deps(python): update ray requirement from >=2.55.1 to >=2.56.1 in /python

[dependabot]

Updates the requirements on ray to permit the latest version.

Release notes

Sourced from ray's releases.

Ray-2.56.1

Highlights

• Ray Data: We added fixes for several to_pandas regressions introduced in 2.56: an opt-out flag (RAY_DATA_ENABLE_ARROW_BACKED_PANDAS_CONVERSION) for Arrow-backed conversion, an int64/double[pyarrow] overflow crash on concatenation, and a TensorDtype.__from_arrow__ crash on empty tensor columns (#64793, #64794).
• Ray Core: We added early detection for system-slice memory pressure: the memory monitor now snapshots the user and system cgroup slices together and logs an error when the system slice exceeds reserved system memory, warning users to raise --system-reserved-memory before it causes node deaths (#64492).
• Ray Serve: We added protobuf 7 compatibility and a routing fix for LLM direct streaming, so body-aware routers like PrefixCacheAffinityRouter no longer hang when RAY_SERVE_LLM_ENABLE_DIRECT_STREAMING=1 (#64592, #64488).

Ray Data

🔨 Fixes

• Fixed two Arrow-backed to_pandas regressions: added DataContext.enable_arrow_backed_pandas_conversion as an opt-out, and reconciled divergent numeric column types before concatenation to avoid int64/double[pyarrow] overflow crashes (#64793, #64768).
• Fixed a TensorDtype.__from_arrow__ crash on zero-size tensor elements by using an explicit row count instead of numpy's -1 dimension inference (#64794, #64767).
• Fixed a crash in hash partition caused by read-only hash arrays (#64584, #64552, #64559).
• Nullified _input_dependencies in _get_args so exporting operator args no longer triggers an exponential sanitize_for_struct call chain over fused operators (#64412, #64316).

Ray Serve

🔨 Fixes

• Added protobuf >=7 compatibility to _proto_to_dict by binding to FieldDescriptor.is_repeated when the deprecated label attribute is absent (#64592, #64362).

Ray LLM

🔨 Fixes

• Fixed direct-streaming routing for body-aware routers: the ingress now parses the raw request body into a SimpleNamespace over routing-key fields (messages, prompt) so choose_replica receives the message body instead of raw bytes (#64488, #64328, #64326).

Ray RLlib

🔨 Fixes

• Upgraded the ONNX example from the retired MobileNet v1 to MobileNet v3 via torchvision and pinned onnxscript in the GPU/ml-build CI dep locks, fixing ONNX export failures (#64591, #64028, #64031, #64590, #64033).

Ray Core

💫 Enhancements

• The threshold memory monitor now snapshots both the user and system cgroup slices and logs an error when system-slice usage exceeds the reserved system memory, prompting users to raise --system-reserved-memory (#64492).

🔨 Fixes

• Disabled NCCL cuMem host buffer registration in CI pytests to stabilize GPU test runs (#64580, #64146).

Documentation

📖 Documentation

• Repointed the ASHA Tune example links to the renamed README document, fixing the fail_on_warning ReadTheDocs build on the release line (#64761, #64630).
• Updated the Python 3.10 CPU pip freeze dependency list for the Ray 2.56.0 release (#64447, #64357).

Commits

• 936f0d7 [docker] Update latest Docker dependencies for 2.56.1 release (#64849)
• ea47a0f [Data] Enable memory-safety best practices in video object detection benchmar...
• 0672981 [Data][2.56.1] Fix Arrow-backed to_pandas regressions: opt-out flag + int/flo...
• 6d4f5e6 [Data][2.56.1] Fix TensorDtype.from_arrow crash on empty tensor columns (...
• e4063cc [Data] Enable spilling and OOM check for remaining multimodal release tests (...
• d7babce [Data] Add memory hint for reads to image_embedding_from_jsonl (#64717) (ch...
• b747a25 [doc] Repoint ASHA Tune example links to README (fixes docs build) (#64630) (...
• 3ba205c [release] Update shipped dependencies for Ray 2.56.1 (#64728)
• 851cf15 [cherry-pick] Cherry-pick 2.56.1 mobilenet 64028 64031 (#64591)
• e709266 [deps][cherry-pick] cherry-pick 2.56.1 onnxscript #64033 (#64590)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[electricapp]

Superseded: this bump landed directly on main (pyproject constraint + uv.lock refresh) after the PR went stale against sibling lockfile merges.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.