Bump the python-deps group across 1 directory with 6 updates by dependabot[bot] · Pull Request #8 · Martinoor/datascience

dependabot · 2026-10-21T09:45:40Z

Bumps the python-deps group with 6 updates in the / directory:

Package	From	To
numpy	`2.5.3`	`2.5.4`
pandas	`3.0.5`	`3.0.6`
pyarrow	`25.0.1`	`26.0.0`
streamlit	`1.64.0`	`1.66.0`
pre-commit	`4.6.2`	`4.7.0`
ruff	`0.16.7`	`0.17.1`

Updates numpy from 2.5.3 to 2.5.4

Release notes

Sourced from numpy's releases.

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Released on 2026-10-10.

NumPy 2.5.4 is a patch release that fixes bugs discovered after the 2.5.3 release. Highlights are:

Many typing fixes and improvements,

A workaround for the MSVC 19.51 bug, see below.

This release supports Python versions 3.12-3.15.

Improvements

numpy.linalg.svd and numpy.linalg.lstsq now raise for inputs containing infinities instead of returning garbage results.

Fixed hangs in numpy.linalg.svd and numpy.linalg.lstsq for certain inputs containing infinities for recent versions of some LAPACK implementations.

numpy.linalg.cond now handles non-finite inputs more consistently.

(gh-32593)

StringDType hashing with NaN sentinels

StringDType instances with equivalent floating-point NaN sentinels now have equal hashes. Previously, distinct NaN objects could produce equal dtype instances with different hashes, causing dictionary lookups and set deduplication to fail.

(gh-32563)

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

A fill_value copied from a source array is now reset to the default fill_value for the new dtype when it cannot be represented in that dtype. Previously the copied value could be stale: ufuncs that change dtype left the result holding a fill_value typed for the old dtype, which raised a TypeError only when something later validated it (such as .view()), and a floating point fill_value that overflows an integer dtype was kept as an out-of-range value together with a RuntimeWarning. Both now fall back to the default, including when a masked array is passed to MaskedArray with a different dtype. A fill_value given explicitly by the user is still validated and raises as before. This can now raise a ComplexWarning if the fill_value is complex and the new dtype is real.

... (truncated)

Commits

a3d0ef1 Merge pull request #32969 from charris/prepare-2.5.4
087b536 MAINT: Make OpenBLAS version check use 2.5.x branch.
91acd87 REL: Prepare for the NumPy 2.5.4 release.
9cc555b Merge pull request #32956 from charris/backport-typing-1
e04b972 TYP: dtype[void].names: allow setting with list (#32943)
d929969 TYP: timedelta64: datetime.timedelta construction isn't deprecated (#...
839467f TYP: ma.getmaskarray: accept array-likes (#32934)
64b721b TYP: polynomial: accept scalar coef in the poly constructors (#32931)
06b7ad2 TYP: void: accept any dtype: str in constructor calls (#32928)
c7bcd2c TYP: place: widen mask (#32926)
Additional commits viewable in compare view

Updates pandas from 3.0.5 to 3.0.6

Release notes

Sourced from pandas's releases.

pandas 3.0.6

We are pleased to announce the release of pandas 3.0.6. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version. This is also the first release to support Python 3.15.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

2905718 RLS: 3.0.6
3188ced [backport 3.0.x] BUG: read_csv(sep=None) raised TypeError instead of falling...
f097905 DOC: cleanup 3.0.6 whatsnew + mention Python 3.15 support (#68965) (#68969)
4f68223 [backport 3.0.x] BUG: fix setting with bool column mask into 1-column DataFra...
e3df0e8 [backport 3.0.x] BUG: full-slice setitem into a pyarrow-backed array shared m...
b7735f6 Backport PR #66117 on branch 3.0.x (BUG: interpolate leaving NAs unfilled for...
bca0b77 [backport 3.0.x] BUG: read_csv leaked the string-intern table when a column f...
bca1e5d [backport 3.0.x] BUG: prevent external mutation of RangeIndex._data (CoW) (#6...
c95b42c [3.0.x] CI: skip cython-lint on pre-commit.ci (#68910)
9cbd884 [backport 3.0.x] Backport of some already merged regression fixes (#68447)
Additional commits viewable in compare view

Updates pyarrow from 25.0.1 to 26.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 26.0.0

Release Notes URL: https://arrow.apache.org/release/26.0.0.html

Apache Arrow 26.0.0 RC0

Release Notes: Release Candidate: 26.0.0 RC0

Commits

4461671 MINOR: [Release] Update versions for 26.0.0
9d03a26 MINOR: [Release] Update .deb/.rpm changelogs for 26.0.0
5ce3c95 MINOR: [Release] Update CHANGELOG.md for 26.0.0
28e6c67 GH-51687: [C++] Skipt tests that require threads if ARROW_ENABLE_THREADING=OF...
12409f8 GH-51682: [CI][C++] Add liburiparser-dev to system dependency image (#51683)
1deceed GH-51675: [Python][Packaging] Apply upstream fix to UriParser from vcpkg and ...
cca44b5 GH-51638: [CI][C++][Parquet] Update expected JSON output in parquet-reader-te...
5183e21 GH-46901: [C++][Compute] Add remainder and modulo kernels (#48914)
f0d043c MINOR: [Docs][C++] Fix doxygenfile path for arrow/flight/transport.h (#51677)
17be9c7 GH-51652: [Python] Add NumPy StringDType to Arrow conversion (#51157)
Additional commits viewable in compare view

Updates streamlit from 1.64.0 to 1.66.0

Release notes

Sourced from streamlit's releases.

1.66.0

What's Changed

New Features 🎉

[feature] Add on_change="ignore" mode to st.color_picker by @lukasmasuch in streamlit/streamlit#17209

[feature] Add AppTest support for st.form by @lukasmasuch in streamlit/streamlit#17229

[feature] Add on_change="ignore" mode to st.camera_input by @lukasmasuch in streamlit/streamlit#17246

[feature] Add on_change="ignore" to datetime_input by @lukasmasuch in streamlit/streamlit#17267

[feature] Add on_change="ignore" mode to st.feedback by @lukasmasuch in streamlit/streamlit#17281

[fix] Add AppTest support for link_button, page_link by @lukasmasuch in streamlit/streamlit#17308

[feature] Add on_change="ignore" mode to st.pills by @lukasmasuch in streamlit/streamlit#17307

[feature] Add on_change="ignore" mode to st.audio_input by @lukasmasuch in streamlit/streamlit#17328

[feature] Add theme config paddingTop and paddingBottom by @mayagbarnes in streamlit/streamlit#17350

[feature] Add on_change="ignore" mode to st.data_editor by @lukasmasuch in streamlit/streamlit#17347

[feature] Add on_change="ignore" mode to st.pagination by @lukasmasuch in streamlit/streamlit#17397

[feature] Add shell landmarks, skip link, and focus ring by @mayagbarnes in streamlit/streamlit#17418

[feature] Add on_change="ignore" to st.segmented_control by @lukasmasuch in streamlit/streamlit#17452

Bug Fixes 🐛

[fix] Unify secondary icon button colors by @mayagbarnes in streamlit/streamlit#17231

[fix] Hide decorative icons and name icon-only controls by @mayagbarnes in streamlit/streamlit#17170

[fix] Align st.connection overloads with runtime by @lukasmasuch in streamlit/streamlit#17245

[fix] Make AppTest layout collections callable by @lukasmasuch in streamlit/streamlit#17256

[fix] Add AppTest support for progress, html, help by @lukasmasuch in streamlit/streamlit#17280

[fix] Show label tooltips only when clipped by @lukasmasuch in streamlit/streamlit#17266

[fix] Move sidebar aria-expanded onto collapse controls by @mayagbarnes in streamlit/streamlit#17293

[fix] Move date/datetime aria-expanded onto calendar buttons by @mayagbarnes in streamlit/streamlit#17294

[fix] Revoke disabled download-button callables by @lukasmasuch in streamlit/streamlit#17288

[fix] Keep AppTest page widget state on rerun by @lukasmasuch in streamlit/streamlit#17305

[fix] Align pydeck tooltips with the cursor by @lukasmasuch in streamlit/streamlit#17313

[fix] Put date and datetime calendar buttons in tab order by @mayagbarnes in streamlit/streamlit#17296

[fix] st attribute probes no longer import modules by @lukasmasuch in streamlit/streamlit#17311

[fix] Use theme focus ring on date/time input icon buttons by @mayagbarnes in streamlit/streamlit#17316

[fix] Stop false fragment-callback element warning by @sfc-gh-lwilby-1 in streamlit/streamlit#17292

[fix] Reject unsafe navigation network paths by @sfc-gh-lwilby-1 in streamlit/streamlit#17301

[fix] Add AppTest support for st.pagination by @lukasmasuch in streamlit/streamlit#17322

[fix] Register imported v2 components in AppTest by @lukasmasuch in streamlit/streamlit#17331

[fix] Improve alignment of elements placed side by side by @lukasmasuch in streamlit/streamlit#17392

[fix] Add AppTest support for st.audio_input by @lukasmasuch in streamlit/streamlit#17346

[fix] Announce the active select option while typing by @mayagbarnes in streamlit/streamlit#17295

[fix] Tighten st.query_params write types by @lukasmasuch in streamlit/streamlit#17419

[fix] Render apps in opaque sandboxed iframes by @lukasmasuch in streamlit/streamlit#17409

[fix] Shorten ECharts tooltip numbers and restyle labels by @lukasmasuch in streamlit/streamlit#17333

[fix] Surface malformed secrets.toml parse errors by @sfc-gh-lwilby-1 in streamlit/streamlit#17428

[fix] Stretch charts fall back to their default height by @lukasmasuch in streamlit/streamlit#17410

[fix] Release abandoned runs waiting on a cache by @sfc-gh-lwilby-1 in streamlit/streamlit#17340

[fix] Stretch containers and forms grow with their content by @lukasmasuch in streamlit/streamlit#17424

[fix] Skip stale keyed blocks during reruns by @lukasmasuch in streamlit/streamlit#17456

[fix] Add AppTest support for st.camera_input by @lukasmasuch in streamlit/streamlit#17459

[fix] Make st.secrets writes a type error by @lukasmasuch in streamlit/streamlit#17460

... (truncated)

Commits

269e552 Up version to 1.66.0
4cf7082 [chore] Enable unnecessary-condition in widgets (#17465)
0840e3f [docs] Fit the skill performance reference under the read limit (#17448)
50f85fd [fix] Type iterated session state keys as str (#17466)
c1a1a6d [feature] Add on_change="ignore" to st.segmented_control (#17452)
c38c081 Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 in the github-actions-minor-pat...
7905350 Bump the codeql-action group with 2 updates (#17436)
048c9c3 [chore] Use Vitest deps.optimizer.client in vite configs (#17453)
59479cb [fix] Make st.secrets writes a type error (#17460)
10da7ea [fix] Add AppTest support for st.camera_input (#17459)
Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Commits

65bb884 v4.7.0
73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
860d07d don't leak GIT_* env into npm install for language: node
9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
9905e88 use contextlib.chdir
59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
2be1701 remove triple-nested withs for 3.14 coverage
4c8d22a py311+
c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
f49e251 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.17.1

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

Install ruff 0.17.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"
Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

Update the default and latest Python versions for 3.15 (#28792)

Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15

... (truncated)

Commits

4683270 Bump version to 0.17.1 (#29420)
3514027 [ty] Update typing conformance suite pin (#29417)
8294556 Update referenced PR security-review workflow (#29237)
d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
83a3afc Fix dedent with multiple leading comments (#29382)
b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
d01678e [ty] Clarify object attribute write-contract rationale (#29384)
355b42a [ty] Avoid writable override contracts from object (#29373)
e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` | | [pandas](https://github.com/pandas-dev/pandas) | `3.0.5` | `3.0.6` | | [pyarrow](https://github.com/apache/arrow) | `25.0.1` | `26.0.0` | | [streamlit](https://github.com/streamlit/streamlit) | `1.64.0` | `1.66.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.7` | `0.17.1` | Updates `numpy` from 2.5.3 to 2.5.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.5.3...v2.5.4) Updates `pandas` from 3.0.5 to 3.0.6 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.5...v3.0.6) Updates `pyarrow` from 25.0.1 to 26.0.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-25.0.1...apache-arrow-26.0.0) Updates `streamlit` from 1.64.0 to 1.66.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.64.0...1.66.0) Updates `pre-commit` from 4.6.2 to 4.7.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0) Updates `ruff` from 0.16.7 to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.7...0.17.1) --- updated-dependencies: - dependency-name: numpy dependency-version: 2.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: pandas dependency-version: 3.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: pyarrow dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-deps - dependency-name: streamlit dependency-version: 1.66.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: pre-commit dependency-version: 4.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-04T09:46:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 21, 2026

dependabot Bot closed this Nov 4, 2026

dependabot Bot deleted the dependabot/uv/python-deps-c99aa81bf8 branch November 4, 2026 09:46

Navigation Menu

Repository navigation

Bump the python-deps group across 1 directory with 6 updates - #8

Bump the python-deps group across 1 directory with 6 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-deps-c99aa81bf8

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.5.4 (Oct 10, 2026)

NumPy 2.5.4 Release Notes

Improvements

StringDType hashing with NaN sentinels

Changes

MaskedArray resets a fill_value that cannot be represented in a new dtype

pandas 3.0.6

Apache Arrow 26.0.0

Apache Arrow 26.0.0 RC0

1.66.0

What's Changed

New Features 🎉

Bug Fixes 🐛

pre-commit v4.7.0

Fixes

4.7.0 - 2026-10-12

Fixes

0.17.1

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

Install ruff 0.17.1

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.1

0.17.1

Preview features

Bug fixes

Rule changes

Documentation

Contributors

0.17.0

Breaking changes

Uh oh!

dependabot Bot commented on behalf of github Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

`MaskedArray` resets a fill_value that cannot be represented in a new dtype