Bump mostlyai-engine 2.6.1, mostlyai-qa 1.10.6; refresh lockfile for security updates

- Pin engine/qa to latest patch releases in local extras.
- Regenerate uv.lock with uv lock --upgrade to pull patched transitive deps.
- Apply ruff import ordering fixes for upgraded ruff in dev group.

Co-authored-by: Michi Platzer <michael.platzer@gmail.com>

Author: cursoragent

mostlyai/sdk/_data/auto_detect.py

@@ -17,8 +17,8 @@
 import time
 
 import pandas as pd
-
 from mostlyai.engine._common import safe_convert_datetime
+
 from mostlyai.sdk._data.base import DataTable
 from mostlyai.sdk._data.dtype import VirtualDType, VirtualInteger, VirtualVarchar
 from mostlyai.sdk._data.util.common import absorb_errors, run_with_timeout_unsafe

mostlyai/sdk/_data/non_context.py

@@ -31,15 +31,11 @@
 from copy import deepcopy
 from pathlib import Path
 
+import mostlyai.engine as engine
 import numpy as np
 import pandas as pd
 import torch
 import torch.nn.functional as F
-from pathvalidate import sanitize_filename
-from torch import nn
-from torch.utils.data import DataLoader, TensorDataset, random_split
-
-import mostlyai.engine as engine
 from mostlyai.engine._common import read_json, write_json
 from mostlyai.engine._encoding_types.tabular.categorical import (
     analyze_categorical,
@@ -49,6 +45,10 @@
 from mostlyai.engine._encoding_types.tabular.datetime import analyze_datetime, analyze_reduce_datetime, encode_datetime
 from mostlyai.engine._encoding_types.tabular.numeric import analyze_numeric, analyze_reduce_numeric, encode_numeric
 from mostlyai.engine.domain import ModelEncodingType
+from pathvalidate import sanitize_filename
+from torch import nn
+from torch.utils.data import DataLoader, TensorDataset, random_split
+
 from mostlyai.sdk._data.base import DataIdentifier, DataTable, NonContextRelation, Schema
 from mostlyai.sdk._data.util.common import IS_NULL, NON_CONTEXT_COLUMN_INFIX
 

mostlyai/sdk/_local/execution/step_analyze_training_data.py

@@ -18,6 +18,7 @@
 from pathlib import Path
 
 from mostlyai.engine.domain import DifferentialPrivacyConfig
+
 from mostlyai.sdk.domain import Generator, ModelEncodingType, ModelType, SourceColumnValueRange
 
 
@@ -30,9 +31,10 @@ def execute_step_analyze_training_data(
     update_progress: Callable,
 ) -> tuple[dict[str, ModelEncodingType], dict[str, SourceColumnValueRange]]:
     # import ENGINE here to avoid pre-mature loading of large ENGINE dependencies
-    from mostlyai import engine
     from mostlyai.engine._workspace import Workspace
 
+    from mostlyai import engine
+
     # fetch model_config
     tgt_table = next(t for t in generator.tables if t.name == target_table_name)
     if model_type == ModelType.language:

mostlyai/sdk/_local/execution/step_create_model_report.py

@@ -23,9 +23,9 @@
 import pandas as pd
 import pyarrow as pa
 import pyarrow.parquet as papqt
+from mostlyai.engine._workspace import Workspace
 
 from mostlyai import qa
-from mostlyai.engine._workspace import Workspace
 from mostlyai.sdk._data.util.common import TABLE_COLUMN_INFIX, TEMPORARY_PRIMARY_KEY, strip_column_prefix
 from mostlyai.sdk._local.execution.step_generate_model_report_data import qa_sample_size_heuristic
 from mostlyai.sdk._local.storage import get_model_label

mostlyai/sdk/_local/execution/step_finalize_training.py

@@ -19,9 +19,9 @@
 import traceback
 from pathlib import Path
 
+import mostlyai.engine as engine
 import pandas as pd
 
-import mostlyai.engine as engine
 from mostlyai.sdk._data.base import NonContextRelation, Schema
 from mostlyai.sdk._data.non_context import (
     CHILDREN_COUNT_COLUMN_NAME,

mostlyai/sdk/_local/execution/step_generate_model_report_data.py

@@ -29,9 +29,10 @@ def execute_step_generate_model_report_data(
     update_progress: Callable,
 ):
     # import ENGINE here to avoid pre-mature loading of large ENGINE dependencies
-    from mostlyai import engine
     from mostlyai.engine._workspace import Workspace
 
+    from mostlyai import engine
+
     # determine max sample size for generated report samples
     workspace = Workspace(workspace_dir)
     tgt_stats = workspace.tgt_stats.read()

mostlyai/sdk/_local/execution/step_train_model.py

@@ -31,9 +31,10 @@ def execute_step_train_model(
     upload_model_data_callback: Callable | None,
 ):
     # import ENGINE here to avoid pre-mature loading of large ENGINE dependencies
-    from mostlyai import engine
     from mostlyai.engine.domain import DifferentialPrivacyConfig, ModelStateStrategy
 
+    from mostlyai import engine
+
     _LOG.info(f"mostlyai-engine: {engine.__version__}")
 
     # fetch model_config

pyproject.toml

@@ -49,8 +49,8 @@ dependencies = [
 local = [
     # "mostlyai-engine @ git+https://github.com/mostly-ai/mostlyai-engine.git@main",  # for development
     # "mostlyai-qa @ git+https://github.com/mostly-ai/mostlyai-qa.git@main",  # for development
-    "mostlyai-engine==2.6.0",  # for release (PyPI)
-    "mostlyai-qa==1.10.5",  # for release (PyPI)
+    "mostlyai-engine==2.6.1",  # for release (PyPI)
+    "mostlyai-qa==1.10.6",  # for release (PyPI)
     "fastapi>=0.116.0",
     "uvicorn>=0.34.0",
     "python-multipart>=0.0.20",
@@ -75,8 +75,8 @@ local = [
 local-gpu = [
     # "mostlyai-engine[gpu] @ git+https://github.com/mostly-ai/mostlyai-engine.git@main",  # for development
     # "mostlyai-qa @ git+https://github.com/mostly-ai/mostlyai-qa.git@main",  # for development
-    "mostlyai-engine[gpu]==2.6.0",  # for release (PyPI)
-    "mostlyai-qa==1.10.5",  # for release (PyPI)
+    "mostlyai-engine[gpu]==2.6.1",  # for release (PyPI)
+    "mostlyai-qa==1.10.6",  # for release (PyPI)
     "fastapi>=0.116.0",
     "uvicorn>=0.34.0",
     "python-multipart>=0.0.20",

tests/_local/unit/test_migration.py

@@ -13,8 +13,8 @@
 # limitations under the License.
 
 import pytest
-
 from mostlyai.engine._workspace import Workspace
+
 from mostlyai.sdk._local.execution.migration import migrate_workspace