deps: bump the python-dependencies group across 1 directory with 14 updates by dependabot[bot] · Pull Request #41 · ml4t/engineer

dependabot · 2026-08-31T10:22:29Z

Bumps the python-dependencies group with 12 updates in the / directory:

Package	From	To
ml4t-specs	`0.1.0`	`0.1.3`
polars	`1.43.2`	`1.44.1`
numpy	`2.3.5`	`2.5.2`
statsmodels	`0.14.6`	`0.15.0`
plotly	`6.9.0`	`7.0.0`
pytest-benchmark	`5.2.3`	`5.3.0`
hypothesis	`6.165.2`	`6.165.10`
ruff	`0.16.2`	`0.16.5`
ipython	`9.16.1`	`9.17.0`
pre-commit	`4.6.1`	`4.6.2`
yfinance	`1.5.2`	`1.7.0`
ty	`0.0.69`	`0.0.75`

Updates ml4t-specs from 0.1.0 to 0.1.3

Release notes

Sourced from ml4t-specs's releases.

v0.1.3

What's Changed

chore: adopt ecosystem qualification by @stefan-jansen in ml4t/specs#9

release: prepare 0.1.3 by @stefan-jansen in ml4t/specs#10

ci: bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in ml4t/specs#5

Full Changelog: ml4t/specs@v0.1.2...v0.1.3

v0.1.2

What's Changed

Add per-asset target rule policy identities by @stefan-jansen in ml4t/specs#7

Full Changelog: ml4t/specs@v0.1.1...v0.1.2

v0.1.1

What's Changed

feat: add portable lifecycle contract by @stefan-jansen in ml4t/specs#6

Full Changelog: ml4t/specs@v0.1.0...v0.1.1

Commits

bb9d7c4 ci: bump the github-actions group across 1 directory with 4 updates (#5)
3f6e77c release: prepare 0.1.3 (#10)
d85bd29 chore: adopt ecosystem qualification (#9)
1400afb Add per-asset target rule policy identities (#7)
ea1e210 feat: add portable lifecycle contract (#6)
08c201e fix: select repository for release creation
See full diff in compare view

Updates polars from 1.43.2 to 1.44.1

Release notes

Sourced from polars's releases.

Python Polars 1.44.1

Thank you to all our contributors for making this release possible! @Kevin-Patyk, @henrytsanford, @jonasdedden, @orlp and @ritchie46

Python Polars 1.44.0

⚠️ Deprecations

Deprecate rechunk parameter for all read/scan functions (#28063)

Deprecate Expr.rechunk() (#28692)

Deprecate struct.rename_fields() with an incorrect number of fields (#28672)

🚀 Performance improvements

Add private env var toggle for HTTP rate limit (#28882)

Relax default CloudRetryConfig for rate limit stability (#28885)

Elide generic cross join on subquery decorrelation in equality predicates (#28876)

cache CTE's in SQL layer (#28864)

Allow CSPE if manual caches are set (#28859)

Lower unqualified join predicates to inner joins in SQL (#28854)

Rechunk mask for DataFrame filter (#28762)

Improve performance of when/then/otherwise by masking out unevaluated elements (#28498)

Drop unused projections in filter on streaming engine (#28713)

Retain Parquet Partial metadata on filter (#28737)

✨ Enhancements

Support integer fixed-array dot products (#28829)

SQL correlated in (#28927)

Support more join_types in join_where (#28880)

Support Iceberg schema evolution (#28794)

SQL conformance (#28494)

Introduce RemoteEngine and a common base class for all engines (#28800)

Support Iceberg table with V3 deletion vectors in native scan_iceberg (#28772)

Support Iceberg snapshot properties (#28793)

Expose sinked_paths_callback on sink_parquet as unstable parameter (#28814)

Add infer_schema_files to CSV inference hint (#28809)

Add native fixed-array dot (#28504)

Export query metrics to polars_cloud (#28757)

Support Iceberg object storage paths (#28634)

More CSEE simplification (#28731)

Improve error in Series constructor with name in context (#28743)

Add adaptive HTTP rate-limiter for cloud IO (#28591)

Add struct.drop() (#28666)

Improve error message when CSV name de-duplication fails (#28658)

Always keep first metadata per source for Parquet (#28661)

Improve plan-time row estimates for multi-file parquet scans (#28380)

Expose array and plugin function views in Python visitor (#28635)

... (truncated)

Commits

e4ae5ea Python Polars 1.44.1 (#28971)
8414c89 fix: Incorrect broadcasting in when/then/otherwise (#28970)
9c17bbf fix: Handle Parquet data page with concatenated gzip members (#28808)
03dfd26 fix(python): Type collect_batches as _CollectBatches, not `Iterator[DataF...
507e8a0 fix: Resolve dtype inconsistency for pl.Unknown in literals and casts (#28830)
4623316 fix: Incorrect when/then/otherwise with non-scalar null mask (#28946)
6f46eb2 build: Disable Numa on python release (#28934)
d14231a feat: Support integer fixed-array dot products (#28829)
9ae4e57 Python Polars 1.44.0 (#28923)
ad15cd4 fix: SQL handle quantified comparisons against a subquery (#28929)
Additional commits viewable in compare view

Updates numpy from 2.3.5 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Abhijeetsingh Meena +

Charalampos Stratakis

Charles Harris

Chris Ninham +

David Woods

Geonho +

Gopu Yeshwanth Reddy +

Iason Krommydas

Ijtihed Kilani

Jelle Zijlstra +

Joren Hammudoglu

Kumar Aditya

Mike Boyle

Nathan Goldbaum

Raghuveer Devulapalli

Sebastian Berg

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
ecf599c Merge pull request #32221 from charris/backport-32151
3c7ac97 Merge pull request #32220 from charris/backport-32205
23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
d8262bc MAINT: Update cibuildwheel to v4.2.0
988d94d Merge pull request #32158 from charris/backport-32133
b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
Additional commits viewable in compare view

Updates numba from 0.62.1 to 0.67.0

Release notes

Sourced from numba's releases.

0.67.0

Major Numba release, adding NumPy 2.5 support. Please view the release notes here: https://numba.readthedocs.io/en/0.67.0/release/0.67.0-notes.html

0.66.0

Major Numba release. Numba now upgrades to llvmlite 0.48 with LLVM 22. For detailed release notes, please refer: https://numba.readthedocs.io/en/stable/release/0.66.0-notes.html

0.65.1

Numba patch release, please refer to the detailed release notes here - https://numba.readthedocs.io/en/stable/release/0.65.1-notes.html

0.65.0

Major Numba release, adding support for free-threading build. Please view the full release notes here: https://numba.readthedocs.io/en/stable/release/0.65.0-notes.html

0.64.0

Major Numba release, adding NumPy 2.4 support. Please view the release notes here: https://numba.readthedocs.io/en/stable/release/0.64.0-notes.html

0.63.1

Numba patch release, view the release notes here: https://numba.readthedocs.io/en/0.63.1/release/0.63.1-notes.html

0.63.0

Major Numba release, adding Python 3.14 support. Please view the release notes here: https://numba.readthedocs.io/en/0.63.0/release/0.63.0-notes.html

Commits

3190b91 Merge pull request #10772 from swap357/release0.67
f68f603 add current pr on 0.67 pr list
86a975c update final release date for 0.67
c7f14cf Merge pull request #10726 from swap357/pin_deps_0.67
123fa28 update test refs and pin dependencies for release0.67
0c89330 Merge pull request #10724 from swap357/changelog_0.67
ffaa017 Merge pull request #10723 from swap357/update_version_support_table_0.67.0rc1
af0d879 fix wrapping on release notes
a5e4654 Update docs/source/release/0.67.0-notes.rst
e85720e Update docs/source/release/0.67.0-notes.rst
Additional commits viewable in compare view

Updates statsmodels from 0.14.6 to 0.15.0

Release notes

Sourced from statsmodels's releases.

Release 0.15.0

The statsmodels developers are happy to announce the release of 0.15.0. 358 issues were closed in this release and 655 pull requests were merged. Major new features include:

Standardized on rng for controlling randomness across the package (SPEC 007), replacing seed/random_state

Functions with variable-length tuple returns now return documented NamedTuple results instead

A new abstracted formula engine that supports both patsy and formulaic as the backend

Support for Polars DataFrames and Series as model input

Switched the build backend from setuptools to meson-python

New robust estimators: CovDetMCD, CovDetS, CovDetMM, and RLMDetSMM

New tests: Diebold-Mariano, Pesaran-Timmermann, Jonckheere-Terpstra, Leybourne-McCabe, and a delete-k block jackknife estimator

The Hamilton filter, local false discovery rate correction, and an L1-penalized GLM solver

HurdleCountModel gained fit_regularized, and MICEData is now iterable

This release also raises the minimum supported versions of NumPy, SciPy, and pandas, and tightens input validation for many string-valued options across the package (invalid values that previously failed silently or with a confusing error now raise a clear ValueError). A handful of long-standing bugs in seldom-exercised code paths were also corrected as part of a systematic coverage audit this cycle, some of which change numerical output for affected models. See the release notes for the complete list of enhancements, breaking changes, and bug fixes.

Commits

278ff99 Merge pull request #10211 from bashtage/update-release-note
ab3f3bc DOC: Final release note
9307ef1 Merge pull request #8712 from bdpedigo/nobs-style
463e5c5 Merge pull request #10210 from Panzerkampfwagen-del/mice-data-iterable
cc734d8 Merge branch 'main' into mice-data-iterable
2912b84 Merge pull request #10209 from Panzerkampfwagen-del/var-df-model-docstring
279b9f4 ENH: make MICEData iterable, yielding successive imputed datasets
ce7f2c0 DOC: clarify VARResults.df_model counts parameters per equation
d1e1875 Merge pull request #10205 from bashtage/fix-hurdle-and-l1-cov
bb385fb Merge pull request #10208 from bashtage/update-release-note
Additional commits viewable in compare view

Updates plotly from 6.9.0 to 7.0.0

Release notes

Sourced from plotly's releases.

v7.0.0

Fixed

Fix hex_to_rgb parsing of 3-digit shorthand hexadecimal colors such as #FFF [#5662], with thanks to @genrichez for the contribution!

Improve px.*_map() auto-fitting behavior when zoom and center are not specified [#5686]

Add <!doctype html> to the to_html() template to comply with modern web standards [#5693], with thanks to @mishrakushal for the contribution!

Apply histfunc/z aggregation to marginal_x/marginal_y="histogram" subplots in density_heatmap/density_contour, instead of always showing raw bin counts [#3521], with thanks to @lucasjamar for the contribution!

Fix mpl_to_plotly silently dropping matplotlib path collections in data coordinates (such as violin plots, pcolor, event plots, stack plots, fill_between, and stem plots) by rendering them as filled polygons or lines [#5702], with thanks to @robertoffmoura for the contribution!

Removed

Remove the deprecated Figure Factory functions create_2d_density, create_annotated_heatmap, create_bullet, create_candlestick, create_choropleth, create_distplot, create_facet_grid, create_gantt, create_hexbin_mapbox, create_ohlc, create_scatterplotmatrix, and create_violin [#5627]

Remove support for Kaleido versions less than v1.0.0 for static image generation [#5677]

Remove support for Orca for static image generation [#5677]

Remove engine argument from functions fig.write_image(),fig.to_image(), pio.write_image(), pio.write_images(), pio.to_image(), pio.full_figure_for_development(), and from renderer constructors [#5677]

Updated

Update plotly.js from version 3.6.0 to version 4.0.0 [#5673]. This is a major-version release with many changes. See the plotly.js release notes for the full list. The most significant changes include:

Add quiver trace type to visualize vector fields using arrows [#7710, #7945]

Add "Share Chart" modebar button for generating a chart-sharing link via Plotly Cloud [#7909]

Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]. Use the equivalent *map traces instead.

The corresponding graph_objects and Plotly Express functions have also been removed in plotly.py; use the map versions instead

Drop support for MathJax v2, and add support for v4 [#7898]. MathJax is the JavaScript library used for rendering mathematical equations in plotly charts.

Switch color processing library from TinyColor to culori [#7536, #7962]. There are some changes to supported color string formats as a result:

rgb()/rgba() strings with decimal 0–1 fractions are no longer supported

hsv() color strings are no longer supported

Strings with invalid syntax such as hsl(120, 50% 50%) are no longer supported

New supported formats: '#ff0000aa', '#f00a', 'rgb(255 0 0)', 'rgba(255 0 0 / 0.5)', 'hsl(0 100% 50% / 0.5)', 'hsla(0, 100%, 50%, 0.5)', 'hwb(0, 0%, 0%)', lab(), lch(), oklab(), oklch(), color(), hsl(0.5turn 60% 40%), hsl(none 60% 40%)

Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]. Most country names are handled exactly the same; a small number of legacy entries have been removed.

Change layout.geo.fitbounds default from false to 'locations' [#7895]. geo subplots will now auto-fit the initial view to the trace data by default.

Dynamically compute center and zoom values for scattermap and densitymap traces. The initial map view will now auto-fit to the trace data by default. Add layout.map.fitbounds attribute (default 'locations') to enable or disable auto-fitting behavior [#7884, #7913]

Fix GeoJSON bounding-box computation for choropleth and scattergeo traces whose geometry crosses the antimeridian [#7891]

v7.0.0rc0

Removed

Remove the deprecated Figure Factory functions create_2d_density, create_annotated_heatmap, create_bullet, create_candlestick, create_choropleth, create_distplot, create_facet_grid, create_gantt, create_hexbin_mapbox, create_ohlc, create_scatterplotmatrix, and create_violin [#5627]

Remove support for Kaleido versions less than v1.0.0 for static image generation [#5677]

Remove support for Orca for static image generation [#5677]

Remove engine argument from functions fig.write_image(),fig.to_image(), pio.write_image(), pio.write_images(), pio.to_image(), pio.full_figure_for_development(), and from renderer constructors [#5677]

Fixed

Raise a clear ValueError when an unsupported marginal plot type is passed to Plotly Express, instead of failing later with a cryptic 'NoneType' object has no attribute 'constructor' message [#5625], with thanks to @eugen-goebel for the contribution!

Updated

Update plotly.js from version 3.6.0 to version 4.0.0-rc.0 [#5673]. This is a major-version release candidate with many changes. See the plotly.js release notes for the full list. The most significant changes include:

Add quiver trace type to visualize vector fields using arrows [#7710], with thanks to @degzhaus for the contribution!

Add "Share Chart" modebar button for generating a chart-sharing link via Plotly Cloud [#7909]

Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]. Use the equivalent *map traces instead.

The corresponding graph_objects and Plotly Express functions have also been removed in plotly.py; use the map versions instead

Drop support for MathJax v2, and add support for v4 [#7898]. MathJax is the JavaScript library used for rendering mathematical equations in plotly charts.

Switch color processing library from TinyColor to color [#7536]. There are some changes to supported color string formats as a result:

rgb()/rgba() strings with decimal 0–1 fractions are no longer supported

... (truncated)

Changelog

Sourced from plotly's changelog.

[7.0.0] - 2026-08-25

Fixed

Fix hex_to_rgb parsing of 3-digit shorthand hexadecimal colors such as #FFF [#5662], with thanks to @genrichez for the contribution!

Improve px.*_map() auto-fitting behavior when zoom and center are not specified [#5686]

Add <!doctype html> to the to_html() template to comply with modern web standards [#5693], with thanks to @mishrakushal for the contribution!

Apply histfunc/z aggregation to marginal_x/marginal_y="histogram" subplots in density_heatmap/density_contour, instead of always showing raw bin counts [#3521], with thanks to @lucasjamar for the contribution!

Fix mpl_to_plotly silently dropping matplotlib path collections in data coordinates (such as violin plots, pcolor, event plots, stack plots, fill_between, and stem plots) by rendering them as filled polygons or lines [#5702], with thanks to @robertoffmoura for the contribution!

Updated

Update plotly.js from version 3.6.0 to version 4.0.0 [#5673]. This is a major-version release with many changes. See the plotly.js release notes for the full list. The most significant changes include:

Add quiver trace type to visualize vector fields using arrows [#7710, #7945]

Add "Share Chart" modebar button for generating a chart-sharing link via Plotly Cloud [#7909]

Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]. Use the equivalent *map traces instead.

The corresponding graph_objects and Plotly Express functions have also been removed in plotly.py; use the map versions instead

Drop support for MathJax v2, and add support for v4 [#7898]. MathJax is the JavaScript library used for rendering mathematical equations in plotly charts.

Switch color processing library from TinyColor to culori [#7536, #7962]. There are some changes to supported color string formats as a result:

rgb()/rgba() strings with decimal 0–1 fractions are no longer supported

hsv() color strings are no longer supported

Strings with invalid syntax such as hsl(120, 50% 50%) are no longer supported

New supported formats: '#ff0000aa', '#f00a', 'rgb(255 0 0)', 'rgba(255 0 0 / 0.5)', 'hsl(0 100% 50% / 0.5)', 'hsla(0, 100%, 50%, 0.5)', 'hwb(0 0% 0%)', lab(), lch(), oklab(), oklch(), color(), hsl(0.5turn 60% 40%), hsl(none 60% 40%)

Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]. Most country names are handled exactly the same; a small number of legacy entries have been removed.

Change layout.geo.fitbounds default from false to 'locations' [#7895]. geo subplots will now auto-fit the initial view to the trace data by default.

Dynamically compute center and zoom values for scattermap and densitymap traces. The initial map view will now auto-fit to the trace data by default. Add layout.map.fitbounds attribute (default 'locations') to enable or disable auto-fitting behavior [#7884, #7913]

Fix GeoJSON bounding-box computation for choropleth and scattergeo traces whose geometry crosses the antimeridian [#7891]

[7.0.0rc0] - 2026-07-29

Removed

Remove the deprecated Figure Factory functions create_2d_density, create_annotated_heatmap, create_bullet, create_candlestick, create_choropleth, create_distplot, create_facet_grid, create_gantt, create_hexbin_mapbox, create_ohlc, create_scatterplotmatrix, and create_violin [#5627]

Remove support for Kaleido versions less than v1.0.0 for static image generation [#5677]

Remove support for Orca for static image generation [#5677]

Remove engine argument from functions fig.write_image(),fig.to_image(), pio.write_image(), pio.write_images(), pio.to_image(), pio.full_figure_for_development(), and from renderer constructors [#5677]

Updated

Update plotly.js from version 3.6.0 to version 4.0.0-rc.0 [#5673]. This is a major-version release candidate with many changes. See the plotly.js release notes for the full list. The most significant changes include:

Add quiver trace type to visualize vector fields using arrows [#7710]

Add "Share Chart" modebar button for generating a chart-sharing link via Plotly Cloud [#7909]

Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]. Use the equivalent *map traces instead.

The corresponding graph_objects and Plotly Express functions have also been removed in plotly.py; use the map versions instead

Drop support for MathJax v2, and add support for v4 [#7898]. MathJax is the JavaScript library used for rendering mathematical equations in plotly charts.

Switch color processing library from TinyColor to color [#7536]. There are some changes to supported color string formats as a result:

rgb()/rgba() strings with decimal 0–1 fractions are no longer supported

hsv() color strings are no longer supported

New supported formats: '#ff0000aa', '#f00a', 'rgb(255 0 0)', 'rgba(255 0 0 / 0.5)', 'hsl(0 100% 50% / 0.5)', 'hsla(0, 100%, 50%, 0.5)', 'hwb(0, 0%, 0%)'

Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]. Most country names are handled exactly the same; a small number of legacy entries have been removed.

Change layout.geo.fitbounds default from false to 'locations' [#7895]. geo subplots will now auto-fit the initial view to the trace data by default.

Dynamically compute center and zoom values for scattermap and densitymap traces. The initial map view will now auto-fit to the trace data by default. Add layout.map.fitbounds attribute (default 'locations') to enable or disable auto-fitting behavior [#7884, #7913]

Fix GeoJSON bounding-box computation for choropleth and scattergeo traces whose geometry crosses the antimeridian [#7891]

Commits

73c4745 version changes for v7.0.0
c58eb29 Merge pull request #5712 from plotly/v7.0
45ecea4 Merge pull request #5711 from plotly/bump-plotlyjs-v4.0.0
6bd0b40 update changelog
860b4f7 Apply suggestion from @camdecoster
f50f9ff update changelog
367886b change plotly.js master references to main
bb7d2de update color validator for new color formats
11338e1 update plotly.js to v4.0.0 and re-run codegen and js builds
939cd69 Merge branch 'main' into v7.0
Additional commits viewable in compare view

Updates shap from 0.52.0 to 0.49.1

Commits

9f9bbb8 cache datasets in build wheels (#4180)
216c1ce fix macos tests (#4178)
8e9fddd [pre-commit.ci] pre-commit autoupdate (#4174)
67e1545 FIX: Add support for categorical splits in lightgbm in C++ library (#4171)
7d2e348 build(deps-dev): bump the js-minor group in /javascript with 5 updates (#4172)
02efed3 ENH: slight refactor of Tree Building for CoalitionExplainer (#4116)
b64dbbb Fix TypeError in waterfall plot by adding string conversion for feature names...
55dbb81 build(deps-dev): bump the js-minor group in /javascript with 6 updates (#4161)
38ce18c Add options to customize the color bar of the violin plot (#4119)
d66b56e fix for missing objective error for LGBMRegressor (#1063)
Additional commits viewable in compare view

Updates pytest-benchmark from 5.2.3 to 5.3.0

Release notes

Sourced from pytest-benchmark's releases.

v5.3.0

Added --benchmark-precision and --benchmark-confidence: instead of a fixed number of rounds, stop once the mean's relative margin of error falls below the given fraction. Contributed by Aarni Koskela in ionelmc/pytest-benchmark#318.

Added compare --between mode. Example: pytest-benchmark compare --between=min 0001 0002. Contributed by Aarni Koskela in ionelmc/pytest-benchmark#302.

Modernized the CI/linting and added spellchecking. Contributed by Aarni Koskela in ionelmc/pytest-benchmark#304, ionelmc/pytest-benchmark#306 and ionelmc/pytest-benchmark#319.

Defer the xdist auto-disable warning until a benchmark fixture is collected. Contributed by xlyyddy in ionelmc/pytest-benchmark#317 (fixes ionelmc/pytest-benchmark#65).

Replaced deprecated argparse.FileType. Contributed by Sophia Castellarin in ionelmc/pytest-benchmark#310.

Fixed various spelling/typos. Contributed by Daniel Holth and Hugo van Kemenade in ionelmc/pytest-benchmark#297 and ionelmc/pytest-benchmark#299.

Cleaned up various dead code. Contributed by Hugo van Kemenade in ionelmc/pytest-benchmark#300 and ionelmc/pytest-benchmark#301.

CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14 and PyPy 3.11.

Changelog

Sourced from pytest-benchmark's changelog.

v5.3.0 (2026-08-23)

Added --benchmark-precision and --benchmark-confidence: instead of a fixed number of rounds, stop once the mean's relative margin of error falls below the given fraction. Contributed by Aarni Koskela in [#318](https://github.com/ionelmc/pytest-benchmark/issues/318) <https://github.com/ionelmc/pytest-benchmark/pull/318>_.

Added compare --between mode. Example: pytest-benchmark compare --between=min 0001 0002. Contributed by Aarni Koskela in [#302](https://github.com/ionelmc/pytest-benchmark/issues/302) <https://github.com/ionelmc/pytest-benchmark/pull/302>_.

Modernized the CI/linting and added spellchecking. Contributed by Aarni Koskela in [#304](https://github.com/ionelmc/pytest-benchmark/issues/304) <https://github.com/ionelmc/pytest-benchmark/pull/304>, [#306](https://github.com/ionelmc/pytest-benchmark/issues/306) <https://github.com/ionelmc/pytest-benchmark/pull/306> and [#319](https://github.com/ionelmc/pytest-benchmark/issues/319) <https://github.com/ionelmc/pytest-benchmark/pull/319>_.

Defer the xdist auto-disable warning until a benchmark fixture is collected. Contributed by xlyyddy in [#317](https://github.com/ionelmc/pytest-benchmark/issues/317) <https://github.com/ionelmc/pytest-benchmark/pull/317>_ (fixes [#65](https://github.com/ionelmc/pytest-benchmark/issues/65) <https://github.com/ionelmc/pytest-benchmark/issues/65>_).

Replaced deprecated argparse.FileType. Contributed by Sophia Castellarin in [#310](https://github.com/ionelmc/pytest-benchmark/issues/310) <https://github.com/ionelmc/pytest-benchmark/pull/310>_.

Fixed various spelling/typos. Contributed by Daniel Holth and Hugo van Kemenade in [#297](https://github.com/ionelmc/pytest-benchmark/issues/297) <https://github.com/ionelmc/pytest-benchmark/pull/297>_ and [#299](https://github.com/ionelmc/pytest-benchmark/issues/299) <https://github.com/ionelmc/pytest-benchmark/pull/299>_.

Cleaned up various dead code. Contributed by Hugo van Kemenade in [#300](https://github.com/ionelmc/pytest-benchmark/issues/300) <https://github.com/ionelmc/pytest-benchmark/pull/300>_ and [#301](https://github.com/ionelmc/pytest-benchmark/issues/301) <https://github.com/ionelmc/pytest-benchmark/pull/301>_.

CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14 and PyPy 3.11.

Commits

07d5196 Bump version: 5.2.3 → 5.3.0
accf733 Add some details on #304.
417dd9f Really update the changelog.
898acb3 Update changelog and plan release.
9cc7ef0 Defer xdist warning until benchmark collection (#65)
ef48550 Some minor skel updates: test only against latest pytest; bump linting/format...
88eaea9 Add --benchmark-precision for adaptive rounds (opt-in)
3b83d12 Update and freeze GHA actions
4b7662f Fix ruff complaints
26b0113 Remove Taplo lint (unmaintained)
Additional commits viewable in compare view

Updates hypothesis from 6.165.2 to 6.165.10

Commits

6384dee Bump hypothesis version to 6.165.10 and update changelog
c7ca59d Merge pull request #4864 from dgutson/claude-stateful-and-example
3fc38f1 claude: teach /hypothesis about stateful tests and @example
16f24b7 Merge pull request #4862 from Zac-HD/claude/upstream-regex-issues-fkke9q
48ce446 Bump hypothesis version to 6.165.9 and update changelog
d559a69 Merge pull request #4860 from Liam-DeVoe/optimize-single-branch-one-of
3a19d89 fix context flag restoration
2408c99 drop unecessary empty check
3f94912 Clarify re.ASCII wording in changelog entry
9d0a9a8 Fix from_regex handling of negative classes, re.ASCII, and zero-min repeats
Additional commits viewable in compare view

Updates ruff from 0.16.2 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

Allow rules without codes (#28049)

Introduce category selectors (#27666)

Update preview default rules and categories (#27877)

Bug fixes

[flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)

[flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (

…pdates Bumps the python-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ml4t-specs](https://github.com/ml4t/specs) | `0.1.0` | `0.1.3` | | [polars](https://github.com/pola-rs/polars) | `1.43.2` | `1.44.1` | | [numpy](https://github.com/numpy/numpy) | `2.3.5` | `2.5.2` | | [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.6` | `0.15.0` | | [plotly](https://github.com/plotly/plotly.py) | `6.9.0` | `7.0.0` | | [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.2.3` | `5.3.0` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.165.10` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.5` | | [ipython](https://github.com/ipython/ipython) | `9.16.1` | `9.17.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [yfinance](https://github.com/ranaroussi/yfinance) | `1.5.2` | `1.7.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.69` | `0.0.75` | Updates `ml4t-specs` from 0.1.0 to 0.1.3 - [Release notes](https://github.com/ml4t/specs/releases) - [Commits](ml4t/specs@v0.1.0...v0.1.3) Updates `polars` from 1.43.2 to 1.44.1 - [Release notes](https://github.com/pola-rs/polars/releases) - [Commits](pola-rs/polars@py-1.43.2...py-1.44.1) Updates `numpy` from 2.3.5 to 2.5.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.3.5...v2.5.2) Updates `numba` from 0.62.1 to 0.67.0 - [Release notes](https://github.com/numba/numba/releases) - [Commits](numba/numba@0.62.1...0.67.0) Updates `statsmodels` from 0.14.6 to 0.15.0 - [Release notes](https://github.com/statsmodels/statsmodels/releases) - [Changelog](https://github.com/statsmodels/statsmodels/blob/main/CHANGES.md) - [Commits](statsmodels/statsmodels@v0.14.6...v0.15.0) Updates `plotly` from 6.9.0 to 7.0.0 - [Release notes](https://github.com/plotly/plotly.py/releases) - [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md) - [Commits](plotly/plotly.py@v6.9.0...v7.0.0) Updates `shap` from 0.52.0 to 0.49.1 - [Release notes](https://github.com/shap/shap/releases) - [Changelog](https://github.com/shap/shap/blob/master/docs/release_notes.rst) - [Commits](shap/shap@v0.52.0...v0.49.1) Updates `pytest-benchmark` from 5.2.3 to 5.3.0 - [Release notes](https://github.com/ionelmc/pytest-benchmark/releases) - [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst) - [Commits](ionelmc/pytest-benchmark@v5.2.3...v5.3.0) Updates `hypothesis` from 6.165.2 to 6.165.10 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.165.10) Updates `ruff` from 0.16.2 to 0.16.5 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.2...0.16.5) Updates `ipython` from 9.16.1 to 9.17.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.16.1...9.17.0) Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `yfinance` from 1.5.2 to 1.7.0 - [Release notes](https://github.com/ranaroussi/yfinance/releases) - [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst) - [Commits](ranaroussi/yfinance@1.5.2...1.7.0) Updates `ty` from 0.0.69 to 0.0.75 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.69...0.0.75) --- updated-dependencies: - dependency-name: ml4t-specs dependency-version: 0.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: polars dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: numpy dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: numba dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: statsmodels dependency-version: 0.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: plotly dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: shap dependency-version: 0.49.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pytest-benchmark dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: hypothesis dependency-version: 6.165.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.16.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: ipython dependency-version: 9.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: yfinance dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: ty dependency-version: 0.0.75 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

stefan-jansen · 2026-09-03T02:39:51Z

The refreshed head still reproduces the range-policy failure locally: the lock selects ml4t-specs 0.1.3, while the test requires exactly 0.1.0 despite the declared >=0.1.0,<0.2.0 contract. #42 preserves this dependency update and adds the already qualified range-aware test from #40. I will close this PR as superseded after #42 qualifies and merges.

stefan-jansen · 2026-09-03T03:27:06Z

The dependency update has merged through #42 at d2096df. That replacement includes this lock update plus the range-aware Specs release-policy assertion required by the current dependency contract. Closing this PR as superseded.

dependabot · 2026-09-03T03:27:09Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Dependency updates python Python dependencies labels Aug 31, 2026

Merge branch 'main' into dependabot/uv/python-dependencies-b0adb3a049

b41fedb

stefan-jansen mentioned this pull request Sep 3, 2026

deps: update Python dependencies with range-aware Specs policy #42

Merged

stefan-jansen closed this Sep 3, 2026

dependabot Bot deleted the dependabot/uv/python-dependencies-b0adb3a049 branch September 3, 2026 03:27

Navigation Menu

Uh oh!

deps: bump the python-dependencies group across 1 directory with 14 updates - #41

deps: bump the python-dependencies group across 1 directory with 14 updates#41
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/python-dependencies-b0adb3a049

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

stefan-jansen commented Sep 3, 2026

Uh oh!

stefan-jansen commented Sep 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026

v0.1.3

What's Changed

v0.1.2

What's Changed

v0.1.1

What's Changed

Python Polars 1.44.1

Python Polars 1.44.0

⚠️ Deprecations

🚀 Performance improvements

✨ Enhancements

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

Contributors

Facility preparation

Prior to release

Add/drop Python versions

Backport pull requests

Update 2.4.0 milestones

Check the numpy-release repo

0.67.0

0.66.0

0.65.1

0.65.0

0.64.0

0.63.1

0.63.0

Release 0.15.0

v7.0.0

Fixed

Removed

Updated

v7.0.0rc0

Removed

Fixed

Updated

[7.0.0] - 2026-08-25

Fixed

Updated

[7.0.0rc0] - 2026-07-29

Removed

Updated

v5.3.0

v5.3.0 (2026-08-23)

0.16.5

Release Notes

Preview features

Bug fixes

Uh oh!

stefan-jansen commented Sep 3, 2026

Uh oh!

stefan-jansen commented Sep 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`PyArray_StringDTypeObject` is opaque under the abi3t stable ABI