Skip to content

deps: bump the python-dependencies group with 9 updates - #40

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d1d21d6689
Open

deps: bump the python-dependencies group with 9 updates#40
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d1d21d6689

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 9 updates:

Package From To
ml4t-specs 0.1.0 0.1.3
numpy 2.3.5 2.5.2
numba 0.62.1 0.67.0
shap 0.52.0 0.49.1
hypothesis 6.165.2 6.165.7
ruff 0.16.2 0.16.3
pre-commit 4.6.1 4.6.2
yfinance 1.5.2 1.6.0
ty 0.0.69 0.0.71

Updates ml4t-specs from 0.1.0 to 0.1.3

Release notes

Sourced from ml4t-specs's releases.

v0.1.3

What's Changed

Full Changelog: ml4t/specs@v0.1.2...v0.1.3

v0.1.2

What's Changed

Full Changelog: ml4t/specs@v0.1.1...v0.1.2

v0.1.1

What's Changed

Full Changelog: ml4t/specs@v0.1.0...v0.1.1

Commits
  • bb9d7c4 ci: bump the github-actions group across 1 directory with 4 updates (#5)
  • 3f6e77c release: prepare 0.1.3 (#10)
  • d85bd29 chore: adopt ecosystem qualification (#9)
  • 1400afb Add per-asset target rule policy identities (#7)
  • ea1e210 feat: add portable lifecycle contract (#6)
  • 08c201e fix: select repository for release creation
  • See full diff in compare view

Updates numpy from 2.3.5 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhijeetsingh Meena +
  • Charalampos Stratakis
  • Charles Harris
  • Chris Ninham +
  • David Woods
  • Geonho +
  • Gopu Yeshwanth Reddy +
  • Iason Krommydas
  • Ijtihed Kilani
  • Jelle Zijlstra +
  • Joren Hammudoglu
  • Kumar Aditya
  • Mike Boyle
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
  • ecf599c Merge pull request #32221 from charris/backport-32151
  • 3c7ac97 Merge pull request #32220 from charris/backport-32205
  • 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
  • 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
  • c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
  • 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
  • d8262bc MAINT: Update cibuildwheel to v4.2.0
  • 988d94d Merge pull request #32158 from charris/backport-32133
  • b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
  • Additional commits viewable in compare view

Updates numba from 0.62.1 to 0.67.0

Release notes

Sourced from numba's releases.

0.67.0

Major Numba release, adding NumPy 2.5 support. Please view the release notes here: https://numba.readthedocs.io/en/0.67.0/release/0.67.0-notes.html

0.66.0

Major Numba release. Numba now upgrades to llvmlite 0.48 with LLVM 22. For detailed release notes, please refer: https://numba.readthedocs.io/en/stable/release/0.66.0-notes.html

0.65.1

Numba patch release, please refer to the detailed release notes here - https://numba.readthedocs.io/en/stable/release/0.65.1-notes.html

0.65.0

Major Numba release, adding support for free-threading build. Please view the full release notes here: https://numba.readthedocs.io/en/stable/release/0.65.0-notes.html

0.64.0

Major Numba release, adding NumPy 2.4 support. Please view the release notes here: https://numba.readthedocs.io/en/stable/release/0.64.0-notes.html

0.63.1

Numba patch release, view the release notes here: https://numba.readthedocs.io/en/0.63.1/release/0.63.1-notes.html

0.63.0

Major Numba release, adding Python 3.14 support. Please view the release notes here: https://numba.readthedocs.io/en/0.63.0/release/0.63.0-notes.html

Commits
  • 3190b91 Merge pull request #10772 from swap357/release0.67
  • f68f603 add current pr on 0.67 pr list
  • 86a975c update final release date for 0.67
  • c7f14cf Merge pull request #10726 from swap357/pin_deps_0.67
  • 123fa28 update test refs and pin dependencies for release0.67
  • 0c89330 Merge pull request #10724 from swap357/changelog_0.67
  • ffaa017 Merge pull request #10723 from swap357/update_version_support_table_0.67.0rc1
  • af0d879 fix wrapping on release notes
  • a5e4654 Update docs/source/release/0.67.0-notes.rst
  • e85720e Update docs/source/release/0.67.0-notes.rst
  • Additional commits viewable in compare view

Updates shap from 0.52.0 to 0.49.1

Commits
  • 9f9bbb8 cache datasets in build wheels (#4180)
  • 216c1ce fix macos tests (#4178)
  • 8e9fddd [pre-commit.ci] pre-commit autoupdate (#4174)
  • 67e1545 FIX: Add support for categorical splits in lightgbm in C++ library (#4171)
  • 7d2e348 build(deps-dev): bump the js-minor group in /javascript with 5 updates (#4172)
  • 02efed3 ENH: slight refactor of Tree Building for CoalitionExplainer (#4116)
  • b64dbbb Fix TypeError in waterfall plot by adding string conversion for feature names...
  • 55dbb81 build(deps-dev): bump the js-minor group in /javascript with 6 updates (#4161)
  • 38ce18c Add options to customize the color bar of the violin plot (#4119)
  • d66b56e fix for missing objective error for LGBMRegressor (#1063)
  • Additional commits viewable in compare view

Updates hypothesis from 6.165.2 to 6.165.7

Commits
  • af00451 Bump hypothesis version to 6.165.7 and update changelog
  • d1cd5f6 Merge pull request #4861 from Liam-DeVoe/python-315-support
  • cec6388 Bump hypothesis version to 6.165.6 and update changelog
  • 49a2698 Merge pull request #4855 from Liam-DeVoe/publish-ppc64le-and-windows-arm64-wh...
  • 37999eb claude: support Python 3.15
  • a598ab9 Revert "optimize single-branch one_of"
  • f440660 optimize single-branch one_of
  • b5f6c94 claude: publish ppc64le and windows arm64 wheels
  • 2f49474 Bump hypothesis version to 6.165.5 and update changelog
  • 15e547b Merge pull request #4850 from Liam-DeVoe/rename-internal-example-terminology
  • Additional commits viewable in compare view

Updates ruff from 0.16.2 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates yfinance from 1.5.2 to 1.6.0

Release notes

Sourced from yfinance's releases.

1.6.0

Main changes:

  • Price repair improvements
  • Few new fields to Balance Sheet and Screener
  • Many little fixes

Full changelog #2935

Thanks @​foley40 @​dokson @​vignesh-nagarajan-vn @​shanehull @​DogInfantry @​Kaif10 @​nyxst4ck @​DMZ22 @​Aaritp @​etbala @​aleks-drozy

Changelog

Sourced from yfinance's changelog.

1.6.0

Features / improvements

Commits
  • 93eb4c2 Update GH actions
  • 0af231f Version 1.6.0
  • 777dc54 Merge pull request #2935 from ranaroussi/dev
  • 9b3fcbc Merge pull request #2943 from ranaroussi/price-repair-improvements
  • 8b85f90 Price repair improvements
  • f854309 Fix regression in PR #2907 (see last comment)
  • 984a687 Merge pull request #2936 from aleks-drozy/docs/download-tz-contract
  • 24ee2ff docs: state download()'s actual returned index timezone contract
  • d611015 Merge pull request #2915 from DMZ22/fix-timedelta-deprecations
  • 61780c7 Merge pull request #2849 from etbala/dependency-management
  • Additional commits viewable in compare view

Updates ty from 0.0.69 to 0.0.71

Release notes

Sourced from ty's releases.

0.0.71

Release Notes

Released on 2026-08-12.

Library support

  • Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

  • Diagnose invalid __getattribute__ calls (#27506)
  • Validate boolean conversion in comprehension filters (#27641)
  • Validate unpacked callable argument shapes (#27516)

Core type checking

  • Avoid introducing boolean literals when narrowing integers (#27698)
  • Fix truthiness inference for subclassable known classes (#27638)
  • Handle class objects that may be descriptors (#26687)
  • Infer type variables through nominal type[...] parameters (#27689)
  • Model exception flow with operation checkpoints (#27471)
  • Preserve constrained TypeVar types when slicing (#27645)
  • Preserve enum attributes on Self and bounded type variables (#27644)
  • Preserve enum exhaustiveness with custom _missing_ methods (#27700)
  • Preserve literal-string origin in comparison narrowing (#27582)
  • Resolve generic type aliases subscripted inside type[] (#27663)
  • Restrict equality impossibility to static bounds (#27655)

Performance

  • Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

Install ty 0.0.71

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.71/ty-installer.sh | sh

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.71

Released on 2026-08-12.

Library support

  • Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

  • Diagnose invalid __getattribute__ calls (#27506)
  • Validate boolean conversion in comprehension filters (#27641)
  • Validate unpacked callable argument shapes (#27516)

Core type checking

  • Avoid introducing boolean literals when narrowing integers (#27698)
  • Fix truthiness inference for subclassable known classes (#27638)
  • Handle class objects that may be descriptors (#26687)
  • Infer type variables through nominal type[...] parameters (#27689)
  • Model exception flow with operation checkpoints (#27471)
  • Preserve constrained TypeVar types when slicing (#27645)
  • Preserve enum attributes on Self and bounded type variables (#27644)
  • Preserve enum exhaustiveness with custom _missing_ methods (#27700)
  • Preserve literal-string origin in comparison narrowing (#27582)
  • Resolve generic type aliases subscripted inside type[] (#27663)
  • Restrict equality impossibility to static bounds (#27655)

Performance

  • Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

0.0.70

Released on 2026-08-10.

LSP server

  • Enable and downrank auto-import completions from stub-only modules (#27433)
  • Fix signature help at end of file (#27622)
  • Normalize type labels in structured docstrings (#26923)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the python-dependencies group with 9 updates
43b178a 
Bumps the python-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [ml4t-specs](https://github.com/ml4t/specs) | `0.1.0` | `0.1.3` |
| [numpy](https://github.com/numpy/numpy) | `2.3.5` | `2.5.2` |
| [numba](https://github.com/numba/numba) | `0.62.1` | `0.67.0` |
| [shap](https://github.com/shap/shap) | `0.52.0` | `0.49.1` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.165.7` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [yfinance](https://github.com/ranaroussi/yfinance) | `1.5.2` | `1.6.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.69` | `0.0.71` |


Updates `ml4t-specs` from 0.1.0 to 0.1.3
- [Release notes](https://github.com/ml4t/specs/releases)
- [Commits](ml4t/specs@v0.1.0...v0.1.3)

Updates `numpy` from 2.3.5 to 2.5.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.3.5...v2.5.2)

Updates `numba` from 0.62.1 to 0.67.0
- [Release notes](https://github.com/numba/numba/releases)
- [Commits](numba/numba@0.62.1...0.67.0)

Updates `shap` from 0.52.0 to 0.49.1
- [Release notes](https://github.com/shap/shap/releases)
- [Changelog](https://github.com/shap/shap/blob/master/docs/release_notes.rst)
- [Commits](shap/shap@v0.52.0...v0.49.1)

Updates `hypothesis` from 6.165.2 to 6.165.7
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.165.7)

Updates `ruff` from 0.16.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.3)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `yfinance` from 1.5.2 to 1.6.0
- [Release notes](https://github.com/ranaroussi/yfinance/releases)
- [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst)
- [Commits](ranaroussi/yfinance@1.5.2...1.6.0)

Updates `ty` from 0.0.69 to 0.0.71
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.69...0.0.71)

---
updated-dependencies:
- dependency-name: ml4t-specs
  dependency-version: 0.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: numpy
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: numba
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: shap
  dependency-version: 0.49.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.165.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: yfinance
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.71
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates python Python dependencies labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates python Python dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants