chore(deps): bump the production-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
better-sqlite3	12.11.1	13.0.2
hyparquet	1.26.2	1.27.1
ignore	5.3.2	7.0.6
@huggingface/hub	2.13.2	2.14.4
@huggingface/inference	4.13.22	4.13.23

Updates better-sqlite3 from 12.11.1 to 13.0.2

Release notes

Sourced from better-sqlite3's releases.

v13.0.2

What's Changed

• add gypfile option to package.json by @​neoxpert in WiseLibs/better-sqlite3#1505
• Update SQLite to version 3.53.4 by @​JoshuaWise in WiseLibs/better-sqlite3#1506
• validate the parameters of table properly by @​theosotr in WiseLibs/better-sqlite3#1504
• fix: this dependabot configuration does not set a co... in... by @​anupamme in WiseLibs/better-sqlite3#1508
• fixed process aborting from terminating worker threads (WiseLibs/better-sqlite3#1507)

New Contributors

• @​theosotr made their first contribution in WiseLibs/better-sqlite3#1504
• @​anupamme made their first contribution in WiseLibs/better-sqlite3#1508

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

v13.0.1

Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1

Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).

v13.0.0

Version 13.0.0 marks a major milestone, as it's the first version of better-sqlite3 to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecated prebuild-install dependency, and now prebuilt binaries are published directly with the better-sqlite3 code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.

What's Changed

• Refactored codebase to use node-addon-api by @​JoshuaWise in WiseLibs/better-sqlite3#1498
• Added a new db.explain() method, for running EXPLAIN queries without needing to supply bound parameters.
• Added a new preparedStatement.toString() method, for getting the expanded SQL of a prepared statement.
• Fix SqliteError cross-realm and Error.isError compatibility by @​dennismutuku2005 in WiseLibs/better-sqlite3#1473

New Contributors

• @​dennismutuku2005 made their first contribution in WiseLibs/better-sqlite3#1473

Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0

v12.12.0

What's Changed

[!WARNING]

BREAKING: Starting with Electron v43, binary assets will require glibc 2.41 or higher on Linux hosts.

• Update SQLite to version 3.53.3 by @​JoshuaWise in WiseLibs/better-sqlite3#1492
• Utilize node:20-trixie for Electron v43 and onwards by @​neoxpert in WiseLibs/better-sqlite3#1495

Full Changelog: WiseLibs/better-sqlite3@v12.11.2...v12.12.0

v12.11.2

What's Changed

• Add support for electron v43 prebuilds by @​m4heshd in WiseLibs/better-sqlite3#1490

... (truncated)

Commits

• 569e85a 13.0.2
• df1324b fix: this dependabot configuration does not set a co... in... (#1508)
• b9fbe5f fixed segfault from making calls while worker thread is terminating
• 71707c4 validate the parameters of table properly (#1504)
• 6478c99 Update SQLite to version 3.53.4 (#1506)
• 6d24034 add gypfile option to package.json (#1505)
• ab6232e fixed typo in docs
• 57d751c updated readme
• 6efdbc5 13.0.1
• 32ee0ab Merge remote-tracking branch 'origin/master'
• Additional commits viewable in compare view

Updates hyparquet from 1.26.2 to 1.27.1

Changelog

Sourced from hyparquet's changelog.

[1.27.1]

• Coalesce page index fetches into fewer byte range requests

[1.27.0]

• Add usePageIndex option for page-level filter pushdown (#169)
• Fix filtering on null and NaN row-group matches
• Fix nested child column alignment by absolute row offsets
• Compare date statistics by timestamp
• Fix metadata decode of unsigned and decimal bounds
• Fix node file slices (should be end-exclusive)

Commits

• 19dc91c Publish v1.27.1
• fcd1f76 Coalesce page index fetches
• c5e3e29 Publish v1.27.0
• 33d0934 Add usePageIndex pushdown (#169)
• a784543 fix filtering on null and NaN row-group matches
• 84f0743 align nested child columns by absolute row offsets
• 965e88d compare dates by timestamp
• c541ecc metadata should decode unsigned and decimal bounds
• 60231a4 Update dependencies
• 93c0425 fix node file slices (should be end-exclusive)
• See full diff in compare view

Updates ignore from 5.3.2 to 7.0.6

Release notes

Sourced from ignore's releases.

7.0.4

• PATCH Allows files named .{3,}, such as ... for Linux / macOS (#68)

ig.ignores('...')
ig.ignores('....')
// It will throw a RangeError in versions prior to 7.0.4, but it is ok if >= 7.0.4

An upgrade is recommended for all dependents

7.0.0

Minor feature

The primary feature introduced by 7.0.0 is the .checkIgnore() method, which is most equivalent to git check-ignore -v. And also it allows to pass {pattern, mark?} as the parameter of .add() so that we could imitate the mechanism of git check-ignore as:

ig.add({
  pattern: 'foo/*',
  mark: '60'
})
const {
ignored,
rule
} = checkIgnore('foo/')
if (ignored) {
console.log(.gitignore:${result}:${rule.mark}:${rule.pattern} foo/)
}
// .gitignore:60:foo/* foo/

Potential Incompatibilities

The only situation that 7.0.0 might bring incompatibility is to .add() a < 7.0.0 instance into a >= 7.0.0 instance, which might occur when the current workspace has multiple node-ignore versions installed, please be careful.

const {anotherIgnoreInstance} = require('./ignore-6.0-instance')
// A 7.0.0 instance
ignore().add(anotherIgnoreInstance)
// It will break your code

Otherwise, in most cases, if you never do something above or there is only one version of node-ignore installed in the current workspace, it is quite safe to upgrade to 7.0.0.

6.x (== 5.3.2)

... (truncated)

Commits

• 3823b5f 7.0.6
• f7520e2 test: adds tests for #153
• 424a2bb Merge pull request #161 from spokodev/fix/consecutive-leading-globstar
• e5cbe4a fix: consecutive leading **/ should match like a single **/
• ac68603 Merge pull request #159 from spokodev/fix/negated-character-class
• 5ba6b40 fix: negated character class [!...] should match like git
• 84d052d 7.0.5: fixes #152
• 1c6d762 #152: test: try to fix coverage
• a384835 #152: remove process.env access from the package
• 6c57760 README.md: typo
• Additional commits viewable in compare view

Updates @huggingface/hub from 2.13.2 to 2.14.4

Commits

• 3b9396c 🔖 @​huggingface/hub 2.14.4
• 9813555 add nobg code snippet (#2324)
• c874132 Make the sub-byte packing factor faithful to the reference compressors (#2329)
• 1f1c862 Make the sub-byte dtype tests exercise the real counter (#2330)
• 14fd672 [hub] Fix stale abort listener terminating pooled sha256 workers (#2325)
• e7af79e 🔖 @​huggingface/tasks 0.21.30
• cba870d Add mflux library to model-libraries.ts (closes #2091) (#2196)
• a8abda1 🔖 @​huggingface/hub 2.14.3
• e2765e2 Stop counting mxfp4, bitsandbytes and actorder bookkeeping tensors as paramet...
• 6b301f0 🔖 @​huggingface/tasks 0.21.29
• Additional commits viewable in compare view

Updates @huggingface/inference from 4.13.22 to 4.13.23

Commits

• 157aff0 🔖 @​huggingface/inference 4.13.23
• 2506e93 Add huggingface.js text-to-audio snippet (#2270)
• 864883b 🔖 @​huggingface/tasks 0.21.25
• c1e4bac Add timee-ts library for download tracking (#2285)
• 47b810e 🔖 @​huggingface/hub 2.13.3
• 9c66c3a Support parameter count for diffusers models in parseSafetensorsMetadata (#2262)
• d2e52ec 🔖 @​huggingface/tasks 0.21.24
• f49fab2 Register Mobilint library with MXQ download counting (#2281)
• cf798a3 🔖 @​huggingface/tasks 0.21.23
• 5dbf6d4 Update litert-lm code snippet (#2282)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions