build(requirements): bump the prod group across 1 directory with 6 updates #601

dependabot · 2025-02-17T02:07:45Z

Bumps the prod group with 6 updates in the / directory:

Package	From	To
azure-identity	`1.17.1`	`1.20.0`
pillow	`10.4.0`	`11.1.0`
psutil	`6.1.0`	`7.0.0`
rich	`13.9.2`	`13.9.4`
scipy	`1.14.1`	`1.15.2`
tqdm	`4.66.5`	`4.67.1`

Updates azure-identity from 1.17.1 to 1.20.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.20.0

1.20.0 (2025-02-11)

Features Added

Added subscription parameter to AzureCliCredential to specify the subscription to use when authenticating with the Azure CLI. (#37994)

Bugs Fixed

A bug in the error handling for AzureCliCredentials and AzureDeveloperCliCredential which would result in the unexpected error 'NoneType' object has no attribute 'startswith' has been fixed (#39176)

Other Changes

AzureCliCredential and AzureDeveloperCliCredential will now call their corresponding executables directly instead of going through the shell. (#38606)

Commits

42437f1 Add py3.13 (#39661)
1526d4e update release date (#39659)
1a9968d [Identity] Use full path for CLI executables (#38606)
1f1727f NO_CI Remove tracking pixels (#39592)
8cb96b3 Update github.io doc link (#39496)
0d2ac51 [Identity] Clarify subscription error in AZ CLI cred (#39501)
8c01872 NO_CI enable type_check_samples where passing
ef224ca Azure Identity: AzureCliCredentials and AzureDeveloperCliCredential handle st...
2025f95 fix: handle URL-safe base64 decoding for JWT (#38991)
90da0a6 useless-disable (#39064)
Additional commits viewable in compare view

Updates pillow from 10.4.0 to 11.1.0

Release notes

Sourced from pillow's releases.

11.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/11.1.0.html

Documentation

Added release notes for writing XMP bytes to JPEG and MPO #8627 [@radarhere]

Added release notes for using zlib-ng instead of zlib #8599 [@radarhere]

Replace python-pillow.org with python-pillow.github.io #8586 [@hugovk]

ImageFile tile is never None #8582 [@radarhere]

Only use start year in copyright, remove end years #8577 [@hugovk]

Python 3.12 is tested on MinGW #8575 [@radarhere]

Use brew formula to install libraqm #8574 [@radarhere]

Added link to GitHub releases in CHANGES #8571 [@radarhere]

Release drafter: move removals, deprecations, documentation up, and uncategorised changes last #8570 [@hugovk]

Updated macOS tested Pillow versions #8538 [@radarhere]

Use test image filename #8534 [@radarhere]

Update Windows 11 Arm64 tested versions #8523 [@nulano]

Move MPO into "Fully supported formats" #8504 [@radarhere]

Update license to MIT-CMU #8490 [@radarhere]

Dependencies

Update dependency mypy to v1.14.1 #8643 [@renovate]

Update dependency mypy to v1.14.0 #8613 [@renovate]

Updated libwebp to 1.5.0 #8612 [@radarhere]

Updated libXau to 1.0.12 #8598 [@radarhere]

Updated libjpeg-turbo to 3.1.0 #8595 [@radarhere]

Updated harfbuzz to 10.1.0 #8533 [@radarhere]

Updated openjpeg to 2.5.3 #8591 [@radarhere]

Update dependency cibuildwheel to v2.22.0 #8580 [@renovate]

Update codecov/codecov-action action to v5 #8557 [@renovate]

Migrate renovate config #8527 [@renovate]

Update dependency mypy to v1.13.0 #8491 [@renovate]

Update dependency mypy to v1.12.1 #8487 [@renovate]

Testing

Added CentOS Stream 10 #8646 [@radarhere]

Use monkeypatch #8628 [@radarhere]

Pass file handle to ContainerIO #8625 [@radarhere]

Use register_handler #8499 [@radarhere]

Use monkeypatch #8626 [@radarhere]

Test libjpeg-turbo on macOS #8596 [@radarhere]

Test 3.13t (free-threaded) from Quansight-Labs/setup-python on Linux and macOS #8565 [@hugovk]

Run gcc problem matcher on Python 3.13 #8541 [@radarhere]

Add trove-classifiers>=2024.10.12 to 'tests' extra and use for Windows CI #8514 [@hugovk]

Apply security fixes to GitHub Actions #8526 [@hugovk]

Remove unused gcov: true for codecov-action@v4 #8521 [@hugovk]

Added Fedora 41 #8520 [@radarhere]

Do not repeatedly save to the same path #8512 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

11.1.0 and newer

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

11.0.0 (2024-10-15)

Update licence to MIT-CMU #8460 [hugovk]

Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

Do not close provided file handles with libtiff when saving #8458 [radarhere]

Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

Use transparency when combining P frames from APNGs #8443 [radarhere]

Support all resampling filters when resizing I;16* images #8422 [radarhere]

Free memory on early return #8413 [radarhere]

Cast int before potentially exceeding INT_MAX #8402 [radarhere]

Check image value before use #8400 [radarhere]

Improved copying imagequant libraries #8420

... (truncated)

Commits

4c1aed8 11.1.0 version bump
dfb368a Merge pull request #8651 from radarhere/blp
5d998d3 Improved coverage
6b75e06 Do not reread start of header in decoder
b89cc09 Corrected BLP1 alpha depth handling
aa0f412 Merge pull request #8646 from radarhere/centos
e344271 Added CentOS Stream 10
17f09f3 Merge pull request #8644 from radarhere/c99
d42f22b Added release notes
c7026d9 Merge pull request #8642 from radarhere/bigtiff
Additional commits viewable in compare view

Updates psutil from 6.1.0 to 7.0.0

Changelog

Sourced from psutil's changelog.

7.0.0

2025-02-13

Enhancements

669_, [Windows]: net_if_addrs()_ also returns the broadcast address instead of None.

2480_: Python 2.7 is no longer supported. Latest version supporting Python 2.7 is psutil 6.1.X. Install it with: pip2 install psutil==6.1.*.

2490_: removed long deprecated Process.memory_info_ex() method. It was deprecated in psutil 4.0.0, released 8 years ago. Substitute is Process.memory_full_info().

Bug fixes

2496_, [Linux]: Avoid segfault (a cPython bug) on Process.memory_maps() for processes that use hundreds of GBs of memory.

2502_, [macOS]: virtual_memory()_ now relies on host_statistics64 instead of host_statistics. This is the same approach used by vm_stat CLI tool, and should grant more accurate results.

Compatibility notes

2480_: Python 2.7 is no longer supported.

2490_: removed long deprecated Process.memory_info_ex() method.

6.1.1

2024-12-19

Enhancements

2471_: use Vulture CLI tool to detect dead code.

Bug fixes

2418_, [Linux]: fix race condition in case /proc/PID/stat does not exist, but /proc/PID does, resulting in FileNotFoundError.

2470_, [Linux]: users()_ may return "localhost" instead of the actual IP address of the user logged in.

Commits

ea5b556 pre-release
d6e28b7 try to fix tests
104bb32 test cpu_times() for process children
16c091b test cpu_times() for process children
eee09da [OSX] proc.c: Fix goo.gl link in comment for source reference (#2505)
17e2780 ci: build aarch64 wheel on GHA aarch64 runner (#2503)
1ba8667 pin black version to 24.X, because new 25.X breaks style
9c114a5 [OSX] use host_statistics64 to get memory metrics (#2502)
08d7d43 pin black version to 24.X, because new 25.X breaks style
a509e5a 669 windows broadcast addr (#2501)
Additional commits viewable in compare view

Updates rich from 13.9.2 to 13.9.4

Release notes

Sourced from rich's releases.

The Faster is Faster release

[13.9.4] - 2024-11-01

Changed

Optimizations to cell_len which may speed up Rich / Textual output Textualize/rich#3546

The irregular expression release

Fix a broken regex that resulted in the slow path being chosen for some operations. This fix should result in notable speedups for some operations, such as wrapping text.

[13.9.3] - 2024-10-22

Fixed

Fixed broken regex that may have resulted in poor performance. Textualize/rich#3535

Changelog

Sourced from rich's changelog.

[13.9.4] - 2024-11-01

Changed

Optimizations to cell_len which may speed up Rich / Textual output Textualize/rich#3546

[13.9.3] - 2024-10-22

Fixed

Fixed broken regex that may have resulted in poor performance. Textualize/rich#3535

Commits

43d3b04 Merge pull request #3548 from Textualize/bump1394
e440ff2 bump
12301e3 Merge pull request #3546 from Textualize/faster-cell-len
02f3d14 comment
aaaef27 leaner syntax
6cef0bc leaner cell_len
46150cd sum and map is faster
9e7f363 use sets
afcc5c5 Merge pull request #3535 from Textualize/regex-error
60f3b61 changelog
Additional commits viewable in compare view

Updates scipy from 1.14.1 to 1.15.2

Release notes

Sourced from scipy's releases.

SciPy 1.15.2 Release Notes

SciPy 1.15.2 is a bug-fix release with no new features compared to 1.15.1. Free-threaded Python 3.13 wheels for Linux ARM platform are available on PyPI starting with this release.

Authors

Name (commits)

Peter Bell (1)

Charles Bousseau (1) +

Jake Bowhay (3)

Matthew Brett (1)

Ralf Gommers (3)

Rohit Goswami (1)

Matt Haberland (4)

Parth Nobel (1) +

Tyler Reddy (33)

Daniel Schmitz (2)

Dan Schult (5)

Scott Shambaugh (2)

Edgar Andrés Margffoy Tuay (1)

Warren Weckesser (4)

A total of 14 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

SciPy 1.15.1 Release Notes

SciPy 1.15.1 is a bug-fix release with no new features compared to 1.15.0. Importantly, an issue with the import of scipy.optimize breaking other packages has been fixed.

Authors

Name (commits)

Ralf Gommers (3)

Rohit Goswami (1)

Matt Haberland (2)

Tyler Reddy (7)

Daniel Schmitz (1)

... (truncated)

Commits

0f1fd4a REL: 1.15.2 rel commit [wheel build]
7df5cc6 Merge pull request #22471 from tylerjereddy/treddy_backports_1.15.2
a046fa0 CI: PR 22471 wheel builds [wheel build]
198aa52 DOC: PR 22471 revisions
ba61a58 CI: PR 22471 revisions
e0251ee do not check dtype in test_compare_with_GCVSPL
fcc68dd MAINT: integrate.cumulative_simpson: bump test tolerance
6d2c059 BUG: wrap median_filter stability (#22402)
59cb7d4 DOC: PR 22471 revisions
a60d17f MAINT: pearsonr SIMD-related shim
Additional commits viewable in compare view

Updates tqdm from 4.66.5 to 4.67.1

Release notes

Sourced from tqdm's releases.

tqdm v4.67.1 stable

fix gui (matplotlib syntax) (#1629)

misc test & framework updates

bump pytest-asyncio (#1630)

fix codecov rate limit

fix pybuild

sync dependencies

tqdm v4.67.0 stable

contrib.discord: replace disco-py with requests (#1536)

tqdm v4.66.6 stable

cli: zip-safe --manpath, --comppath (#1627)

misc framework updates (#1627)

fix pytest DeprecationWarning

fix snapcraft build

fix nbval DeprecationWarning

update & tidy workflows

bump pre-commit

docs: update URLs

Commits

0ed5d7f bump version, merge pull request #1629 from tqdm/fix-gui
a2d5f1c tests: fix codecov rate limit
cac7150 tests: bump pytest-asyncio
6338f62 deps: fix pybuild
342b15e tests: sync deps
c66458d gui: fix matplotlib
35a6ee9 bump version, merge pull request #1536 from guigoruiz1
8aa9470 add discord requests dep
1db24b4 better user-agent
61365d8 handle rate limit
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

📚 Documentation preview 📚: https://RDAgent--601.org.readthedocs.build/en/601/

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…dates Bumps the prod group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.17.1` | `1.20.0` | | [pillow](https://github.com/python-pillow/Pillow) | `10.4.0` | `11.1.0` | | [psutil](https://github.com/giampaolo/psutil) | `6.1.0` | `7.0.0` | | [rich](https://github.com/Textualize/rich) | `13.9.2` | `13.9.4` | | [scipy](https://github.com/scipy/scipy) | `1.14.1` | `1.15.2` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.5` | `4.67.1` | Updates `azure-identity` from 1.17.1 to 1.20.0 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md) - [Commits](Azure/azure-sdk-for-python@azure-identity_1.17.1...azure-identity_1.20.0) Updates `pillow` from 10.4.0 to 11.1.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@10.4.0...11.1.0) Updates `psutil` from 6.1.0 to 7.0.0 - [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst) - [Commits](giampaolo/psutil@release-6.1.0...release-7.0.0) Updates `rich` from 13.9.2 to 13.9.4 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.9.2...v13.9.4) Updates `scipy` from 1.14.1 to 1.15.2 - [Release notes](https://github.com/scipy/scipy/releases) - [Commits](scipy/scipy@v1.14.1...v1.15.2) Updates `tqdm` from 4.66.5 to 4.67.1 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.5...v4.67.1) --- updated-dependencies: - dependency-name: azure-identity dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: pillow dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod - dependency-name: psutil dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: scipy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: tqdm dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-04-21T01:41:50Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 17, 2025

build: Update constraints for dependabot.

29336aa

dependabot bot closed this Apr 21, 2025

dependabot bot deleted the dependabot/pip/prod-49a057d573 branch April 21, 2025 01:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(requirements): bump the prod group across 1 directory with 6 updates #601

build(requirements): bump the prod group across 1 directory with 6 updates #601

Uh oh!

dependabot bot commented on behalf of github Feb 17, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Apr 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

build(requirements): bump the prod group across 1 directory with 6 updates #601

build(requirements): bump the prod group across 1 directory with 6 updates #601

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

azure-identity_1.20.0

1.20.0 (2025-02-11)

Features Added

Bugs Fixed

Other Changes

11.1.0

Documentation

Dependencies

Testing

11.1.0 and newer

11.0.0 (2024-10-15)

7.0.0

6.1.1

The Faster is Faster release

[13.9.4] - 2024-11-01

Changed

The irregular expression release

[13.9.3] - 2024-10-22

Fixed

[13.9.4] - 2024-11-01

Changed

[13.9.3] - 2024-10-22

Fixed

SciPy 1.15.2 Release Notes

Authors

SciPy 1.15.1 Release Notes

Authors

tqdm v4.67.1 stable

tqdm v4.67.0 stable

tqdm v4.66.6 stable

Uh oh!

dependabot bot commented on behalf of github Apr 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Feb 17, 2025 •

edited

Loading