deps(lora-quantum-ai): bump the lora-quantum-ai-deps group across 1 directory with 4 updates

[dependabot]

Updates the requirements on torch, torchvision, tqdm and mypy to permit the latest version.
Updates torch to 2.13.0

Release notes

Sourced from torch's releases.

PyTorch 2.13.0 Release Notes

• Highlights
• Backwards Incompatible Changes
• Deprecations
• New Features
• Improvements
• Bug fixes
• Performance
• Documentation
• Developers

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Tracked Regressions

ROCm wheels break torch.compile on CPU in environments without a GPU

Running a torch==2.13.0+rocm7.2 wheel in an environment where no GPU is available (torch.cuda.is_available() is False) breaks torch.compile on the CPU path: the first compile raises RuntimeError: Can't detect vectorized ISA for CPU (#189194). This is a regression from torch==2.12.1+rocm7.2, which compiles CPU code fine (detecting e.g. VecAVX2) in the same setup. The 2.13 ROCm wheel appears to rely on something present in the ROCm builder image to detect the CPU vectorized ISA, so it works when run on a ROCm image but fails on a plain CPU-only image.

Workaround: run the +rocm wheel on a ROCm image, or install a standard CPU/CUDA build for GPU-less environments.

Backwards Incompatible Changes

• Stop building CPython 3.13t (free-threaded) binaries (#182951)

  Upstream pypa/manylinux removed CPython 3.13t (free-threaded) on 2026-05-07, because 3.13t was experimental and has been superseded by the now-non-experimental CPython 3.14t. As a result, PyTorch 2.13 no longer ships cp313t wheels (Linux, Triton, and related artifacts). Users on the free-threaded interpreter should move to Python 3.14t.

  PyTorch 2.12:

  # cp313t (free-threaded 3.13) wheels were available
  python3.13t -m pip install torch

  PyTorch 2.13:

... (truncated)

Changelog

Sourced from torch's changelog.

Releasing PyTorch

• Release Compatibility Matrix
  • PyTorch CUDA Support Matrix
• Release Cadence
• General Overview
  • Frequently Asked Questions
• Cutting a release branch preparations
• Cutting release branches
  • pytorch/pytorch
  • PyTorch ecosystem libraries
  • Making release branch specific changes for PyTorch
  • Making release branch specific changes for ecosystem libraries
• Running Launch Execution team Core XFN sync
• Drafting RCs (https://github.com/pytorch/pytorch/blob/main/Release Candidates) for PyTorch and domain libraries
  • Release Candidate Storage
  • Release Candidate health validation
  • Cherry Picking Fixes
    • How to do Cherry Picking
  • Cherry Picking Reverts
• Preparing and Creating Final Release Candidate
• Promoting RCs to Stable
• Additional Steps to prepare for release day
  • Modify release matrix
  • Open Google Colab issue
• Patch Releases
  • Patch Release Criteria
  • Patch Release Process
    • Patch Release Process Description
    • Triage
    • Issue Tracker for Patch releases
    • Building a release schedule / cherry picking
    • Building Binaries / Promotion to Stable
• Hardware / Software Support in Binary Build Matrix
  • Python
  • Accelerator Software
    • Special support cases
  • Operating Systems
• Submitting Tutorials
• Special Topics
  • Updating submodules for a release
  • Triton dependency for the release

Release Compatibility Matrix

Following is the Release Compatibility Matrix for PyTorch releases:

... (truncated)

Commits

• cf30153 [release/2.13] Strip +PTX from CUDA arch list on release/RC builds (#188914) ...
• 3e3e24b [release/2.13] Restrict cuda-bindings to Python < 3.15 for CUDA 12.9 builds (...
• 7986b06 [release/2.13] Bump binary build timeout 280 -> 400 minutes (#188551)
• 0bdbc26 [release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (#188443)
• 9cabb45 [release/2.13] Update manywheel docker image pin to 78e737ad (#188409)
• 78e737a [release/2.13] Revert "Tighten generalized scatter graph target (#184075)" (#...
• 0bb9b5b [release/2.13] Revert "dynamo: round-trip torch.cuda.stream ctx mgr across gr...
• aaac2bf [release/2.13] Revert "[Reland] Port D104346887/PR 182675 for index_add fast ...
• 9330813 Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (#188192)
• 4e077a7 Remove setuptools upper bound (#188190)
• Additional commits viewable in compare view

Updates torchvision to 0.28.0

Release notes

Sourced from torchvision's releases.

TorchVision 0.28.0 Release

TorchVision 0.28 is out! This is a small release whose main change is the removal of the deprecated video decoding and encoding APIs (read_video, write_video, read_video_timestamps, VideoReader) from torchvision.io. Video decoding and encoding has fully migrated to TorchCodec as a part of our efforts to re-focus TorchVision. On the transforms side, v2.Resize now accepts string interpolation modes (e.g. "bilinear") and correctly honors NEAREST_EXACT on masks.

Backwards Incompatible Changes

• Video decoding/encoding removed from torchvision.io; migrated to TorchCodec (#9451)

  read_video, write_video, read_video_timestamps, and VideoReader are no longer available in OSS torchvision, and the video-backed datasets now require TorchCodec. These APIs were deprecated (with warnings) in prior releases and are now gone.

  Symptoms you may hit:

  • ImportError: cannot import name 'read_video' from 'torchvision.io'
  • import torchvision.io.video raising ModuleNotFoundError/ImportError
  • From video datasets: ImportError: Video decoding capabilities were removed from torchvision and migrated to TorchCodec. Please install TorchCodec following instructions at https://github.com/pytorch/torchcodec#installing-torchcodec

  As an example, if you performed the following on TorchVision 0.27:

  from torchvision.io import read_video
  frames, audio, info = read_video("video.mp4")

  You would now achieve that with:

  # pip install torchcodec
  from torchcodec.decoders import VideoDecoder
  decoder = VideoDecoder("video.mp4")
  frames = decoder[:]  # or decoder.get_frames_in_range(...), etc.

  See the TorchCodec documentation for tutorials and API references.

Improvements

• Allow passing interpolation as a string (e.g. "bilinear", "nearest") in resize transforms, in addition to the InterpolationMode enum (#9461)
• tv_tensors.wrap() now preserves metadata for custom TVTensor subclasses — a subclass can define its own .wrap() method to control how it is re-wrapped (#9490)

Bug fixes

• Fix F.resize on tv_tensors.Mask to honor NEAREST_EXACT interpolation. Previously the interpolation argument was ignored for mask inputs (resize_mask hardcoded NEAREST), so NEAREST_EXACT silently produced plain NEAREST output (#9497)
• Fix a GIF decoder bug on malformed GIFs that could write outside the allocated tensor's memory (#9520)

Commits

• 8fb8771 [Cherry-pick for 0.28] Fix gif decoder bug (#9520) (#9521)
• 5a5dd12 Release 0.28 (#9511)
• 85a1dcc Remove prototype folder (#9505)
• 4252acb Move lint CI job to 3.10 (#9507)
• 8b6ba92 [torchvision] Move video utilities to internal fb/io location (#9433) (#9451)
• bd94a05 Remove use of deprecated quantized APIs in C++ code (#9500)
• 45eb6dd Fix resize_mask to honor NEAREST_EXACT interpolation (#9497)
• 87fb856 Remove obsolete FIXME in autoaugment.py (#9496)
• 7bba561 Allow strings for interpolation param in resize transforms (#9461)
• 4d4e406 Let wrap() preserve metadata for custom TVTensor subclasses (#9490)
• Additional commits viewable in compare view

Updates tqdm to 4.68.4

Release notes

Sourced from tqdm's releases.

tqdm v4.68.4 stable

• trim to ncols even when '{bar}' not in bar_format (#1717, #1767 <- #1658)
• fix tqdm.write when stdout=None (#1768)

Commits

• 53d096e bump version, merge pull request #1768 from its-Sohan/fix/write-stdout-none
• 74ff992 fix: prevent tqdm.write from crashing when sys.stdout is none
• 3757d0d Merge pull requests #1717 and #1767 (fixes #1658)
• 55156ce fix: apply disp_trim to all format_meter return paths (#1658)
• See full diff in compare view

Updates mypy to 2.2.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key

Closed TypedDicts enable more precise type checking because the type checker knows exactly which keys are present. This is particularly useful when working with TypedDict unions or when you want to ensure that a TypedDict conforms to an exact shape.

The closed keyword also enables safe type narrowing with in checks:

Book = TypedDict('Book', {'book': str}, closed=True)
DVD = TypedDict('DVD', {'dvd': str}, closed=True)
type Inventory = Book | DVD
def print_type(inventory: Inventory) -> None:
if "book" in inventory:
# Type is narrowed to Book here - safe because DVD is closed
print(inventory["book"])
else:
# Type is narrowed to DVD here
print(inventory["dvd"])
</tr></table>

... (truncated)

Commits

• b3c4a5b Mark release
• 396f508 [Chore] Update changelog for 2.2 (#21691)
• 9592a9e Upload wasm wheels to PyPI (#21671)
• 1dc6962 Bump ast-serialize to 0.6.0 (#21664)
• 96a7913 Bump librt to 0.12.0 (#21663)
• 5ef0902 Fix the exportjson tool (.ff cache to .json conversion) (#21628)
• 8d621ad Support --shadow-file with --native-parser (#21623)
• 74ecdd8 Sync typeshed (#21612)
• 0cd1541 [mypyc] Make function wrappers thread-safe on free-threaded builds (#21620)
• 22a9cfd [mypyc] Make list remove and index thread-safe on free-threaded builds (#21614)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[sourcery-ai]

Sorry @dependabot[bot], you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery