chore(deps): bump the production-dependencies group with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates: async-timeout, deltalake and geopandas.

Updates async-timeout from 4.0.3 to 5.0.1

Release notes

Sourced from async-timeout's releases.

5.0.1

Misc

• [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0

Features

• Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

• On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

• Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)

Changelog

Sourced from async-timeout's changelog.

5.0.1 (2024-11-06)

Misc

• [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0 (2024-10-31)

Features

• Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

• On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

• Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)

Commits

• cc52d41 Bump to 5.0.1
• 1af7d71 Bump to 5.0.1
• 3bf26d9 Fix #423: add requirements.txt to sdist package (#425)
• 380e8ba Mention condition import of asyncio.timeout / async_timeout.timeout in README...
• 8a232d0 Update README
• 3d3e3e4 Bump to 5.0.0
• d5c21f3 Mimic asyncio.Timeout behavior (#422)
• a1111c2 Drop deprecated sync context manager support (#421)
• 00fd343 Imports cleanup
• 7b61b33 Update CI config file
• Additional commits viewable in compare view

Updates deltalake from 1.6.0 to 1.6.1

Release notes

Sourced from deltalake's releases.

python-v1.6.1: Column Mapping write support

What's Changed

• docs: update the changelog for 0.32.2 by @​rtyler in delta-io/delta-rs#4459
• docs: upgrade the changelog for python 1.6.0 by @​rtyler in delta-io/delta-rs#4461
• chore: introduce regression test which demonstrates null partition vacuuming by @​rtyler in delta-io/delta-rs#4463
• chore: bump deltalake-unity for a release to crates.io by @​rtyler in delta-io/delta-rs#4470
• fix: keep delta materialized filters above parquet by @​ethan-tyler in delta-io/delta-rs#4469
• fix: count distinct top-level fields against dataSkippingNumIndexedCols by @​rtyler in delta-io/delta-rs#4466
• fix: add TimestampNanos to supported reader features by @​adamreeve in delta-io/delta-rs#4481
• fix: preserve merge row ordinals across scan planning by @​ethan-tyler in delta-io/delta-rs#4473
• fix: simplify expressions when conflict checking by @​adamreeve in delta-io/delta-rs#4479
• perf: break early by @​ion-elgreco in delta-io/delta-rs#4491
• feat: remove S3DynamoDbLogStore and prepare for 1.0.0 by @​rtyler in delta-io/delta-rs#4483
• chore: bump jemalloc by @​ion-elgreco in delta-io/delta-rs#4492
• feat(cdf): prune load_cdf reads by partition predicates by @​osmant in delta-io/delta-rs#4487
• feat: add public snapshot file selection api by @​ethan-tyler in delta-io/delta-rs#4489
• feat: column mapping physical exec by @​ion-elgreco in delta-io/delta-rs#4493
• chore: add test cases for successful concurrent delete operations by @​adamreeve in delta-io/delta-rs#4502
• fix: skip boolean min max stats during scans by @​ethan-tyler in delta-io/delta-rs#4499
• ci: mark PRs as draft by default by @​rtyler in delta-io/delta-rs#4507
• chore: refactor column mapping related errors into stronger types by @​rtyler in delta-io/delta-rs#4506
• ci: add "ai" label to PRs with AI co-authored commits by @​rtyler in delta-io/delta-rs#4508
• fix: correct format for timestampNtz statistics by @​adamreeve in delta-io/delta-rs#4504
• fix: python history race condition by @​rtyler in delta-io/delta-rs#4500
• feat: allow switching nanosecond timestamps on at runtime in Python by @​adamreeve in delta-io/delta-rs#4513
• docs(core): document public API surface for 1.0 release by @​rtyler in delta-io/delta-rs#4515
• chore: be a little more exhaustive in our kernel expression matching by @​rtyler in delta-io/delta-rs#4509
• chore: upgrade to codecov-action 7 by @​rtyler in delta-io/delta-rs#4516
• fix: reduce DeltaScanNext file_id memory usage by @​ethan-tyler in delta-io/delta-rs#4519
• docs: enhance Rust examples for creating and querying Delta tables by @​khalidmammadov in delta-io/delta-rs#4526
• feat: update schema mismatch error message by @​JustinRush80 in delta-io/delta-rs#4510
• chore: upgrade to datafusion 54 by @​laverem in delta-io/delta-rs#4525
• fix: pin time below 0.3.48 by @​ethan-tyler in delta-io/delta-rs#4534
• chore: pin transitive dependencies which broke today (alloc-stdlib) by @​rtyler in delta-io/delta-rs#4536
• refactor: add Snapshot read capabilities by @​ethan-tyler in delta-io/delta-rs#4529
• chore: simplify table root retrieval in table_provider by @​khalidmammadov in delta-io/delta-rs#4514
• fix: redact Unity Catalog env log values by @​fallintoplace in delta-io/delta-rs#4539
• fix: feature flag tests which require symbols in the datafusion build by @​rtyler in delta-io/delta-rs#4540
• fix: coerce inner field name when writing fixed size lists from Rust by @​adamreeve in delta-io/delta-rs#4532
• chore: import pyspark integration test for invariants by @​rtyler in delta-io/delta-rs#4542
• fix: support simple pruning when binary partitions are used by @​rtyler in delta-io/delta-rs#4541
• chore: add regression test for column mapping roundtrip with pyspark by @​rtyler in delta-io/delta-rs#4543
• fix: information schema not working with views by @​hntd187 in delta-io/delta-rs#4550
• feat: add generic OpenDAL storage backend (deltalake-opendal) by @​kszucs in delta-io/delta-rs#4465
• fix: preserve full optimize partition identity by @​ethan-tyler in delta-io/delta-rs#4556
• test: preserve eager snapshot state compatibility by @​ethan-tyler in delta-io/delta-rs#4551
• feat(core): add BlindDeltaTable for stats-free append writes by @​seokjin0414 in delta-io/delta-rs#4030

New Contributors

• @​osmant made their first contribution in delta-io/delta-rs#4487

... (truncated)

Changelog

Sourced from deltalake's changelog.

Changelog

rust-v0.32.3 (2026-05-19)

Full Changelog

Merged pull requests:

• docs: update the changelog for 0.32.2 #4459 (rtyler)
• feat: add support for variant type #4325 (abhiaagarwal)

Commits

• e6e492f chore: Bump version from 1.6.0 to 1.6.1
• 124a5b5 feat(core): add BlindDeltaTable for stats-free append writes (#4030)
• cba895a test: preserve eager snapshot state compatibility (#4551)
• f228ea8 fix: preserve full optimize partition identity
• 0ec5175 chore: parametrize opendal tests over fs:// and opendal+fs:// schemes
• cf1ab43 docs: update HuggingFace examples with correct URI formats and bucket support
• 6a9b2b6 chore: fix opendal python tests which require pyarrow to run
• 2b795c7 chore: fix some lingering formatting issues
• 4f90ead docs: add OpenDAL storage backends page
• 9e772fd feat: register OpenDAL services under opendal+<service>:// plus bare scheme
• Additional commits viewable in compare view

Updates geopandas from 1.1.3 to 1.1.4

Release notes

Sourced from geopandas's releases.

Version 1.1.4

What's Changed

Bug fixes:

• Further hardening of to_postgis against SQL injection (#3800).
• Ensure that points generated by sample_points are not sorted along x-axis (#3773).
• Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
• More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Full Changelog: geopandas/geopandas@v1.1.3...v1.1.4

Changelog

Sourced from geopandas's changelog.

Version 1.1.4 (June 26, 2026)

Bug fixes:

• Further hardening of to_postgis against SQL injection (#3800).
• Ensure that points generated by sample_points are not sorted along x-axis (#3773).
• Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
• More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Commits

• 91ec4af RLS: v1.1.4
• b5d685f DOC: add changelog for 1.1.4
• 158d993 BUG: further to_postgis hardening (#3800)
• ce95930 BUG: honor legend_kwds["labels"] for categorical and boolean columns in explo...
• 22bf845 BUG: overlay with empty input handles keep geom dtype gracefully (#3745)
• 866a7f0 BUG: ensure that points from random sampling are not sorted (#3773)
• 76b16ca DOC: update Code of Conduct reporting form link (#3794)
• 3a04a5c switch to NumFOCUS Code of Conduct (#3671)
• 6fedb19 BLD: setuptools 77+ required for PEP 639 support (#3746)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions