Skip to content

chore(deps)(deps): bump the python-versions group across 1 directory with 11 updates - #1140

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-1c8d53a457
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-1c8d53a457

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the python-versions group with 11 updates in the / directory:

Package From To
ipykernel 7.3.0 7.4.0
jupytext 1.19.5 1.19.6
kaleido 1.4.0 1.5.0
pydata-sphinx-theme 0.21.0 0.22.0
sphinx-autodoc-typehints 3.13.7 3.13.9
dagster 1.13.24 1.13.26
dagster-webserver 1.13.24 1.13.26
nvidia-cudnn-cu12 9.26.0.51 9.27.0.42
holidays 0.105 0.106
mlflow-skinny 3.16.1 3.17.0
pvlib 0.15.2 0.16.1

Updates ipykernel from 7.3.0 to 7.4.0

Release notes

Sourced from ipykernel's releases.

v7.4.0

7.4.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​BoykoNeov (activity) | @​Carreau (activity) | @​davidbrochart (activity) | @​glaziermag (activity) | @​Gravifer (activity) | @​ianthomas23 (activity) | @​jasongrout (activity) | @​JohanMabille (activity) | @​krassowski (activity) | @​kylebarron (activity) | @​minrk (activity) | @​NewUserHa (activity) | @​practicusai (activity) | @​sahvx655-wq (activity) | @​Scott5S (activity) | @​thomasjm (activity) | @​tovrstra (activity) | @​Yann-P (activity) | @​yves-surrel (activity) | @​ZupoLlask (activity)

Changelog

Sourced from ipykernel's changelog.

7.4.0

(Full Changelog)

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​BoykoNeov (activity) | @​Carreau (activity) | @​davidbrochart (activity) | @​glaziermag (activity) | @​Gravifer (activity) | @​ianthomas23 (activity) | @​jasongrout (activity) | @​JohanMabille (activity) | @​krassowski (activity) | @​kylebarron (activity) | @​minrk (activity) | @​NewUserHa (activity) | @​practicusai (activity) | @​sahvx655-wq (activity) | @​Scott5S (activity) | @​thomasjm (activity) | @​tovrstra (activity) | @​Yann-P (activity) | @​yves-surrel (activity) | @​ZupoLlask (activity)

Commits

Updates jupytext from 1.19.5 to 1.19.6

Release notes

Sourced from jupytext's releases.

Version 1.19.6

Security

  • The Quarto conversions now run in a private temporary directory, so that the output file that quarto convert names after its input can no longer be pre-created as a symlink by another user of the machine. Thanks to Naveed for the PR (#1615).
  • Paired paths from notebook formats metadata are now prevented from escaping the working tree, including when an absolute notebook path is used. Thanks to Naveed for addressing the issue (#1588).
  • The CLI now ignores trusted cell metadata when the notebook signature is invalid, so a trusted=true option in a paired text file cannot make untrusted notebook outputs trusted during --sync. Thanks to Naveed for the fix (#1617).
  • Custom cell_markers and endofcell values in the light format are now matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks. This also fixes writing OCaml notebooks with custom cell markers. Thanks to Naveed again for the PR (#1618).
  • We have merged Dependabot security updates for the JupyterLab extension and the documentation website (#1614, #1620, #1622, #1624, #1634, #1639, #1642, #1643, #1647, #1653, #1654).

Fixed

  • Menu entries such as "Rename Notebook…" name the file type again, instead of saying "default". Thanks to Michał Krassowski for this PR (#1632).
  • Mermaid %% comments inside a markdown cell are no longer mistaken for py:percent cell markers (#1533). Thanks to Sanjay Santhanam for his PR (#1609)
  • A whitespace-only final line in a percent-format cell is now preserved when reading and round-tripping the notebook (#1599). Thanks to lowbyteguy for the PR (#1610).
  • The JupyterLab extension's development install script now uses the correct jupyter-builder import (#1632). Thanks again to Michał Krassowski for this fix.
  • Fixed JupyterLab extension build issues related to Yarn package checksums. Thanks to Mahendra Paipuri for his contributions to #1614, #1620, and #1621.
  • Fixed pairing on Windows when a prefix root contains subdirectories, such as notebooks/tutorials///ipynb.

