diff --git a/.github/dependency-license-policy.toml b/.github/dependency-license-policy.toml index 2799aed9..f97ed155 100644 --- a/.github/dependency-license-policy.toml +++ b/.github/dependency-license-policy.toml @@ -17,6 +17,14 @@ source = '{"registry":"https://pypi.org/simple"}' license = "Apache-2.0" evidence = "https://github.com/pollen-robotics/reachy_mini/blob/v1.10.0/LICENSE" +[[clarification]] +ecosystem = "pypi" +name = "transformers" +version = "5.17.0" +source = '{"registry":"https://pypi.org/simple"}' +license = "Apache-2.0" +evidence = "https://github.com/huggingface/transformers/blob/v5.17.0/LICENSE" + [[exception]] ecosystem = "pypi" name = "gstreamer-bundle" diff --git a/projects/use-case-examples/reachy-mini-openshell/pyproject.toml b/projects/use-case-examples/reachy-mini-openshell/pyproject.toml index 11e55e83..bf6e0394 100644 --- a/projects/use-case-examples/reachy-mini-openshell/pyproject.toml +++ b/projects/use-case-examples/reachy-mini-openshell/pyproject.toml @@ -61,10 +61,10 @@ override-dependencies = [ ] [project.optional-dependencies] -local_vision = [ "torch>=2.13,<3", "transformers>=5.15.1,<6", "num2words",] +local_vision = [ "torch>=2.13,<3", "transformers>=5.17,<6", "num2words",] # 5.17.0 fixes Transformers security advisories. yolo_vision = [ "ultralytics", "supervision", "onnxruntime",] mediapipe_vision = [ "mediapipe>=0.10.35,<0.11",] -all_vision = [ "torch>=2.13,<3", "transformers>=5.15.1,<6", "num2words", "ultralytics", "supervision", "onnxruntime", "mediapipe>=0.10.35,<0.11",] +all_vision = [ "torch>=2.13,<3", "transformers>=5.17,<6", "num2words", "ultralytics", "supervision", "onnxruntime", "mediapipe>=0.10.35,<0.11",] # 5.17.0 fixes Transformers security advisories. [project.scripts] reachy-mini-conversation-app = "reachy_mini_conversation_app.main:main" diff --git a/projects/use-case-examples/reachy-mini-openshell/uv.lock b/projects/use-case-examples/reachy-mini-openshell/uv.lock index 18a4dbb4..f037a57e 100644 --- a/projects/use-case-examples/reachy-mini-openshell/uv.lock +++ b/projects/use-case-examples/reachy-mini-openshell/uv.lock @@ -1854,8 +1854,8 @@ requires-dist = [ { name = "torch", marker = "extra == 'all-vision'", specifier = ">=2.13,<3" }, { name = "torch", marker = "extra == 'local-vision'", specifier = ">=2.13,<3" }, { name = "tornado", specifier = ">=6.5.8,<7" }, - { name = "transformers", marker = "extra == 'all-vision'", specifier = ">=5.15.1,<6" }, - { name = "transformers", marker = "extra == 'local-vision'", specifier = ">=5.15.1,<6" }, + { name = "transformers", marker = "extra == 'all-vision'", specifier = ">=5.17,<6" }, + { name = "transformers", marker = "extra == 'local-vision'", specifier = ">=5.17,<6" }, { name = "ultralytics", marker = "extra == 'all-vision'" }, { name = "ultralytics", marker = "extra == 'yolo-vision'" }, ] @@ -2231,15 +2231,15 @@ wheels = [ [[package]] name = "tokenizers" -version = "0.22.2" +version = "0.23.2" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "huggingface-hub", marker = "sys_platform == 'darwin'" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/73/6f/f80cfef4a312e1fb34baf7d85c72d4411afde10978d4657f8cdd811d3ccc/tokenizers-0.22.2.tar.gz", hash = "sha256:473b83b915e547aa366d1eee11806deaf419e17be16310ac0a14077f1e28f917", size = 372115, upload-time = "2026-01-05T10:45:15.988Z" } +sdist = { url = "https://files.pythonhosted.org/packages/18/1e/bc6587c5ab643b2e17776cace9070a2ae73549c86bffac9934a600bf3c31/tokenizers-0.23.2.tar.gz", hash = "sha256:7f0f085686b9de0d0079e6f874ae053600db64c5d13049e0bbc0119926d25aac", size = 385745, upload-time = "2026-09-03T08:55:42.89Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/92/97/5dbfabf04c7e348e655e907ed27913e03db0923abb5dfdd120d7b25630e1/tokenizers-0.22.2-cp39-abi3-macosx_10_12_x86_64.whl", hash = "sha256:544dd704ae7238755d790de45ba8da072e9af3eea688f698b137915ae959281c", size = 3100275, upload-time = "2026-01-05T10:41:02.158Z" }, - { url = "https://files.pythonhosted.org/packages/2e/47/174dca0502ef88b28f1c9e06b73ce33500eedfac7a7692108aec220464e7/tokenizers-0.22.2-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:1e418a55456beedca4621dbab65a318981467a2b188e982a23e117f115ce5001", size = 2981472, upload-time = "2026-01-05T10:41:00.276Z" }, + { url = "https://files.pythonhosted.org/packages/4d/ed/8a443528baa6fac8dfe8c3b75b038c63ac92bb539bcabe311e227c718173/tokenizers-0.23.2-cp310-abi3-macosx_10_12_x86_64.whl", hash = "sha256:85a9a357a3764aecc904ee76bdaf8cf1ad8e5a67a1b929a487c4a39b49ed0e90", size = 3148852, upload-time = "2026-09-03T08:55:30.874Z" }, + { url = "https://files.pythonhosted.org/packages/67/49/22da045a91732384d3a3771816bf188dc5a1f702c32e635afa7c679c0bef/tokenizers-0.23.2-cp310-abi3-macosx_11_0_arm64.whl", hash = "sha256:986670e43691469dcee610ea0f846f91a8f84e91fc6f7a48d4c064414c0ec2bf", size = 3101593, upload-time = "2026-09-03T08:55:28.587Z" }, ] [[package]] @@ -2313,7 +2313,7 @@ wheels = [ [[package]] name = "transformers" -version = "5.15.1" +version = "5.17.0" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "huggingface-hub", marker = "sys_platform == 'darwin'" }, @@ -2326,9 +2326,9 @@ dependencies = [ { name = "tqdm", marker = "sys_platform == 'darwin'" }, { name = "typer", marker = "sys_platform == 'darwin'" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/2a/92/c50c61da7046bbb59a4d011291aeadcfb4d7980ab36fdb31e93823a3fb93/transformers-5.15.1.tar.gz", hash = "sha256:27c996bd9075ddc82d40f8590dfdc81ea45f611bfca477e0db5d7fd257a482f7", size = 9378434, upload-time = "2026-08-19T11:28:20.33Z" } +sdist = { url = "https://files.pythonhosted.org/packages/0e/9e/750649904a065007a838981785b2bd8d9ff26154c6c341ac67d0b7f82c68/transformers-5.17.0.tar.gz", hash = "sha256:a153be279169b55b92d8000bf4af294aed684503d091cca7804da2dd8a9de000", size = 9817878, upload-time = "2026-09-09T15:39:56.886Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/41/c4/a12e1d9b387fb0c40a57116db82b457e8c771cb419163cda29204d74a595/transformers-5.15.1-py3-none-any.whl", hash = "sha256:b7cdf238ff583e3a58dbc7fa34da1aaf091ce063141f65a30538160bd5afe93f", size = 11749582, upload-time = "2026-08-19T11:28:16.726Z" }, + { url = "https://files.pythonhosted.org/packages/e8/d0/c502b60d684adbd98a8dc7d5bb866842772b816ac4354e4608be240041ae/transformers-5.17.0-py3-none-any.whl", hash = "sha256:78ec1ce21579b38dfb83950a0658cd119f87212a2fcfdff478096ce9d6c03801", size = 12295140, upload-time = "2026-09-09T15:39:53.746Z" }, ] [[package]]