Skip to content

chore(deps): bump the pip-sidecar-patch-minor group across 1 directory with 18 updates #541

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the pip-sidecar-patch-minor group across 1 directory with 18 updates #541

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions sidecar/pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,9 +56,9 @@ dev = [
# pip install "media-studio-sidecar[reframe-gpu]" \
# --extra-index-url https://download.pytorch.org/whl/cu130
reframe-gpu = [
"torch==2.13.0", # LR-ASD runtime (cu130 build via the torch index; 2.13.0 clears the torch advisory batch incl. GHSA-rrmf-rvhw-rf47)
"torchvision==0.28.0", # paired with torch 2.13.0
"torchaudio==2.11.0", # torchaudio DISCONTINUED above 2.11.x; 2.11.0 pairs install-wise with torch 2.13 (no requires_dist pin) — GPU-verify on first install
"torch==2.15.0", # LR-ASD runtime (cu130 build via the torch index; 2.13.0 clears the torch advisory batch incl. GHSA-rrmf-rvhw-rf47)
"torchvision==0.29.2", # paired with torch 2.13.0
"torchaudio==2.11.1", # torchaudio DISCONTINUED above 2.11.x; 2.11.0 pairs install-wise with torch 2.13 (no requires_dist pin) — GPU-verify on first install
# WU B4 (I2): the ONLY permitted weight-container reader on the load path — the
# vendored ViNet-S / TransNetV2 backends load their re-hosted weights via
# safetensors.torch.load_file (torch.load / pickle is FORBIDDEN, an RCE surface).
Expand Down
26 changes: 13 additions & 13 deletions sidecar/requirements.lock.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@ aiohttp==3.14.5
# via edge-tts
aiosignal==1.4.0
# via aiohttp
annotated-doc==0.0.5
annotated-doc==0.0.6
# via typer
anyio==4.15.1
anyio==4.16.0
# via httpx
attrs==26.1.0
# via
Expand All @@ -25,7 +25,7 @@ certifi==2026.10.23
# edge-tts
# httpcore
# httpx
click==8.5.0
click==8.5.1
# via
# huggingface-hub
# scenedetect
Expand All @@ -39,9 +39,9 @@ coloredlogs==15.0.1
# via onnxruntime
colorlog==6.12.0
# via kokoro-onnx
csvw==4.1.1
csvw==4.2.0
# via segments
ctranslate2==4.8.4
ctranslate2==4.9.0
# via faster-whisper
dlinfo==2.0.0
# via phonemizer-fork
Expand All @@ -51,7 +51,7 @@ espeakng-loader==0.2.4
# via kokoro-onnx
faster-whisper==1.2.1
# via media-studio-sidecar (sidecar/pyproject.toml)
filelock==4.2.1
filelock==4.2.10
# via huggingface-hub
flatbuffers==25.12.19
# via onnxruntime
Expand All @@ -63,7 +63,7 @@ fsspec==2026.9.0
# via huggingface-hub
h11==0.16.0
# via httpcore
hf-xet==1.7.0
hf-xet==1.8.0
# via huggingface-hub
httpcore==1.0.9
# via httpx
Expand Down Expand Up @@ -94,7 +94,7 @@ kokoro-onnx==0.6.1
# via media-studio-sidecar (sidecar/pyproject.toml)
language-tags==1.3.2
# via csvw
markdown-it-py==4.2.0
markdown-it-py==4.3.0
# via rich
mdurl==0.1.2
# via markdown-it-py
Expand Down Expand Up @@ -124,7 +124,7 @@ packaging==26.3
# onnxruntime
phonemizer-fork==3.3.2
# via kokoro-onnx
platformdirs==4.13.6
platformdirs==4.14.5
# via scenedetect
propcache==0.5.4
# via
Expand Down Expand Up @@ -152,7 +152,7 @@ referencing==0.37.0
# via
# jsonschema
# jsonschema-specifications
regex==2026.9.29
regex==2026.11.9
# via segments
rfc3986==1.5.0
# via csvw
Expand All @@ -162,11 +162,11 @@ rpds-py==2026.9.1
# via
# jsonschema
# referencing
scenedetect==0.7.2
scenedetect==0.7.3
# via media-studio-sidecar (sidecar/pyproject.toml)
segments==2.4.0
# via phonemizer-fork
setuptools==84.1.0
setuptools==84.2.1
# via ctranslate2
shellingham==1.5.4
# via typer
Expand All @@ -187,7 +187,7 @@ tqdm==4.70.1
# faster-whisper
# huggingface-hub
# scenedetect
typer==0.27.3
typer==0.29.0
# via huggingface-hub
typing-extensions==4.16.0
# via
Expand Down
4 changes: 2 additions & 2 deletions sidecar/runtime_setup/requirements-chatterbox.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,5 +33,5 @@
# LIST, so a bootstrap-built env only counts as the installed "chatterbox-env"
# asset when the pin order matches. Keep both in sync.
chatterbox-tts==0.1.7
torch==2.13.0+cu130
torchaudio==2.11.0+cu130
torch==2.15.0
torchaudio==2.11.1
Comment on lines +36 to +37

@chatgpt-codex-connector chatgpt-codex-connector Bot Nov 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Synchronize the Chatterbox asset requirements with the bootstrap pins

When Chatterbox is installed through bootstrap, these new pins are written into its environment sentinel, but media_studio/features/tts/chatterbox.py:81–85 still registers CHATTERBOX_REQUIREMENTS with torch==2.13.0+cu130 and torchaudio==2.11.0+cu130. AssetManager._env_installed() compares those requirement lists exactly, so a successfully bootstrapped environment is reported as uninstalled and a subsequent asset installation unnecessarily reinstalls the multi-GB environment using the old pins. I reproduced the failed sentinel check locally. Update the runtime tuple together with this file, preserving identical requirement strings; the existing test_chatterbox_requirements_file_mirrors_the_code_tuple_exactly covers this invariant.

Useful? React with 👍 / 👎.

8 changes: 4 additions & 4 deletions sidecar/runtime_setup/requirements-sidecar.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,8 @@
# lock is validated by media_studio.assets.manager.validate_hashed_lock first.

faster-whisper==1.2.1
ctranslate2==4.8.4
scenedetect==0.7.2
ctranslate2==4.9.0
scenedetect==0.7.3
opencv-python==4.14.0.94
httpx==0.28.1
numpy==2.5.4
Expand All @@ -38,8 +38,8 @@ tokenizers==0.23.3
kokoro-onnx==0.6.1

# CUDA runtime wheels for ctranslate2/onnxruntime GPU paths (pins = dev venv)
nvidia-cublas-cu12==12.9.2.10
nvidia-cudnn-cu12==9.27.0.42
nvidia-cublas-cu12==12.9.3.13
nvidia-cudnn-cu12==9.28.1.4

# DELIBERATELY NOT HERE: mediapipe. The claudeshorts reframe engine's optional
# MediaPipe backend uses the LEGACY Solutions API (`mp.solutions.face_detection`),
Expand Down
Loading