chore(deps)(deps): bump the production-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates in the / directory: openpyxl, xlrd, drf-yasg and sentencepiece.

Updates openpyxl from 3.1.2 to 3.1.5

Updates xlrd from 2.0.1 to 2.0.2

Updates drf-yasg from 1.21.7 to 1.21.17

Release notes

Sourced from drf-yasg's releases.

1.21.17

No release notes provided.

1.21.16

FIXED: Emit spec-valid OpenAPI formats for DecimalField (#974) IMPROVED: Update ReDoc to version 2.5.2 (#973) ADDED: Add support for documenting response headers (#970) REMOVED: Drop Python 3.9 support (#957)

1.21.15

IMPROVED: Use Python's native dict instead of OrderedDict (#954) FIXED: Fix Python 3.12 type parameter syntax with from __future__ import annotations (#921)

1.21.14

FIXED: Fix missing swagger-ui sourcemaps (#950)

1.21.12

FIXED: Bring the bundled swagger ui up to date (#944) IMPROVED: Update the logout button to use a POST request. (#945) ADDED: Add a live demo domain (#946) ADDED: Handle annotations that are not available at runtime (#941)

1.21.11

FIXED: Fix list views with parameters in last path segment not named "list" views (#917) ADDED: Allow overriding produces/consumes with @​swagger_auto_schema decorator (#916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (#926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (#922) IMPROVED: Remove usage of pkg_resources (#928) FIXED: Fix call_view_method warning to include the method name again (#923) ADDED: Add a hide download button option (#848) ADDED: Add ruff linters (#903)

1.21.10

FIXED: Fix type hints when using postponed evaluation of annotations (PEP-563) (#840) IMPROVED: Update JSON & YAML renderers to not use a "." in their format string (#911) FIXED: Fix lint errors when comparing types with == instead of is (#868) IMPROVED: Update swagger-ui-dist to address CVE-2021-46708 (#904)

1.21.9

ADDED: Added support for zoneinfo object fields (#908)

1.21.8

ADDED: Python 3.11 and 3.12 support (#891) FIXED: Fix pkg_resources version lookups for Python 3.9+ (#891)

Changelog

Sourced from drf-yasg's changelog.

######### Changelog #########

---

1.21.18

---

FIXED: Fix redoc.min.map's sourcemap and the redoc download script (:pr:981)

---

1.21.17

---

---

1.21.16

---

FIXED: Emit spec-valid OpenAPI formats for DecimalField (:pr:974) IMPROVED: Update ReDoc to version 2.5.2 (:pr:973) ADDED: Add support for documenting response headers (:pr:970) REMOVED: Drop Python 3.9 support (:pr:957)

---

1.21.15

---

IMPROVED: Use Python's native dict instead of OrderedDict (:pr:954) FIXED: Fix Python 3.12 type parameter syntax with from __future__ import annotations (:pr:921)

---

1.21.14

---

---

1.21.13

---

FIXED: Fix missing swagger-ui sourcemaps (:pr:950)

---

1.21.12

---

FIXED: Bring the bundled swagger ui up to date (:pr:944) IMPROVED: Update the logout button to use a POST request. (:pr:945) ADDED: Add a live demo domain (:pr:946) ADDED: Handle annotations that are not available at runtime (:pr:941)

---

... (truncated)

Commits

• ef78df6 Add version 1.21.17 details to the changelog (#979)
• b8fbf27 Update the publish workflow to use uv (#978)
• de33ff2 Add version 1.21.16 details to the changelog (#977)
• 9f3d275 Update update-ui to exclude logs and add generated licenses (#976)
• f1b78f7 Bump fast-xml-parser version (#975)
• a10bbdc Bump actions/setup-python in the github-actions group across 1 directory (#966)
• 45267d3 Emit spec-valid OpenAPI format for DecimalField (#974)
• 11e4b76 chore(deps): bump redoc to 2.5.2 (#973)
• f16cbad Give terraform backend a canonical name (#971)
• 26f28e0 Add support for documenting response headers (#970)
• Additional commits viewable in compare view

Updates sentencepiece from 0.2.1 to 0.2.2

Release notes

Sourced from sentencepiece's releases.

v0.2.2

Release Notes v0.2.2

This release contains major updates, including the migration of the Python wrapper to pybind11, native NumPy support, enhanced offset mapping, performance optimizations, security hardening, and internal code modernization.

1. Python Wrapper (pybind11 Migration & Features)

• SWIG to pybind11 Migration: Fully migrated the Python wrapper from SWIG to pybind11, enabling better performance, safer memory management, and cleaner code integration (#1266, Commit 528dc9e).
• Native NumPy Support:
  • direct encode/decoder from/to numpy object
• Enhanced Offset Mapping:
  • Added new offset mapping features supporting both Unicode character offsets and raw byte offsets.
  • Added bounds checking to prevent OOB reads in offset mapping (Commit c5b0ce0).
  • Fixed crash issues and OOB spans in alignment conversions (#1231, #1211).
• Type Stubs (PEP 561): Added inline type stubs (.pyi files) and packaged PEP 561 marker to provide auto-completion and static type safety in IDEs (#1258, Commit 8b7f97b).
• Parallel Encoding API: Introduced parallel_encode and ThreadPool APIs, allowing Python users to tokenize single large documents across multiple CPU cores in parallel (#1254, Commit 3c37c39).
• Direct Proto Loading: Added support for loading processors and normalizers directly from in-memory Proto instances (Commit 12788ba).
• Concurrency Enhancements: Added GIL release during C++ execution to improve multi-threaded Python performance (#1251, Commit 0a044ae).
• BOS/EOS Behavior Hardening: Aligned BOS/EOS adding behavior with C++ constraints, raising explicit ValueError instead of silent failures or crashes (Commit 780618a).

2. Performance Optimizations

• BPE Training Optimization: Ported O(log n) lazy priority queue update optimization to BPE trainer to speed up training (Commit 8db9878).
• Encode/Decode Optimizations: Decoding/Encoding optimization for integer/string input case by skipping SentencePieceText conversion, resulting in ~2x speedup (Commit 4b9231b).
• Unigram Pruning: Improved unigram pruning using token-normalized frequency calculations (#1135, Commit 1cd0c59).

3. Security & Hardening

• Trie Validation at Load: Added verification of darts-clone trie offsets when loading models to prevent segfaults on corrupted or malicious model files (#1224, Commit 6b2f05d).
• Bounds Checking in Maps: Added bounds checks to piece accessors and validated value offsets in DecompileCharsMap (#1265, Commit 82b7c6d).
• Crash Prevention: Replaced internal CHECK macros with DCHECK or returned errors to prevent host application crashes on invalid inputs (Commit 66b2587).
• Null Character Disallowment: Explicitly disallow vocabulary pieces containing null characters (Commit eb3ba49).
• NBest Timeout: Implemented a global timeout for NBest A* search to prevent hangs on pathological inputs (Commit ba57749).

4. C++ API & Internals Modernization

• Abseil Migration: Extensively migrated from custom utilities to Abseil primitives (#1270
• Normalizer Maps: Supported loading normalizer from raw maps in C++ (#1273, Commit e476e5e).

5. Build & Packaging

• Deprecate Win32 Wheels: Stopped support and distribution of 32-bit Windows wheels (win32) (Commit 24fd00c).
• Modernized Python builds: Switched from calling setup.py directly to the standard pypa/build PEP 517 frontend (#1167, Commit f300c7d).
• PEP 639 License: Added PEP 639 license metadata to pyproject.toml (#1173).

6. Documentation

• API Cheat Sheet: Added comparison tables, zero-copy, and sampling comparison guides.
• Refactored Options: Fully reorganized options.md and special_symbols.md with verified code examples.

Commits

• e0cce7d Merge pull request #1279 from google/dependabot/github_actions/github-actions...
• a9e2b5e Bump the github-actions group with 2 updates
• 20ab5fb Fix Unigram float score overflow and NaN/Inf corruption
• 1f1483c Add use_reserved_id_map parameter and control token merge tests
• 69d8562 Add performance benchmark suite and reports
• 24fd00c Stop support for Win32 wheels
• 4b9231b Optimize Decode/Encode paths using absl::Span and add benchmarks
• b91b764 Merge pull request #1277 from google/new_doc
• e93413b Update documentation: Modernize README and merge CLI/Build guides
• 7ce7669 Merge pull request #1276 from kkew3/fix-dockerfile-20260620
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions