[dependabot]

Bumps the pip-sidecar-patch-minor group with 18 updates in the /sidecar directory:

Package	From	To
scenedetect	0.7.2	0.7.3
torch	2.13.0	2.15.0
torchvision	0.28.0	0.29.2
torchaudio	2.11.0	2.11.1
setuptools	84.1.0	84.2.1
annotated-doc	0.0.5	0.0.6
anyio	4.15.1	4.16.0
click	8.5.0	8.5.1
csvw	4.1.1	4.2.0
ctranslate2	4.8.4	4.9.0
filelock	4.2.1	4.2.10
hf-xet	1.7.0	1.8.0
markdown-it-py	4.2.0	4.3.0
platformdirs	4.13.6	4.14.5
regex	2026.9.29	2026.11.9
typer	0.27.3	0.29.0
nvidia-cublas-cu12	12.9.2.10	12.9.3.13
nvidia-cudnn-cu12	9.27.0.42	9.28.1.4

Updates scenedetect from 0.7.2 to 0.7.3

Release notes

Sourced from scenedetect's releases.

PySceneDetect v0.7.3

PySceneDetect 0.7.3 adds scene-length based image export to save-images, a close() method and context manager support for VideoStream, and fixes several timing bugs: PyAV frame timing for videos without presentation timestamps, save-edl timecode drift at NTSC frame rates, OTIO source durations, and the last scene of variable framerate videos. Windows distributions ship updated dependencies.

CLI Changes

• [feature] Add -i/--interval to save-images to save images based on the length of each scene: one image per DURATION, with --min-images/--max-images to limit the number of images per scene, e.g. save-images -i 2s --max-images 10 (interval/min-images/max-images in the config file, and interval/min_images/max_images in save_images()) #280
• [cli] --help now prints [default: ...] and [setting: ...] values as they are written in a config file (merge, fcpx, yes/no instead of Mode.MERGE, FcpFormat.FCPX, True/on), the [backend-pyav] threading-mode config value is now validated, and the scenedetect.cfg template matches the real config keys and defaults (verbosity, downscale, default-detector, fade-bias, start-timecode, OTIO name, and removed stale filter-mode/luma-only entries) #589
• [bugfix] $VIDEO_NAME is now derived from the path component of URL inputs, ignoring the query string and fragment (e.g. https://host/clip.mp4?token=1.2 -> clip). URLs with no path use the host. Previously the query string leaked into output filenames, which fails on Windows. #197
• [bugfix] OTIO exports use the full source duration when provided, including from the CLI, instead of declaring a fixed 1,980-frame duration. The available range remains unspecified when the duration is unknown. Scene source ranges are unchanged. #580
• [bugfix] The OpenCV backend keeps position on the last frame after reaching the end of a VFR video, so the last scene no longer ends early (or before it starts) #561
• [bugfix] save-html --no-images now writes to the global -o/--output directory instead of the working directory #583
• [bugfix] split-video with -o now logs the output folder instead of repeating the filename template #595
• [bugfix] Allow -d/--downscale on the CLI and downscale in the config file to be set to 0 for automatic downscaling
• [bugfix] save-edl timecodes now count frames at the nominal rate (24, 30, or 60 per timecode second for 23.976, 29.97, or 59.94 fps) as required for non-drop-frame timecode, instead of being derived from wall-clock seconds. Previously the EDL drifted by roughly 3.6 seconds per hour at these rates. --start-timecode is parsed the same way, so -s 01:00:00:00 now starts the first event at 01:00:00:00. Non-standard rates (e.g. the average rate of a VFR video) are unchanged. Thanks to @​Cassian433 for the detailed report #593

API Changes

• [feature] VideoStream has a new close() method to release the file handles and decoders a video holds, and can be used as a context manager (with open_video(path) as video:) to close it automatically. Calling close() more than once has no effect. Once an OpenCV, PyAV, MoviePy or concatenated stream is closed, read(), seek() and reset() raise ValueError, while properties describing the video (path, name, frame_rate, duration, frame_size, aspect_ratio) remain available. The default implementation does nothing, so existing VideoStream subclasses are unaffected, and VideoCaptureAdapter leaves the caller's VideoCapture open #568
• [api] VideoStream.seek() now documents that the stream position is undefined after a SeekError is raised, and reset() must be called before reading further
• [bugfix] VideoStreamConcat no longer keeps its input videos open when they can't be concatenated (e.g. mismatched resolutions), and now closes each input explicitly once it is no longer needed instead of relying on garbage collection #568
• [bugfix] write_scene_list() now starts the cut list row with Timecode List: when no cut_list is passed, as it does when one is passed and as write_scene_list_html() does
• [bugfix] Fix pyav backend timing for videos that lack presentation timestamps (e.g. AVI files, elementary H.264 streams), which could lead to frame positions being out of order or stuck at zero and shifting cuts by one or more frames (#590, PyAV#933, PyAV#2478)
  • Videos are now opened with FFmpeg's genpts flag disabled.
  • Each frame will use the exact presentation timestamp, but if it is unavailable we now fall back to the decode timestamp to be consistent with the opencv backend.
  • A frame with neither timestamp is placed one frame period after the previous frame (as the moviepy backend does for every frame).
  • A one-time warning is emitted if timestamps are still detected going backwards.
  • VideoStreamAv.seek() now raises SeekError on streams that cannot be seeked (e.g. elementary streams without timestamps) instead of a backend-specific exception.
  • VideoStreamAv.seek() now falls back to reading from the start when the demuxer lands on a frame without a timestamp past the target, and seek(0) always re-opens the video, fixing wrong positions after seeking in some MPEG-TS files.

Packaging

• [general] Updates to Windows distributions:
  • av 19.0.1 -> 19.0.2
  • click 8.5.0 -> 8.5.1
  • imageio-ffmpeg 0.6.0 -> 0.8.1
  • pillow 12.3.0 -> 13.0.0
  • platformdirs 4.13.0 -> 4.14.5

Downloads

• Windows: PySceneDetect-0.7.3-win64.msi (installer) or PySceneDetect-0.7.3-win64.zip (portable); both signed, checksums in SHA256SUMS and PySceneDetect-0.7.3-win64.manifest.json
• Python: pip install scenedetect==0.7.3 (or scenedetect-headless); wheels and sdists attached
• Full changelog: https://www.scenedetect.com/changelog/

Thanks to @​nikhiljangid120, @​sungbin1015, @​qwist1233-cpu, @​vishal-tambi, @​Rober1208, @​ChandraChaan and @​MuhammadBilalKhan267 for their contributions to this release.

Commits

• 008aa74 [releases] Release v0.7.3
• 1077d43 [docs] Prepare for v0.7.3 release
• 594ccf3 [backends] Remove genpts option from fflags in PyAV backend #590 (#592)
• f1ae684 [output] Fix time drift in EDL output #593
• 3de7e8a [docs] Overhaul documentation for #589 (#594)
• 45f5c75 [output] Label the CSV cut list row when no cut list is passed (#597)
• 0fa2c85 [build] Drop MacOS 14 runner, use macos-latest now
• c5ce29c [cli] Allow downscale = 0 for auto downscale
• 55f20ff Log the real output folder when splitting with ffmpeg (#595)
• 36ca022 [docs] Fix in-development location in changelog
• Additional commits viewable in compare view

Updates torch from 2.13.0 to 2.15.0

Release notes

Sourced from torch's releases.

PyTorch 2.15.0 Release Notes

• Highlights
• Backwards Incompatible Changes
• Deprecations
• New Features
• Improvements
• Bug fixes
• Performance
• Documentation
• Security
• Developers

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

Python Frontend

import torch can no longer be re-executed in the same process, including via importlib.reload(torch) (#194654)

importlib.reload(torch) and del sys.modules["torch"] + re-import now raise, as does retrying import torch after it failed. Re-running the module body was already unsafe in exactly the same way as the retry, so the new check does not distinguish the two. Normal use is unaffected: a successful import leaves torch in sys.modules so the body never re-runs, and re-entrant imports from a backend extension during autoload still short-circuit on sys.modules without reaching the check.

Version 2.14:

import importlib
import torch
importlib.reload(torch)
RuntimeError: Only a single TORCH_LIBRARY can be used to register the namespace triton; ...
(re-importing after a failed import torch failed with similarly misleading errors or could segfault)

Version 2.15:

import importlib
import torch
importlib.reload(torch)
</tr></table>

... (truncated)

Commits

• 31a77fc [release/2.15] Keep ruff targeting Python 3.10 until the 3.10 code is removed...
• d0f2af8 [release/2.15] Raise the minimum Python to 3.11 in the package metadata (#202...
• 30c000d [release/2.15] Revert "[inductor] Prefetch Inductor cache keys at torch.compi...
• 4893744 [release/2.15] [c10d][nccl2] Make endCoalescing cover all ops in the window (...
• 469a3f4 [release/2.15][Windows] Remove the zlibwapi.dll install (#201873) (#201880)
• e581e2d [release/2.15] [c10d][nccl2] Do not treat zero-sized output tensors as aliase...
• ef10301 [release/2.15] Update xpu commit to revert kernel refactor introduced correct...
• a3f1751 [inductor] Fix the prologue zero-mask analysis on low-precision rounding cast...
• e47ff36 Ship top_level.txt in wheel dist-info (#201435)
• 5dc0495 Skip vectorized gather and scatter_add kernel for short rows (#201426)
• Additional commits viewable in compare view

Updates torchvision from 0.28.0 to 0.29.2

Release notes

Sourced from torchvision's releases.

TorchVision 0.29.2

This is a minor release with no new feature. It's compatible with PyTorch 2.14 and later.

Improvements

[packaging] Build a single py3-none wheel per platform, covering all supported CPython versions including free-threaded builds (#9643)

Bug Fixes

[datasets] Use filter='data' when extracting tar archives, to prevent path traversal outside the target directory (#9694) [ops] Add more input checks to the CPU roi_align, roi_pool, ps_roi_align and ps_roi_pool kernels. Out-of-range batch indices, bad rois/grad shapes and oversized sampling grids now raise an error instead of accessing memory out of bounds (#9684)

Various code-quality improvements: #9660, #9700, #9579, #9663, #9667, #9671, #9669, #9685

Contributors

Thanks to Adrian Abeyta, Andrey Talman, Dmitry Nikolaev, Huy Do and Nicolas Hug.

TorchVision 0.29.1 Release

This is a patch release, which is compatible with PyTorch 2.14.1. There are no new features added.

Packaging

• Relax the PyTorch requirement from torch==2.14.0 to torch>=2.14. TorchVision is now ABI stable with respect to PyTorch 2.14, so it no longer pins an exact PyTorch version (#9683, cherry-pick of #9680)

TorchVision 0.29: ABI stability!

TorchVision 0.29 is out! It comes with two major changes: ABI stability, and deprecation of the image decoders and encoders (now in TorchCodec)!

ABI Stability with torch 2.14

TorchVision is now ABI stable w.r.t. torch 2.14! This means that torchvision 0.29 will be compatible with future versions of torch: 2.15, 2.16, etc. You won’t need to install a new version of TorchVision when you upgrade torch.

As a result, we might stop releasing TorchVision in sync with pytorch. But TorchVision is still actively maintained and developed: we’ll still be pushing releases, just not with the same cadence.

Thanks to Adrian Abeyta @​adabeyta for the fantastic porting effort!

PRs: #9524, #9597, #9598, #9605, #9612, #9610, #9614, #9584, #9617, #9618, #9619, #9620, #9582, #9573, #9625, #9623, #9626, #9583, #9633, #9572, #9549, #9533, #9535, #9539, #9543, #9550, #9552, #9555, #9557, #9558, #9554

Image decoders and encoders are deprecated. Use TorchCodec!

The image decoders and encoders in torchvision.io are now deprecated, and they will be removed in a future release. They are now available in torchcodec >= 0.16, where they are significantly more capable. You’ll just need to pip install torchcodec, and you can refer to this migration guide for migrating your code (most APIs for decoding are the same).

This finalizes a clear separation of concerns for the three media-processing libraries of PyTorch: torchcodec is for decoding and encoding all media (images, videos, and audio), while torchvision and torchaudio focus on the transforms.

Bug fixes

[ops] Fix for deformable convolution kernels always running on default stream (#9522) [ops, MPS] Fix gradient overaccumulation in ROI ops (#9563, #9510) [transforms] Fix JPEG transform for non-contiguous batches (#9615)

... (truncated)

Commits

• f122815 Revert "[release/0.29] Set the Python range in the wheel metadata (>=3.10,<3....
• fe1719e [release/0.29] Set the Python range in the wheel metadata (>=3.10,<3.16) (#9723)
• b228111 0.29.2 Cherry-picks (#9702)
• 455fdc0 Prepare for 0.29.2 release (#9701)
• 1f1a920 Set the pin to torch>=2.14 (#9680) (#9683)
• 1b4390d [release/0.29] Build against the release/2.14 test-infra branch (#9682)
• 0bb1ccf Update version to 0.29.1 (#9678)
• fc73f5a Merge branch 'release/0.29' of github.com:pytorch/vision into release/0.29
• f9b2669 [Cherry-pick for 0.29] (#9634)
• e1b5802 Revert "Update version.txt for 0.30.0 (#9607)"
• Additional commits viewable in compare view

Updates torchaudio from 2.11.0 to 2.11.1

Release notes

Sourced from torchaudio's releases.

TorchAudio 2.11.1

This is a minor release with no new feature. It's compatible with PyTorch 2.11 and later.

Improvements

[packaging] Build a single py3-none wheel per platform, covering all supported CPython versions including free-threaded builds (#4224, #4234) [packaging] Declare the torch>=2.11 dependency in the wheel metadata. It was previously unset (#4225) [packaging] Add the Python 3.15 classifier and python_requires>=3.10 to the wheel metadata (#4240, #4224)

[Documentation] #4212 [Code quality] #4229, #4231, #4230, #4232, #4184, #4179

Bug Fixes

[CUDA] Only raise an error when torch and torchaudio were built with different CUDA major versions. Minor version mismatches are now allowed (#4226)

Commits

• 455331b [release/2.11.1] Add the Python 3.15 classifier to the wheel metadata (#4241)
• 26f10f6 Prepare for 2.11.1 release (#4236)
• 239dad8 [2.11.1] Cherry-pick: Build a single py3-none wheel per arch x accelerator va...
• 5f24fbb Build the docs on an OSDC runner (#4232)
• 45eaed8 Move the Linux test jobs to OSDC runners (#4230)
• 7a0abb4 Build the Linux wheels on OSDC runners (#4231)
• 245ccb4 Point the abi3 artifact pattern at 3.11 and fail loudly when it matches nothi...
• b85c99c Build a single abi3 wheel instead of one per Python version (#4224)
• c3d51c3 dont error on CUDA mismatch for minor version (#4226)
• 9c4849a set torch dep to torch>=2.11 (#4225)
• Additional commits viewable in compare view

Updates setuptools from 84.1.0 to 84.2.1

Changelog

Sourced from setuptools's changelog.

v84.2.1

Bugfixes

• Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
• Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when Extension.py_limited_api is enabled. These builds now use their version-specific extension suffix instead of using the unsupported .abi3t suffix. (#5363)

Improved Documentation

• Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0

Features

• Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
• Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

• Use target sysconfig data for stable-ABI extension filenames. (#5351)

Commits

• 3895f98 Bump version: 84.2.0 → 84.2.1
• 7c5cb7a Merge pull request #5362 from jameshilliard/fix/abi3t-target-config
• 00595bf Use sysconfig data for wheel tags and stable-ABI validation
• 873b29c Merge pull request #5363 from ngoldbaum/fix-3.14t
• d8bc01b Merge pull request #5330 from Topgearfanboy/main
• e27271e Apply review comments from @​jameshillard
• aa98f85 add newsfragment
• 3301fa6 Avoid .abi3t extension suffixes on Python 3.13t and 3.14t
• 301e27a Bump version: 84.1.0 → 84.2.0
• 39a7c2e Merge pull request #5193 from ngoldbaum/abi3.abi3t
• Additional commits viewable in compare view

Updates annotated-doc from 0.0.5 to 0.0.6

Release notes

Sourced from annotated-doc's releases.

0.0.6

Breaking Changes

• 🔥 Drop support for Python 3.9. PR #116 by @​tiangolo.

Upgrades

• ⬆️ Add support for Python 3.15 and 3.15t. PR #115 by @​tiangolo.

Docs

• 🎨 Enable Ruff formatting for Python in Markdown. PR #111 by @​tiangolo.

Internal

• ⬆ Bump the python-packages group with 3 updates. PR #112 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 6 updates. PR #113 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #114 by @​pr-submit[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #108 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 2 updates. PR #109 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #110 by @​pr-submit[bot].
• ⬆ Bump the github-actions group with 3 updates. PR #105 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #107 by @​pr-submit[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #106 by @​dependabot[bot].
• ⬆️ Bump setup-uv action to 10.0.1. PR #104 by @​YuriiMotov.
• 👷 Migrate automatic labels to Latest Changes. PR #103 by @​tiangolo.
• 👷 Remove legacy label check. PR #102 by @​tiangolo.
• 🔐 Use PR Submit for pull requests. PR #101 by @​tiangolo.
• 👷 Use GitHub CLI for Git authentication. PR #100 by @​tiangolo.
• 👷 Use PR Push commit identity. PR #99 by @​tiangolo.
• 🔒 Replace pre-commit PAT with PR Push. PR #97 by @​tiangolo.
• 🔥 Remove the old Latest Changes workflow. PR #96 by @​tiangolo.
• ⬆ Bump the github-actions group with 5 updates. PR #95 by @​dependabot[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #94 by @​dependabot[bot].

Changelog

Sourced from annotated-doc's changelog.

0.0.6 (2026-11-10)

Breaking Changes

• 🔥 Drop support for Python 3.9. PR #116 by @​tiangolo.

Upgrades

• ⬆️ Add support for Python 3.15 and 3.15t. PR #115 by @​tiangolo.

Docs

• 🎨 Enable Ruff formatting for Python in Markdown. PR #111 by @​tiangolo.

Internal

• ⬆ Bump the python-packages group with 3 updates. PR #112 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 6 updates. PR #113 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #114 by @​pr-submit[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #108 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 2 updates. PR #109 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #110 by @​pr-submit[bot].
• ⬆ Bump the github-actions group with 3 updates. PR #105 by @​dependabot[bot].
• ⬆ Bump pre-commit hooks. PR #107 by @​pr-submit[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #106 by @​dependabot[bot].
• ⬆️ Bump setup-uv action to 10.0.1. PR #104 by @​YuriiMotov.
• 👷 Migrate automatic labels to Latest Changes. PR #103 by @​tiangolo.
• 👷 Remove legacy label check. PR #102 by @​tiangolo.
• 🔐 Use PR Submit for pull requests. PR #101 by @​tiangolo.
• 👷 Use GitHub CLI for Git authentication. PR #100 by @​tiangolo.
• 👷 Use PR Push commit identity. PR #99 by @​tiangolo.
• 🔒 Replace pre-commit PAT with PR Push. PR #97 by @​tiangolo.
• 🔥 Remove the old Latest Changes workflow. PR #96 by @​tiangolo.
• ⬆ Bump the github-actions group with 5 updates. PR #95 by @​dependabot[bot].
• ⬆ Bump the python-packages group with 3 updates. PR #94 by @​dependabot[bot].

Commits

• d4b3d0d 🔖 Release version 0.0.6 (#117)
• 554e4a9 📝 Update release notes
• 21c93e8 ⬆️ Add support for Python 3.15 and 3.15t (#115)
• a0235f3 📝 Update release notes
• ed52ab7 🔥 Drop support for Python 3.9 (#116)
• bbaeb43 📝 Update release notes
• 15f031e ⬆ Bump the python-packages group with 3 updates (#112)
• a6466cf 📝 Update release notes
• 6ddb251 ⬆ Bump the github-actions group with 6 updates (#113)
• cd24a0d 📝 Update release notes
• Additional commits viewable in compare view

Updates anyio from 4.15.1 to 4.16.0

Release notes

Sourced from anyio's releases.

4.16.0

New features

• Added BlockingPortal.call_async() for asynchronously calling into an event loop with optional abandonment on cancellation (#1342; PR by @​davidbrochart)
• Added SOCK_SEQPACKET support to connect_unix() and create_unix_listener() (#1349; PR by @​theunkn0wn1)

Other changes

• Changed UDP sockets on the asyncio backend to make send() wait until the datagram has been passed to the operating system (#1294; PR by @​graingert)

Bug fixes

• Fixed documentation implying that use_uvloop=True falls back to the standard event loop when uvloop (winloop on Windows) is not installed, and showed how to skip the corresponding pytest backend variant when the dependency is missing (#645; PR by @​GruffElixir)
• Fixed get_current_task() on the asyncio backend raising an opaque TypeError: cannot create weak reference to 'NoneType' object instead of a clear error when called from a callback scheduled via loop.call_soon_threadsafe() (e.g. from within from_thread.run_sync()), where asyncio.current_task() is legitimately None (#773; PR by @​AmirF194)
• Fixed CancelScope on the asyncio backend swallowing a native Task.cancel() that was delivered in the same event loop iteration as the scope's own cancellation (such as a move_on_after() deadline expiring), which left the host task with a pending cancellation request that never raised CancelledError (#1214)
• Fixed UDP socket closing hanging if a datagram send was still in flight (#1237; PR by @​graingert)
• Fixed concurrent aclose_forcefully() calls on asyncio socket streams returning before the underlying socket was closed (#1273; PR by @​graingert)
• Fixed aclose() on sockets not checkpointing, and thus failing to raise a cancellation exception when called inside a cancelled scope (affected UNIX socket streams and UNIX datagram sockets on asyncio, and all sockets on Trio) (#1288; PR by @​graingert)
• Fixed aclose() on asyncio TCP socket listeners not checkpointing, and leaking the listening socket if cancelled while another task was waiting in accept() (#1289; PR by @​graingert)
• Fixed accept() on asyncio UNIX socket listeners hanging forever, and leaving the listening socket registered with the event loop, when the listener was closed by another task (#1289; PR by @​graingert)
• Fixed send() on asyncio TCP and UDP sockets returning normally, despite the data being discarded, when the socket was closed by another task (or, for TCP, the connection was lost) while send() was waiting for the operating system to accept the data (#1289; PR by @​graingert)
• Fixed SocketStream.send() on the asyncio backend handing its data to a paused transport after a previous send() was cancelled (#1299; PR by @​graingert)
• Fixed sleep() treating a negative delay (including -inf) inconsistently across backends (asyncio returned immediately; Trio raised ValueError) by raising ValueError on all backends (#1306; PR by @​BetterAndBetterII)
• Fixed create_tcp_listener() occasionally failing with a message like Could not create 2 listeners with a consistent port when an ephemeral port is requested and IPv6 is enabled and the dual-stack path is not available or a specific local host name was given (#1313)
• Fixed AsyncFile not shielding against cancellation while closing (#1314)
• Fixed TemporaryDirectory.cleanup() reacting to cancellation prematurely when the host task was already cancelled, causing the actual cleanup operation to be skipped (#1316; PR by @​Yasser-Ameur)
• Fixed a NaN deadline being accepted on asyncio while Trio raised ValueError, which silently disabled the timeout (fail_after(math.nan) returned instead of raising TimeoutError); CancelScope now rejects it on both backends (#1317; PR by @​dylanpulver)
• Fixed FileReadStream and FileWriteStream leaving files open when cancelled during context manager exit, including unflushed writes (#1318; PR by @​Kuang-xianxin)
• Fixed Condition.notify() and Condition.notify_all() failing when the underlying lock was acquired directly rather than through the condition (#1319; PR by @​GruffElixir)
• Fixed importing AnyIO with loaders that do not provide __file__, such as PyOxidizer, raising TypeError instead of falling back to eager imports (#1322; PR by @​skulitom)
• Fixed text receive streams silently discarding incomplete characters at end-of-file instead of applying the configured decoding error handler (#1339; PR by @​Aurelucien)
• Fixed Semaphore(fast_acquire=True) losing its fast-acquire behavior when instantiated outside a running event loop (#1348; PR by @​feiiiiii5)
• Fixed BlockingPortalProvider permanently failing with an AttributeError on every subsequent use if the first attempt to start its blocking portal failed (#1350; PR by @​Yasser-Ameur)
• Fixed create_udp_socket() silently ignoring the local_port argument when local_host was omitted, making the socket bind to a random ephemeral port instead of the requested one (#1351; PR by @​januththedev)
• Fixed worker threads on the asyncio backend never returning to the idle pool (and thus never being reused or pruned) when a to_thread.run_sync() call was cancelled after it had been queued for the worker but before the worker thread had picked it up (#1352; PR by @​Zac-HD)
• Fixed pytest plugin running Hypothesis async tests only on the first parametrized backend instead of each backend (#1353; PR by @​DYNOSuprovo)
• Fixed TypeError when subclassing an existing TypedAttributeSet subclass, and this subclass contains type annotations (#1358; PR by @​pasmud)
• Fixed Lock.locked() (and Condition.locked()) raising NoEventLoopError when the lock was created outside a running event loop (#1362; PR by @​00200200)
• Fixed connect_tcp() leaking a connected socket when an enclosing cancel scope was cancelled before the connection attempt task group exited (#1364; PR by @​charan-rathore)
• Fixed create_connected_udp_socket() silently ignoring local_port when local_host was not given: the local address was left unset, so the OS picked an ephemeral port instead of the requested one (#1365; PR by @​feiiiiii5)
• Fixed BlockingPortalProvider not passing the exception raised in its with block on to the start_blocking_portal() context manager it wraps (#1366; PR by @​feiiiiii5)
• Fixed anyio.itertools.islice() not consuming the first start items when stop <= start (#1372; PR by @​Rodrigo-Palma)
• Fixed BufferedByteReceiveStream.receive_exactly() and receive_until() returning buffered data after explicit closure instead of raising ClosedResourceError (#1378; PR by @​kokotatan)
• Fixed a TLS stream sending records the peer could no longer decrypt after a cancelled send() lost an already-encrypted record; the stream now raises BrokenResourceError on further use instead (#1385; PR by @​Kayvan-Zahiri)
• Fixed close() on memory object streams not waking up tasks blocked in send() or receive() on the same stream (#1391)
• Fixed anyio.itertools.product() acquiring and consuming unused input iterables when repeat=0 (#1394; PR by @​sricharanreddycheruku)
• Fixed SpooledTemporaryFile rolling over to disk on writes when max_size is zero (the default) (#1397; PR by @​fhgffy)
• Fixed Trio UDP sockets remaining open when initialization failed or was cancelled (#1400; PR by @​adenzhou1350)
• Fixed SpooledTemporaryFile.rollover() moving the current file position to the end of the file (#1401; PR by @​fhgffy)
• Fixed cancellation during temporary directory creation leaving the directory behind while its context manager is retained (#1403; PR by @​adenzhou1350)

... (truncated)

Commits

• 0ddd02d Released version 4.16.0
• 576892e Fixed certain pending tasks not woken up by the closing of memory object stre...
• 02ff4f8 Added BlockingPortal.call_async() (#1343)
• 1af29a4 Moved documentation code snippets into separate, checked files (#1445)
• f01c041 [pre-commit.ci] pre-commit autoupdate (#1448)
• 95a0143 Test with blockbuster and uvloop on Python 3.15 too
• 4d51154 Modernized the memory object stream tests
• 1e4b448 Fixed the as_connectable() example in the networking docs (#1442)
...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-13T21:39:25.981552Z	97622e5	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4334c7eec7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Synchronize the Chatterbox asset requirements with the bootstrap pins

When Chatterbox is installed through bootstrap, these new pins are written into its environment sentinel, but media_studio/features/tts/chatterbox.py:81–85 still registers CHATTERBOX_REQUIREMENTS with torch==2.13.0+cu130 and torchaudio==2.11.0+cu130. AssetManager._env_installed() compares those requirement lists exactly, so a successfully bootstrapped environment is reported as uninstalled and a subsequent asset installation unnecessarily reinstalls the multi-GB environment using the old pins. I reproduced the failed sentinel check locally. Update the runtime tuple together with this file, preserving identical requirement strings; the existing test_chatterbox_requirements_file_mirrors_the_code_tuple_exactly covers this invariant.

Useful? React with 👍 / 👎.