This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch
gh-readonly-queue/release/v1.3/pr-8655-d5e19430ef3e5927900aaa0f1d856584b215d8ee
in repository https://gitbox.apache.org/repos/asf/texera.git
commit 3efe10df5167cc336fc05c48d69433655356309c
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Sep 24 03:22:47 2026 +0000
fix(deps, pyamber, v1.3): update dependency transformers to v5.10.1 (#8655)
### What changes were proposed in this PR?
Automated backport of #8313 to `release/v1.3`.
Source: 1b25a0ab536f0ff5d7cee521488b3d356a1f3092 · [automation
run](https://github.com/apache/texera/actions/runs/35949747026)
### Any related issues, documentation, discussions?
Backport of #8313. Fixes CVE-2026-9856 (see #8313 for details).
### How was this PR tested?
The backported tree built green before #8313 merged. Release-branch CI
runs on this PR once it is reopened — see the comment below.
### Was this PR authored or co-authored using generative AI tooling?
No.
Co-authored-by: Mend Renovate <[email protected]>
Co-authored-by: Xinyuan Lin <[email protected]>
Co-authored-by: Meng Wang <[email protected]>
Co-authored-by: Xuan Gu <[email protected]>
---
amber/LICENSE-binary-python | 2 +-
amber/operator-requirements.txt | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python
index 2d3c3cb64b..c13ceb86d2 100644
--- a/amber/LICENSE-binary-python
+++ b/amber/LICENSE-binary-python
@@ -233,7 +233,7 @@ Python packages:
- safetensors==0.8.0
- tenacity==9.1.4
- tokenizers==0.22.2
- - transformers==5.5.0
+ - transformers==5.10.1
- tzdata==2026.3
- websocket-client==1.9.0
- yarl==1.24.5
diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt
index d78fe77fe8..c0a8f37f17 100644
--- a/amber/operator-requirements.txt
+++ b/amber/operator-requirements.txt
@@ -26,7 +26,7 @@ torch==2.13.0+cpu ; platform_system == "Linux" and
platform_machine == "x86_64"
torch==2.13.0 ; platform_system != "Linux" or platform_machine != "x86_64"
scikit-learn==1.7.2
-transformers==5.5.0
+transformers==5.10.1
# Not imported by any operator template: plotly's create_ternary_contour
# (ternary contour operator, #4193) requires scikit-image at runtime.
scikit-image==0.25.2
