chore(deps): bump the all group with 3 updates

[dependabot]

Bumps the all group with 3 updates: httpx2, pre-commit and gcsfs.

Updates httpx2 from 2.9.1 to 2.10.0

Release notes

Sourced from httpx2's releases.

v2.10.0

Highlights

🚀 Performance and memory improvements

• Sending large HTTP/2 request bodies no longer copies the body quadratically - sending a 256 MiB body went from ~36s to under 0.1s (pydantic/httpx2#1127).
• SSE parsing is up to 35x faster on highly fragmented streams (pydantic/httpx2#1117).
• Cookie extraction is now skipped for responses without a Set-Cookie header, making typical requests roughly 8% faster (pydantic/httpx2#1107).

🕸️ WebAssembly / Emscripten support

httpx2 now runs on Pyodide / Emscripten, using a JavaScript fetch-based transport defined in httpx2-jsfetch (pydantic/httpx2#1119, pydantic/httpx2#1114). Thanks @​hoodmane!

httpx2

Added

• Add support for running on WebAssembly / Emscripten via Pyodide by @​hoodmane in pydantic/httpx2#1119
• Add max_event_size to cap SSE event buffering by @​Kludex in pydantic/httpx2#1071
• Add RFC 9110 status code constants by @​mbeijen in pydantic/httpx2#1069
• Add support for Python 3.15 by @​hugovk in pydantic/httpx2#1090

Changed

• Improve SSE chunk buffering performance by @​Kludex in pydantic/httpx2#1117
• Skip cookie extraction without Set-Cookie by @​Kludex in pydantic/httpx2#1107
• Return str | None instead of Any from Headers.get by @​ItsDrike in pydantic/httpx2#1121

Fixed

• Enforce WebSocket max message size across fragments by @​Kludex in pydantic/httpx2#1085
• Ignore unsolicited and duplicate Pong frames by @​Kludex in pydantic/httpx2#1122

httpcore2

Added

• Add support for Python 3.15 by @​hugovk in pydantic/httpx2#1090

Changed

• Avoid quadratic copying when sending large HTTP/2 request bodies by @​Kludex in pydantic/httpx2#1127

Fixed

• Propagate the original exception instead of raising KeyError when an HTTP/2 stream fails by @​yhay81 in pydantic/httpx2#1093
• Start TLS for the wss scheme in SOCKS5 proxy connections by @​Kludex in pydantic/httpx2#1104

🙏 New Contributors

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.10.0 (August 9th, 2026)

Added

• Add support for running on WebAssembly / Emscripten via Pyodide, using a JavaScript fetch-based transport defined in httpx2-jsfetch. (#1119)
• Add max_event_size to cap SSE event buffering. (#1071)
• Add RFC 9110 status code constants. (#1069)
• Add support for Python 3.15. (#1090)

Changed

• Improve SSE chunk buffering performance. (#1117)
• Skip cookie extraction for responses without Set-Cookie headers. (#1107)
• Return str | None instead of Any from Headers.get. (#1121)

Fixed

• Enforce the WebSocket max message size across fragmented messages. (#1085)
• Ignore unsolicited and duplicate WebSocket Pong frames. (#1122)

Commits

• a966320 Version 2.10.0 (#1129)
• dee1d1a Return str | None instead of Any from Headers.get (#1121)
• dec24ad Use httpx2-jsfetch on Emscripten (#1119)
• 454b8b2 Ignore unsolicited and duplicate Pong frames (#1122)
• cbfc0e0 Improve SSE chunk buffering performance (#1117)
• ad141d8 Refactor SSE parser coordination (#1118)
• e0b0124 Make _client depend on the _transports package instead of its submodules ...
• e52f963 Skip dependencies not needed on Emscripten (#1114)
• 5d9eedc Add max_event_size to cap SSE event buffering (#1071)
• 55fad71 Bump the python-packages group across 1 directory with 15 updates (#1112)
• Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Commits

• 9767b6c v4.6.2
• 42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
• 3056619 fix language: node for hooks with build scripts and npm 11.x
• See full diff in compare view

Updates gcsfs from 2026.7.0 to 2026.8.0

Release notes

Sourced from gcsfs's releases.

2026.8.0

What's Changed

Adaptive Concurrent Prefetching is now the default read path

Enhanced read path via adaptive concurrent prefetching is now the default in GCSFS. Starting with this version, GCSFS predicts the next byte range an application will read, fetches it in the background across several concurrent HTTP requests, and keeps the bytes in memory before next read() is called. Network round-trips overlap with application compute instead of blocking calls where compute has to wait for data to be fetched. We are also enabling read concurrency, so a single reader is no longer limited by the bandwidth of a single HTTP connection.

GCSFS prefetcher adapts to workload read IO patterns. It tracks the rolling average of recent read sizes and scales the prefetch window linearly with the detected sequential streak, rather than using a fixed block size or exponential doubling. This is inline to what modern Linux kernels will do to balance prefetch and memory footprint. When the pattern turns random read i.e. we are not able to leverage the prefetched buffer to answer the next read() call, it drains the buffer to zero, so that random-access workloads pay no bandwidth or memory penalty.

Why this matters for AI/ML workloads

• Model loading and checkpoint restore are typically large sequential reads - and prefetcher shines there. In our benchmarking, a single-stream sequential throughput improved from 23.69 MB/s to 658.71 MB/s for 1 MB I/O, and from 156 MB/s to 736 MB/s for 16 MB I/O.
• Training data pipelines stay fed. Parquet and sharded dataset reads issue small-to-medium sequential ranges that previously suffered from low throughput, but now achieve significantly more; at 16 MB I/O throughput rises from 150 MB/s to 730 MB/s. Reducing the wait time for data loading improves accelerator goodput(amount of time accelerator is utilised for training than waiting).
• Multi-worker dataloader scaling. The prefetcher manufactures its own parallelism per worker instead of relying on process count alone.
• Accelerate the throughput even further with Rapid Buckets. With Rapid Buckets single node throughput reaches 21 GiB/s with 16-process sequentially reading at 16 MiB I/O compared to standard buckets with 48processes.

Adaptive prefetcher is enabled by default when cache_type is not explicitly set and concurrency value is set at 4(DEFAULT_GCSFS_CONCURRENCY=4) for both Standard and Rapid buckets. You can disable adaptive prefetcher by setting an explicit cache_type, or by setting USE_EXPERIMENTAL_ADAPTIVE_PREFETCHING='false', or by passing use_experimental_adaptive_prefetching=False to open() call.

(Warning) Impact on memory: Prefetching trades memory for throughput. Peak memory rises from ~170 MB to 600 MB on single-stream reads for 16 MB IO size and varies with requested IO sizes, and would be materially more under high process counts. Please ensure that application memory limits accordingly to use prefetcher without any Out of Memory(OOM) issues. To put hard limit, you can also use user_max_prefetch_size

For details on architecture, tuning, full benchmark tables, along with known limitations please refer to : https://github.com/fsspec/gcsfs/blob/main/docs/source/prefetcher.rst

(#795, #805, #818, #877)

Bug Fixes & Improvements

• Zero-cost local backward seeks in PrefetchConsumer - Parquet footer and ZIP directory reads are served from the existing buffer instead of re-issuing a network request. (#930)
• Concurrent downloads cap task count against a minimum chunk size, removing per-task overhead on small ranges. (#926)
• Generation consistency across parallel fetches, guaranteeing every chunk comes from the same object version. (#921)
• Fixed silent truncation on short reads in zonal bucket downloads. (#920)
• Zero-copy read and write paths via memoryview, cutting CPU and transient memory in the hot path. (#840, #907, #928)
• Graceful fallback where ctypes.pythonapi is unavailable. (#938)

New Contributors

• @​ccbcqbz made their first contribution in fsspec/gcsfs#960
• @​raj-prince made their first contribution in fsspec/gcsfs#989

Full Changelog: fsspec/gcsfs@2026.7.0...2026.8.0

Commits

• ea2a1ff chore: release 2026.8.0 (#995)
• 158badb feat(subsystembenchmarks): add webdataset image dataloading read benchmark (#...
• 2089c10 feat(subsystembenchmarks): generalize dataloading seam for multiple loaders (...
• c99137d subsystembenchmarks: support model id substitution in checkpointing save (#1003)
• 9d38875 Track whether cache_type is explicitly set or defaulting in User-Agent header...
• 8accb61 fix(benchmarks): force reinstall requirement overrides and wait for JobSet we...
• 807e628 feat(subsystembenchmarks): add PyTorch Lightning checkpointing save benchmark...
• 38aaf37 fix(macrobenchmarks): enable autoupgrade on GKE clusters and node pools (#999)
• afcaa35 Update benchmarks to remove custom env for prefetcher (#996)
• 8880f63 Makes prefetcher none cache default (#992)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions