Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 6 updates - #10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f40d82c1ed
Open

chore(deps): bump the python-dependencies group across 1 directory with 6 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f40d82c1ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 6 updates in the / directory:

Package From To
pandas 3.0.3 3.0.5
numpy 2.5.1 2.5.2
streamlit 1.59.2 1.62.0
pyarrow 24.0.0 25.0.1
ruff 0.15.22 0.16.4
ty 0.0.61 0.0.73

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates numpy from 2.5.1 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhijeetsingh Meena +
  • Charalampos Stratakis
  • Charles Harris
  • Chris Ninham +
  • David Woods
  • Geonho +
  • Gopu Yeshwanth Reddy +
  • Iason Krommydas
  • Ijtihed Kilani
  • Jelle Zijlstra +
  • Joren Hammudoglu
  • Kumar Aditya
  • Mike Boyle
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg

... (truncated)

Commits
  • 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
  • ecf599c Merge pull request #32221 from charris/backport-32151
  • 3c7ac97 Merge pull request #32220 from charris/backport-32205
  • 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
  • 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
  • c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
  • 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
  • d8262bc MAINT: Update cibuildwheel to v4.2.0
  • 988d94d Merge pull request #32158 from charris/backport-32133
  • b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
  • Additional commits viewable in compare view

Updates streamlit from 1.59.2 to 1.62.0

Release notes

Sourced from streamlit's releases.

1.62.0

What's Changed

Breaking Changes 🛠

New Features 🎉

Bug Fixes 🐛

Other Changes

... (truncated)

Commits
  • 5a6be2b Up version to 1.62.0
  • 576fcde [fix] date_input and datetime_input overflow styling in narrow containers...
  • 5261cd8 [fix] Restore metric sparkline after empty chart data (#16543)
  • 3bea909 [feature] Add wrap parameter to st.multiselect (#16509)
  • 98b2ff8 [refactor] Use Starlette 1.5 native gzip media/range handling (#16462)
  • 54435f1 Remove BaseWeb and related dependencies (#16514)
  • 96dae80 [feature] Add in-error install-skills callout (#15693)
  • ae7786d Add TimeField to DateTimeInput calendar popover (#16502)
  • 72385a2 [spec] Add type="step" for st.expander and st.status (#14875)
  • 653c13e Bump ruff from 0.16.2 to 0.16.3 in the python-ruff group (#16552)
  • Additional commits viewable in compare view

Updates pyarrow from 24.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Apache Arrow 25.0.0

Release Notes URL: https://arrow.apache.org/release/25.0.0.html

Apache Arrow 25.0.0 RC1

Release Notes: Release Candidate: 25.0.0 RC1

Commits

Updates ruff from 0.15.22 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates ty from 0.0.61 to 0.0.73

Release notes

Sourced from ty's releases.

0.0.73

Release Notes

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.73

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
d6b69b9 
…th 6 updates

Bumps the python-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.3` | `3.0.5` |
| [numpy](https://github.com/numpy/numpy) | `2.5.1` | `2.5.2` |
| [streamlit](https://github.com/streamlit/streamlit) | `1.59.2` | `1.62.0` |
| [pyarrow](https://github.com/apache/arrow) | `24.0.0` | `25.0.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.4` |
| [ty](https://github.com/astral-sh/ty) | `0.0.61` | `0.0.73` |



Updates `pandas` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

Updates `numpy` from 2.5.1 to 2.5.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.1...v2.5.2)

Updates `streamlit` from 1.59.2 to 1.62.0
- [Release notes](https://github.com/streamlit/streamlit/releases)
- [Commits](streamlit/streamlit@1.59.2...1.62.0)

Updates `pyarrow` from 24.0.0 to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.1)

Updates `ruff` from 0.15.22 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.16.4)

Updates `ty` from 0.0.61 to 0.0.73
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.61...0.0.73)

---
updated-dependencies:
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: numpy
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: streamlit
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants