Bump the dependencies group across 1 directory with 15 updates

[dependabot]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Note

Bumps key dependencies (aiohttp, pyarrow, pillow, pydantic, datasets, transformers, tooling), adds the httpx/httpcore/h11/anyio stack for examples, and loosens several version constraints in pyproject.

• Dependencies (major bumps):
  • aiohttp 3.13.2, pyarrow 22.0.0, pillow 12.0.0, pydantic 2.12.4 (pydantic-core 2.41.5), datasets 4.4.1, transformers 4.57.1, rich 14.2.0, ruff 0.14.4, black 25.11.0, tox 4.32.0, filelock 3.20.0, platformdirs 4.5.0, pre-commit 4.4.0, pytest-asyncio 1.2.0, tomli 2.3.0, pyarrow-stubs latest.
• New packages (examples):
  • Add httpx, httpcore, h11, anyio, sniffio.
• Project config changes (pyproject.toml):
  • Relax bounds: typer >=0.9,<0.21, pillow >=11.1,<13.0, ruff >=0.3.2,<0.15.0, pytest-asyncio >=0.24,<1.3.
• Extras/metadata tweaks:
  • Update extras and markers across packages (e.g., transformers extras, Python >=3.10 in some deps).

^{Written by Cursor Bugbot for commit a36d8da. This will update automatically on new commits. Configure here.}

[cursor]

This PR is being reviewed by Cursor Bugbot

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[cursor]

Bug: Pillow: Unintended Major Version Upgrade

The pillow version constraint changed from ^11.1.0 to >=11.1,<13.0, which now allows major version 12.x. The caret operator ^11.1.0 restricts to >=11.1.0,<12.0.0, but the new constraint permits Pillow 12.x which may introduce breaking changes. This could cause compatibility issues if Pillow 12.x has breaking API changes that affect the codebase.

 

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.