress and reduced bundled WebUI font and diagram assets. (#10050, #10034)
  • Improved configuration slider robustness. (#10037)
  • Standardized provider request User-Agent headers to include the AstrBot version. (#10082)

Fixes

  • ‼️ Preserved original image attachment paths after event cleanup so agents can continue to access attachments. (#10042)
  • Fixed plugin updates through URL and file installation. (#10053)
  • Fixed model selection in WebChat side threads and restored session model fallback for proactive agents. (#10065, #10028)
  • Fixed delivery of skills-like fallback replies during streaming. (#10025)
  • Made scheduled agents honor session context compression settings and record failures when the runner ends in an error state. (#9992, #9987)
  • Fixed OpenAI endpoint resolution when api_base is empty. (#10079)
  • Fixed missing fields, swallowed error codes, and parameter validation in web search tools. (#9979)
  • Spaced out concurrent URL-cleaning rate limiter waiters in the knowledge base. (#10015)
  • Improved Lark private-message delivery by falling back from rejected open IDs to known chat IDs without duplicating successful sends. (#10018)
  • Fixed QQ Official C2C streaming responses missing the closing frame. (#10069)
  • Reduced Telegram polling and conflict error log spam. (#10027, #10046)
  • Fixed mention-all handling in message outlines. (#9993)
  • Fixed current conversation deletion when the active conversation must be resolved from storage, and used WebChat session titles as a fallback in conversation history. (#10003, #9983)
  • Batched console log rendering to prevent WebUI freezes. (#9988, #9990)
  • Rejected stale WebUI assets in desktop-managed mode and excluded temporary dashboard build artifacts from PyPI source packages. (#9898, #10036)

Upgrade Notes

  • /reset now follows /new: the built-in Agent starts a new conversation while preserving the old history and current persona. Third-party Agent backends reset their stored session IDs and may not preserve old records. (#10004)

中文

新增与优化

  • 新增 ChatUI 历史消息分页加载，优化聊天设置、消息输入框和流式交互体验。默认显示推理过程，工作区代码预览使用 Shiki 语法高亮。 (#9667, #10021, #10020, #10023)
  • 为模型选择器新增提供商来源筛选和分组标题吸顶，优化模型提供商配置对话框。 (#10084, #10007)
  • 为内置 Agent 新增自适应输入图片处理：按需缩放、转换格式，并将动图转为多帧拼图。在 CUA 沙箱下保留静图尺寸，图片可能超过模型提供商上传限制时给出警告。 (#9703, #10071)
  • 统一 /new 和 /reset 的新建对话行为，并支持在指令管理中配置权限。 (#10004)
  • 新增桌面端更新下载进度显示，精简 WebUI 打包的字体和图表资源。 (#10050, #10034)
  • 改进配置滑块的健壮性。 (#10037)
  • 统一模型提供商请求的 User-Agent，使其包含 AstrBot 版本。 (#10082)

... (truncated)

Commits
  • ab42c0d chore: bump version to 4.28.1 (#10085)
  • 02fef48 fix: preserve input image geometry under CUA sandbox and warn on oversized im...
  • e79c0d7 fix: reduce Telegram log spam from polling and conflict errors (#10027) (#10046)
  • 7ee03f2 fix: preserve OpenAI endpoint resolution for empty api_base (#10079)
  • 56cbc4a feat: optimize model selection with source filters and sticky groups (#10084)
  • 31d7989 fix(qqofficial): always send the state=10 closing frame in C2C streaming (#10...
  • d524b87 fix: standardize provider user agents with the AstrBot version (#10082)
  • bd046ed feat: adaptively prepare model input images in the local process stage (#9703)
  • 4007d64 fix: use selected model in webchat side threads (#10065)
  • 7ec39bd fix: support plugin updates through URL and file installation (#10053)
  • Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor-and-patch group with 4 updates
6c1132c 
Bumps the minor-and-patch group with 4 updates: [faiss-cpu](https://github.com/facebookresearch/faiss), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [astrbot](https://github.com/AstrBotDevs/AstrBot) and [ruff](https://github.com/astral-sh/ruff).


Updates `faiss-cpu` from 1.15.0 to 1.15.1
- [Release notes](https://github.com/facebookresearch/faiss/releases)
- [Changelog](https://github.com/facebookresearch/faiss/blob/main/CHANGELOG.md)
- [Commits](facebookresearch/faiss@v1.15.0...v1.15.1)

Updates `sqlalchemy` from 2.0.52 to 2.0.54
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `astrbot` from 4.28.0 to 4.28.1
- [Release notes](https://github.com/AstrBotDevs/AstrBot/releases)
- [Commits](AstrBotDevs/AstrBot@v4.28.0...v4.28.1)

Updates `ruff` from 0.16.7 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.7...0.16.8)

---
updated-dependencies:
- dependency-name: faiss-cpu
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sqlalchemy
  dependency-version: 2.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astrbot
  dependency-version: 4.28.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from INSide-734 as a code owner September 21, 2026 01:14

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@INSide-734 INSide-734 Awaiting requested review from INSide-734 INSide-734 is a code owner

Assignees

No one assigned

Labels

area: core

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants