chore: batch green dependabot PRs by Copilot · Pull Request #3063 · replicate/cog

Copilot · 2026-06-16T19:29:15Z

Summary

Batch merge of all currently-passing (green CI) Dependabot PRs. Updated as of 2026-06-25 with additional PRs that previously had failing CI but are now green.

Closes: #3061
Closes: #3060
Closes: #3059
Closes: #3058
Closes: #3054
Closes: #3053
Closes: #3043
Closes: #3040
Closes: #3039
Closes: #3038
Closes: #3037
Closes: #3030
Closes: #2986
Closes: #2985
Closes: #2941
Closes: #2940
Closes: #2900
Closes: #2890
Closes: #2867

Green PRs included (19 total)

PR	Package	Change
#3061	`diffusers` (z-image-turbo)	0.36.0 → 0.38.0
#3060	`transformers` (z-image-turbo)	4.57.3 → 5.0.0rc3
#3059	`torch` (resnet-managed-weights)	2.8.0 → 2.12.0
#3058	`pillow` (resnet-managed-weights)	12.1.1 → 12.2.0
#3054	`torch` (resnet)	2.8.0 → 2.12.0
#3053	`torch` (streaming-text)	2.7.1 → 2.12.0
#3043	`sentry` (crates)	0.47.0 → 0.48.2
#3040	`reqwest` (crates)	0.13.2 → 0.13.4
#3039	`dashmap` (crates)	6.1.0 → 6.2.1
#3038	`golang.org/x/sys`	0.43.0 → 0.45.0
#3037	`github.com/rogpeppe/go-internal`	1.14.1 → 1.15.0
#3030	`transformers` (streaming-text)	4.51.3 → 5.0.0rc3
#2986	`transformers` (resnet)	4.52.3 → 5.0.0rc3
#2985	`pillow` (resnet)	12.1.1 → 12.2.0
#2941	`pytest` (root uv.lock)	9.0.2 → 9.0.3
#2940	`pytest` (crates/coglet-python)	9.0.2 → 9.0.3
#2900	`pygments` (crates/coglet-python)	2.19.2 → 2.20.0
#2890	`pygments` (root uv.lock)	2.19.2 → 2.20.0
#2867	`requests` (crates/coglet-python)	2.32.5 → 2.33.0

Excluded PRs (6 still failing)

PRs #3042, #3041, #3011, #2969, #2937 were excluded due to CI failures. #2825 has been closed.

Conflict resolution

Several PRs modified the same requirements.txt files. Conflicts were resolved by combining all updates (taking the higher version for each package):

examples/z-image-turbo/requirements.txt: diffusers 0.38.0 + transformers 5.0.0rc3
examples/streaming-text/requirements.txt: torch 2.12.0 + transformers 5.0.0rc3
examples/resnet/requirements.txt: torch 2.12.0 + transformers 5.0.0rc3 + pillow 12.2.0
examples/experimental/resnet-managed-weights/requirements.txt: torch 2.12.0 + transformers 5.0.0rc3 + pillow 12.2.0
crates/Cargo.lock: sentry 0.48.2 + dashmap 6.2.1 + reqwest 0.13.4 (auto-merged cleanly)
go.mod/go.sum: golang.org/x/sys 0.45.0 + go-internal 1.15.0 (auto-merged cleanly)
uv.lock: pygments 2.20.0 + pytest 9.0.3 (auto-merged cleanly)
crates/coglet-python/uv.lock: pygments 2.20.0 + pytest 9.0.3 + requests 2.33.0 (auto-merged cleanly)

Bumps [diffusers](https://github.com/huggingface/diffusers) from 0.36.0 to 0.38.0. - [Release notes](https://github.com/huggingface/diffusers/releases) - [Commits](huggingface/diffusers@v0.36.0...v0.38.0) --- updated-dependencies: - dependency-name: diffusers dependency-version: 0.38.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [transformers](https://github.com/huggingface/transformers) from 4.57.3 to 5.0.0rc3. - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.57.3...v5.0.0rc3) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [torch](https://github.com/pytorch/pytorch) from 2.8.0 to 2.12.0. - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.8.0...v2.12.0) --- updated-dependencies: - dependency-name: torch dependency-version: 2.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [torch](https://github.com/pytorch/pytorch) from 2.7.1 to 2.12.0. - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.7.1...v2.12.0) --- updated-dependencies: - dependency-name: torch dependency-version: 2.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [sentry](https://github.com/getsentry/sentry-rust) from 0.47.0 to 0.48.2. - [Release notes](https://github.com/getsentry/sentry-rust/releases) - [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-rust@0.47.0...0.48.2) --- updated-dependencies: - dependency-name: sentry dependency-version: 0.48.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [dashmap](https://github.com/xacrimon/dashmap) from 6.1.0 to 6.2.1. - [Release notes](https://github.com/xacrimon/dashmap/releases) - [Commits](xacrimon/dashmap@v6.1.0...v6.2.1) --- updated-dependencies: - dependency-name: dashmap dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.43.0 to 0.45.0. - [Commits](golang/sys@v0.43.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/sys dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) from 1.14.1 to 1.15.0. - [Release notes](https://github.com/rogpeppe/go-internal/releases) - [Commits](rogpeppe/go-internal@v1.14.1...v1.15.0) --- updated-dependencies: - dependency-name: github.com/rogpeppe/go-internal dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [transformers](https://github.com/huggingface/transformers) from 4.51.3 to 5.0.0rc3. - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.51.3...v5.0.0rc3) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [transformers](https://github.com/huggingface/transformers) from 4.52.3 to 5.0.0rc3. - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.52.3...v5.0.0rc3) --- updated-dependencies: - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.1.1 to 12.2.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

ask-bonk

I'm Bonk, and I've done a quick review of your PR.

Batch merge of green Dependabot PRs updating Python, Rust, and Go dependencies across examples and crates.

1 issue found:

Critical: examples/resnet/requirements.txt bumps torch to 2.12.0 but leaves torchvision at 0.23.0. Torchvision 0.23.0 is built for torch 2.8.0 and is incompatible with torch 2.12.0. This will cause pip resolution failures or runtime errors for the resnet example. It needs to be bumped to torchvision==0.27.0 (the matching version for torch 2.12.0).

ask-bonk · 2026-06-16T20:05:57Z

-torch==2.8.0
+pillow==12.2.0
+torch==2.12.0
 torchvision==0.23.0


torchvision==0.23.0 is incompatible with torch==2.12.0 (line 2). Torchvision 0.23.0 corresponds to torch 2.8.0. Please update to the matching version:

Suggested change

torchvision==0.23.0

torchvision==0.27.0

ask-bonk · 2026-06-25T16:13:44Z

Review submitted to PR #3063.

Found 1 issue: examples/resnet/requirements.txt adds transformers==5.0.0rc3, but the resnet example doesn't actually use transformers (it only uses torch, torchvision, PIL, and cog). This appears to be an artifact of conflict resolution combining Dependabot PR #2986. I posted a suggestion to remove the unused dependency.

Everything else looks good — the torchvision compatibility issue from the previous review is fixed, the webhook test polling logic fix is correct, and the Rust/Go dependency bumps are routine.

github run

ask-bonk

I'm Bonk, and I've done a quick review of your PR.

Summary: Batch merge of green Dependabot PRs updating Python, Rust, and Go dependencies, plus CI stub check improvements and webhook test polling fix.

1 issue found:

Medium: examples/resnet/requirements.txt still contains transformers==5.0.0rc3 but the resnet example code (run.py) does not import or use transformers — it only uses torch, torchvision, PIL, and cog. This appears to be a Dependabot artifact (PR #2986) that was already flagged in a previous review. Adding an unused ~GB dependency slows down builds for users running this example and should be removed.

ask-bonk · 2026-06-25T16:57:28Z

Review submitted to PR #3063.

Found 1 issue: examples/resnet/requirements.txt still contains the unused transformers==5.0.0rc3 dependency (artifact from Dependabot PR #2986) that was flagged in a previous review. The resnet example only uses torch, torchvision, PIL, and cog — adding an unused ~GB dependency bloats the build. I posted a suggestion to remove it.

Everything else looks good — the CI stub check caching fix is correct, the webhook polling logic fix is correct, and the Rust/Go dependency bumps are routine.

github run

Co-authored-by: ask-bonk[bot] <249159057+ask-bonk[bot]@users.noreply.github.com> Signed-off-by: Anish Sahoo <anishsahoo2005@gmail.com>

ask-bonk

I'm Bonk, and I've done a quick review of your PR.

Summary: Batch merge of green Dependabot PRs updating Python, Rust, and Go dependencies, plus CI stub check improvements and webhook test polling fix.

1 issue found:

Medium: examples/resnet/requirements.txt contains duplicate lines from conflict resolution — each dependency appears twice. This will cause pip warnings/errors and unnecessarily bloats the requirements file.

ask-bonk · 2026-06-25T17:05:01Z

Review submitted to PR #3063.

Found 1 issue: examples/resnet/requirements.txt contains duplicate dependency lines (each package appears twice) as an artifact of conflict resolution. I posted a suggestion to deduplicate the file.

Everything else looks good — the CI stub check caching fix is correct, the webhook polling logic fix is correct, and the Rust/Go dependency bumps are routine.

github run

Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.1.1 to 12.2.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.13.2 to 0.13.4. - [Release notes](https://github.com/seanmonstar/reqwest/releases) - [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md) - [Commits](seanmonstar/reqwest@v0.13.2...v0.13.4) --- updated-dependencies: - dependency-name: reqwest dependency-version: 0.13.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [pygments](https://github.com/pygments/pygments) from 2.19.2 to 2.20.0. - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.19.2...2.20.0) --- updated-dependencies: - dependency-name: pygments dependency-version: 2.20.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.0.3) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.33.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.5...v2.33.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Anish Sahoo <anishsahoo2005@gmail.com>

ask-bonk · 2026-06-25T17:19:56Z

LGTM

github run

…ntal/resnet-managed-weights/pillow-12.2.0' into copilot/dependabot-all-green-updates

…0.13.4' into copilot/dependabot-all-green-updates

… copilot/dependabot-all-green-updates

…on/pytest-9.0.3' into copilot/dependabot-all-green-updates

…on/pygments-2.20.0' into copilot/dependabot-all-green-updates

ask-bonk · 2026-06-25T17:25:06Z

LGTM

github run

…nto copilot/dependabot-all-green-updates

…on/requests-2.33.0' into copilot/dependabot-all-green-updates

ask-bonk · 2026-06-25T17:27:38Z

LGTM

github run

dependabot Bot added 12 commits June 16, 2026 19:26

Copilot AI assigned Copilot and markphelps Jun 16, 2026

Copilot created this pull request from a session on behalf of markphelps June 16, 2026 19:29 View session

Copilot finished work on behalf of markphelps June 16, 2026 19:29

Copilot AI requested a review from markphelps June 16, 2026 19:29

Copilot started work on behalf of markphelps June 16, 2026 19:51 View session

Add PR template with closes syntax

8584797

Copilot AI changed the title ~~chore(deps): batch merge 12 green dependabot updates (2026-06-16)~~ Add PR template with closes: syntax for auto-closing issues on merge Jun 16, 2026

Copilot finished work on behalf of markphelps June 16, 2026 19:52

Copilot started work on behalf of markphelps June 16, 2026 19:53 View session

Remove unintended PR template file

76c94ff

Copilot AI changed the title ~~Add PR template with closes: syntax for auto-closing issues on merge~~ Revert unintended PR template and scope auto-closing to this PR only Jun 16, 2026

Copilot finished work on behalf of markphelps June 16, 2026 19:55

markphelps changed the title ~~Revert unintended PR template and scope auto-closing to this PR only~~ chore: batch green dependabot PRs Jun 16, 2026

Merge branch 'main' into copilot/dependabot-all-green-updates

3f231c3

markphelps marked this pull request as ready for review June 16, 2026 19:58

markphelps requested a review from a team as a code owner June 16, 2026 19:58

ask-bonk Bot reviewed Jun 16, 2026

View reviewed changes

Merge branch 'main' into copilot/dependabot-all-green-updates

01258d0

ask-bonk Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread examples/resnet/requirements.txt Outdated

Update examples/resnet/requirements.txt

ce7b388

Co-authored-by: ask-bonk[bot] <249159057+ask-bonk[bot]@users.noreply.github.com> Signed-off-by: Anish Sahoo <anishsahoo2005@gmail.com>

ask-bonk Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread examples/resnet/requirements.txt Outdated

dependabot Bot and others added 8 commits June 25, 2026 17:10

fix bonk edit

e3bb208

Signed-off-by: Anish Sahoo <anishsahoo2005@gmail.com>

anish-sahoo added 5 commits June 25, 2026 12:23

Merge remote-tracking branch 'origin/dependabot/pip/examples/experime…

f52b993

…ntal/resnet-managed-weights/pillow-12.2.0' into copilot/dependabot-all-green-updates

Merge remote-tracking branch 'origin/dependabot/cargo/crates/reqwest-…

4a1f3e2

…0.13.4' into copilot/dependabot-all-green-updates

Merge remote-tracking branch 'origin/dependabot/uv/pytest-9.0.3' into…

9298ea3

… copilot/dependabot-all-green-updates

Merge remote-tracking branch 'origin/dependabot/uv/crates/coglet-pyth…

f99b060

…on/pytest-9.0.3' into copilot/dependabot-all-green-updates

Merge remote-tracking branch 'origin/dependabot/uv/crates/coglet-pyth…

f0b6466

…on/pygments-2.20.0' into copilot/dependabot-all-green-updates

anish-sahoo added 2 commits June 25, 2026 12:25

Merge remote-tracking branch 'origin/dependabot/uv/pygments-2.20.0' i…

d21e54c

…nto copilot/dependabot-all-green-updates

Merge remote-tracking branch 'origin/dependabot/uv/crates/coglet-pyth…

918a508

…on/requests-2.33.0' into copilot/dependabot-all-green-updates

markphelps approved these changes Jun 25, 2026

View reviewed changes

anish-sahoo enabled auto-merge June 25, 2026 17:51

markphelps disabled auto-merge June 25, 2026 17:53

markphelps merged commit e6dcdfc into main Jun 25, 2026
43 checks passed

anish-sahoo deleted the copilot/dependabot-all-green-updates branch June 25, 2026 17:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: batch green dependabot PRs#3063

chore: batch green dependabot PRs#3063
markphelps merged 35 commits into
mainfrom
copilot/dependabot-all-green-updates

Copilot AI commented Jun 16, 2026 •

edited by anish-sahoo

Loading

Uh oh!

ask-bonk Bot left a comment

Uh oh!

ask-bonk Bot Jun 16, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot left a comment

Uh oh!

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot left a comment

Uh oh!

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Copilot AI commented Jun 16, 2026 • edited by anish-sahoo Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Green PRs included (19 total)

Excluded PRs (6 still failing)

Conflict resolution

Uh oh!

ask-bonk Bot left a comment

Choose a reason for hiding this comment

Uh oh!

ask-bonk Bot Jun 16, 2026

Choose a reason for hiding this comment

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

ask-bonk Bot commented Jun 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jun 16, 2026 •

edited by anish-sahoo

Loading