Skip to content

Update python deps aug 2025 #3703

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 3 commits into from
Aug 13, 2025
Merged

Update python deps aug 2025 #3703

merged 3 commits into from
Aug 13, 2025

Conversation

briehl
Copy link
Member

@briehl briehl commented Aug 13, 2025

Description of PR purpose/changes

As the title says. This just builds release notes onto the dependabot PR.

dependabot bot and others added 3 commits August 1, 2025 19:00
@dependabot
Bump the pip group across 1 directory with 25 updates
e91b7b8 
Bumps the pip group with 25 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.3` | `4.13.4` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.7.14` |
| [cryptography](https://github.com/pyca/cryptography) | `44.0.1` | `45.0.5` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.23.0` | `4.25.0` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.8.2` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.1.0` | `11.3.0` |
| [plotly](https://github.com/plotly/plotly.py) | `5.24.1` | `6.2.0` |
| [pycurl](https://github.com/pycurl/pycurl) | `7.45.4` | `7.45.6` |
| [pygments](https://github.com/pygments/pygments) | `2.19.1` | `2.19.2` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `25.0.0` | `25.1.0` |
| [rsa](https://github.com/sybrenstuvel/python-rsa) | `4.9` | `4.9.1` |
| [setuptools](https://github.com/pypa/setuptools) | `75.8.2` | `80.9.0` |
| [sympy](https://github.com/sympy/sympy) | `1.13.3` | `1.14.0` |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.5` | `8.1.7` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.5` | `3.1.6` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.2.3` | `2.3.1` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.11.1` | `4.13.2` |
| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.4` |
| [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.4` | `0.14.5` |
| [tornado](https://github.com/tornadoweb/tornado) | `6.4.2` | `6.5.1` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.12` | `7.10.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `8.4.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `6.2.1` |
| [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` |
| [ruff](https://github.com/astral-sh/ruff) | `0.9.9` | `0.12.7` |



Updates `beautifulsoup4` from 4.13.3 to 4.13.4

Updates `certifi` from 2025.1.31 to 2025.7.14
- [Commits](certifi/python-certifi@2025.01.31...2025.07.14)

Updates `cryptography` from 44.0.1 to 45.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.1...45.0.5)

Updates `jsonschema` from 4.23.0 to 4.25.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.23.0...v4.25.0)

Updates `markdown` from 3.7 to 3.8.2
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.7...3.8.2)

Updates `pillow` from 11.1.0 to 11.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.1.0...11.3.0)

Updates `plotly` from 5.24.1 to 6.2.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v5.24.1...v6.2.0)

Updates `pycurl` from 7.45.4 to 7.45.6
- [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog)
- [Commits](https://github.com/pycurl/pycurl/commits)

Updates `pygments` from 2.19.1 to 2.19.2
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.19.1...2.19.2)

Updates `pyopenssl` from 25.0.0 to 25.1.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@25.0.0...25.1.0)

Updates `rsa` from 4.9 to 4.9.1
- [Changelog](https://github.com/sybrenstuvel/python-rsa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sybrenstuvel/python-rsa/commits)

Updates `setuptools` from 75.8.2 to 80.9.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.8.2...v80.9.0)

Updates `sympy` from 1.13.3 to 1.14.0
- [Release notes](https://github.com/sympy/sympy/releases)
- [Commits](sympy/sympy@sympy-1.13.3...sympy-1.14.0)

Updates `ipywidgets` from 8.1.5 to 8.1.7
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.5...8.1.7)

Updates `jinja2` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.5...3.1.6)

Updates `pandas` from 2.2.3 to 2.3.1
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.3...v2.3.1)

Updates `pymongo` from 4.11.1 to 4.13.2
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.11.1...4.13.2)

Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `statsmodels` from 0.14.4 to 0.14.5
- [Release notes](https://github.com/statsmodels/statsmodels/releases)
- [Changelog](https://github.com/statsmodels/statsmodels/blob/main/CHANGES.md)
- [Commits](statsmodels/statsmodels@v0.14.4...v0.14.5)

Updates `tornado` from 6.4.2 to 6.5.1
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.4.2...v6.5.1)

Updates `coverage` from 7.6.12 to 7.10.1
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.6.12...7.10.1)

Updates `pytest` from 8.3.4 to 8.4.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...8.4.1)

Updates `pytest-cov` from 6.0.0 to 6.2.1
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.0.0...v6.2.1)

Updates `pytest-recording` from 0.13.2 to 0.13.4
- [Release notes](https://github.com/kiwicom/pytest-recording/releases)
- [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst)
- [Commits](kiwicom/pytest-recording@v0.13.2...v0.13.4)

Updates `ruff` from 0.9.9 to 0.12.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.9.9...0.12.7)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: certifi
  dependency-version: 2025.7.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 45.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: jsonschema
  dependency-version: 4.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: markdown
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: plotly
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pycurl
  dependency-version: 7.45.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pygments
  dependency-version: 2.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pyopenssl
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: rsa
  dependency-version: 4.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 80.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: sympy
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: ipywidgets
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pandas
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pymongo
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: statsmodels
  dependency-version: 0.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: tornado
  dependency-version: 6.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: coverage
  dependency-version: 7.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest-cov
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest-recording
  dependency-version: 0.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: ruff
  dependency-version: 0.12.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@briehl
Merge branch 'develop' into update-python-deps-aug-2025
854e190
@briehl
update release notes
ab977ba
@briehl briehl requested a review from ialarmedalien August 13, 2025 18:58
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@codecov Codecov
Copy link

codecov bot commented Aug 13, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 25.97%. Comparing base (8d3721c) to head (ab977ba).
⚠️ Report is 5 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##           develop    #3703      +/-   ##
===========================================
+ Coverage    25.96%   25.97%   +0.01%     
===========================================
  Files          461      461              
  Lines        46691    46691              
===========================================
+ Hits         12122    12129       +7     
+ Misses       34569    34562       -7

see 3 files with indirect coverage changes

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 2ae69c4...ab977ba. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@briehl briehl merged commit 4b83cbf into develop Aug 13, 2025
14 of 15 checks passed
@briehl briehl deleted the update-python-deps-aug-2025 branch August 13, 2025 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ialarmedalien ialarmedalien ialarmedalien approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@briehl @ialarmedalien