Repository navigation
chore(deps): Bump the python-dependencies group across 1 directory with 7 updates - #13
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…th 7 updates Updates the requirements on [ruff](https://github.com/astral-sh/ruff), [pandas](https://github.com/pandas-dev/pandas), [matplotlib](https://github.com/matplotlib/matplotlib), [numpy](https://github.com/numpy/numpy), [pillow](https://github.com/python-pillow/Pillow), [mcp](https://github.com/modelcontextprotocol/python-sdk) and [cryptography](https://github.com/pyca/cryptography) to permit the latest version. Updates `ruff` to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.3...0.17.1) Updates `pandas` to 3.0.6 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.5...v3.0.6) Updates `matplotlib` to 3.11.2 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2) Updates `numpy` to 2.5.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.5.2...v2.5.4) Updates `pillow` to 13.0.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.3.0...13.0.0) Updates `mcp` to 2.3.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v2.0.0...v2.3.0) Updates `cryptography` to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.2) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: pandas dependency-version: 3.0.6 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: matplotlib dependency-version: 3.11.2 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: numpy dependency-version: 2.5.4 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: pillow dependency-version: 13.0.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: mcp dependency-version: 2.3.0 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:development dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on ruff, pandas, matplotlib, numpy, pillow, mcp and cryptography to permit the latest version.
Updates
ruffto 0.17.1Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
4683270Bump version to 0.17.1 (#29420)3514027[ty] Update typing conformance suite pin (#29417)8294556Update referenced PR security-review workflow (#29237)d1e1b1f[ty] Preserve recursive aliases when rebuilding intersections (#29057)9352615[perflint] Avoid invalid comprehension suggestions (PERF401,PERF403) (...83a3afcFix dedent with multiple leading comments (#29382)b42a873[ty] Clarify object attribute write-contract rationale (#29384)d01678e[ty] Clarify object attribute write-contract rationale (#29384)355b42a[ty] Avoid writable override contracts from object (#29373)e26e6d2[ty] Collect intersection inference through constraint relations (#28677)Updates
pandasto 3.0.6Release notes
Sourced from pandas's releases.
Commits
2905718RLS: 3.0.63188ced[backport 3.0.x] BUG: read_csv(sep=None) raised TypeError instead of falling...f097905DOC: cleanup 3.0.6 whatsnew + mention Python 3.15 support (#68965) (#68969)4f68223[backport 3.0.x] BUG: fix setting with bool column mask into 1-column DataFra...e3df0e8[backport 3.0.x] BUG: full-slice setitem into a pyarrow-backed array shared m...b7735f6Backport PR #66117 on branch 3.0.x (BUG: interpolate leaving NAs unfilled for...bca0b77[backport 3.0.x] BUG: read_csv leaked the string-intern table when a column f...bca1e5d[backport 3.0.x] BUG: prevent external mutation of RangeIndex._data (CoW) (#6...c95b42c[3.0.x] CI: skip cython-lint on pre-commit.ci (#68910)9cbd884[backport 3.0.x] Backport of some already merged regression fixes (#68447)Updates
matplotlibto 3.11.2Release notes
Sourced from matplotlib's releases.
Commits
d3ca917REL: v3.11.2b76fea9DOC: Set current version to 3.11.239c7f06DOC: Prepare GitHub stats for 3.11.25dd13e3Merge branch 'v3.11.1-doc' into release-3.11.2aa484beMerge branch 'v3.11.0-doc' into v3.11.1-doc0e10f83Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...ebe947bBackport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz8f4b7c5Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...93278adBackport PR #32321: DOC: correct note about PyOS_InputHookb0aee78Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...Updates
numpyto 2.5.4Release notes
Sourced from numpy's releases.
... (truncated)
Changelog
Sourced from numpy's changelog.
... (truncated)
Commits
a3d0ef1Merge pull request #32969 from charris/prepare-2.5.4087b536MAINT: Make OpenBLAS version check use 2.5.x branch.91acd87REL: Prepare for the NumPy 2.5.4 release.9cc555bMerge pull request #32956 from charris/backport-typing-1e04b972TYP:dtype[void].names: allow setting with list (#32943)d929969TYP:timedelta64:datetime.timedeltaconstruction isn't deprecated (#...839467fTYP:ma.getmaskarray: accept array-likes (#32934)64b721bTYP:polynomial: accept scalarcoefin the poly constructors (#32931)06b7ad2TYP:void: accept anydtype: strin constructor calls (#32928)c7bcd2cTYP:place: widenmask(#32926)Updates
pillowto 13.0.0Release notes
Sourced from pillow's releases.
... (truncated)
Changelog
Sourced from pillow's changelog.
... (truncated)
Commits
293218a13.0.0 version bump262e8e4Update release notes for Pillow 13.0.0 (#10223)af56aceValidate TIFF tag values against libtiff's own field definition before TIFFSe...570df03Validate TIFF tag values against libtiff's own field definition before TIFFSe...53318b5Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)0a87417Bound retained TIFF tag data by stream size (#10225)11582e5Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)8501adcFix testec5f1cbTake libtiff scanline geometry tags from the image, not tiffinfo/exif4b63dffShare TIFF tag data budget across framesUpdates
mcpto 2.3.0Release notes
Sourced from mcp's releases.
... (truncated)
Commits
2118f14docs: refresh translations for recent English changes (#3636)ed9b2d6Stop counting an interactive OAuth login against request timeouts (#3635)d5cebd1Keep inline-snapshot disabled when pytest runs in a terminal (#3634)c15566cLink What's new to the Header parameters page (#3632)4d29994Let a newer Deploy Docs run cancel the one in progress (#3633)0acea60Bump urllib3 from 2.7.0 to 2.8.0 (#3607)c54075cLook the tool schema up by name for Mcp-Param-* validation instead of running...9afccaeRetry a tool call once after a HeaderMismatch rejection (#3627)cafa33bRecord JSON-RPC error responses on the client OpenTelemetry span (#3629)0b2fd3eOmit an empty _meta and empty params from outbound requests (#3628)Updates
cryptographyto 50.0.2Changelog
Sourced from cryptography's changelog.
... (truncated)
Commits
4dda5c7[50.0.x] Bump for 50.0.2 release + changelog (#15733)70c881c[50.0.x] Bump pyo3 to 0.29.2 (#15731)a8c45c4[50.0.x] Build abi3.abi3t wheels for CPython 3.15+ (#15496) (#15732)ffde75abump for 50.0.1 + changelog (#15520)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions