Skip to content

chore(deps-dev): update mlx-audio requirement from <0.5,>=0.4.5 to >=0.4.5,<0.7 in the dev-dependencies group - #80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dev-dependencies-f134af75fa
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dev-dependencies-f134af75fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on mlx-audio to permit the latest version.
Updates mlx-audio to 0.6.2

Release notes

Sourced from mlx-audio's releases.

v0.6.2

What's Changed

New Contributors

Full Changelog: Neywa-Labs/mlx-audio@v0.6.1...v0.6.2

Commits
  • f6d5da9 Merge pull request #1081 from lucasnewman/version-062
  • 01bc835 Bump version to 0.6.2
  • 3674813 Merge pull request #1076 from tokg-venv/fix/transformers-chat-template-extra
  • d7f9953 fix(deps): require patched Jinja2 for chat templates
  • b54fcfd fix(deps): require transformers[chat-template] so chat templates can render
  • cf47eea Merge pull request #1075 from tokg-venv/fix/ming3-dense-attention-mask
  • 325a0cd Merge pull request #1077 from abaichuan1017/fix/local-kokoro-voices
  • 85ad7d5 fix(ming): exercise sliding attention dtype handoff
  • 1160d27 fix(ming): correct attention mask dtype and disabled sliding window in Ming-3...
  • 4730af2 Merge branch 'main' into fix/local-kokoro-voices
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [mlx-audio](https://github.com/Blaizzy/mlx-audio) to permit the latest version.

Updates `mlx-audio` to 0.6.2
- [Release notes](https://github.com/Blaizzy/mlx-audio/releases)
- [Commits](Neywa-Labs/mlx-audio@v0.4.5...v0.6.2)

---
updated-dependencies:
- dependency-name: mlx-audio
  dependency-version: 0.6.2
  dependency-type: direct:development
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from StuBehan as a code owner October 30, 2026 21:54
@glebedel

glebedel commented Nov 3, 2026

Copy link
Copy Markdown

s2d2 Security Autopilot evidence, 2026-11-03

Bump: update mlx-audio requirement from <0.5,>=0.4.5 to >=0.4.5,<0.7 in the dev-dependencies group (development scope, ? update).
Verdict: SAFE.

  • dev-only ?, CI green
  • CI green on the current head (9 checks)
  • Merge state: BLOCKED (a human approving review is required; s2d2 never approves PRs)

Posted by s2d2 Security Autopilot for Guillaume. Reply here if this is wrong.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant