[dependabot]

Bumps the python-runtime group with 20 updates in the /requirements directory:

Package	From	To
cryptography	46.0.5	50.0.2
fastapi	0.141.1	0.162.0
numpy	2.5.2	2.5.4
onnxruntime	1.29.0	1.31.1
openai	3.3.1	3.40.0
pillow	12.3.0	13.0.0
piper-tts	1.4.2	1.8.0
playwright	1.55.0	1.64.1
pydantic	2.13.4	2.14.1
scipy	1.18.0	1.18.1
tokenizers	0.22.2	0.23.3
uvicorn	0.52.4	0.54.0
websockets	17.1	17.3
accelerate	1.14.0	1.15.0
torch	2.13.0	2.14.1
transformers	5.15.1	5.21.0
mlx	0.32.2	0.32.4
mlx-lm	0.31.3	0.32.2
huggingface-hub	1.28.0	2.3.0
ninja	1.13.0	1.13.2

Updates cryptography from 46.0.5 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.
.. _v50-0-1:
50.0.1 - 2026-08-25

• Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

50.0.0 - 2026-07-31

* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
</tr></table> 

... (truncated)

Commits

• 4dda5c7 [50.0.x] Bump for 50.0.2 release + changelog (#15733)
• 70c881c [50.0.x] Bump pyo3 to 0.29.2 (#15731)
• a8c45c4 [50.0.x] Build abi3.abi3t wheels for CPython 3.15+ (#15496) (#15732)
• ffde75a bump for 50.0.1 + changelog (#15520)
• dcb7050 Prepare for 50.0.0 release (#15372)
• 53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
• d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
• 908773d Bump downstream dependencies in CI (#15368)
• 2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
• c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
• Additional commits viewable in compare view

Updates fastapi from 0.141.1 to 0.162.0

Release notes

Sourced from fastapi's releases.

0.162.0

Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This applies to individual form parameters, form models, and unions of form models.

Omitted boolean model fields are excluded from model_dump(exclude_unset=True), and their defaults no longer count as submitted fields during union selection. Default factories and validate_default follow the usual rules.

For HTML checkboxes, declare a boolean with a default of False. See Boolean Form Fields.

Breaking Changes

• 🐛 Restore default handling for omitted boolean form fields. PR #16605 by @​tiangolo.

0.161.1

Fixes

• 🐛 Fix OpenAPI schemas for standalone nullable form unions. PR #16598 by @​tiangolo.

0.161.0

Features

• ✨ Add support for combining unions of form models. PR #16596 by @​tiangolo.

0.160.0

Query, header, cookie, and form parameter models now apply their extra configuration to all submitted fields in the same parameter location, consistent with Pydantic behavior. This includes fields declared in other models, individual parameters, or dependencies, which were previously excluded.

With extra="forbid", fields outside the model are rejected even if another parameter declares them. With extra="allow", those fields are included as model extras. With the default extra="ignore", they are ignored.

Breaking Changes

• 🐛 Apply each parameter model's extra configuration to sibling fields. PR #16594 by @​tiangolo.

Internal

• ⬆ Bump certifi from 2026.1.4 to 2026.10.19. PR #16571 by @​dependabot[bot].

0.159.1

Features

• ✨ Add support for optional unions of form models. PR #16586 by @​tiangolo.

0.159.0

Features

• ✨ Add support for optional query, header, and cookie parameter models. PR #16584 by @​tiangolo.

0.158.2

Features

• ✨ Add support for optional form models. PR #16582 by @​tiangolo.

0.158.1

... (truncated)

Commits

• 7a0a3f0 🔖 Release version 0.162.0 (#16606)
• b56f7c6 📝 Update release notes
• f02ef49 🐛 Restore default handling for omitted boolean form fields (#16605)
• 69ddc2b 🔖 Release version 0.161.1 (#16599)
• 0cafa07 📝 Update release notes
• f90d036 🐛 Fix OpenAPI schemas for standalone nullable form unions (#16598)
• 80c8742 🔖 Release version 0.161.0 (#16597)
• b105209 📝 Update release notes
• e42ac0a ✨ Add support for combining unions of form models (#16596)
• addd077 🔖 Release version 0.160.0 (#16595)
• Additional commits viewable in compare view

Updates numpy from 2.5.2 to 2.5.4

Release notes

Sourced from numpy's releases.

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Released on 2026-10-10.

NumPy 2.5.4 is a patch release that fixes bugs discovered after the 2.5.3 release. Highlights are:

• Many typing fixes and improvements,
• A workaround for the MSVC 19.51 bug, see below.

This release supports Python versions 3.12-3.15.

Improvements

• numpy.linalg.svd and numpy.linalg.lstsq now raise for inputs containing infinities instead of returning garbage results.

• Fixed hangs in numpy.linalg.svd and numpy.linalg.lstsq for certain inputs containing infinities for recent versions of some LAPACK implementations.

• numpy.linalg.cond now handles non-finite inputs more consistently.

(gh-32593)

StringDType hashing with NaN sentinels

StringDType instances with equivalent floating-point NaN sentinels now have equal hashes. Previously, distinct NaN objects could produce equal dtype instances with different hashes, causing dictionary lookups and set deduplication to fail.

(gh-32563)

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

A fill_value copied from a source array is now reset to the default fill_value for the new dtype when it cannot be represented in that dtype. Previously the copied value could be stale: ufuncs that change dtype left the result holding a fill_value typed for the old dtype, which raised a TypeError only when something later validated it (such as .view()), and a floating point fill_value that overflows an integer dtype was kept as an out-of-range value together with a RuntimeWarning. Both now fall back to the default, including when a masked array is passed to MaskedArray with a different dtype. A fill_value given explicitly by the user is still validated and raises as before. This can now raise a ComplexWarning if the fill_value is complex and the new dtype is real.

... (truncated)

Commits

• a3d0ef1 Merge pull request #32969 from charris/prepare-2.5.4
• 087b536 MAINT: Make OpenBLAS version check use 2.5.x branch.
• 91acd87 REL: Prepare for the NumPy 2.5.4 release.
• 9cc555b Merge pull request #32956 from charris/backport-typing-1
• e04b972 TYP: dtype[void].names: allow setting with list (#32943)
• d929969 TYP: timedelta64: datetime.timedelta construction isn't deprecated (#...
• 839467f TYP: ma.getmaskarray: accept array-likes (#32934)
• 64b721b TYP: polynomial: accept scalar coef in the poly constructors (#32931)
• 06b7ad2 TYP: void: accept any dtype: str in constructor calls (#32928)
• c7bcd2c TYP: place: widen mask (#32926)
• Additional commits viewable in compare view

Updates onnxruntime from 1.29.0 to 1.31.1

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.31.1

ONNX Runtime 1.31.1 is a patch release that fixes an OpenVINO-enabled Python build regression and corrects WASM Debug external-data tests. These notes cover changes since ONNX Runtime 1.31.0.

Highlights

• Fixed a provider-info namespace mismatch that caused compilation failures when building with both OpenVINO and Python enabled (#33327).
• Fixed WASM Debug test failures by skipping file-backed external-data cases unsupported by the WASM test module, while retaining compile-output checks, buffer-destination coverage, and native test coverage. This is a test-only change and does not change runtime behavior (#33226).

Contributors

Thanks to our 3 human contributors for this release!

@​eserscor, @​mustjab, @​tianleiwu

Full Changelog: rel-1.31.0...rel-1.31.1

Release highlights were prepared with AI assistance.

ONNX Runtime v1.31.0

ONNX Runtime 1.31.0 stabilizes model-package and EPContext data APIs, improves CPU model loading and quantized MoE inference, expands device-based execution-provider selection, and strengthens model-loading and runtime reliability. These notes cover changes since ONNX Runtime 1.30.0. CUDA and WebGPU kernel updates are summarized here; detailed provider notes are covered by their separate plugin EP releases.

Highlights

• Promoted the model-package API and EPContext data callbacks to stable C and C++ APIs, with EPContext callback support added across language bindings (#33166, #32265).
• Reduced CPU session-initialization overhead by parallelizing eligible weight prepacking, and accelerated block-wise INT4/INT8 QMoE experts with MLAS QNBit kernels and grouped expert dispatch (#31691, #32644, #32668).
• Added x86 FP16 LayerNorm/RMSNorm acceleration, Arm KleidiAI SVE2.1 FP16 GEMM support, and additional RISC-V vector kernels (#32715, #32670, #32710).
• Enabled CoreML participation in device-based EP selection, including Apple Neural Engine selection through PREFER_NPU (#31975).
• Added workspace-memory accounting and verification for constrained-memory graph partitioning, alongside broader model, graph, and tensor validation (#31962, #32189).

Announcements & Compatibility

• CUDA Plugin EP v0.3.0 and WebGPU Plugin EP v0.5.0 are matched with ONNX Runtime 1.31.0. For contrib-op compatibility, core and the plugin must use the same contributed-operator schemas; building both from the same ONNX Runtime revision is recommended. Schema mismatches can cause incorrect execution or crashes and may not be detected during plugin registration.
• GatherBlockQuantized behavior change: out-of-range indices now produce zero output slices across CPU, CUDA, and WebGPU for both integer and floating-point quantized formats. This deliberately differs from ONNX Gather error semantics (#32480).
• Experimental API migration: model-package consumers should use OrtApi::GetModelPackageApi and the stable OrtModelPackageApi table. EPContext callback registration now uses stable APIs; the corresponding experimental lookup entries were removed. The stable native callback contract carries callback/state pointers, with payload limits enforced by application callbacks, bindings, or EPs rather than a native read-options policy (#33166, #32265).
• ACL EP is deprecated and will be removed in a future release. Source builds using --use_acl now receive a deprecation warning (#32564).
• The ONNX dependency remains at 1.22.0. The initial ONNX 1.23 integration was reverted pending upstream fixes; this release does not ship that integration's new opset or FLOAT6 support (#33073).
• Supported native builds now default to 1DS telemetry. Windows TraceLogging remains selectable with --use_windows_telemetry or onnxruntime_USE_WINDOWS_TELEMETRY=ON; telemetry can be disabled with --no_telemetry (#32384).

New Features

Core APIs & Runtime

• Stabilized the model-package C and C++ APIs for loading packages, selecting compatible model variants, and creating sessions (#33166).
• Stabilized named EPContext data read/write callbacks for application-managed storage. Added EP support negotiation so registered callbacks do not silently fall back to filesystem I/O (#32265).
• Extended the Compile API to write external initializers and EP context data to buffers, enabling in-memory compilation workflows for models larger than 2 GB (#31347).
• Added workspace-memory accounting, source reporting, and post-partition reservation verification. Set session.strict_workspace_verification=1 to fail initialization on workspace declaration overruns or nonzero orphaned reservations; strict verification is not supported for ORT-format model loads (#31962, #32189).
• Added the opt-in source-build option onnxruntime_DISABLE_DEVICE_DISCOVERY=ON to skip platform accelerator probing and report only the CPU device (#32592).

Shared Contrib Operators

... (truncated)

Commits

• 6af1a93 1.31.1 version bump and cherry pick
• 402979a Revert "Bump version to 1.32.0 (#33197)" (#33212)
• 660125b [Compile API] Add support for writing external initializers and EP context to...
• 06cab16 Update parameterized requirement from >=0.8.1 to >=0.9.0 (#33022)
• 864d871 Fix isolated provider tests in Windows GPU CI (#33203)
• 1744702 Bump baseline-browser-mapping from 2.10.31 to 2.11.26 in /js/react_native/e2e...
• be3b8e8 Fix complex STFT window handling (#33136)
• 40a7167 [CPU] Avoid degenerate GQA FlashAttention tiles when L2 cache size is unknown...
• 430f563 Fix EP assignment reporting after NHWC layout transformation (#33184)
• 26ab6c7 Improve GQA shared-cache and sliding-window handling (#33175)
• Additional commits viewable in compare view

Updates openai from 3.3.1 to 3.40.0

Release notes

Sourced from openai's releases.

v3.40.0

3.40.0 (2026-10-27)

Features

• api: add prompt cache breakpoint TTL options (#4188) (3596d18)

Bug Fixes

• ci: use an explicit browser demo dependency (#4185) (a3f4302)

Chores

• api: record completed generated-code separation (#4190) (d7ab5ee)
• deps-dev: bump griffe from 1.14.0 to 2.3.0 (#4069) (766b849)
• deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#4178) (06dbb5d)
• deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#4110) (2404d04)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4107) (0adf711)
• deps: bump github/codeql-action/analyze from 4.38.2 to 4.39.0 (#4177) (1e42321)
• deps: bump openai/codex-action from 1.12 to 1.13 (#4070) (904ed3f)
• update generated-code verification and preserve SDK helpers (#4186) (9412200)

v3.39.0

3.39.0 (2026-10-26)

Features

• api: add gpt-6.1-terra model identifier (#4180) (e8beb1a)

v3.38.0

3.38.0 (2026-10-25)

Features

• api: add delegation controls and prompt cache lifetimes (#4169) (43045fc)
• api: expand Live Decision item and question types (#4175) (5d72315)

Bug Fixes

• agents: clarify result schema warnings (#4165) (cfa0a79)
• format API status errors using the server message (#4161) (6ce5f05)
• preserve fallback parsing for PEP 604 unions (#4160) (05dfea0)
• responses: resolve function arguments within their namespace (#4166) (81792ff)
• responses: validate tool namespaces before runner dispatch (#4167) (56a55f2)

... (truncated)

Changelog

Sourced from openai's changelog.

3.40.0 (2026-10-27)

Features

• api: add prompt cache breakpoint TTL options (#4188) (3596d18)

Bug Fixes

• ci: use an explicit browser demo dependency (#4185) (a3f4302)

Chores

• api: record completed generated-code separation (#4190) (d7ab5ee)
• deps-dev: bump griffe from 1.14.0 to 2.3.0 (#4069) (766b849)
• deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#4178) (06dbb5d)
• deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#4110) (2404d04)
• deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4107) (0adf711)
• deps: bump github/codeql-action/analyze from 4.38.2 to 4.39.0 (#4177) (1e42321)
• deps: bump openai/codex-action from 1.12 to 1.13 (#4070) (904ed3f)
• update generated-code verification and preserve SDK helpers (#4186) (9412200)

3.39.0 (2026-10-26)

Features

• api: add gpt-6.1-terra model identifier (#4180) (e8beb1a)

3.38.0 (2026-10-25)

Features

• api: add delegation controls and prompt cache lifetimes (#4169) (43045fc)
• api: expand Live Decision item and question types (#4175) (5d72315)

Bug Fixes

• agents: clarify result schema warnings (#4165) (cfa0a79)
• format API status errors using the server message (#4161) (6ce5f05)
• preserve fallback parsing for PEP 604 unions (#4160) (05dfea0)
• responses: resolve function arguments within their namespace (#4166) (81792ff)
• responses: validate tool namespaces before runner dispatch (#4167) (56a55f2)

Chores

... (truncated)

Commits

• 23a6be4 release: 3.40.0 (#4182)
• 0f434e4 ci: remove duplicate HTTPX2 test job (#4172)
• d7ab5ee chore(api): record completed generated-code separation (#4190)
• 3596d18 feat(api): add prompt cache breakpoint TTL options (#4188)
• a3f4302 fix(ci): use an explicit browser demo dependency (#4185)
• 9412200 chore: update generated-code verification and preserve SDK helpers (#4186)
• 766b849 chore(deps-dev): bump griffe from 1.14.0 to 2.3.0 (#4069)
• 1e42321 chore(deps): bump github/codeql-action/analyze from 4.38.2 to 4.39.0 (#4177)
• 06dbb5d chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#4178)
• 904ed3f chore(deps): bump openai/codex-action from 1.12 to 1.13 (#4070)
• Additional commits viewable in compare view

Updates pillow from 12.3.0 to 13.0.0

Release notes

Sourced from pillow's releases.

13.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Removals

• Remove undocumented GifImagePlugin._save_netpbm #9901 [@​akx]
• Remove ExifTags.IFD.Makernote #9850 [@​radarhere]
• Drop support for Python 3.10 #9750 [@​hugovk]
• Remove deprecations for Pillow 13.0.0 #9751 [@​radarhere]

Deprecations

• Deprecate IM image format #9849 [@​radarhere]
• Deprecate ImageQt align8to32() in favour of raw encoder stride #9940 [@​akx]
• Deprecate JpegImageFile.load_djpeg #9924 [@​akx]

Documentation

• Update release notes for Pillow 13.0.0 #10223 [@​hugovk]
• Correct the ImageOps.fit centering corner documentation #10118 [@​FanWu-ai]
• Update Tidelift links #10102 [@​radarhere]
• Correct bullet point syntax in release notes #10069 [@​radarhere]
• Update ImageDraw signatures in docs #10065 [@​ZainnQureshii]
• Update macOS tested Pillow versions #10048 [@​hugovk]
• Add pillow-wmf and pillow-zx-spectrum to third-party plugins list #10037 [@​bitplane]
• Delete CLAUDE.md #10027 [@​hugovk]
• Add pillow-lunasvg to third-party plugins list #10016 [@​Maksim-Burtsev]
• Extend security policy #10018 [@​hugovk]
• Update Color3DLUT description #10004 [@​radarhere]
• Document the internal image distinctness constraints #9752 [@​akx]
• Update macOS tested Pillow versions #10000 [@​radarhere]
• Link security policy in project metadata #9980 [@​hugovk]
• Image.new(): correct docstring and comment about uninitialized memory #9960 [@​akx]
• Add AGENTS.md #9582 [@​aclark4life]
• Add release notes for #8811 #9937 [@​radarhere]
• Fixed typo #9923 [@​radarhere]
• Fixed typo #9922 [@​radarhere]
• C interface is internal #9879 [@​radarhere]
• Correct function references #9895 [@​radarhere]
• Revert move from python-pillow.org to python-pillow.github.io #9830 [@​aclark4life]
• Add additional CVE numbers to 12.3.0 release notes #9777 [@​radarhere]
• Remove remaining :rtype:s from docstrings #9742 [@​akx]
• Update macOS tested Pillow versions #9759 [@​radarhere]

Dependencies

• Update dependency cibuildwheel to v4.3.1 #10175 [@renovate[bot]]
• Update dependency cibuildwheel to v4.3.0 #10132 [@renovate[bot]]
• Update dependency harfbuzz to v14.5.0 #10108 [@renovate[bot]]
• Update github-actions #10111 [@renovate[bot]]

... (truncated)

Commits

• 293218a 13.0.0 version bump
• 262e8e4 Update release notes for Pillow 13.0.0 (#10223)
• af56ace Validate TIFF tag values against libtiff's own field definition before TIFFSe...
• 570df03 Validate TIFF tag values against libtiff's own field definition before TIFFSe...
• 53318b5 Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)
• 0a87417 Bound retained TIFF tag data by stream size (#10225)
• 11582e5 Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)
• 8501adc Fix test
• ec5f1cb Take libtiff scanline geometry tags from the image, not tiffinfo/exif
• 4b63dff Share TIFF tag data budget across frames
• Additional commits viewable in compare view

Updates piper-tts from 1.4.2 to 1.8.0

Release notes

Sourced from piper-tts's releases.

v1.8.0

• Add Thai phonemizer using TLTK in the new th extra
  • --data.phoneme_type thai for training; "phoneme_type": "thai" in a voice config for synthesis
  • espeak-ng's Thai voice is a placeholder: its th_dict holds no lexicon, so unspaced Thai is never segmented; the leading vowels เ แ โ ใ ไ are not reordered; and a tone mark deletes the syllable's vowel, collapsing ป่า/ป้า/ป๊า/ป๋า to the same phonemes
  • TLTK does dictionary-based word segmentation and emits a tone digit (1-5) per syllable, in the same style phonemize_chinese uses for Mandarin tones
  • The whole inventory already has ids in the default IPA map, so Thai voices stay compatible with the IPA-based (espeak) warmstart
• Add script/setup --th, and install the th extra in CI so the Thai tests run

v1.7.0

• Add Japanese phonemizer using OpenJTalk (pyopenjtalk-plus) in the new ja extra
  • --data.phoneme_type japanese for training; "phoneme_type": "japanese" in a voice config for synthesis
  • espeak-ng has no kanji coverage (it reads out Unicode character names) and no pitch accent
  • Full-context labels are parsed for pitch accent and mapped to IPA, so Japanese voices stay compatible with the IPA-based (espeak) warmstart
• Add script/setup --ja, and install the ja extra in CI so the Japanese tests run
• libpiper: add piper_create_options and piper_create_with_options(), with piper_create() kept as a wrapper for ABI compatibility

v1.6.1

• Run the g2pW model through piper.g2pw_onnx instead of g2pw.api, dropping torch (~750 MB installed) and requests from the zh extra
  • g2pw.api imports torch only to build padded tensors and iterate batches; the model itself already ran under onnxruntime
  • Also 1.5-2x faster, since it no longer forks DataLoader worker processes on every call
  • g2pW is still required, for its pinyin/bopomofo lookup tables

v1.6.0

• Add Hebrew phonemizer using Nakdimon

v1.5.0

• Add libpiper C++ CLI executable ported from the legacy Piper repository, plus a C++ test suite
• Fix libpiper builds on Windows (MSVC, MSYS2-GCC) and Windows CI
• Bump embedded espeak-ng version
• Add default speaker id for multi-speaker voices
• Add vowel clustering support (--data.vowel_clusters)
• Add in-memory patching for alignments
• Training: add MRD (Multi-Resolution STFT) discriminator, loss/MOS tracking with UTMOS, silence-trim fixes, and dataloader performance improvements
• Pass custom phoneme id map when training

Changelog

Sourced from piper-tts's changelog.

1.8.0

• Fix the training learning rate never decaying
  • VitsModel sets automatic_optimization = False, and under manual optimization Lightning does not step the schedulers returned by configure_optimizers — nothing else did either, so the learning rate stayed pinned at its initial value for the whole run
  • Every checkpoint written before this reports lr_schedulers last_epoch=0 no matter how many epochs it trained
  • on_train_epoch_end now steps both schedulers, and logs lr_g/lr_d
• Derive --model.lr_decay/--model.lr_decay_d from --trainer.max_epochs when they are not set explicitly
  • The old default (0.999875, from upstream VITS) assumes a ~20,000-epoch schedule and decays the learning rate by only ~1% per 100 epochs, so simply stepping the scheduler would have changed almost nothing
  • The derived decay anneals to --model.lr_final_ratio (default 0.05) of the initial learning rate over the run; --model.lr_final_ratio 1.0 keeps it constant
  • Open-ended runs (max_epochs=-1, the default) have no run length to anneal over and still fall back to the upstream constants, with a warning
  • Resuming with --ckpt_path re-asserts the configured decay: ExponentialLR.state_dict() carries gamma, so the restored value would otherwise silently replace it
• Fix a resume silently reverting to the warmstart checkpoint
  • LightningCLI._parse_ckpt_path merges a resumed checkpoint's saved hyper_parameters back over the parsed config, so --model.warmstart_ckpt comes back even when it is absent from the command line
  • Trainer restores model weights before on_fit_start and the optimizer/loop state after it, so the warmstart overwrote the resumed weights with the base model while keeping the restored epoch — discarding every epoch trained so far
  • on_fit_start now skips both warmstart paths whenever trainer.ckpt_path is set, and logs that it did
• Add script/libritts_r_to_csv, which converts extracted LibriTTS-R splits to Piper's metadata CSV
  • Writes through csv.writer(delimiter="|") so quoting round-trips through the csv.reader the trainer uses — a hand-rolled "|".join() silently drops the quotation marks that LibriTTS dialogue is full of
  • Falls back from .normalized.txt to the chapter .trans.tsv to .original.txt, and skips utterances whose audio has no transcript
  • Optional --min-seconds/--max-seconds filtering and a --stats duration histogram
• Add Thai phonemizer using TLTK in the new th extra
  • --data.phoneme_type thai for training; "phoneme_type": "thai" in a voice config for synthesis
  • espeak-ng's Thai voice is a placeholder: its th_dict holds no lexicon, so unspaced Thai is never segmented; the leading vowels เ แ โ ใ ไ are not reordered; and a tone mark deletes the syllable's vowel, collapsing ป่า/ป้า/ป๊า/ป๋า to the same phonemes
  • TLTK does dictionary-based word segmentation and emits a tone digit (1-5) per syllable, in the same style phonemize_chinese uses for Mandarin tones
  • The whole inventory already has ids in the default IPA map, so Thai voices stay compatible with the IPA-based (espeak) warmstart
• Add script/setup --th, and install the th extra in CI so the Thai tests run

1.7.0

• Add Japanese phonemizer using OpenJTalk (pyopenjtalk-plus) in the new ja extra
  • --data.phoneme_type japanese for training; "phoneme_type": "japanese" in a voice config for synthesis
  • espeak-ng has no kanji coverage (it reads out Unicode character names) and no pitch accent
  • Full-context labels are parsed for pitch accent and mapped to IPA, so Japanese voices stay compatible with the IPA-based (espeak) warmstart
• Add script/setup --ja, and install the ja extra in CI so the Japanese tests run
• libpiper: add piper_create_options and piper_create_with_options(), with piper_create() kept as a wrapper for ABI compatibility

1.6.1

• Run the g2pW model through piper.g2pw_onnx instead of g2pw.api, dropping torch (~750 MB installed) and requests from the zh extra
  • g2pw.api imports torch only to build padded tensors and iterate batches; the model itself already ran under onnxruntime
  • Also 1.5-2x faster, since it no longer forks DataLoader worker processes on every call
  • g2pW is still required, for its pinyin/bopomofo lookup tables

1.6.0

• Add Hebrew phonemizer using Nakdimon

1.5.0

• Add libpiper C++ CLI executable ported from the legacy Piper repository, plus a C++ test suite
• Fix libpiper builds on Windows (MSVC, MSYS2-GCC) and Windows CI

... (truncated)

Commits

• 639388b Bump version
• 46d7947 Merge pull request #293 from OHF-Voice/claude/thai-piper-training-feasibility...
• 9336d10 Fix Thai test collection aborting CI on a broken optional dependency
• fb14e09 Add Thai phonemizer (TLTK segmentation + G2P -> IPA + tone digits)
• 850c45a fix: Phase 1 relaxed poly fallback for mobile (#289)
• b275826 Add Chinese pinyin support – Phase 1 (monophonic dict fallback, honest scopin...
• 7b8e8f7 Merge pull request #275 from OHF-Voice/claude/version-1-7-0-release-2b37ec
• 222159f Silence pylint redefined-outer-name in the phonemizer tests
• af4ff76 Make the mypy exclude for vendored VITS code actually work
• c0f3289 Release 1.7.0: add --ja setup flag and test Japanese in CI
• Additional commits viewable in compare view

Updates playwright from 1.55.0 to 1.64.1

Release notes

Sourced from playwright's releases.

v1.64.1

Highlights

microsoft/playwright-python#3283 - chore: roll Node.js to 24.22.1

The bundled Node.js 24.22.1 is a security release that distrusts the compromised eMudhra intermediate CAs. The driver uses Node's CA store for its own TLS...

Description has been truncated