chore(deps): bump fastembed from 6.1.0 to 7.0.1

[dependabot]

Bumps fastembed from 6.1.0 to 7.0.1.

Release notes

Sourced from fastembed's releases.

v7.0.0

7.0.0 (2026-09-16)

⚠ BREAKING changes

• UserDefinedSparseModel::new takes the SparseModel family as a third argument: new(onnx_file, tokenizer_files, model).
• Image embeddings for non-square inputs differ from earlier releases across all image models.
• Qwen3-VL image embeddings differ from 5.16.1 through 6.1.0.
• The candle models (Qwen3TextEmbedding, Qwen3VLEmbedding, NomicV2MoeTextEmbedding) now cache under FASTEMBED_CACHE_DIR (default .fastembed_cache) instead of ~/.cache/huggingface/hub. Existing weights are re-downloaded unless HF_HOME is set.
• fastembed::InitOptions is a deprecated alias of TextInitOptions and now emits a warning.

Bug fixes

• Qwen3-VL: restore per-token MRoPE frequencies, with a regression test.
• Image preprocessing: aspect-preserving shortest_edge resize, correct width/height order for exact sizes, and CHW layout for padded center crops.
• Sparse models return Error::OutputKeyMissing instead of panicking when the expected output tensor is missing.
• Nomic v2 MoE runs in F16 and BF16.
• BGE-M3 try_new_from_user_defined and try_new_from_path apply disable_cpu_fallback and dimension_overrides. try_new_from_path accepts either a directory or the .onnx file.
• Tokenizer loading accepts pad_token as an AddedToken object and resolves the pad id from the vocabulary when config.json has no pad_token_id.
• Broken rustdoc links fixed.

Hugging Face access

• HF_TOKEN, or the huggingface-cli login token, is sent with every request.
• The candle models honour FASTEMBED_CACHE_DIR, HF_HOME, HF_ENDPOINT and HF_TOKEN like the ONNX models, and resolve sharded checkpoints through model.safetensors.index.json.

API additions

• SparseTextEmbedding::try_new_from_user_defined, plus UserDefinedSparseModel::with_idf_file.
• NomicBertModel is re-exported with a public constructor for loading local weights.

Performance

• SPLADE post-processing max-pools in place instead of allocating two vocab-sized copies per batch.
• Tokenization and input building share one code path across text, sparse, BGE-M3 and rerank.

Toolchain

• Minimum supported Rust version is declared as 1.88.
• CI lints all targets with the hf-hub feature, compiles the doctests, and builds docs with warnings denied.
• Dependabot now tracks GitHub Actions.

Commits

• 7b91c03 docs: Update version in README.md (#302)
• 0e07e89 fix: Restrict published crate contents to stay under crates.io size limit (#301)
• 2443e87 docs: Update version in README.md (#299)
• 3ba025d chore(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#297)
• c5306f8 chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 (#298)
• 7ce270a chore(deps): bump actions/cache/save from 5.0.5 to 6.1.0 (#296)
• 98fa870 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#295)
• c459a8e chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (#294)
• 167aab1 chore(release): 7.0.0 [skip ci]
• b0b2d24 refactor!: Miscellaneous fixes and improvements (#293)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)