chore: batch green dependabot PRs

.github/workflows/ci.yaml

@@ -293,8 +293,12 @@ jobs:
           cache_key_prefix: mise-ci-${{ github.job }}
       - name: Check stubs are up to date
         run: |
-          # stub_gen links libpython dynamically; tell the linker where to find it
+          # stub_gen links libpython dynamically; tell the linker where to find it.
+          # PyO3 also caches the discovered libpython path in Rust build artifacts,
+          # so force PyO3's build config to refresh after restoring target/ from cache.
+          export PYO3_PYTHON="$(python3 -c 'import sys; print(sys.executable)')"
           export LD_LIBRARY_PATH="$(python3 -c 'import sysconfig; print(sysconfig.get_config_var("LIBDIR"))')"
+          (cd crates && cargo clean -p pyo3-build-config -p pyo3-ffi)
           mise run --force stub:check
 
 # =============================================================================

crates/Cargo.toml

@@ -37,7 +37,7 @@ uuid = { version = "1", features = ["v4", "serde"] }
 # Observability
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
-sentry = { version = "0.47", default-features = false, features = ["backtrace", "contexts", "panic", "tracing", "reqwest"] }
+sentry = { version = "0.48", default-features = false, features = ["backtrace", "contexts", "panic", "tracing", "reqwest"] }
 
 # Error handling
 thiserror = "2"

examples/experimental/resnet-managed-weights/requirements.txt

@@ -1,3 +1,3 @@
 pillow==12.1.1
-torch==2.8.0
+torch==2.12.0
 transformers==4.52.3

examples/resnet/requirements.txt

@@ -1,3 +1,4 @@
-pillow==12.1.1
-torch==2.8.0
-torchvision==0.23.0
+pillow==12.2.0
+torch==2.12.0
+torchvision==0.27.0
+transformers==5.0.0rc3

examples/streaming-text/requirements.txt

@@ -1,3 +1,3 @@
-torch==2.7.1
-transformers==4.51.3
+torch==2.12.0
+transformers==5.0.0rc3
 accelerate==1.6.0

examples/z-image-turbo/requirements.txt

@@ -1,3 +1,3 @@
-diffusers==0.36.0
-transformers==4.57.3
+diffusers==0.38.0
+transformers==5.0.0rc3
 torch==2.8.0

go.mod

@@ -22,7 +22,7 @@ require (
 	github.com/moby/term v0.5.2
 	github.com/opencontainers/image-spec v1.1.1
 	github.com/replicate/go v0.0.0-20250205165008-b772d7cd506b
-	github.com/rogpeppe/go-internal v1.14.1
+	github.com/rogpeppe/go-internal v1.15.0
 	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06
 	github.com/smacker/go-tree-sitter v0.0.0-20240827094217-dd81d9e9be82
 	github.com/spf13/cobra v1.10.2
@@ -38,7 +38,7 @@ require (
 	golang.org/x/crypto v0.50.0
 	golang.org/x/exp v0.0.0-20250911091902-df9299821621
 	golang.org/x/sync v0.20.0
-	golang.org/x/sys v0.43.0
+	golang.org/x/sys v0.45.0
 	golang.org/x/term v0.42.0
 	google.golang.org/grpc v1.80.0
 	gopkg.in/yaml.v3 v3.0.1

go.sum

@@ -235,8 +235,8 @@ github.com/prometheus/procfs v0.17.0 h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7D
 github.com/prometheus/procfs v0.17.0/go.mod h1:oPQLaDAMRbA+u8H5Pbfq+dl3VDAvHxMUOVhe0wYB2zw=
 github.com/replicate/go v0.0.0-20250205165008-b772d7cd506b h1:GIkpkQ+xwWJ6IRUFmwCLcg+zkZVoKmVXnPjhMncZc4I=
 github.com/replicate/go v0.0.0-20250205165008-b772d7cd506b/go.mod h1:kUMwEnHJEvWXdu6Py/9fjp7969tsPRYN2a4+Z8BiVEE=
-github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
-github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
+github.com/rogpeppe/go-internal v1.15.0 h1:D0RCU5rMAp+SpgkiNdrjfJ+LX4J1M32V2NeCY7EJ6hc=
+github.com/rogpeppe/go-internal v1.15.0/go.mod h1:DrUVZyrJU+txYW5/1kwtXQSMFio52ZOxX7yM1VHvnxs=
 github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 h1:OkMGxebDjyw0ULyrTYWeN0UNCCkmCWfjPnIA2W6oviI=
@@ -368,8 +368,8 @@ golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20201204225414-ed752295db88/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI=
-golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
+golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa h1:efT73AJZfAAUV7SOip6pWGkwJDzIGiKBZGVzHYa+ve4=
 golang.org/x/telemetry v0.0.0-20260409153401-be6f6cb8b1fa/go.mod h1:kHjTxDEnAu6/Nl9lDkzjWpR+bmKfxeiRuSDlsMb70gE=
 golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY=

integration-tests/tests/webhook_delivery_failure.txtar

@@ -10,9 +10,9 @@ cog serve --upload-url http://unused/
 # Async prediction with a bogus webhook URL — delivery will fail
 curl -H Prefer:respond-async POST /predictions '{"id":"webhook-fail-test","webhook":"http://host.docker.internal:1/nonexistent","webhook_events_filter":["completed"]}'
 
-# Server should remain healthy while webhook delivery retries/fails.
+# Server should become ready again after webhook delivery retries/fails.
 # Poll repeatedly instead of sleeping a fixed duration.
-exec bash -c 'for i in {1..10}; do curl -sf $SERVER_URL/health-check | grep -q "\"status\":\"READY\"" || exit 1; sleep 0.5; done'
+exec bash -c 'for i in {1..10}; do curl -sf $SERVER_URL/health-check | grep -q "\"status\":\"READY\"" && exit 0; sleep 0.5; done; exit 1'
 
 # A new sync prediction should still work
 curl POST /predictions '{"input":{}}'