Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

build(deps): bump the production-dependencies group across 1 directory with 7 updates #512

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump the production-dependencies group across 1 directory with 7 updates #512

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 17, 2025 •
edited
Loading

Bumps the production-dependencies group with 7 updates in the / directory:

Package From To
matplotlib 3.5.2 3.10.0
numpy 1.22.4 2.2.3
pandas 1.4.2 2.2.3
python-dotenv 0.20.0 1.0.1
requests 2.32.2 2.32.3
scipy 1.8.1 1.15.2
seaborn 0.11.2 0.13.2

Updates matplotlib from 3.5.2 to 3.10.0

Release notes

Sourced from matplotlib's releases.

REL: v3.10.0

Highlights of this release include:

- Preliminary support for free-threaded CPython 3.13
- New more-accessible color cycle
- Dark-mode diverging colormaps
- Exception handling control
- InsetIndicator artist
- FillBetweenPolyCollection
- Fill between 3D lines
- Data in 3D plots can now be dynamically clipped to the axes view limits
- Rotating 3d plots with the mouse
- Increased Figure limits with Agg renderer
- Subfigures no longer provisional
- Subfigures are now added in row-major order

Matplotlib v3.10.0rc1

This is the first release candidate for Matplotlib 3.10.0

REL: 3.9.4

This is the fourth bugfix release of the 3.9.x series.

This release contains two bug-fixes:

  • Fix toolbar icons in GTK backend
  • Fix Poly3DCollection initialization with list of lists

REL: 3.9.3

This is the third bugfix release of the 3.9.x series.

This release contains several bug-fixes and adjustments:

  • Fix axline with extremely small slopes
  • Fix axline with non-linear axis scales
  • Fix minimumSizeHint with Qt backend
  • Fix config directory usage when it's behind a symlink
  • Fix draggable legend when blitting is enabled
  • Fix high CPU utilization in the macosx backend
  • Fix multiple hatch edgecolors passed to contourf
  • Improve compatibility with pytest 8.2.0

REL: 3.9.2

This is the second bugfix release of the 3.9.x series.

This release contains several bug-fixes and adjustments:

  • Be more resilient to I/O failures when writing font cache
  • Fix nondeterministic behavior with subplot spacing and constrained layout
  • Fix sticky edge tolerance relative to data range
  • Improve formatting of image values in cases of singular norms

... (truncated)

Commits
  • 8d64f03 REL: v3.10.0 release
  • d9dfee8 [doc] Fix dead links
  • 87a603f Update release notes for 3.10.0
  • cdecf97 Update github stats for 3.10
  • b8d19bd Merge pull request #29306 from meeseeksmachine/auto-backport-of-pr-29242-on-v...
  • a42d0ed Backport PR #29242: DOC: Add kwdoc list to scatter() docstring
  • 1900640 Merge pull request #29299 from QuLogic/merge-v39x
  • 815389c Merge branch 'v3.9.x' into v3.10.x
  • 73873c0 DOC: Create release notes for 3.9.4
  • 9d17a2b DOC: Add Zenodo DOI for 3.9.4
  • Additional commits viewable in compare view

Updates numpy from 1.22.4 to 2.2.3

Release notes

Sourced from numpy's releases.

2.2.3 (Feb 13, 2025)

NumPy 2.2.3 Release Notes

NumPy 2.2.3 is a patch release that fixes bugs found after the 2.2.2 release. The majority of the changes are typing improvements and fixes for free threaded Python. Both of those areas are still under development, so if you discover new problems, please report them.

This release supports Python versions 3.10-3.13.

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • !amotzop
  • Charles Harris
  • Chris Sidebottom
  • Joren Hammudoglu
  • Matthew Brett
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg
  • Yakov Danishevsky +

Pull requests merged

A total of 21 pull requests were merged for this release.

  • #28185: MAINT: Prepare 2.2.x for further development
  • #28201: BUG: fix data race in a more minimal way on stable branch
  • #28208: BUG: Fix from_float_positional errors for huge pads
  • #28209: BUG: fix data race in np.repeat
  • #28212: MAINT: Use VQSORT_COMPILER_COMPATIBLE to determine if we should...
  • #28224: MAINT: update highway to latest
  • #28236: BUG: Add cpp atomic support (#28234)
  • #28237: BLD: Compile fix for clang-cl on WoA
  • #28243: TYP: Avoid upcasting float64 in the set-ops
  • #28249: BLD: better fix for clang / ARM compiles
  • #28266: TYP: Fix timedelta64.__divmod__ and timedelta64.__mod__...
  • #28274: TYP: Fixed missing typing information of set_printoptions
  • #28278: BUG: backport resource cleanup bugfix from gh-28273
  • #28282: BUG: fix incorrect bytes to stringdtype coercion
  • #28283: TYP: Fix scalar constructors
  • #28284: TYP: stub numpy.matlib
  • #28285: TYP: stub the missing numpy.testing modules
  • #28286: CI: Fix the github label for TYP: PR's and issues
  • #28305: TYP: Backport typing updates from main
  • #28321: BUG: fix race initializing legacy dtype casts
  • #28324: CI: update test_moderately_small_alpha

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.1.0 release on Linux, modified for building with GitHub Actions and cibuildwheels and uploading to the anaconda.org staging repository for NumPy <https://anaconda.org/multibuild-wheels-staging/numpy>_. The commands can be copied into the command line, but be sure to replace 2.1.0 by the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.
  • You can use the keyring app to store the PyPI password for twine. See the online twine documentation for details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, three files need to be edited:

  • .github/workflows/wheels.yml # for github cibuildwheel
  • tools/ci/cirrus_wheels.yml # for cibuildwheel aarch64/arm64 builds
  • pyproject.toml # for classifier and minimum version check.

Make these changes in an ordinary PR against main and backport if necessary. Add [wheel build] at the end of the title line of the commit summary so that wheel builds will be run to test the changes. We currently release wheels for new Python versions after the first Python rc once manylinux and cibuildwheel support it. For Python 3.11 we were able to release within a week of the rc1 announcement.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.1.x branch.

Update 2.1.0 milestones

... (truncated)

Commits
  • a274561 Merge pull request #28322 from charris/prepare-2.2.3
  • 5ab0f71 REL: Prepare for the NumPy 2.2.3 release [wheel build]
  • 010ad9b Merge pull request #28324 from charris/update-test_dirichlet_moderately_small...
  • 6338746 CI: update test_moderately_small_alpha [wheel build]
  • 56f8d5b Merge pull request #28321 from charris/backport-28290
  • 48515a3 MAINT: Update some testing files from main
  • 96ca7e3 MAINT: respond to code review
  • c20ac88 MAINT: use a try/finally to make the deadlock protection more robust
  • d494647 MAINT: fix indentation and clarify comment
  • 3f8fbd6 MAINT: go back to try/except
  • Additional commits viewable in compare view

Updates pandas from 1.4.2 to 2.2.3

Release notes

Sourced from pandas's releases.

Pandas 2.2.3

We are pleased to announce the release of pandas 2.2.3. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.3 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.2.2

We are pleased to announce the release of pandas 2.2.2. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.2 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.2.1

We are pleased to announce the release of pandas 2.2.1. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.1 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

... (truncated)

Commits

Updates python-dotenv from 0.20.0 to 1.0.1

Release notes

Sourced from python-dotenv's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.0.0...v1.0.1

Version 1.0.0

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v0.21.1...v1.0.0

Version 0.21.1

Added

Fixed

  • Fix Out-of-scope error when "dest" variable is undefined (#413 by @​theGOTOguy)
  • Fix IPython test warning about deprecated magic (#440 by @​bbc2)
  • Fix type hint for dotenv_path var, add StrPath alias (#432 by @​eaf)

New Contributors

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.0.1] - 2024-01-23

Fixed

  • Gracefully handle code which has been imported from a zipfile (#456 by [@​samwyma])
  • Allow modules using load_dotenv to be reloaded when launched in a separate thread (#497 by [@​freddyaboulton])
  • Fix file not closed after deletion, handle error in the rewrite function (#469 by [@​Qwerty-133])

Misc

[1.0.0] - 2023-02-24

Fixed

[0.21.1] - 2023-01-21

Added

Fixed

  • Fix Out-of-scope error when "dest" variable is undefined (#413 by [@​theGOTOguy])
  • Fix IPython test warning about deprecated magic (#440 by [@​bbc2])
  • Fix type hint for dotenv_path var, add StrPath alias (#432 by [@​eaf])

[0.21.0] - 2022-09-03

Added

Fixed

... (truncated)

Commits
  • d6c0b96 Bumpversion 1.0.0 -> 1.0.1
  • 42dc086 Update changelog for 1.0.1
  • b1eebba Add python 3.12 and pypy3.10 to test runner
  • 6ff1391 Fix temporary file is deleted before closing, in the rewrite function (#468)
  • 0b94ac0 Allow modules using load_dotenv to be reloaded when launched in a separate th...
  • 3ffcef6 Use https in README links (#474)
  • be96be2 Use pathlib.Path in tests (#466)
  • 137bc3d Gracefully handle code which has been imported from a zipfile (#456)
  • dd1af68 FIx year in release in changelog (#453)
  • d0684d1 Bump version: 0.21.1 → 1.0.0
  • Additional commits viewable in compare view

Updates requests from 2.32.2 to 2.32.3

Release notes

Sourced from requests's releases.

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)
Changelog

Sourced from requests's changelog.

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)
Commits
  • 0e322af v2.32.3
  • e188799 Don't create default SSLContext if ssl module isn't present (#6724)
  • 145b539 Merge pull request #6716 from sigmavirus24/bug/6715
  • b1d73dd Don't use default SSLContext with custom poolmanager kwargs
  • 6badbac Update HISTORY.md
  • a62a2d3 Allow for overriding of specific pool key params
  • See full diff in compare view

Updates scipy from 1.8.1 to 1.15.2

Release notes

Sourced from scipy's releases.

SciPy 1.15.2 Release Notes

SciPy 1.15.2 is a bug-fix release with no new features compared to 1.15.1. Free-threaded Python 3.13 wheels for Linux ARM platform are available on PyPI starting with this release.

Authors

  • Name (commits)
  • Peter Bell (1)
  • Charles Bousseau (1) +
  • Jake Bowhay (3)
  • Matthew Brett (1)
  • Ralf Gommers (3)
  • Rohit Goswami (1)
  • Matt Haberland (4)
  • Parth Nobel (1) +
  • Tyler Reddy (33)
  • Daniel Schmitz (2)
  • Dan Schult (5)
  • Scott Shambaugh (2)
  • Edgar Andrés Margffoy Tuay (1)
  • Warren Weckesser (4)

A total of 14 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

SciPy 1.15.1 Release Notes

SciPy 1.15.1 is a bug-fix release with no new features compared to 1.15.0. Importantly, an issue with the import of scipy.optimize breaking other packages has been fixed.

Authors

  • Name (commits)
  • Ralf Gommers (3)
  • Rohit Goswami (1)
  • Matt Haberland (2)
  • Tyler Reddy (7)
  • Daniel Schmitz (1)

... (truncated)

Commits
  • 0f1fd4a REL: 1.15.2 rel commit [wheel build]
  • 7df5cc6 Merge pull request #22471 from tylerjereddy/treddy_backports_1.15.2
  • a046fa0 CI: PR 22471 wheel builds [wheel build]
  • 198aa52 DOC: PR 22471 revisions
  • ba61a58 CI: PR 22471 revisions
  • e0251ee do not check dtype in test_compare_with_GCVSPL
  • fcc68dd MAINT: integrate.cumulative_simpson: bump test tolerance
  • 6d2c059 BUG: wrap median_filter stability (#22402)
  • 59cb7d4 DOC: PR 22471 revisions
  • a60d17f MAINT: pearsonr SIMD-related shim
  • Additional commits viewable in compare view

Updates seaborn from 0.11.2 to 0.13.2

Release notes

Sourced from seaborn's releases.

v0.13.2 (January 2024)

This is a minor release containing internal changes that adapt to upcoming deprecations in pandas. All users are encouraged to update.

v0.13.1 (December 2023)

This is a minor release with some bug fixes and a couple new features. All users are encouraged to update.

  • |Feature| Added support for weighted mean estimation (with boostrap CIs) in lineplot, barplot, pointplot, and objects.Est (#3580, #3586).

  • |Feature| Added the extent option in objects.Plot.layout (#3552).

  • |Fix| Fixed a regression in v0.13.0 that triggered an exception when working with non-numpy data types (#3516).

  • |Fix| Fixed a bug in objects.Plot so that tick labels are shown for wrapped axes that aren't in the bottom-most row (#3600).

  • |Fix| Fixed a bug in catplot where a blank legend would be added when hue was redundantly assigned (#3540).

  • |Fix| Fixed a bug in catplot where the edgecolor parameter was ignored with kind="bar" (#3547).

  • |Fix| Fixed a bug in boxplot where an exception was raised when using the matplotlib bootstrap option (#3562).

  • |Fix| Fixed a bug in lineplot where an exception was raised when hue was assigned with an empty dataframe (#3569).

  • |Fix| Fixed a bug in multiple categorical plots that raised with hue=None and dodge=True; this is now has no effect (#3605).

v0.13.0 (September 2023)

See the online docs for an annotated version of these notes with working links.

This is a major release with a number of important new features and changes. The highlight is a major overhaul to seaborn's categorical plotting functions, providing them with many new capabilities and better aligning their API with the rest of the library. There is also provisional support for alternate dataframe libraries like polars, a new theme and display configuration system for objects.Plot, and many smaller bugfixes and enhancements.

Updating is recommended, but users are encouraged to carefully check the outputs of existing code that uses the categorical functions, and they should be aware of some deprecations and intentional changes to the default appearance of the resulting plots (see notes below with and tags).

Major enhancements to categorical plots

Seaborn's categorical functions <categorical_api> have been completely rewritten for this release. This provided the opportunity to address some longstanding quirks as well as to add a number of smaller but much-desired features and enhancements.

Support for numeric and datetime data

The categorical functions have historically treated all data as categorical, even when it has a numeric or datetime type. This can now be controlled with the new native_scale parameter. The default remains False to preserve existing behavior. But with native_scale=True, values will be treated as they would by other seaborn or matplotlib functions. Element widths will be derived from the minimum distance between two unique values on the categorical axis.

Additionally, while seaborn previously determined the mapping from categorical values to ordinal positions internally, this is now delegated to matplotlib. The change should mostly be transparent to the user, but categorical plots (even with native_scale=False) will better align with artists added by other seaborn or matplotlib functions in most cases, and matplotlib's interactive machinery will work better.

Changes to color defaults and specification

The categorical functions now act more like the rest of seaborn in that they will produce a plot with a single main color unless the hue variable is assigned. Previously, there would be an implicit redundant color mapping (e.g., each box in a boxplot would get a separate color from the default palette). To retain the previous behavior, explicitly assign a redundant hue variable (e.g., boxplot(data, x="x", y="y", hue="x")).

Two related idiosyncratic color specifications are deprecated, but they will continue to work (with a warning) for one release cycle:

  • Passing a palette without explicitly assigning hue is no longer supported (add an explicitly redundant hue assignment instead).
  • Passing a color while assigning hue to produce a gradient is no longer supported (use palette="dark:{color}" or palette="light:{color}" instead).

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 17, 2025
@dependabot dependabot bot added this to the Dependencies milestone Feb 17, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 17, 2025

The following labels could not be found: python.

@dependabot dependabot bot mentioned this pull request Feb 17, 2025
Closed
@dependabot dependabot bot had a problem deploying to refs/heads/staging February 17, 2025 16:47 Failure
@dependabot
build(deps): bump the production-dependencies group across 1 director…
fd76536 
…y with 7 updates

Bumps the production-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.5.2` | `3.10.0` |
| [numpy](https://github.com/numpy/numpy) | `1.22.4` | `2.2.3` |
| [pandas](https://github.com/pandas-dev/pandas) | `1.4.2` | `2.2.3` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `0.20.0` | `1.0.1` |
| [requests](https://github.com/psf/requests) | `2.32.2` | `2.32.3` |
| [scipy](https://github.com/scipy/scipy) | `1.8.1` | `1.15.2` |
| [seaborn](https://github.com/mwaskom/seaborn) | `0.11.2` | `0.13.2` |



Updates `matplotlib` from 3.5.2 to 3.10.0
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.5.2...v3.10.0)

Updates `numpy` from 1.22.4 to 2.2.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.22.4...v2.2.3)

Updates `pandas` from 1.4.2 to 2.2.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v1.4.2...v2.2.3)

Updates `python-dotenv` from 0.20.0 to 1.0.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v0.20.0...v1.0.1)

Updates `requests` from 2.32.2 to 2.32.3
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.2...v2.32.3)

Updates `scipy` from 1.8.1 to 1.15.2
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.8.1...v1.15.2)

Updates `seaborn` from 0.11.2 to 0.13.2
- [Release notes](https://github.com/mwaskom/seaborn/releases)
- [Commits](mwaskom/seaborn@v0.11.2...v0.13.2)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: pandas
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: python-dotenv
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: scipy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: seaborn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/production-dependencies-cf4b2e6aa8 branch from 55ab437 to fd76536 Compare February 24, 2025 16:46
@dependabot dependabot bot had a problem deploying to refs/heads/staging February 24, 2025 16:47 Failure
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
Dependencies
Development

Successfully merging this pull request may close these issues.
0 participants