Skip to content

deps: bump the python-deps group with 11 updates - #11

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/python-deps-8052bd5112
Closed

deps: bump the python-deps group with 11 updates#11
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/python-deps-8052bd5112

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown

Updates the requirements on matplotlib, numpy, ipython, seaborn, pytest, mkdocs-material, mkdocs-jupyter, jupytext, nbconvert, ipykernel and setuptools to permit the latest version.
Updates matplotlib to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Updates numpy to 2.2.6

Release notes

Sourced from numpy's releases.

v2.2.6 (May 17, 2025)

NumPy 2.2.6 Release Notes

NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance.

This release supports Python versions 3.10-3.13.

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Ilhan Polat
  • Joren Hammudoglu
  • Marco Gorelli +
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Sayed Adel

Pull requests merged

A total of 11 pull requests were merged for this release.

  • #28778: MAINT: Prepare 2.2.x for further development
  • #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments...
  • #28852: BUG: fix heap buffer overflow in np.strings.find
  • #28853: TYP: fix NDArray[floating] + float return type
  • #28864: BUG: fix stringdtype singleton thread safety
  • #28865: MAINT: use OpenBLAS 0.3.29
  • #28889: MAINT: from_dlpack thread safety fixes
  • #28913: TYP: Fix non-existent CanIndex annotation in ndarray.setfield
  • #28915: MAINT: Avoid dereferencing/strict aliasing warnings
  • #28916: BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate.
  • #28966: TYP: reject complex scalar types in ndarray.__ifloordiv__

Checksums

MD5

259343f056061f6eadb2f4b8999d06d4  numpy-2.2.6-cp310-cp310-macosx_10_9_x86_64.whl
16fa85488e149489ce7ee044d7b0d307  numpy-2.2.6-cp310-cp310-macosx_11_0_arm64.whl
f01b7aea9d2b76b1eeb49766e615d689  numpy-2.2.6-cp310-cp310-macosx_14_0_arm64.whl
f2ddc2b22517f6e31caa1372b12c2499  numpy-2.2.6-cp310-cp310-macosx_14_0_x86_64.whl
52190e22869884f0870eb3df7a283ca9  numpy-2.2.6-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
8f382b9ca6770db600edd5ea2447a925  numpy-2.2.6-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
e604aae2ef6e01fb92ecc39aca0424d9  numpy-2.2.6-cp310-cp310-musllinux_1_2_aarch64.whl

... (truncated)

Commits
  • 2b686f6 Merge pull request #28980 from charris/prepare-2.2.6
  • ed41828 REL: Prepare for the NumPy 2.2.6 release [wheel build]
  • 83e4e7f Merge pull request #28966 from charris/backport-28958
  • 248f0cb TYP: add rejection-tests for complex ndarray floordiv
  • 5bad9da TYP: reject complex scalar types in ndarray.__ifloordiv__
  • 6c42775 Merge pull request #28915 from charris/backport-28892
  • 4277e7c Merge pull request #28916 from charris/backport-28898
  • bd1c863 BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate. (#28898)
  • 87d1d8a MAINT: Avoid dereferencing/strict aliasing warnings during complex casts in `...
  • 9e50659 Merge pull request #28913 from charris/backport-28908
  • Additional commits viewable in compare view

Updates ipython to 8.39.0

Commits

Updates seaborn to 0.13.2

Release notes

Sourced from seaborn's releases.

v0.13.2 (January 2024)

This is a minor release containing internal changes that adapt to upcoming deprecations in pandas. All users are encouraged to update.

Commits

Updates pytest to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

Updates mkdocs-material to 9.7.6

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.6

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs
Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

... (truncated)

Commits
  • 6c52ed6 Prepare 9.7.6 release
  • 51d9b76 Automatically disable MkDocs 2.0 warning for forks of MkDocs
  • 6f9a48b Updated links
  • 00b9933 Prepare 9.7.5 release
  • 37683d1 Updated blog post on MkDocs 2.0
  • 199e315 Updated warning message to clarify relation to MkDocs
  • 1025833 Limited version range of mkdocs to <2
  • 1532f52 Added update log to blog post
  • d0c8b28 Updated dependencies to fix vulnerabilities
  • 71d4869 Updated blog post on MkDocs 2.0
  • Additional commits viewable in compare view

Updates mkdocs-jupyter to 0.26.3

Changelog

Sourced from mkdocs-jupyter's changelog.

mkdocs-jupyter Change Log

0.25.1

  • Add option to customize Mathjax URL
  • Fix issue which caused unrelated source files from being copied into the output directory
  • Replace print statements with logging

0.24.3

  • Fix theme selection

0.24.1

  • Fix TOC header links

0.24.0

  • Add option for including requireJS
  • Add option for custom highlight CSS classes
  • Make execute_ignore a list
  • Fix various CSS issues

0.23.0

  • Support nbconvert 7

0.21.0

  • Support Pygments 2.1.0
  • Fix some markdown CSS overflow issues

0.20.1

0.20.0

  • Support for toggle themes in material
  • Use poetry 1.1.X

0.19.0

  • Support mkdocs-material 8

0.18.1

  • Support multiple languages syntax highlighting

0.18.0

... (truncated)

Commits

Updates jupytext to 1.19.3

Release notes

Sourced from jupytext's releases.

Version 1.19.3

Fixed

  • The Jupytext CLI issues a warning when a notebook is not trusted. Also, trust is preserved when empty outputs are added (follow-up on #1505)

Changed

  • The dependabot config has been updated to correctly bump extension packages, now allowing only production updates and ignoring dev dependencies (#1532). Thanks to Mahendra Paipuri for this PR!
  • Removed deprecated stylelint packages (stylelint-config-prettier and stylelint-prettier) from the JupyterLab extension dependencies (#1530)
  • We have removed Python 3.9 testing from the CI (Python 3.9 reached EOL in October 2025)
Changelog

Sourced from jupytext's changelog.

1.19.3 (2026-05-17)

Fixed

  • The Jupytext CLI issues a warning when a notebook is not trusted. Also, trust is preserved when empty outputs are added (follow-up on #1505)

Changed

  • The dependabot config has been updated to correctly bump extension packages, now allowing only production updates and ignoring dev dependencies (#1532). Thanks to Mahendra Paipuri for this PR!
  • Removed deprecated stylelint packages (stylelint-config-prettier and stylelint-prettier) from the JupyterLab extension dependencies (#1530)
  • We have removed Python 3.9 testing from the CI (Python 3.9 reached EOL in October 2025)

1.19.2 (2026-05-10)

Fixed

  • Trusted notebooks remain trusted after jupytext --sync (#1505)
  • We have fixed the homepage link in package.json. Thanks to Michał Krassowski for making this PR (#1494)
  • Thanks to Brigitta Sipőcz for fixing a broken link in our CLI (#1428)
  • The --quiet flag now suppresses the creating missing directory warning when writing to a path that includes a prefix (#1533)

Changed

  • The CI workflow has been restructured to maximize parallelization. All test suites (pip, conda, UI) and the build step now run concurrently after pre-commit checks, instead of sequentially, reducing CI times (#1527)
  • We have skipped the tests that involve jupyterfs on Python 3.12+ as they started failing on the CI with no obvious way to fix them (#1509)
  • We have changed the configuration of Dependabot to get grouped dependency updates for our JupyterLab extension.
  • We have merged a series of Dependabot security updates: #1516, #1517, #1519, #1520, #1522, #1524

1.19.1 (2026-01-25)

Changed

  • Jupytext does not change the file icons anymore! Thanks to Michał Krassowski for finally solving this long standing issue! (#398)
  • We have bumped lodash from 4.17.21 to 4.17.23 in JupyterLab extension (#1483)
  • We require marimo<=0.19.4 in tests following a change in the location of the marimo import (#1485)

1.19.0 (2026-01-18)

Changed

  • The environment used to develop Jupytext is now maintained using Pixi (#1459)

Fixed

  • We have restored the support for .qmd documents in Jupyter (#1435)
  • We have fixed warnings about the cell ids like either Cell is missing an id field or Additional properties are not allowed ('id' was unexpected) when converting to some formats, including Pandoc (#1464)
  • We have updated the dependencies of the Jupytext extension for JupyterLab. Many thanks to Mahendra Paipuri for his PR (#1477)!

Added

... (truncated)

Commits
  • 48fdfd8 Fix: Adding cells with no outputs preserves trust status (#1531)
  • 4706e65 chore: Update dependabot config (#1532)
  • 2ec5404 build (deps): Remove deprecated stylelint packages (#1530)
  • 309f97f Version 1.19.2 (#1529)
  • e4dded4 build(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /jupyterlab/packages/...
  • 2c262e5 Fix: --quiet also suppresses warning for directory creation (#1526)
  • 0bfcec1 build(deps): bump fast-uri from 3.1.0 to 3.1.2 in /jupyterlab (#1524)
  • 611e2c0 Explicitly close NotebookNotary signature store (#1528)
  • 70b1f20 All tests run after coverage tests have passed (#1527)
  • 399e934 Close SQLite database connections of Jupytext-created notaries
  • Additional commits viewable in compare view

Updates nbconvert to 7.17.1

Release notes

Sourced from nbconvert's releases.

v7.17.1

7.17.1

This is a security release, fixing two CVEs:

(full advisories will be published seven days after release, on 2026-04-14).

(Full Changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​akhmerov (activity) | @​bollwyvl (activity) | @​Carreau (activity) | @​ctcjab (activity) | @​davidbrochart (activity) | @​Ken-B (activity) | @​krassowski (activity) | @​mgeier (activity) | @​minrk (activity) | @​mpacer (activity) | @​MSeal (activity) | @​SylvainCorlay (activity) | @​takluyver (activity) | @​timkpaine (activity)

Changelog

Sourced from nbconvert's changelog.

7.17.1

This is a security release, fixing two CVEs:

(full advisories will be published seven days after release, on 2026-04-14).

(Full Changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​akhmerov (activity) | @​bollwyvl (activity) | @​Carreau (activity) | @​ctcjab (activity) | @​davidbrochart (activity) | @​Ken-B (activity) | @​krassowski (activity) | @​mgeier (activity) | @​minrk (activity) | @​mpacer (activity) | @​MSeal (activity) | @​SylvainCorlay (activity) | @​takluyver (activity) | @​timkpaine (activity)

7.17.0

(Full Changelog)

Enhancements made

Bugs fixed

... (truncated)

Commits

Updates ipykernel to 7.2.0

Release notes

Sourced from ipykernel's releases.

v7.2.0

7.2.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​arjxn-py (activity) | @​Carreau (activity) | @​ccordoba12 (activity) | @​ianthomas23 (activity) | @​JohanMabille (activity) | @​minrk (activity) | @​newville (activity) | @​SylvainCorlay (activity)

Changelog

Sourced from ipykernel's changelog.

7.2.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​arjxn-py (activity) | @​Carreau (activity) | @​ccordoba12 (activity) | @​ianthomas23 (activity) | @​JohanMabille (activity) | @​minrk (activity) | @​newville (activity) |

zlatko-minev and others added 2 commits June 9, 2026 11:54
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Updates the requirements on [matplotlib](https://github.com/matplotlib/matplotlib), [numpy](https://github.com/numpy/numpy), [ipython](https://github.com/ipython/ipython), [seaborn](https://github.com/mwaskom/seaborn), [pytest](https://github.com/pytest-dev/pytest), [mkdocs-material](https://github.com/squidfunk/mkdocs-material), [mkdocs-jupyter](https://github.com/danielfrg/mkdocs-jupyter), [jupytext](https://github.com/mwouts/jupytext), [nbconvert](https://github.com/jupyter/nbconvert), [ipykernel](https://github.com/ipython/ipykernel) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `matplotlib` to 3.10.9
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.6.0...v3.10.9)

Updates `numpy` to 2.2.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.21.0...v2.2.6)

Updates `ipython` to 8.39.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@7.0.0...8.39.0)

Updates `seaborn` to 0.13.2
- [Release notes](https://github.com/mwaskom/seaborn/releases)
- [Commits](mwaskom/seaborn@v0.12.0...v0.13.2)

Updates `pytest` to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@7.0.0...9.0.3)

Updates `mkdocs-material` to 9.7.6
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.5.0...9.7.6)

Updates `mkdocs-jupyter` to 0.26.3
- [Changelog](https://github.com/danielfrg/mkdocs-jupyter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/danielfrg/mkdocs-jupyter/commits)

Updates `jupytext` to 1.19.3
- [Release notes](https://github.com/mwouts/jupytext/releases)
- [Changelog](https://github.com/mwouts/jupytext/blob/main/CHANGELOG.md)
- [Commits](jupytext/jupytext@v1.16.0...v1.19.3)

Updates `nbconvert` to 7.17.1
- [Release notes](https://github.com/jupyter/nbconvert/releases)
- [Changelog](https://github.com/jupyter/nbconvert/blob/main/CHANGELOG.md)
- [Commits](jupyter/nbconvert@7.0.0...v7.17.1)

Updates `ipykernel` to 7.2.0
- [Release notes](https://github.com/ipython/ipykernel/releases)
- [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md)
- [Commits](ipython/ipykernel@6.0.0...v7.2.0)

Updates `setuptools` to 82.0.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v61.0.0...v82.0.1)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: numpy
  dependency-version: 2.2.6
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: ipython
  dependency-version: 8.39.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: seaborn
  dependency-version: 0.13.2
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mkdocs-material
  dependency-version: 9.7.6
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mkdocs-jupyter
  dependency-version: 0.26.3
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: jupytext
  dependency-version: 1.19.3
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: nbconvert
  dependency-version: 7.17.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: ipykernel
  dependency-version: 7.2.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/pip/python-deps-8052bd5112 branch June 10, 2026 05:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant