Bump the production-dependencies group across 1 directory with 6 updates

[dependabot]

Updates the requirements on nibabel, numpy, polars, scipy, styxcache and styxpodman to permit the latest version.
Updates nibabel to 5.4.2

Changelog

Sourced from nibabel's changelog.

5.4.2 (Wednesday 11 March 2026)

Bug-fix release in the 5.4.x series.

This release fixes an issue with automated deployment to PyPI.

5.4.1 (Tuesday 10 March 2026)

Bug-fix release in the 5.4.x series.

This release addresses test failures on shallow clones or when run with python -m pytest in Python 3.14+.

Bug fixes

• Adjust tests to not depend on how pytest is run, or deep clones (pr/1478) (CM)

Maintenance

• Consolidate environment management for development tasks to ensure tox and pre-commit stay in sync. (pr/1475) (CM, reviewed by Rémi Gau)
• Update pre-commit and ruff configurations (pr/1467) (Rémi Gau, reviewed by CM)

5.4.0 (Monday 2 March 2026)

New feature release in the 5.4.x series.

This release requires a minimum Python of 3.10 and NumPy 1.25, and has been tested up to Python 3.14 and NumPy 2.4.

New features

• Add mode parameter to :func:nibabel.processing.conform (pr/1396) (Clorindo Notte, reviewed by CM)

Enhancements

• Label image axes consistently in cases of extreme obliquity (pr/1450) (Leonardo Ayala, reviewed by CM)
• Use :mod:compression.zstd or backports.zstd in preference to pyzstd (pr/1444) (PM, reviewed by CM)
• Support PAR/REC files generated by Philips R11 consoles (pr/1430) (Alex Daniel, reviewed by CM)
• Add stub file for top-level nibabel module, improving support in code analyzers (pr/1436) (Jon Cluce, reviewed by CM)
• Use informative error message for missing file attribute in :class:~nibabel.streamlines.tck.TCKFile header (pr/1422)

... (truncated)

Commits

• 513f421 rel: 5.4.2
• cc4fa26 chore(ci): Use non-slim runner for package deployment
• 553a3d4 doc: Add missing changelog entries
• 5054e90 rel: 5.4.1
• 9f78e47 Merge pull request #1478 from effigies/fix/python-m-pytest
• d8653ec test: Skip removalschedule tests on shallow checkouts
• 719b5f9 fix: Ignore executable name in checking for usage output
• 84a6956 chore(ci): Add python -m pytest test
• db76723 Merge pull request #1475 from effigies/chore/consistency
• 94df062 chore: Use uv more consistently
• Additional commits viewable in compare view

Updates numpy to 2.4.4

Release notes

Sourced from numpy's releases.

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

The NumPy 2.4.4 is a patch release that fixes bugs discovered after the 2.4.3 release. It should finally close issue #30816, the OpenBLAS threading problem on ARM.

This release supports Python versions 3.11-3.14

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Charles Harris
• Daniel Haag +
• Denis Prokopenko +
• Harshith J +
• Koki Watanabe
• Marten van Kerkwijk
• Matti Picus
• Nathan Goldbaum

Pull requests merged

A total of 7 pull requests were merged for this release.

• #30978: MAINT: Prepare 2.4.x for further development
• #31049: BUG: Add test to reproduce problem described in #30816 (#30818)
• #31052: BUG: fix FNV-1a 64-bit selection by using NPY_SIZEOF_UINTP (#31035)
• #31053: BUG: avoid warning on ufunc with where=True and no output
• #31058: DOC: document caveats of ndarray.resize on 3.14 and newer
• #31079: TST: fix POWER VSX feature mapping (#30801)
• #31084: MAINT: numpy.i: Replace deprecated sprintf with snprintf...

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• be93fe2 Merge pull request #31090 from charris/prepare-2.4.4
• f5245dc REL: Prepare for the NumPy 2.4.4 release
• 02e838b Merge pull request #31084 from charris/backport-31056
• fa74b2d MAINT: numpy.i: Replace deprecated sprintf with snprintf (#31056)
• 533a6db Merge pull request #31079 from charris/backport-20801
• 9e496cb TST: fix POWER VSX feature mapping (#30801)
• 8052c4b Merge pull request #31058 from charris/backport-31021
• 7f13b5a MAINT: Skip test on PyPy.
• 4c5fdd6 MAINT: Remove unused import of tracemalloc.
• a3ca5ed Update numpy/_core/src/multiarray/shape.c
• Additional commits viewable in compare view

Updates polars to 1.40.1

Release notes

Sourced from polars's releases.

Python Polars 1.40.1

🚀 Performance improvements

• Skip validity mask processing in __array_ufunc__ when no inputs have nulls (#27358)

✨ Enhancements

• Cargo deny (#27363)
• Add maintain_order parameter to merge_sorted (#27263)

🐞 Bug fixes

• Honor having predicate in GroupBy iter (#27370)
• Use the physical dtype for NumUnorderedImplodeReducer arrow ListArray (#27375)
• Address bug in reduce_balanced for certain input length lists affecting pl.concat (#27352)
• Ensure list.sample() allows fraction > 1 when with_replacement=True (#27350)
• Ensure append() errors when upcast=False (#27346)
• Always rechunk sorts, prune sorts even in eager execution (#27356)
• Fix typing for DataFrame.__init__ and Series.__init__ so they don't require all optional dependencies to be installed (#27348)

📖 Documentation

• Split out openlineage docs into guide and configuration (#27371)
• Add explanation on the observatory sqlite db file (#27354)

🛠️ Other improvements

• Disable mypy type checking for pyarrow calls (#27377)
• Disable debug symbols in macos coverage tests (#27361)
• Cargo deny (#27363)

Thank you to all our contributors for making this release possible! @​EndPositive, @​Kevin-Patyk, @​MarcoGorelli, @​carnarez, @​dsprenkels, @​gab23r, @​jonathanchang31, @​kdn36, @​mzjp2 and @​ritchie46

Commits

• 344a0ea Python Polars 1.40.1 (#27381)
• 4856eb3 fix: Honor having predicate in GroupBy iter (#27370)
• f992305 chore(python): Disable mypy type checking for pyarrow calls (#27377)
• 17f9074 chore: Disable debug symbols in macos coverage tests (#27361)
• 44948d3 fix: Use the physical dtype for NumUnorderedImplodeReducer arrow `ListArray...
• 6bb1cf8 fix(python): Address bug in reduce_balanced for certain input length lists ...
• fb70396 docs: Split out openlineage docs into guide and configuration (#27371)
• 2436421 fix: Ensure list.sample() allows fraction > 1 when `with_replacement=True...
• 21f150f ci(rust): Cargo deny (#27363)
• dd9be47 perf: Skip validity mask processing in array_ufunc when no inputs have nu...
• Additional commits viewable in compare view

Updates scipy to 1.17.1

Release notes

Sourced from scipy's releases.

SciPy 1.17.1 Release Notes

SciPy 1.17.1 is a bug-fix release with no new features compared to 1.17.0.

Authors

• Name (commits)
• Evgeni Burovski (5)
• Lucas Colley (1)
• Christoph Gohlke (1)
• Ralf Gommers (6)
• Matt Haberland (5)
• Matthias Koeppe (1)
• Nick ODell (1)
• Ilhan Polat (10)
• Tyler Reddy (44)
• Martin Schuck (3)
• Dan Schult (3)
• stratakis (1) +
• ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (1)

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Complete issue list, PR list, and release asset hashes are available in the associated README.txt.

Commits

• 527eb7f REL: 1.17.1 release commit [wheel build]
• f11663b Merge pull request #24584 from tylerjereddy/treddy_prep_1.17.1
• 2c49e68 DOC: PR 24584 revisions
• 400fa15 safely convert index dtypes to intc for csgraph and superLU
• 8c70404 MAINT: PR 24584 revisions [wheel build]
• 6dda8c1 BUG: PR 24584 revisions
• 4a187e5 DOC: PR 24584 revisions
• 463ee9f ENH: linalg/inv: re-enable overwrite_a for 2D inputs (#24442)
• df746ee BUG: linalg: restore dtypes in inv, solve, det
• 246bfee MAINT:optimize: Enable multi-phase init to DIRECT
• Additional commits viewable in compare view

Updates styxcache to 0.2.2

Updates styxpodman to 0.2.0

Commits

• See full diff in compare view

[github-actions]

Tests	Skipped	Failures	Errors	Time
781	0 💤	0 ❌	0 🔥	11.701s ⏱️

[nx10]

@dependabot rebase

[nx10]

@dependabot rebase

[dependabot]

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml