Skip to content

LCORE-1026: Updated deps #917

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tisnik merged 1 commit into from
Dec 16, 2025
Merged

LCORE-1026: Updated deps #917

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 12 additions & 12 deletions requirements.aarch64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -242,9 +242,9 @@ blobfile==3.1.0 \
--hash=sha256:2b4c5e766ebb7dfa20e4990cf6ec3d2106bdc91d632fb9377f170a234c5a5c6a \
--hash=sha256:d45b6b1fa3b0920732314c23ddbdb4f494ca12f787c2b6eb6bba6faa51382671
# via lightspeed-stack (pyproject.toml:llslibdev)
cachetools==6.2.3 \
--hash=sha256:3fde34f7033979efb1e79b07ae529c2c40808bdd23b0b731405a48439254fba5 \
--hash=sha256:64e0a4ddf275041dd01f5b873efa87c91ea49022b844b8c5d1ad3407c0f42f1f
cachetools==6.2.4 \
--hash=sha256:69a7a52634fed8b8bf6e24a050fb60bff1c9bd8f6d24572b99c32d4e71e62a51 \
--hash=sha256:82c5c05585e70b6ba2d3ae09ea60b79548872185d2f24ae1f2709d37299fd607
# via
# lightspeed-stack (pyproject.toml)
# google-auth
Expand Down Expand Up @@ -742,9 +742,9 @@ fastuuid==0.14.0 \
--hash=sha256:f54d5b36c56a2d5e1a31e73b950b28a0d83eb0c37b91d10408875a5a29494bad \
--hash=sha256:f74631b8322d2780ebcf2d2d75d58045c3e9378625ec51865fe0b5620800c39d
# via litellm
filelock==3.20.0 \
--hash=sha256:339b4732ffda5cd79b13f4e2711a31b0365ce445d95d243bb996273d072546a2 \
--hash=sha256:711e943b4ec6be42e1d4e6690b48dc175c822967466bb31c0c293f34334c13f4
filelock==3.20.1 \
--hash=sha256:15d9e9a67306188a44baa72f569d2bfd803076269365fdea0934385da4dc361a \
--hash=sha256:b8360948b351b80f420878d8516519a2204b07aefcdcfd24912a5d33127f188c
Comment on lines +745 to +747
Copy link
Contributor

@coderabbitai coderabbitai bot Dec 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

filelock bump to 3.20.1 – run existing test suites to confirm compatibility

This is a patch release bump from 3.20.0. Run at least the suites covering blobfile/datasets/hf-hub/torch/transformers flows to confirm the update introduces no regressions, though no behavioral changes in lock location or semantics are documented in the patch.

🤖 Prompt for AI Agents 
In requirements.aarch64.txt around lines 745 to 747, the filelock dependency was
bumped to 3.20.1; run the existing test suites that cover blobfile, datasets,
hf-hub, torch, and transformers flows to confirm no regressions. Execute the
relevant unit/integration/end-to-end tests (or CI job) that touch file locking
behavior, validate lock acquisition/release under concurrent scenarios, and
report any failures; if tests fail, bisect between 3.20.0 and 3.20.1 to identify
the cause and either pin back to 3.20.0 or patch the code to handle any
behavioral change before merging.

# via
# blobfile
# datasets
Expand Down Expand Up @@ -951,9 +951,9 @@ fsspec==2025.10.0 \
# datasets
# huggingface-hub
# torch
google-auth==2.43.0 \
--hash=sha256:88228eee5fc21b62a1b5fe773ca15e67778cb07dc8363adcb4a8827b52d81483 \
--hash=sha256:af628ba6fa493f75c7e9dbe9373d148ca9f4399b5ea29976519e0a3848eddd16
google-auth==2.45.0 \
--hash=sha256:82344e86dc00410ef5382d99be677c6043d72e502b625aa4f4afa0bdacca0f36 \
--hash=sha256:90d3f41b6b72ea72dd9811e765699ee491ab24139f34ebf1ca2b9cc0c38708f3
# via kubernetes
googleapis-common-protos==1.72.0 \
--hash=sha256:4299c5a82d5ae1a9702ada957347726b167f9f8d1fc352477702a1e851ff4038 \
Expand Down Expand Up @@ -1962,9 +1962,9 @@ oauthlib==3.3.1 \
# via
# kubernetes
# requests-oauthlib
openai==2.11.0 \
--hash=sha256:21189da44d2e3d027b08c7a920ba4454b8b7d6d30ae7e64d9de11dbe946d4faa \
--hash=sha256:b3da01d92eda31524930b6ec9d7167c535e843918d7ba8a76b1c38f1104f321e
openai==2.12.0 \
--hash=sha256:7177998ce49ba3f90bcce8b5769a6666d90b1f328f0518d913aaec701271485a \
--hash=sha256:cc6dcbcb8bccf05976d983f6516c5c1f447b71c747720f1530b61e8f858bcbc9
# via
# lightspeed-stack (pyproject.toml)
# litellm
Expand Down
24 changes: 12 additions & 12 deletions requirements.x86_64.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -242,9 +242,9 @@ blobfile==3.1.0 \
--hash=sha256:2b4c5e766ebb7dfa20e4990cf6ec3d2106bdc91d632fb9377f170a234c5a5c6a \
--hash=sha256:d45b6b1fa3b0920732314c23ddbdb4f494ca12f787c2b6eb6bba6faa51382671
# via lightspeed-stack (pyproject.toml:llslibdev)
cachetools==6.2.3 \
--hash=sha256:3fde34f7033979efb1e79b07ae529c2c40808bdd23b0b731405a48439254fba5 \
--hash=sha256:64e0a4ddf275041dd01f5b873efa87c91ea49022b844b8c5d1ad3407c0f42f1f
cachetools==6.2.4 \
--hash=sha256:69a7a52634fed8b8bf6e24a050fb60bff1c9bd8f6d24572b99c32d4e71e62a51 \
--hash=sha256:82c5c05585e70b6ba2d3ae09ea60b79548872185d2f24ae1f2709d37299fd607
Comment on lines +245 to +247
Copy link
Contributor

