build(deps): Bump the pip-sidecar-patch-minor group across 1 directory with 17 updates

[dependabot]

Bumps the pip-sidecar-patch-minor group with 17 updates in the /sidecar directory:

Package	From	To
kokoro-onnx	0.5.0	0.6.1
onnxruntime	1.28.0	1.29.0
scipy	1.18.0	1.18.1
speechbrain	1.1.0	1.1.1
huggingface-hub	1.26.0	1.29.0
click	8.4.2	8.5.0
ctranslate2	4.8.1	4.8.2
filelock	3.32.2	3.32.5
idna	3.18	3.19
joblib	1.5.3	1.6.0
numpy	2.5.1	2.5.2
platformdirs	4.11.0	4.11.7
protobuf	7.35.1	7.36.1
pygments	2.20.0	2.21.0
regex	2026.7.19	2026.9.3
typer	0.27.1	0.27.2
nvidia-cudnn-cu12	9.24.0.43	9.25.1.1

Updates kokoro-onnx from 0.5.0 to 0.6.1

Release notes

Sourced from kokoro-onnx's releases.

model-files

kokoro-v0_19.onnx: (310MB): optimized f32 version from taylorchu/kokoro-onnx kokoro-v0_19.fp16.onnx: (169MB): optimized f16 version from taylorchu/kokoro-onnx kokoro-v0_19.int8.onnx: (88MB): optimized int8 version from taylorchu/kokoro-onnx voices.bin: npz (numpy) key value pairs of style vectors contains the following voices (26):

af_alloy, af_aoede, af_bella, af_jessica, af_kore, af_nicole, af_nova, af_river, af_sarah, af_sky, am_adam, am_echo, am_eric, am_fenrir, am_liam, am_michael, am_onyx, am_puck, bf_alice, bf_emma, bf_isabella, bf_lily, bm_daniel, bm_fable, bm_george, bm_lewis

Commits

• See full diff in compare view

Updates onnxruntime from 1.28.0 to 1.29.0

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.29.0

Announcements & Breaking Changes

• onnxruntime-web has announced the deprecation of WebGL and JSEP. The native WebGPU EP is the recommended path going forward. See the deprecation and migration plans for details (#29716, #31683).
• POSIX telemetry is now available on Linux, macOS, Android, and iOS when ONNX Runtime is built with telemetry enabled. It does not change the public ABI, WebAssembly remains telemetry-free, and setting ORT_DISABLE_TELEMETRY=1 before initialization disables non-Windows telemetry for the process (#27379, #29872).
• The unused internal onnxruntime/python/tools/tensorrt dashboard tooling was removed. This does not affect the TensorRT Execution Provider APIs (#29395).

Security Fixes

Path, bounds, and input validation

• Fixed a path traversal vulnerability in TensorRT and NvTensorRTRTX engine refitting by making external-data path validation unconditional (#29396).
• Validated the CPU MoE k attribute against the number of experts and fixed a CPU TensorScatter security issue (#29907, #29916).
• Added missing rank, shape, and parameter validation for pooling, LSTM and DynamicQuantizeLSTM, Sampling, FeatureVectorizer, SkipLayerNorm, QLinearConv, Whisper decoding, RNN activations, GridSample, contrib Range, and CropAndResize (#29254, #29255, #29265, #29579, #29595, #29605, #29871, #31636, #31671, #31675, #31676, #31684).
• Hardened CUDA indexing and buffer handling in GridSample, transpose, GatherBlockQuantized, InstanceNormalization, LayerNorm/RMSNorm, BeamSearch, DeformConv, AveragePool, and MaxPool (#29581, #29631, #29638, #31640, #31642, #31644, #31645, #31647, #31650).
• Fixed packed sub-byte tensor over-copying in OrtApi::GetValue and validated DML constant tensor byte sizes (#29157, #31665).

Supply chain and tooling

• Updated npm lockfiles, refreshed the Next.js end-to-end fixture lockfile for security advisories, and upgraded adm-zip for onnxruntime-node (#29827, #29926, #31192).

New Features

Core APIs & Runtime

• Default intra-op and inter-op thread-pool sizes can now be set with ORT_INTRA_OP_NUM_THREADS and ORT_INTER_OP_NUM_THREADS. Explicit thread settings still take precedence, and 0 preserves machine-sized defaults (#29688).
• Added weightless-model support for all initializer types, allowed zero-input EpContext nodes, and wired maximum-shape inference into workspace estimation (#29607, #29799, #31613).
• Added ONNX-domain support for rotary embedding and a fused MRotaryEmbedding contrib operator for Qwen mRoPE variants (#29261, #31728).
• Added multi-shape profiling to onnxruntime_perf_test through --data_shape, plus verbose graph-transformer tracing and broader inference-session error-path coverage (#29555, #29558, #29569, #29571).

Execution Provider ABI & Plugin EPs

• WebGPU now supports device-free compile-only sessions for offline graph transformation (#29681).
• Expanded CUDA plugin EP packaging and testing, including Windows ARM64 package and size options, updated package outputs, and aligned architecture selections across Python, C API, TensorRT, Node.js, and plugin packages (#31635, #31722, #31992).
• Improved plugin lifecycle handling by unloading failed EP library loads and fixing allocator-deleter lifetime (#29634, #29770).

Execution Provider Updates

NVIDIA CUDA EP

Attention and decoding

• Added PagedAttention with quantized KV cache, XQA decode, MLA, QK-Norm, and head-sink support (#29912).
• Extended quantized KV-cache support with attention sinks, independent and per-channel scales, sliding-window cache support, and a fused K/V dequantization launch (#29900, #29904, #31480).
• Added a cuDNN SDPA decode tier to the standard ONNX Attention CUDA kernel and enabled cuDNN SDPA for contrib Attention (#29715, #29717).
• Added attention_bias support to the GroupQueryAttention unfused path and state_window support to LinearAttention and CausalConvWithState for MTP (#29525, #31157).
• Fixed LinearAttention on GPUs with limited shared memory (#31982).

MoE and quantized GEMM

... (truncated)

Commits

• 2e2543f [CUDA] Update cuda archs in packaging pipelines (#31992)
• 9b174a4 [CUDA] Add GatedAdd contrib operator (#31835)
• a29da16 Validate SkipLayerNorm prepacked lengths (#31676)
• 831fa2f Validate whisper beginning_timestamp_token_id bounds (#31636)
• 3cee186 Handle RNN activation parameters safely (#31675)
• 37d79e3 Harden CUDA fp16 transpose index math against int overflow (#31644)
• 45bdd4c Validate QLinearConv bias size against output channels (#31684)
• f5de4c3 Fix TfIdfVectorizer weight indexing semantics (#31649)
• d3abafc Validate FeatureVectorizer batch sizes (#31671)
• 1441b36 [WebGPU] Add MRotaryEmbedding support (#31976)
• Additional commits viewable in compare view

Updates scipy from 1.18.0 to 1.18.1

Release notes

Sourced from scipy's releases.

SciPy 1.18.1 Release Notes

SciPy 1.18.1 is a bug-fix release with no new features compared to 1.18.0. This release includes binaries on PyPI for Python 3.15, and the minimum required version of the GCC toolchain has been increased to 10.3.0.

Authors

• Name (commits)
• Wasim Akram (2) +
• Jake Bowhay (1)
• Michael Bratsch (1)
• Dietrich Brunn (1)
• Evgeni Burovski (1)
• Aadya Chinubhai (1)
• Lucas Colley (3)
• Tekin Ertekin (1) +
• Fuyugithub (2) +
• Ralf Gommers (11)
• Joren Hammudoglu (1)
• Ijtihed Kilani (1) +
• Andrew Nelson (2)
• Ilhan Polat (1)
• Tyler Reddy (39)
• romao05 (1) +
• Michael Simacek (1) +
• Jacob Vanderplas (2)

A total of 18 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Note that the source and binary assets associated with this release were published to PyPI using trusted publishing, and so the trusted assets and their hashes are made available more securely at https://pypi.org/project/scipy/1.18.1/ rather than providing them here in a less secure manner.

A complete list of issues and pull requests associated with this release is available in the associated README.txt.

Commits

• e4e854e REL: SciPy 1.18.1 rel commit
• 3c8e5f8 BLD, MAINT: pythran bounds for 1.18.1 (#25978)
• 54c0f95 BLD, MAINT: pythran bounds for 1.18.1
• 45a355d Merge pull request #25884 from tylerjereddy/treddy_backports_1.18.1
• a717e28 DOC: PR 25884 revisions
• bb489c0 DOC: PR 25884 revisions
• 09bca24 BLD: package: pin meson on win-64 to avoid clang-cl bug (#25913)
• 095fe56 DOC, BLD: PR 25884 revisions
• e66ea64 DOC: update minimum GCC version in toolchain roadmap
• c021653 TST: tolerance bumps and skips on 32-bit platforms
• Additional commits viewable in compare view

Updates speechbrain from 1.1.0 to 1.1.1

Release notes

Sourced from speechbrain's releases.

v1.1.1

Recipes

• [da704dd]: FocalCodec-Stream [ICASSP 2026] (#3050) (Luca Della Libera) #3050

Documentation

• fix incorrect parameter description in load_data_json (#3053) #3053 (Bimochan raj kunwar)
• [830d601]: add markdown files for agentic models (#3048) (Adel Moumen) #3048

Security

• [22a6166]: Use safeloader to load checkpoint meta files (#3067) (Peter Plantinga) #3067

Bug Fixes

• mel_spectogram should be mel_spectrogram (#3063) #3063 (Access)
• Windows-incompatible python's inspect file guard in LazyModule (#3065) #3065 (Need-an-AwP)
• Decoder input tensor dimension error (#3049) #3049 (Paras)
• [9c826ef]: Add hooks to ensure saving of kmeans model works correctly (#3047) (Peter Plantinga) #3047
• [8a89eba]: Fix device handling for MPS (#3055) (flexthink) #3055
• [d0d15bb]: Fix incorrect documented defaults for HF wrapper freeze/output_norm (#3060) (#3062) (Deeksha Manjunath) #3062
• [e5cb1f6]: Fix #3033: Fix closure variable bug in classification_error (#3061) (Nandana Dileep) #3061
• [841e205]: Fix LoRA adapter support for convolutional layers (fixes #3056) (#3064) (oly) #3064
• [dff42ee]: fix float columns being converted to string in from_csv (#3043) (Novikov Kirill) #3043
• [d9ee175]: Fix LengthsCapable containers dropping lengths for wav_lens-named layers (fixes #2986) (#3068) (oly) #3068
• [825d024]: Fixed TransformerST bug with ASR masks (#2984) (Filip Gębala) #2984

Commits

• 89ead74 Update version
• 1fbb135 Fix ruff errors from merged PRs
• 825d024 Fixed TransformerST bug with ASR masks (#2984)
• 830d601 add markdown files for agentic models (#3048)
• d9ee175 Fix LengthsCapable containers dropping lengths for wav_lens-named layers (fix...
• dff42ee fix float columns being converted to string in from_csv (#3043)
• e400a03 Fix ruff errors from merged PRs
• d4316ec fix: Decoder input tensor dimension error (#3049)
• 841e205 Fix LoRA adapter support for convolutional layers (fixes #3056) (#3064)
• 3d6d2da fix: Windows-incompatible python's inspect file guard in LazyModule (#3065)
• Additional commits viewable in compare view

Updates huggingface-hub from 1.26.0 to 1.29.0

Release notes

Sourced from huggingface-hub's releases.

[v1.29.0] Fix Xet downloads rate limits, bucket visibility updates, and security fixes

⚡ Xet downloads no longer make one API call per file

Since v1.19.0, downloading a repository with hf_xet eagerly requested a xet read token for every single file, because each download group was built without cached connection info. On repos with many files this quickly added up — a 77k-file repo made ~1,500 Hub API calls per minute — and eventually hit the rate limiter, leaving snapshot_download appearing stalled for minutes before failing with a 429 Too Many Requests. This release restores the Python-side connection info cache so the endpoint and token are reused across download groups, skipping the eager per-file token request entirely. Large downloads are both faster and far less likely to be rate-limited.

• [Xet] Cache connection info to avoid one token request per file by @​hanouticelina in #4732

🪣 Change bucket visibility after creation

Bucket visibility used to be a create-time-only setting: once a bucket existed, there was no way to flip it between private and public. You can now update it with the new HfApi.update_bucket_settings() method (also exported as update_bucket_settings) or from the CLI with hf buckets settings, which takes either --private or --public.

>>> from huggingface_hub import update_bucket_settings
Make a bucket private
>>> update_bucket_settings("username/my-bucket", private=True)
Make it public again
>>> update_bucket_settings("username/my-bucket", private=False)

# Make a bucket private
>>> hf buckets settings username/my-bucket --private
✓ Bucket settings updated
  bucket_id: username/my-bucket
  private: True
Make it public again
>>> hf buckets settings username/my-bucket --public

📚 Documentation: Buckets guide

• [Buckets] Add support for updating bucket visibility by @​hanouticelina in #4715

🔒 Security fixes

Two security-relevant fixes land in this release. First, the path-traversal guard introduced earlier for CVE-2026-15717 is now extended to hf buckets sync / sync_bucket(): when downloading from a bucket, server-supplied file keys were joined straight onto the local destination without validation, so a malicious or compromised bucket could return anchored or traversing keys (/etc/cron.d/evil, ../../../../etc/passwd, Windows drive-absolute or UNC paths) that escape the chosen directory and write arbitrary files. Remote paths are now validated the same way as in the original fix. Second, load_state_dict_from_file could fall back to pickle deserialization for a shard named exactly .safetensors: Path.suffix returns an empty string for extension-only filenames, so a file that passed sharded-checkpoint validation (which uses str.endswith) was still routed to torch.load(weights_only=False). A shared _is_safetensors() helper now guarantees both code paths use the same matching semantics, so an index-declared "safetensors" checkpoint can never be loaded with pickle.

• [Buckets] Validate remote paths in bucket sync to prevent path traversal by @​hanouticelina in #4731
• Fix extension-confusion fallback to pickle in load_state_dict_from_file (add _is_safetensors) by @​moon-bot-app[bot] in #4737

🤖 Inference

• [Inference Providers] Send LoRA weights for fal-ai text-to-video by @​moon-bot-app[bot] in #4706
• Hint at stream=True when a non-streaming inference call fails with 504 by @​moon-bot-app[bot] in #4744

🖥️ CLI

... (truncated)

Commits

• 4237d95 Release: v1.29.0
• dd44abc Release: v1.29.0.rc1
• 38d29a8 [Release] Refresh OpenCode model cache before validating RELEASE_NOTES_MODEL ...
• b1bf950 Release: v1.29.0.rc0
• 2e62777 [CI] Auto-close community PRs without a maintainer-scoped issue (#4695)
• c5eb13c [CLI] Installer: point at shadowed newer Python on macOS (#4758)
• 585c075 [Buckets] Validate remote paths in bucket sync to prevent path traversal (#4731)
• 4dcfe7e [CLI] Fix argument help rendering with click 8.5 (#4759)
• 2c60641 [Xet] Cache connection info to avoid one token request per file (#4732)
• c6be77f Hint at stream=True when a non-streaming inference call fails with 504 (#4744)
• Additional commits viewable in compare view

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

• Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
• Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
• {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
• confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
• {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
• Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581
• style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
• The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
• unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
• Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

• Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
• Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
• {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
• confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
• Fix test failures when using pytest >= 9.1. {pr}3656
• {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
• Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581
• style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
• The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
• unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
• Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
• {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
• The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

• 8b19813 Release version 8.5.0
• 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
• 131c86a Add FAQ entry about UnicodeEncodeError on Windows
• e1fd594 Add support of pathlib.Path to edit (#3781)
• a1d8785 Add support of pathlib.Path to edit
• 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
• a6256bf Forwards all user's parameters set in PAGER
• 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
• 9835b0f Resolve the pager command once, in _pager_contextmanager
• f36d58b Refactor pager stream handling (#3767)
• Additional commits viewable in compare view

Updates ctranslate2 from 4.8.1 to 4.8.2

Release notes

Sourced from ctranslate2's releases.

v4.8.2

Fixes and improvements

• Import Python converters and specs lazily to avoid loading torch for inference-only use (#2080) by @​Anai-Guo
• Fix out-of-bounds reads in StorageView index validation (#2073) by @​jordimas, reported by Nathan Keys (Halo Forge Labs)
• Update cxxopts to v3.3.1 for GCC 15 compatibility (#2084) by @​bekard
• Validate model variable sizes before allocation (#2091) by @​jordimas, reported by Hyeonbell
• Check StorageView reserve byte size before allocation (#2094) by @​infinityscroll
• Remove the runtime dependency on setuptools (#2096) by @​Ravencentric

Changelog

Sourced from ctranslate2's changelog.

v4.8.2 (2026-08-31)

Fixes and improvements

• Import Python converters and specs lazily to avoid loading torch for inference-only use (#2080) by @​Anai-Guo
• Fix out-of-bounds reads in StorageView index validation (#2073) by @​jordimas, reported by Nathan Keys (Halo Forge Labs)
• Update cxxopts to v3.3.1 for GCC 15 compatibility (#2084) by @​bekard
• Validate model variable sizes before allocation (#2091) by @​jordimas, reported by Hyeonbell
• Check StorageView reserve byte size before allocation (#2094) by @​infinityscroll
• Remove the runtime dependency on setuptools (#2096) by @​Ravencentric

Commits

• d44d2d0 Version 4.8.2 with CHANGELOG (#2095)
• f842545 remove runtime dependency on setuptools (#2096)
• af0453f Check StorageView reserve byte size before allocation (#2094)
• 0cc7ea3 Validate model variable sizes before allocation (#2091)
• 6419e4c update cxxopts to v3.3.1 (#2084)
• 3c57ed1 fix(python): import converters and specs lazily so inference does not load to...
• a93c2bf Check lower ranks in storage_view (#2073)
• See full diff in compare view

Updates filelock from 3.32.2 to 3.32.5

Release notes

Sourced from filelock's releases.

3.32.5

What's Changed

• 🧪 test(fork): report where a stalled fork stops by @​gaborbernat in tox-dev/filelock#715
• 📝 docs: say that mode is read-only in the thread-local section by @​Gares95 in tox-dev/filelock#716
• 🐛 fix(lease): clear token after failed acquire by @​lprnmns in tox-dev/filelock#721

New Contributors

• @​lprnmns made their first contribution in tox-dev/filelock#721

Full Changelog: tox-dev/filelock@3.32.4...3.32.5

3.32.4

What's Changed

• 🐛 fix: retry transient denials on open and claim read by @​gaborbernat in tox-dev/filelock#705
• 🧪 test: deflake six scheduled-run failures by @​gaborbernat in tox-dev/filelock#704
• 🧪 test: cover a reclaimed private record for real by @​gaborbernat in tox-dev/filelock#706
• 🧪 test(fork): fork once the event loop has closed by @​gaborbernat in tox-dev/filelock#714
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in tox-dev/filelock#713
• escape the hostname every marker publishes by @​dxbjavid in tox-dev/filelock#709

Full Changelog: tox-dev/filelock@3.32.3...3.32.4

3.32.3

What's Changed

• 🧪 test(strict): deflake close-fault injections on graalpy by @​gaborbernat in tox-dev/filelock#697
• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in tox-dev/filelock#700
• 🐛 fix(fork): survive audit events during interpreter shutdown by @​gaborbernat in tox-dev/filelock#703

Full Changelog: tox-dev/filelock@3.32.2...3.32.3

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

3.32.5 (2026-08-31)

---

• SoftFileLease.token and AsyncSoftFileLease.token now read None after a failed acquisition, so a contender turned away by a live holder no longer reports a token for a claim it never published. :pr:721
• Document that mode has no setter: unlike poll_interval, timeout, blocking and lifetime, it is fixed at construction and lock.mode = ... raises AttributeError. :pr:716

---

3.32.4 (2026-08-23)

---

• StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705
• WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705
• Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

---

3.32.3 (2026-08-13)

---

• The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

---

3.32.2 (2026-07-29)

---

• A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:691

---

3.32.1 (2026-07-26)

---

• Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

... (truncated)

Commits

• 1585dfe Release 3.32.5
• 00177c3 🐛 fix(lease): clear token after failed acquire (#721)
• 5aeb9b6 📝 docs: say that mode is read-only in the thread-local section (#716)
• 2634dd1 [pre-commit.ci] pre-commit autoupdate (#720)
• 37dccf0 🧪 test(fork): report where a stalled fork stops (#715)
• cb493d6 Release 3.32.4
• fe07a11 escape the hostname every marker publishes (#709)
• 232732f 🔧 chore: batch dependency updates weekly on Tuesday (#713)
• 2966eb5 🧪 test(fork): fork once the event loop has closed (#714)
• 61511eb build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#712)
• Additional commits viewable in compare view

Updates idna from 3.18 to 3.19

Release notes

Sourced from idna's releases.

v3.19

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
• Reject A-labels that are not the canonical Punycode encoding of their U-label.
• Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
• Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
• Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
• Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Changelog

Sourced from idna's changelog.

3.19 (2026-08-18)

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transiti...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0ca4b1c765

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Update the exact-pin guards with the runtime bumps

When the default sidecar test suite runs, TestShippedRequirementFiles.test_sidecar_file_parses_with_expected_pins still asserts ctranslate2 == 4.8.1 (and separately nvidia-cudnn-cu12 == 9.24.0.43), so changing this manifest to 4.8.2/9.25.1.1 makes the blocking pytest gate fail. That test explicitly treats updating its expected values as the required human-review step, so the assertions and validation notes need to move with these pins.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep the SpeechBrain version documentation synchronized

When users consult the GPU setup documentation—or the repository's SSOT verifier is run—this new 1.1.1 pin conflicts with the live PINNED to 1.1.0 explanation above, docs/ROADMAP.md, and docs/WU-R1-MULTISPEAKER-ENGINE.md. Running python docs/validation/tools/verify_ssot_claims.py now reports C1b as broken because the documented and literal pins differ, so the version-coupled prose and verifier expectation should be updated with the dependency.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Make re-bootstrap replace the previously installed packages

For an existing packaged installation upgraded to this build, the requirements fingerprint correctly triggers a re-bootstrap, but runtime_setup.bootstrap.build_pip_steps runs pip install --target <existing-env> without --upgrade or first clearing the target. The inspected pip install --help states that --target “by default ... will not replace existing files/folders” and requires --upgrade to replace them, so the run can leave old versions such as onnxruntime 1.28.0 in place and then write the new sentinel/fingerprint as though 1.29.0 were installed, preventing another retry.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Re-provision legacy installs before recording the new pins

For a user upgrading from a release whose completed installation predates .first-run-requirements.json, these changed runtime pins are never installed: fingerprintInSync(null, shippedFp) deliberately returns true, classifyFirstRun therefore selects none, and main.ts backfills the current fingerprint without running bootstrap. The old environment is then permanently recorded as matching this manifest, so future launches cannot detect that it still contains the pre-update numpy, onnxruntime, Kokoro, and related packages; this dependency-changing release needs a migration signal that distinguishes a genuinely current legacy environment from one requiring re-provisioning.

Useful? React with 👍 / 👎.