chore(deps): bump the all-dependencies group with 6 updates

[dependabot]

Bumps the all-dependencies group with 6 updates:

Package	From	To
matplotlib	3.10.7	3.10.8
openai	2.9.0	2.11.0
sentence-transformers	5.1.2	5.2.0
tzdata	2025.2	2025.3
sqlalchemy	2.0.44	2.0.45
cachetools	6.2.2	6.2.3

Updates matplotlib from 3.10.7 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

Commits

• 1392cbe REL: v3.10.8
• 0b9ebb3 Doc release prep v3.10.8
• bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
• 86b38d3 Github stats v3.10.8
• 9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
• d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
• 799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
• 134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
• 5b8e219 TST: Run macosx backends in a subprocess
• 878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
• Additional commits viewable in compare view

Updates openai from 2.9.0 to 2.11.0

Release notes

Sourced from openai's releases.

v2.11.0

2.11.0 (2025-12-11)

Full Changelog: v2.10.0...v2.11.0

Features

• api: gpt 5.2 (dd9b8e8)

v2.10.0

2.10.0 (2025-12-10)

Full Changelog: v2.9.0...v2.10.0

Features

• api: make model required for the responses/compact endpoint (a12936b)

Bug Fixes

• types: allow pyright to infer TypedDict types within SequenceNotStr (8f0d230)

Chores

• add missing docstrings (f20a9a1)
• internal: update docstring (9a993f2)

Changelog

Sourced from openai's changelog.

2.11.0 (2025-12-11)

Full Changelog: v2.10.0...v2.11.0

Features

• api: gpt 5.2 (dd9b8e8)

2.10.0 (2025-12-10)

Full Changelog: v2.9.0...v2.10.0

Features

• api: make model required for the responses/compact endpoint (a12936b)

Bug Fixes

• types: allow pyright to infer TypedDict types within SequenceNotStr (8f0d230)

Chores

• add missing docstrings (f20a9a1)
• internal: update docstring (9a993f2)

Commits

• 43e324e release: 2.11.0
• 752a293 feat(api): gpt 5.2
• ef00216 release: 2.10.0 (#2767)
• See full diff in compare view

Updates sentence-transformers from 5.1.2 to 5.2.0

Release notes

Sourced from sentence-transformers's releases.

v5.2.0 - CrossEncoder multi-processing, multilingual NanoBEIR evaluators, similarity score in mine_hard_negatives, Transformers v5 support

This minor release introduces multi-processing for CrossEncoder (rerankers), multilingual NanoBEIR evaluators, similarity score outputs in mine_hard_negatives, Transformers v5 support, Python 3.9 deprecations, and more.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.2.0
Inference only, use one of:
pip install sentence-transformers==5.2.0
pip install sentence-transformers[onnx-gpu]==5.2.0
pip install sentence-transformers[onnx]==5.2.0
pip install sentence-transformers[openvino]==5.2.0

CrossEncoder Multi-processing

The CrossEncoder class now supports multiprocessing for faster inference on CPU and multi-GPU setups. This brings CrossEncoder functionality in line with the existing multiprocessing capabilities of SentenceTransformer models, allowing you to use multiple CPU cores or GPUs to speed up both the predict and rank methods when processing large batches of sentence pairs.

The implementation introduces these new methods, mirroring the SentenceTransformer approach:

• start_multi_process_pool() - Initialize a pool of worker processes
• stop_multi_process_pool() - Clean up the worker pool

Usage is straightforward with the new pool parameter:

from sentence_transformers.cross_encoder import CrossEncoder
def main():
model = CrossEncoder('cross-encoder/ms-marco-MiniLM-L6-v2')
# Start a pool of workers
pool = model.start_multi_process_pool()
Use the pool for faster inference
scores = model.predict(sentence_pairs, pool=pool)
rankings = model.rank(query, documents, pool=pool)
Clean up when done
model.stop_multi_process_pool(pool)

if name == "main":
main()

Or simply pass a list of devices to device to have predict and rank automatically create a pool behind the scenes.

from sentence_transformers.cross_encoder import CrossEncoder
</tr></table>

... (truncated)

Commits

• d4d70de Release v5.2.0
• b16248c docs: add release notes summary for v5.2 on main page (#3592)
• 2571f24 docs: update NanoBEIR collection links and descriptions for evaluators (#3591)
• 32cb5de Mine hard negatives: optionally output similarity scores (#3506)
• 9f9ad08 Extend NanoBEIR evaluators to support custom NanoBEIR datasets (#3583)
• 21dfa69 feat/deps: make Pillow an optional dependency (#3589)
• 67ff0fe Skip test_train_stsb tests; triggers rate limit too often (#3590)
• 4cb5cdc [deps] Use optimum-onnx now that both optimum-onnx and optimum-intel can us...
• 3f80d1c [feat] add multiprocessing support for Cross Encoder (#3580)
• f9724ff [feat] Allow transformers v5.0, add CI for transformers <v5 and >=v5 (#3586)
• Additional commits viewable in compare view

Updates tzdata from 2025.2 to 2025.3

Release notes

Sourced from tzdata's releases.

2025.3: Release of upstream tzdata 2025c

Version 2025.3

Upstream version 2025c released 2025-12-10T22:42:37+00:00

Briefly:

Several code changes for compatibility with FreeBSD.

Changes to past timestamps

Baja California agreed with California’s DST rules in 1953 and in 1961 through 1975, instead of observing standard time all year. (Thanks to Alois Treindl.)

Changes to commentary

The leapseconds file contains commentary about the IERS and NIST last-modified and expiration timestamps for leap second data. (Thanks to Judah Levine.)

Commentary now also uses characters from the set –‘’“”•≤ as this can be useful and should work with current applications. This also affects data in iso3166.tab and zone1970.tab, which now contain strings like “Côte d’Ivoire” instead of “Côte d'Ivoire”.

Changelog

Sourced from tzdata's changelog.

Version 2025.3

Upstream version 2025c released 2025-12-10T22:42:37+00:00

Briefly:

Several code changes for compatibility with FreeBSD.

Changes to past timestamps

Baja California agreed with California’s DST rules in 1953 and in 1961 through 1975, instead of observing standard time all year. (Thanks to Alois Treindl.)

Changes to commentary

The leapseconds file contains commentary about the IERS and NIST last-modified and expiration timestamps for leap second data. (Thanks to Judah Levine.)

Commentary now also uses characters from the set –‘’“”•≤ as this can be useful and should work with current applications. This also affects data in iso3166.tab and zone1970.tab, which now contain strings like “Côte d’Ivoire” instead of “Côte d'Ivoire”.

---

Commits

• d14cebc Update tzdata to version '2025c'
• 4045188 Bump actions/checkout from 5 to 6 in the actions group (#117)
• 9b58dd1 Stop requiring pytest-subtests for python>3.9, it has been incorporated int...
• 7dc1b6c Update pre-commit repos
• a9c68ae Add newlines to update PR description and commit (#106)
• d619f31 Test Python 3.14t
• b5ab93f Verify signatures of tarballs (#108)
• 6f866b8 Use raw strings for regex
• b1b3051 Fix dependabot config
• dddc234 Commit
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.44 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

• [orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

  References: #12858

• [orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

  References: #12952

examples

• [examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

• [sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

  References: #12915

• [sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

• See full diff in compare view

Updates cachetools from 6.2.2 to 6.2.3

Changelog

Sourced from cachetools's changelog.

v6.2.3 (2025-12-12)

• Improve documentation regarding @cachedmethod with condition parameter.

• Minor style and readability improvements.

• Modernize build environment.

• Update CI environment.

Commits

• c935468 Release v6.2.3.
• 94d1099 Prepare v6.2.3.
• af8b7d4 Fix #372: Convert setup.cfg to pyproject.toml.
• 20b8a19 Fix #370: Mention that using @​cachedmethod with condition requires self to be...
• 116fb4c Minor style and readability improvements.
• 96546ea Bump actions/checkout from 5.0.0 to 6.0.0
• 0106cc1 Bump actions/setup-python from 6.0.0 to 6.1.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions