Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 2, 2025

Bumps the dependencies group with 6 updates in the / directory:

Package From To
levenshtein 0.27.1 0.27.3
cohesion-tools 0.7.5 0.7.6
python-dotenv 1.1.1 1.2.1
wandb 0.22.2 0.22.3
numpy 2.0.2 2.2.6
regex 2025.9.18 2025.10.23

Updates levenshtein from 0.27.1 to 0.27.3

Release notes

Sourced from levenshtein's releases.

Release 0.27.3

Fixed

  • add missing pypy and freethreaded linux wheels

Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

Release 0.27.2

Changed

  • fix build with scikit-build-core v0.11
  • upgrade to Cython==3.1.6
  • upgrade to rapidfuzz-cpp==3.3.3

Added

  • add support for free threaded Python
  • add python 3.14 wheels

Removed

  • drop support for Python 3.9
  • drop 32 bit linux wheels
Changelog

Sourced from levenshtein's changelog.

v0.27.3

Fixed

  • add missing pypy and freethreaded linux wheels

Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

v0.27.2

Changed

  • fix build with scikit-build-core v0.11
  • upgrade to Cython==3.1.6
  • upgrade to rapidfuzz-cpp==3.3.3

Added

  • add support for free threaded Python
  • add python 3.14 wheels

Removed

  • drop support for Python 3.9
  • drop 32 bit linux wheels
Commits

Updates cohesion-tools from 0.7.5 to 0.7.6

Commits
  • 00370a5 bump version to 0.7.6
  • f9a7605 tweak
  • f1aa89c fix lint workflow
  • 1757c75 Merge remote-tracking branch 'origin/main'
  • a698603 update pre-commit hooks
  • 0eb3a27 support Python 3.14
  • 4dc5e1c Merge pull request #55 from nobu-g/pre-commit-ci-update-config
  • 0fe83f0 [pre-commit.ci] pre-commit autoupdate
  • e60c88f Merge pull request #54 from nobu-g/dependabot/github_actions/main/actions/set...
  • 466012f Bump actions/setup-python from 5 to 6
  • Additional commits viewable in compare view

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits
  • eaf2a91 Do not remove .coverage file
  • 8716196 Bump version: 1.2.0 → 1.2.1
  • b87807f Update changelog
  • 3af77d3 Support reading .env from FIFOs (Unix) (#586)
  • 467ee22 Fix test failures after moving config to pyproject.toml
  • 76999e7 Move more config pyproject.toml
  • 222ce2c Update to use trusted publisher on pypi
  • 8ed4f79 Update docs requirements
  • 5bf8822 Bump version: 1.1.1 → 1.2.0
  • 1fe11cc upadate changelog
  • Additional commits viewable in compare view

Updates wandb from 0.22.2 to 0.22.3

Release notes

Sourced from wandb's releases.

v0.22.3

What's Changed

Added

  • Settings console_chunk_max_seconds and console_chunk_max_bytes for size- and time-based multipart console logs file chunking (@​dmitryduev in wandb/wandb#10162)
  • Registry API query methods (Api.registries(), Registry.{collections,versions}(), Api.registries().{collections,versions}()) now accept a per_page keyword arg to override the default batch size for paginated results (@​tonyyli-wandb in wandb/wandb#10713).

Changed

Fixed

  • run.config now properly returns a dict when calling artifact.logged_by() in v0.22.1 (@​thanos-wandb in #10682)
  • wandb.Api(api_key=...) now prioritizes the explicitly provided API key over thread-local cached credentials (@​pingleiwandb in wandb/wandb#10657)
  • Fixed a rare deadlock in console_capture.py (@​timoffex in wandb/wandb#10683)
    • If you dump thread tracebacks during the deadlock and see the wandb-AsyncioManager-main thread stuck on a line in console_capture.py: this is now fixed.
  • Fixed an issue where TensorBoard sync would sometimes stop working if the tfevents files were being written live (@​timoffex in wandb/wandb#10625)
  • Artifact.manifest delays downloading and generating the download URL for the artifact manifest until it's first used. If the manifest has not been locally modified, Artifact.size and Artifact.digest can return without waiting to fetch the full manifest (@​tonyyli-wandb in wandb/wandb#10680)
  • Fixed uploading GCS folder references via artifact.add_reference (@​amusipatla-wandb in wandb/wandb#10679)
  • The SDK now correctly infers notebooks paths in Jupyter sessions, using th server's root directory, so code saving works in subdirectories (e.g. code/nested/.ipynb) (@​jacobromero in wandb/wandb#10709)
Changelog

Sourced from wandb's changelog.

[0.22.3] - 2025-10-28

Added

  • Settings console_chunk_max_seconds and console_chunk_max_bytes for size- and time-based multipart console logs file chunking (@​dmitryduev in wandb/wandb#10162)
  • Registry API query methods (Api.registries(), Registry.{collections,versions}(), Api.registries().{collections,versions}()) now accept a per_page keyword arg to override the default batch size for paginated results (@​tonyyli-wandb in wandb/wandb#10713).

Changed

Fixed

  • run.config now properly returns a dict when calling artifact.logged_by() in v0.22.1 (@​thanos-wandb in #10682)
  • wandb.Api(api_key=...) now prioritizes the explicitly provided API key over thread-local cached credentials (@​pingleiwandb in wandb/wandb#10657)
  • Fixed a rare deadlock in console_capture.py (@​timoffex in wandb/wandb#10683)
    • If you dump thread tracebacks during the deadlock and see the wandb-AsyncioManager-main thread stuck on a line in console_capture.py: this is now fixed.
  • Fixed an issue where TensorBoard sync would sometimes stop working if the tfevents files were being written live (@​timoffex in wandb/wandb#10625)
  • Artifact.manifest delays downloading and generating the download URL for the artifact manifest until it's first used. If the manifest has not been locally modified, Artifact.size and Artifact.digest can return without waiting to fetch the full manifest (@​tonyyli-wandb in wandb/wandb#10680)
  • Fixed uploading GCS folder references via artifact.add_reference (@​amusipatla-wandb in wandb/wandb#10679)
  • The SDK now correctly infers notebooks paths in Jupyter sessions, using th server's root directory, so code saving works in subdirectories (e.g. code/nested/.ipynb) (@​jacobromero in wandb/wandb#10709)
Commits
  • 257361f Bump version and update CHANGELOG for release 0.22.3
  • 90caa41 refactor(artifacts): decouple transport-free ArtifactCollection attributes in...
  • a7598bd fix: wandb_settings not properly inferring program path for jupyter notebooks...
  • 116fec6 chore: bump go version to 1.25.3 (#10781)
  • ebf5bb9 fix: allow merging nil runsummary.Updates (into non-nil value) (#10777)
  • 100f04a fix(artifacts): fix uploading gcs path ending in forward slash (#10679)
  • 4cf387f fix: race in FakeStopwatch testing utility (#10768)
  • 39c5c6e refactor(artifacts): make ArtifactWithoutAliases fragment unnecessary (#10616)
  • 15ba4c7 refactor(artifacts): decouple transport-free Registry attributes into Registr...
  • 320c611 fix: add nowait param to publish_output() for asyncio safety (#10728)
  • Additional commits viewable in compare view

Updates numpy from 2.0.2 to 2.2.6

Release notes

Sourced from numpy's releases.

v2.2.6 (May 17, 2025)

NumPy 2.2.6 Release Notes

NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance.

This release supports Python versions 3.10-3.13.

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Ilhan Polat
  • Joren Hammudoglu
  • Marco Gorelli +
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Sayed Adel

Pull requests merged

A total of 11 pull requests were merged for this release.

  • #28778: MAINT: Prepare 2.2.x for further development
  • #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments...
  • #28852: BUG: fix heap buffer overflow in np.strings.find
  • #28853: TYP: fix NDArray[floating] + float return type
  • #28864: BUG: fix stringdtype singleton thread safety
  • #28865: MAINT: use OpenBLAS 0.3.29
  • #28889: MAINT: from_dlpack thread safety fixes
  • #28913: TYP: Fix non-existent CanIndex annotation in ndarray.setfield
  • #28915: MAINT: Avoid dereferencing/strict aliasing warnings
  • #28916: BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate.
  • #28966: TYP: reject complex scalar types in ndarray.__ifloordiv__

Checksums

MD5

259343f056061f6eadb2f4b8999d06d4  numpy-2.2.6-cp310-cp310-macosx_10_9_x86_64.whl
16fa85488e149489ce7ee044d7b0d307  numpy-2.2.6-cp310-cp310-macosx_11_0_arm64.whl
f01b7aea9d2b76b1eeb49766e615d689  numpy-2.2.6-cp310-cp310-macosx_14_0_arm64.whl
f2ddc2b22517f6e31caa1372b12c2499  numpy-2.2.6-cp310-cp310-macosx_14_0_x86_64.whl
52190e22869884f0870eb3df7a283ca9  numpy-2.2.6-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
8f382b9ca6770db600edd5ea2447a925  numpy-2.2.6-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
e604aae2ef6e01fb92ecc39aca0424d9  numpy-2.2.6-cp310-cp310-musllinux_1_2_aarch64.whl

... (truncated)

Commits
  • 2b686f6 Merge pull request #28980 from charris/prepare-2.2.6
  • ed41828 REL: Prepare for the NumPy 2.2.6 release [wheel build]
  • 83e4e7f Merge pull request #28966 from charris/backport-28958
  • 248f0cb TYP: add rejection-tests for complex ndarray floordiv
  • 5bad9da TYP: reject complex scalar types in ndarray.__ifloordiv__
  • 6c42775 Merge pull request #28915 from charris/backport-28892
  • 4277e7c Merge pull request #28916 from charris/backport-28898
  • bd1c863 BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate. (#28898)
  • 87d1d8a MAINT: Avoid dereferencing/strict aliasing warnings during complex casts in `...
  • 9e50659 Merge pull request #28913 from charris/backport-28908
  • Additional commits viewable in compare view

Updates regex from 2025.9.18 to 2025.10.23

Changelog

Sourced from regex's changelog.

Version: 2025.10.23

'setup.py' was missing from the source distribution.

Version: 2025.10.22

Fixed test in main.yml.

Version: 2025.10.21

Moved tests into subfolder.

Version: 2025.10.20

Re-organised files.

Updated to Unicode 17.0.0.

Version: 2025.9.20

Enable free-threading support in cibuildwheel in another place.

Version: 2025.9.19

Enable free-threading support in cibuildwheel.

Version: 2025.9.18

Git issue 565: Support the free-threaded build of CPython 3.13

Version: 2025.9.1

Git PR 585: Fix AttributeError: 'AnyAll' object has no attribute '_key'

Version: 2025.8.29

Git issue 584: AttributeError: 'AnyAll' object has no attribute 'positive'

Version: 2025.7.34

Git issue 575: Issues with ASCII/Unicode modifiers

Version: 2025.7.33

Updated main.yml and pyproject.toml.

Version: 2025.7.32

Git issue 580: Regression in v2025.7.31: \P{L} no longer matches in simple patterns

... (truncated)

Commits
  • 26454da 'setup.py' was missing from the source distribution.
  • f2d31b0 Fixed test in main.yml.
  • 2fd4dc0 Moved tests into subfolder.
  • 54fa96c Re-organised files.
  • 4359a6a Enable free-threading support in cibuildwheel in another place.
  • 2fe1139 Enable free-threading support in cibuildwheel.
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [levenshtein](https://github.com/rapidfuzz/Levenshtein) | `0.27.1` | `0.27.3` |
| [cohesion-tools](https://github.com/nobu-g/cohesion-tools) | `0.7.5` | `0.7.6` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` |
| [wandb](https://github.com/wandb/wandb) | `0.22.2` | `0.22.3` |
| [numpy](https://github.com/numpy/numpy) | `2.0.2` | `2.2.6` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2025.9.18` | `2025.10.23` |



Updates `levenshtein` from 0.27.1 to 0.27.3
- [Release notes](https://github.com/rapidfuzz/Levenshtein/releases)
- [Changelog](https://github.com/rapidfuzz/Levenshtein/blob/main/HISTORY.md)
- [Commits](rapidfuzz/Levenshtein@v0.27.1...v0.27.3)

Updates `cohesion-tools` from 0.7.5 to 0.7.6
- [Release notes](https://github.com/nobu-g/cohesion-tools/releases)
- [Commits](nobu-g/cohesion-tools@v0.7.5...v0.7.6)

Updates `python-dotenv` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1)

Updates `wandb` from 0.22.2 to 0.22.3
- [Release notes](https://github.com/wandb/wandb/releases)
- [Changelog](https://github.com/wandb/wandb/blob/main/CHANGELOG.md)
- [Commits](wandb/wandb@v0.22.2...v0.22.3)

Updates `numpy` from 2.0.2 to 2.2.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.0.2...v2.2.6)

Updates `regex` from 2025.9.18 to 2025.10.23
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2025.9.18...2025.10.23)

---
updated-dependencies:
- dependency-name: levenshtein
  dependency-version: 0.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cohesion-tools
  dependency-version: 0.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: python-dotenv
  dependency-version: 1.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wandb
  dependency-version: 0.22.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: numpy
  dependency-version: 2.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: regex
  dependency-version: 2025.10.23
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 2, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 1, 2025
@dependabot dependabot bot deleted the dependabot/pip/dev/dependencies-440d7cc82e branch December 1, 2025 06:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant