Skip to content

deps: bump the production-dependencies group across 1 directory with 13 updates - #17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/production-dependencies-21c334c13c
Closed

deps: bump the production-dependencies group across 1 directory with 13 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/production-dependencies-21c334c13c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
pydantic 2.13.4 2.13.5
pyarrow 24.0.0 25.0.1
typer 0.26.8 0.27.2
tqdm 4.68.3 4.70.1
cachetools 7.1.4 7.2.0
fastapi 0.139.0 0.141.1
ado-autoconf 1.8.0 2.0.0
scikit-learn 1.7.2 1.9.1
xgboost 3.1.3 3.4.1
lightgbm 4.6.0 4.7.0
torch 2.12.1 2.14.0
tabpfn 8.0.3 9.0.0
matplotlib 3.10.9 3.11.2

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pyarrow from 24.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Apache Arrow 25.0.0

Release Notes URL: https://arrow.apache.org/release/25.0.0.html

Apache Arrow 25.0.0 RC1

Release Notes: Release Candidate: 25.0.0 RC1

Commits

Updates typer from 0.26.8 to 0.27.2

Release notes

Sourced from typer's releases.

0.27.2

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0

Breaking Changes

Internal

... (truncated)

Changelog

Sourced from typer's changelog.

0.27.2 (2026-08-28)

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

... (truncated)

Commits

Updates tqdm from 4.68.3 to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

  • contrib.concurrent: fix no-len iterables (#1830 <- #1828)
  • tests: major overhaul (#1819)
  • update AI policy in PR template
  • misc lint & tidy
  • CI: bump workflow actions & pre-commit hooks

tqdm v4.70.0 stable

  • contrib.concurrent: major improvements
    • support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)
    • fix total based on shortest iterable length (#1473)
    • use default max_workers (#1543 <- #1530, #1518)
    • support timeout, buffersize (#1576)
    • improve ETA (#1708 <- #1161)
    • update as_completed (#1709 <- #1565)
    • add tqdm.concurrent.intepreter_map (#1777)
  • asyncio: support iterables with only __aiter__ (#1714 <- #1686)
  • support reset(float("inf")) (#1783 <- #1781, #651)
  • framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

tqdm v4.69.0 stable

  • add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
  • misc minor framework updates
    • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

Commits

Updates cachetools from 7.1.4 to 7.2.0

Changelog

Sourced from cachetools's changelog.

v7.2.0 (2026-09-16)

  • Deprecate use of cache=None to suppress caching with the @cached decorator.

  • Add support for Python 3.15.

  • Minor test improvements.

  • Minor documentation updates.

v7.1.8 (2026-08-31)

  • Reject negative maxsize in Cache.__init__.

v7.1.7 (2026-08-01)

  • Improve Cache.__setitem__ behavior when replacing an existing cache item with a larger value.

  • Update CI environment.

v7.1.6 (2026-07-24)

  • Minor style improvements to keep ruff happy.

v7.1.5 (2026-07-23)

  • Fix TLRUCache silently keeping stale values on expired overwrites.

  • Reject negative cache item getsizeof values.

  • Update build environment.

Commits

Updates fastapi from 0.139.0 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates ado-autoconf from 1.8.0 to 2.0.0

Updates scikit-learn from 1.7.2 to 1.9.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.9.1

We're happy to announce the 1.9.1 release.

This release contains a few bug fixes and is the first version supporting Python 3.15.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.9.html#version-1-9-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Scikit-learn 1.9.0

We're happy to announce the 1.9.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.9.html

This release adds narwhals as a new dependency that will help to improve dataframe interoperability across the project.

This version supports Python versions 3.11 to 3.14.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Release 1.8.0

We're happy to announce the 1.8.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_8_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.8.html

This version supports Python versions 3.11 to 3.14 and features support of free-threaded CPython.

You can upgrade with pip as usual:

... (truncated)

Commits
  • 866c0f5 generate changelog
  • 12f135f update upper bounds
  • 43ff2f2 bump version
  • b851524 DOC Mark dev index as orphan (#34916)
  • 01d56d4 DOC Fix wikipedia principal eigenvector example references (#34915)
  • b86a1e2 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
  • d282698 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#34897)
  • eb34279 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • 7581303 FIX: Fix QuantileTransformer(ignore_implicit_zeros=True) sub-sampling behav...
  • ac47f4d FIX: avoid EfficiencyWarning in OPTICS with metric='precomputed' (#34692)
  • Additional commits viewable in compare view

Updates xgboost from 3.1.3 to 3.4.1

Release notes

Sourced from xgboost's releases.

3.4.1 Patch Release

What's Changed

  • [jvm] Fix batch predict for SparseVector features (#12347)
  • Fix model slicing with category container. (#12462)

Full Changelog: dmlc/xgboost@v3.4.0...v3.4.1

Additional artifacts

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check
34a5cb99a67bb98b44f204767eeeae642b65a86b2ecfca60082e4d74fd4d169a  xgboost-src-3.4.1.tar.gz
2514d394f989d6e990e67898d7f5e530c7c1867222c497ea454ffc18a31cb096  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

Source tarball

Release 3.4.0 stable

Release notes

https://xgboost.readthedocs.io/en/latest/changes/v3.4.0.html

Additional artifacts

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check
af4588b34c7fa1bfde258006beebbe181454f1fb74266f81883b23059af3b9fb  xgboost-src-3.4.0.tar.gz
8feb5a559cd869e9c9b8ed1a60475c34b7ba689c6f7b9c41dc9ba16fae4d19fe  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

Source tarball

... (truncated)

Commits

Updates lightgbm from 4.6.0 to 4.7.0

Release notes

Sourced from lightgbm's releases.

v4.7.0

Highlights

The Python package now supports polars inputs, thanks to narwhals. Thanks to @​borchero for the main implementation and to everyone who contributed design work, especially on lightgbm-org/LightGBM#6204 (@​maxzw @​detrin @​jmoralez @​lcrmorin @​Ic3fr0g @​MarcoGorelli @​kylebarron @​vyasr).

Significantly improved GPU support including the first ROCm builds (lightgbm-org/LightGBM#6086) and multi-GPU support for NVIDIA GPUs via NCCL (lightgbm-org/LightGBM#6138). (@​jeffdaily @​shiyu1994 @​StrikerRUS)

Improvements to distributed training / Dask. Lots of bugfixes in this area, still ongoing work, thanks especially to @​wagner-austin for all the help.

Some organizational changes. The project has changed GitHub orgs (Microsoft -> lightgbm-org) and default branch names (master -> main).

Changes

💡 New Features

🔨 Breaking

... (truncated)

Commits
  • 8f7036f release v4.7.0 (#7129)
  • 497b57f [python-package] allow access to eval result attributes by name (#7161)
  • 96dfee9 [python-package] Allow to pass Arrow array & Polars series as position (#7260)
  • b97453d [python-package] Add pandas tests for categorical handling and dtype validati...
  • e455031 [ci] add ppc64le C++ test job (#7345)
  • 18810cb [ci] remove lingering references to 'master' branch (#7353)
  • 0704724 [ci] [R-package] use a Windows-specific download link for SWIG, stop using '<...
  • 75c0190 [python-package] remove unnecessary old import paths in compat.py (#7358)
  • 688d789 [ci] avoid overwriting installed 'build' in build-python.sh (#7356)
  • cf16013 change default branch from 'master' to 'main' (#7287)
  • Additional commits viewable in compare view

Updates torch from 2.12.1 to 2.14.0

Release notes

Sourced from torch's releases.

PyTorch 2.14.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

torch.nn

  • torch.nn.LinearCrossEntropyOptions no longer accepts acc_policy="balanced"; use "compact" instead (#188283)

    The "balanced" policy was removed because "compact" provides the same weight-gradient accumulation precision with lower memory use on CUDA, already uses the equivalent scratch layout for mixed-precision inputs on other devices, and was never selected by "auto". Constructing the options with acc_policy="balanced" now raises ValueError: invalid acc_policy: 'balanced'; expected one of 'auto', 'accurate', 'compact'.

    Before:

    options = torch.nn.LinearCrossEntropyOptions(acc_policy="balanced")
loss = torch.nn.functional.linear_cross_entropy(
    input, linear_weight, target, options=options
)

    After:

    options = torch.nn.LinearCrossEntropyOptions(acc_policy="compact")
loss = torch.nn.functional.linear_cross_entropy(

... (truncated)

Commits
  • 2b3ec34 [release/2.14] Import SDPAParams in test_transformers to fix lint (#194970)
  • 08187d9 [cuDNN] Add guards for cuDNN SDPA decode (#194963)
  • 8ceea97 Pin cython < 3.3.0 for the Windows Triton wheel build (#194931)
  • 99ecebc [Cherry-pick][release/2.14] [inductor] Fix loop-local load CSE lifetime (#194...
  • ec283a7 Bump the Python 3.15 numpy pin to 2.5.2 (#194821)
  • 65890f3 Fix docker-release validate job to use the channel matching the pushed image ...
  • 1682388 Fix macOS py3.15 wheel builds: pin Cython < 3.3.0 and bump the cp315 numpy pi...
  • 9724418 Fix Windows py3.15 builds: constrain Cython < 3.3.0 and bump the cp315 numpy ...
  • f1b7554 [MPS] Fix pin_memory() recycling buffers still in use by the GPU (#194662)
  • 9f205f7 [MPS] fail loudly on large reductions (#194661)
  • Additional commits viewable in compare view

Updates tabpfn from 8.0.3 to 9.0.0

Release notes

Sourced from tabpfn's releases.

v9.0.0

Breaking Changes

  • eval_metric="roc_auc" combined wi...

    Description has been truncated

@dependabot
deps: bump the production-dependencies group across 1 directory with …
a810419 
…13 updates

Bumps the production-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pyarrow](https://github.com/apache/arrow) | `24.0.0` | `25.0.1` |
| [typer](https://github.com/fastapi/typer) | `0.26.8` | `0.27.2` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.3` | `4.70.1` |
| [cachetools](https://github.com/tkem/cachetools) | `7.1.4` | `7.2.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.141.1` |
| ado-autoconf | `1.8.0` | `2.0.0` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.7.2` | `1.9.1` |
| [xgboost](https://github.com/dmlc/xgboost) | `3.1.3` | `3.4.1` |
| [lightgbm](https://github.com/lightgbm-org/LightGBM) | `4.6.0` | `4.7.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.12.1` | `2.14.0` |
| [tabpfn](https://github.com/priorlabs/tabpfn) | `8.0.3` | `9.0.0` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.9` | `3.11.2` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pyarrow` from 24.0.0 to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.1)

Updates `typer` from 0.26.8 to 0.27.2
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.2)

Updates `tqdm` from 4.68.3 to 4.70.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.3...v4.70.1)

Updates `cachetools` from 7.1.4 to 7.2.0
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.4...v7.2.0)

Updates `fastapi` from 0.139.0 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.0...0.141.1)

Updates `ado-autoconf` from 1.8.0 to 2.0.0

Updates `scikit-learn` from 1.7.2 to 1.9.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.7.2...1.9.1)

Updates `xgboost` from 3.1.3 to 3.4.1
- [Release notes](https://github.com/dmlc/xgboost/releases)
- [Changelog](https://github.com/dmlc/xgboost/blob/master/NEWS.md)
- [Commits](dmlc/xgboost@v3.1.3...v3.4.1)

Updates `lightgbm` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/lightgbm-org/LightGBM/releases)
- [Commits](lightgbm-org/LightGBM@v4.6.0...v4.7.0)

Updates `torch` from 2.12.1 to 2.14.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.12.1...v2.14.0)

Updates `tabpfn` from 8.0.3 to 9.0.0
- [Release notes](https://github.com/priorlabs/tabpfn/releases)
- [Changelog](https://github.com/PriorLabs/TabPFN/blob/main/CHANGELOG.md)
- [Commits](PriorLabs/TabPFN@v8.0.3...v9.0.0)

Updates `matplotlib` from 3.10.9 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.9...v3.11.2)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: typer
  dependency-version: 0.27.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tqdm
  dependency-version: 4.70.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ado-autoconf
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: scikit-learn
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: xgboost
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lightgbm
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: torch
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tabpfn
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 3, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/production-dependencies-21c334c13c branch October 3, 2026 08:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants