You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@texera.apache.org by gi...@apache.org on 2026/09/24 03:23:09 UTC
(texera) branch gh-readonly-queue/release/v1.3/pr-8655-d5e19430ef3e5927900aaa0f1d856584b215d8ee created (now 3efe10df51)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/release/v1.3/pr-8655-d5e19430ef3e5927900aaa0f1d856584b215d8ee
in repository https://gitbox.apache.org/repos/asf/texera.git
at 3efe10df51 fix(deps, pyamber, v1.3): update dependency transformers to v5.10.1 (#8655)
This branch includes the following new commits:
new 3efe10df51 fix(deps, pyamber, v1.3): update dependency transformers to v5.10.1 (#8655)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(texera) 01/01: fix(deps, pyamber, v1.3): update dependency transformers to v5.10.1 (#8655)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/release/v1.3/pr-8655-d5e19430ef3e5927900aaa0f1d856584b215d8ee
in repository https://gitbox.apache.org/repos/asf/texera.git
commit 3efe10df5167cc336fc05c48d69433655356309c
Author: github-actions[bot] <41...@users.noreply.github.com>
AuthorDate: Thu Sep 24 03:22:47 2026 +0000
fix(deps, pyamber, v1.3): update dependency transformers to v5.10.1 (#8655)
### What changes were proposed in this PR?
Automated backport of #8313 to `release/v1.3`.
Source: 1b25a0ab536f0ff5d7cee521488b3d356a1f3092 · [automation
run](https://github.com/apache/texera/actions/runs/35949747026)
### Any related issues, documentation, discussions?
Backport of #8313. Fixes CVE-2026-9856 (see #8313 for details).
### How was this PR tested?
The backported tree built green before #8313 merged. Release-branch CI
runs on this PR once it is reopened — see the comment below.
### Was this PR authored or co-authored using generative AI tooling?
No.
Co-authored-by: Mend Renovate <bo...@renovateapp.com>
Co-authored-by: Xinyuan Lin <xi...@uci.edu>
Co-authored-by: Meng Wang <me...@uci.edu>
Co-authored-by: Xuan Gu <16...@users.noreply.github.com>
---
amber/LICENSE-binary-python | 2 +-
amber/operator-requirements.txt | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python
index 2d3c3cb64b..c13ceb86d2 100644
--- a/amber/LICENSE-binary-python
+++ b/amber/LICENSE-binary-python
@@ -233,7 +233,7 @@ Python packages:
- safetensors==0.8.0
- tenacity==9.1.4
- tokenizers==0.22.2
- - transformers==5.5.0
+ - transformers==5.10.1
- tzdata==2026.3
- websocket-client==1.9.0
- yarl==1.24.5
diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt
index d78fe77fe8..c0a8f37f17 100644
--- a/amber/operator-requirements.txt
+++ b/amber/operator-requirements.txt
@@ -26,7 +26,7 @@ torch==2.13.0+cpu ; platform_system == "Linux" and platform_machine == "x86_64"
torch==2.13.0 ; platform_system != "Linux" or platform_machine != "x86_64"
scikit-learn==1.7.2
-transformers==5.5.0
+transformers==5.10.1
# Not imported by any operator template: plotly's create_ternary_contour
# (ternary contour operator, #4193) requires scikit-image at runtime.
scikit-image==0.25.2