build(deps): bump the production group across 1 directory with 5 updates

[dependabot]

Bumps the production group with 5 updates in the / directory:

Package	From	To
numpy	2.2.6	2.3.1
pillow	11.2.1	11.3.0
polars	1.29.0	1.31.0
scikit-learn	1.6.1	1.7.0
transformers	4.52.3	4.53.0

Updates numpy from 2.2.6 to 2.3.1

Release notes

Sourced from numpy's releases.

v2.3.1 (Jun 21, 2025)

NumPy 2.3.1 Release Notes

The NumPy 2.3.1 release is a patch release with several bug fixes, annotation improvements, and better support for OpenBSD. Highlights are:

• Fix bug in matmul for non-contiguous out kwarg parameter
• Fix for Accelerate runtime warnings on M4 hardware
• Fix new in NumPy 2.3.0 np.vectorize casting errors
• Improved support of cpu features for FreeBSD and OpenBSD

This release supports Python versions 3.11-3.13, Python 3.14 will be supported when it is released.

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Brad Smith +
• Charles Harris
• Developer-Ecosystem-Engineering
• François Rozet
• Joren Hammudoglu
• Matti Picus
• Mugundan Selvanayagam
• Nathan Goldbaum
• Sebastian Berg

Pull requests merged

A total of 12 pull requests were merged for this release.

• #29140: MAINT: Prepare 2.3.x for further development
• #29191: BUG: fix matmul with transposed out arg (#29179)
• #29192: TYP: Backport typing fixes and improvements.
• #29205: BUG: Revert np.vectorize casting to legacy behavior (#29196)
• #29222: TYP: Backport typing fixes
• #29233: BUG: avoid negating unsigned integers in resize implementation...
• #29234: TST: Fix test that uses uninitialized memory (#29232)
• #29235: BUG: Address interaction between SME and FPSR (#29223)
• #29237: BUG: Enforce integer limitation in concatenate (#29231)
• #29238: CI: Add support for building NumPy with LLVM for Win-ARM64
• #29241: ENH: Detect CPU features on OpenBSD ARM and PowerPC64
• #29242: ENH: Detect CPU features on FreeBSD / OpenBSD RISC-V64.

Checksums

MD5

... (truncated)

Commits

• 4d833e5 Merge pull request #29251 from charris/prepare-2.3.1-release
• 13df6d1 REL: Prepare for the NumPy 2.3.1 release [wheel build]
• daeb8bd Merge pull request #29242 from charris/backport-29224
• eff9ae3 Merge pull request #29241 from charris/backport-29221
• c2fa1de ENH: Detect CPU features on FreeBSD / OpenBSD RISC-V64.
• a52c49e ENH: Detect CPU features on OpenBSD ARM and PowerPC64
• b3f56fd Merge pull request #29238 from charris/backport29215
• b20d754 CI: Add conditions to check hash of LLVM package
• 4c4617f CI: Fix reusable LLVM block
• d3fd4a6 CI: fix action.yml naming
• Additional commits viewable in compare view

Updates pillow from 11.2.1 to 11.3.0

Release notes

Sourced from pillow's releases.

11.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/11.3.0.html

Deprecations

• Deprecate fromarray mode argument #9018 [@​radarhere]
• Deprecate saving I mode images as PNG #9023 [@​radarhere]

Documentation

• Added release notes for #9041 #9042 [@​radarhere]
• Add release notes for #8912 and #8969 #9019 [@​radarhere]
• ImageFont does not handle multiline text #9000 [@​radarhere]
• Updated Ubuntu CI targets #8988 [@​radarhere]
• Update MinGW package names #8987 [@​H4M5TER]
• Updated docstring #8943 [@​radarhere]
• Mention that tobytes() with the raw encoder uses Pack.c #8878 [@​radarhere]
• Refactor docs Makefile #8933 [@​hugovk]
• Add template for quarterly release issue #8932 [@​aclark4life]
• Add list of third party plugins #8910 [@​radarhere]
• Update redirected URL #8919 [@​radarhere]
• Docs: use sentence case for headers #8914 [@​hugovk]
• Docs: remove unused Makefile targets #8917 [@​hugovk]
• Remove indentation from lists #8915 [@​radarhere]
• Python 3.13 is tested on Arch #8894 [@​radarhere]
• Move XV Thumbnails to read only section #8893 [@​aclark4life]
• Updated macOS tested Pillow versions #8890 [@​radarhere]

Dependencies

• Add AVIF to wheels using only aomenc and dav1d AVIF codecs for reduced size #8858 [@​fdintino]
• Use same AVIF URL when fetching dependency #8871 [@​radarhere]
• Update dependency mypy to v1.16.1 #9026 [@renovate[bot]]
• Update libpng to 1.6.49 #9014 [@​radarhere]
• Update dependency cibuildwheel to v3 #9010 [@renovate[bot]]
• Updated libjpeg-turbo to 3.1.1 #9009 [@​radarhere]
• Update dependency mypy to v1.16.0 #8991 [@renovate[bot]]
• Updated libpng to 1.6.48 #8940 [@​radarhere]
• Updated Ghostscript to 10.5.1 #8939 [@​radarhere]
• Updated harfbuzz to 11.2.1 #8937 [@​radarhere]
• Updated libavif to 1.3.0 #8949 [@​radarhere]
• Update dependency cibuildwheel to v2.23.3 #8931 [@renovate[bot]]
• Updated harfbuzz to 11.1.0 #8904 [@​radarhere]

Testing

• Add match parameter to pytest.warns() #9038 [@​hugovk]
• Increase pytest verbosity #9040 [@​radarhere]
• Improve SgiImagePlugin test coverage #8896 [@​radarhere]
• Update ruff pre-commit ID #8994 [@​radarhere]

... (truncated)

Commits

• 89f1f46 11.3.0 version bump
• f2de251 Updated check script paths (#9052)
• 84855d1 Raise FileNotFoundError when opening an empty path (#9048)
• 204d11d Raise FileNotFoundError when opening an empty path
• 2b39f75 Handle IPTC TIFF tags with incorrect type (#8925)
• e7a53ba Do not update palette for L mode GIF frame (#8924)
• c22230b Use save parameters as encoderinfo defaults (#9001)
• da10ed1 Add support for iOS (#9030)
• be2b4e7 Fix qtables and quality scaling (#8879)
• d4162f8 Updated return type
• Additional commits viewable in compare view

Updates polars from 1.29.0 to 1.31.0

Release notes

Sourced from polars's releases.

Python Polars 1.31.0

💥 Breaking changes

• Remove old streaming engine (#23103)

⚠️ Deprecations

• Deprecate allow_missing_columns in scan_parquet in favor of missing_columns (#22784)

🚀 Performance improvements

• Improve streaming groupby CSE (#23092)
• Move row index materialization in post-apply to occur after slicing (#22995)
• Add first_(true|false)_idx to BooleanChunked and use in bool arg_(min|max) (#22907)
• Don't go through row encoding for most types on index_of (#22903)
• Optimise low-level null scans and arg_max for bools (when chunked) (#22897)
• Optimize multiscan performance (#22886)

✨ Enhancements

• DataType expressions in Python (#23167)
• Native implementation for Iceberg positional deletes (#23091)
• Remove old streaming engine (#23103)
• Basic implementation of DataTypeExpr in Rust DSL (#23049)
• Add required: bool to ParquetFieldOverwrites (#23013)
• Support serializing name.map_fields (#22997)
• Support serializing Expr::RenameAlias (#22988)
• Remove duplicate verbose logging from FetchedCredentialsCache (#22973)
• Add keys column in finish_callback (#22968)
• Add extra_columns parameter to scan_parquet (#22699)
• Add CORR function to polars SQL (#22690)
• Add per partition sort and finish callback to sinks (#22789)
• Support descendingly-sorted values in search_sorted() (#22825)
• Derive DSL schema (#22866)

🐞 Bug fixes

• Remove axis in show_graph (#23218)
• Remove axis ticks in show_graph (#23210)
• Restrict custom aggregate_function in pivot to pl.element() (#23155)
• Don't leak SourceToken in in-memory sink linearize (#23201)
• Fix panic reading empty parquet with multiple boolean columns (#23159)
• Raise ComputeError instead of panicking in truncate when mixing month/week/day/sub-daily units (#23176)
• Materialize list.eval with unknown type (#23186)
• Only set sorting flag for 1st column with PQ SortingColumns (#23184)
• Typo in AExprBuilder (#23171)
• Null return from var/std on scalar column (#23158)
• Support Datetime broadcast in list.concat (#23137)
• Ensure projection pushdown maintains right table schema (#22603)
• Add Null dtype support to arg_sort_by (#23107)

... (truncated)

Commits

• 6e02c20 Python Polars 1.31.0 (#23226)
• 5c154c8 chore: Change flake to use venv (#23219)
• f0ae4d3 fix(python): Remove axis in show_graph (#23218)
• bc974eb Revert "fix(python): Don't call unnest for objects implementing `__arrow_c_ar...
• 171c847 fix(python): Remove AXIS ticks in show_graph (#23210)
• d4da872 fix: Restrict custom aggregate_function in pivot to pl.element() (#23155)
• 455423c fix: Don't leak SourceToken in in-memory sink linearize (#23201)
• 7c2c513 chore: Add default_alloc feature to py-polars (#23202)
• 383f1b3 Python Polars 1.31.0 pre-release (#23192)
• 6891fec fix: Fix panic reading empty parquet with multiple boolean columns (#23159)
• Additional commits viewable in compare view

Updates scikit-learn from 1.6.1 to 1.7.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.7.0

We're happy to announce the 1.7.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_7_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.7.html

This version supports Python versions 3.10 to 3.13 and features an experimental support of free-threaded CPython.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Commits

• 5194440 [cd build]
• 5d2ad4f DOC Don't use deprecated RocCurveDisplay kwargs (#31482)
• 0baf56f DOC Release highlights for 1.7 (#31469)
• 01e18c4 generate changelog
• aecba1b set version
• f3094eb MNT Make sample_weight checking more consistent in regression metrics (#30886)
• 3994e12 DOC: Update link to Least Angle Regression paper (#31433)
• 85403cb TST Fix array API test_fill_or_add_to_diagonal (#31439)
• 546936b DOC: use curve_kwargs instead of kwargs in example to avoid warnings (#31447)
• 0c1c77c DOC Add link to spectral coclustering (#31422)
• Additional commits viewable in compare view

Updates transformers from 4.52.3 to 4.53.0

Release notes

Sourced from transformers's releases.

Release v4.53.0

Gemma3n

Gemma 3n models are designed for efficient execution on low-resource devices. They are capable of multimodal input, handling text, image, video, and audio input, and generating text outputs, with open weights for pre-trained and instruction-tuned variants. These models were trained with data in over 140 spoken languages.

Gemma 3n models use selective parameter activation technology to reduce resource requirements. This technique allows the models to operate at an effective size of 2B and 4B parameters, which is lower than the total number of parameters they contain. For more information on Gemma 3n's efficient parameter management technology, see the Gemma 3n page.

from transformers import pipeline
import torch
pipe = pipeline(
"image-text-to-text",
torch_dtype=torch.bfloat16,
model="google/gemma-3n-e4b",
device="cuda",
)
output = pipe(
"https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/bee.jpg",
text="<image_soft_token> in this image, there is"
)
print(output)

Dia

Dia is an opensource text-to-speech (TTS) model (1.6B parameters) developed by Nari Labs. It can generate highly realistic dialogue from transcript including nonverbal communications such as laughter and coughing. Furthermore, emotion and tone control is also possible via audio conditioning (voice cloning).

Model Architecture: Dia is an encoder-decoder transformer based on the original transformer architecture. However, some more modern features such as rotational positional embeddings (RoPE) are also included. For its text portion (encoder), a byte tokenizer is utilized while for the audio portion (decoder), a pretrained codec model DAC is used - DAC encodes speech into discrete codebook tokens and decodes them back into audio.

• Add Dia model by @​buttercrab in #38405

Kyutai Speech-to-Text

Kyutai STT is a speech-to-text model architecture based on the Mimi codec, which encodes audio into discrete tokens in a streaming fashion, and a Moshi-like autoregressive decoder. Kyutai’s lab has released two model checkpoints:

• kyutai/stt-1b-en_fr: a 1B-parameter model capable of transcribing both English and French

... (truncated)

Commits

• 67ddc82 Release: v4.53.0
• 0a8081b [Modeling] Fix encoder CPU offloading for whisper (#38994)
• c63cfd6 Gemma 3n (#39059)
• 3e5cc12 [tests] remove tests from libraries with deprecated support (flax, tensorflow...
• cfff7ca [Whisper] Pipeline: handle long form generation (#35750)
• 02ecdcf add _keep_in_fp32_modules_strict (#39058)
• d973e62 fix condition where torch_dtype auto collides with model_kwargs. (#39054)
• 44b2316 [qwen2-vl] fix vision attention scaling (#39043)
• ae15715 polishing docs: error fixes for clarity (#39042)
• 3abeaba Create test for #38916 (custom generate from local dir with imports) (#39015)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.