Skip to content

deps(deps): bump the all-deps group with 10 updates - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-deps-2b6e3fbfab
Open

deps(deps): bump the all-deps group with 10 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-deps-2b6e3fbfab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-deps group with 10 updates:

Package From To
awscli 1.46.0 1.46.1
python-dotenv 1.2.2 1.2.3
fimeval 0.1.65 0.1.67
numba 0.66.0 0.62.1
notebook 7.6.1 7.6.2
ruff 0.16.2 0.16.5
bottleneck 1.6.0 ``
nodejs-bin 18.4.0a4 ``
scikit-learn 1.7.2 ``
utils 1.0.2 ``

Updates awscli from 1.46.0 to 1.46.1

Commits
  • 1fc0e4b Merge branch 'release-1.46.1'
  • 1d5f6e2 Bumping version to 1.46.1
  • c46577f Update documentation for maintenance mode (#10608)
  • 5ad8dc6 Add warning for outdated SessionManagerPlugin version (#10520)
  • 5a89cef Bump actions/stale from 10.4.0 to 11.0.0 (#10540)
  • 1b90775 Write npm config file directly to align with other package manager login flow...
  • b8ba3bf Merge branch 'release-1.46.0' into develop
  • See full diff in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates fimeval from 0.1.65 to 0.1.67

Commits

Updates numba from 0.66.0 to 0.62.1

Commits
  • e6a4027 Merge pull request #10247 from esc/release0.62
  • e90ec88 fix wording as suggested by code-review
  • cae3dfd increment PR id for release notes PR
  • 18f71df suggestions from code-review and improved title underlines
  • c4def21 update date and version support table
  • 0483631 adding release notes PR to release notes
  • dc73f9e release notes for 0.62.1
  • 336369e Merge pull request #10244 from swap357/fix_linux_wheel_build_linkages
  • f546c0f Merge pull request #10241 from swap357/gha/fix_linux_wheel_build_linkages
  • b8cd1e2 Merge pull request #10232 from esc/release0.62
  • Additional commits viewable in compare view

Updates notebook from 7.6.1 to 7.6.2

Release notes

Sourced from notebook's releases.

v7.6.2

7.6.2

(Full Changelog)

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​brichet (activity) | @​jtpio (activity)

Changelog

Sourced from notebook's changelog.

7.6.2

(Full Changelog)

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​brichet (activity) | @​jtpio (activity)

Commits

Updates ruff from 0.16.2 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates bottleneck from 1.6.0 to
Updates nodejs-bin from 18.4.0a4 to

Commits

Updates scikit-learn from 1.7.2 to
Updates utils from 1.0.2 to

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-deps group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [awscli](https://github.com/aws/aws-cli) | `1.46.0` | `1.46.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [fimeval](https://github.com/sdmlua/FIMEVAL) | `0.1.65` | `0.1.67` |
| [numba](https://github.com/numba/numba) | `0.66.0` | `0.62.1` |
| [notebook](https://github.com/jupyter/notebook) | `7.6.1` | `7.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.5` |
| [bottleneck](https://github.com/pydata/bottleneck) | `1.6.0` | `` |
| [nodejs-bin](https://github.com/samwillis/nodejs-pypi) | `18.4.0a4` | `` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.7.2` | `` |
| [utils](https://github.com/haaksmash/pyutils) | `1.0.2` | `` |


Updates `awscli` from 1.46.0 to 1.46.1
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](aws/aws-cli@1.46.0...1.46.1)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `fimeval` from 0.1.65 to 0.1.67
- [Release notes](https://github.com/sdmlua/FIMEVAL/releases)
- [Commits](https://github.com/sdmlua/FIMEVAL/commits)

Updates `numba` from 0.66.0 to 0.62.1
- [Release notes](https://github.com/numba/numba/releases)
- [Commits](numba/numba@0.66.0...0.62.1)

Updates `notebook` from 7.6.1 to 7.6.2
- [Release notes](https://github.com/jupyter/notebook/releases)
- [Changelog](https://github.com/jupyter/notebook/blob/@jupyter-notebook/tree@7.6.2/CHANGELOG.md)
- [Commits](https://github.com/jupyter/notebook/compare/@jupyter-notebook/tree@7.6.1...@jupyter-notebook/tree@7.6.2)

Updates `ruff` from 0.16.2 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.5)

Updates `bottleneck` from 1.6.0 to 
- [Release notes](https://github.com/pydata/bottleneck/releases)
- [Changelog](https://github.com/pydata/bottleneck/blob/master/RELEASE.rst)
- [Commits](https://github.com/pydata/bottleneck/commits)

Updates `nodejs-bin` from 18.4.0a4 to 
- [Commits](https://github.com/samwillis/nodejs-pypi/commits)

Updates `scikit-learn` from 1.7.2 to 
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](https://github.com/scikit-learn/scikit-learn/commits)

Updates `utils` from 1.0.2 to 
- [Commits](https://github.com/haaksmash/pyutils/commits)

---
updated-dependencies:
- dependency-name: awscli
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: fimeval
  dependency-version: 0.1.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: numba
  dependency-version: 0.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-deps
- dependency-name: notebook
  dependency-version: 7.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-deps
- dependency-name: bottleneck
  dependency-version:
  dependency-type: direct:production
  dependency-group: all-deps
- dependency-name: nodejs-bin
  dependency-version:
  dependency-type: direct:production
  dependency-group: all-deps
- dependency-name: scikit-learn
  dependency-version:
  dependency-type: direct:production
  dependency-group: all-deps
- dependency-name: utils
  dependency-version:
  dependency-type: direct:production
  dependency-group: all-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants