security: fix remaining Dependabot alerts (94 open)

MLService/extractor/requirements.txt

@@ -2,7 +2,7 @@ redis==5.0.8
 boto3==1.35.0
 qdrant-client==1.9.1
 requests==2.33.0
-Pillow==12.2.0
+Pillow==12.3.0
 ffmpeg-python==0.2.0
 urllib3==2.7.0
-idna==3.10
+idna==3.15

MLService/inference/embedder/app.py

@@ -56,11 +56,17 @@ def health():
     return {"status": "ok", "model": MODEL_NAME, "device": DEVICE}
 
 
+def _pooled(output):
+    # transformers>=5's get_text_features/get_image_features return the raw
+    # BaseModelOutputWithPooling instead of the pooled tensor directly.
+    return output.pooler_output if hasattr(output, "pooler_output") else output
+
+
 @app.post("/embed/text")
 def embed_text(req: TextRequest):
     inputs = processor(text=[req.text], return_tensors="pt", padding=True).to(DEVICE)
     with torch.no_grad():
-        features = model.get_text_features(**inputs)
+        features = _pooled(model.get_text_features(**inputs))
         features = features / features.norm(dim=-1, keepdim=True)
     return {"embedding": features[0].cpu().tolist(), "model": MODEL_NAME}
 
@@ -70,7 +76,7 @@ def embed_image(req: ImageRequest):
     image = decode_image(req.image)
     inputs = processor(images=[image], return_tensors="pt").to(DEVICE)
     with torch.no_grad():
-        features = model.get_image_features(**inputs)
+        features = _pooled(model.get_image_features(**inputs))
         features = features / features.norm(dim=-1, keepdim=True)
     return {"embedding": features[0].cpu().tolist(), "model": MODEL_NAME}
 
@@ -82,6 +88,6 @@ def embed_images(req: BatchImageRequest):
     images = [decode_image(b64) for b64 in req.images]
     inputs = processor(images=images, return_tensors="pt", padding=True).to(DEVICE)
     with torch.no_grad():
-        features = model.get_image_features(**inputs)
+        features = _pooled(model.get_image_features(**inputs))
         features = features / features.norm(dim=-1, keepdim=True)
     return {"embeddings": features.cpu().tolist(), "model": MODEL_NAME}

MLService/inference/embedder/requirements.txt

@@ -1,14 +1,14 @@
-fastapi==0.121.0
+fastapi==0.135.0
 uvicorn[standard]==0.32.1
-starlette==0.49.1
+starlette==1.3.1
 h11==0.16.0
-transformers==5.5.0
-torch==2.7.1
-Pillow==12.2.0
+transformers==5.3.0
+torch==2.9.1
+Pillow==12.3.0
 pydantic==2.9.2
 sentencepiece==0.2.1
 protobuf==6.33.5
 accelerate==1.0.1
-filelock==3.16.1
+filelock==3.20.3
 urllib3==2.7.0
 requests==2.33.0

MLService/requirements.txt

@@ -1,13 +1,14 @@
 falcon==3.1.3
 boto3==1.35.0
-torch==2.7.1
+torch==2.9.1
 numpy==1.26.4
-Pillow==12.2.0
-transformers==4.50.0
+Pillow==12.3.0
+transformers==5.5.0
 moviepy==1.0.3
-torchvision==0.22.1
+torchvision==0.24.1
 loralib==0.1.2
 openai==1.54.0
 accelerate==1.0.1
 urllib3==2.7.0
 requests==2.33.0
+idna==3.15

tests/requirements.txt

@@ -1,6 +1,6 @@
-pytest==8.4.2
+pytest==9.0.3
 httpx==0.27.2
-Pillow==12.2.0
+Pillow==12.3.0
 redis==5.0.8
 boto3==1.35.0
 qdrant-client==1.9.1

web/next-env.d.ts

@@ -1,5 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
+/// <reference path="./.next/types/routes.d.ts" />
 
 // NOTE: This file should not be edited
-// see https://nextjs.org/docs/app/building-your-application/configuring/typescript for more information.
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.