Bump the pip group across 1 directory with 22 updates #3679

dependabot · 2025-01-01T18:51:49Z

Bumps the pip group with 22 updates in the /src directory:

Package	From	To
coverage	`7.6.2`	`7.6.10`
pytest	`8.3.3`	`8.3.4`
pytest-cov	`5.0.0`	`6.0.0`
ruff	`0.6.9`	`0.8.4`
vcrpy	`6.0.2`	`7.0.0`
bokeh	`3.6.0`	`3.6.2`
certifi	`2024.8.30`	`2024.12.14`
cryptography	`43.0.1`	`44.0.0`
markupsafe	`3.0.1`	`3.0.2`
networkx	`3.4`	`3.4.2`
numpy	`2.1.2`	`2.2.1`
pillow	`10.4.0`	`11.0.0`
pycurl	`7.45.3`	`7.45.4`
pyopenssl	`24.2.1`	`24.3.0`
python-daemon	`3.0.1`	`3.1.2`
setuptools	`75.1.0`	`75.6.0`
six	`1.16.0`	`1.17.0`
wordcloud	`1.9.3`	`1.9.4`
ipython	`8.28.2`	`8.31.0`
jinja2	`3.1.4`	`3.1.5`
scikit-learn	`1.5.2`	`1.6.0`
tornado	`6.4.1`	`6.4.2`

Updates coverage from 7.6.2 to 7.6.10

Changelog

Sourced from coverage's changelog.

Version 7.6.10 — 2024-12-26

Fix: some descriptions of missing branches in HTML and LCOV reports were incorrect when multi-line statements were involved (issue 1874_ and issue 1875_). These are now fixed.

Fix: Python 3.14 defers evaluation of annotations <pep649_>_ by moving them into separate code objects. That code is rarely executed, so coverage.py would mark them as missing, as reported in issue 1908_. Now they are ignored by coverage automatically.

Fixed an obscure and mysterious problem on PyPy 3.10 seemingly involving mocks, imports, and trace functions: issue 1902_. To be honest, I don't understand the problem or the solution, but git bisect helped find it, and now it's fixed.

Docs: re-wrote the :ref:subprocess page to put multiprocessing first and to highlight the correct use of :class:multiprocessing.Pool <python:multiprocessing.pool.Pool>.

.. _issue 1874: nedbat/coveragepy#1874 .. _issue 1875: nedbat/coveragepy#1875 .. _issue 1902: nedbat/coveragepy#1902 .. _issue 1908: nedbat/coveragepy#1908 .. _pep649: https://docs.python.org/3.14/whatsnew/3.14.html#pep-649-deferred-evaluation-of-annotations

.. _changes_7-6-9:

Version 7.6.9 — 2024-12-06

Fix: Tomas Uribe fixed <pull 1901_>_ a performance problem in the XML report. Large code bases should produce XML reports much faster now.

.. _pull 1901: nedbat/coveragepy#1901

.. _changes_7-6-8:

Version 7.6.8 — 2024-11-23

Fix: the LCOV report code assumed that a branch line that took no branches meant that the entire line was unexecuted. This isn't true in a few cases: the line might always raise an exception, or might have been optimized away. Fixes issue 1896_.

Fix: similarly, the HTML report will now explain that a line that jumps to

... (truncated)

Commits

f0dcf65 docs: sample HTML for 7.6.10
0f26f35 docs: prep for 7.6.10
81c5e43 docs: rewrite the subprocess page
878410c chore: make doc_upgrade
f1d320d chore: make upgrade
67f1440 debug: this condition is never true. really?
c85eaba fix: multi-line statements no longer confuse branch target descriptions. #187...
73e58fa refactor: clarify the code that fixes with-statement exits
e16c9cc typo: backslask
865fd7f chore: bump the action-dependencies group with 4 updates (#1909)
Additional commits viewable in compare view

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

#12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

#12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

#12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

#9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

#10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

#10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

#12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

#12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

#12497: Fixed two failing pdb-related tests on Python 3.13.

Commits

53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
98dff36 Prepare release version 8.3.4
1b474e2 approx: use exact comparison for bool (#13013)
b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
Additional commits viewable in compare view

Updates pytest-cov from 5.0.0 to 6.0.0

Changelog

Sourced from pytest-cov's changelog.

6.0.0 (2024-10-29)

Updated various documentation inaccuracies, especially on subprocess handling.

Changed fail under checks to use the precision set in the coverage configuration. Now it will perform the check just like coverage report would.

Added a --cov-precision cli option that can override the value set in your coverage configuration.

Dropped support for now EOL Python 3.8.

Commits

9540437 Bump version: 5.0.0 → 6.0.0
9f81754 Further trim down envs and drop Python 3.8.
b12b5ec Update conf.
23f4b27 Update changelog.
291a04f Bump test deps and trim config.
08f1101 Add --cov-precision option. Close #655.
76fe2a7 Move the warnings/errors in a place that doesn't import anything.
a9ea7b7 Implement error/warning for the bad dynamic_context being set in config.
c299e01 Add explicit suffixing to make it easier to see the identify the sources/usag...
c87e546 Add reproducer for weird xdist dynamic_context interaction. Ref #604.
Additional commits viewable in compare view

Updates ruff from 0.6.9 to 0.8.4

Release notes

Sourced from ruff's releases.

0.8.4

Release Notes

Preview features

[airflow] Extend AIR302 with additional functions and classes (#15015)

[airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)

[flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)

[perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)

[perflint] Simplify finding the loop target in PERF401 (#15025)

[pylint] Preserve original value format (PLR6104) (#14978)

[ruff] Avoid false positives for RUF027 for typing context bindings (#15037)

[ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

[flake8-bandit] Check S105 for annotated assignment (#15059)

[flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)

[pydocstyle] Skip leading whitespace for D403 (#14963)

[ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

[perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

Contributors

@AlexWaygood

@Daverball

@DimitriPapadopoulos

@InSyncWithFoo

@Lee-W

@MichaReiser

@TheBits

@cake-monotone

@carljm

@dcreager

@dhruvmanila

@dylwil3

@github-actions

@kiran-4444

@krishnan-chandra

@rchen152

@renovate

@sharkdp

@tarasmatsyk

@w0nder1ng

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.4

Preview features

[airflow] Extend AIR302 with additional functions and classes (#15015)

[airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)

[flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)

[perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)

[perflint] Simplify finding the loop target in PERF401 (#15025)

[pylint] Preserve original value format (PLR6104) (#14978)

[ruff] Avoid false positives for RUF027 for typing context bindings (#15037)

[ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

[flake8-bandit] Check S105 for annotated assignment (#15059)

[flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)

[pydocstyle] Skip leading whitespace for D403 (#14963)

[ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

[perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

0.8.3

Preview features

Fix fstring formatting removing overlong implicit concatenated string in expression part (#14811)

[airflow] Add fix to remove deprecated keyword arguments (AIR302) (#14887)

[airflow]: Extend rule to include deprecated names for Airflow 3.0 (AIR302) (#14765 and #14804)

[flake8-bugbear] Improve error messages for except* (B025, B029, B030, B904) (#14815)

[flake8-bugbear] itertools.batched() without explicit strict (B911) (#14408)

[flake8-use-pathlib] Dotless suffix passed to Path.with_suffix() (PTH210) (#14779)

[pylint] Include parentheses and multiple comparators in check for boolean-chained-comparison (PLR1716) (#14781)

[ruff] Do not simplify round() calls (RUF046) (#14832)

[ruff] Don't emit used-dummy-variable on function parameters (RUF052) (#14818)

[ruff] Implement if-key-in-dict-del (RUF051) (#14553)

[ruff] Mark autofix for RUF052 as always unsafe (#14824)

[ruff] Teach autofix for used-dummy-variable about TypeVars etc. (RUF052) (#14819)

Rule changes

[flake8-bugbear] Offer unsafe autofix for no-explicit-stacklevel (B028) (#14829)

[flake8-pyi] Skip all type definitions in string-or-bytes-too-long (PYI053) (#14797)

[pyupgrade] Do not report when a UTF-8 comment is followed by a non-UTF-8 one (UP009) (#14728)

... (truncated)

Commits

3bb0dac Bump version to 0.8.4 (#15064)
40cba5d [red-knot] Cleanup various todo_type!() messages (#15063)
596d80c [perflint] Parenthesize walrus expressions in autofix for `manual-list-comp...
d8b9a36 Disable actionlint hook by default when running pre-commit locally (#15061)
85e71ba [flake8-bandit] Check S105 for annotated assignment (#15059)
2802cbd Don't special-case class instances in unary expression inference (#15045)
ed2bce6 [red-knot] Report invalid exceptions (#15042)
f0012df Fix typos in RUF043.py (#15044)
0fc4e8f Introduce InferContext (#14956)
ac81c72 [ruff] Ambiguous pattern passed to pytest.raises() (RUF043) (#14966)
Additional commits viewable in compare view

Updates vcrpy from 6.0.2 to 7.0.0

Release notes

Sourced from vcrpy's releases.

v7.0.0

What's Changed
- Drop support for python 3.8 (major version bump) - thanks @jairhenrique
- Various linting and test fixes - thanks @jairhenrique
- Bugfix for urllib2>=2.3.0 - missing version_string ([#888](https://github.com/kevin1024/vcrpy/issues/888))
- Bugfix for asyncio.run - thanks @alekeik1
New Contributors

@exslim made their first contribution in kevin1024/vcrpy#889

@alekseik1 made their first contribution in kevin1024/vcrpy#886

Changelog

Sourced from vcrpy's changelog.

Changelog

For a full list of triaged issues, bugs and PRs and what release they are targeted for please see the following link.

ROADMAP MILESTONES <https://github.com/kevin1024/vcrpy/milestones>_

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

7.0.0

Drop support for python 3.8 (major version bump) - thanks @jairhenrique

Various linting and test fixes - thanks @jairhenrique

Bugfix for urllib2>=2.3.0 - missing version_string (#888)

Bugfix for asyncio.run - thanks @alekeik1

6.0.2

Ensure body is consumed only once (#846) - thanks @sathieu

Permit urllib3 2.x for non-PyPy Python >=3.10

Fix typos in test commands - thanks @chuckwondo

Several test and workflow improvements - thanks @hartwork and @graingert

6.0.1

Bugfix with to Tornado cassette generator (thanks @graingert)

6.0.0

BREAKING: Fix issue with httpx support (thanks @parkerhancock) in #784. NOTE: You may have to recreate some of your cassettes produced in previous releases due to the binary format being saved incorrectly in previous releases

BREAKING: Drop support for boto (vcrpy still supports boto3, but is dropping the deprecated boto support in this release. (thanks @jairhenrique)

Fix compatibility issue with Python 3.12 (thanks @hartwork)

Drop simplejson (fixes some compatibility issues) (thanks @jairhenrique)

Run CI on Python 3.12 and PyPy 3.9-3.10 (thanks @mgorny)

Various linting and docs improvements (thanks @jairhenrique)

Tornado fixes (thanks @graingert)

5.1.0

Use ruff for linting (instead of current flake8/isort/pyflakes) - thanks @jairhenrique

Enable rule B (flake8-bugbear) on ruff - thanks @jairhenrique

Configure read the docs V2 - thanks @jairhenrique

Fix typo in docs - thanks @quasimik

Make json.loads of Python >=3.6 decode bytes by itself - thanks @hartwork

Fix body matcher for chunked requests (fixes #734) - thanks @hartwork

Fix query param filter for aiohttp (fixes #517) - thanks @hartwork and @salomvary

Remove unnecessary dependency on six. - thanks @charettes

build(deps): update sphinx requirement from <7 to <8 - thanks @jairhenrique

Add action to validate docs - thanks @jairhenrique

Add editorconfig file - thanks @jairhenrique

Drop iscoroutinefunction fallback function for unsupported python thanks @jairhenrique

5.0.0

BREAKING CHANGE: Drop support for Python 3.7. 3.7 is EOL as of 6/27/23 Thanks @jairhenrique

BREAKING CHANGE: Custom Cassette persisters no longer catch ValueError. If you have implemented a custom persister (has anyone implemented a custom persister? Let us know!) then you will need to throw a CassetteNotFoundError when unable to find a cassette. See #681 for discussion and reason for this change. Thanks @amosjyng for the PR and the review from @hartwork

4.4.0

HUGE thanks to @hartwork for all the work done on this release!

Bring vcr/unittest in to vcrpy as a full feature of vcr instead of a separate library. Big thanks to @hartwork for doing this and to @agriffis for originally creating the library

Make decompression robust towards already decompressed input (thanks @hartwork)

... (truncated)

Commits

3278619 Release v7.0.0
3fb62e0 fix: correctly handle asyncio.run when loop exists
8197865 build(deps): update sphinx requirement from <8 to <9
be651bd pre-commit: Autoupdate
a6698ed Fix aiohttp tests
48d0a2e Fixed missing version_string attribute when used with urllib3>=2.3.0
5b858b1 Fix lint
c8d99a9 Fix ruff configuration
ce27c63 Merge pull request #736 from kevin1024/drop-python38
ab8944d Drop python 3.8 support
Additional commits viewable in compare view

Updates bokeh from 3.6.0 to 3.6.2

Changelog

Sourced from bokeh's changelog.

2024-12-03 3.6.2:

bugfixes:

#14082 [BUG] p.circle(..) can't be added as renderer to PointDrawTool since 3.6

#14153 [component: bokehjs] ScaleBar positioning doesn't work correctly

#14160 [component: docs] Search box on start page has no surrounding line

#14168 [component: bokehjs] [BUG] using add_tile to add multiple layers causes error on JScript side

tasks:

#14088 [component: docs] [BUG] Missing radius parameter in code example

#14086 Update links to sponsor page

#14155 Backports for 3.6.2

2024-11-06 3.6.1:

bugfixes:

#14082 [BUG] p.circle(..) can't be added as renderer to PointDrawTool since 3.6

#14090 [component: bokehjs] [BUG] Google Chrome 130 fails to draw figure, throws TypeError: Failed to execute 'fill' on 'CanvasRenderingContext2D'

#14107 [component: bokehjs] [BUG] Loss of mobile touch scrolling with update to Bokeh 3.6.0

tasks:

#14096 Backports for 3.6.1

2024-09-26 3.6:

bugfixes:

#4951 ModelExtensions - all resources from a whole module are loaded

#7524 GroupFilter only accepts strings

#13827 [component: bokehjs] [BUG] Lack of range expansion when there remains unbounded directions, even when maintain_focus=False

#13886 [component: bokehjs] [BUG] NPM package has types (*.d.ts) in incorrect location

#13957 [component: bokehjs] Explicit selection glyph example broken

#13959 [BUG] Reset Tool Error in Bokeh Gridplot with Single Plot

#13964 [component: bokehjs] [BUG] page won't render if CustomJS args has a dict with key "constructor"

#13965 [component: bokehjs] [BUG] CategoricalSlider shows ‘undefined’ value and skip that value

#13972 BOKEH_MINIFIED not working

#13984 [component: tests] [BUG] Deprecation warning treated as error in pytest hook

#14014 [component: bokehjs] [BUG] StringFormatter nan_format seems broken

#14054 [component: bokehjs] [BUG] Custom hover tooltip on image plot shows all the image data.

#14058 [component: bokehjs] [BUG] Clearing selection with ESC only works on first selection tool

#14068 [component: bokehjs] [BUG] Unable to change figures displayed by altering children attribute of gridplot (or other layout classes) in JS callback

#14072 [component: bokehjs] [BUG] Spinner input not responding to wheel event

#13968 [component: docs] fix indentation in offset parameter for Title

#14038 [component: bokehjs] Allow is_equal(0, -0) to be true to match ===

#14055 [component: docs] fix some typos

#14065 [component: build] Generate correct *.d.ts files for CSS modules

features:

#601 [component: bokehjs] Add support for click events on categorical axes

#11104 [component: bokehjs] [FEATURE] Option for DataTable column sorting to place NaNs last

#13130 [component: bokehjs] Add CustomJSTicker

... (truncated)

Commits

34cd492 Deployment updates for release 3.6.2
fda0e1d Merge pull request #14155 from bokeh/mattpap/3.6.2_backports
07d67a5 Add release notes
a1e8979 Update switcher.json
4eb1e1d Update links to sponsor page (#14086)
6a31a39 Added radius parameter to circle plot. (#14089)
fdd7724 RadialGlyph should inherit from XYGlyph (#14085)
9e86d31 fix missing line on search box (#14161)
8c086ea Don't fail on partially updated Pane's view storage (#14170)
b59f1c3 Fix a regression in ScaleBar positioning (#14154)
Additional commits viewable in compare view

Updates certifi from 2024.8.30 to 2024.12.14

Commits

4ba3900 2024.12.14 (#329)
9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
bc26b41 Bump actions/checkout from 4.2.1 to 4.2.2 (#325)
57afc22 Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#323)
a495091 test against 3.13 final
62f8144 Added 3.13 classifier (#322)
94d23a0 Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 (#321)
Additional commits viewable in compare view

Updates cryptography from 43.0.1 to 44.0.0

Changelog

Sourced from cryptography's changelog.

44.0.0 - 2024-11-27

* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.9. * Deprecated Python 3.7 support. Python 3.7 is no longer supported by the Python core team. Support for Python 3.7 will be removed in a future ``cryptography`` release. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.0. * macOS wheels are now built against the macOS 10.13 SDK. Users on older versions of macOS should upgrade, or they will need to build ``cryptography`` themselves. * Enforce the :rfc:`5280` requirement that extended key usage extensions must not be empty. * Added support for timestamp extraction to the :class:`~cryptography.fernet.MultiFernet` class. * Relax the Authority Key Identifier requirements on root CA certificates during X.509 verification to allow fields permitted by :rfc:`5280` but forbidden by the CA/Browser BRs. * Added support for :class:`~cryptography.hazmat.primitives.kdf.argon2.Argon2id` when using OpenSSL 3.2.0+. * Added support for the :class:`~cryptography.x509.Admissions` certificate extension. * Added basic support for PKCS7 decryption (including S/MIME 3.2) via :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`, :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem`, and :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime`. .. _v43-0-3:

43.0.3 - 2024-10-18

Fixed release metadata for cryptography-vectors

.. _v43-0-2:

43.0.2 - 2024-10-18

* Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

Commits

f299a48 remove deprecated call (#12052)
439eb05 Bump version for 44.0.0 (#12051)
2c5ad4d chore(deps): bump maturin from 1.7.4 to 1.7.5 in /.github/requirements (#12050)
d23968a chore(deps): bump libc from 0.2.165 to 0.2.166 (#12049)
133c0e0 Bump x509-limbo and/or wycheproof in CI (#12047)
f2259d7 Bump BoringSSL and/or OpenSSL in CI (#12046)
e201c87 fixed metadata in changelog (#12044)
c6104cc Prohibit Python 3.9.0, 3.9.1 -- they have a bug that causes errors (#12045)
d6cac75 Add support for decrypting S/MIME messages (#11555)
b8e5bfd chore(deps): bump libc from 0.2.164 to 0.2.165 (#12042)
Additional commits viewable in compare view

Updates markupsafe from 3.0.1 to 3.0.2

Release notes

Sourced from markupsafe's releases.

3.0.2

This is the MarkupSafe 3.0.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.2/ Changes: https://markupsafe.palletsprojects.com/en/stable/changes/#version-3-0-2 Milestone: https://github.com/pallets/markupsafe/milestone/14?closed=1

Fix compatibility when __str__ returns a str subclass. #472

Build requires setuptools >= 70.1. #475

Changelog

Sourced from markupsafe's changelog.

Version 3.0.2

Released 2024-10-18

Fix compatibility when __str__ returns a str subclass. :issue:472

Build requires setuptools >= 70.1. :issue:475

Commits

28ace20 release version 3.0.2
6b51fd8 build requires at least setuptools 70.1 (#478)
99dda9f build requires at least setuptools 70.1
3d8fd8c fix version
1933c4b fix version
e85aff4 relax speedups str check (#477)
8cb1691 relax speedups str check
4dafb7c start version 3.1.0
9c44ecf update docs build
275c769 Merge branch '2.1.x' into 3.0.x
Additional commits viewable in compare view

Updates networkx from 3.4 to 3.4.2

Release notes

Sourced from networkx's releases.

NetworkX 3.4.2

We're happy to announce the release of networkx 3.4.2!

Bug Fixes

Fix docstrings of dispatchable functions (#7679).

Fix draw_networkx_nodes return type (#7685).

Documentation

Add disclaimer about LLM driven PRs (#7683).

Maintenance

Fix doc warnings from recently added docs (#7682).

Contributors

6 authors added to this release (alphabetically):

Dan Schult (@dschult)

Erik Welch (@eriknw)

Jarrod Millman (@jarrodmillman)

Kirk Bonney (@kbonney)

Mridul Seth (@MridulS)

Ross Barnowski (@rossbar)

4 reviewers added to this release (alphabetically):

Aditi Juneja (@Schefflera-Arboricola)

Dan Schult (@dschult)

Jarrod Millman (@jarrodmillman)

Matt Schwennesen (@mjschwenne)

These lists are automatically generated, and may not be complete or may contain duplicates.

NetworkX 3.4.1

networkx 3.4.1

We're happy to announce the release of networkx 3.4.1!

Maintenance

Remove old deprecation decorator (#7669).

MAINT: delay loading of backend_info to after imports (#7672).

Contributors

2 authors added to this release (alphabetically):

... (truncated)

Commits

2acf159 Designate 3.4.2 release
36863b0 Add disclaimer about LLM driven PRs (#7683)
fb17e15 Fix draw_networkx_nodes return type (#7685)
173f6c3 Fix doc warnings from recently added docs (#7682)
2f45b4d Fix docstrings of dispatchable functions (#7679)
c107d25 Bump release version
ab4d375 Designate 3.4.1 release
bcffd70 Update release process
16fdb10 MAINT: delay loading of backend_info to after imports (#7672)
3bf29e1 Bump release version
Additional commits viewable in compare view

Updates numpy from 2.1.2 to 2.2.1

Release notes

Sourced from numpy's releases.

2.2.1 (DEC 21, 2024)

NumPy 2.2.1 Release Notes

NumPy 2.2.1 is a patch release following 2.2.0. It fixes bugs found after the 2.2.0 release and has several maintenance pins to work around upstream changes.

There was some breakage in downstream projects following the 2.2.0 release due to updates to NumPy typing. Because of problems due to MyPy defects, we recommend using basedpyright for type checking, it can be installed from PyPI. The Pylance extension for Visual Studio Code is also based on Pyright. Problems that persist when using basedpyright should be reported as issues on the NumPy github site.

This release supports Python 3.10-3.13.

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Charles Harris

Joren Hammudoglu

Matti Picus

Nathan Goldbaum

Peter Hawkins

Simon Altrogge

Thomas A Caswell

Warren Weckesser

Yang Wang +

Pull requests merged

A total of 12 pull requests were merged for this release.

#27935: MAINT: Prepare 2.2.x for further development

#27950: TEST: cleanups

#27958: BUG: fix use-after-free error in npy_hashtable.cpp (#27955)

#27959: BLD: add missing include

#27982: BUG:fix compile error libatomic link test to meson.build

#27990: TYP: Fix falsely rejected value types in ndarray.__setitem__

#27991: MAINT: Don't wrap #include <Python.h> with extern "C"

#27993: BUG: Fix segfault in stringdtype lexsort

#28006: MAINT: random: Tweak module code in mtrand.pyx to fix a Cython...

#28007: BUG: Cython API was missing NPY_UINTP.

#28021: CI: pin scipy-doctest to 1.5.1

#28044: TYP: allow None in operand sequence of nditer

Checksums

... (truncated)

Commits

7469245 Merge pull request #28047 from charris/prepare-2.2.1
acb051e...
Description has been truncated

Bumps the pip group with 22 updates in the /src directory: | Package | From | To | | --- | --- | --- | | [coverage](https://github.com/nedbat/coveragepy) | `7.6.2` | `7.6.10` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.3` | `8.3.4` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `5.0.0` | `6.0.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.6.9` | `0.8.4` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.2` | `7.0.0` | | [bokeh](https://github.com/bokeh/bokeh) | `3.6.0` | `3.6.2` | | [certifi](https://github.com/certifi/python-certifi) | `2024.8.30` | `2024.12.14` | | [cryptography](https://github.com/pyca/cryptography) | `43.0.1` | `44.0.0` | | [markupsafe](https://github.com/pallets/markupsafe) | `3.0.1` | `3.0.2` | | [networkx](https://github.com/networkx/networkx) | `3.4` | `3.4.2` | | [numpy](https://github.com/numpy/numpy) | `2.1.2` | `2.2.1` | | [pillow](https://github.com/python-pillow/Pillow) | `10.4.0` | `11.0.0` | | [pycurl](https://github.com/pycurl/pycurl) | `7.45.3` | `7.45.4` | | [pyopenssl](https://github.com/pyca/pyopenssl) | `24.2.1` | `24.3.0` | | python-daemon | `3.0.1` | `3.1.2` | | [setuptools](https://github.com/pypa/setuptools) | `75.1.0` | `75.6.0` | | [six](https://github.com/benjaminp/six) | `1.16.0` | `1.17.0` | | [wordcloud](https://github.com/amueller/word_cloud) | `1.9.3` | `1.9.4` | | [ipython](https://github.com/ipython/ipython) | `8.28.2` | `8.31.0` | | [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` | | [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.5.2` | `1.6.0` | | [tornado](https://github.com/tornadoweb/tornado) | `6.4.1` | `6.4.2` | Updates `coverage` from 7.6.2 to 7.6.10 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.6.2...7.6.10) Updates `pytest` from 8.3.3 to 8.3.4 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.3...8.3.4) Updates `pytest-cov` from 5.0.0 to 6.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v5.0.0...v6.0.0) Updates `ruff` from 0.6.9 to 0.8.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.6.9...0.8.4) Updates `vcrpy` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.2...v7.0.0) Updates `bokeh` from 3.6.0 to 3.6.2 - [Changelog](https://github.com/bokeh/bokeh/blob/3.6.2/docs/CHANGELOG) - [Commits](bokeh/bokeh@3.6.0...3.6.2) Updates `certifi` from 2024.8.30 to 2024.12.14 - [Commits](certifi/python-certifi@2024.08.30...2024.12.14) Updates `cryptography` from 43.0.1 to 44.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@43.0.1...44.0.0) Updates `markupsafe` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@3.0.1...3.0.2) Updates `networkx` from 3.4 to 3.4.2 - [Release notes](https://github.com/networkx/networkx/releases) - [Commits](networkx/networkx@networkx-3.4...networkx-3.4.2) Updates `numpy` from 2.1.2 to 2.2.1 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.1.2...v2.2.1) Updates `pillow` from 10.4.0 to 11.0.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@10.4.0...11.0.0) Updates `pycurl` from 7.45.3 to 7.45.4 - [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog) - [Commits](https://github.com/pycurl/pycurl/commits) Updates `pyopenssl` from 24.2.1 to 24.3.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@24.2.1...24.3.0) Updates `python-daemon` from 3.0.1 to 3.1.2 Updates `setuptools` from 75.1.0 to 75.6.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v75.1.0...v75.6.0) Updates `six` from 1.16.0 to 1.17.0 - [Changelog](https://github.com/benjaminp/six/blob/main/CHANGES) - [Commits](benjaminp/six@1.16.0...1.17.0) Updates `wordcloud` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/amueller/word_cloud/releases) - [Changelog](https://github.com/amueller/word_cloud/blob/main/doc/changelog.rst) - [Commits](amueller/word_cloud@1.9.3...1.9.4) Updates `ipython` from 8.28.2 to 8.31.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](https://github.com/ipython/ipython/commits/8.31.0) Updates `jinja2` from 3.1.4 to 3.1.5 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.5) Updates `scikit-learn` from 1.5.2 to 1.6.0 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](scikit-learn/scikit-learn@1.5.2...1.6.0) Updates `tornado` from 6.4.1 to 6.4.2 - [Changelog](https://github.com/tornadoweb/tornado/blob/v6.4.2/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.4.1...v6.4.2) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip - dependency-name: pytest-cov dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: vcrpy dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip - dependency-name: bokeh dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: certifi dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: markupsafe dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: networkx dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: numpy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: pillow dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip - dependency-name: pycurl dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pyopenssl dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: python-daemon dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: six dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: wordcloud dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: ipython dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: jinja2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: scikit-learn dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: tornado dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-01-01T18:53:19Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 1 directory with 22 updates #3679

Bump the pip group across 1 directory with 22 updates #3679

dependabot bot commented on behalf of github Jan 1, 2025

sonarqubecloud bot commented Jan 1, 2025

Bump the pip group across 1 directory with 22 updates #3679

Are you sure you want to change the base?

Bump the pip group across 1 directory with 22 updates #3679

Conversation

dependabot bot commented on behalf of github Jan 1, 2025

Version 7.6.10 — 2024-12-26

Version 7.6.9 — 2024-12-06

Version 7.6.8 — 2024-11-23

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

Improved documentation

Contributor-facing changes

6.0.0 (2024-10-29)

0.8.4

Release Notes

Preview features

Rule changes

Bug

Server

Contributors

0.8.4

Preview features

Rule changes

Bug

Server

0.8.3

Preview features

Rule changes

v7.0.0

What's Changed

New Contributors

Changelog

2024-12-03 3.6.2:

2024-11-06 3.6.1:

2024-09-26 3.6:

3.0.2

Version 3.0.2

NetworkX 3.4.2

Bug Fixes

Documentation

Maintenance

Contributors

NetworkX 3.4.1

networkx 3.4.1

Maintenance

Contributors

2.2.1 (DEC 21, 2024)

NumPy 2.2.1 Release Notes

Contributors

Pull requests merged

Checksums

sonarqubecloud bot commented Jan 1, 2025

Quality Gate passed