Bump the python-packages group with 4 updates by dependabot[bot] · Pull Request #652 · tue-bmd/zea

dependabot · 2026-10-07T14:13:22Z

Bumps the python-packages group with 4 updates: huggingface-hub, gradio, ruff and ipykernel.

Updates huggingface-hub from 1.32.0 to 2.1.1

Release notes

Sourced from huggingface-hub's releases.

v2.1.1

[CLI] Rename 'hf spaces zero-gpu-quota' to 'hf spaces zero-gpu quota'- #5055

Full Changelog: huggingface/huggingface_hub@v2.1.0...v2.1.1

[v2.1.0] Better Jobs tooling, ZeroGPU quota tracking, and revamped Model Catalog

📊 Jobs: retries, rescheduling, and port exposure

Hugging Face Jobs get a batch of quality-of-life improvements this release. Jobs can now retry automatically on failure with the new attempts parameter, and you can start a fresh Job from an existing Job's saved spec (including secrets and hardware settings) with rerun_job / hf jobs rerun. Scheduled Jobs can be rescheduled — change the cron expression or preset without recreating the Job — via update_scheduled_job_schedule / hf jobs scheduled reschedule. Finally, you can now expose ports on Jobs: use expose for token-protected access and expose_public for unauthenticated access, both at creation time and on a running Job with update_job_expose / hf jobs expose.
# Retry a job up to 2 times on failure, and rerun it later from its saved spec
>>> hf jobs run --attempts 3 --detach python:3.12 python train.py
>>> hf jobs rerun <job_id>
Reschedule a scheduled job to run every day at 9:00
>>> hf jobs scheduled reschedule <scheduled_job_id> "0 9 * * 1"
Expose ports on a running Job (8000 token-protected, 9000 public)
>>> hf jobs expose <job_id> 8000 --public 9000
[Jobs] Add rerun and retry attempts by @Wauplin in #5025

[Jobs] Allow rescheduling scheduled jobs by @Wauplin in #5026

[Jobs] Manage public and private exposed ports by @Wauplin in #5027

📚 Documentation: Jobs guide

🤗 Track your ZeroGPU quota

The Hub now exposes a ZeroGPU quota endpoint, and huggingface_hub wraps it with a new HfApi.get_zero_gpu_quota() method returning a ZeroGpuQuota dataclass (values in GPU-seconds). This is particularly useful for apps, MCP servers and agents built on top of ZeroGPU Spaces: check how much quota is left and when it resets, and warn your users before they hit the daily limit. The same information is available from the CLI with hf spaces zero-gpu-quota, which also prints a hint to purchase credits when the quota is running low.
>>> from huggingface_hub import get_zero_gpu_quota
>>> quota = get_zero_gpu_quota()
ZeroGpuQuota(base=2400, remaining=1810, resets_at=datetime.datetime(2026, 9, 30, 9, 12, 3, tzinfo=datetime.timezone.utc), overquota_used=0)
>>> hf spaces zero-gpu quota
✓ ZeroGPU quota (in GPU-seconds)
  remaining: 1810
  base: 2400
  resets_at: 2026-09-30T18:12:03+00:00
  overquota_used: 0
[Spaces] Add get_zero_gpu_quota and hf spaces zero-gpu-quota by @Wauplin in #5040

[CLI] Rename 'hf spaces zero-gpu-quota' to 'hf spaces zero-gpu quota'- #5055 [Shipped as part of v2.1.1]

... (truncated)

Commits

bd4a760 Release: v2.1.1
cb1755f [CLI] Rename 'hf spaces zero-gpu-quota' to 'hf spaces zero-gpu quota' (#5055)
43372b6 Release: v2.1.0
efa122c Release: v2.1.0.rc0
0b26b50 [Spaces] Add get_zero_gpu_quota and hf spaces zero-gpu-quota (#5040)
604252e [HfApi] Add visibility to create_bucket (#5053)
4c88ea6 [Repos] Warn when duplicated repo files are still being copied (#5041)
3bb08e2 [Endpoints] Migrate catalog to the new /api/v1 API (#4928)
b5e3a12 [HfApi] Support resource_group_id in duplicate_repo (#5038)
60fdb08 [Docs] Fix duplicated words in docstring and comments (#5052)
Additional commits viewable in compare view

Updates gradio from 6.28.0 to 6.29.1

Release notes

Sourced from gradio's releases.

gradio@6.29.1

Fixes

#13930 86b44f2 - Make gr.Gallery's empty state respect sources. Thanks @hysts!

gradio@6.29.0

Features

db9699e - Name rejected files in upload errors and fix a Document leak in sanitize. Thanks @abidlabs!

4814057 - Add display controls for examples. Note: gr.Interface now hides the additional_inputs columns in its examples table by default; their values are still loaded when an example is selected. Thanks @abidlabs!

3111c06 - Add height/max_height to gr.Accordion and gr.Tab, fix gr.Code max_lines. Thanks @dawoodkhan82!

27731f4 - docs:Clarify that None is reserved to mean "no selection" in Dropdown and cannot be used as a choice's value. Thanks @dawoodkhan82!

96a79b1 - Refactor the remaining component unit tests and remove components.test.ts. Thanks @abidlabs!

Fixes

70db61b - Import CSV and TSV files dropped on gr.Dataframe. Thanks @hysts!

0f889f0 - Clear the loading status when a validator rejects an event. Thanks @hysts!

#13901 e918914 - Release the microphone when a streaming gr.Audio recording is stopped. Thanks @hysts!

#13902 526543d - Fetch channel data once per channel when encoding recorded audio to WAV. Thanks @hysts!

#13903 7ba5437 - Fix streaming gr.Audio getting stuck at "queue: 1/1" when stopped while waiting. Thanks @hysts!

64359c6 - Stop validators from overwriting their own inputs. Thanks @hysts!

239db17 - Stop converting .m4b audio that browsers can already play. Thanks @abidlabs!

#13924 ee3ca5f - Fix 16-bit audio conversion of uint8, int8 and float16 arrays on NumPy 2. Thanks @hysts!

Changelog

Sourced from gradio's changelog.

6.29.1

Fixes

#13930 86b44f2 - Make gr.Gallery's empty state respect sources. Thanks @hysts!

6.29.0

Features

db9699e - Name rejected files in upload errors and fix a Document leak in sanitize. Thanks @abidlabs!

4814057 - Add display controls for examples. Note: gr.Interface now hides the additional_inputs columns in its examples table by default; their values are still loaded when an example is selected. Thanks @abidlabs!

3111c06 - Add height/max_height to gr.Accordion and gr.Tab, fix gr.Code max_lines. Thanks @dawoodkhan82!

27731f4 - docs:Clarify that None is reserved to mean "no selection" in Dropdown and cannot be used as a choice's value. Thanks @dawoodkhan82!

96a79b1 - Refactor the remaining component unit tests and remove components.test.ts. Thanks @abidlabs!

Fixes

70db61b - Import CSV and TSV files dropped on gr.Dataframe. Thanks @hysts!

0f889f0 - Clear the loading status when a validator rejects an event. Thanks @hysts!

#13901 e918914 - Release the microphone when a streaming gr.Audio recording is stopped. Thanks @hysts!

#13902 526543d - Fetch channel data once per channel when encoding recorded audio to WAV. Thanks @hysts!

#13903 7ba5437 - Fix streaming gr.Audio getting stuck at "queue: 1/1" when stopped while waiting. Thanks @hysts!

64359c6 - Stop validators from overwriting their own inputs. Thanks @hysts!

239db17 - Stop converting .m4b audio that browsers can already play. Thanks @abidlabs!

#13924 ee3ca5f - Fix 16-bit audio conversion of uint8, int8 and float16 arrays on NumPy 2. Thanks @hysts!

Commits

8c71eaa chore: update versions (#13933)
86b44f2 Make gr.Gallery's empty state respect sources (#13930)
131b5b7 Fix Python client heartbeat connections that leak or reconnect in a tight loo...
8ccf0ad chore: update versions (#13877)
e918914 Release the microphone when a streaming gr.Audio recording is stopped (#13901)
ee3ca5f Fix 16-bit audio conversion of uint8, int8 and float16 arrays on NumPy 2 (#13...
7ba5437 Fix streaming gr.Audio getting stuck at "queue: 1/1" when stopped while waiti...
526543d Fetch channel data once per channel when encoding recorded audio to WAV (#13902)
e64b454 Revert "Set up CI for the 7.0-dev branch"
51b6f14 Set up CI for the 7.0-dev branch
Additional commits viewable in compare view

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

Add a migration guide for categories (#28087)

[pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

Reduce memory used by diagnostics (#28951)

Server

Avoid running uv format in untrusted workspaces (#28873)

Documentation

Fix links to moved changelog sections and renamed mdtests (#28941)

Add Python 3.15 as a supported version (#28907)

Add ty as a type checker example (#28906)

Other changes

Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

@ntBre

@spaceone

@HardMax71

@charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"
Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

Add a migration guide for categories (#28087)

[pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

Reduce memory used by diagnostics (#28951)

Server

Avoid running uv format in untrusted workspaces (#28873)

Documentation

Fix links to moved changelog sections and renamed mdtests (#28941)

Add Python 3.15 as a supported version (#28907)

Add ty as a type checker example (#28906)

Other changes

Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

@ntBre

@spaceone

@HardMax71

@charliermarsh

Commits

3265ed1 Bump version to 0.16.10 (#29055)
e786964 Authorize shared PR security-review workflow to publish findings (#29052)
a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
317e0a3 [ty] Bound nested callable signature display (#29049)
8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
56180bc [ty] Specialize instance members once (#29043)
aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
2d25346 [ty] Improve unresolved-import documentation (#29039)
Additional commits viewable in compare view

Updates ipykernel from 7.3.0 to 7.4.0

Release notes

Sourced from ipykernel's releases.

v7.4.0

7.4.0

(Full Changelog)

New features added

Enable setting and resetting a thread-local parent header #1546 (@jasongrout, @minrk)

Enhancements made

Allow async cell to process Comm messages #1565 (@davidbrochart, @JohanMabille, @kylebarron)

Bump minimum Python to 3.11, update linting, drop dead branches #1553 (@Carreau, @minrk)

Defer the psutil import until it is actually needed #1551 (@Carreau, @minrk)

validate variable names in copyToGlobals debug handler #1537 (@sahvx655-wq, @JohanMabille)

create debugger tmp directory with 0o700 permissions #1530 (@sahvx655-wq, @JohanMabille, @minrk)

Update the supported_encryption to use a list as per JEP latest state #1528 (@krassowski, @Carreau, @JohanMabille)

Make psutil optional at runtime #1527 (@yves-surrel, @ianthomas23)

Bugs fixed

Create _control_lock before its users #1568 (@tovrstra, @minrk)

Reply with busy -> error -> idle if subshell unknown #1558 (@krassowski, @Carreau, @JohanMabille)

Send the shell reply through the ZMQStream instead of raw on its socket #1529 (@BoykoNeov, @ZupoLlask, @claude, @ianthomas23, @practicusai, @thomasjm)

Enable ProactorEventLoop on windows for ipykernel #1469 (@NewUserHa, @BoykoNeov, @Gravifer, @ZupoLlask, @claude, @ianthomas23)

Maintenance and upkeep improvements

try to fix publish workflow #1571 (@minrk)

chore: update pre-commit hooks #1570 (@davidbrochart)

Use dependency groups instead of extras #1563 (@davidbrochart)

MAINT: Switch zizmor to the github action #1561 (@Carreau, @Yann-P)

Fix downstream test: install ipykernel from source for jupyter_kernel_test #1560 (@glaziermag, @Carreau, @claude)

Add Zizmor #1556 (@Carreau, @Yann-P)

[CI] remove type:ignore, likely due to new pyzmq #1552 (@Carreau, @minrk)

Fix typing issue due to new releases #1544 (@Carreau, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@BoykoNeov (activity) | @Carreau (activity) | @davidbrochart (activity) | @glaziermag (activity) | @Gravifer (activity) | @ianthomas23 (activity) | @jasongrout (activity) | @JohanMabille (activity) | @krassowski (activity) | @kylebarron (activity) | @minrk (activity) | @NewUserHa (activity) | @practicusai (activity) | @sahvx655-wq (activity) | @Scott5S (activity) | @thomasjm (activity) | @tovrstra (activity) | @Yann-P (activity) | @yves-surrel (activity) | @ZupoLlask (activity)

Changelog

Sourced from ipykernel's changelog.

7.4.0

(Full Changelog)

New features added

Enable setting and resetting a thread-local parent header #1546 (@jasongrout, @minrk)

Enhancements made

Allow async cell to process Comm messages #1565 (@davidbrochart, @JohanMabille, @kylebarron)

Bump minimum Python to 3.11, update linting, drop dead branches #1553 (@Carreau, @minrk)

Defer the psutil import until it is actually needed #1551 (@Carreau, @minrk)

validate variable names in copyToGlobals debug handler #1537 (@sahvx655-wq, @JohanMabille)

create debugger tmp directory with 0o700 permissions #1530 (@sahvx655-wq, @JohanMabille, @minrk)

Update the supported_encryption to use a list as per JEP latest state #1528 (@krassowski, @Carreau, @JohanMabille)

Make psutil optional at runtime #1527 (@yves-surrel, @ianthomas23)

Bugs fixed

Create _control_lock before its users #1568 (@tovrstra, @minrk)

Reply with busy -> error -> idle if subshell unknown #1558 (@krassowski, @Carreau, @JohanMabille)

Send the shell reply through the ZMQStream instead of raw on its socket #1529 (@BoykoNeov, @ZupoLlask, @claude, @ianthomas23, @practicusai, @thomasjm)

Enable ProactorEventLoop on windows for ipykernel #1469 (@NewUserHa, @BoykoNeov, @Gravifer, @ZupoLlask, @claude, @ianthomas23)

Maintenance and upkeep improvements

try to fix publish workflow #1571 (@minrk)

chore: update pre-commit hooks #1570 (@davidbrochart)

Use dependency groups instead of extras #1563 (@davidbrochart)

MAINT: Switch zizmor to the github action #1561 (@Carreau, @Yann-P)

Fix downstream test: install ipykernel from source for jupyter_kernel_test #1560 (@glaziermag, @Carreau, @claude)

Add Zizmor #1556 (@Carreau, @Yann-P)

[CI] remove type:ignore, likely due to new pyzmq #1552 (@Carreau, @minrk)

Fix typing issue due to new releases #1544 (@Carreau, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@BoykoNeov (activity) | @Carreau (activity) | @davidbrochart (activity) | @glaziermag (activity) | @Gravifer (activity) | @ianthomas23 (activity) | @jasongrout (activity) | @JohanMabille (activity) | @krassowski (activity) | @kylebarron (activity) | @minrk (activity) | @NewUserHa (activity) | @practicusai (activity) | @sahvx655-wq (activity) | @Scott5S (activity) | @thomasjm (activity) | @tovrstra (activity) | @Yann-P (activity) | @yves-surrel (activity) | @ZupoLlask (activity)

Commits

cfa461d Publish 7.4.0
e0658fd try to fix publish workflow (#1571)
5bf2c68 needs permission-contents for zizmor
a375e4a try to fix publish workflow
3938cb6 chore: update pre-commit hooks (#1570)
5ef129a chore: update pre-commit hooks (#1566)
fbc96be Create _control_lock before its users (#1568)
0273cec Allow async cell to process Comm messages (#1565)
f8f7eb7 Create _control_lock before its users
3d11719 chore: update pre-commit hooks
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 4 updates: [huggingface-hub](https://github.com/huggingface/huggingface_hub), [gradio](https://github.com/gradio-app/gradio), [ruff](https://github.com/astral-sh/ruff) and [ipykernel](https://github.com/ipython/ipykernel). Updates `huggingface-hub` from 1.32.0 to 2.1.1 - [Release notes](https://github.com/huggingface/huggingface_hub/releases) - [Commits](huggingface/huggingface_hub@v1.32.0...v2.1.1) Updates `gradio` from 6.28.0 to 6.29.1 - [Release notes](https://github.com/gradio-app/gradio/releases) - [Changelog](https://github.com/gradio-app/gradio/blob/main/CHANGELOG.md) - [Commits](https://github.com/gradio-app/gradio/compare/gradio@6.28.0...gradio@6.29.1) Updates `ruff` from 0.16.9 to 0.16.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.9...0.16.10) Updates `ipykernel` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/ipython/ipykernel/releases) - [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md) - [Commits](ipython/ipykernel@v7.3.0...v7.4.0) --- updated-dependencies: - dependency-name: huggingface-hub dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: gradio dependency-version: 6.29.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.16.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: ipykernel dependency-version: 7.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-07T14:13:30Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI
Review profile: CHILL
Plan: Advanced
Run ID: 1e345b29-57cd-4694-902f-d0f88d867ed0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

codecov · 2026-10-07T14:38:16Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

dependabot Bot assigned tristan-deep Oct 7, 2026

dependabot Bot added the dev Workflows, docker, etc. label Oct 7, 2026

Navigation Menu

Repository navigation

Bump the python-packages group with 4 updates - #652

Bump the python-packages group with 4 updates#652
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-packages-e5dc558fc4

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

coderabbitai Bot commented Oct 7, 2026

Review skipped

Uh oh!

codecov Bot commented Oct 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026

v2.1.1

[v2.1.0] Better Jobs tooling, ZeroGPU quota tracking, and revamped Model Catalog

📊 Jobs: retries, rescheduling, and port exposure

🤗 Track your ZeroGPU quota

gradio@6.29.1

Fixes

gradio@6.29.0

Features

Fixes

6.29.1

Fixes

6.29.0

Features

Fixes

0.16.10

Release Notes

Preview features

Performance

Server

Documentation

Other changes

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.16.10

0.16.10

Preview features

Performance

Server

Documentation

Other changes

Contributors

v7.4.0

7.4.0

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

7.4.0

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

Uh oh!

coderabbitai Bot commented Oct 7, 2026

Review skipped

Uh oh!

codecov Bot commented Oct 7, 2026

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant