Skip to content

chore(deps): bump the minor-and-patch group in /nlp-service with 3 updates - #188

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nlp-service/minor-and-patch-2740afcdb4
Open

chore(deps): bump the minor-and-patch group in /nlp-service with 3 updates#188
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nlp-service/minor-and-patch-2740afcdb4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /nlp-service with 3 updates: fastapi, google-genai and sentence-transformers.

Updates fastapi from 0.139.0 to 0.140.0

Release notes

Sourced from fastapi's releases.

0.140.0

Refactors

Docs

Internal

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.

0.139.1

Fixes

  • 🐛 Fix frontend fallback support for doted paths like /users/john.doe. PR #16011 by @​tiangolo.

Docs

  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #15995 by @​YuriiMotov.

Translations

... (truncated)

Commits

Updates google-genai from 2.11.0 to 2.14.0

Release notes

Sourced from google-genai's releases.

v2.14.0

2.14.0 (2026-07-22)

Features

  • [GenerateContentConfig] Add GenerationConfig.audio_transcription_config and Part.audio_transcription. (dc3d78d)

Bug Fixes

  • Add deprecation warnings to Imagen generate_images, edit_images, generate_videos (if using prompt/text/image args), LiveConnectConfig.GenerationConfig which will be removed in the next major version (4905918)

Documentation

  • Regenerate docs for 2.13.0 (097a99e)

v2.13.0

2.13.0 (2026-07-21)

Features

  • A new field custom_vocabulary is added to to Live API (4eeb1ad)
  • Add model selector (bf3dba4)
  • interaction-api: Add queued status to interaction proto (87f1650)
  • Make ASR fields public in v1main and Interactions (5b52faa)
  • Support mTLS in custom client using google auth mtls.get_default_ssl_context (7270e6d)

Documentation

  • Regenerate docs for 2.11.0 and 2.12.0 (dddd7c6)

v2.12.1

2.12.1 (2026-07-16)

Bug Fixes

  • Fix the normalization of Interactions inside triggers (be554d3)

v2.12.0

2.12.0 (2026-07-15)

Features

  • Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (c68f857)

... (truncated)

Changelog

Sourced from google-genai's changelog.

2.14.0 (2026-07-22)

Features

  • [GenerateContentConfig] Add GenerationConfig.audio_transcription_config and Part.audio_transcription. (dc3d78d)

Bug Fixes

  • Add deprecation warnings to Imagen generate_images, edit_images, generate_videos (if using prompt/text/image args), LiveConnectConfig.GenerationConfig which will be removed in the next major version (4905918)

Documentation

  • Regenerate docs for 2.13.0 (097a99e)

2.13.0 (2026-07-21)

Features

  • A new field custom_vocabulary is added to message .google.cloud.aiplatform.v1beta1.BidiGenerateContentSetup (4eeb1ad)
  • Add model selector (bf3dba4)
  • interaction-api: Add queued status to interaction proto (87f1650)
  • Make ASR fields public in v1main and Interactions (5b52faa)
  • Support mTLS in custom client using google auth mtls.get_default_ssl_context (7270e6d)

Documentation

  • Regenerate docs for 2.11.0 and 2.12.0 (dddd7c6)

2.12.1 (2026-07-16)

Bug Fixes

  • Fix the normalization of Interactions inside triggers (be554d3)

2.12.0 (2026-07-15)

Features

  • Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (c68f857)
  • Add trigger resource (0ab9525)
  • Add Triggers resource to GoogleGenAI client. (60727fe)
  • interactions: Add CodeMenderAgentConfig (50eca74)
  • Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (2ba0154)
Commits
  • 7c1f70d chore(main): release 2.14.0 (#2758)
  • dc3d78d feat: [GenerateContentConfig] Add GenerationConfig.audio_transcription_config...
  • 3469af7 chore: internal testing
  • affa48c chore: internal change
  • 4905918 fix: add deprecation warnings to Imagen generate_images, edit_images, generat...
  • 097a99e docs: Regenerate docs for 2.13.0
  • 293238d chore: Internal change
  • a381b8d chore(main): release 2.13.0 (#2737)
  • 87f1650 feat(interaction-api): add queued status to interaction proto
  • 7270e6d feat: Support mTLS in custom client using google auth mtls.get_default_ssl_co...
  • Additional commits viewable in compare view

Updates sentence-transformers from 5.6.0 to 5.6.1

Release notes

Sourced from sentence-transformers's releases.

v5.6.1 - Flash Attention Fix for XLM-R and RoBERTa Models

This patch release fixes silently degraded embeddings for RoBERTa-family models when flash attention is requested with transformers v5, notably every XLM-R based multilingual embedding model (BAAI/bge-m3, intfloat/multilingual-e5-large, etc.). The bug affected v5.5.0, v5.5.1, and v5.6.0.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.6.1
Inference only, use one of:
pip install sentence-transformers==5.6.1
pip install sentence-transformers[onnx-gpu]==5.6.1
pip install sentence-transformers[onnx]==5.6.1
pip install sentence-transformers[openvino]==5.6.1
Multimodal dependencies (optional):
pip install sentence-transformers[image]==5.6.1
pip install sentence-transformers[audio]==5.6.1
pip install sentence-transformers[video]==5.6.1
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==5.6.1

Fix position_ids offsetting for RoBERTa-family models when flattening inputs (#3879)

Since v5.5.0, the Transformer module flattens text-only batches into one packed sequence when flash attention is requested, skipping all padding overhead for a notable performance improvement. The position_ids of that packed sequence restart at 0 for every text, which is correct for the vast majority of models. RoBERTa-family architectures however compute positions as padding_idx + 1 + n for the n-th token, so every token read a position embedding shifted by padding_idx + 1 (usually 2). Nothing crashes, the embeddings are just silently worse.

from sentence_transformers import SentenceTransformer
An affected configuration: flash attention with an XLM-R based model
model = SentenceTransformer(
"BAAI/bge-m3",
model_kwargs={"attn_implementation": "flash_attention_2"},
)

Measured on BAAI/bge-m3:

Evaluation padded packed, 0-based positions packed, with this fix
stsb test Spearman 0.8485 0.7239 0.8485
NanoBEIR mean nDCG@10 0.6041 0.5414 0.6050

The quality loss recovers exactly once the offset is applied. The fix scans the loaded model's modules once for an int padding_idx stored next to a learned position_embeddings table, and offsets the packed position_ids when that pair is found. An audit of transformers finds 16 architectures with that pair (roberta, xlm_roberta, xlm_roberta_xl, camembert, roberta_prelayernorm, xmod, data2vec_text, longformer, luke, ibert, mpnet, markuplm, lilt, layoutlmv3, esm, and pp_doclayout_v2), all offset by exactly padding_idx + 1, and no 0-based or rotary architecture matches.

You are only affected if you encoded text with flash attention requested on transformers v5 with a RoBERTa-family checkpoint. The default padded path (e.g. sdpa) was never affected, and neither were MPNet models like all-mpnet-base-v2 despite mpnet appearing in the audit: transformers does not support flash attention for MPNet at all. If you did index a corpus with such a configuration, re-encode it after upgrading: pre-fix embeddings score notably worse and do not mix with post-fix embeddings.

What's Changed

... (truncated)

Commits
  • 7d3eb16 Release v5.6.1
  • 286dcf3 [tests] Skip bf16 + Windows + CPU forwards, as they can WindowsError on tor...
  • 30bad93 [ci] Exclude librosa/numba/llvmlite on Python 3.13 (#3835)
  • 9ca6bbc 🚨 Fix position_ids offsetting for RoBERTa-family models when flattening input...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group
af216c3 
Bumps the minor-and-patch group in /nlp-service with 3 updates: [fastapi](https://github.com/fastapi/fastapi), [google-genai](https://github.com/googleapis/python-genai) and [sentence-transformers](https://github.com/huggingface/sentence-transformers).


Updates `fastapi` from 0.139.0 to 0.140.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.0...0.140.0)

Updates `google-genai` from 2.11.0 to 2.14.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.11.0...v2.14.0)

Updates `sentence-transformers` from 5.6.0 to 5.6.1
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v5.6.0...v5.6.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: google-genai
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sentence-transformers
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from tuirk as a code owner July 27, 2026 09:17
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tuirk tuirk Awaiting requested review from tuirk tuirk is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants