Skip to content

chore(deps)(deps): bump the python-versions group across 1 directory with 24 updates - #1052

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-678b2d3810
Open

chore(deps)(deps): bump the python-versions group across 1 directory with 24 updates#1052
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-678b2d3810

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-versions group with 22 updates in the / directory:

Package From To
huggingface-hub 1.20.1 1.25.1
poethepoet 0.46.0 0.48.0
pypi-attestations 0.0.29 0.0.30
jupytext 1.19.4 1.19.5
scipy-stubs 1.17.1.5 1.18.0.1
ipython 9.14.1 9.15.0
matplotlib 3.11.0 3.11.1
pydata-sphinx-theme 0.19.0 0.20.0
sphinx-autodoc-typehints 3.11.0 3.13.0
sphinxcontrib-mermaid 2.0.2 2.1.0
apache-airflow 3.2.2 3.3.0
dagster 1.13.10 1.13.16
plotly 6.8.0 6.9.0
tqdm 4.68.3 4.70.0
s3fs 2026.6.0 2026.7.0
numpy 2.4.6 2.5.1
onnxruntime 1.27.0 1.28.0
nvidia-cudnn-cu12 9.23.2.1 9.24.0.43
onnxruntime-gpu 1.27.0 1.28.0
holidays 0.99 0.101
scipy 1.17.1 1.18.0
lightgbm 4.6.0 4.7.0

Updates huggingface-hub from 1.20.1 to 1.25.1

Release notes

Sourced from huggingface-hub's releases.

[v1.25.0] Auto-named Jobs, smarter progress bars & cache diagnostics

🏷️ Auto-named Jobs on creation

Jobs now get an automatic name when you don't provide one explicitly, derived from the Docker image (or UV script) plus a short hash of the command line. This means reruns of the same command share a consistent name, while different commands get distinct names — making it much easier to find and group related jobs in the UI or CLI. Names follow the server-side character rules: :, / and . in image tags are replaced with - so python:3.12 foo --truc becomes python-3-12-7c6db949. Explicit --name still takes precedence.

>>> hf jobs run --detach python:3.12 foo --truc
  id: 6a60b85c13e6ef894d54b949
Hint: Job auto-named 'python-3-12-7c6db949'. Pass `--name` or run `hf jobs labels <id> --name` to rename.

📚 Documentation: Jobs guide, CLI guide

🔧 Other QoL Improvements

📖 Documentation

🐛 Bug and typo fixes

  • [Repocard] Fix catastrophic backtracking (ReDoS) in REGEX_YAML_BLOCK by @​sohumt123 in #4526
  • Fix Windows crash when downloading into a deep local_dir by @​askalf in #4546
  • [Fix] Do not fail on create space if exists_ok=True and 402 Payment required error by @​Wauplin in #4539
  • [Repocard] Preserve order of appended keys in CardData.to_yaml by @​rahulrshetty45 in #4561
  • [HfFileSystem] Raise FileNotFoundError when streaming a missing file by @​rahulrshetty45 in #4562
  • [Upload] Forward token in _final_commit_info repo_info lookup by @​Wauplin in #4572

🏗️ Internal

[v1.24.0] Name your Jobs! (and download fixes)

📊 Name your Jobs!

Jobs on the Hub now support an optional --name flag on the CLI and a name parameter on the Python API (run_job, run_uv_job, create_scheduled_job, create_scheduled_uv_job). Names are stored as the name label and make Jobs easier to find and identify in the UI. You can also name an existing Job using hf jobs labels <job_id> --name my-job. Names are optional and do not need to be unique.

# Create a named Job
hf jobs run --name training-v2 python:3.12 python train.py
</tr></table>

... (truncated)

Commits
  • 9bf0595 Release: v1.25.1
  • aace894 [Sandbox] Don't inject the HF token in sandbox jobs as SBX_DL_TOKEN (#4583)
  • 16fffe4 Release: v1.25.0
  • 61a0164 Release: v1.25.0.rc0
  • 922b819 [Repocard] Fix catastrophic backtracking (ReDoS) in REGEX_YAML_BLOCK (#4526)
  • e8bb319 [Upload] Forward token in _final_commit_info repo_info lookup (#4572)
  • d5c4425 [HfFileSystem] Raise FileNotFoundError when streaming a missing file (#4562)
  • 1ae04ff [Jobs] Auto-name Jobs on creation (#4566)
  • 74213cb [Repocard] Preserve order of appended keys in CardData.to_yaml (#4561)
  • 3a60f15 [Download] [Fix] Update file-count progress bar on completion (#4560)
  • Additional commits viewable in compare view

Updates poethepoet from 0.46.0 to 0.48.0

Release notes

Sourced from poethepoet's releases.

0.48.0

Enhancements

Full Changelog: nat-n/poethepoet@v0.47.1...v0.48.0

0.47.1

Fixes

Full Changelog: nat-n/poethepoet@v0.47.0...v0.47.1

0.47.0

Enhancements

Fixes

AI Agent Skill 🤖

Install the skill via one of the following methods:

  1. Via a built in poe task (similar to how shell completions are installed):
poe _install_skill                          # auto-detects .claude/.codex/.pi/.agents and prompts
poe _install_skill ~/.claude/skills         # explicit path (substitute your agent's dir)
poe _install_skill <skills-dir> --upgrade   # non-interactive upgrade (skips if same/newer)
  1. From github via npx skills
npx skills add https://github.com/nat-n/poethepoet/tree/v0.46.0/poethepoet/skills/poethepoet

Full Changelog: nat-n/poethepoet@v0.46.0...v0.47.0

Commits
  • e4d032c Bump version to 0.48.0
  • e7a31be feat: Add uses_env task option for loading variables from a task's output (...
  • 1fb4f8d Bump version to 0.47.1
  • 88efc0a chore: regenerate JSON Schema
  • b151b09 fix(args): restore default for absent multiple positional args (#409)
  • d2f9c11 fix: schema generation for strict validation
  • 9231083 Bump version to 0.47.0
  • 994d8ed docs(skill): improve and document SKILL.md based on feedback (#404)
  • 0478c10 fix(args): support all three CLI styles for multi-value args (#402)
  • 8dc4399 feat: respect the FORCE_COLOR environment variable (#403)
  • Additional commits viewable in compare view

Updates pypi-attestations from 0.0.29 to 0.0.30

Release notes

Sourced from pypi-attestations's releases.

v0.0.30

What's Changed

New Contributors

Full Changelog: pypi/pypi-attestations@v0.0.29...v0.0.30

Changelog

Sourced from pypi-attestations's changelog.

[0.0.30]

Added

  • Support for CircleCI attestations (#166). This is work aligned with adding CircleCI as a Trusted Publisher in pypi. (#19349)

Changed

  • Updated the minimum supported sigstore dependency to 4.5.
Commits
  • 845bfac Update min sigstore version to 4.5.0 (#199)
  • 7de43dd build(deps): bump the actions group with 2 updates (#198)
  • 74b2380 build(deps): bump actions/checkout in the actions group (#197)
  • 10a08b3 build(deps): bump zizmorcore/zizmor-action in the actions group (#196)
  • 401c0a1 build(deps): bump actions/attest-build-provenance in the actions group (#195)
  • d9d2400 build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the actions gro...
  • c7c7685 build(deps): bump zizmorcore/zizmor-action in the actions group (#193)
  • dada8e6 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the actions group (...
  • 1ec1381 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the actions group (...
  • bec4c17 build(deps): bump zizmorcore/zizmor-action in the actions group (#189)
  • Additional commits viewable in compare view

Updates sigstore from 4.3.0 to 4.5.0

Release notes

Sourced from sigstore's releases.

v4.5.0

What's Changed

Full Changelog: sigstore/sigstore-python@v4.4.0...v4.5.0

v4.4.0

What's Changed

Changed

  • sigstore no longer limits the upper-bound of cryptography in order to be less disruptive to downstream integrators. (#1811)

Fixed

  • Fixed generation of invalid CSRs when the identity is not ASCII (for example a GitHub Actions sub claim containing a non-ASCII environment name). The CSR subject is unused by Fulcio, so it is now omitted entirely (#1507)

New Contributors

Full Changelog: sigstore/sigstore-python@v4.3.0...v4.4.0

Changelog

Sourced from sigstore's changelog.

[4.5.0]

Fixed

  • Signing reuses a valid cached certificate before checking whether the OIDC identity token has expired. (#1838)
  • A malformed checkpoint in a bundle's inclusion proof now raises VerificationError during verification, instead of leaking a raw ValueError or binascii.Error (#1826)

[4.4.0]

Changed

  • sigstore no longer limits the upper-bound of cryptography in order to be less disruptive to downstream integrators. (#1811)

Fixed

  • Fixed generation of invalid CSRs when the identity is not ASCII (for example a GitHub Actions sub claim containing a non-ASCII environment name). The CSR subject is unused by Fulcio, so it is now omitted entirely (#1507)
Commits
  • 181074f Prepare 4.5 release (#1841)
  • 85f1bfa build(deps): bump the actions group across 1 directory with 5 updates (#1843)
  • a087e06 build(deps): bump platformdirs from 4.10.0 to 4.10.1 (#1842)
  • 96991da build(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#1840)
  • e43c4fa build(deps): bump pyasn1 from 0.6.3 to 0.6.4 (#1831)
  • c079a63 build(deps): bump pillow from 12.2.0 to 12.3.0 (#1836)
  • 586442f build(deps-dev): bump ruff from 0.15.20 to 0.15.22 (#1837)
  • efa023f build(deps): bump requests from 2.34.0 to 2.34.2 (#1801)
  • aa3c7a3 Return cached cert first when signing (#1838)
  • 8b26c92 build(deps-dev): bump mypy from 2.1.0 to 2.3.0 (#1834)
  • Additional commits viewable in compare view

Updates jupytext from 1.19.4 to 1.19.5

Release notes

Sourced from jupytext's releases.

Version 1.19.5

Changed

  • Harden the github action (#1569). Thanks to Peyton Murray for this PR
  • The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
  • zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
  • Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

  • Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
  • Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

  • marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!
Changelog

Sourced from jupytext's changelog.

1.19.5 (2026-07-21)

Changed

  • Harden the github action (#1569). Thanks to Peyton Murray for this PR
  • The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
  • zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
  • Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

  • Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
  • Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

  • marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!
Commits
  • 3132c6c Version 1.19.5
  • d8d4d14 build(deps): bump axios from 1.16.0 to 1.18.1 in /jupyterlab in the jupytext-...
  • 1a6fde9 build(deps): bump the actions-dependencies group with 3 updates
  • 0068463 build(deps): bump astro
  • 58c1eb9 build(deps): bump the jupytext-extension-dependencies group across 2 director...
  • af6134e Migrate to jupyter-builder for building frontend extension (#1590)
  • bb0de16 build(deps): bump the actions-dependencies group across 1 directory with 8 up...
  • 555b4c2 avoid quadratic backtracking in help/bash magic regex
  • f24a3b7 reuse secure temp files in marimo_py_to_notebook
  • d53e2f1 Require zizmor and precommit on ci (#1594)
  • Additional commits viewable in compare view

Updates scipy-stubs from 1.17.1.5 to 1.18.0.1

Release notes

Sourced from scipy-stubs's releases.

v1.18.0.1

This scipy-stubs release fixes many bugs and comes with several improvements. It targets SciPy 1.18.0 and supports Python 3.12-3.14, NumPy 2.0-2.7, and optype 0.15-0.19.

What's Changed

⏬ SciPy 1.18 Changes

✨ Improvements

🐛 Fixes

... (truncated)

Commits
  • 2dc1cf2 🔖 scipy-stubs 1.18.0.1
  • 5739cd0 Merge pull request #1982 from scipy:update-project-metadata-description
  • bb96f4c 💬 update project metadata description
  • 54b75cf Merge pull request #1981 from scipy:bump-optype
  • a3b7d6e ⬆️ increase optype lower bound from 0.14 to 0.15
  • c35220e Merge pull request #1980 from scipy:bump-dev-deps
  • dcc2983 🙈 add # ty: ignore for an inevitable LSP error
  • 0f12f90 🩹 work around new ty false positives for the optype JustFloat types.
  • f560300 ⬆️ upgrade development dependencies
  • 108f737 Merge pull request #1979 from scipy:gh-1829
  • Additional commits viewable in compare view

Updates ipython from 9.14.1 to 9.15.0

Commits
  • 2273f39 release 9.15.0
  • 4774918 fix
  • 4bec98b update whatsnew
  • 42fcfe4 [3.11] Skip stup for Numpy that is not using > 3.11 syntax
  • b5da9ac fix: clarify tk simple-prompt gui message
  • 00bcdee fix: don't let kitty graphics detection crash IPython startup
  • 60f2e26 Fix #12726: %run honors quotes when expanding glob args
  • 3ea7aa6 Strip ANSI escape sequences from Sphinx directive output
  • 9b7d419 Add %xmode Doctest mode for doctest friendly tracebacks
  • fdbdf1c Increase codecov threshold to 0.2% to avoid false PR failures
  • Additional commits viewable in compare view

Updates matplotlib from 3.11.0 to 3.11.1

Release notes

Sourced from matplotlib's releases.

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Fix tight layout of multiple subplots with sharey=True
  • Fix NoNorm cursor formatting for uint8 images
  • Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)
  • Fix clipped Axis labels on 3D plots with tight layout
  • Fix inverted Axis on 3D plots
  • Fix restoring 'auto' aspect in 3D axes after switching from 'equal'
  • Fix missing glyphs when subsetting Type 1 fonts in PDF
  • Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

Commits
  • 3c1757a REL: v3.11.1
  • 792c6b5 DOC: Prepare for 3.11.1
  • aaff9f6 Merge branch 'v3.11.0-doc' into v3.11.x
  • d4f4527 Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...
  • 6ad4bcf Merge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...
  • 7fb74d3 Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...
  • c624aec Backport PR #32038: Fix occasional misalignment in reported mouse position (a...
  • 8eda2b7 Backport PR #32037: Bump the actions group with 3 updates
  • a0e7ae5 Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...
  • 9001323 Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...
  • Additional commits viewable in compare view

Updates pydata-sphinx-theme from 0.19.0 to 0.20.0

Release notes

Sourced from pydata-sphinx-theme's releases.

v0.20.0

What's Changed

🔴 Breaking

Fixes

Internal tooling

Dependencies

New Contributors

Full Changelog: pydata/pydata-sphinx-theme@v0.19.0...v0.20.0

Commits

Updates sphinx-autodoc-typehints from 3.11.0 to 3.13.0

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.13.0

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.11.1...3.13.0

3.11.1

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.12.1...3.11.1

Commits
  • 39e9e1c 👷 ci(python): test against Python 3.15 beta (#735)
  • 6620c76 [pre-commit.ci] pre-commit autoupdate (#734)
  • 1463cb4 Replace prettier with mdformat and yamlfmt (#733)
  • 2275416 🐛 fix(overloads): keep summary above overloads (#731)
  • 543af34 🐛 fix(annotations): use py:class for types on 3.13+ (

…with 24 updates

Bumps the python-versions group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.20.1` | `1.25.1` |
| [poethepoet](https://github.com/nat-n/poethepoet) | `0.46.0` | `0.48.0` |
| [pypi-attestations](https://github.com/pypi/pypi-attestations) | `0.0.29` | `0.0.30` |
| [jupytext](https://github.com/jupytext/jupytext) | `1.19.4` | `1.19.5` |
| [scipy-stubs](https://github.com/scipy/scipy-stubs) | `1.17.1.5` | `1.18.0.1` |
| [ipython](https://github.com/ipython/ipython) | `9.14.1` | `9.15.0` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.11.0` | `3.11.1` |
| [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.19.0` | `0.20.0` |
| [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.11.0` | `3.13.0` |
| [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) | `2.0.2` | `2.1.0` |
| [apache-airflow](https://github.com/apache/airflow) | `3.2.2` | `3.3.0` |
| [dagster](https://github.com/dagster-io/dagster) | `1.13.10` | `1.13.16` |
| [plotly](https://github.com/plotly/plotly.py) | `6.8.0` | `6.9.0` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.3` | `4.70.0` |
| [s3fs](https://github.com/fsspec/s3fs) | `2026.6.0` | `2026.7.0` |
| [numpy](https://github.com/numpy/numpy) | `2.4.6` | `2.5.1` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.27.0` | `1.28.0` |
| [nvidia-cudnn-cu12](https://developer.nvidia.com/cuda-zone) | `9.23.2.1` | `9.24.0.43` |
| [onnxruntime-gpu](https://github.com/microsoft/onnxruntime) | `1.27.0` | `1.28.0` |
| [holidays](https://github.com/vacanza/holidays) | `0.99` | `0.101` |
| [scipy](https://github.com/scipy/scipy) | `1.17.1` | `1.18.0` |
| [lightgbm](https://github.com/lightgbm-org/LightGBM) | `4.6.0` | `4.7.0` |



Updates `huggingface-hub` from 1.20.1 to 1.25.1
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.20.1...v1.25.1)

Updates `poethepoet` from 0.46.0 to 0.48.0
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.46.0...v0.48.0)

Updates `pypi-attestations` from 0.0.29 to 0.0.30
- [Release notes](https://github.com/pypi/pypi-attestations/releases)
- [Changelog](https://github.com/pypi/pypi-attestations/blob/main/CHANGELOG.md)
- [Commits](pypi/pypi-attestations@v0.0.29...v0.0.30)

Updates `sigstore` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/sigstore-python@v4.3.0...v4.5.0)

Updates `jupytext` from 1.19.4 to 1.19.5
- [Release notes](https://github.com/jupytext/jupytext/releases)
- [Changelog](https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md)
- [Commits](jupytext/jupytext@v1.19.4...v1.19.5)

Updates `scipy-stubs` from 1.17.1.5 to 1.18.0.1
- [Release notes](https://github.com/scipy/scipy-stubs/releases)
- [Commits](scipy/scipy-stubs@v1.17.1.5...v1.18.0.1)

Updates `ipython` from 9.14.1 to 9.15.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.14.1...9.15.0)

Updates `matplotlib` from 3.11.0 to 3.11.1
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.0...v3.11.1)

Updates `pydata-sphinx-theme` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases)
- [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md)
- [Commits](pydata/pydata-sphinx-theme@v0.19.0...v0.20.0)

Updates `sphinx-autodoc-typehints` from 3.11.0 to 3.13.0
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@3.11.0...3.13.0)

Updates `sphinxcontrib-mermaid` from 2.0.2 to 2.1.0
- [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md)
- [Commits](mgaitan/sphinxcontrib-mermaid@2.0.2...2.1.0)

Updates `apache-airflow` from 3.2.2 to 3.3.0
- [Release notes](https://github.com/apache/airflow/releases)
- [Changelog](https://github.com/apache/airflow/blob/main/docker-stack-docs/changelog.rst)
- [Commits](apache/airflow@3.2.2...3.3.0)

Updates `dagster` from 1.13.10 to 1.13.16
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.10...1.13.16)

Updates `dagster-webserver` from 1.13.10 to 1.13.16
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.10...1.13.16)

Updates `plotly` from 6.8.0 to 6.9.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v6.8.0...v6.9.0)

Updates `tqdm` from 4.68.3 to 4.70.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.3...v4.70.0)

Updates `s3fs` from 2026.6.0 to 2026.7.0
- [Changelog](https://github.com/fsspec/s3fs/blob/main/release-procedure.md)
- [Commits](https://github.com/fsspec/s3fs/commits/2026.7.0)

Updates `numpy` from 2.4.6 to 2.5.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.6...v2.5.1)

Updates `onnxruntime` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.27.0...v1.28.0)

Updates `nvidia-cudnn-cu12` from 9.23.2.1 to 9.24.0.43

Updates `onnxruntime-gpu` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.27.0...v1.28.0)

Updates `holidays` from 0.99 to 0.101
- [Release notes](https://github.com/vacanza/holidays/releases)
- [Changelog](https://github.com/vacanza/holidays/blob/dev/CHANGES.md)
- [Commits](vacanza/holidays@v0.99...v0.101)

Updates `scipy` from 1.17.1 to 1.18.0
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.17.1...v1.18.0)

Updates `lightgbm` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/lightgbm-org/LightGBM/releases)
- [Commits](lightgbm-org/LightGBM@v4.6.0...v4.7.0)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 1.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: poethepoet
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: pypi-attestations
  dependency-version: 0.0.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: sigstore
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: jupytext
  dependency-version: 1.19.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: scipy-stubs
  dependency-version: 1.18.0.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: ipython
  dependency-version: 9.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: matplotlib
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: pydata-sphinx-theme
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: sphinxcontrib-mermaid
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: apache-airflow
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: dagster
  dependency-version: 1.13.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: dagster-webserver
  dependency-version: 1.13.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: plotly
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: tqdm
  dependency-version: 4.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: s3fs
  dependency-version: 2026.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: numpy
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: onnxruntime
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: nvidia-cudnn-cu12
  dependency-version: 9.24.0.43
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: onnxruntime-gpu
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: holidays
  dependency-version: '0.101'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: scipy
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: lightgbm
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from a team August 3, 2026 04:38
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 3, 2026
@sonarqubecloud

sonarqubecloud Bot commented Aug 3, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants