build: bump the docs-deps group across 1 directory with 2 updates by dependabot[bot] · Pull Request #187 · ansys/pyansys-workflows

dependabot · 2026-04-13T12:00:08Z

Bumps the docs-deps group with 2 updates in the /doc directory: panel and pillow.

Updates panel from 1.8.9 to 1.8.10

Release notes

Version 1.8.10

Panel 1.8.10 focuses on stability improvements across widgets, plotting integrations, and server behavior. It includes fixes for Tabulator serialization, Param widget updates, Plotly and Vega regressions, and several UI issues. This release also improves compatibility with Bokeh 3.9, enhances error reporting when serving apps, and addresses a security issue in panel.js.

Many thanks to the contributors to this release including: @philippjfr, @SuMayaBee, @AtharvaJaiswal005, @hoxbro, @ghostiee-11, and @tmoulignier.

✨ Enhancements

Improve Python error messages displayed when serving apps (#8478)

Improve state.busy logic to avoid mismatches in busy state tracking (#8498)

Allow configuring the Panel CDN with the PANEL_CDN_ROOT environment variable or pn.config.cdn_root (#8512)

🐛 Bug Fixes

Prevent spacebar in Card header inputs from toggling collapse (#8442)

Fix DateRangeSlider incorrectly modifying both values with timezone-aware timestamps (#8455)

Preserve slider bar color when Accordion panels are collapsed or expanded (#8460)

Fix datetime axis type mismatch in link_axes after scroll and plot update (#8468)

Fix JSON serialization errors in Tabulator when using mixed NaT datetime columns (#8491)

Fix Param widget values not updating when changed inside their own callback (#8492)

Fix missing validation in _imgshape for image panes (#8485)

Fix Vega pane not updating when using inline data (#8495)

Fix Plotly regressions introduced in earlier 1.8 releases (#8471, #8476)

Ensure all ReactiveESM children render correctly (#8473)

Ensure CodeEditor annotations are not overridden (#8505)

Fix Modal objects update rendering inline instead of in dialog (#8508)

Prevent ValueError when EditableFloatSlider input is cleared (#8511)

🔒 Security

Address XSS and prototype overwrite issues in panel.js (#8501)

📦 Compatibility & Dependency Updates

Add compatibility with Bokeh 3.9 (#8475)

📚 Documentation

Recommend using bound function references instead of watch=True in the bind_component guide (#8479)

🧪 Tests & Maintenance

Improve test robustness (#8502)

Fix JupyterLite CI workflow (#8494, #8496)

Changelog

Sourced from panel's changelog.

Version 1.8.10

Panel 1.8.10 focuses on stability improvements across widgets, plotting integrations, and server behavior. It includes fixes for Tabulator serialization, Param widget updates, Plotly and Vega regressions, and several UI issues. This release also improves compatibility with Bokeh 3.9, enhances error reporting when serving apps, and addresses a security issue in panel.js.

Many thanks to the contributors to this release including: @philippjfr, @SuMayaBee, @AtharvaJaiswal005, @hoxbro, @ghostiee-11, and @tmoulignier.

✨ Enhancements

Improve Python error messages displayed when serving apps (#8478)

Improve state.busy logic to avoid mismatches in busy state tracking (#8498)

Allow configuring the Panel CDN with the PANEL_CDN_ROOT environment variable or pn.config.cdn_root (#8512)

🐛 Bug Fixes

Prevent spacebar in Card header inputs from toggling collapse (#8442)

Fix DateRangeSlider incorrectly modifying both values with timezone-aware timestamps (#8455)

Preserve slider bar color when Accordion panels are collapsed or expanded (#8460)

Fix datetime axis type mismatch in link_axes after scroll and plot update (#8468)

Fix JSON serialization errors in Tabulator when using mixed NaT datetime columns (#8491)

Fix Param widget values not updating when changed inside their own callback (#8492)

Fix missing validation in _imgshape for image panes (#8485)

Fix Vega pane not updating when using inline data (#8495)

Fix Plotly regressions introduced in earlier 1.8 releases (#8471, #8476)

Ensure all ReactiveESM children render correctly (#8473)

Ensure CodeEditor annotations are not overridden (#8505)

Fix Modal objects update rendering inline instead of in dialog (#8508)

Prevent ValueError when EditableFloatSlider input is cleared (#8511)

🔒 Security

Address XSS and prototype overwrite issues in panel.js (#8501)

📦 Compatibility & Dependency Updates

Add compatibility with Bokeh 3.9 (#8475)

📚 Documentation

Recommend using bound function references instead of watch=True in the bind_component guide (#8479)

🧪 Tests & Maintenance

Improve test robustness (#8502)

Fix JupyterLite CI workflow (#8494, #8496)

Commits

dabdb38 Bump panel.js to 1.8.10
dd1a6f4 Update CHANGELOG
e6c2916 ci: Update github action versions (#8513)
e94fddf Prevent spacebar in Card header inputs from toggling collapse (#8442)
b8a2b29 Allow making CDN_ROOT configurable (#8512)
40b1fe6 Fix Modal objects update rendering inline instead of in dialog (#8508)
9a66009 fix: prevent ValueError when EditableFloatSlider input is cleared (#8511)
2b50a33 Fix CodeEditor annotations overwritten by Ace worker (#8505)
f6dc8a7 Bump panel.js to 1.8.10-rc.0
cddfd31 Add 1.8.10 changelog
Additional commits viewable in compare view

Updates pillow from 12.1.1 to 12.2.0

Release notes

Sourced from pillow's releases.

12.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

Update 12.2.0 release notes #9522 [@hugovk]

Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@bitplane]

Update Python versions #9515 [@radarhere]

Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@aclark4life]

Add release notes for #9394, #9419 and #9456 #9467 [@radarhere]

Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@bitplane]

Merge PFM documentation into PPM #9434 [@radarhere]

Update macOS tested Pillow versions #9431 [@radarhere]

Fix CVE number #9430 [@hugovk]

Dependencies

Update xz to 5.8.3 #9523 [@radarhere]

Update libjpeg-turbo to 3.1.4.1 #9507 [@radarhere]

Update libpng to 1.6.56 #9499 [@radarhere]

Update freetype to 2.14.3 #9485 [@radarhere]

Updated libavif to 1.4.1 #9479 [@radarhere]

Updated harfbuzz to 13.2.1 #9461 [@radarhere]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Update harfbuzz to 13.0.1 #9453 [@radarhere]

Update libavif to 1.4.0 #9460 [@radarhere]

Update freetype to 2.14.2 #9449 [@radarhere]

Update actions/download-artifact action to v8 #9451 [@renovate[bot]]

Updated libpng to 1.6.55 #9425 [@radarhere]

Testing

Cleanup .spider extension in the same test where it is added #9517 [@radarhere]

Run tests in parallel via tox for 3.5x speedup #9516 [@hugovk]

Enable colour in CI logs #9486 [@hugovk]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Simplify TGA test code #9477 [@radarhere]

Update tests to check for ValueError when encoding an empty image #9464 [@radarhere]

Upgrade CI from macos-15-intel to macos-26-intel #9454 [@hugovk]

Add check-case-conflict hook #9446 [@radarhere]

Specify platform when pulling docker image #9440 [@radarhere]

GHA: Cache libavif and webp builds for Ubuntu #9437 [@hugovk]

Update macOS tested Pillow versions #9431 [@radarhere]

Other changes

Check calloc return value #9527 [@radarhere]

Check all allocs in the Arrow tree #9488 [@wiredfool]

Reject non-numeric elements inside list coords #9526 [@hugovk]

Move variable declaration inside define #9525 [@radarhere]

... (truncated)

Commits

3c41c09 12.2.0 version bump
cdaa29e Check calloc return value (#9527)
585b2f5 Check calloc return value
ecf011e Check all allocs in the Arrow tree (#9488)
cf6de8c Reject non-numeric elements inside list coords (#9526)
ffdcede Update 12.2.0 release notes (#9522)
7929d77 Added security release notes (#149)
c4f7aa5 Added security release notes
22cdb5f Move variable declaration inside define (#9525)
fc15b3b Resize tall images vertically first (#9524)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the docs-deps group with 2 updates in the /doc directory: [panel](https://github.com/holoviz/panel) and [pillow](https://github.com/python-pillow/Pillow). Updates `panel` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/holoviz/panel/releases) - [Changelog](https://github.com/holoviz/panel/blob/main/CHANGELOG.md) - [Commits](holoviz/panel@v1.8.9...v1.8.10) Updates `pillow` from 12.1.1 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) --- updated-dependencies: - dependency-name: panel dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs-deps - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docs-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot assigned pyansys-ci-bot Apr 13, 2026

dependabot bot requested review from MaxJPRey and RobPasMue as code owners April 13, 2026 12:00

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 13, 2026

RobPasMue merged commit f907467 into main Apr 17, 2026
2 checks passed

RobPasMue deleted the dependabot/pip/doc/docs-deps-919eb564c3 branch April 17, 2026 10:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: bump the docs-deps group across 1 directory with 2 updates#187

build: bump the docs-deps group across 1 directory with 2 updates#187
RobPasMue merged 1 commit intomainfrom
dependabot/pip/doc/docs-deps-919eb564c3

dependabot bot commented on behalf of github Apr 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Apr 13, 2026

Version 1.8.10

✨ Enhancements

🐛 Bug Fixes

🔒 Security

📦 Compatibility & Dependency Updates

📚 Documentation

🧪 Tests & Maintenance

Version 1.8.10

✨ Enhancements

🐛 Bug Fixes

🔒 Security

📦 Compatibility & Dependency Updates

📚 Documentation

🧪 Tests & Maintenance

12.2.0

Documentation

Dependencies

Testing

Other changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants