Skip to content

Bump the python-dependencies group with 17 updates#8

Merged
Taz33m merged 2 commits into
mainfrom
dependabot/pip/python-dependencies-ce5a514cd5
May 7, 2026
Merged

Bump the python-dependencies group with 17 updates#8
Taz33m merged 2 commits into
mainfrom
dependabot/pip/python-dependencies-ce5a514cd5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Updates the requirements on numba, pandas, pyarrow, psutil, plotly, dash, matplotlib, seaborn, pytest, pytest-benchmark, pytest-cov, build, black, flake8, tables, structlog and rich to permit the latest version.
Updates numba to 0.65.1

Release notes

Sourced from numba's releases.

0.65.1

Numba patch release, please refer to the detailed release notes here - https://numba.readthedocs.io/en/stable/release/0.65.1-notes.html

Commits
  • 9e3087a Merge pull request #10562 from swap357/release0.65
  • b99b8b2 Apply suggestions from review.
  • 0d1ffca update 0.65.1 release notes with entry for changelog update PR
  • 8aa8d3d update version support table for 0.65.1 release
  • 96ab95a update towncrier release notes for 0.65.1
  • 438935e Merge pull request #10547 from swap357/disable_sys_monitoring_py3144
  • 6ebcd9e Merge pull request #10507 from swap357/release0.65
  • 884380b add svml unsupported note
  • 156926e update release date on notes and version support table
  • 44ab541 Merge pull request #10481 from swap357/pin_deps_release0.65
  • Additional commits viewable in compare view

Updates pandas to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 9c8bc3e RLS: 2.3.3
  • 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
  • b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
  • 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
  • 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
  • 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
  • e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
  • e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
  • 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
  • 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
  • Additional commits viewable in compare view

Updates pyarrow to 24.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 24.0.0

Release Notes URL: https://arrow.apache.org/release/24.0.0.html

Commits
  • 31b4b6c MINOR: [Release] Update versions for 24.0.0
  • 06dbc17 MINOR: [Release] Update .deb/.rpm changelogs for 24.0.0
  • a021d80 MINOR: [Release] Update CHANGELOG.md for 24.0.0
  • 2d6b12c GH-49716: [C++] FixedShapeTensorType::Deserialize should strictly validate se...
  • a74cb6a GH-49697: [C++][CI] Check IPC file body bounds are in sync with decoder outco...
  • 871a0c6 GH-49676: [Python][Packaging] Fix gRPC docker image layer being too big for h...
  • f9203b3 GH-49586: [C++][CI] StructToStructSubset test failure with libc++ 22.1.1 (#49...
  • fe298b4 GH-49628: [Python][Interchange protocol] Suppress warnings for pandas 4.0.0 a...
  • 1f94910 GH-49252: [GLib] Deprecate Feather features (#49673)
  • 5ba5c3c GH-49671: [CI][Docs] Don't run jobs for push by Dependabot (#49672)
  • Additional commits viewable in compare view

Updates psutil to 7.2.2

Changelog

Sourced from psutil's changelog.

7.2.2 — 2026-01-28 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:2705: [Linux]: :meth:Process.wait now uses pidfd_open() + poll() (no busy loop). Requires Linux >= 5.3 and Python >= 3.9.
  • :gh:2705: [macOS], [BSD]: :meth:Process.wait now uses kqueue() (no busy loop).

Bug fixes

  • :gh:2701, [macOS]: fix compilation error on macOS < 10.7. (patch by :user:Sergey Fedorov <barracuda156>)
  • :gh:2707, [macOS]: fix potential memory leaks in error paths of :meth:Process.memory_full_info and :meth:Process.threads.
  • :gh:2708, [macOS]: :meth:Process.cmdline and :meth:Process.environ may fail with OSError: [Errno 0] Undefined error (from sysctl(KERN_PROCARGS2)). They now raise :exc:AccessDenied instead.

7.2.1 — 2025-12-29 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:2699, [FreeBSD], [NetBSD]: :func:heap_info does not detect small allocations (<= 1K). In order to fix that, we now flush internal jemalloc cache before fetching the metrics.

7.2.0 — 2025-12-23 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:1275: new :func:heap_info and :func:heap_trim functions, providing direct access to the platform's native C :term:heap allocator (glibc, mimalloc, libmalloc). Useful to create tools to detect memory leaks.
  • :gh:2403, [Linux]: publish wheels for Linux musl.
  • :gh:2680: unit tests are no longer installed / part of the distribution. They now live under tests/ instead of psutil/tests.

Bug fixes

  • :gh:2684, [FreeBSD], [critical]: compilation fails on FreeBSD 14 due to missing include.
  • :gh:2691, [Windows]: fix memory leak in :func:net_if_stats due to missing Py_CLEAR.

Compatibility notes

... (truncated)

Commits
  • 9eea97d Pre-release
  • 938ac64 Rm sphinxcontrib.googleanalytics; override layout.html
  • 9dcbb7e Add sphinxcontrib-googleanalytics to requirements.txt
  • 76eaf9a Try to add google analytics to doc
  • de1cafa Update doc mentioning Process.wait() internal details
  • bb30943 Refact can_use_pidfd_open() and can_use_kqueue()
  • a571717 #2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)
  • 8b98c3e Pre-release
  • 700b7e6 [macOS] fix potential leaks in error paths (#2707)
  • 7cc7923 Windows / cmdline(): be more defensive in free()ing in case of error
  • Additional commits viewable in compare view

Updates plotly to 6.7.0

Release notes

Sourced from plotly's releases.

v6.7.0

Added

  • Add facet_row support to px.imshow for creating subplots along an additional dimension [#5445], with thanks to @​FBumann for the contribution!

Fixed

  • Update numpy.percentile syntax to stop using deprecated alias [#5483], with thanks to @​Mr-Neutr0n for the contribution!
    • numpy with a version less than 1.22 is no longer supported.
  • Handle empty px.histogram by skipping None label in hover template [#5535], with thanks to @​tysoncung for the contribution!

Updated

  • Update plotly.js from version 3.4.0 to version 3.5.0. See the plotly.js release notes for more information. [#5565]. Notable changes include:
    • Add hoveranywhere and clickanywhere layout attributes to enable emitting hover and click events anywhere in the plot area, not just over traces [#7707]
    • Add displayNotifier configuration property to set the display of notifier in the top right area of the viewport [#7730]
    • Update USA location lookup for scattergeo and choropleth traces to use both location names and abbreviations [#7731]
Changelog

Sourced from plotly's changelog.

[6.7.0] - 2026-04-09

Added

  • Add facet_row support to px.imshow for creating subplots along an additional dimension [#5445], with thanks to @​FBumann for the contribution!

Fixed

  • Update numpy.percentile syntax to stop using deprecated alias [#5483], with thanks to @​Mr-Neutr0n for the contribution!
    • numpy with a version less than 1.22 is no longer supported.
  • Handle empty px.histogram by skipping None label in hover template [#5535], with thanks to @​tysoncung for the contribution!

Updated

  • Update plotly.js from version 3.4.0 to version 3.5.0. See the plotly.js release notes for more information. [#5565]. Notable changes include:
    • Add hoveranywhere and clickanywhere layout attributes to enable emitting hover and click events anywhere in the plot area, not just over traces [#7707]
    • Add displayNotifier configuration property to set the display of notifier in the top right area of the viewport [#7730]
    • Update USA location lookup for scattergeo and choropleth traces to use both location names and abbreviations [#7731]

[6.6.0] - 2026-03-02

Fixed

  • Remove unneeded type="text/javascript" attribute from <style> tag [#5454], with thanks to @​hannob for the contribution!
  • Remove global warning format side effect [#5481], with thanks to @​emmanuel-ferdman for the contribution!
  • Fix spurious engine deprecation warning in write_image [#5517], with thanks to @​mosh3eb for the contribution!

Updated

  • Update plotly.js from version 3.3.1 to version 3.4.0. See the plotly.js release notes for more information. [#5527]. Notable changes include:
    • Add support for clicking legend titles to toggle visibility of all traces in legend [#7698]
    • Add support for shapes to reference multiple axes [#7666]
    • Add support for dashed marker lines in scatter plots [#7673]
    • Increase axis autorange when bar charts have outside text labels, to avoid labels being clipped [#7675]

[6.5.2] - 2026-01-14

Fixed

  • Fix issue where pie trace legend, showlegend attributes don't accept array values [#5464 and #5465], with thanks to @​my-tien for the contribution!

[6.5.1] - 2026-01-07

Fixed

  • Fix issue where Plotly Express ignored trace-specific color sequences defined in templates via template.data.<trace_type> [#5437], with thanks to @​antonymilne for the contribution!

Updated

  • Speed up validate_gantt function [#5386], with thanks to @​misrasaurabh1 for the contribution!
  • Update plotly.js from version 3.3.0 to version 3.3.1. See the plotly.js release notes for more information. [#5456]. Notable changes include:
    • Add support for arrays for the pie properties showlegend and legend, so that these can be configured per slice. [#7580]

[6.5.0] - 2025-11-17

Updated

  • Update plotly.js from version 3.2.0 to version 3.3.0. See the plotly.js release notes for more information. [#5421]. Notable changes include:
    • Add hovertemplate for candlestick and ohlc traces [#7619]

... (truncated)

Commits
  • 1a2065a Add missing attributions
  • 8422e17 Add missing octothorpes
  • fa9116f Update Jupyter Lab extension files
  • c771ad5 Version changes for v6.7.0
  • 067b954 Merge pull request #5565 from plotly/cam/update-plotly.js-v3.5.0
  • 1b7de49 Update Jupyter support files
  • d605d3e chore: Update plotly.js to v3.5.0
  • 600f865 Merge pull request #5541 from plotly/migrate-to-gh-actions
  • 10c7c56 Merge pull request #5518 from mosh3eb/fix/broken-license-link-readme
  • ea813dd Merge branch 'main' into fix/broken-license-link-readme
  • Additional commits viewable in compare view

Updates dash to 4.1.0

Release notes

Sourced from dash's releases.

Dash v4.1.0

Added

  • #3637 Added debounce prop to Dropdown.

Fixed

  • #3629 Fix date pickers not showing date when initially rendered in a hidden container.
  • #3660 Allow same date to be selected for both start and end in DatePickerRange components
  • #3600 DatePicker support for the Moment.js Y year token
  • #3627 Make dropdowns searchable wheen focused, without requiring to open them first
  • #3656 Improved dropdown performance for large collections of options
  • #3643 Fix multiselect dropdown with components as labels
  • #3609 Add backward compat alias for _Wildcard
  • #3672 Improve browser performance when app contains a large number of pattern matching callback callbacks. Exposes an api endpoint to fetch the latest computeGraph call.
Changelog

Sourced from dash's changelog.

[4.1.0] - 2026-03-23

Added

  • #3637 Added debounce prop to Dropdown.

Fixed

  • #3629 Fix date pickers not showing date when initially rendered in a hidden container.
  • #3660 Allow same date to be selected for both start and end in DatePickerRange components
  • #3600 DatePicker support for the Moment.js Y year token
  • #3627 Make dropdowns searchable wheen focused, without requiring to open them first
  • #3656 Improved dropdown performance for large collections of options
  • #3643 Fix multiselect dropdown with components as labels
  • #3609 Add backward compat alias for _Wildcard
  • #3672 Improve browser performance when app contains a large number of pattern matching callback callbacks. Exposes an api endpoint to fetch the latest computeGraph call.

[4.0.0] - 2026-02-03

Added

  • Finalize all redesigned dash core components
  • Add a prop to sliders, allow_direct_input, that can be used to disable the inputs rendered with sliders.
  • Improve CSS styles in calendar when looking at selected dates outside the current calendar month (show_outside_days=True)

[4.0.0rc6] - 2026-01-07

Added

  • Restored missing implementation for with_portal and with_full_screen_portal in datepickers

Changed

  • Bugfixes for feedback received in rc5: notably, popovers are position: fixed once again.

[4.0.0rc5] - 2025-12-16

Added

  • #3464 Add folder upload functionality to dcc.Upload component. When multiple=True, users can now select and upload entire folders in addition to individual files. The folder hierarchy is preserved in filenames (e.g., folder/subfolder/file.txt). Files within folders are filtered according to the accept prop. Folder support is available in Chrome, Edge, and Opera; other browsers gracefully fall back to file-only mode. The uploaded files use the same output API as multiple file uploads.

Changed

  • Bugfixes for feedback received in rc4

[4.0.0rc4] - 2025-12-04

Added

  • New dcc.Button component that mirrors html.Button but with default styles applied

[4.0.0rc3] - 2025-11-27

  • Modernized dcc.Tabs
  • Modernized dcc.DatePickerSingle and dcc.DatePickerRange
  • DatePicker calendars can now accept translations as an external script, either with Dash's external_scripts or from the assets folder. See documentation for the underlying library that supports this.

Changed

... (truncated)

Commits
  • 6c500cd Merge pull request #3686 from plotly/master-4.1.0
  • 8830051 update build artifacts
  • 6a7bb4a Merge branch 'dev' into master-4.1.0
  • e33d2e4 Merge pull request #3685 from plotly/release/4.1.0
  • 4e70240 Merge branch 'dev' into release/4.1.0
  • 67992ea Merge pull request #3672 from BSd3v/fix/3661-compute-graphs2
  • 136e66c add missing changelog entry
  • 575c7f1 bump versions
  • ac5ca89 Merge branch 'dev' into fix/3661-compute-graphs2
  • aede54b Merge branch 'dev' into release/4.1.0
  • Additional commits viewable in compare view

Updates matplotlib to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Updates seaborn to 0.13.2

Release notes

Sourced from seaborn's releases.

v0.13.2 (January 2024)

This is a minor release containing internal changes that adapt to upcoming deprecations in pandas. All users are encouraged to update.

Commits

Updates pytest to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

Updates pytest-benchmark to 5.2.3

Changelog

Sourced from pytest-benchmark's changelog.

v5.2.3 (2025-11-09)

  • Add support for pytest 9.0.
  • Moved the README.rst/CHANGELOG.rst concatenation from setup.py to pyproject.toml.

v5.2.2 (2025-11-07)

  • Fixed auto-disable to work with newer xdist (pytest-benchmark auto disables benchmarks if xdist is enabled by design). Contributed by Thomas B. Brunner in [#294](https://github.com/ionelmc/pytest-benchmark/issues/294) <https://github.com/ionelmc/pytest-benchmark/pull/294>_.

v5.2.1 (2025-11-04)

  • Add markers so pytest doesn't try to assert-rewrite the plugin internals (fixes those pytest.PytestAssertRewriteWarning: Module already imported so cannot be rewritten; pytest_benchmark warnings).

v5.2.0 (2025-10-30)

  • Added support for a per-round teardown function to pedantic mode. Contributed Patrick Winter by [#264](https://github.com/ionelmc/pytest-benchmark/issues/264) <https://github.com/ionelmc/pytest-benchmark/pull/264>_.
  • Added --benchmark-time-unit option. Contributed by Tony Kuo in [#281](https://github.com/ionelmc/pytest-benchmark/issues/281) <https://github.com/ionelmc/pytest-benchmark/pull/281>_.
  • Fixed deprecated hook examples in docstrings. Contributed by Ali-Akber Saifee in [#284](https://github.com/ionelmc/pytest-benchmark/issues/284) <https://github.com/ionelmc/pytest-benchmark/pull/284>_.
  • Changed --benchmark-compare-fail to accept percentages higher than 100%. Contributed by Ben Avrahami in [#280](https://github.com/ionelmc/pytest-benchmark/issues/280) <https://github.com/ionelmc/pytest-benchmark/pull/280>_.
  • Added minimal typing support. Contributed by Sorin Sbarnea in [#290](https://github.com/ionelmc/pytest-benchmark/issues/290) <https://github.com/ionelmc/pytest-benchmark/pull/290>_.
  • Fixed support for Python 3.9. Contributed by Enno Gotthold in [#291](https://github.com/ionelmc/pytest-benchmark/issues/291) <https://github.com/ionelmc/pytest-benchmark/pull/291>_.
  • Replaced the complicated and broken code of pytest_benchmark.utils.clonefunc with a simple return of the input. That function was supposed to allow benchmarking with the cost of PyPy JIT included but it's a hassle to maintain.
  • Moved the instrumentation pause outside the round loops (in addition to tracing, profiling is paused too). Pedantic mode will keep doing this per round (as the user manually controls the round count). This is necessary because in some scenarios setting and unsetting the tracer too much will overflow an internal counter (found to cause "OverflowError: events set too many times" at least on Python 3.13).

v5.1.0 (2024-10-30)

  • Fixed broken hooks handling on pytest 8.1 or later (the TypeError: import_path() missing 1 required keyword-only argument: 'consider_namespace_packages' issue). Unfortunately this sets the minimum supported pytest version to 8.1.

v5.0.1 (2024-10-30)

  • Fixed bad fixture check that broke down then nbmake <https://pypi.org/project/nbmake/>_ was enabled.

... (truncated)

Commits
  • b857483 Bump version: 5.2.2 → 5.2.3
  • 7f5abf9 Add a note about the readme.
  • b8e5f53 Fix bad wrap.
  • 931d50f Add back some escapes. Oops.
  • d5c2f7e Add support for pytest 9.0. Fixes #295.
  • 9a3888a Move readme+changelog extraction to static pyproject config.
  • d34bf73 Bump version: 5.2.1 → 5.2.2
  • cf2ac34 Bump prek.
  • 8bfc327 Improve formatting (docutils chokes on those arguments with colons and bracke...
  • 190b487 Prefix all headings with letters to allow docutils or whatever generate stabl...
  • Additional commits viewable in compare view

Updates pytest-cov to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

  • Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

  • Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

7.0.0 (2025-09-09)

  • Dropped support for subprocesses measurement.

    It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

    To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

    .. code-block:: ini

    [run] patch = subprocess

    This release also requires at least coverage 7.10.6.

  • Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

  • Removed some not really necessary testing deps like six.

... (truncated)

Commits
  • 66c8a52 Bump version: 7.0.0 → 7.1.0
  • f707662 Make the examples use pypy 3.11.
  • 6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
  • 8ebf20b Update changelog.
  • 861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
  • fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
  • 78c9c4e Only run the 3.9 on older deps.
  • 4849a92 Punctuation.
  • 197c35e Update changelog and hopefully I don't forget to publish release again :))
  • 14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
  • Additional commits viewable in compare view

Updates build to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################


Features


  • Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes


  • Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous


  • :issue:1033

#################### 1.4.4 (2026-04-22) ####################


Bugfixes


  • Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
  • Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
  • Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
  • Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous


  • :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################


Features


... (truncated)

Commits

Updates black to 26.3.1

Release notes

Sourced from black's releases.

26.3.1

Stable style

  • Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

  • Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

  • Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)
Changelog

Sourced from black's changelog.

Version 26.3.1

Stable style

  • Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

  • Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

  • Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)

Version 26.3.0

Stable style

  • Don't double-decode input, causing non-UTF-8 files to be corrupted (#4964)
  • Fix crash on standalone comment in lambda default arguments (#4993)
  • Preserve parentheses when # type: ignore comments would be merged with other comments on the same line, preventing AST equivalence failures (#4888)

Preview style

  • Fix bug where if guards in case blocks were incorrectly split when the pattern had a trailing comma (#4884)
  • Fix string_processing crashing on unassigned long string literals with trailing commas (one-item tuples) (#4929)
  • Simplify implementation of the power operator "hugging" logic (#4918)

Packaging

  • Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in frozen environments (#4930)

Performance

  • Introduce winloop for windows as an alternative to uvloop (#4996)
  • Remove deprecated function uvloop.install() in favor of Description has been truncated


    Summary by cubic

    Update 17 Python dependencies to current stable versions and sync setup.py metadata/extras with the new pins for security, performance, and Python 3.14 readiness. Notable upgrades include dash 4.x and pytest 9.x; build now requires Python 3.10+.

    • Dependencies

      • Data: pandas 2.3.3, pyarrow 24.0.0.
      • Viz: plotly 6.7.0 (plotly.js 3.5.0), matplotlib 3.10.9, seaborn 0.13.2.
      • Perf/monitoring: numba 0.65.1, psutil 7.2.2.
      • Testing: pytest 9.0.3, pytest-benchmark 5.2.3, pytest-cov 7.1.0.
      • Dev/tools: black 26.3.1, flake8 7.3.0, build 1.5.0, structlog 25.5.0, rich 15.0.0, tables 3.10.1.
      • Synced extras in setup.py and requirements.txt to these versions; updated package description, keywords, and project URLs.
    • Migration

      • Use Python 3.10+ for packaging due to build 1.5.0 (update CI if needed).
      • Recreate or update test envs for pytest 9 and plugins.
      • Smoke-test Dash UIs after dash 4.x (dropdowns/date pickers changed).
      • Ensure numpy ≥ 1.22 for plotly 6.7.0 (current numpy pin satisfies this).

    Written for commit 6100ebf. Summary will update on new commits.

Updates the requirements on [numba](https://github.com/numba/numba), [pandas](https://github.com/pandas-dev/pandas), [pyarrow](https://github.com/apache/arrow), [psutil](https://github.com/giampaolo/psutil), [plotly](https://github.com/plotly/plotly.py), [dash](https://github.com/plotly/dash), [matplotlib](https://github.com/matplotlib/matplotlib), [seaborn](https://github.com/mwaskom/seaborn), [pytest](https://github.com/pytest-dev/pytest), [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [build](https://github.com/pypa/build), [black](https://github.com/psf/black), [flake8](https://github.com/pycqa/flake8), [tables](https://github.com/PyTables/PyTables), [structlog](https://github.com/hynek/structlog) and [rich](https://github.com/Textualize/rich) to permit the latest version.

Updates `numba` to 0.65.1
- [Release notes](https://github.com/numba/numba/releases)
- [Commits](numba/numba@0.58.0...0.65.1)

Updates `pandas` to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.0.0...v2.3.3)

Updates `pyarrow` to 24.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v12.0.0...apache-arrow-24.0.0)

Updates `psutil` to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v5.9.0...v7.2.2)

Updates `plotly` to 6.7.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v5.15.0...v6.7.0)

Updates `dash` to 4.1.0
- [Release notes](https://github.com/plotly/dash/releases)
- [Changelog](https://github.com/plotly/dash/blob/dev/CHANGELOG.md)
- [Commits](plotly/dash@v2.12.0...v4.1.0)

Updates `matplotlib` to 3.10.9
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.7.0...v3.10.9)

Updates `seaborn` to 0.13.2
- [Release notes](https://github.com/mwaskom/seaborn/releases)
- [Commits](mwaskom/seaborn@v0.12.0...v0.13.2)

Updates `pytest` to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@7.4.0...9.0.3)

Updates `pytest-benchmark` to 5.2.3
- [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst)
- [Commits](ionelmc/pytest-benchmark@v4.0.0...v5.2.3)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v4.1.0...v7.1.0)

Updates `build` to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.2.0...1.5.0)

Updates `black` to 26.3.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.1a1...26.3.1)

Updates `flake8` to 7.3.0
- [Commits](PyCQA/flake8@6.0.0...7.3.0)

Updates `tables` to 3.10.1
- [Release notes](https://github.com/PyTables/PyTables/releases)
- [Changelog](https://github.com/PyTables/PyTables/blob/v3.10.1/RELEASE_NOTES.rst)
- [Commits](PyTables/PyTables@v3.8.0...v3.10.1)

Updates `structlog` to 25.5.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@23.1.0...25.5.0)

Updates `rich` to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.4.0...v15.0.0)

---
updated-dependencies:
- dependency-name: numba
  dependency-version: 0.65.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pyarrow
  dependency-version: 24.0.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: plotly
  dependency-version: 6.7.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: dash
  dependency-version: 4.1.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: seaborn
  dependency-version: 0.13.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pytest-benchmark
  dependency-version: 5.2.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: black
  dependency-version: 26.3.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: tables
  dependency-version: 3.10.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 7, 2026
@dependabot dependabot Bot requested a review from Taz33m as a code owner May 7, 2026 11:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 7, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="requirements.txt">

<violation number="1" location="requirements.txt:17">
P2: These version bumps are out of sync with `setup.py` extras, so CI and editable installs still use older dependency constraints.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread requirements.txt
pytest>=7.4.0
pytest-benchmark>=4.0.0
pytest-cov>=4.1.0
pytest>=9.0.3
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: These version bumps are out of sync with setup.py extras, so CI and editable installs still use older dependency constraints.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At requirements.txt, line 17:

<comment>These version bumps are out of sync with `setup.py` extras, so CI and editable installs still use older dependency constraints.</comment>

<file context>
@@ -1,37 +1,37 @@
-pytest>=7.4.0
-pytest-benchmark>=4.0.0
-pytest-cov>=4.1.0
+pytest>=9.0.3
+pytest-benchmark>=5.2.3
+pytest-cov>=7.1.0
</file context>

@Taz33m Taz33m merged commit 0416458 into main May 7, 2026
3 checks passed
@Taz33m Taz33m deleted the dependabot/pip/python-dependencies-ce5a514cd5 branch May 7, 2026 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant