Skip to content

chore: batch green dependabot PRs#3063

Open
Copilot wants to merge 15 commits into
mainfrom
copilot/dependabot-all-green-updates
Open

chore: batch green dependabot PRs#3063
Copilot wants to merge 15 commits into
mainfrom
copilot/dependabot-all-green-updates

Conversation

Copilot AI commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Summary

Batch merge of all currently-passing (green CI) Dependabot PRs as of 2026-06-16. This is a one-off branch approach — grouping wasn't used because not all updates in an ecosystem are guaranteed to pass together.

Closes: #3061
Closes: #3060
Closes: #3059
Closes: #3054
Closes: #3053
Closes: #3043
Closes: #3039
Closes: #3038
Closes: #3037
Closes: #3030
Closes: #2986
Closes: #2985

Green PRs included (12 total)

PR Package Change
#3061 diffusers (z-image-turbo) 0.36.0 → 0.38.0
#3060 transformers (z-image-turbo) 4.57.3 → 5.0.0rc3
#3059 torch (resnet-managed-weights) 2.8.0 → 2.12.0
#3054 torch (resnet) 2.8.0 → 2.12.0
#3053 torch (streaming-text) 2.7.1 → 2.12.0
#3043 sentry (crates) 0.47.0 → 0.48.2
#3039 dashmap (crates) 6.1.0 → 6.2.1
#3038 golang.org/x/sys 0.43.0 → 0.45.0
#3037 github.com/rogpeppe/go-internal 1.14.1 → 1.15.0
#3030 transformers (streaming-text) 4.51.3 → 5.0.0rc3
#2986 transformers (resnet) 4.52.3 → 5.0.0rc3
#2985 pillow (resnet) 12.1.1 → 12.2.0

Excluded PRs (13 failing)

PRs #3058, #3042, #3041, #3040, #3011, #2969, #2941, #2940, #2937, #2900, #2890, #2867, #2825 were excluded due to CI failures.

Conflict resolution

Several PRs modified the same requirements.txt files. Conflicts were resolved by combining all updates (taking the higher version for each package):

  • examples/z-image-turbo/requirements.txt: diffusers 0.38.0 + transformers 5.0.0rc3
  • examples/streaming-text/requirements.txt: torch 2.12.0 + transformers 5.0.0rc3
  • examples/resnet/requirements.txt: torch 2.12.0 + transformers 5.0.0rc3 + pillow 12.2.0
  • crates/Cargo.lock: sentry 0.48.2 + dashmap 6.2.1 (auto-merged cleanly)
  • go.mod/go.sum: golang.org/x/sys 0.45.0 + go-internal 1.15.0 (auto-merged cleanly)

dependabot Bot added 12 commits June 16, 2026 19:26
Bumps [diffusers](https://github.com/huggingface/diffusers) from 0.36.0 to 0.38.0.
- [Release notes](https://github.com/huggingface/diffusers/releases)
- [Commits](huggingface/diffusers@v0.36.0...v0.38.0)

---
updated-dependencies:
- dependency-name: diffusers
  dependency-version: 0.38.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 4.57.3 to 5.0.0rc3.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.57.3...v5.0.0rc3)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.0.0rc3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [torch](https://github.com/pytorch/pytorch) from 2.8.0 to 2.12.0.
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.8.0...v2.12.0)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [torch](https://github.com/pytorch/pytorch) from 2.8.0 to 2.12.0.
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.8.0...v2.12.0)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [torch](https://github.com/pytorch/pytorch) from 2.7.1 to 2.12.0.
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.7.1...v2.12.0)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [sentry](https://github.com/getsentry/sentry-rust) from 0.47.0 to 0.48.2.
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-rust@0.47.0...0.48.2)

---
updated-dependencies:
- dependency-name: sentry
  dependency-version: 0.48.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [dashmap](https://github.com/xacrimon/dashmap) from 6.1.0 to 6.2.1.
- [Release notes](https://github.com/xacrimon/dashmap/releases)
- [Commits](xacrimon/dashmap@v6.1.0...v6.2.1)

---
updated-dependencies:
- dependency-name: dashmap
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.43.0 to 0.45.0.
- [Commits](golang/sys@v0.43.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) from 1.14.1 to 1.15.0.
- [Release notes](https://github.com/rogpeppe/go-internal/releases)
- [Commits](rogpeppe/go-internal@v1.14.1...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/rogpeppe/go-internal
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 4.51.3 to 5.0.0rc3.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.0.0rc3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [transformers](https://github.com/huggingface/transformers) from 4.52.3 to 5.0.0rc3.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.52.3...v5.0.0rc3)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.0.0rc3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.1.1 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.1.1...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI changed the title chore(deps): batch merge 12 green dependabot updates (2026-06-16) Add PR template with closes: syntax for auto-closing issues on merge Jun 16, 2026
Copilot AI changed the title Add PR template with closes: syntax for auto-closing issues on merge Revert unintended PR template and scope auto-closing to this PR only Jun 16, 2026
@markphelps markphelps changed the title Revert unintended PR template and scope auto-closing to this PR only chore: batch green dependabot PRs Jun 16, 2026
@markphelps markphelps marked this pull request as ready for review June 16, 2026 19:58
@markphelps markphelps requested a review from a team as a code owner June 16, 2026 19:58

@ask-bonk ask-bonk Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm Bonk, and I've done a quick review of your PR.

Batch merge of green Dependabot PRs updating Python, Rust, and Go dependencies across examples and crates.

1 issue found:

  • Critical: examples/resnet/requirements.txt bumps torch to 2.12.0 but leaves torchvision at 0.23.0. Torchvision 0.23.0 is built for torch 2.8.0 and is incompatible with torch 2.12.0. This will cause pip resolution failures or runtime errors for the resnet example. It needs to be bumped to torchvision==0.27.0 (the matching version for torch 2.12.0).

torch==2.8.0
pillow==12.2.0
torch==2.12.0
torchvision==0.23.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

torchvision==0.23.0 is incompatible with torch==2.12.0 (line 2). Torchvision 0.23.0 corresponds to torch 2.8.0. Please update to the matching version:

Suggested change
torchvision==0.23.0
torchvision==0.27.0

@ask-bonk

ask-bonk Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

I'm Bonk, and I've done a quick review of your PR.

Summary: Batch merge of 12 green Dependabot PRs updating Python, Rust, and Go dependencies.

1 critical issue found:

  • examples/resnet/requirements.txt bumps torch to 2.12.0 but leaves torchvision at 0.23.0, which is incompatible. I posted a review comment with a suggestion to update torchvision==0.27.0 (the matching version for torch 2.12.0).

github run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants