fix: Updated python packages conflicting with kserve dependencies (#5580)

* fix: Upgraded python packages conflicting with kserve dependencies

Signed-off-by: Aniket Paluskar <[email protected]>

* Added hashes for all the requirements

Signed-off-by: Aniket Paluskar <[email protected]>

* Updated dependency hashes to be flexible & use latest versions when possible

Signed-off-by: Aniket Paluskar <[email protected]>

* Updated setup.py to match dependency version range with pyproject.toml

Signed-off-by: Aniket Paluskar <[email protected]>

* Added test to check if kserve & feast can be installed in same environment

Signed-off-by: Aniket Paluskar <[email protected]>

* Regenerated the requirements hash

Signed-off-by: Aniket Paluskar <[email protected]>

---------

Signed-off-by: Aniket Paluskar <[email protected]>
Co-authored-by: Francisco Arceo <[email protected]>

Author: aniketpalu

pyproject.toml

@@ -35,7 +35,7 @@ dependencies = [
     "tqdm>=4,<5",
     "typeguard>=4.0.0",
     "fastapi>=0.68.0",
-    "uvicorn[standard]==0.34.0",
+    "uvicorn[standard]>=0.30.6,<=0.34.0",
     "uvicorn-worker",
     "gunicorn; platform_system != 'Windows'",
     "dask[dataframe]>=2024.2.1",
@@ -90,13 +90,13 @@ ibis = [
 ikv = [
     "ikvpy>=0.0.36",
 ]
+k8s = ["kubernetes>=20.13.0,<=23.3.0"]
 image = [
     "feast[pytorch]",
     "timm>=0.6.0",
     "Pillow>=8.0.0",
     "scikit-learn>=1.0.0",
 ]
-k8s = ["kubernetes<=20.13.0"]
 milvus = [
     "pymilvus==2.4.9",
     "milvus-lite==2.4.12",

sdk/python/requirements/py3.10-ci-requirements.txt

@@ -340,21 +340,21 @@ markupsafe==3.0.2 \
     --hash=sha256:f8b3d067f2e40fe93e1ccdd6b2e1d16c43140e76f02fb1319a05cf2b79d99430 \
     --hash=sha256:fcabf5ff6eea076f859677f5f0b6b5c1a51e70a376b0579e0eadef8db48c6b50
     # via jinja2
-maturin==1.9.3 \
-    --hash=sha256:267ac8d0471d1ee2320b8b2ee36f400a32cd2492d7becbd0d976bd3503c2f69b \
-    --hash=sha256:30dae97d78fd8dc0a5648bf3f051581ea3a3cbfd93e20a368d48d00c464e3b3a \
-    --hash=sha256:3dbd698ddc8ebd415ed9f5558730677b6b07984e19769c8194c249145d19aa14 \
-    --hash=sha256:45d9909651a79186faf1bfaa0202204957870b30ce3bbd68516028f990a3cb38 \
-    --hash=sha256:68a70db3b08b39f849f1ef7d214bee94141883d095e171f94badddaf56b4d60d \
-    --hash=sha256:7efca8a7155d9b4f00e85eb334ca2524acc61cf93193df1282060e24a36d09f7 \
-    --hash=sha256:8c8ba5fb75827d037c6ccddda43a3cbcb428778cc6d3c6972785bb0b351f2786 \
-    --hash=sha256:8eab2457dc16194790cbdb11693ba13b8e130923a87fafa36d7c5800e587bf2b \
-    --hash=sha256:acbfbf9bf9f01dca27794de689e0f8bb85db600cf88662b3e44715aae8a5547e \
-    --hash=sha256:b17d5a4fe513d92ae96d27c2bc5c12ea024a69d8b6ac27f79e67b19f0fd004fa \
-    --hash=sha256:bb9718d6bb7f2d539a5ff7891fe862fcaa9a75d4ea58176446030ecb5d903ceb \
-    --hash=sha256:d71e8ccfc96602b25ecca77074b4a3459f419ab29505e966b9f1e7cc316f7a3e \
-    --hash=sha256:f29cb1068396ee0376cf5b9f4dce706bea9f768555831d44259b316e25ce311d \
-    --hash=sha256:fb2ee86861e72495eb9afd83f3672de0e4061740247f14492703c189829e7928
+maturin==1.9.4 \
+    --hash=sha256:08dc86312afee55af778af919818632e35d8d0464ccd79cb86700d9ea560ccd7 \
+    --hash=sha256:1bb2aa0fa29032e9c5aac03ac400396ddea12cadef242f8967e9c8ef715313a1 \
+    --hash=sha256:235163a0c99bc6f380fb8786c04fd14dcf6cd622ff295ea3de525015e6ac40cf \
+    --hash=sha256:273f879214f63f79bfe851cd7d541f8150bdbfae5dfdc3c0c4d125d02d1f41b4 \
+    --hash=sha256:368e958468431dfeec80f75eea9639b4356d8c42428b0128444424b083fecfb0 \
+    --hash=sha256:4227d627d8e3bfe45877a8d65e9d8351a9d01434549f0da75d2c06a1b570de58 \
+    --hash=sha256:68b7b833b25741c0f553b78e8b9e095b31ae7c6611533b3c7b71f84c2cb8fc44 \
+    --hash=sha256:6ff37578e3f5fdbe685110d45f60af1f5a7dfce70a1e26dfe3810af66853ecae \
+    --hash=sha256:7a6f980a9b67a5c13c844c268eabd855b54a6a765df4b4bb07d15a990572a4c9 \
+    --hash=sha256:8e450bb2c9afdf38a0059ee2e1ec2b17323f152b59c16f33eb9c74edaf1f9f79 \
+    --hash=sha256:a0868d52934c8a5d1411b42367633fdb5cd5515bec47a534192282167448ec30 \
+    --hash=sha256:ed2e54d132ace7e61829bd49709331007dd9a2cc78937f598aa76a4f69b6804d \
+    --hash=sha256:ef20ffdd943078c4c3699c29fb2ed722bb6b4419efdade6642d1dbf248f94a70 \
+    --hash=sha256:f3837bb53611b2dafa1c090436c330f2d743ba305ef00d8801a371f4495e7e1b
     # via
     #   cryptography
     #   pydantic-core
@@ -485,31 +485,31 @@ poetry-dynamic-versioning==1.9.1 \
     --hash=sha256:65a0c814e6d30d4807734a3c34edf261fd7cc3b340dbd23b6a33ee41f7d0b547 \
     --hash=sha256:d6e7b9df817aa2ca4946cd695c6c89e1379d2e6c640f008a9b6170d081a9da48
     # via ibis-framework
-pybind11==3.0.0 \
-    --hash=sha256:7c5cac504da5a701b5163f0e6a7ba736c713a096a5378383c5b4b064b753f607 \
-    --hash=sha256:c3f07bce3ada51c3e4b76badfa85df11688d12c46111f9d242bc5c9415af7862
+pybind11==3.0.1 \
+    --hash=sha256:9c0f40056a016da59bab516efb523089139fcc6f2ba7e4930854c61efb932051 \
+    --hash=sha256:aa8f0aa6e0a94d3b64adfc38f560f33f15e589be2175e103c0a33c6bce55ee89
     # via duckdb
-pycparser==2.22 \
-    --hash=sha256:491c8be9c040f5390f5bf44a5b07752bd07f56edf992381b05c701439eec10f6 \
-    --hash=sha256:c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc
+pycparser==2.23 \
+    --hash=sha256:78816d4f24add8f10a06d6f05b4d424ad9e96cfebf68a4ddc99c65c0720d00c2 \
+    --hash=sha256:e5c6e8d3fbad53479cab09ac03729e0a9faf2bee3db8208a550daf5af81a5934
     # via cffi
 pyproject-metadata==0.9.1 \
     --hash=sha256:b8b2253dd1b7062b78cf949a115f02ba7fa4114aabe63fa10528e9e1a954a816 \
     --hash=sha256:ee5efde548c3ed9b75a354fc319d5afd25e9585fa918a34f62f904cc731973ad
     # via meson-python
-scikit-build-core==0.11.5 \
-    --hash=sha256:8f0a1edb86cb087876f3c699d2a2682012efd8867b390ed37355f13949d0628e \
-    --hash=sha256:fada727b49f6c34f943bd52773a130bbd1f9b322d751251048ddbe2f4ce92761
+scikit-build-core==0.11.6 \
+    --hash=sha256:5982ccd839735be99cfd3b92a8847c6c196692f476c215da84b79d2ad12f9f1b \
+    --hash=sha256:ce6d8fe64e6b4c759ea0fb95d2f8a68f60d2df31c2989838633b8ec930736360
     # via
     #   patchelf
     #   pybind11
 semantic-version==2.10.0 \
     --hash=sha256:bdabb6d336998cbb378d4b9db3a4b56a1e3235701dc05ea2690d9a997ed5041c \
     --hash=sha256:de78a3b8e0feda74cabc54aab2da702113e33ac9d9eb9d2389bcf1f58b7d9177
     # via setuptools-rust
-setuptools-rust==1.11.1 \
-    --hash=sha256:5eaaddaed268dc24a527ffa659ce56b22d3cf17b781247b779efd611031fe8ea \
-    --hash=sha256:7dabc4392252ced314b8050d63276e05fdc5d32398fc7d3cce1f6a6ac35b76c0
+setuptools-rust==1.12.0 \
+    --hash=sha256:7e7db90547f224a835b45f5ad90c983340828a345554a9a660bdb2de8605dcdd \
+    --hash=sha256:d94a93f0c97751c17014565f07bdc324bee45d396cd1bba83d8e7af92b945f0c
     # via maturin
 setuptools-scm==7.1.0 \
     --hash=sha256:6c508345a771aad7d56ebff0e70628bf2b0ec7573762be9960214730de278f27 \
@@ -608,9 +608,9 @@ tomlkit==0.13.3 \
     # via
     #   poetry-dynamic-versioning
     #   uv-dynamic-versioning
-trove-classifiers==2025.8.6.13 \
-    --hash=sha256:5a0abad839d2ed810f213ab133d555d267124ddea29f1d8a50d6eca12a50ae6e \
-    --hash=sha256:c4e7fc83012770d80b3ae95816111c32b085716374dccee0d3fbf5c235495f9f
+trove-classifiers==2025.9.9.12 \
+    --hash=sha256:6a00942fc023f4f383af3254b4ed818d7fa7923a3c7c03b0e71da2ce71b538ab \
+    --hash=sha256:d449bd9d4715105657732d6dd1f46aa1595278d01ef1716ca164b35867135a4f
     # via hatchling
 types-psutil==7.0.0.20250218 \
     --hash=sha256:1447a30c282aafefcf8941ece854e1100eee7b0296a9d9be9977292f0269b121 \
@@ -620,9 +620,9 @@ types-setuptools==80.9.0.20250822 \
     --hash=sha256:070ea7716968ec67a84c7f7768d9952ff24d28b65b6594797a464f1b3066f965 \
     --hash=sha256:53bf881cb9d7e46ed12c76ef76c0aaf28cfe6211d3fab12e0b83620b1a8642c3
     # via mypy
-typing-extensions==4.14.1 \
-    --hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
-    --hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
+typing-extensions==4.15.0 \
+    --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
+    --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
     # via
     #   exceptiongroup
     #   mypy