[codex] Fix vulnerable example dependencies

examples/Pix2Pix_Instruct/SMILE_for_Instruction_based_Image_Editing.ipynb

@@ -35,26 +35,26 @@
       ],
       "source": [
         "%pip install -q \\\n",
-        "    img2img-turbo~=0.0.1 \\\n",
-        "    transformers~=4.57.2 \\\n",
+        "    transformers~=5.0.0rc3 \\\n",
         "    torch~=2.9.0 \\\n",
         "    scipy~=1.16.3 \\\n",
-        "    pillow~=11.3.0 \\\n",
-        "    requests~=2.32.4 \\\n",
+        "    gdown~=5.2.2 \\\n",
+        "    pillow~=12.1.1 \\\n",
+        "    requests~=2.33.0 \\\n",
         "    numpy~=2.0.2 \\\n",
         "    pandas~=2.2.2 \\\n",
-        "    sentence-transformers~=5.1.2 \\\n",
+        "    sentence-transformers~=5.2.0 \\\n",
         "    opencv-python~=4.12.0.88 \\\n",
         "    scikit-learn~=1.6.1 \\\n",
         "    matplotlib~=3.10.0 \\\n",
         "    gensim~=4.4.0 pot~=0.9.6 \\\n",
-        "    python-dotenv~=1.2.1 \\\n",
+        "    python-dotenv~=1.2.2 \\\n",
         "    google-genai \\\n",
         "    xgboost~=3.1.2 \\\n",
         "    openai~=2.9.0 \\\n",
-        "    diffusers~=0.35.2 \\\n",
+        "    diffusers~=0.38.0 \\\n",
         "    accelerate~=1.12.0 \\\n",
-        "    safetensors~=0.7.0 \\\n",
+        "    safetensors~=0.8.0rc0 \\\n",
         "    torchvision~=0.24.0 \\\n",
         "    plotly~=5.24.1 \\\n",
         "    kaleido~=0.2.1"
@@ -142,7 +142,20 @@
         "from scipy.stats import wasserstein_distance\n",
         "from gensim.models import KeyedVectors\n",
         "import gensim.downloader as api\n",
-        "from img2img_turbo import run_inference_paired\n",
+        "\n",
+        "def _load_img2img_turbo_inference():\n",
+        "    try:\n",
+        "        from img2img_turbo import run_inference_paired\n",
+        "    except ImportError as exc:\n",
+        "        raise RuntimeError(\n",
+        "            \"The I2I-Turbo generation path requires img2img-turbo, which is not \"\n",
+        "            \"installed by default because img2img-turbo 0.0.1 pins \"\n",
+        "            \"transformers < 4.58 and conflicts with the security-patched \"\n",
+        "            \"transformers 5.x dependency set.\"\n",
+        "        ) from exc\n",
+        "\n",
+        "    return run_inference_paired\n",
+        "\n",
         "from google import genai\n",
         "from google.genai import types\n",
         "from openai import OpenAI"
@@ -1618,6 +1631,7 @@
         "    try:\n",
         "        gen_img_flag = True\n",
         "        cost = 0.0  # Initialize cost for local models\n",
+        "        run_inference_paired = _load_img2img_turbo_inference()\n",
         "        run_inference_paired(\n",
         "            model_name=model_name,\n",
         "            input_image=input_image_path,\n",
@@ -4729,4 +4743,4 @@
   },
   "nbformat": 4,
   "nbformat_minor": 0
-}
+}

examples/Pix2Pix_Instruct/pyproject.toml

@@ -6,28 +6,28 @@ readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
     "accelerate~=1.12.0",
-    "diffusers~=0.35.2",
+    "diffusers~=0.38.0",
+    "gdown~=5.2.2",
     "gensim~=4.4.0",
     "google-genai~=1.54.0",
-    "img2img-turbo~=0.0.1",
     "kaleido>=1.2.0",
     "matplotlib~=3.10.0",
     "numpy~=2.0.2",
     "openai>=2.11.0",
     "opencv-python~=4.12.0.88",
     "pandas~=2.2.2",
-    "pillow~=11.3.0",
+    "pillow~=12.1.1",
     "plotly>=6.5.0",
     "pot~=0.9.6",
-    "python-dotenv~=1.2.1",
-    "requests~=2.32.4",
-    "safetensors~=0.7.0",
+    "python-dotenv~=1.2.2",
+    "requests~=2.33.0",
+    "safetensors~=0.8.0rc0",
     "scikit-learn~=1.6.1",
     "scipy~=1.16.3",
-    "sentence-transformers~=5.1.2",
+    "sentence-transformers~=5.2.0",
     "tiktoken~=0.12.0",
     "torch~=2.9.0",
     "torchvision~=0.24.0",
-    "transformers~=4.57.2",
+    "transformers~=5.0.0rc3",
     "xgboost~=3.1.2",
 ]

examples/Pix2Pix_Instruct/requirements.txt

@@ -1,25 +1,25 @@
-img2img-turbo~=0.0.1
-transformers~=4.57.2
+transformers~=5.0.0rc3
 torch~=2.9.0
 scipy~=1.16.3
-pillow~=11.3.0
-requests~=2.32.4
+gdown~=5.2.2
+pillow~=12.1.1
+requests~=2.33.0
 numpy~=2.0.2
 pandas~=2.2.2
-sentence-transformers~=5.1.2
+sentence-transformers~=5.2.0
 opencv-python~=4.12.0.88
 scikit-learn~=1.6.1
 matplotlib~=3.10.0
 gensim~=4.4.0
 pot~=0.9.6
-python-dotenv~=1.2.1
+python-dotenv~=1.2.2
 google-genai~=1.55.0
 xgboost~=3.1.2
 openai~=2.11.0
 tiktoken~=0.12.0
 accelerate~=1.12.0
-diffusers~=0.35.2
-safetensors~=0.7.0
+diffusers~=0.38.0
+safetensors~=0.8.0rc0
 torchvision~=0.24.0
 plotly~=6.5.0
-kaleido~=1.2.0
+kaleido~=1.2.0

examples/Pix2Pix_Instruct/smile_for_instruction_based_image_editing.py

@@ -51,7 +51,6 @@
 from scipy.stats import wasserstein_distance
 from gensim.models import KeyedVectors
 import gensim.downloader as api
-from img2img_turbo import run_inference_paired
 from google import genai
 from google.genai import types
 from openai import OpenAI
@@ -68,6 +67,20 @@
 logger.setLevel(logging.INFO)
 
 
+def _load_img2img_turbo_inference():
+    try:
+        from img2img_turbo import run_inference_paired
+    except ImportError as exc:
+        raise RuntimeError(
+            "The I2I-Turbo generation path requires img2img-turbo, which is not "
+            "installed by default because img2img-turbo 0.0.1 pins "
+            "transformers < 4.58 and conflicts with the security-patched "
+            "transformers 5.x dependency set."
+        ) from exc
+
+    return run_inference_paired
+
+
 # --------------------------------------------------------------------------- #
 # Surrogate model types
 # --------------------------------------------------------------------------- #
@@ -1371,6 +1384,7 @@ def _generate_single_image(
     try:
         gen_img_flag = True
         cost = 0.0  # Initialize cost for local models
+        run_inference_paired = _load_img2img_turbo_inference()
         run_inference_paired(
             model_name=model_name,
             input_image=input_image_path,