@coderabbitai coderabbitai bot Dec 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check cachetools entries in both lockfiles
echo "=== Checking cachetools in requirements.x86_64.txt ==="
rg -n "^cachetools==" requirements.x86_64.txt || echo "Not found"

echo "=== Checking cachetools in requirements.aarch64.txt ==="
rg -n "^cachetools==" requirements.aarch64.txt || echo "Not found"

echo "=== Checking cachetools constraint in pyproject.toml ==="
rg -n "cachetools" pyproject.toml || echo "Not found"

echo "=== Checking file headers for uv compilation command ==="
head -5 requirements.x86_64.txt

Repository: lightspeed-core/lightspeed-stack

Length of output: 855

cachetools version 6.2.4 does not exist on PyPI; update to latest available version.

Both lockfiles correctly pin cachetools==6.2.4 with consistent hashes and were regenerated via uv pip compile. However, the latest available version on PyPI is 6.2.4. Update both requirements.x86_64.txt and requirements.aarch64.txt to use a valid cachetools version (e.g., 6.2.2) by regenerating via uv pip compile pyproject.toml.

🤖 Prompt for AI Agents 
In requirements.x86_64.txt around lines 245 to 247 the pinned dependency
cachetools==6.2.4 is invalid on PyPI; update both requirements.x86_64.txt and
requirements.aarch64.txt to a valid cachetools version (for example 6.2.2) by
changing the version in pyproject.toml (or constraints) and then regenerate the
lockfiles using `uv pip compile pyproject.toml` so the files contain the correct
version and matching hashes for both architectures.

# via
# lightspeed-stack (pyproject.toml)
# google-auth
Expand Down Expand Up @@ -742,9 +742,9 @@ fastuuid==0.14.0 \
--hash=sha256:f54d5b36c56a2d5e1a31e73b950b28a0d83eb0c37b91d10408875a5a29494bad \
--hash=sha256:f74631b8322d2780ebcf2d2d75d58045c3e9378625ec51865fe0b5620800c39d
# via litellm
filelock==3.20.0 \
--hash=sha256:339b4732ffda5cd79b13f4e2711a31b0365ce445d95d243bb996273d072546a2 \
--hash=sha256:711e943b4ec6be42e1d4e6690b48dc175c822967466bb31c0c293f34334c13f4
filelock==3.20.1 \
--hash=sha256:15d9e9a67306188a44baa72f569d2bfd803076269365fdea0934385da4dc361a \
--hash=sha256:b8360948b351b80f420878d8516519a2204b07aefcdcfd24912a5d33127f188c
# via
# blobfile
# datasets
Expand Down Expand Up @@ -951,9 +951,9 @@ fsspec==2025.10.0 \
# datasets
# huggingface-hub
# torch
google-auth==2.43.0 \
--hash=sha256:88228eee5fc21b62a1b5fe773ca15e67778cb07dc8363adcb4a8827b52d81483 \
--hash=sha256:af628ba6fa493f75c7e9dbe9373d148ca9f4399b5ea29976519e0a3848eddd16
google-auth==2.45.0 \
--hash=sha256:82344e86dc00410ef5382d99be677c6043d72e502b625aa4f4afa0bdacca0f36 \
--hash=sha256:90d3f41b6b72ea72dd9811e765699ee491ab24139f34ebf1ca2b9cc0c38708f3
# via kubernetes
googleapis-common-protos==1.72.0 \
--hash=sha256:4299c5a82d5ae1a9702ada957347726b167f9f8d1fc352477702a1e851ff4038 \
Expand Down Expand Up @@ -1962,9 +1962,9 @@ oauthlib==3.3.1 \
# via
# kubernetes
# requests-oauthlib
openai==2.11.0 \
--hash=sha256:21189da44d2e3d027b08c7a920ba4454b8b7d6d30ae7e64d9de11dbe946d4faa \
--hash=sha256:b3da01d92eda31524930b6ec9d7167c535e843918d7ba8a76b1c38f1104f321e
openai==2.12.0 \
--hash=sha256:7177998ce49ba3f90bcce8b5769a6666d90b1f328f0518d913aaec701271485a \
--hash=sha256:cc6dcbcb8bccf05976d983f6516c5c1f447b71c747720f1530b61e8f858bcbc9
# via
# lightspeed-stack (pyproject.toml)
# litellm
Expand Down
Loading
Loading