Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the actions group with 6 updates #84

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 1, 2024

Bumps the actions group with 6 updates:

Package From To
altair 5.2.0 5.3.0
ipywidgets 8.1.1 8.1.2
jupyterlab-language-pack-zh-cn 4.0.post6 4.1.post2
matplotlib 3.8.2 3.8.3
pandas 2.2.0 2.2.1
ruff 0.2.0 0.3.5

Updates altair from 5.2.0 to 5.3.0

Release notes

Sourced from altair's releases.

Version 5.3.0

What's Changed

Enhancements

  • Add "jupyter" renderer which uses JupyterChart for rendering (#3283). See Displaying Altair Charts for more information.
  • Add integration of VegaFusion and JupyterChart to support data transformations in the Python kernel for interactive charts (#3281). See VegaFusion Data Transformer for more information.
  • Add embed_options argument to JupyterChart to allow customization of Vega Embed options (#3304)
  • Add offline support for JupyterChart and the new "jupyter" renderer. See JupyterChart - Offline Usage for more information.
  • Add "browser" renderer to support displaying Altair charts in an external web browser. See Browser Renderer for more information (#3379).
  • Add a new section to documentation on dashboards which have support for Altair (#3299)
  • Support restrictive FIPS-compliant environment (#3291)
  • Support opening charts in the Vega editor with chart.open_editor() (#3358)
  • Simplify type-hints to improve the readability of the function signature and docstring (#3307)
  • Support installation of all optional dependencies via python -m pip install altair[all] and conda install altair-all -c conda-forge (#3354)
  • Add privacy friendly web-analytics for the documentation (#3350)
  • Additional gallery examples and documentation clarifications (#3233, #3266, #3276, #3282, #3298, #3299, #3323, #3334, #3324, #3340, #3350, #3353, #3357, #3362, #3363)

Bug Fixes

  • Fix error when embed_options are None (#3376)
  • Fix type hints for libraries such as Polars where Altair uses the dataframe interchange protocol (#3297)
  • Fix anywidget deprecation warning (#3364)
  • Fix handling of Date32 columns in arrow tables and Polars DataFrames (#3377)

Backward-Incompatible Changes

  • Changed hash function from md5 to a truncated sha256 non-cryptograhic hash (#3291)
  • Updated chart.show() method to invoke the active renderer rather than depend on altair_saver (Which was never updated for use with Altair 5) (#3379).

Release notes by pull requests

... (truncated)

Commits
  • 4a2e7f1 chore: bump version to 5.3.0
  • 86c5411 docs: Fix numpy tooltip images example
  • 439c253 chore: Update releasing instructions
  • 51aa57f chore: Add templates for PRs and automated release notes (#3381)
  • d5b0736 feature: Add browser renderer to open charts in external browser and update c...
  • d09b7de docs: Remove release notes and fully capture them in GitHub Releases (#3380)
  • 2786dd3 Catch RuntimeError along with ImportError in pyarrow_available (#3387)
  • e20cdef perf: Improve performance of Chart.from_dict (#3383)
  • c7c4149 fix: Handle Date32 columns in Arrow tables and Polars DataFrames (#3377)
  • b1b9dba fix: Don't error when embed_options are None (#3376)
  • Additional commits viewable in compare view

Updates ipywidgets from 8.1.1 to 8.1.2

Release notes

Sourced from ipywidgets's releases.

Release 8.1.2

What's Changed

Full Changelog: jupyter-widgets/ipywidgets@8.1.1...8.1.2

Commits

Updates jupyterlab-language-pack-zh-cn from 4.0.post6 to 4.1.post2

Commits

Updates matplotlib from 3.8.2 to 3.8.3

Release notes

Sourced from matplotlib's releases.

REL: v3.8.3

This is the third micro release of the 3.8 series.

Highlights of the 3.8.3 release include:

  • Improvements to the MacOS backend
    • Fix hanging on plt.pause
    • Fix warnings about "Secure coding is not enabled for restorable state"
  • Fix crash at exit for PGF backend
Commits
  • 9e18a34 REL: v3.8.3
  • bd96955 Release prep v3.8.3
  • 3ebebc7 Fix merge conflicts from v3.8.2-doc
  • 8fff5b1 Merge pull request #27790 from meeseeksmachine/auto-backport-of-pr-27785-on-v...
  • c21a93f Merge pull request #27789 from meeseeksmachine/auto-backport-of-pr-27756-on-v...
  • ea407e1 Backport PR #27785: FIX: be careful about communicating with subprocess
  • 2efbf7e Backport PR #27756: Add protections against infinite loop in bezier calculations
  • 95b5eb4 Merge pull request #27779 from ksunden/ci_backports
  • 8cd2c91 Merge pull request #27778 from meeseeksmachine/auto-backport-of-pr-27773-on-v...
  • bef02fa Bump the actions group with 2 updates
  • Additional commits viewable in compare view

Updates pandas from 2.2.0 to 2.2.1

Release notes

Sourced from pandas's releases.

Pandas 2.2.1

We are pleased to announce the release of pandas 2.2.1. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.1 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

Updates ruff from 0.2.0 to 0.3.5

Release notes

Sourced from ruff's releases.

v0.3.5

Changes

Preview features

  • [pylint] Implement modified-iterating-set (E4703) (#10473)
  • [refurb] Implement for-loop-set-mutations (FURB142) (#10583)
  • [refurb] Implement unnecessary-from-float (FURB164) (#10647)
  • [refurb] Implement verbose-decimal-constructor (FURB157) (#10533)

Rule changes

  • [flake8-comprehensions] Handled special case for C401 which also matches C416 (#10596)
  • [flake8-pyi] Mark unaliased-collections-abc-set-import fix as "safe" for more cases in stub files (PYI025) (#10547)
  • [numpy] Add row_stack to NumPy 2.0 migration rule (#10646)
  • [pycodestyle] Allow cell magics before an import (E402) (#10545)
  • [pycodestyle] Avoid blank line rules for the first logical line in cell (#10291)

Configuration

  • Respected nested namespace packages (#10541)
  • [flake8-boolean-trap] Add setting for user defined allowed boolean trap (#10531)

Bug fixes

  • Correctly handle references in __all__ definitions when renaming symbols in autofixes (#10527)
  • Track ranges of names inside __all__ definitions (#10525)
  • [flake8-bugbear] Avoid false positive for usage after continue (B031) (#10539)
  • [flake8-copyright] Accept commas in default copyright pattern (#9498)
  • [flake8-datetimez] Allow f-strings with %z for DTZ007 (#10651)
  • [flake8-pytest-style] Fix PT014 autofix for last item in list (#10532)
  • [flake8-quotes] Ignore Q000, Q001 when string is inside forward ref (#10585)
  • [isort] Always place non-relative imports after relative imports (#10669)
  • [isort] Respect Unicode characters in import sorting (#10529)
  • [pyflakes] Fix F821 false negatives when from __future__ import annotations is active (attempt 2) (#10524)
  • [pyflakes] Make unnecessary-lambda an always-unsafe fix (#10668)
  • [pylint] Fixed false-positive on the rule PLW1641 (eq-without-hash) (#10566)
  • [ruff] Fix panic in unused # noqa removal with multi-byte space (RUF100) (#10682)

Documentation

  • Add PR title format to CONTRIBUTING.md (#10665)
  • Fix list markup to include blank lines required (#10591)
  • Put flake8-logging next to the other flake8 plugins in registry (#10587)
  • [flake8-bandit] Update warning message for rule S305 to address insecure block cipher mode use (#10602)
  • [flake8-bugbear] Document use of anonymous assignment in useless-expression (#10551)
  • [flake8-datetimez] Clarify error messages and docs for DTZ rules (#10621)
  • [pycodestyle] Use same before vs. after numbers for space-around-operator (#10640)
  • [ruff] Change quadratic-list-summation docs to use iadd consistently (#10666)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.3.5

Preview features

  • [pylint] Implement modified-iterating-set (E4703) (#10473)
  • [refurb] Implement for-loop-set-mutations (FURB142) (#10583)
  • [refurb] Implement unnecessary-from-float (FURB164) (#10647)
  • [refurb] Implement verbose-decimal-constructor (FURB157) (#10533)

Rule changes

  • [flake8-comprehensions] Handled special case for C401 which also matches C416 (#10596)
  • [flake8-pyi] Mark unaliased-collections-abc-set-import fix as "safe" for more cases in stub files (PYI025) (#10547)
  • [numpy] Add row_stack to NumPy 2.0 migration rule (#10646)
  • [pycodestyle] Allow cell magics before an import (E402) (#10545)
  • [pycodestyle] Avoid blank line rules for the first logical line in cell (#10291)

Configuration

  • Respected nested namespace packages (#10541)
  • [flake8-boolean-trap] Add setting for user defined allowed boolean trap (#10531)

Bug fixes

  • Correctly handle references in __all__ definitions when renaming symbols in autofixes (#10527)
  • Track ranges of names inside __all__ definitions (#10525)
  • [flake8-bugbear] Avoid false positive for usage after continue (B031) (#10539)
  • [flake8-copyright] Accept commas in default copyright pattern (#9498)
  • [flake8-datetimez] Allow f-strings with %z for DTZ007 (#10651)
  • [flake8-pytest-style] Fix PT014 autofix for last item in list (#10532)
  • [flake8-quotes] Ignore Q000, Q001 when string is inside forward ref (#10585)
  • [isort] Always place non-relative imports after relative imports (#10669)
  • [isort] Respect Unicode characters in import sorting (#10529)
  • [pyflakes] Fix F821 false negatives when from __future__ import annotations is active (attempt 2) (#10524)
  • [pyflakes] Make unnecessary-lambda an always-unsafe fix (#10668)
  • [pylint] Fixed false-positive on the rule PLW1641 (eq-without-hash) (#10566)
  • [ruff] Fix panic in unused # noqa removal with multi-byte space (RUF100) (#10682)

Documentation

  • Add PR title format to CONTRIBUTING.md (#10665)
  • Fix list markup to include blank lines required (#10591)
  • Put flake8-logging next to the other flake8 plugins in registry (#10587)
  • [flake8-bandit] Update warning message for rule S305 to address insecure block cipher mode use (#10602)
  • [flake8-bugbear] Document use of anonymous assignment in useless-expression (#10551)
  • [flake8-datetimez] Clarify error messages and docs for DTZ rules (#10621)
  • [pycodestyle] Use same before vs. after numbers for space-around-operator (#10640)
  • [ruff] Change quadratic-list-summation docs to use iadd consistently (#10666)

0.3.4

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [altair](https://github.com/altair-viz/altair) | `5.2.0` | `5.3.0` |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.1` | `8.1.2` |
| [jupyterlab-language-pack-zh-cn](https://github.com/jupyterlab/language-packs) | `4.0.post6` | `4.1.post2` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.8.2` | `3.8.3` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.2.0` | `2.2.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.2.0` | `0.3.5` |


Updates `altair` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/altair-viz/altair/releases)
- [Commits](vega/altair@v5.2.0...v5.3.0)

Updates `ipywidgets` from 8.1.1 to 8.1.2
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.1...8.1.2)

Updates `jupyterlab-language-pack-zh-cn` from 4.0.post6 to 4.1.post2
- [Release notes](https://github.com/jupyterlab/language-packs/releases)
- [Changelog](https://github.com/jupyterlab/language-packs/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/language-packs/compare/ar-SA@v4.0.post6...ar-SA@v4.1.post2)

Updates `matplotlib` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.8.2...v3.8.3)

Updates `pandas` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.0...v2.2.1)

Updates `ruff` from 0.2.0 to 0.3.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@v0.2.0...v0.3.5)

---
updated-dependencies:
- dependency-name: altair
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: ipywidgets
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: jupyterlab-language-pack-zh-cn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: matplotlib
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: pandas
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2024
Copy link
Author

dependabot bot commented on behalf of github May 1, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/actions-ae30c85810 branch May 1, 2024 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file maintenance python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants