Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 7, 2025

Bumps the dependencies group with 8 updates in the / directory:

Package From To
numpy 2.2.0 2.2.1
ansys-tools-path 0.7.0 0.7.1
ansys-dpf-composites 0.6.1 0.6.2
matplotlib 3.9.3 3.10.0
scipy 1.14.1 1.15.0
mypy 1.13.0 1.14.1
ansys-sphinx-theme 1.2.3 1.2.4
hypothesis 6.122.3 6.123.7

Updates numpy from 2.2.0 to 2.2.1

Release notes

Sourced from numpy's releases.

2.2.1 (DEC 21, 2024)

NumPy 2.2.1 Release Notes

NumPy 2.2.1 is a patch release following 2.2.0. It fixes bugs found after the 2.2.0 release and has several maintenance pins to work around upstream changes.

There was some breakage in downstream projects following the 2.2.0 release due to updates to NumPy typing. Because of problems due to MyPy defects, we recommend using basedpyright for type checking, it can be installed from PyPI. The Pylance extension for Visual Studio Code is also based on Pyright. Problems that persist when using basedpyright should be reported as issues on the NumPy github site.

This release supports Python 3.10-3.13.

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Joren Hammudoglu
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Simon Altrogge
  • Thomas A Caswell
  • Warren Weckesser
  • Yang Wang +

Pull requests merged

A total of 12 pull requests were merged for this release.

  • #27935: MAINT: Prepare 2.2.x for further development
  • #27950: TEST: cleanups
  • #27958: BUG: fix use-after-free error in npy_hashtable.cpp (#27955)
  • #27959: BLD: add missing include
  • #27982: BUG:fix compile error libatomic link test to meson.build
  • #27990: TYP: Fix falsely rejected value types in ndarray.__setitem__
  • #27991: MAINT: Don't wrap #include <Python.h> with extern "C"
  • #27993: BUG: Fix segfault in stringdtype lexsort
  • #28006: MAINT: random: Tweak module code in mtrand.pyx to fix a Cython...
  • #28007: BUG: Cython API was missing NPY_UINTP.
  • #28021: CI: pin scipy-doctest to 1.5.1
  • #28044: TYP: allow None in operand sequence of nditer

Checksums

... (truncated)

Commits
  • 7469245 Merge pull request #28047 from charris/prepare-2.2.1
  • acb051e REL: Prepare for the NumPy 2.2.1 release [wheel build]
  • 28a091a Merge pull request #28044 from charris/backport-28039
  • 723605b TST: Add test for allowing None in operand sequence passed to nditer
  • 554739e TYP: allow None in operand sequence of nditer
  • 31bc4c8 Merge pull request #28021 from charris/backport-28020
  • 32f52a3 CI: pin scipy-doctest to 1.5.1 (#28020)
  • 6219aeb Merge pull request #28007 from charris/backport-28005
  • eb7071c Merge pull request #28006 from charris/backport-28003
  • 4f82c32 BUG: Cython API was missing NPY_UINTP.
  • Additional commits viewable in compare view

Updates ansys-tools-path from 0.7.0 to 0.7.1

Changelog

Sourced from ansys-tools-path's changelog.

v0.7.1 - 20 December 2024

What's Changed

Update docs with autoapi #252 Update error handling for path #261

Commits
  • cecf74b bump version 0.7.1
  • 784c141 Merge branch 'main' into release/0.7
  • 0b34d07 FIX: Update error handling for path (#261)
  • fc2741f build(deps): bump pyfakefs from 5.7.2 to 5.7.3 (#260)
  • e66e30c build(deps): bump ansys-sphinx-theme[autoapi] from 1.2.2 to 1.2.3 (#259)
  • 08238a2 build(deps): bump pytest from 8.3.3 to 8.3.4 (#254)
  • 7a183c1 build(deps): bump pyfakefs from 5.7.1 to 5.7.2 (#255)
  • 8111dcf build(deps): bump twine from 5.1.1 to 6.0.1 (#256)
  • fe0125d [pre-commit.ci] pre-commit autoupdate (#257)
  • 66fe187 FEAT: Updates docs with autoapi (#252)
  • Additional commits viewable in compare view

Updates ansys-dpf-composites from 0.6.1 to 0.6.2

Commits

Updates matplotlib from 3.9.3 to 3.10.0

Release notes

Sourced from matplotlib's releases.

REL: v3.10.0

Highlights of this release include:

- Preliminary support for free-threaded CPython 3.13
- New more-accessible color cycle
- Dark-mode diverging colormaps
- Exception handling control
- InsetIndicator artist
- FillBetweenPolyCollection
- Fill between 3D lines
- Data in 3D plots can now be dynamically clipped to the axes view limits
- Rotating 3d plots with the mouse
- Increased Figure limits with Agg renderer
- Subfigures no longer provisional
- Subfigures are now added in row-major order

Matplotlib v3.10.0rc1

This is the first release candidate for Matplotlib 3.10.0

REL: 3.9.4

This is the fourth bugfix release of the 3.9.x series.

This release contains two bug-fixes:

  • Fix toolbar icons in GTK backend
  • Fix Poly3DCollection initialization with list of lists
Commits
  • 8d64f03 REL: v3.10.0 release
  • d9dfee8 [doc] Fix dead links
  • 87a603f Update release notes for 3.10.0
  • cdecf97 Update github stats for 3.10
  • b8d19bd Merge pull request #29306 from meeseeksmachine/auto-backport-of-pr-29242-on-v...
  • a42d0ed Backport PR #29242: DOC: Add kwdoc list to scatter() docstring
  • 1900640 Merge pull request #29299 from QuLogic/merge-v39x
  • 815389c Merge branch 'v3.9.x' into v3.10.x
  • 73873c0 DOC: Create release notes for 3.9.4
  • 9d17a2b DOC: Add Zenodo DOI for 3.9.4
  • Additional commits viewable in compare view

Updates scipy from 1.14.1 to 1.15.0

Release notes

Sourced from scipy's releases.

SciPy 1.15.0 Release Notes

SciPy 1.15.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.15.x branch, and on adding new features on the main branch.

This release requires Python 3.10-3.13 and NumPy 1.23.5 or greater.

Highlights of this release

  • Sparse arrays are now fully functional for 1-D and 2-D arrays. We recommend that all new code use sparse arrays instead of sparse matrices and that developers start to migrate their existing code from sparse matrix to sparse array: migration_to_sparray. Both sparse.linalg and sparse.csgraph work with either sparse matrix or sparse array and work internally with sparse array.

  • Sparse arrays now provide basic support for n-D arrays in the COO format including add, subtract, reshape, transpose, matmul, dot, tensordot and others. More functionality is coming in future releases.

  • Preliminary support for free-threaded Python 3.13.

  • New probability distribution features in scipy.stats can be used to improve the speed and accuracy of existing continuous distributions and perform new probability calculations.

  • Several new features support vectorized calculations with Python Array API Standard compatible input (see "Array API Standard Support" below):

    • scipy.differentiate is a new top-level submodule for accurate estimation of derivatives of black box functions.
    • scipy.optimize.elementwise contains new functions for root-finding and minimization of univariate functions.
    • scipy.integrate offers new functions cubature, tanhsinh, and nsum for multivariate integration, univariate integration, and univariate series summation, respectively.
  • scipy.interpolate.AAA adds the AAA algorithm for barycentric rational approximation of real or complex functions.

  • scipy.special adds new functions offering improved Legendre function implementations with a more consistent interface.

... (truncated)

Commits
  • 6e246d0 REL: 1.15.0 "final" rel commit [wheel build]
  • ed7c850 Merge pull request #22233 from tylerjereddy/treddy_backports_1.15.0_final
  • 2e2f2cd MAINT: PR 22233 wheel build [wheel build]
  • f05c622 DOC: Update 1.15.0 relnotes
  • 7348d92 Update scipy/differentiate/_differentiate.py
  • 56b1f7e DOC: differentiate.jacobian: correct/improve documentation about callable int...
  • 30077e7 DEP: linalg.solve_toeplitz/matmul_toeplitz: warn on n-D c, r (#22193)
  • 256c1a2 Merge pull request #22181 from tylerjereddy/treddy_prep_scipy_1.15.0rc3
  • f046276 REL: set 1.15.0rc3 unreleased
  • a3d40a8 REL: 1.15.0rc2 rel commit [wheel build]
  • Additional commits viewable in compare view

Updates mypy from 1.13.0 to 1.14.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Performance improvements

TODO

Drop Support for Python 3.8

Mypy no longer supports running with Python 3.8, which has reached end-of-life. When running mypy with Python 3.9+, it is still possible to type check code that needs to support Python 3.8 with the --python-version 3.8 argument. Support for this will be dropped in the first half of 2025!

Contributed by Marc Mueller (PR 17492).

Mypyc accelerated mypy wheels for aarch64

Mypy can compile itself to C extension modules using mypyc. This makes mypy 3-5x faster than if mypy is interpreted with pure Python. We now build and upload mypyc accelerated mypy wheels for manylinux_aarch64 to PyPI, making it easy for users on such platforms to realise this speedup.

Contributed by Christian Bundy (PR mypy_mypyc-wheels#76)

--strict-bytes

By default, mypy treats an annotation of bytes as permitting bytearray and memoryview. PEP 688 specified the removal of this special case. Use this flag to disable this behavior. --strict-bytes will be enabled by default in mypy 2.0.

Contributed by Ali Hamdan (PR 18137) and Shantanu Jain (PR 13952).

Improvements to partial type handling in loops

This change results in mypy better modelling control flow within loops and hence detecting several issues it previously did not detect. In some cases, this change may require use of an additional explicit annotation of a variable.

Contributed by Christoph Tyralla (PR 18180).

(Speaking of partial types, another reminder that mypy plans on enabling --local-partial-types by default in mypy 2.0).

Better line numbers for decorators and slice expressions

Mypy now uses more correct line numbers for decorators and slice expressions. In some cases, this may necessitate changing the location of a # type: ignore comment.

... (truncated)

Commits

Updates ansys-sphinx-theme from 1.2.3 to 1.2.4

Commits

Updates hypothesis from 6.122.3 to 6.123.7

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.123.7

Internal type hint additions and refactorings.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.6

"@​reproduce_failure()" now uses a newer internal interface to represent failures. As a reminder, this representation is not intended to be stable across versions or with respect to changes in the test.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.5

Internal code refactoring for the typed choice sequence (issue #3921). May have some neutral effect on shrinking.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.4

This patch improves shrinking involving long strings or byte sequences whose value is not relevant to the failure.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.3

This release further improves shrinking of strategies using "one_of()", allowing the shrinker to more reliably move between branches of the strategy.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.2

The shrinker now uses the typed choice sequence (issue #3921) when ordering failing examples. As a result, Hypothesis may now report a different minimal failing example for some tests. We expect most cases to remain unchanged.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.1

Our pytest plugin now emits a warning if you set Pytest's "norecursedirs" config option in such a way that the ".hypothesis" directory would be searched for tests. This reliably indicates that you've made a mistake which slows down test collection, usually assuming that your configuration extends the set of ignored patterns when it actually replaces them. (issue #4200)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.123.0

... (truncated)

Commits
  • aef3eca Bump hypothesis-python version to 6.123.7 and update changelog
  • 5ae00c5 Merge pull request #4223 from tybug/conjecture-typing
  • b6e2342 fix merge
  • e8d4c58 Merge branch 'master' into conjecture-typing
  • ce6b4d3 fix typing
  • 58c77ae Bump hypothesis-python version to 6.123.6 and update changelog
  • bcdc66f Merge pull request #4220 from tybug/reproduce-failure-tcs
  • 956edd2 add additional covering example
  • 81a4061 Merge branch 'master' into reproduce-failure-tcs
  • ecdf80a Merge branch 'master' into conjecture-typing
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
hypothesis [>= 6.84.a, < 6.85]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [numpy](https://github.com/numpy/numpy) | `2.2.0` | `2.2.1` |
| [ansys-tools-path](https://github.com/ansys/ansys-tools-path) | `0.7.0` | `0.7.1` |
| [ansys-dpf-composites](https://github.com/ansys/pydpf-composites) | `0.6.1` | `0.6.2` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.9.3` | `3.10.0` |
| [scipy](https://github.com/scipy/scipy) | `1.14.1` | `1.15.0` |
| [mypy](https://github.com/python/mypy) | `1.13.0` | `1.14.1` |
| [ansys-sphinx-theme](https://github.com/ansys/ansys-sphinx-theme) | `1.2.3` | `1.2.4` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.122.3` | `6.123.7` |



Updates `numpy` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.2.0...v2.2.1)

Updates `ansys-tools-path` from 0.7.0 to 0.7.1
- [Release notes](https://github.com/ansys/ansys-tools-path/releases)
- [Changelog](https://github.com/ansys/ansys-tools-path/blob/main/CHANGELOG.md)
- [Commits](ansys/ansys-tools-path@v0.7.0...v0.7.1)

Updates `ansys-dpf-composites` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/ansys/pydpf-composites/releases)
- [Changelog](https://github.com/ansys/pydpf-composites/blob/main/release_checklist.rst)
- [Commits](ansys/pydpf-composites@v0.6.1...v0.6.2)

Updates `matplotlib` from 3.9.3 to 3.10.0
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.9.3...v3.10.0)

Updates `scipy` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.14.1...v1.15.0)

Updates `mypy` from 1.13.0 to 1.14.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.13.0...v1.14.1)

Updates `ansys-sphinx-theme` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/ansys/ansys-sphinx-theme/releases)
- [Commits](ansys/ansys-sphinx-theme@v1.2.3...v1.2.4)

Updates `hypothesis` from 6.122.3 to 6.123.7
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.122.3...hypothesis-python-6.123.7)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ansys-tools-path
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ansys-dpf-composites
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: matplotlib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: scipy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ansys-sphinx-theme
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: hypothesis
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 7, 2025
@wiz-inc-572fc38784
Copy link

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 Medium
Data Finding Sensitive Data
Secret Finding Secrets
IaC Misconfiguration IaC Misconfigurations
Total 2 Medium

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-inc-572fc38784
Copy link

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 Medium
Data Finding Sensitive Data
Secret Finding Secrets
IaC Misconfiguration IaC Misconfigurations
Total 2 Medium

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@codecov
Copy link

codecov bot commented Jan 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 94.97%. Comparing base (864b362) to head (64b9388).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #753   +/-   ##
=======================================
  Coverage   94.97%   94.97%           
=======================================
  Files         109      109           
  Lines        5696     5696           
  Branches      322      322           
=======================================
  Hits         5410     5410           
  Misses        285      285           
  Partials        1        1           
Flag Coverage Δ
direct-launch 91.57% <ø> (ø)
minimum-deps 93.18% <ø> (ø)
python-3.10 94.24% <ø> (ø)
python-3.11 94.17% <ø> (ø)
python-3.12 94.36% <ø> (ø)
server-2024R2 90.80% <ø> (ø)
server-2025R1 94.17% <ø> (ø)
server-2025R2 94.17% <ø> (ø)
server-latest 94.78% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@greschd greschd enabled auto-merge (squash) January 7, 2025 12:59
@greschd greschd merged commit 6701901 into main Jan 7, 2025
30 checks passed
@greschd greschd deleted the dependabot/pip/dependencies-6e5ff308bc branch January 7, 2025 13:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants