fix(deps): update patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
numpy (changelog)	>=2.2.0,<2.5 → >=2.4.6,<2.5
onnx-ir	>=0.2.0 → >=0.2.1
onnxruntime	>=1.23.2,<1.24 → >=1.28.0,<1.29
pillow (changelog)	>=11.0.0,<13.0 → >=11.3.0,<13.0
ruff (source, changelog)	>=0.16.1 → >=0.16.2
ty (changelog)	>=0.0.65 → >=0.0.69

---

Release Notes

onnx/ir-py (onnx-ir)

v0.2.1

Compare Source

What's Changed

API

• Optional MetadataStore deep copy when cloning by @​AyoubMDL in #​354

Core

• Add path traversal and symlink protection to ExternalTensor by @​Copilot in #​386
• Harden ExternalTensor: hardlink detection and security documentation by @​Copilot in #​388

Graph Passes

• Fix identity preservation for initializers by @​justinchuby in #​360
• Fix name collision bug in LiftSubgraphInitializersToMainGraphPass by @​srikris-sridhar in #​381
• Fix initializer-safe bulk renaming and NameFixPass initializer iteration by @​enpasos in #​369
• Fix ShapeInferencePass crash on initializers without const_value by @​Copilot in #​380

New Contributors

• @​srikris-sridhar made their first contribution in #​381
• @​enpasos made their first contribution in #​369
• @​AyoubMDL made their first contribution in #​354

Full Changelog: onnx/ir-py@v0.2.0...v0.2.1

---

Configuration

📅 Schedule: (in timezone Asia/Ho_Chi_Minh)

• Branch creation
  • "before 5am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package numpy --upgrade-package onnxruntime --upgrade-package pillow --upgrade-package ruff --upgrade-package ty
Using CPython 3.14.7 interpreter at: /opt/containerbase/tools/python/3.14.7/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.10.*'):
  ╰─▶ Because the requested Python version (>=3.10) does not satisfy
      Python>=3.11 and numpy==2.4.6 depends on Python>=3.11, we can conclude
      that numpy==2.4.6 cannot be used.
      And because only the following versions of numpy are available:
          numpy<=2.4.6
          numpy>=2.5
      we can conclude that numpy>=2.4.6,<2.5 cannot be used.
      And because your project depends on numpy>=2.4.6,<2.5 and your project
      requires fastretrieval[all], we can conclude that your project's
      requirements are unsatisfiable.

hint: While the active Python version is 3.14, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.
hint: The `requires-python` value (>=3.10) includes Python versions that are not supported by your dependencies (e.g., numpy==2.4.6 only supports >=3.11). Consider using a more restrictive `requires-python` value (like >=3.11).

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

fastretrieval/convert/requirements.txt

Package	Version	License	Issue Type
onnx-ir	>= 0.2.1	Null	Unknown License

pyproject.toml

Package	Version	License	Issue Type
numpy	>= 2.4.6,< 2.5	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
pip/onnx-ir	>= 0.2.1	Unknown	Unknown
pip/numpy	>= 2.4.6,< 2.5	Unknown	Unknown

Scanned Files

• fastretrieval/convert/requirements.txt
• pyproject.toml