1cc785e5a0* Studio: drop OpenEnv and unused ExecuTorch/open_spiel install deps * Studio: drop 8 more unused install deps from extras * Studio: restore tomli<3.11 for kernels; tidy dep-cleanup comments and tests * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * Studio: refresh scan-packages baseline for scipy _external + unsloth-zoo tests scipy moved its vendored array_api_compat from scipy/_lib to scipy/_external, so the four allowlisted array_api_compat __init__.py entries stopped matching and resurfaced as unsuppressed CRITICAL "Downloads and executes remote code" findings on all three pip scan-packages shards (extras, hf-stack, studio). Add the _external paths next to the existing _lib ones so both scipy layouts stay covered. Allowlist two unsloth-zoo test-file false positives now present in the hf-stack shard: tests/test_mlx_save_export_regressions.py (writes to /tmp dropper) and tests/test_mlx_trainer_internals.py (obfuscation plus exec/eval). Drop nine stale entries for packages removed from the Studio requirements and no longer in any shard closure (evaluate, pytest, hypothesis, kgb, langid), confirmed absent via with-deps resolution of all three shards. --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Co-authored-by: Daniel Han <danielhanchen@gmail.com>
23 lines
676 B
Text
23 lines
676 B
Text
# Single-env pins for unsloth + studio + data-designer
|
|
# Keep compatible with unsloth transformers bounds.
|
|
transformers==4.57.6
|
|
trl==0.23.1
|
|
huggingface-hub==0.36.2
|
|
|
|
# Studio stack
|
|
datasets==4.3.0
|
|
pyarrow==23.0.1
|
|
|
|
# FastMCP compat
|
|
fastmcp>=3.0.2
|
|
mcp>=1.24,<2
|
|
websockets>=15.0.1
|
|
|
|
# Cap anyio <4.14: 4.14's new asyncio per-task cancel scope (TaskHandle/_run_coro)
|
|
# gets exited in the wrong task on Python 3.13 under starlette's collapsing task
|
|
# group, raising "RuntimeError: ... exit a cancel scope that isn't the current
|
|
# task's" on streaming responses (#6483); 4.13 has no such code. Global cap so
|
|
# later with-deps steps can't re-resolve it up.
|
|
anyio<4.14.0
|
|
|
|
pandas==2.3.3
|