Skip to content

chore(deps)(deps): bump the python-versions group across 1 directory with 19 updates - #1079

Merged
MvLieshout merged 2 commits into
mainfrom
dependabot/uv/python-versions-fdc2e9fddd
Sep 10, 2026
Merged

chore(deps)(deps): bump the python-versions group across 1 directory with 19 updates#1079
MvLieshout merged 2 commits into
mainfrom
dependabot/uv/python-versions-fdc2e9fddd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-versions group with 18 updates in the / directory:

Package From To
huggingface-hub 1.27.0 1.30.0
scipy-stubs 1.18.0.1 1.18.1.0
ipython 9.16.1 9.17.1
pydata-sphinx-theme 0.20.0 0.21.0
sphinx-autodoc-typehints 3.13.2 3.13.5
sphinxcontrib-mermaid 2.1.0 2.1.1
dagster 1.13.18 1.13.21
joblib 1.5.3 1.6.0
numpy 2.5.2 2.5.3
pydantic 2.13.4 2.13.5
onnxruntime 1.28.0 1.29.0
nvidia-cudnn-cu12 9.24.0.43 9.25.1.1
onnxruntime-gpu 1.28.0 1.29.0
holidays 0.102 0.103
mlflow-skinny 3.15.1 3.16.0
scipy 1.18.0 1.18.1
xgboost 3.4.0 3.4.1
xgboost-cpu 3.4.0 3.4.1

Updates huggingface-hub from 1.27.0 to 1.30.0

Release notes

Sourced from huggingface-hub's releases.

[v1.30.0] Scheduled job filters, repo-aware revision pinning and more

🖥️ hf jobs scheduled ls can now filter by status, label and name

You can now filter scheduled jobs with --status (active/suspended), repeatable -l/--label key=value and --name (a shortcut for --label name=NAME), matching the flags hf jobs ls already had. On the Python side, HfApi.list_scheduled_jobs gains a labels argument.

[!WARNING] -f/--filter on hf jobs scheduled ls is deprecated and no longer applied: it is accepted but ignored, with a warning pointing to the new flags. Migrate as shown below. The option itself will be removed in a future release.

hf jobs scheduled ls --all
hf jobs scheduled ls --status suspended
hf jobs scheduled ls --name hourly-task --label env=prod
before after
-f name=daily-report --name daily-report
-f env=prod --label env=prod
-f suspend!=true (default, or --status active)
-f suspend=true --status suspended

📚 Documentation: Jobs guide

  • Align hf jobs scheduled ls filtering with hf jobs ls (--status/--label/--name) by @​moon-bot-app[bot] in #4773

🔖 ResolvedRevision now pins the repo it was resolved for

ResolvedRevision didn't record which repo a commit hash was resolved against, so resolving "main" on two different repos returned the same commit oid. It now remembers its repo_id and repo_type: passed back for the same repo it is returned as is, for a different repo the requested revision is resolved again.

>>> from huggingface_hub import resolve_revision
>>> revision = resolve_revision("openai-community/gpt2")
Same repo => returned as is
>>> resolve_revision("openai-community/gpt2", revision=revision) is revision
True
Another repo => "main" is resolved again for that repo
>>> resolve_revision("openai-community/gpt2-medium", revision=revision).resolved
'6dcaa7a952f72f9298047fd5137cd6e4f05f41da'

📚 Documentation: Manage cache — Pin a revision

  • [Download] A ResolvedRevision only pins the repo it was resolved for by @​Wauplin in #4767

🤖 Inference

  • Do not require the conversational tag for chat-completion on hf-inference: any model with pipeline tag text-generation or image-text-to-text can now be served, mirroring the updated provider-side rules by @​hanouticelina in #4784

... (truncated)

Commits
  • 48ef278 Release: v1.30.0
  • a073ecb Release: v1.30.0.rc0
  • b84090b [Release] Consolidate the HF CLI skill sync into the release workflow (#4765)
  • 176d4f3 [CI] Disable auto close (#4800)
  • f0a5c6d [Inference Providers] Do not require the conversational tag for chat-completi...
  • 6a2eb09 [Sandbox] Document experimental status (#4783)
  • 94cb25d [CI] Fix torch_1.11 case-arm label to match renamed matrix entry (#4776)
  • 4cc16bc [Download] A ResolvedRevision only pins the repo it was resolved for (#4767)
  • 1de4817 [Download] Follow redirects between Hub hosts when resolving files (#4739)
  • 97655e8 Align hf jobs scheduled ls filtering with hf jobs ls (--status/`--label...
  • Additional commits viewable in compare view

Updates scipy-stubs from 1.18.0.1 to 1.18.1.0

Release notes

Sourced from scipy-stubs's releases.

v1.18.1.0

This scipy-stubs release comes with many improvements and even more fixes. It targets SciPy 1.18.1 and supports Python 3.12–3.15, NumPy 2.0–2.7, and optype 0.15–0.19.

🏆 Release Highlights

  • ✨ 105 improvements
  • 🐛 129 fixes
  • ✅ 100% test coverage
  • 🏷️ linalg.blas & linalg.lapack complete type coverage

What's Changed

⏬ SciPy Changes

✨ Improvements

... (truncated)

Commits
  • 844c24a 🔖 scipy-stubs 1.18.1.0
  • 6d3c811 Merge pull request #2302 from scipy:remove-update_dprint-workflow
  • fb4c765 ⚰️ remove broken update_dprint workflow
  • 19b2cb9 Merge pull request #2301 from scipy/bump-dev-deps
  • 7fbe7a2 ⬆️ update development dependencies
  • bd8ad95 Merge pull request #2300 from scipy:scipy-1.18.1
  • 52ce801 👽️ version: update version literals
  • 93cf36f 👽️ interpolate: update __class_getitem__ classmethods
  • c7cf199 📌 SciPy 1.18.1
  • 968e187 Merge pull request #2299 from scipy:stats.linregress/propagate-f32
  • Additional commits viewable in compare view

Updates ipython from 9.16.1 to 9.17.1

Commits
  • 48ff029 release 9.17.1
  • ed47107 Have builin-lazy magics have a lower priority than registered on.
  • 19f9ae0 back to dev
  • 3278f6f release 9.17.0
  • 40cfb95 Update what's new for 9.17
  • 2ed42ae Fix RST formatting in display_functions.py
  • a487a06 change emojis
  • 7f0ee55 Declare IPython's built-in magics lazily
  • ee02392 Only run the psutil-free kitty detection test where /proc exists
  • af386cf Annotate _find_dunder and put measured numbers in the whatsnew
  • Additional commits viewable in compare view

Updates pydata-sphinx-theme from 0.20.0 to 0.21.0

Release notes

Sourced from pydata-sphinx-theme's releases.

v0.21.0

What's Changed

Breaking

None.

Fixes

Improvements

Dependencies

New Contributors

Full Changelog: pydata/pydata-sphinx-theme@v0.20.0...v0.21.0

Commits
  • a52f5c9 Bump 0.20.0 -> 0.21.0 (#2472)
  • dc10572 Prevent "Back to Top" button from being cropped on firefox/android (#2442)
  • a9f2040 Bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#2468)
  • fe3f573 Bump py-cov-action/python-coverage-comment-action from 4.1 to 4.3 (#2467)
  • 3e15d01 fix: don't share sidebars between pages with non-flat output URIs (#2469)
  • c90610d fix: correct typo in source (#2459)
  • 051ac2c Avoid redundant processing when collapse_navigation=False (#2449)
  • ca91fce refactor: drop user-select rule superseded by Sphinx's basic.css (#2464)
  • 2a63b5c Bump js-yaml from 4.2.0 to 4.3.1 (#2463)
  • cbb254b Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#2460)
  • Additional commits viewable in compare view

Updates sphinx-autodoc-typehints from 3.13.2 to 3.13.5

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.13.5

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.13.4...3.13.5

3.13.4

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.13.3...3.13.4

3.13.3

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.13.2...3.13.3

Commits
  • 7672e3f 🐛 fix(annotations): expand aliases from unread modules (#765)
  • 60d74b3 [pre-commit.ci] pre-commit autoupdate (#763)
  • 804d9ce [pre-commit.ci] pre-commit autoupdate (#762)
  • 7853f2e 🧪 test(docstring): pin what a nested handler restores (#759)
  • a708030 🐛 fix(resolver): bind only what a guarded statement defines (#760)
  • f6ca3fd 🐛 fix(parser): stop shadowing intersphinx roles in the type role (#761)
  • 02dd58f 🐛 fix(docstring): survive a re-entrant docstring handler (#758)
  • 3f6d334 🐛 fix(resolver): accept guarded code the interpreter rejects (#757)
  • d98ed0b 🐛 fix(parser): stop shadowing intersphinx roles in the rtype probe (#756)
  • c4b99d0 🔧 chore: batch dependency updates weekly on Tuesday (#755)
  • Additional commits viewable in compare view

Updates sphinxcontrib-mermaid from 2.1.0 to 2.1.1

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.1 (July 19, 2026)

  • Preserve source metadata on generated Mermaid caption nodes so Sphinx extracts them into gettext catalogs and applies normal caption translations
  • Pass the existing mermaid image class through the HTML visitor so PNG output can be targeted consistently with CSS
Commits
  • 6e51230 Merge pull request #262 from mgaitan/tkp/211
  • 7c61bb6 Merge pull request #264 from mgaitan/dependabot/github_actions/github-actions...
  • 77bd593 Merge branch 'master' into dependabot/github_actions/github-actions-a934d7c76e
  • d1b8ca8 Merge pull request #265 from mgaitan/tkp/ruff
  • 4ad2812 Fixes for ruff 16
  • 056261d Bump pypa/gh-action-pypi-publish in the github-actions group
  • 015f47a Merge pull request #263 from mgaitan/dependabot/github_actions/github-actions...
  • a8f8b59 Bump the github-actions group with 3 updates
  • e81147d Bump to 2.1.1 and update changelog
  • e267890 Merge pull request #261 from timkpaine/tkp/translate-mermaid-captions
  • Additional commits viewable in compare view

Updates dagster from 1.13.18 to 1.13.21

Release notes

Sourced from dagster's releases.

1.13.21 (core) / 0.29.21 (libraries)

New

  • Asset backfills whose runs have all finished but which still have partitions with no materialization status now complete as failed instead of remaining in progress indefinitely.
  • In Dagster+, wiping and deleting dynamic partitions in a single action now also supports multi-partitioned assets that use the dynamic partitions definition as a dimension.
  • In Dagster+, alert policies defined in a YAML file can no longer be edited, disabled, or deleted from the UI. Update the file and sync instead. Muting is still available from the UI, and the in-app YAML editor now shows only UI-managed alert policies.
  • In Dagster+, syncing alert policies from a YAML file no longer deletes alert policies created in the UI. Alert policies that existed before this release are never removed by a sync and must be deleted manually from the UI.
  • [ui] Automation condition evaluations now explain history-dependent conditions (since, newly_true, newly_missing) by showing the remembered values that determined them, such as when a latch was set or reset and an operand's value on the current versus previous tick, instead of the operands' current values, which could appear to contradict the parent condition.

Bugfixes

  • Fixed an issue where a freshness policy declared for an asset in one code location was ignored when another code location defined the same asset without a policy (for example, a dbt source spec paired with an ingestion-tool materialization). The policy now appears in the asset catalog and is evaluated by the freshness daemon.
  • Fixed a bug where a backfill run that materialized some partitions of an asset and failed on others left the failed partitions showing as in progress.
  • [dagster-postgres] Fixed a connection leak where checking for the existence of the event log table did not return its connection to the pool, which could exhaust the webserver's connection pool on instances with many asset nodes. (Thanks, @​watacoso!)

Documentation

  • Updated the list of Dagster+ IP addresses that agents connect to, for use in network allowlists.

1.13.20 (core) / 0.29.20 (libraries)

New

  • In Dagster+, dynamic partitions can now be wiped and deleted in a single action, clearing the asset's degraded health status. Multi-partitioned assets are not yet supported.
  • Alert policies can now notify on successful code location deploys.
  • [ui] Filter inputs now show your recent searches in the autocomplete dropdown before you start typing.
  • [ui] Refreshed the Dagster and Dagster+ logos and favicons to the new branding.
  • [ui] Updated the Google kind tag icons. (Thanks, @​dragos-pop!)

Bugfixes

  • [dagster-aws] Fixed an issue where an ECS run launch would fail instead of retrying when ECS reported a transient AGENT failure. (Thanks, @​yishern!)

1.13.19 (core) / 0.29.19 (libraries)

New

  • [ui] Added an expand/collapse all toggle to the automation condition evaluation table.

Bugfixes

  • [ui] Fixed an issue where the sensor dry run "Apply requests & commit tick result" action could launch runs even when creating or deleting dynamic partitions failed due to insufficient permissions.
Changelog

Sourced from dagster's changelog.

1.13.21 (core) / 0.29.21 (libraries)

New

  • Asset backfills whose runs have all finished but which still have partitions with no materialization status now complete as failed instead of remaining in progress indefinitely.
  • In Dagster+, wiping and deleting dynamic partitions in a single action now also supports multi-partitioned assets that use the dynamic partitions definition as a dimension.
  • In Dagster+, alert policies defined in a YAML file can no longer be edited, disabled, or deleted from the UI. Update the file and sync instead. Muting is still available from the UI, and the in-app YAML editor now shows only UI-managed alert policies.
  • In Dagster+, syncing alert policies from a YAML file no longer deletes alert policies created in the UI. Alert policies that existed before this release are never removed by a sync and must be deleted manually from the UI.
  • [ui] Automation condition evaluations now explain history-dependent conditions (since, newly_true, newly_missing) by showing the remembered values that determined them, such as when a latch was set or reset and an operand's value on the current versus previous tick, instead of the operands' current values, which could appear to contradict the parent condition.

Bugfixes

  • Fixed an issue where a freshness policy declared for an asset in one code location was ignored when another code location defined the same asset without a policy (for example, a dbt source spec paired with an ingestion-tool materialization). The policy now appears in the asset catalog and is evaluated by the freshness daemon.
  • Fixed a bug where a backfill run that materialized some partitions of an asset and failed on others left the failed partitions showing as in progress.
  • [dagster-postgres] Fixed a connection leak where checking for the existence of the event log table did not return its connection to the pool, which could exhaust the webserver's connection pool on instances with many asset nodes. (Thanks, @​watacoso!)

Documentation

  • Updated the list of Dagster+ IP addresses that agents connect to, for use in network allowlists.

1.13.20 (core) / 0.29.20 (libraries)

New

  • In Dagster+, dynamic partitions can now be wiped and deleted in a single action, clearing the asset's degraded health status. Multi-partitioned assets are not yet supported.
  • Alert policies can now notify on successful code location deploys.
  • [ui] Filter inputs now show your recent searches in the autocomplete dropdown before you start typing.
  • [ui] Refreshed the Dagster and Dagster+ logos and favicons to the new branding.
  • [ui] Updated the Google kind tag icons. (Thanks, @​dragos-pop!)

Bugfixes

  • [dagster-aws] Fixed an issue where an ECS run launch would fail instead of retrying when ECS reported a transient AGENT failure. (Thanks, @​yishern!)

1.13.19 (core) / 0.29.19 (libraries)

New

  • [ui] Added an expand/collapse all toggle to the automation condition evaluation table.

Bugfixes

  • [ui] Fixed an issue where the sensor dry run "Apply requests & commit tick result" action could launch runs even when creating or deleting dynamic partitions failed due to insufficient permissions.
Commits
  • 013e571 1.13.21
  • e7b063a 1.13.21 changelog (#26735)
  • 55a1725 Bump kafka-python to 2.3.2 in ty/master lockfile (#26668)
  • 4b6bfbf Relock automation and dagster-mlflow to pyarrow 25.0.1 for CVE floor (#26666)
  • ed33934 Relock automation and dagster-mlflow to mlflow 3.15.2 for CVE floors (#26660)
  • 9caa02d [docs] move MCP docs to AI tools section (#26629)
  • 68f3ed8 Drop pytest-cases so dagster-aws and with_pyspark_emr collect under pytest 9....
  • 052975e Add durable launch handles and reattach lookup for pipes clients (#26606)
  • 6e21823 Support wipe + delete for multipartition assets (#26616)
  • e630b04 Apply CVE floors to starlift-demo and ty/master (#26644)
  • Additional commits viewable in compare view

Updates dagster-webserver from 1.13.18 to 1.13.21

Release notes

Sourced from dagster-webserver's releases.

1.13.21 (core) / 0.29.21 (libraries)

New

  • Asset backfills whose runs have all finished but which still have partitions with no materialization status now complete as failed instead of remaining in progress indefinitely.
  • In Dagster+, wiping and deleting dynamic partitions in a single action now also supports multi-partitioned assets that use the dynamic partitions definition as a dimension.
  • In Dagster+, alert policies defined in a YAML file can no longer be edited, disabled, or deleted from the UI. Update the file and sync instead. Muting is still available from the UI, and the in-app YAML editor now shows only UI-managed alert policies.
  • In Dagster+, syncing alert policies from a YAML file no longer deletes alert policies created in the UI. Alert policies that existed before this release are never removed by a sync and must be deleted manually from the UI.
  • [ui] Automation condition evaluations now explain history-dependent conditions (since, newly_true, newly_missing) by showing the remembered values that determined them, such as when a latch was set or reset and an operand's value on the current versus previous tick, instead of the operands' current values, which could appear to contradict the parent condition.

Bugfixes

  • Fixed an issue where a freshness policy declared for an asset in one code location was ignored when another code location defined the same asset without a policy (for example, a dbt source spec paired with an ingestion-tool materialization). The policy now appears in the asset catalog and is evaluated by the freshness daemon.
  • Fixed a bug where a backfill run that materialized some partitions of an asset and failed on others left the failed partitions showing as in progress.
  • [dagster-postgres] Fixed a connection leak where checking for the existence of the event log table did not return its connection to the pool, which could exhaust the webserver's connection pool on instances with many asset nodes. (Thanks, @​watacoso!)

Documentation

  • Updated the list of Dagster+ IP addresses that agents connect to, for use in network allowlists.

1.13.20 (core) / 0.29.20 (libraries)

New

  • In Dagster+, dynamic partitions can now be wiped and deleted in a single action, clearing the asset's degraded health status. Multi-partitioned assets are not yet supported.
  • Alert policies can now notify on successful code location deploys.
  • [ui] Filter inputs now show your recent searches in the autocomplete dropdown before you start typing.
  • [ui] Refreshed the Dagster and Dagster+ logos and favicons to the new branding.
  • [ui] Updated the Google kind tag icons. (Thanks, @​dragos-pop!)

Bugfixes

  • [dagster-aws] Fixed an issue where an ECS run launch would fail instead of retrying when ECS reported a transient AGENT failure. (Thanks, @​yishern!)

1.13.19 (core) / 0.29.19 (libraries)

New

  • [ui] Added an expand/collapse all toggle to the automation condition evaluation table.

Bugfixes

  • [ui] Fixed an issue where the sensor dry run "Apply requests & commit tick result" action could launch runs even when creating or deleting dynamic partitions failed due to insufficient permissions.
Changelog

Sourced from dagster-webserver's changelog.

1.13.21 (core) / 0.29.21 (libraries)

New

  • Asset backfills whose runs have all finished but which still have partitions with no materialization status now complete as failed instead of remaining in progress indefinitely.
  • In Dagster+, wiping and deleting dynamic partitions in a single action now also supports multi-partitioned assets that use the dynamic partitions definition as a dimension.
  • In Dagster+, alert policies defined in a YAML file can no longer be edited, disabled, or deleted from the UI. Update the file and sync instead. Muting is still available from the UI, and the in-app YAML editor now shows only UI-managed alert policies.
  • In Dagster+, syncing alert policies from a YAML file no longer deletes alert policies created in the UI. Alert policies that existed before this release are never removed by a sync and must be deleted manually from the UI.
  • [ui] Automation condition evaluations now explain history-dependent conditions (since, newly_true, newly_missing) by showing the remembered values that determined them, such as when a latch was set or reset and an operand's value on the current versus previous tick, instead of the operands' current values, which could appear to contradict the parent condition.

Bugfixes

  • Fixed an issue where a freshness policy declared for an asset in one code location was ignored when another code location defined the same asset without a policy (for example, a dbt source spec paired with an ingestion-tool materialization). The policy now appears in the asset catalog and is evaluated by the freshness daemon.
  • Fixed a bug where a backfill run that materialized some partitions of an asset and failed on others left the failed partitions showing as in progress.
  • [dagster-postgres] Fixed a connection leak where checking for the existence of the event log table did not return its connection to the pool, which could exhaust the webserver's connection pool on instances with many asset nodes. (Thanks, @​watacoso!)

Documentation

  • Updated the list of Dagster+ IP addresses that agents connect to, for use in network allowlists.

1.13.20 (core) / 0.29.20 (libraries)

New

  • In Dagster+, dynamic partitions can now be wiped and deleted in a single action, clearing the asset's degraded health status. Multi-partitioned assets are not yet supported.
  • Alert policies can now notify on successful code location deploys.
  • [ui] Filter inputs now show your recent searches in the autocomplete dropdown before you start typing.
  • [ui] Refreshed the Dagster and Dagster+ logos and favicons to the new branding.
  • [ui] Updated the Google kind tag icons. (Thanks, @​dragos-pop!)

Bugfixes

  • [dagster-aws] Fixed an issue where an ECS run launch would fail instead of retrying when ECS reported a transient AGENT failure. (Thanks, @​yishern!)

1.13.19 (core) / 0.29.19 (libraries)

New

  • [ui] Added an expand/collapse all toggle to the automation condition evaluation table.

Bugfixes

  • [ui] Fixed an issue where the sensor dry run "Apply requests & commit tick result" action could launch runs even when creating or deleting dynamic partitions failed due to insufficient permissions.
Commits
  • 013e571 1.13.21
  • e7b063a 1.13.21 changelog (#26735)
  • 55a1725 Bump kafka-python to 2.3.2 in ty/master lockfile (#26668)
  • 4b6bfbf Relock automation and dagster-mlflow to pyarrow 25.0.1 for CVE floor (#26666)
  • ed33934 Relock automation and dagster-mlflow to mlflow 3.15.2 for CVE floors (#26660)
  • 9caa02d [docs] move MCP docs to AI tools section (#26629)
  • 68f3ed8 Drop pytest-cases so dagster-aws and with_pyspark_emr collect under pytest 9....
  • 052975e Add durable launch handles and reattach lookup for pipes clients (#26606)
  • 6e21823 Support wipe + delete for multipartition assets (#26616)
  • e630b04 Apply CVE floors to starlift-demo and ty/master (#26644)
  • Additional commits viewable in compare view

Updates joblib from 1.5.3 to 1.6.0

Changelog

Sourced from joblib's changelog.

Release 1.6.0 - 2026/08/31

  • Fix caching of functions whose source cannot be retrieved, such as functions defined in a notebook cell. Their identity fell back to str(hash(func.__code__)), which is salted by PYTHONHASHSEED and so differed between processes. A worker reading the func_code.py written by another one concluded that the function had changed and wiped the whole cache directory for it, discarding results computed by its peers. func_code.py is also no longer rewritten in place, so a reader can no longer catch it half-written and draw the same conclusion. joblib/joblib#1694

  • Drop python 3.9 support. The oldest supported Python version is now Python 3.10. joblib/joblib#1773

  • Fix eval_expr (used to evaluate the pre_dispatch argument of Parallel) to raise a ValueError as documented instead of leaking a ZeroDivisionError for expressions that divide or take a modulo by zero. joblib/joblib#1810

  • MemorizedResult now forwards mmap_mode to its store backend, so a cached array reconstructed from a location is memory-mapped as requested instead of being loaded fully into memory. joblib/joblib#1799

  • Unvendor cloudpickle to more quickly benefit from maintenance releases of cloudpickle joblib/joblib#1775

  • Fix Memory.cache for functions with a keyword-only argument that has a default declared before a keyword-only argument without a default. joblib/joblib#1731

  • Fix behavior of filter_args on some precise cases. joblib/joblib#1800

  • Fix a concurrency error that could happen with unordered generator. joblib/joblib#1789

  • Fix: dump() now accepts any input os.PathLike object to be consistent with load. joblib/joblib#1812

  • The documentation now uses pydata sphinx theme. Furthermore, optional dependencies test and docs have been added to pyproject.toml. joblib/joblib#1774

  • Vendor loky 3.6.0

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team September 9, 2026 04:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 9, 2026
…with 19 updates

Bumps the python-versions group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.27.0` | `1.30.0` |
| [scipy-stubs](https://github.com/scipy/scipy-stubs) | `1.18.0.1` | `1.18.1.0` |
| [ipython](https://github.com/ipython/ipython) | `9.16.1` | `9.17.1` |
| [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.20.0` | `0.21.0` |
| [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.13.2` | `3.13.5` |
| [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) | `2.1.0` | `2.1.1` |
| [dagster](https://github.com/dagster-io/dagster) | `1.13.18` | `1.13.21` |
| [joblib](https://github.com/joblib/joblib) | `1.5.3` | `1.6.0` |
| [numpy](https://github.com/numpy/numpy) | `2.5.2` | `2.5.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.28.0` | `1.29.0` |
| [nvidia-cudnn-cu12](https://developer.nvidia.com/cuda-zone) | `9.24.0.43` | `9.25.1.1` |
| [onnxruntime-gpu](https://github.com/microsoft/onnxruntime) | `1.28.0` | `1.29.0` |
| [holidays](https://github.com/vacanza/holidays) | `0.102` | `0.103` |
| [mlflow-skinny](https://github.com/mlflow/mlflow) | `3.15.1` | `3.16.0` |
| [scipy](https://github.com/scipy/scipy) | `1.18.0` | `1.18.1` |
| [xgboost](https://github.com/dmlc/xgboost) | `3.4.0` | `3.4.1` |
| [xgboost-cpu](https://github.com/dmlc/xgboost) | `3.4.0` | `3.4.1` |



Updates `huggingface-hub` from 1.27.0 to 1.30.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.27.0...v1.30.0)

Updates `scipy-stubs` from 1.18.0.1 to 1.18.1.0
- [Release notes](https://github.com/scipy/scipy-stubs/releases)
- [Commits](scipy/scipy-stubs@v1.18.0.1...v1.18.1.0)

Updates `ipython` from 9.16.1 to 9.17.1
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.16.1...9.17.1)

Updates `pydata-sphinx-theme` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases)
- [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md)
- [Commits](pydata/pydata-sphinx-theme@v0.20.0...v0.21.0)

Updates `sphinx-autodoc-typehints` from 3.13.2 to 3.13.5
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@3.13.2...3.13.5)

Updates `sphinxcontrib-mermaid` from 2.1.0 to 2.1.1
- [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md)
- [Commits](mgaitan/sphinxcontrib-mermaid@2.1.0...2.1.1)

Updates `dagster` from 1.13.18 to 1.13.21
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.18...1.13.21)

Updates `dagster-webserver` from 1.13.18 to 1.13.21
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.18...1.13.21)

Updates `joblib` from 1.5.3 to 1.6.0
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.5.3...1.6.0)

Updates `numpy` from 2.5.2 to 2.5.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.2...v2.5.3)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `onnxruntime` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md)
- [Commits](microsoft/onnxruntime@v1.28.0...v1.29.0)

Updates `nvidia-cudnn-cu12` from 9.24.0.43 to 9.25.1.1

Updates `onnxruntime-gpu` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md)
- [Commits](microsoft/onnxruntime@v1.28.0...v1.29.0)

Updates `holidays` from 0.102 to 0.103
- [Release notes](https://github.com/vacanza/holidays/releases)
- [Changelog](https://github.com/vacanza/holidays/blob/dev/CHANGES.md)
- [Commits](vacanza/holidays@v0.102...v0.103)

Updates `mlflow-skinny` from 3.15.1 to 3.16.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.15.1...v3.16.0)

Updates `scipy` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.18.0...v1.18.1)

Updates `xgboost` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/dmlc/xgboost/releases)
- [Changelog](https://github.com/dmlc/xgboost/blob/master/NEWS.md)
- [Commits](dmlc/xgboost@v3.4.0...v3.4.1)

Updates `xgboost-cpu` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/dmlc/xgboost/releases)
- [Changelog](https://github.com/dmlc/xgboost/blob/master/NEWS.md)
- [Commits](dmlc/xgboost@v3.4.0...v3.4.1)

---
updated-dependencies:
- dependency-name: dagster
  dependency-version: 1.13.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: dagster-webserver
  dependency-version: 1.13.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: holidays
  dependency-version: '0.103'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: huggingface-hub
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: ipython
  dependency-version: 9.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: joblib
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: mlflow-skinny
  dependency-version: 3.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: numpy
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: nvidia-cudnn-cu12
  dependency-version: 9.25.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: onnxruntime
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: onnxruntime-gpu
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: pydata-sphinx-theme
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: scipy
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: scipy-stubs
  dependency-version: 1.18.1.0
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: sphinxcontrib-mermaid
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: xgboost
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: xgboost-cpu
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-versions-fdc2e9fddd branch from 8b6264b to 7d066b8 Compare September 10, 2026 04:36
Signed-off-by: Marnix van Lieshout <marnix.van.lieshout@alliander.com>
@sonarqubecloud

Copy link
Copy Markdown

@MvLieshout
MvLieshout merged commit 3d1bf7e into main Sep 10, 2026
7 checks passed
@MvLieshout
MvLieshout deleted the dependabot/uv/python-versions-fdc2e9fddd branch September 10, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants