Bump safetensors from 0.4.5 to 0.7.0

[dependabot]

Bumps safetensors from 0.4.5 to 0.7.0.

Release notes

Sourced from safetensors's releases.

v0.7.0

What's new

complex64 support

This release adds support for storing complex64 tensors.

What's Changed

• Revert "Early bailing when keys mismatch (faster). (#602)" by @​Narsil in huggingface/safetensors#647
• Support using paddle in safe_open by @​zeroRains in huggingface/safetensors#630
• Fix clippy lint. by @​Narsil in huggingface/safetensors#648
• Support paddle save/load/save_file/load_file without coverting to numpy by @​changeyoung98 in huggingface/safetensors#646
• Fix no-std feature configuration to auto-fallback from std to alloc by @​antimora in huggingface/safetensors#651
• Fix big endian (S390X) test by @​danieldk in huggingface/safetensors#654
• Fixing get_slice. by @​Narsil in huggingface/safetensors#655
• Update hashbrown dependency to 0.16 by @​danieldk in huggingface/safetensors#658
• Fix documentation build by @​danieldk in huggingface/safetensors#667
• Add packaging as a dependency for the torch extra by @​danieldk in huggingface/safetensors#666
• Support the complex64 data type by @​danieldk in huggingface/safetensors#660
• feat: add header size check at serialization by @​McPatate in huggingface/safetensors#669
• Set version to 0.7.0-dev.0 by @​danieldk in huggingface/safetensors#670
• Fix release CI issues by @​danieldk in huggingface/safetensors#673

New Contributors

• @​zeroRains made their first contribution in huggingface/safetensors#630
• @​changeyoung98 made their first contribution in huggingface/safetensors#646
• @​antimora made their first contribution in huggingface/safetensors#651
• @​danieldk made their first contribution in huggingface/safetensors#654

Full Changelog: safetensors/safetensors@v0.6.2...v0.7.0

v0.6.2

What's Changed

• Fixing clippy in 1.89 by @​Narsil in huggingface/safetensors#644
• Fixing the version check for uint support in torch. by @​Narsil in huggingface/safetensors#643

Full Changelog: safetensors/safetensors@v0.6.1...v0.6.2

v0.6.1

What's Changed

• Rust release upgrade (cache v1 is discontinued). by @​Narsil in huggingface/safetensors#627
• Re-adding support for u16, u32, u64. by @​Narsil in huggingface/safetensors#629
• Adding _safe_open_handle. by @​Narsil in huggingface/safetensors#608
• Fix test_simple.py for 0.6.0 by @​xanderlent in huggingface/safetensors#634
• GH action... once again. by @​Narsil in huggingface/safetensors#635
• Preparing for patch 6.0.1. by @​Narsil in huggingface/safetensors#638

New Contributors

• @​xanderlent made their first contribution in huggingface/safetensors#634

... (truncated)

Changelog

Sourced from safetensors's changelog.

Releasing safetensors

This document covers the full release process for the safetensors project. If anything here is unclear or out of date, please open a PR.

What gets released

A single tag push triggers two releases:

• Rust core crate on crates.io, via .github/workflows/rust-release.yml
• Python wheels + sdist on PyPI, via .github/workflows/python-release.yml (with build-provenance attestations)

Both workflows trigger on tags matching v* (e.g. v0.8.0, v0.8.0-rc.0).

Conda packages are published separately via the conda-forge/safetensors-feedstock, which picks up new PyPI releases automatically. No action is required from us.

The Rust crate and the Python binding share a version number. They could be versioned independently, but in practice they've always moved together.

Pre-release checklist

1. CI is green on main, every platform, every Python version.
2. Review the diff since the last release:

   git log --oneline v0.7.0..main
   git diff v0.7.0..main --stat

3. Identify breaking changes. Anything that changes the public Rust or Python API should be called out in the release notes and reflected in the version bump per semver.
4. Run benchmarks if the release includes performance-sensitive work:

   cd safetensors && cargo bench

5. Test against transformers. It's the largest downstream consumer of safetensors.
   • At minimum, run the fast test suite:

     RUN_PIPELINE_TESTS=1 CUDA_VISIBLE_DEVICES=-1 pytest -sv tests/

   • For any significant release, run the full suite by rebasing these two PRs on the transformers repo:
     • transformers#16708 — builds docker images with safetensors@main
     • transformers#16712 — runs the full test suite If those PRs have drifted, ask the transformers team for the current entry point.
6. Check the transformers version pin. transformers pins safetensors>=X,<Y in its setup.py. If this release crosses the upper bound, coordinate with the transformers maintainers first.

Cutting the release

We typically cut at least one release candidate before GA.

1. Update the dev version on main

main always carries a -dev.0 version. Before branching, make sure it reflects the upcoming release:

</tr></table> 

... (truncated)

Commits

• fa27fa8 Set version to 0.7.0
• 3979c8f Fix release CI issues (#673)
• 2624d79 Set version to 0.7.0-dev.0 (#670)
• 280141d feat: add header size check at serialization (#669)
• 547d0a7 Support the complex64 data type (#660)
• c6a98fa Add packaging as a dependency for the torch extra (#666)
• c7f11e3 Fix documentation build (#667)
• 2abf5c6 Update hashbrown dependency to 0.16 (#658)
• fa22263 Fixing get_slice. (#655)
• 34a3a27 Try to fix big endian test (#654)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)