Changed

Added

  • We have added a development container that can be opened with VS Code’s Dev Containers extension (#1655).
  • Added support for the Jenner language. Thanks to Lawrence Sinclair for this contribution (#1493).
Changelog

Sourced from jupytext's changelog.

1.19.6 (2026-10-04)

Security

  • The Quarto conversions now run in a private temporary directory, so that the output file that quarto convert names after its input can no longer be pre-created as a symlink by another user of the machine. Thanks to Naveed for the PR (#1615).
  • Paired paths from notebook formats metadata are now prevented from escaping the working tree, including when an absolute notebook path is used. Thanks to Naveed for addressing the issue (#1588).
  • The CLI now ignores trusted cell metadata when the notebook signature is invalid, so a trusted=true option in a paired text file cannot make untrusted notebook outputs trusted during --sync. Thanks to Naveed for the fix (#1617).
  • Custom cell_markers and endofcell values in the light format are now matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks. This also fixes writing OCaml notebooks with custom cell markers. Thanks to Naveed again for the PR (#1618).
  • We have merged Dependabot security updates for the JupyterLab extension and the documentation website (#1614, #1620, #1622, #1624, #1634, #1639, #1642, #1643, #1647, #1653, #1654).

Fixed

  • Menu entries such as "Rename Notebook…" name the file type again, instead of saying "default". Thanks to Michał Krassowski for this PR (#1632).
  • Mermaid %% comments inside a markdown cell are no longer mistaken for py:percent cell markers (#1533). Thanks to Sanjay Santhanam for his PR (#1609)
  • A whitespace-only final line in a percent-format cell is now preserved when reading and round-tripping the notebook (#1599). Thanks to lowbyteguy for the PR (#1610).
  • The JupyterLab extension's development install script now uses the correct jupyter-builder import (#1632). Thanks again to Michał Krassowski for this fix.
  • Fixed JupyterLab extension build issues related to Yarn package checksums. Thanks to Mahendra Paipuri for his contributions to #1614, #1620, and #1621.
  • Fixed pairing on Windows when a prefix root contains subdirectories, such as notebooks/tutorials///ipynb.

Changed

... (truncated)

Commits
  • 9fccc3d Version 1.19.6 (#1656)
  • 85c65a9 Add Jenner language support (#1493)
  • ca39ad2 Add development container (#1655)
  • 0176ff2 reject paired paths that escape the notebook directory tree (#1588)
  • 1eb4653 Ignore '%%' lines inside fenced blocks of py:percent markdown cells (#1609)
  • b1d7b65 build(deps): bump the jupytext-extension-security-updates group across 2 dire...
  • 85df69a build(deps): bump the actions-dependencies group with 3 updates (#1651)
  • c3bb81d run quarto convert in a private temp directory (#1615)
  • 9bbd990 build(deps): bump the jupytext-extension-security-updates group across 1 dire...
  • f96ae7d build(deps): bump the jupytext-extension-dependencies group across 2 director...
  • Additional commits viewable in compare view

Updates kaleido from 1.4.0 to 1.5.0

Release notes

Sourced from kaleido's releases.

v1.5.0

Changed

  • Update Choreographer to v1.4.0 and use its large figure chunking, remove the Kaleido chunking code [#478]

Removed

  • Drop support for Python 3.8 [#478]
  • Remove the orjson dependency [#478]

Fixed

  • Add the browser path to message in ChromeNotFoundError when it was set with path= or BROWSER_PATH and points to nothing [#476], with thanks to @​Blizzeq for the contribution!
  • Restore serialization of figure specs through the plotly JSON encoder [#478]
Changelog

Sourced from kaleido's changelog.

v1.5.0 -- 2026-10-06

Changed

  • Update Choreographer to v1.4.0 and use its large figure chunking, remove the Kaleido chunking code [#478]

Removed

  • Drop support for Python 3.8 [#478]
  • Remove the orjson dependency [#478]

Fixed

  • Add the browser path to message in ChromeNotFoundError when it was set with path= or BROWSER_PATH and points to nothing [#476], with thanks to @​Blizzeq for the contribution!
  • Restore serialization of figure specs through the plotly JSON encoder [#478]
Commits
  • a517ccc chore: Update CHANGELOG (#480)
  • 22ab87b fix: Update choreographer and rely on its message chunking (#478)
  • 17c3f9f Merge pull request #476 from Blizzeq/fix/report-missing-browser-path
  • ffaf3e3 Update CHANGELOG
  • 090bda6 Apply review suggestions: import ChromeNotFoundError from kaleido.errors, rew...
  • d6f5bf4 Merge pull request #472 from plotly/dependabot/uv/src/py/uv-d665ee01e3
  • d2fcf7e Name the browser path in ChromeNotFoundError
  • 31a8ca9 Merge pull request #474 from plotly/add-release-instructions
  • 75dc279 update formatting
  • 2eca63b updates in response to PR comments
  • Additional commits viewable in compare view

Updates pydata-sphinx-theme from 0.21.0 to 0.22.0

Release notes

Sourced from pydata-sphinx-theme's releases.

v0.22.0

What's Changed

Fixes

Improvements

Maintenance

Dependencies

New Contributors

Full Changelog: pydata/pydata-sphinx-theme@v0.21.0...v0.22.0

v0.22.0rc0

What's Changed

Breaking

None

Improvements

Fixes

... (truncated)

Commits
  • eeb5304 Bump 0.22.0rc0 -> 0.22.0
  • 369659d Bump scientific-python/upload-nightly-action from 0.6.4 to 0.6.5 (#2488)
  • 4696cdc Replace the unmaintained Graphviz setup action (#2495)
  • d2b1e71 Fix behavior on X.Y stable for X.Y.Z releases (#2497)
  • 902af21 Remove flaky animation test
  • f243d8e Upgrade and fix precommit issues (#2487)
  • dbbd279 Bump 0.21.0 -> 0.22.0rc0
  • 6344b44 Fix primary sidebar collapse glitches on resize and expand (#2482)
  • aa9517b Bump js-yaml from 4.3.1 to 4.3.2 (#2486)
  • 5f3493b Mark the current page with aria-current in both navs (#2471)
  • Additional commits viewable in compare view

Updates sphinx-autodoc-typehints from 3.13.7 to 3.13.9

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.13.9

Fix the forward-reference warning when documenting NumPy's clip by resolving generic parameters declared in stub signatures. See #780, which fixes #779.

Full changelog.

3.13.8

What's Changed

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.13.7...3.13.8

Commits
  • 789861f fix: resolve generic parameters in stubs
  • 83d5565 [pre-commit.ci] pre-commit autoupdate (#778)
  • 3805fbf 👷 ci: pin ubuntu-26.04 and bump dependencies (#777)
  • 0a96a6c 🐛 fix(resolver): resolve guarded class imports (#775)
  • d794732 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-acti...
  • 6dc6c4e [pre-commit.ci] pre-commit autoupdate (#773)
  • 9627932 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
  • bd00366 [pre-commit.ci] pre-commit autoupdate (#771)
  • See full diff in compare view

Updates dagster from 1.13.24 to 1.13.26

Release notes

Sourced from dagster's releases.

1.13.26 (core) / 0.29.26 (libraries)

Breaking Changes

  • [dagster-dbt] dagster-dbt no longer installs dbt-core. It is now available as the dagster-dbt[dbt-core] extra. Do not install dbt-core into an environment that also has dbt Fusion's dbt PyPI package: both claim the dbt import namespace and overwrite each other's files, and pip reports no error.

New

  • Sensor ticks that request a run larger than the instance's run size limit now fail with an explicit error naming the offending run requests, instead of storing those requests in tick history.
  • The SF_PARTNER_ID environment variable is now set by default, to allow for partner attribution on Snowflake connections made through third-party libraries.
  • Run monitoring now includes the run worker's debug info (for example, a Kubernetes OOMKilled termination reason) when it fails a started run because the run worker failed. (Thanks, @​hosaka2!)
  • [dg] dg list envs, dg plus create env, and dg plus pull env now accept a --deployment option (or the DAGSTER_CLOUD_DEPLOYMENT environment variable) to target a deployment other than the configured default.
  • [dagster-cloud] The published dagster-cloud-agent image now includes the Azure Container Apps launcher.
  • [dagster-dbt] A dbt Fusion binary on PATH is now used as-is, instead of being shadowed by the dbt entry point that dbt-core installs into the virtualenv.
  • [dagster-dbt] fetch_column_metadata() and fetch_row_counts() no longer fail the step when running on the dbt Fusion engine, or when dbt adapter initialization fails. They now log a warning and emit events without the metadata.
  • [dagster-dbt] dagster-dbt's sqlglot dependency no longer pins an upper bound. Column lineage generation now works on sqlglot 28.1 and later, including the performance improvements in 30.x for wide models.
  • [dagster-dbt] Asset materializations from dbt runs now carry the node's dbt status as metadata.

Bugfixes

  • GraphQL event-log, tick, and run-record queries no longer fail when the requested limit exceeds the server-side default. The limit is clamped to the default, and the remaining rows are available by paginating.
  • Fixed a bug where a run's asset list could be under-reported in the UI for runs with a large number of materializations, and where an asset could be reported as failed even though it was materialized by a different step than the one that planned it.
  • Fixed an issue where the UI could keep displaying a code location's previous container image after a rolling update, until browser storage was cleared. (Thanks, @​HynekBlaha!)
  • [ui] Run filters now keep tag values that contain =, such as partition keys like region=west.
  • [ui] Selection inputs no longer collapse repeated spaces inside quoted values, and now have an accessible name.
  • [ui] On cursor-paginated lists such as Runs, "Newer" now returns to the previous page after you switch tabs and press browser Back, instead of jumping to the first page.
  • [dagster-dbt] Fixed a bug where dbt models that finished with a no-op, reused, or warn status emitted no materialization, so the asset silently stopped updating and downstream freshness checks and automation conditions never fired. partial success and skipped are still treated as failures, since dbt marks a partial-success node's dependents as errored, and dbt Fusion reports both a genuine no-op and an upstream-failure skip as skipped.
  • [dagster-dbt] Fixed an issue where dbt Fusion models with no ref() or source() calls were still left out of asset selection in environments without dbt-core installed, which the fix in 1.13.25 did not cover. Selections other than the default select are still affected.
  • [dagster-dbt] Fixed a bug where, when running on dbt Fusion without dbt-core installed, every passing dbt test was reported as a failed asset check.
  • [dagster-dbt] Fixed a bug where a dbt Cloud run containing seeds executed under dbt Fusion failed event translation with KeyError: 'materialized', dropping materializations for every asset after the first seed in the run.
  • [dagster-dbt] Fixed a failure reloading a dagster-dbt project on Windows, where the local defs state snapshot could not be rebuilt if it contained read-only files such as a git checkout's object files.

Documentation

  • Corrected the Dagster+ credit usage documentation: credits are counted per step execution plus per asset materialization event, and the page now covers retries, failures, and how Insights attributes credits across assets materialized in one step.

1.13.25 (core) / 0.29.25 (libraries)

New

  • Improved the performance of declarative automation for partitioned assets with a long materialization history.
  • [ui] The UI now has a mobile layout for phones, with a new navigation menu and mobile versions of the Home, Jobs, Automation, Timeline, Asset Catalog, and Asset Overview pages. Pages without a mobile version show a banner with an option to always use the desktop site, which can also be set in user settings.
  • [ui] When launching a time-partitioned asset, the partition selector now shows the most recent 90 days by default, with an option to show all partitions.
  • [dagster-aws] The ECS run launcher now supports resuming run workers, so run monitoring's max_resume_run_attempts can be set above 0 on ECS deployments.
  • [dagster-prefect] The Prefect Pipes clients now read messages through Prefect's logs API by default, so a shared filesystem or bucket is no longer needed. Prefect deployments work without changes to the flow. Flows and tasks that open a Pipes session must pass message_writer=PipesPrefectLogsMessageWriter().

Bugfixes

  • [dg] Fixed AttributeError: module 'dbt' has no attribute 'contracts' when passing a file named dbt.py to dg plus integrations dbt manage-manifest and dagster-cloud ci manage-state.
  • [dagster-dbt] Fixed an issue where dbt Fusion models with no ref() or source() calls were...

    Description has been truncated

…with 11 updates

Bumps the python-versions group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ipykernel](https://github.com/ipython/ipykernel) | `7.3.0` | `7.4.0` |
| [jupytext](https://github.com/jupytext/jupytext) | `1.19.5` | `1.19.6` |
| [kaleido](https://github.com/plotly/kaleido) | `1.4.0` | `1.5.0` |
| [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.21.0` | `0.22.0` |
| [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.13.7` | `3.13.9` |
| [dagster](https://github.com/dagster-io/dagster) | `1.13.24` | `1.13.26` |
| [dagster-webserver](https://github.com/dagster-io/dagster) | `1.13.24` | `1.13.26` |
| [nvidia-cudnn-cu12](https://developer.nvidia.com/cuda-zone) | `9.26.0.51` | `9.27.0.42` |
| [holidays](https://github.com/vacanza/holidays) | `0.105` | `0.106` |
| [mlflow-skinny](https://github.com/mlflow/mlflow) | `3.16.1` | `3.17.0` |
| [pvlib](https://github.com/pvlib/pvlib-python) | `0.15.2` | `0.16.1` |



Updates `ipykernel` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/ipython/ipykernel/releases)
- [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md)
- [Commits](ipython/ipykernel@v7.3.0...v7.4.0)

Updates `jupytext` from 1.19.5 to 1.19.6
- [Release notes](https://github.com/jupytext/jupytext/releases)
- [Changelog](https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md)
- [Commits](jupytext/jupytext@v1.19.5...v1.19.6)

Updates `kaleido` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/plotly/kaleido/releases)
- [Changelog](https://github.com/plotly/kaleido/blob/main/CHANGELOG.md)
- [Commits](plotly/kaleido@v1.4.0...v1.5.0)

Updates `pydata-sphinx-theme` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases)
- [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md)
- [Commits](pydata/pydata-sphinx-theme@v0.21.0...v0.22.0)

Updates `sphinx-autodoc-typehints` from 3.13.7 to 3.13.9
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@3.13.7...3.13.9)

Updates `dagster` from 1.13.24 to 1.13.26
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.24...1.13.26)

Updates `dagster-webserver` from 1.13.24 to 1.13.26
- [Release notes](https://github.com/dagster-io/dagster/releases)
- [Changelog](https://github.com/dagster-io/dagster/blob/master/CHANGES.md)
- [Commits](dagster-io/dagster@1.13.24...1.13.26)

Updates `nvidia-cudnn-cu12` from 9.26.0.51 to 9.27.0.42

Updates `holidays` from 0.105 to 0.106
- [Release notes](https://github.com/vacanza/holidays/releases)
- [Changelog](https://github.com/vacanza/holidays/blob/dev/CHANGES.md)
- [Commits](vacanza/holidays@v0.105...v0.106)

Updates `mlflow-skinny` from 3.16.1 to 3.17.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.16.1...v3.17.0)

Updates `pvlib` from 0.15.2 to 0.16.1
- [Release notes](https://github.com/pvlib/pvlib-python/releases)
- [Commits](pvlib/pvlib-python@v0.15.2...v0.16.1)

---
updated-dependencies:
- dependency-name: ipykernel
  dependency-version: 7.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: jupytext
  dependency-version: 1.19.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: kaleido
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: pydata-sphinx-theme
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.13.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: dagster
  dependency-version: 1.13.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: dagster-webserver
  dependency-version: 1.13.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: nvidia-cudnn-cu12
  dependency-version: 9.27.0.42
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: holidays
  dependency-version: '0.106'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: mlflow-skinny
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: pvlib
  dependency-version: 0.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team October 12, 2026 12:01
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 12, 2026
@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 14, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-versions-1c8d53a457 branch October 14, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants