[dolfim-ibm]

Widens upper bounds in pyproject.toml that block the latest releases.

Runtime extras

Dependency	Extra	Before	After	Locked
websockets	service-client	<17.0	<18.0	17.3 (16.1.1 on Python 3.10)
typer	service-client, cli	<0.27.0	<0.28.0	0.26.8 (docling-core still caps <0.27.0)
huggingface_hub	models-local	<2	<3	1.33.0 (docling-ibm-models still caps <2)
librosa	format-video	<1.0.0	<2.0.0	1.0.0 on Python ≥3.12

The websockets cap is the one that holds docling-serve at websockets 16.

Dev and docs groups

Dependency	Before	After	Locked
types-setuptools	~=70.3	>=70.3	84.0.0.20261006
pandas-stubs	~=2.1	>=2.1,<4	3.0.5 (2.3.3 on Python 3.10)
pytest	~=9.0.3	>=9.0.3,<10	9.1.1
pytest-durations	~=1.6.1	~=1.6	1.10.0
ipykernel	~=6.29	>=6.29,<8	7.4.0
mkdocstrings[python]	~=0.27	>=0.27,<2	1.0.8
pymdown-extensions	~=10.0	>=10.0,<13	12.3
datasets	~=2.21	>=2.21,<6	5.1.0
ruff	==0.15.12 (hook v0.16.10)	==0.17.2 (hook v0.17.2)	0.17.2
dprint-py	==0.53.1.0	==0.64.3.0	0.64.3.0

Follow-up changes:

• ruff 0.17 formats Python code blocks in Markdown. The four skill references in docling/.agents/skills/docling/references/ are reformatted. These are formatting changes only.
• dprint 0.64 resolves includes and excludes relative to the config file. .github/dprint.json now uses paths relative to .github/.

Not changed

• ty==0.0.33: 0.0.92 reports about 1500 new diagnostics. This needs a separate PR.
• python-semantic-release~=7.32: version 8 and later need a new release config and CLI. This needs a separate PR.
• onnxruntime<1.24 and pandas<3.0.0 for Python < 3.11: newer releases do not support Python 3.10.

Verification

• make validate, ruff (lint and format), ty, tach and dprint pass.
• make docs-build passes with mkdocstrings 1.0 and pymdown-extensions 12.
• pytest -n 8: 4068 passed, 7 failed. Six of the failures also occur on main in the same local environment (tesseract language data is missing, and ocrmac is picked on macOS). The seventh (test_options.py::test_parser_backends) was a crashed xdist worker; it passes when run alone.

[github-actions]

✅ DCO Check Passed

Thanks @dolfim-ibm, all your commits are properly signed off. 🎉

[mergify]

Merge Protections

🟢 Merge protection satisfied — ready to merge.

Show 1 satisfied protection

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?(!)?:

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

AI triage (advisory)

Checked commit 41bbb95f14. The analysis read the diff only. It did not run code from this pull request.

Warning

The AI analysis did not finish. Only the deterministic checks are shown.

Topic labels added: bug.

CI safety: needs maintainer care before you approve CI.

• .github/dprint.json: changes CI workflows, actions, or CI scripts
• .pre-commit-config.yaml: changes hooks that CI runs
• pyproject.toml: changes build, dependency, or tool configuration
• uv.lock: changes locked dependencies

Possibly related pull requests

PR	State	Signal	Assessment
#4654	open	changes the same code	not assessed

_{The ai:* labels are advisory. They do not approve CI and they do not add tests:full. A new push runs this check again.}

[github-actions]

AI first review (advisory): no blocker found

This review covers the full diff at 41bbb95f14. It read the code and did not run it.

I checked the widened dependency ranges in pyproject.toml, the tool configuration updates in .github/dprint.json and .pre-commit-config.yaml, and the reformatted code blocks in the reference documents. The dependency constraints and tool configurations are consistent and introduce no defects.

_{A maintainer makes the merge decision. This review never approves the pull request.}