Skip to content

chore(deps): bump the python group across 1 directory with 9 updates - #138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-4e680351cc
Open

chore(deps): bump the python group across 1 directory with 9 updates#138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-4e680351cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the python group with 9 updates in the / directory:

Package From To
mlflow 3.15.1 3.15.2
numba 0.66.0 0.67.0
numpy 2.4.6 2.5.2
shap 0.49.1 0.52.0
lefthook 2.1.10 2.1.11
ruff 0.16.2 0.16.5
ty 0.0.69 0.0.75
validate-pyproject 0.25 0.26
nbformat 5.11.0 5.11.1

Updates mlflow from 3.15.1 to 3.15.2

Release notes

Sourced from mlflow's releases.

v3.15.2

MLflow 3.15.2 is a patch release that includes several major features and improvements.

Features:

Bug fixes:

Changelog

Sourced from mlflow's changelog.

3.15.2 (2026-08-25)

MLflow 3.15.2 is a patch release that includes several major features and improvements.

Features:

Bug fixes:

Commits
  • ca15da9 Add build-docs workflow for publishing release docs (#24857) (#25331)
  • b2af107 Bump version to 3.15.2 (#25327)
  • e3efd50 Backport runs.status constraint metadata alignment (#24890)
  • 878e786 Backport MLFLOW_TRACE_ARCHIVAL_CONFIG delenv in workspace store tests
  • c2e8848 Pin litellm<1.97 in test-requirements for genai job
  • dd646e3 Backport httpx2 lock assertion for unpinned openai
  • dde2279 Pin ag2<1 and litellm<1.97 to fix branch-3.15 CI
  • d5198d7 Preserve base judge invocation flow in MemAlign aligned judges (#24883)
  • fb67e7d [GenAI] Support immutable evaluation dataset versions (#24845)
  • 0b363e6 Pre-import databricks.sdk in Databricks to avoid telemetry deadlock (#24841)
  • Additional commits viewable in compare view

Updates numba from 0.66.0 to 0.67.0

Release notes

Sourced from numba's releases.

0.67.0

Major Numba release, adding NumPy 2.5 support. Please view the release notes here: https://numba.readthedocs.io/en/0.67.0/release/0.67.0-notes.html

Commits
  • 3190b91 Merge pull request #10772 from swap357/release0.67
  • f68f603 add current pr on 0.67 pr list
  • 86a975c update final release date for 0.67
  • c7f14cf Merge pull request #10726 from swap357/pin_deps_0.67
  • 123fa28 update test refs and pin dependencies for release0.67
  • 0c89330 Merge pull request #10724 from swap357/changelog_0.67
  • ffaa017 Merge pull request #10723 from swap357/update_version_support_table_0.67.0rc1
  • af0d879 fix wrapping on release notes
  • a5e4654 Update docs/source/release/0.67.0-notes.rst
  • e85720e Update docs/source/release/0.67.0-notes.rst
  • Additional commits viewable in compare view

Updates numpy from 2.4.6 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhijeetsingh Meena +
  • Charalampos Stratakis
  • Charles Harris
  • Chris Ninham +
  • David Woods
  • Geonho +
  • Gopu Yeshwanth Reddy +
  • Iason Krommydas
  • Ijtihed Kilani
  • Jelle Zijlstra +
  • Joren Hammudoglu
  • Kumar Aditya
  • Mike Boyle
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg

... (truncated)

Commits
  • 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
  • ecf599c Merge pull request #32221 from charris/backport-32151
  • 3c7ac97 Merge pull request #32220 from charris/backport-32205
  • 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
  • 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
  • c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
  • 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
  • d8262bc MAINT: Update cibuildwheel to v4.2.0
  • 988d94d Merge pull request #32158 from charris/backport-32133
  • b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
  • Additional commits viewable in compare view

Updates shap from 0.49.1 to 0.52.0

Release notes

Sourced from shap's releases.

v0.52.0

What's Changed

Highlights

  • Native bindings rewritten with nanobind, and the build system migrated from setup.py to scikit-build-core + CMake. The Cython _kernel_lib.pyx and the existing _cext / _cext_gpu modules are now built as nanobind extensions, and MANIFEST.in / setup.py have been removed in favor of a pyproject.toml-driven build. (#4366, by @​CloseChoice and @​daidahao and @​claude)
  • Minimum dependency versions raised to follow SPEC 0. (#4310, by @​CloseChoice)

Enhancements

Bug Fixes

  • Improve GPU TreeExplainer parity: preserve XGBoost default/missing child routing so NaN values follow the same branch as the source model, preserve vector-valued XGBoost base_score values (fixing multiclass additivity offsets), and tighten categorical handling so sklearn models with enable_categorical=True raise the existing unsupported-categorical error even when the booster does not expose feature_types. (#4997, by @​RAMitchell)
  • TreeExplainer no longer crashes with pandas nullable dtypes. (#4298, by @​tudstudent)
  • Fix NameError when with_binary=False and with_cuda=True by initializing compile_args. (#4322, by @​mohityadav8)
  • Text plot colors render correctly by converting NumPy types to float. (#4332, by @​Saloni-0465)
  • Assign the result of np.flipud so it is no longer a no-op in AdditiveForceArrayVisualizer. (#4343, by @​Mahaveerjain-18)
  • Use isinstance() instead of is for type checks. (#4373, by @​divyam-jha123)
  • Record 'sample' in Explanation.op_history instead of '__getitem__'. (#4376, by @​tarun-227)
  • Move the unreachable large-dataset warning into the interventional branch. (#4392, by @​Mahaveerjain-18)
  • Fix "structure of inputs doesn't match the expected structure". (#4410, by @​shaivimalik)
  • Fix the return value from is_color_map() in plots/_beeswarm.py. (#4421, by @​maniktyagi04)
  • Suppress the UserWarning when LGBMRegressor was fitted with feature names. (#4422, by @​shaivimalik)

... (truncated)

Commits
  • 8461059 FIX: Improve GPU TreeExplainer parity (#4997)
  • 8549e6b fix: use isinstance() instead of type() is tuple checks (#4508)
  • 3be7001 remove webpack dependency for sickness scores (#5018)
  • 6e9f9b8 build(deps): bump qs and express in /javascript (#5015)
  • 9be5435 build(deps): bump idna from 3.11 to 3.15 in /docs (#5007)
  • 52dd763 pin torch to <=2.11.0 in pyproject.toml (#5017)
  • d8f2e76 build(deps-dev): bump webpack-dev-server in /javascript (#5009)
  • ac6e677 build(deps-dev): bump @​babel/plugin-transform-modules-systemjs (#4991)
  • 679b2ee FIX: warn when covariance matrix is singular in LinearExplainer (#4471)
  • ce4abd7 build(deps): bump mistune from 3.2.0 to 3.2.1 (#4990)
  • Additional commits viewable in compare view

Updates lefthook from 2.1.10 to 2.1.11

Release notes

Sourced from lefthook's releases.

v2.1.11

Changelog

  • e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)
  • d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)
Changelog

Sourced from lefthook's changelog.

2.1.11 (2026-08-21)

Commits

Updates ruff from 0.16.2 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates ty from 0.0.69 to 0.0.75

Release notes

Sourced from ty's releases.

0.0.75

Release Notes

Released on 2026-08-26.

Preview features

  • Initialize PEP 723 script environments in the CLI (#27544)
  • Refresh PEP 723 script environments in watch mode (#27617)
  • Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

  • Specialize Self bounds of inherited methods (#27990)

LSP server

  • Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

  • Fix documented Python package build command (#4384)
  • Link untyped-call tracking issue in migration guide (#4382)

Library support

  • Resolve imported pytest fixture exposures (#27539)
  • Resolve installed core pytest fixture providers (#27770)
  • Resolve pytest fixtures through conftest (#27540)

Diagnostics

  • Add more autofixes (#28029)
  • Add a dedicated missing-slot diagnostic (#28039)
  • Explain missing storage for declared slotted attributes (#27969)
  • Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

  • Account for known subclasses in equality inference (#28005)
  • Expand ParamSpec signatures inferred from bound receivers (#28020)
  • Fix Self binding in ParamSpec protocols (#28016)
  • Fix TypedDict variance inference (#28052)
  • Fix unsound narrowing through branch-assigned conditions (#28006)
  • Ignore inconsistent binding decorators on overloads (#28036)
  • Infer yield from send/return types from the iterator returned by __iter__ (#27987)
  • Infer tuple type parameters from union arguments (#28062)
  • Infer variance through nonrecursive protocol references (#28065)
  • Preserve bounds of non-literal metaclasses (#28046)
  • Preserve correlated generic-call inference (#28043)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.75

Released on 2026-08-26.

Preview features

  • Initialize PEP 723 script environments in the CLI (#27544)
  • Refresh PEP 723 script environments in watch mode (#27617)
  • Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

  • Specialize Self bounds of inherited methods (#27990)

LSP server

  • Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

  • Fix documented Python package build command (#4384)
  • Link untyped-call tracking issue in migration guide (#4382)

Library support

  • Resolve imported pytest fixture exposures (#27539)
  • Resolve installed core pytest fixture providers (#27770)
  • Resolve pytest fixtures through conftest (#27540)

Diagnostics

  • Add more autofixes (#28029)
  • Add a dedicated missing-slot diagnostic (#28039)
  • Explain missing storage for declared slotted attributes (#27969)
  • Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

  • Account for known subclasses in equality inference (#28005)
  • Expand ParamSpec signatures inferred from bound receivers (#28020)
  • Fix Self binding in ParamSpec protocols (#28016)
  • Fix TypedDict variance inference (#28052)
  • Fix unsound narrowing through branch-assigned conditions (#28006)
  • Ignore inconsistent binding decorators on overloads (#28036)
  • Infer yield from send/return types from the iterator returned by __iter__ (#27987)
  • Infer tuple type parameters from union arguments (#28062)
  • Infer variance through nonrecursive protocol references (#28065)
  • Preserve bounds of non-literal metaclasses (#28046)
  • Preserve correlated generic-call inference (#28043)
  • Preserve invariant materialization constraints (#28047)

... (truncated)

Commits

Updates validate-pyproject from 0.25 to 0.26

Release notes

Sourced from validate-pyproject's releases.

0.26

What's Changed

New Features

Main Fixes and Improvements

  • Allowed multiple schemas describing the same tool when the schema definitions are identical, by @​henryiii (#303).
  • Improved SchemaStore compatibility by supporting relative schema URLs, by @​henryiii (#306).
  • Fixed filtering of multi_schema entry points before loading, by @​henryiii (#318).
  • Added network request timeouts to avoid indefinite blocking, by @​henryiii (#319).

Contributors

Special thanks to @​henryiii, as well as @​DimitriPapadopoulos and all other contributors who helped improve the project.

Full Changelog: abravalheri/validate-pyproject@v0.25...0.26

Changelog

Sourced from validate-pyproject's changelog.

Version 0.26

  • Add support for :pep:808 partially dynamic metadata by :user:henryiii (:pr:314)
  • Allow multiple schemas describing the same tool when the schema definitions are identical by :user:henryiii (:pr:303)
  • Improve SchemaStore compatibility by supporting relative schema URLs by :user:henryiii (:pr:306)
  • Apply filtering before loading validate_pyproject.multi_schema entry points by :user:henryiii (:pr:318)
  • Add timeouts to network requests to avoid indefinite blocking by :user:henryiii (:pr:319)
Commits
  • 17e1277 Update CHANGELOG for version 0.26
  • d097f4b chore(deps): bump astral-sh/setup-uv in the actions group (#332)
  • 14f4cdc Populate changelog for upcoming version
  • c2f3d75 feat: implement PEP 808 (partially dynamic metadata)
  • a6441c6 refactor: clarify PEP 808 error message and add fixtures
  • 04032da fix: revert URL now that the guidelines are updated
  • 7c0b759 style: pre-commit fixes
  • a8b20a4 feat: implement PEP 808 — partially dynamic metadata
  • 0076413 chore(deps): update pre-commit hooks (#331)
  • 92829d8 chore(deps): bump astral-sh/setup-uv in the actions group (#330)
  • Additional commits viewable in compare view

Updates nbformat from 5.11.0 to 5.11.1

Release notes

Sourced from nbformat's releases.

v5.11.1

5.11.1

(Full Changelog)

Merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​aryansk (activity) | @​Carreau (activity)

Changelog

Sourced from nbformat's changelog.

5.11.1

(Full Changelog)

Merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​aryansk (activity) | @​Carreau (activity)

Commits
  • 75f819f Publish 5.11.1
  • 4db76de Bump github/codeql-action from 4.37.3 to 4.37.5 in the actions group
  • 3eca403 Try to skip publishing to NPM to be able to publish a patch version on
  • d2c5d33 disable pendingdeprecationWarnings for now
  • 003ea2c fix steps to skip
  • 2e1272b style: pre-commit fixes
  • 0bd4ebe Clarify normalize guidance in the changelog
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mlflow](https://github.com/mlflow/mlflow) | `3.15.1` | `3.15.2` |
| [numba](https://github.com/numba/numba) | `0.66.0` | `0.67.0` |
| [numpy](https://github.com/numpy/numpy) | `2.4.6` | `2.5.2` |
| [shap](https://github.com/shap/shap) | `0.49.1` | `0.52.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.10` | `2.1.11` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.5` |
| [ty](https://github.com/astral-sh/ty) | `0.0.69` | `0.0.75` |
| [validate-pyproject](https://github.com/abravalheri/validate-pyproject) | `0.25` | `0.26` |
| [nbformat](https://github.com/jupyter/nbformat) | `5.11.0` | `5.11.1` |



Updates `mlflow` from 3.15.1 to 3.15.2
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.15.1...v3.15.2)

Updates `numba` from 0.66.0 to 0.67.0
- [Release notes](https://github.com/numba/numba/releases)
- [Commits](numba/numba@0.66.0...0.67.0)

Updates `numpy` from 2.4.6 to 2.5.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.6...v2.5.2)

Updates `shap` from 0.49.1 to 0.52.0
- [Release notes](https://github.com/shap/shap/releases)
- [Changelog](https://github.com/shap/shap/blob/master/docs/release_notes.rst)
- [Commits](shap/shap@v0.49.1...v0.52.0)

Updates `lefthook` from 2.1.10 to 2.1.11
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.10...v2.1.11)

Updates `ruff` from 0.16.2 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.5)

Updates `ty` from 0.0.69 to 0.0.75
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.69...0.0.75)

Updates `validate-pyproject` from 0.25 to 0.26
- [Release notes](https://github.com/abravalheri/validate-pyproject/releases)
- [Changelog](https://github.com/abravalheri/validate-pyproject/blob/main/CHANGELOG.rst)
- [Commits](abravalheri/validate-pyproject@v0.25...0.26)

Updates `nbformat` from 5.11.0 to 5.11.1
- [Release notes](https://github.com/jupyter/nbformat/releases)
- [Changelog](https://github.com/jupyter/nbformat/blob/main/CHANGELOG.md)
- [Commits](jupyter/nbformat@v5.11.0...v5.11.1)

---
updated-dependencies:
- dependency-name: mlflow
  dependency-version: 3.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: numba
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: numpy
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: shap
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: lefthook
  dependency-version: 2.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ty
  dependency-version: 0.0.75
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: validate-pyproject
  dependency-version: '0.26'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: nbformat
  dependency-version: 5.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants