Skip to content

Bump the pip-dependencies group across 1 directory with 16 updates#214

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/pip-dependencies-f33fe58565
Open

Bump the pip-dependencies group across 1 directory with 16 updates#214
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/pip-dependencies-f33fe58565

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on pandas, numpy, joblib, flake8, gitpython, scipy, matplotlib, astropy, astropy-iers-data, setuptools, plotly, requests, polars, pyarrow, pytest and ruff to permit the latest version.
Updates pandas to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 9c8bc3e RLS: 2.3.3
  • 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
  • b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
  • 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
  • 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
  • 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
  • e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
  • e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
  • 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
  • 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
  • Additional commits viewable in compare view

Updates numpy to 2.2.6

Release notes

Sourced from numpy's releases.

v2.2.6 (May 17, 2025)

NumPy 2.2.6 Release Notes

NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance.

This release supports Python versions 3.10-3.13.

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Ilhan Polat
  • Joren Hammudoglu
  • Marco Gorelli +
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Sayed Adel

Pull requests merged

A total of 11 pull requests were merged for this release.

  • #28778: MAINT: Prepare 2.2.x for further development
  • #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments...
  • #28852: BUG: fix heap buffer overflow in np.strings.find
  • #28853: TYP: fix NDArray[floating] + float return type
  • #28864: BUG: fix stringdtype singleton thread safety
  • #28865: MAINT: use OpenBLAS 0.3.29
  • #28889: MAINT: from_dlpack thread safety fixes
  • #28913: TYP: Fix non-existent CanIndex annotation in ndarray.setfield
  • #28915: MAINT: Avoid dereferencing/strict aliasing warnings
  • #28916: BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate.
  • #28966: TYP: reject complex scalar types in ndarray.__ifloordiv__

Checksums

MD5

259343f056061f6eadb2f4b8999d06d4  numpy-2.2.6-cp310-cp310-macosx_10_9_x86_64.whl
16fa85488e149489ce7ee044d7b0d307  numpy-2.2.6-cp310-cp310-macosx_11_0_arm64.whl
f01b7aea9d2b76b1eeb49766e615d689  numpy-2.2.6-cp310-cp310-macosx_14_0_arm64.whl
f2ddc2b22517f6e31caa1372b12c2499  numpy-2.2.6-cp310-cp310-macosx_14_0_x86_64.whl
52190e22869884f0870eb3df7a283ca9  numpy-2.2.6-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
8f382b9ca6770db600edd5ea2447a925  numpy-2.2.6-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
e604aae2ef6e01fb92ecc39aca0424d9  numpy-2.2.6-cp310-cp310-musllinux_1_2_aarch64.whl

... (truncated)

Commits
  • 2b686f6 Merge pull request #28980 from charris/prepare-2.2.6
  • ed41828 REL: Prepare for the NumPy 2.2.6 release [wheel build]
  • 83e4e7f Merge pull request #28966 from charris/backport-28958
  • 248f0cb TYP: add rejection-tests for complex ndarray floordiv
  • 5bad9da TYP: reject complex scalar types in ndarray.__ifloordiv__
  • 6c42775 Merge pull request #28915 from charris/backport-28892
  • 4277e7c Merge pull request #28916 from charris/backport-28898
  • bd1c863 BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate. (#28898)
  • 87d1d8a MAINT: Avoid dereferencing/strict aliasing warnings during complex casts in `...
  • 9e50659 Merge pull request #28913 from charris/backport-28908
  • Additional commits viewable in compare view

Updates joblib to 1.5.3

Changelog

Sourced from joblib's changelog.

Release 1.5.3 - 2025/12/15

  • The Memory object won't overwrite an already existing .gitignore file in its cache directory anymore. joblib/joblib#1742

  • Harden the safety checks in eval_expr(pre_dispatch) to prevent excessive memory allocation and potential crashes by limiting the allowed length of the expression and the maximum numeric value of sub-expressions and not evaluating expressions with non-numeric literals. joblib/joblib#1744

  • Vendor cloudpickle 3.1.2 to fix a pickling problem with interactively defined abstract base classes and type annotations in Python 3.14+.

Release 1.5.2 - 2025/08/27

Memory:


- Ensure that temporary files managed by the ``Memory`` object do not collide
  when using the same cache directory when the cache directory is accessed
  concurrently from different nodes on a cluster with a shared filesystem.
  https://github.com/joblib/joblib/pull/1656

Release 1.5.1 - 2025/05/23


    

  • 

    Fix backend hints causing errors when no multiprocessing is present
    
joblib/joblib#1721
    

    • 

  • 

    Vendor loky3.5.5 fixing the resource_tracker clean up with earlier Python
    
versions. joblib/joblib#1724
    

    • 



Release 1.5.0 -- 2025/05/03


Memory:

  • Enforce age_limit is a positive timedelta for Memory.reduce_size, to avoid silently ignoring it. joblib/joblib#1613

  • Remove deprecated bytes_limit argument for Memory, which should

... (truncated)

Commits

Updates flake8 to 7.3.0

Commits

Updates gitpython to 3.1.50

Release notes

Sourced from gitpython's releases.

3.1.50

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.49...3.1.50

Commits

Updates scipy to 1.15.3

Release notes

Sourced from scipy's releases.

SciPy 1.15.3 Release Notes

SciPy 1.15.3 is a bug-fix release with no new features compared to 1.15.2.

For the complete issue and PR lists see the raw release notes.

Authors

  • Name (commits)
  • aiudirog (1) +
  • Nickolai Belakovski (1)
  • Florian Bourgey (1) +
  • Richard Strong Bowen (2) +
  • Jake Bowhay (1)
  • Dietrich Brunn (2)
  • Evgeni Burovski (1)
  • Lucas Colley (1)
  • Ralf Gommers (1)
  • Saarthak Gupta (1) +
  • Matt Haberland (4)
  • Chengyu Han (1) +
  • Lukas Huber (1) +
  • Nick ODell (2)
  • Ilhan Polat (4)
  • Tyler Reddy (52)
  • Neil Schemenauer (1) +
  • Dan Schult (1)
  • sildater (1) +
  • Gagandeep Singh (4)
  • Albert Steppi (2)
  • Matthias Urlichs (1) +
  • David Varela (1) +
  • ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (3)

A total of 24 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Commits
  • e29dcb6 REL: 1.15.3 rel commit [wheel build]
  • 61e6aa1 Merge pull request #22840 from tylerjereddy/treddy_1.15.3_backports
  • 18c4ca8 MAINT: PR 22840 wheel build [wheel build]
  • bd0f132 MAINT: PR 22840 revisions
  • 033b138 MAINT: PR 22840 revisions
  • 7a283cc DOC: PR 22840 revisions
  • 3d1ea40 BUG: spatial.HalfspaceIntersection: raise on non-feasible half space (#20035)
  • d01b984 BUG: ndimage.median_filter: fix segfault when using mode='mirror' (#22608)
  • 0879108 MAINT: special.logsumexp: fix bug when weight of largest magnitude component ...
  • 9b3b2d8 Merge pull request #22869 from smurfix/main
  • Additional commits viewable in compare view

Updates matplotlib to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Updates astropy to 6.1.7

Release notes

Sourced from astropy's releases.

v6.1.7

See https://docs.astropy.org/en/v6.1.7/changelog.html

Commits

Updates astropy-iers-data to 0.2026.5.18.1.11.28

Release notes

Sourced from astropy-iers-data's releases.

v0.2026.5.18.1.11.28

Full Changelog: astropy/astropy-iers-data@v0.2026.5.11.1.8.52...v0.2026.5.18.1.11.28

Commits
  • 6fa1a10 Update IERS Earth rotation and leap second tables
  • f21a227 Update IERS Earth rotation and leap second tables
  • b6254bf Merge pull request #71 from astropy/dependabot/github_actions/dot-github/work...
  • db1e1c1 Bump the actions group in /.github/workflows with 2 updates
  • 2f2afe5 Update IERS Earth rotation and leap second tables
  • 761792c Update IERS Earth rotation and leap second tables
  • c6d4e8f Update IERS Earth rotation and leap second tables
  • 4f3819e Update IERS Earth rotation and leap second tables
  • ae05922 Update IERS Earth rotation and leap second tables
  • d880985 Fix publish workflow
  • Additional commits viewable in compare view

Updates setuptools to 82.0.1

Changelog

Sourced from setuptools's changelog.

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

... (truncated)

Commits
  • 5a13876 Bump version: 82.0.0 → 82.0.1
  • 51ab8f1 Avoid using (deprecated) 'json.version' in tests (#5194)
  • f9c37b2 Docs/CI: Fix intersphinx references (#5195)
  • 8173db2 Docs: Fix intersphinx references
  • 09bafbc Fix past tense on newsfragment
  • 461ea56 Add news fragment
  • c4ffe53 Avoid using (deprecated) 'json.version' in tests
  • 749258b Cleanup pkg_resources dependencies and configuration (#5175)
  • 2019c16 Parse ext-module.define-macros from pyproject.toml as list of tuples (#5169)
  • b809c86 Sync setuptools schema with validate-pyproject (#5157)
  • Additional commits viewable in compare view

Updates plotly to 6.7.0

Release notes

Sourced from plotly's releases.

v6.7.0

Added

  • Add facet_row support to px.imshow for creating subplots along an additional dimension [#5445], with thanks to @​FBumann for the contribution!

Fixed

  • Update numpy.percentile syntax to stop using deprecated alias [#5483], with thanks to @​Mr-Neutr0n for the contribution!
    • numpy with a version less than 1.22 is no longer supported.
  • Handle empty px.histogram by skipping None label in hover template [#5535], with thanks to @​tysoncung for the contribution!

Updated

  • Update plotly.js from version 3.4.0 to version 3.5.0. See the plotly.js release notes for more information. [#5565]. Notable changes include:
    • Add hoveranywhere and clickanywhere layout attributes to enable emitting hover and click events anywhere in the plot area, not just over traces [#7707]
    • Add displayNotifier configuration property to set the display of notifier in the top right area of the viewport [#7730]
    • Update USA location lookup for scattergeo and choropleth traces to use both location names and abbreviations [#7731]
Changelog

Sourced from plotly's changelog.

[6.7.0] - 2026-04-09

Added

  • Add facet_row support to px.imshow for creating subplots along an additional dimension [#5445], with thanks to @​FBumann for the contribution!

Fixed

  • Update numpy.percentile syntax to stop using deprecated alias [#5483], with thanks to @​Mr-Neutr0n for the contribution!
    • numpy with a version less than 1.22 is no longer supported.
  • Handle empty px.histogram by skipping None label in hover template [#5535], with thanks to @​tysoncung for the contribution!

Updated

  • Update plotly.js from version 3.4.0 to version 3.5.0. See the plotly.js release notes for more information. [#5565]. Notable changes include:
    • Add hoveranywhere and clickanywhere layout attributes to enable emitting hover and click events anywhere in the plot area, not just over traces [#7707]
    • Add displayNotifier configuration property to set the display of notifier in the top right area of the viewport [#7730]
    • Update USA location lookup for scattergeo and choropleth traces to use both location names and abbreviations [#7731]

[6.6.0] - 2026-03-02

Fixed

  • Remove unneeded type="text/javascript" attribute from <style> tag [#5454], with thanks to @​hannob for the contribution!
  • Remove global warning format side effect [#5481], with thanks to @​emmanuel-ferdman for the contribution!
  • Fix spurious engine deprecation warning in write_image [#5517], with thanks to @​mosh3eb for the contribution!

Updated

  • Update plotly.js from version 3.3.1 to version 3.4.0. See the plotly.js release notes for more information. [#5527]. Notable changes include:
    • Add support for clicking legend titles to toggle visibility of all traces in legend [#7698]
    • Add support for shapes to reference multiple axes [#7666]
    • Add support for dashed marker lines in scatter plots [#7673]
    • Increase axis autorange when bar charts have outside text labels, to avoid labels being clipped [#7675]

[6.5.2] - 2026-01-14

Fixed

  • Fix issue where pie trace legend, showlegend attributes don't accept array values [#5464 and #5465], with thanks to @​my-tien for the contribution!

[6.5.1] - 2026-01-07

Fixed

  • Fix issue where Plotly Express ignored trace-specific color sequences defined in templates via template.data.<trace_type> [#5437], with thanks to @​antonymilne for the contribution!

Updated

  • Speed up validate_gantt function [#5386], with thanks to @​misrasaurabh1 for the contribution!
  • Update plotly.js from version 3.3.0 to version 3.3.1. See the plotly.js release notes for more information. [#5456]. Notable changes include:
    • Add support for arrays for the pie properties showlegend and legend, so that these can be configured per slice. [#7580]

[6.5.0] - 2025-11-17

Updated

  • Update plotly.js from version 3.2.0 to version 3.3.0. See the plotly.js release notes for more information. [#5421]. Notable changes include:
    • Add hovertemplate for candlestick and ohlc traces [#7619]

... (truncated)

Commits
  • 1a2065a Add missing attributions
  • 8422e17 Add missing octothorpes
  • fa9116f Update Jupyter Lab extension files
  • c771ad5 Version changes for v6.7.0
  • 067b954 Merge pull request #5565 from plotly/cam/update-plotly.js-v3.5.0
  • 1b7de49 Update Jupyter support files
  • d605d3e chore: Update plotly.js to v3.5.0
  • 600f865 Merge pull request #5541 from plotly/migrate-to-gh-actions
  • 10c7c56 Merge pull request #5518 from mosh3eb/fix/broken-license-link-readme
  • ea813dd Merge branch 'main' into fix/broken-license-link-readme
  • Additional commits viewable in compare view

Updates requests to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates polars to 1.41.0

Release notes

Sourced from polars's releases.

Python Polars 1.41.0

🏆 Highlights

  • Add LazyFrame.gather (#27501)
  • Nested common subplan elimination (#27340)
  • Stabilize streaming engine (#27497)
  • Speed up parquet metadata decode with hand-written Thrift (#27427)

⚠️ Deprecations

  • Deprecate the StringCache (#27580)

🚀 Performance improvements

  • Dispatch {list,arr}.{unique,n_unique,reverse} to group_by engine (#27278)
  • Improve in-memory grouped non-null count (#27702)
  • Factor shared conjuncts out of OR-of-ANDs predicates (#27627)
  • Skip downloading IPC batches exceeding slice bounds (#27683)
  • Avoid materializing broadcast list in list.shift (#27628)
  • Optimise json_decode Datetime string parsing (#27559)
  • Speed up to_numpy C-order via cache-blocked transpose (#27522)
  • Optimize select(len()) for non-strict horizontal concat (#27516)
  • Pushdown slices to inputs on left/right/full join (#27508)
  • Don't infer CSV schema if schema is set (#27507)
  • Nested common subplan elimination (#27340)
  • Make is_in row-group pruning precise on null-containing haystacks (#27495)
  • Don't do fused-multiply-add on scalars (#27479)
  • List full fast path (#27477)
  • Make is_in row-group pruning precise on multi-value lists (#27475)
  • Add streaming GatherNode (#27465)
  • Lower non-elementwise FunctionExprIR to ColumnarFunctionNode (#27462)
  • Speed up parquet metadata decode with hand-written Thrift (#27427)

✨ Enhancements

  • Use true division for the / operator in Polars SQL (#27391)
  • Add Rust backend for Expr.has_nulls (#27590)
  • Stabilize float16 (#27607)
  • Add Expr.is_empty (#27583)
  • Add support for the SQL FILTER clause for aggregate functions, and STRING_AGG (#27564)
  • Make parquet FileMetadata prunable for IR-plan dispatch (#27535)
  • Broadcast scalar input for list.slice (#27487)
  • Add LazyFrame.gather (#27501)
  • Add null_on_oob in {Expr/Series}.gather (#27327)
  • Stabilize streaming engine (#27497)
  • Process batched arr.eval on overflow boundaries (#27496)
  • Process batched list.eval on overflow boundaries (#27483)
  • Print SLICED UNION in LazyFrame explain (#27467)

🐞 Bug fixes

... (truncated)

Commits
  • 5fceb9c chore: Remove redundant DSL::AGG::Unique (#27718)
  • ff62eb5 perf: Dispatch {list,arr}.{unique,n_unique,reverse} to group_by engine (#27...
  • ff616e6 feat(rust): Add is_inherently_nondeterministic helper for AExpr (#27687)
  • fe5955a Python Polars 1.41.0 (#27710)
  • ebcb5a9 docs: Document Expr.list.getitem (#27689)
  • 58939bc fix: Panic in scan of empty IPC with slice (#27708)
  • d7befeb Revert "chore: Harden against async blocking deadlocks" (#27709)
  • 83e2b79 fix: Persist object_store rebuild state in cache (#27707)
  • 0d00d44 chore: Harden against async blocking deadlocks (#27653)
  • 8adc2a8 chore: Print Python traceback when POLARS_TIMEOUT_MS is exceeded (#27657)
  • Additional commits viewable in compare view

Updates pyarrow to 24.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 24.0.0

Release Notes URL: https://arrow.apache.org/release/24.0.0.html

Commits
  • 31b4b6c MINOR: [Release] Update versions for 24.0.0
  • 06dbc17 MINOR: [Release] Update .deb/.rpm changelogs for 24.0.0
  • a021d80 MINOR: [Release] Update CHANGELOG.md for 24.0.0
  • 2d6b12c GH-49716: [C++] FixedShapeTensorType::Deserialize should strictly validate se...
  • a74cb6a GH-49697: [C++][CI] Check IPC file body bounds are in sync with decoder outco...
  • 871a0c6 GH-49676: [Python][Packaging] Fix gRPC docker image layer being too big for h...
  • f9203b3 GH-49586: [C++][CI] StructToStructSubset test failure with libc++ 22.1.1 (#49...
  • fe298b4 GH-49628: [Python][Interchange protocol] Suppress warnings for pandas 4.0.0 a...
  • 1f94910 GH-49252: [GLib] Deprecate Feather f...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-dependencies-f33fe58565 branch from 2f6cc5c to 7697c94 Compare May 16, 2026 07:22
@dependabot
Bump the pip-dependencies group across 1 directory with 16 updates
6d38281 
Updates the requirements on [pandas](https://github.com/pandas-dev/pandas), [numpy](https://github.com/numpy/numpy), [joblib](https://github.com/joblib/joblib), [flake8](https://github.com/pycqa/flake8), [gitpython](https://github.com/gitpython-developers/GitPython), [scipy](https://github.com/scipy/scipy), [matplotlib](https://github.com/matplotlib/matplotlib), [astropy](https://github.com/astropy/astropy), [astropy-iers-data](https://github.com/astropy/astropy-iers-data), [setuptools](https://github.com/pypa/setuptools), [plotly](https://github.com/plotly/plotly.py), [requests](https://github.com/psf/requests), [polars](https://github.com/pola-rs/polars), [pyarrow](https://github.com/apache/arrow), [pytest](https://github.com/pytest-dev/pytest) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.

Updates `pandas` to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.3...v2.3.3)

Updates `numpy` to 2.2.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.2.0...v2.2.6)

Updates `joblib` to 1.5.3
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.4.2...1.5.3)

Updates `flake8` to 7.3.0
- [Commits](PyCQA/flake8@7.1.1...7.3.0)

Updates `gitpython` to 3.1.50
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.41...3.1.50)

Updates `scipy` to 1.15.3
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.14.1...v1.15.3)

Updates `matplotlib` to 3.10.9
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.0...v3.10.9)

Updates `astropy` to 6.1.7
- [Release notes](https://github.com/astropy/astropy/releases)
- [Changelog](https://github.com/astropy/astropy/blob/main/docs/changelog.rst)
- [Commits](astropy/astropy@v6.1.7...v6.1.7)

Updates `astropy-iers-data` to 0.2026.5.18.1.11.28
- [Release notes](https://github.com/astropy/astropy-iers-data/releases)
- [Commits](astropy/astropy-iers-data@v0.2026.3.2.0.47.4...v0.2026.5.18.1.11.28)

Updates `setuptools` to 82.0.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.6.0...v82.0.1)

Updates `plotly` to 6.7.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v5.24.1...v6.7.0)

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.34.2)

Updates `polars` to 1.41.0
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.31.0...py-1.41.0)

Updates `pyarrow` to 24.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-20.0.0...apache-arrow-24.0.0)

Updates `pytest` to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `ruff` to 0.15.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.14)

---
updated-dependencies:
- dependency-name: astropy
  dependency-version: 6.1.7
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: astropy-iers-data
  dependency-version: 0.2026.4.27.1.3.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: gitpython
  dependency-version: 3.1.49
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: joblib
  dependency-version: 1.5.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: numpy
  dependency-version: 2.2.6
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: plotly
  dependency-version: 6.7.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: polars
  dependency-version: 1.40.1
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pyarrow
  dependency-version: 24.0.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  dependency-group: pip-dependencies
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:development
  dependency-group: pip-dependencies
- dependency-name: scipy
  dependency-version: 1.15.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:production
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-dependencies-f33fe58565 branch from 7697c94 to 6d38281 Compare May 22, 2026 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jtec