Skip to content

chore(licensing): refresh transitive versions in LICENSE-binary-python#5159

Open
bobbai00 wants to merge 1 commit into
apache:mainfrom
bobbai00:fix/5002-license-binary-python-drift
Open

chore(licensing): refresh transitive versions in LICENSE-binary-python#5159
bobbai00 wants to merge 1 commit into
apache:mainfrom
bobbai00:fix/5002-license-binary-python-drift

Conversation

@bobbai00
Copy link
Copy Markdown
Contributor

What changes were proposed in this PR?

Refreshes 14 transitive Python package versions in amber/LICENSE-binary-python to match the versions currently bundled, fixing the drift reported by the nightly license-binary-checker workflow on bf2f92c:

  • aiohappyeyeballs 2.6.1 → 2.6.2 (PSF)
  • certifi 2026.4.22 → 2026.5.20 (MPL 2.0)
  • click 8.3.3 → 8.4.1 (BSD 3-Clause)
  • fonttools 4.62.1 → 4.63.0 (MIT)
  • greenlet 3.5.0 → 3.5.1 (MIT)
  • huggingface-hub 0.36.2 → 1.16.1 (Apache 2.0)
  • idna 3.13 → 3.16 (BSD 3-Clause)
  • markdown-it-py 4.1.0 → 4.2.0 (MIT)
  • propcache 0.4.1 → 0.5.2 (Apache 2.0)
  • regex 2026.4.4 → 2026.5.9 (Apache 2.0)
  • requests 2.33.1 → 2.34.2 (Apache 2.0)
  • tifffile 2026.5.2 → 2026.5.15 (BSD 3-Clause)
  • urllib3 2.6.3 → 2.7.0 (MIT)
  • yarl 1.23.0 → 1.24.2 (Apache 2.0)

Version-only updates — no license category changes.

Any related issues, documentation, discussions?

Closes #5002

How was this PR tested?

Relies on the existing build / python (ubuntu-latest, 3.12) job that runs "Check installed Python packages against per-module LICENSE-binary files" in strict (nightly) mode. The drift entries listed above were taken directly from that job's failure log.

Was this PR authored or co-authored using generative AI tooling?

Generated-by: Claude Opus 4.7 (1M context)

- frozenlist==1.8.0
- hf-xet==1.5.0
- huggingface-hub==0.36.2
- huggingface-hub==1.16.1
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is a major upgrade, it should not be automatically bumped. did we pin hungging-face?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

License-binary drift detected

2 participants