[dependabot]

Bumps the go-modules group in /dependency/retrieval with 2 updates: github.com/montanaflynn/stats and go.yaml.in/yaml/v3.

Updates github.com/montanaflynn/stats from 0.13.0 to 0.14.0

Release notes

Sourced from github.com/montanaflynn/stats's releases.

v0.14.0

Upgrade notes

• Max, Min, Median, the percentiles and related functions now return NaN when the data contains NaN, like Mean and Sum already did. Before, whether a NaN was skipped depended on where it appeared.
• Correlation, Pearson, Spearman, KendallTau and AutoCorrelation now return ErrTooFew for a single pair and ErrZero for constant input. They still return 0 in those cases, so callers that ignore the error see the same values.
• New ErrTooFew error, returned when there are too few values, such as the sample variance of a single value. errors.Is(err, ErrEmptyInput) is also true for it.

Changelog

Fix

• dce27d9db9576386b90598f2bb2f3d83f7a68e5a fix: avoid overflow in Mean and midpoints near MaxFloat64 (#155)
• 59f69483637f9e3270be90545e03ae0281e139b6 fix: avoid range overflow in Histogram and Rescale (#151)
• a2c8bc57a92ad4f4ca7d55ce5aa409d22ed531ba fix: compute Correlation without overflow at extreme scales (#152)
• 87d2ecb22b10f2bff2414299e5c411e081125fb5 fix: compute squared and higher-power statistics without overflow at extreme scales (#156)
• 78c2b93989bf96b644b2c8dbb623373335ddfb20 fix: handle single-element and zero-variance samples in two-sample TTest (#149)
• 6b643c7c2d7a387807ed255221c76798469ba090 fix: preserve finite Euclidean distances across scales (#145)
• 723a8c4efeab86e430b4f4e2feb8fa286b2fb219 fix: prevent overflow in RMS and MinkowskiDistance (#158)
• 03ad589b103f1660f0071ce56bb7fdb399dbc0af fix: propagate NaN through order statistics (#148)
• 6e17fc88f0dee21d6a55852d506033b24b9ed811 fix: reject NaN and out-of-domain parameters (#147)
• 9853a1a82b164eacd74b267921c4c1565e218687 fix: return errors for statistics undefined on too few or constant values (#150)

CI

• bbeb670b02270fac45636bb57c9033f1a0ab90b7 ci: run tests on arm64 (#157)

Chore

• c2cb6881295ee9249914cce7bcb80dc96ee2f4b2 chore: group ci and chore commits in release notes (#144)

Other

• a6d4e2bd840c7951abb85e4c45bdc6ab58f9940f test: add property tests for panics, silent NaN, overflow, and invalid parameters (#146)
• 9c44b972d91923ec6a639dbaa27343376057570d test: compare Norm results with a tolerance (#154)

Changelog

Sourced from github.com/montanaflynn/stats's changelog.

[v0.14.0] - 2026-10-25

Fix

• Prevent overflow in RMS and MinkowskiDistance (#158)
• Compute squared and higher-power statistics without overflow at extreme scales (#156)
• Avoid overflow in Mean and midpoints near MaxFloat64 (#155)
• Compute Correlation without overflow at extreme scales (#152)
• Avoid range overflow in Histogram and Rescale (#151)
• Return errors for statistics undefined on too few or constant values (#150)
• Handle single-element and zero-variance samples in two-sample TTest (#149)
• Propagate NaN through order statistics (#148)
• Reject NaN and out-of-domain parameters (#147)
• Preserve finite Euclidean distances across scales (#145)

CI

• Run tests on arm64 (#157)

Chore

• Group ci and chore commits in release notes (#144)

Commits

• aa2fe09 chore: update changelog for v0.14.0
• 723a8c4 fix: prevent overflow in RMS and MinkowskiDistance (#158)
• bbeb670 ci: run tests on arm64 (#157)
• 87d2ecb fix: compute squared and higher-power statistics without overflow at extreme ...
• dce27d9 fix: avoid overflow in Mean and midpoints near MaxFloat64 (#155)
• a2c8bc5 fix: compute Correlation without overflow at extreme scales (#152)
• 59f6948 fix: avoid range overflow in Histogram and Rescale (#151)
• 9853a1a fix: return errors for statistics undefined on too few or constant values (#150)
• 78c2b93 fix: handle single-element and zero-variance samples in two-sample TTest (#149)
• 03ad589 fix: propagate NaN through order statistics (#148)
• Additional commits viewable in compare view

Updates go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

Commits

• 5a62aba resolve: hint-class literal merge-key string "<<" so it's quoted on encode
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions