[dependabot]

Bumps transformers from 4.56.2 to 5.10.1.

Release notes

Sourced from transformers's releases.

Release v5.10.1

v5.10.0 was yanked as we publish on a corrupted branch. Sorry everyone, this happens when we rush a release!!!

New Model additions

Gemma4 unified+ Gemma4 MTP

Gemma 4 12B Unified is an encoder-free multimodal model with pretrained and instruction-tuned variants. Unlike standard Gemma 4, which uses dedicated encoder towers, Gemma 4 12B Unified projects raw inputs directly into the language model's embedding space through lightweight linear pipelines. This results in a simpler architecture while maintaining strong multimodal performance.

Key differences from standard Gemma 4:

• No Vision Tower: Raw pixel patches are projected directly into LM space via a Dense + LayerNorm pipeline with factorized 2D positional embeddings, replacing the vision encoder.
• No Audio Tower: Raw 16 kHz waveform samples are chunked into fixed-length frames and projected through a simple RMSNorm → Linear pipeline, replacing the mel spectrogram + Conformer encoder.
• Shared Multimodal Pipeline: Both vision and audio use the same Gemma4UnifiedMultimodalEmbedder (RMSNorm → Linear) for the final projection to text hidden space.

You can find the original Gemma 4 12B Unified checkpoints under the Gemma 4 release.

• who needs encoders? (#46385) by @​douglas-reid @​sgerrard @​vasqu @​molbap

Sapiens2

Sapiens2 is a family of high-resolution vision transformers pretrained on ~1 billion curated human images, designed for human-centric computer vision tasks including pose estimation, body-part segmentation, surface normal estimation, and pointmap estimation. The models scale from 0.4B to 5B parameters and train at native 1K resolution, with hierarchical 4K variants for extended spatial reasoning. Sapiens2 achieves substantial improvements over its predecessor with +4 mAP in pose estimation, +24.3 mIoU in body-part segmentation, and 45.6% error reduction in normal estimation.

Links: Documentation | Paper

• Add Sapiens2 Model (#45919) by @​guarin in #45919

DeepSeek-OCR-2

DeepSeek-OCR-2 is an OCR-specialized vision-language model built on a distinctive architecture that combines a SAM ViT-B vision encoder with a Qwen2 hybrid attention encoder, connected through an MLP projector to a DeepSeek-V2 Mixture-of-Experts (MoE) language model. The model features a hybrid attention mechanism that applies bidirectional attention over image tokens and causal attention over query tokens, enabling efficient and accurate document understanding. It supports both plain OCR tasks and grounding capabilities with coordinate-aware output for document conversion to markdown format.

Links: Documentation

• Add Deepseek-OCR-2 model (#45075) by @​thisisiron in #45075

Mellum

Mellum is a code-focused Mixture-of-Experts language model developed by JetBrains. It is derived from the Qwen3-MoE architecture with per-layer-type RoPE and interleaved sliding window attention. The model has 12B total parameters with 2.5B active parameters per token, using 64 routed experts with 8 activated per token across 28 layers.

Links: Documentation

• feat: Add support for JetBrains' Mellum v2 code generation model (#46112) by @​shadeMe in #46112

Breaking changes

The Gemma4 vision pooler now casts inputs to float32 before scaling to prevent float16 overflow (inf saturation) with large checkpoints, which may cause minor numerical differences in outputs for users running Gemma-4 vision models in float16.

• 🚨 Fix float16 overflow in Gemma4 vision pooler (#46277) by @​Bluear7878

Audio Language Models (ALMs) now have a dedicated base model class without a language modeling head, aligning them with the design of Vision Language Models (VLMs); users relying on the previous model class structure should update their code to use the new base model class where appropriate.

• 🚨 [ALM] Add base model without head (#45534) by @​eustlb

... (truncated)

Commits

• 90c3ae5 Patch because we had to yank 5.10 because the release branch was not up to date
• 0bd94b3 v5.10.0
• 1423d22 who needs encoders? (#46385)
• 50eb20a Fix dsv4 dequant + tp/ep (#46378)
• 74464e8 Fix wrong changes produced by style/repo. check bot (#46371)
• 1b8ec34 Fix path traversal when saving Bark voice preset embeddings (#46237)
• e820678 Add Sapiens2 Model (#45919)
• 595721c Pass library_name/version to Hub calls via a shared HfApi (#46318)
• 0f0036c docs: update ACL Anthology URL in CITATION.cff (#46352)
• fa6c830 DeepGEMM BF16 + mixed FP8/FP4 + MegaMoE + refactor (#45634)
• Additional commits viewable in compare view

[broly-code-security-scanner]

Broly Security Scan

Warning

Latest baseline snapshot is stale. Broly is running in PR-only fallback mode until the next scheduled baseline refreshes. This does not block the PR.

Warning

Summary

13 actionable finding(s) in this PR

• 🔴 2 critical
• 🟠 5 high
• 🟡 6 medium

Main table: 12 shown, 1 omitted of 13 actionable finding(s) above the reporting threshold. See the repository Security tab for the full set.

Severity	Scanner	Issue	Location	Dismiss	Verdict
🔴 CRITICAL	SCA	black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120)	poetry.lock:1	d14	🔺 TRUE_POSITIVE · Confidence: HIGH
🔴 CRITICAL	SCA	pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782)	poetry.lock:1	d15	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	urllib3@2.4.0 — 16 vulnerabilities (worst: GHSA-2xpw-w6gg-jr37)	poetry.lock:1	d12	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	fsspec@2025.3.0 — 2 vulnerabilities (worst: GHSA-27vj-qcqg-25rc) → fixed in 2026.6.0	poetry.lock:1	d5	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	aiohttp@3.12.15 — 72 vulnerabilities (worst: GHSA-2g87-pp6c-29x5)	poetry.lock:1	d16	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	virtualenv@20.34.0 — 14 vulnerabilities (worst: GHSA-5vjq-rrrf-7h2q)	poetry.lock:1	d21	🔺 TRUE_POSITIVE · Confidence: HIGH
🟠 HIGH	SCA	pyarrow@21.0.0 — 2 vulnerabilities (worst: GHSA-rgxp-2hwp-jwgg) → fixed in 23.0.1	poetry.lock:1	d8	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	datasets@4.1.1 — 2 vulnerabilities (worst: GHSA-379c-qx7v-6h59) → fixed in 5.0.1	poetry.lock:1	d3	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	idna@3.10 — 2 vulnerabilities (worst: GHSA-65pc-fj4g-8rjx) → fixed in 3.15	poetry.lock:1	d6	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g) → fixed in 9.0.3	poetry.lock:1	d10	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	filelock@3.19.1 — 4 vulnerabilities (worst: GHSA-w853-jp5j-5j7f)	poetry.lock:1	d18	🔺 TRUE_POSITIVE · Confidence: HIGH
🟡 MEDIUM	SCA	requests@2.32.5 — 2 vulnerabilities (worst: PYSEC-2026-2275) → fixed in 2.33.0	poetry.lock:1	d20	🔺 TRUE_POSITIVE · Confidence: HIGH

---

Fix Suggestions

black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120) — poetry.lock:1

Pin black to a patched version once available (e.g., poetry add black@latest --group dev) or, as a workaround, remove/upgrade black and run the formatter only in an isolated, untrusted-input-free CI environment; monitor PYSEC-2026-2120, PYSEC-2026-2121, and GHSA-3936-cmfr-pm3m for fixed releases.

pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782) — poetry.lock:1

Upgrade to the latest available Pillow release (e.g., poetry add pillow@latest or poetry update pillow) and monitor for patched releases addressing GHSA-8g5g-8vmr-9782; as an interim workaround, restrict or sandbox processing of untrusted image inputs.

urllib3@2.4.0 — 16 vulnerabilities (worst: GHSA-2xpw-w6gg-jr37) — poetry.lock:1

Upgrade urllib3 to the latest available release (e.g., poetry add urllib3@latest or poetry update urllib3 to a version >= 2.5.0) and verify each of the 16 advisories individually against the release notes; if no fixed release yet covers all advisories, apply vendor-recommended workarounds (e.g., disabling affected features such as insecure redirects/certificate verification paths) and monitor for a patched release.

---

Dismiss false positives

Tick a box to dismiss the finding; untick it to bring the finding back. That is the same as replying /broly dismiss d1 and /broly undismiss d1. To record why it is a false positive, reply with /broly dismiss d1: your reason instead — Broly reuses those reasons to triage similar findings across the org.

• d14 · 🔴 CRITICAL · poetry.lock:1 · black@25.9.0 — 3 vulnerabilities (worst: PYSEC-2026-2120)
• d15 · 🔴 CRITICAL · poetry.lock:1 · pillow@11.3.0 — 45 vulnerabilities (worst: GHSA-8g5g-8vmr-9782)
• d16 · 🟠 HIGH     · poetry.lock:1 · aiohttp@3.12.15 — 72 vulnerabilities (worst: GHSA-2g87-pp6c-29x5)
• d5 · 🟠 HIGH     · poetry.lock:1 · fsspec@2025.3.0 — 2 vulnerabilities (worst: GHSA-27vj-qcqg-25rc)
• d8 · 🟠 HIGH     · poetry.lock:1 · pyarrow@21.0.0 — 2 vulnerabilities (worst: GHSA-rgxp-2hwp-jwgg)
• d12 · 🟠 HIGH     · poetry.lock:1 · urllib3@2.4.0 — 16 vulnerabilities (worst: GHSA-2xpw-w6gg-jr37)
• d21 · 🟠 HIGH     · poetry.lock:1 · virtualenv@20.34.0 — 14 vulnerabilities (worst: GHSA-5vjq-rrrf-7h2q)
• d3 · 🟡 MEDIUM   · poetry.lock:1 · datasets@4.1.1 — 2 vulnerabilities (worst: GHSA-379c-qx7v-6h59)
• d18 · 🟡 MEDIUM   · poetry.lock:1 · filelock@3.19.1 — 4 vulnerabilities (worst: GHSA-w853-jp5j-5j7f)
• d6 · 🟡 MEDIUM   · poetry.lock:1 · idna@3.10 — 2 vulnerabilities (worst: GHSA-65pc-fj4g-8rjx)
• d19 · 🟡 MEDIUM   · poetry.lock:1 · pygments@2.19.1 — 2 vulnerabilities (worst: PYSEC-2026-2987)
• d10 · 🟡 MEDIUM   · poetry.lock:1 · pytest@8.4.2 — 2 vulnerabilities (worst: GHSA-6w46-j5rx-g56g)
• d20 · 🟡 MEDIUM   · poetry.lock:1 · requests@2.32.5 — 2 vulnerabilities (worst: PYSEC-2026-2275)

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (GLM-5.3-Flash) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Attack Hypotheses · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.

 

[dependabot]

Looks like transformers is up-to-date now, so this is no longer needed.