From ea8d092f67da4395514c8810ebdd630b0e588721 Mon Sep 17 00:00:00 2001 From: lkmeta Date: Sat, 15 Aug 2026 16:19:02 +0300 Subject: [PATCH] chore: bump deps for Dependabot alerts (pypdf, torch) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - pypdf 6.14.2 -> 6.16.1 (dev-only; resolves the two moderate /ToUnicode and CID-font-width alerts). fpdf2 still writes PDFs; pypdf only reads them in tests. - torch/torchaudio 2.9.1 -> 2.11.0 (both requirements.txt and the Dockerfile's CPU-only install, kept identical to avoid the _torchaudio.abi3.so import crash). Clears the "< 2.10.0" advisory (lstm_cell). The "<= 2.12.1" advisory needs torch 2.13.0, but torchaudio's newest CPU wheel is 2.11.0 — they must match, so 2.11.0 is the highest pair available until torchaudio catches up. Verified: pytest 74; pypdf 6.16.1 PDF read test passes; ./scripts/docker_e2e.sh PASS (worker imports torch/torchaudio 2.11.0 + stable-ts and transcribes). --- Dockerfile | 2 +- requirements-dev.txt | 2 +- requirements.txt | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index 37dd243..26dde3a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,7 +24,7 @@ RUN pip install --no-cache-dir --upgrade pip # versions as requirements.txt — keep them identical, a torch/torchaudio # mismatch crashes the worker at import. RUN pip install --no-cache-dir --index-url https://download.pytorch.org/whl/cpu \ - torch==2.9.1 torchaudio==2.9.1 + torch==2.11.0 torchaudio==2.11.0 # Install any dependencies specified in requirements.txt RUN pip install --no-cache-dir -r requirements.txt diff --git a/requirements-dev.txt b/requirements-dev.txt index 1e46126..d1864ba 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,4 +1,4 @@ -r requirements.txt pytest==9.1.1 httpx==0.28.1 -pypdf==6.14.2 +pypdf==6.16.1 diff --git a/requirements.txt b/requirements.txt index 156a266..4f8b652 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,7 +8,7 @@ python-dotenv==1.2.2 python-multipart==0.0.32 resend==2.33.0 stable-ts==2.19.1 -torch==2.9.1 -torchaudio==2.9.1 +torch==2.11.0 +torchaudio==2.11.0 uvicorn==0.51.0 yt-dlp==2026.7.4