chore(deps): update openvino requirement from >=2024.0 to >=2026.4.1 in /python_openvino_npu

[dependabot]

Updates the requirements on openvino to permit the latest version.

Release notes

Sourced from openvino's releases.

2026.4.1

Summary of major features and improvements

• Improved GroupQueryAttention support for large language models served through the ONNX frontend:
  • Added causal-attention and partial rotary-embedding support to GroupQueryAttention, broadening coverage of modern LLMs.
  • Extended MatMulNBits with bfloat16 support and reordered weight/scale/zero-point layouts for correct decoding of more quantized models.
  • Fixed correctness issues in the sliding-window KV-cache path that could produce wrong results:
    • an out-of-bounds ScatterUpdate index that could cause memory corruption or a driver crash on GPUs,
    • incorrect Gather shape inference for f8e4m3 and other low-precision data types (f8e4m3 Gather is now enabled for the windowed KV-cache).
• Fixed issues:
  • GPU:
    • Fixed wrong or corrupted results when using remote (zero-copy) output tensors with a transpose at the model output under dynamic shapes.
    • Fixed GRU sequence (RNN) models producing incorrect results with dynamic shapes, and corrected blocked-format reorder offsets.
    • Fixed recursive layout/format propagation through Reshape nodes during GPU graph compilation.
  • NPU:
    • ID 233822: Fixed unexpected application crashes on Intel® Core™ Ultra Series 3 processors on Windows that could occur with certain Intel® NPU PV drivers (32.0.100.4300, 32.0.100.4509, and 32.0.100.4512). It is recommended to migrate to OV 2026.4.1 in case the issue is observed with OV releases 2026.2, 2026.3, or 2026.4.
    • Hardened compiled-blob import against malformed or forged blobs: fixed a possible integer overflow in metadata parsing, bounded recursion in the compatibility-string parser, and rejected forged blobs on import.
  • CPU:
    • The OV_CPU_MAX_ISA instruction-set cap now works in release builds (previously debug-only) and is modeled as a feature bitmask.
    • Aligned JIT kernel selection with the OV_CPU_MAX_ISA cap so operators produce correct results when the ISA is capped.
  • Core / Frontends:
    • Hardened operators against malformed inputs: added index validation to ScatterElementsUpdate, divide-by-zero and overflow guards to Col2Im shape inference, and axes validation preventing a potential out-of-bounds write in the ONNX Pad operator.

You can find the OpenVINO™ toolkit 2026.4.1 release here:

• Download archives* with OpenVINO™
• OpenVINO™ for Python: pip install openvino==2026.4.1

Release documentation is available here: https://docs.openvino.ai/2026

Release Notes are available here: https://docs.openvino.ai/2026/about-openvino/release-notes-openvino.html

*Other names and brands may be claimed as the property of others.

Commits

• e213a14 [CPU] Enable OV_CPU_MAX_ISA in release builds and model the cap as an ISA fea...
• d79bee5 [NPU] CiP 2026/4 WW39 (#38337)
• daf8385 Docs- Update NPU Known Issue (#38341)
• eff71bc New FAQ section, Accuracy table and system descriptions added for OV-… (#38200)
• 6e50064 [NPU][IE-MDK] Update Skip Config for BlobCompatibilty tests (#38329)
• 20dc4bd [CPU] Align JIT kernel selection with ov::with_cpu_x86_*() (2026.4 branch) ...
• c577b3c Remove LLM Accuracy from required
• ee773f3 RPM: Bump cmake samples dependency (#38327)
• 6dc59a1 Bump product version 2026.4.1 (#38302)
• 4bc97a8 [GPU] Prevent dynamic remote outputs from aliasing permute producers (backpor...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.