fix(deps): bump @huggingface/transformers from 4.2.0 to 4.3.0

[dependabot]

Bumps @huggingface/transformers from 4.2.0 to 4.3.0.

Release notes

Sourced from @​huggingface/transformers's releases.

4.3.0

🚀 Transformers.js v4.3 — Structured Output, New Models, WebGPU upgrade, Documentation Overhaul

This release adds structured output, three new model architectures, WebGPU support for Safari 26+, and a documentation overhaul. We also upgraded ONNX Runtime to the latest version.

What's new?

Structured output

Constrain generation to a JSON schema, JSON object, or regular expression with the experimental, dependency-free @huggingface/transformers-structured-output package in huggingface/transformers.js#1758.

For example, classify customer feedback into a fixed set of sentiments and topics:

import { pipeline, TextStreamer } from "@huggingface/transformers";
import { StructuredOutputProcessor } from "@huggingface/transformers-structured-output";
// Create the pipeline first so its tokenizer is available.
const generator = await pipeline(
"text-generation",
"onnx-community/LFM2.5-350M-ONNX",
{ dtype: "q4f16", device: "webgpu" },
);
const processor = new StructuredOutputProcessor(generator.tokenizer, {
type: "json_schema",
json_schema: {
type: "object",
properties: {
sentiment: { enum: ["positive", "negative", "neutral"] },
topic: { enum: ["price", "quality", "delivery", "other"] },
},
required: ["sentiment", "topic"],
additionalProperties: false,
},
});
const messages = [
{
role: "user",
content: "Classify this feedback: The product is way too expensive.",
},
];
const output = await generator(messages, {
max_new_tokens: 512,
do_sample: false,
streamer: new TextStreamer(generator.tokenizer, {
skip_prompt: true,
skip_special_tokens: true,
</tr></table>

... (truncated)

Commits

• a1728dd [version] Update to 4.3.0
• f9dec42 Bump dependencies (#1766)
• dce094e Massive documentation overhaul (#1665)
• 37fddf9 Fix RawAudio.toBlob() ignoring TypedArray byteOffset/length (#1712)
• eb5d05e Skip browser cache writes for non-http(s) resources (#1723)
• 3991b6a Create @huggingface/transformers-structured-output package (#1758)
• 6fe1ccc Pin WebGPU KV cache for ImageAudioTextToText models (Gemma3n, Gemma4) (#1757)
• f09d000 Correctly dispose Chatterbox KV cache after generation (#1737)
• 3152877 Remove unused code and exports (#1763)
• 274446c Fix Moonshine ASR token decoding (#1738)
• Additional commits viewable in compare view

---

📝 Summary by GitNexus

Summary

A focused dependency metadata update with no traced execution-flow impact.

🟡 MEDIUM blast radius. A dependency version update for @​huggingface/transformers recorded in package.json and pnpm-lock.yaml, with no graph-traced dependents.

The change is limited to dependency metadata. Review package.json alongside pnpm-lock.yaml to check that the lockfile reflects the declared update.

Added by GitNexus for PR #834. Edit freely — this block is replaced on the next review, everything above it is left untouched.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
do-knowledge-studio	Ready	Preview, v0	Oct 2, 2026 6:26pm UTC

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[nexus-check]

GitNexus Review · PR #834

No issues found in 2 changed files.

Summary

A focused dependency metadata update with no traced execution-flow impact.

🟡 MEDIUM blast radius. A dependency version update for @​huggingface/transformers recorded in package.json and pnpm-lock.yaml, with no graph-traced dependents.

The change is limited to dependency metadata. Review package.json alongside pnpm-lock.yaml to check that the lockfile reflects the declared update.

Full detail lives in the GitNexus check run for this commit.

[nexus-check]

🤖 Agent context for GitNexus Review · PR #834

This comment carries deterministic graph detail for coding agents and reviewers who want the receipts — the main review comment carries the human summary.

🟡 MEDIUM blast radius — no downstream dependents were found in the code graph; a spot-check of the dependents should cover it. (likely driven by file-risk heuristics — no direct dependents or affected modules were found)

Blast Level	Dependents	Modules	Files
🟡 MEDIUM	0	0	2

What changed

Changed Files (2)

File	Status
package.json	🟡 modified
pnpm-lock.yaml	🟡 modified

What to check

File Risk (2)

File	Risk	Category
package.json	🟡 MEDIUM	Dependencies
pnpm-lock.yaml	🟢 LOW	Lock File

[d-oit]

@dependabot rebase

[github-actions]

Blocked merge diagnosis — blocked
⏳ Check run(s) still in progress: ["Codacy Static Code Analysis","Detect Changes","Diagnose Blocked Merge State","Infrastructure as Code Security","Trivy Filesystem Security Scan","Shell Script Security Analysis","GitHub Actions Workflow Validation","Analyze (javascript-typescript)","Analyze (actions)","GitNexus"]