deps(deps): bump pandas from 2.3.3 to 3.0.1

[dependabot]

Bumps pandas from 2.3.3 to 3.0.1.

Release notes

Sourced from pandas's releases.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

• Dedicated string data type by default
• Consistent copy/view behaviour with Copy-on-Write (CoW) (a.k.a. getting rid of the SettingWithCopyWarning)
• New default resolution for datetime-like data
• Initial support for the new pd.col syntax

See the announcement blog post and the detailed release notes for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 3.0.0rc2

No release notes provided.

Pandas 3.0.0rc1

... (truncated)

Commits

• e04b26f RLS: 3.0.1 (#64206)
• 47909e6 [backport 3.0.x] ENH: Add item() method to ExtensionArray class (#64134) (#64...
• a061bfd Backport PR #64199 on branch 3.0.x (DOC: cleanup 3.0.1 whatsnew) (#64201)
• 085a385 [backport 3.0.x] BUG: Fix read_hdf failing on generic datetime64 dtype (#6400...
• 5f17047 [backport 3.0.x] BUG: use fill_null fallback for bug in pyarrow 21 on Windows...
• 0d3a8cb Backport PR #64122 on branch 3.0.x (REG: Allow RE2 syntax in str.contains and...
• 78e1917 Backport PR #64185 on branch 3.0.x (TST: remove fixed xfail for PyArrow 23.0....
• 75a42ca Backport PR #64168 on branch 3.0.x (TST: add legacy file generation and tests...
• 46d443f Backport PR #64092 on branch 3.0.x (BUG: DataFrame.loc fills b'' instead of N...
• 9d67932 Backport PR #64068 on branch 3.0.x (BUG: fixed to_timedelta with list of int ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

⚠️ Action Required: Unable to determine source issue for PR #5011. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

[github-actions]

🤖 Keepalive Loop Status

PR #5011 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Disposition	skipped (transient)
Gate	failure
Tasks	0/6 complete
Timeout	45 min (default)
Timeout usage	3m elapsed (8%, 42m remaining)
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

| Error type | infrastructure |
| Error category | resource |
| Suggested recovery | Confirm the referenced resource exists (repo, PR, branch, workflow, or file). |

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cbbff66c45

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Regenerate requirements.lock for pandas upgrade

After this change, pyproject.toml requires pandas==3.0.1, but requirements.lock still pins pandas==2.3.3 (line 297), so any workflow/script that installs via uv pip sync requirements.lock (for example scripts/setup_env.sh and scripts/run_tests.sh) will continue running on 2.3.3 and never actually pick up the 3.0.1 upgrade. That creates inconsistent environments and defeats the dependency bump in reproducible/test paths until the lockfile is regenerated.

Useful? React with 👍 / 👎.

[stranske]

Holding this Dependabot PR for manual review before merge: it is a major upgrade (pandas 2.x -> 3.x) and only updates . To avoid dependency drift/regression risk, this should merge together with explicit compatibility validation and any required pinned dependency file updates in the same branch.

[stranske]

Holding this Dependabot PR for manual review before merge: it is a major upgrade (pandas 2.x -> 3.x) and only updates pyproject.toml.

To avoid dependency drift/regression risk, merge this only with explicit compatibility validation and any required pinned dependency file updates in the same branch.

[stranske]

Tracking follow-up work in issue #5033: #5033 (labeled to drive implementation/validation).

[stranske]

Tracking follow-up work in issue #5033:
#5033

That issue is labeled agents:auto-pilot to drive implementation and validation.

[stranske]

Closing this pandas 3 Dependabot PR for now based on completed compatibility assessment from issue #5033.

Assessment artifact:

• docs/ops/pandas3-upgrade-assessment-issue-5033.md (merged via PR Agent belt for #5033 #5034)

Blocking findings from CI evidence:

1. Dependency conflict: streamlit==1.54.0 requires pandas<3, while this PR pins pandas==3.0.1.
2. Runtime compatibility break: frequency alias 'M' is no longer accepted by pandas 3 ('ME' required), causing config/data validation failures.

Please re-open a pandas-3 upgrade PR after those blockers are addressed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.