Repository navigation
chore(deps): update seven dependencies while retaining PyArrow compatibility - #98
Merged
Merged
Conversation
…P.md/CHANGELOG.md
…ckend with high-precision metrics confirmation
…positeBackend with high-precision metrics confirmation" This reverts commit 35f6e55.
…vent breaking LLM schemas
… and Spanish NIF/NIE/CIF detectors
…s, and integration tests
…baseline - Full-suite observability: lazy import datasets, harden evaluator tests with bounded timeouts and diagnostics, verify full suite (449 passed, 0 failures, 94.74% coverage) - Ensemble contract: reconcile remote detector weight to 0.50 in spans.py and docs/architecture.md, add provenance-based conflict, topology, and priority tests - Observability claims: remove unsupported <1ms claims, test fresh subprocess import isolation, harden OTel span processor against immutable containers - Operational boundaries: clarify in docs/deployment.md that KMS envelope encryption, key rotation, and TTL storage are caller responsibilities - Benchmarks: update docs/benchmarks.md with 1,000-sample quality evaluation (0.8308 F1, 0.8611 Precision, 0.8026 Recall)
- Date 1.26.0 in CHANGELOG.md - Mark 1.26.0 Published in ROADMAP.md and update handover release state - Reconcile docs/quality_benchmarks.md and docs/benchmarks.md - Commit sanitized machine-readable 1.26.0 baseline record (benchmarks/results/1.26.0_ai4privacy_validation_1000.json) - Set fail-on-alert to false in .github/workflows/benchmark.yml to review timing on noisy runners
- Bump project version in pyproject.toml and sync uv.lock - Update active development state in HANDOVER.md
…or atlas - benchmarks/evaluate_quality.py: instrument per-row sufficient statistics, exact boundary metrics, character-level masking recall, macro F1, and causal error categorization (missing_candidate, threshold_suppression, label_confusion, boundary_mismatch, conflict_loss) with --manifest support - benchmarks/compare_quality.py: deterministic artifact comparator with paired document-level bootstrap resampling (95% CI on delta F1/exact F1), per-entity shifts, and error category shifts - benchmarks/build_manifests.py: template-grouped partition builder preventing near-duplicate leakage across development, calibration, and test splits - tests/unit: unit test coverage for comparator, evaluator, and manifest builder
…ion runner - benchmarks/audit_contamination.py: audit pairwise row hash and template collisions across partitions and verify isolation from validation data - benchmarks/run_ablations.py: execute component ablations on identical development rows with paired statistical delta and error category reporting - tests/unit: unit tests for contamination auditor and ablation suite
…ng, and quality gate
…oization, and local processing path
…ts, and decision record
…n into release verifier
…ary punctuation alignment
…ancements - Allow LocalONNXPIIBackend callers to restrict token extraction and advertised capabilities to a subset of EntityTypes via allowed_entity_types - Expose allowed_entity_types property on LocalONNXPIIBackend - Add test_onnx_allowed_entity_types_scoping covering capabilities, detection filtering, and unsupported type filtering - Add --seed and --ensemble-ner options to benchmarks/evaluate_quality.py with fail-closed missing artifact handling - Record fresh 2,000-sample validation benchmark artifact with sufficient statistics - Update CHANGELOG.md under [Unreleased] and ROADMAP.md for 1.35.0
…nd trim possessives
…ry with 8 updates Bumps the development-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.29.0` | `1.30.0` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.168.0` | `6.168.3` | | [fpdf2](https://github.com/py-pdf/fpdf2) | `2.8.8` | `2.8.9` | | [httpx2](https://github.com/pydantic/httpx2) | `2.12.0` | `2.13.1` | | [pyarrow](https://github.com/apache/arrow) | `19.0.1` | `25.0.1` | | [mypy](https://github.com/python/mypy) | `2.3.1` | `2.4.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.6` | `0.16.10` | | [build](https://github.com/pypa/build) | `1.6.0` | `1.6.1` | Updates `onnxruntime` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md) - [Commits](microsoft/onnxruntime@v1.29.0...v1.30.0) Updates `hypothesis` from 6.168.0 to 6.168.3 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.168.0...v6.168.3) Updates `fpdf2` from 2.8.8 to 2.8.9 - [Release notes](https://github.com/py-pdf/fpdf2/releases) - [Changelog](https://github.com/py-pdf/fpdf2/blob/master/CHANGELOG.md) - [Commits](py-pdf/fpdf2@2.8.8...2.8.9) Updates `httpx2` from 2.12.0 to 2.13.1 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md) - [Commits](pydantic/httpx2@v2.12.0...v2.13.1) Updates `pyarrow` from 19.0.1 to 25.0.1 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-19.0.1...apache-arrow-25.0.1) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.0) Updates `ruff` from 0.16.6 to 0.16.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.6...0.16.10) Updates `build` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.6.0...1.6.1) --- updated-dependencies: - dependency-name: onnxruntime dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: hypothesis dependency-version: 6.168.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: fpdf2 dependency-version: 2.8.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: httpx2 dependency-version: 2.13.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: pyarrow dependency-version: 25.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: ruff dependency-version: 0.16.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: build dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
ma2za
force-pushed
the
dependabot/uv/development-dependencies-464dd43024
branch
from
October 8, 2026 08:30
ced797f to
a1850c6
Compare
ma2za
changed the title
# Conflicts: # CHANGELOG.md # tests/integration/test_release_verifier.py
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update seven development and optional dependencies against current main: build 1.6.1, fpdf2 2.8.9, httpx2 2.13.1, hypothesis 6.168.3, mypy 2.4.0, onnxruntime 1.30.0, and ruff 0.16.10, plus their required transitive dependencies.
Preserve
pyarrow>=19.0.0,<20.0.0and locked PyArrow 19.0.1. The previous proposed major upgrade would undo the Windows Smart App Control compatibility cap recorded in the 1.35 changelog. Preserve development version 1.37.0 and current hosted-service changes.Includes the shared packaging prerequisite in PR #100 so fresh package CI can run; review that correction separately before merging dependent PRs.
Validation: frozen installation of all extras and groups; 597 tests passed with 95.24% coverage on the dependency update before the packaging-only prerequisite; Ruff formatting/lint and mypy passed. The new packaging contract regression and artifact verification passed. No detector tuning, model changes or benchmark-score claims.
Current review status
Review priority: 9 of 9; PR #100 is the packaging prerequisite. Updated against main
17e8fccwhile preserving development version 1.37.0 and the hosted-service changes. Includes the shared service-extra audit correction from #100. No PR has been merged.Current branch validation: 11 focused tests passed; Ruff formatting/lint, mypy, wheel/sdist builds and release verification passed. Fresh CI on the current head completed with 18 successful checks, one skipped check, and no failures.