Skip to content

Bump the all-minor-and-patch-dependency-updates group across 1 directory with 7 updates #104

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the all-minor-and-patch-dependency-updates group across 1 directory with 7 updates #104

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2025 •
edited
Loading

Bumps the all-minor-and-patch-dependency-updates group with 7 updates in the / directory:

Package From To
bandit 1.8.0 1.8.3
ruff 0.8.4 0.9.9
tox 4.23.2 4.24.1
sphinx 8.1.3 8.2.1
sphinx-book-theme 1.1.3 1.1.4
ray[default] 2.40.0 2.43.0
torch 2.5.1 2.6.0

Updates bandit from 1.8.0 to 1.8.3

Release notes

Sourced from bandit's releases.

1.8.3

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

1.8.2

What's Changed

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

1.8.1

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

Commits

Updates ruff from 0.8.4 to 0.9.9

Release notes

Sourced from ruff's releases.

0.9.9

Release Notes

Preview features

  • Fix caching of unsupported-syntax errors (#16425)

Bug fixes

  • Only show unsupported-syntax errors in editors when preview mode is enabled (#16429)

Contributors

Install ruff 0.9.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.9.9/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.9.9/ruff-installer.ps1 | iex"

Download ruff 0.9.9

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
ruff-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
ruff-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum
ruff-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.9.9

Preview features

  • Fix caching of unsupported-syntax errors (#16425)

Bug fixes

  • Only show unsupported-syntax errors in editors when preview mode is enabled (#16429)

0.9.8

Preview features

  • Start detecting version-related syntax errors in the parser (#16090)

Rule changes

  • [pylint] Mark fix unsafe (PLW1507) (#16343)
  • [pylint] Catch case np.nan/case math.nan in match statements (PLW0177) (#16378)
  • [ruff] Add more Pydantic models variants to the list of default copy semantics (RUF012) (#16291)

Server

  • Avoid indexing the project if configurationPreference is editorOnly (#16381)
  • Avoid unnecessary info at non-trace server log level (#16389)
  • Expand ruff.configuration to allow inline config (#16296)
  • Notify users for invalid client settings (#16361)

Configuration

  • Add per-file-target-version option (#16257)

Bug fixes

  • [refurb] Do not consider docstring(s) (FURB156) (#16391)
  • [flake8-self] Ignore attribute accesses on instance-like variables (SLF001) (#16149)
  • [pylint] Fix false positives, add missing methods, and support positional-only parameters (PLE0302) (#16263)
  • [flake8-pyi] Mark PYI030 fix unsafe when comments are deleted (#16322)

Documentation

  • Fix example for S611 (#16316)
  • Normalize inconsistent markdown headings in docstrings (#16364)
  • Document MSRV policy (#16384)

0.9.7

Preview features

... (truncated)

Commits
  • 091d0af Bump version to Ruff 0.9.9 (#16434)
  • 3d72138 Check LinterSettings::preview for version-related syntax errors (#16429)
  • 4a23756 Avoid caching files with unsupported syntax errors (#16425)
  • af62f79 Prioritize "bug" label for changelog sections (#16433)
  • 0ced8d0 [flake8-copyright] Add links to applicable options (CPY001) (#16421)
  • a8e171f Fix string-length limit in documentation for PYI054 (#16432)
  • cf83584 Show version-related syntax errors in the playground (#16419)
  • 764aa0e Allow passing ParseOptions to inline tests (#16357)
  • 568cf88 Bump version to 0.9.8 (#16414)
  • 040071b [red-knot] Ignore surrounding whitespace when looking for `<!-- snapshot-diag...
  • Additional commits viewable in compare view

Updates tox from 4.23.2 to 4.24.1

Release notes

Sourced from tox's releases.

4.24.1

What's Changed

Full Changelog: tox-dev/tox@4.24.0...4.24.1

4.24.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.23.2...4.24.0

Changelog

Sourced from tox's changelog.

v4.24.1 (2025-01-21)

Misc - 4.24.1

- :issue:`3426`

v4.24.0 (2025-01-21)


Features - 4.24.0

  • Add a schema command to produce a JSON Schema for tox and the current plugins.

    • by :user:henryiii (:issue:3446)

Bugfixes - 4.24.0

- Log exception name when subprocess execution produces one.

    

  • by :user:ssbarnea (:issue:3450)
    • 



Improved Documentation - 4.24.0

  • Fix typo in docs/config.rst from {} to {:}.

    • by :user:wooshaun53 (:issue:3424)

  • Pass NIX_LD and NIX_LD_LIBRARY_PATH variables by default in pass_env to make generic binaries work under Nix/NixOS.

    • by :user:albertodonato (:issue:3425)
Commits

Updates sphinx from 8.1.3 to 8.2.1

Release notes

Sourced from sphinx's releases.

Sphinx 8.2.1

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Sphinx 8.2.0

Changelog: https://www.sphinx-doc.org/en/master/changes/8.2.html

Dependencies

  • #13000: Drop Python 3.10 support.

Incompatible changes

  • #13044: Remove the internal and undocumented has_equations data from the MathDomain domain. The undocumented MathDomain.has_equations method now unconditionally returns True. These are replaced by the has_maths_elements key of the page context dict. Patch by Adam Turner.
  • #13227: HTML output for sequences of keys in the kbd role no longer uses a <kbd class="kbd compound"> element to wrap the keys and separators, but places them directly in the relevant parent node. This means that CSS rulesets targeting kbd.compound or .kbd.compound will no longer have any effect. Patch by Adam Turner.

Deprecated

  • #13037: Deprecate the SingleHTMLBuilder.fix_refuris method. Patch by James Addison.
  • #13083, #13330: Un-deprecate sphinx.util.import_object. Patch by Matthias Geier.

Features added

  • #13173: Add a new duplicate_declaration warning type, with duplicate_declaration.c and duplicate_declaration.cpp subtypes. Patch by Julien Lecomte and Adam Turner.
  • #11824: linkcode: Allow extensions to add support for a domain by defining the keys that should be present. Patch by Nicolas Peugnet.
  • #13144: Add a class option to the autosummary directive. Patch by Tim Hoffmann.
  • #13146: Napoleon: Unify the type preprocessing logic to allow Google-style docstrings to use the optional and default keywords. Patch by Chris Barrick.

... (truncated)

Changelog

Sourced from sphinx's changelog.

Release 8.2.1 (released Feb 21, 2025)

Bugs fixed

  • #13367: Correct spelling of highlighting_failure in warning sub-type. Patch by Bart Kamphorst.
  • #13377: Restore support for using sphinx.testing.path paths with sphinx.testing.fixtures. Patch by Kazuya Takei.
  • #13380: viewcode: Fix importing modules more than once. Patch by Dave Hoese.
  • #13382: Napoleon: Use the right valid types for configuration values. Patch by Adam Turner.
  • 13376: Fix copying assets from a relative :confval:html_static_path entry. Patch by Adam Turner.

Release 8.2.0 (released Feb 18, 2025)

Dependencies

  • #13000: Drop Python 3.10 support.

Incompatible changes

  • #13044: Remove the internal and undocumented has_equations data from the :py:class:!MathDomain domain. The undocumented :py:meth:!MathDomain.has_equations method now unconditionally returns True. These are replaced by the has_maths_elements key of the page context dict. Patch by Adam Turner.
  • #13227: HTML output for sequences of keys in the :rst:role:kbd role no longer uses a <kbd class="kbd compound"> element to wrap the keys and separators, but places them directly in the relevant parent node. This means that CSS rulesets targeting kbd.compound or .kbd.compound will no longer have any effect. Patch by Adam Turner.

Deprecated

  • #13037: Deprecate the SingleHTMLBuilder.fix_refuris method. Patch by James Addison.
  • #13083, #13330: Un-deprecate sphinx.util.import_object. Patch by Matthias Geier.

... (truncated)

Commits
  • 0215a73 Bump to 8.2.1 final
  • 53b7913 Remove background colours from (un)translated classes
  • 58e64d4 Fix _relative_path() for unresolved paths
  • 1a3d1de Add missing CHANGES entry
  • d847d73 Bump Ruff to 0.9.7
  • 7ba7628 Napoleon: Fix valid types for configuration values (#13382)
  • 8ef0708 Fix viewcode extension importing modules more than once (#13380)
  • 7e1bf28 Restore support for sphinx.testing.path paths in ``sphinx.testing.fixture...
  • d099161 Revert "Mark autodoc singledispatchmethod tests as expected failures" (#13381)
  • ba3c729 Switch transifex workflow trigger from 'push' to 'pull_request'
  • Additional commits viewable in compare view

Updates sphinx-book-theme from 1.1.3 to 1.1.4

Release notes

Sourced from sphinx-book-theme's releases.

v1.1.4 - 2025-02-20

(full changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Other merged PRs

Contributors to this release

(GitHub contributors page for this release)

@​agoose77 | @​askras | @​bsipocz | @​choldgraf | @​dependabot | @​dylanh724 | @​kloczek | @​mitya57 | @​nilsleh | @​pre-commit-ci | @​Snoopy1866 | @​stevepiercy | @​welcome

Commits
  • 23f6936 chore: bump version
  • d3552e2 MAINT: pin PST theme version for now (#898)
  • ee815b1 CI: adding explicit sphinx config into RTD config (#897)
  • 8822eef really drop python<=3.8 support (#844)
  • 40f7c41 Build(deps): Bump the actions group with 3 updates (#876)
  • 1cd3ca6 Build(deps-dev): Bump express from 4.18.2 to 4.21.2 (#886)
  • c9a7d49 Build(deps-dev): Bump sass from 1.80.4 to 1.81.0 (#877)
  • 7d118ba Build(deps-dev): Bump dedent from 0.7.0 to 1.5.3 (#878)
  • 2732526 Fix links in documentation (#884)
  • e2eea6f [pre-commit.ci] pre-commit autoupdate (#885)
  • Additional commits viewable in compare view

Updates ray[default] from 2.40.0 to 2.43.0

Release notes

Sourced from ray[default]'s releases.

Ray-2.43.0

Highlights

  • This release features new modules in Ray Serve and Ray Data for integration with large language models, marking the first step of addressing #50639. Existing Ray Data and Ray Serve have limited support for LLM deployments, where users have to manually configure and manage the underlying LLM engine. In this release, we offer APIs for both batch inference and serving of LLMs within Ray in ray.data.llm and ray.serve.llm. See the below notes for more details.
  • Ray Train V2 is available to try starting in Ray 2.43! Run your next Ray Train job with the RAY_TRAIN_V2_ENABLED=1 environment variable. See the migration guide for more information.
  • A new integration with uv run that allows easily specifying Python dependencies for both driver and workers in a consistent way and enables quick iterations for development of Ray applications (#50160, 50462), check out our blog post

Ray Libraries

Ray Data

🎉 New Features:

  • Ray Data LLM: We are introducing a new module in Ray Data for batch inference with LLMs. It offers a new Processor abstraction that interoperates with existing Ray Data pipelines. This abstraction can be configured two ways:
    • Using the vLLMEngineProcessorConfig, which configures vLLM to load model replicas for high throughput model inference
    • Using the HttpRequestProcessorConfig, which sends HTTP requests to an OpenAI-compatible endpoint for inference.
    • Documentation for these features can be found here.
  • Implement accurate memory accounting for UnionOperator (#50436)
  • Implement accurate memory accounting for all-to-all operations (#50290)

💫 Enhancements:

  • Support class constructor args for filter() (#50245)
  • Persist ParquetDatasource metadata. (#50332)
  • Rebasing ShufflingBatcher onto try_combine_chunked_columns (#50296)
  • Improve warning message if required dependency isn't installed (#50464)
  • Move data-related test logic out of core tests directory (#50482)
  • Pass executor as an argument to ExecutionCallback (#50165)
  • Add operator id info to task+actor (#50323)
  • Abstracting common methods, removing duplication in ArrowBlockAccessor, PandasBlockAccessor (#50498)
  • Warn if map UDF is too large (#50611)
  • Replace AggregateFn with AggregateFnV2, cleaning up Aggregation infrastructure (#50585)
  • Simplify Operator.repr (#50620)
  • Adding in TaskDurationStats and on_execution_step callback (#50766)
  • Print Resource Manager stats in release tests (#50801)

🔨 Fixes:

  • Fix invalid escape sequences in grouped_data.py docstrings (#50392)
  • Deflake test_map_batches_async_generator (#50459)
  • Avoid memory leak with pyarrow.infer_type on datetime arrays (#50403)
  • Fix parquet partition cols to support tensors types (#50591)
  • Fixing aggregation protocol to be appropriately associative (#50757)

📖 Documentation:

  • Remove "Stable Diffusion Batch Prediction with Ray Data" example (#50460)

Ray Train

🎉 New Features:

  • Ray Train V2 is available to try starting in Ray 2.43! Run your next Ray Train job with the RAY_TRAIN_V2_ENABLED=1 environment variable. See the migration guide for more information.

💫 Enhancements:

  • Add a training ingest benchmark release test (#50019, #50299) with a fault tolerance variant (#50399)
  • Add telemetry for Trainer usage in V2 (#50321)
  • Add pydantic as a ray[train] extra install (#46682)

... (truncated)

Commits

Updates torch from 2.5.1 to 2.6.0

Release notes

Sourced from torch's releases.

PyTorch 2.6.0 Release

  • Highlights
  • Tracked Regressions
  • Backwards Incompatible Change
  • Deprecations
  • New Features
  • Improvements
  • Bug fixes
  • Performance
  • Documentation
  • Developers

Highlights

We are excited to announce the release of PyTorch® 2.6 (release notes)! This release features multiple improvements for PT2: torch.compile can now be used with Python 3.13; new performance-related knob torch.compiler.set_stance; several AOTInductor enhancements. Besides the PT2 improvements, another highlight is FP16 support on X86 CPUs.

NOTE: Starting with this release we are not going to publish on Conda, please see [Announcement] Deprecating PyTorch’s official Anaconda channel for the details.

For this release the experimental Linux binaries shipped with CUDA 12.6.3 (as well as Linux Aarch64, Linux ROCm 6.2.4, and Linux XPU binaries) are built with CXX11_ABI=1 and are using the Manylinux 2.28 build platform. If you build PyTorch extensions with custom C++ or CUDA extensions, please update these builds to use CXX_ABI=1 as well and report any issues you are seeing. For the next PyTorch 2.7 release we plan to switch all Linux builds to Manylinux 2.28 and CXX11_ABI=1, please see [RFC] PyTorch next wheel build platform: manylinux-2.28 for the details and discussion.

Also in this release as an important security improvement measure we have changed the default value for weights_only parameter of torch.load. This is a backward compatibility-breaking change, please see this forum post for more details.

This release is composed of 3892 commits from 520 contributors since PyTorch 2.5. We want to sincerely thank our dedicated community for your contributions. As always, we encourage you to try these out and report any issues as we improve PyTorch. More information about how to get started with the PyTorch 2-series can be found at our Getting Started page.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any mor...

Description has been truncated

@dependabot
Bump the all-minor-and-patch-dependency-updates group across 1 direct…
f2943c4 
…ory with 7 updates

Bumps the all-minor-and-patch-dependency-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/PyCQA/bandit) | `1.8.0` | `1.8.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.8.4` | `0.9.9` |
| [tox](https://github.com/tox-dev/tox) | `4.23.2` | `4.24.1` |
| [sphinx](https://github.com/sphinx-doc/sphinx) | `8.1.3` | `8.2.1` |
| [sphinx-book-theme](https://github.com/executablebooks/sphinx-book-theme) | `1.1.3` | `1.1.4` |
| [ray[default]](https://github.com/ray-project/ray) | `2.40.0` | `2.43.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.5.1` | `2.6.0` |



Updates `bandit` from 1.8.0 to 1.8.3
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.0...1.8.3)

Updates `ruff` from 0.8.4 to 0.9.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.4...0.9.9)

Updates `tox` from 4.23.2 to 4.24.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.23.2...4.24.1)

Updates `sphinx` from 8.1.3 to 8.2.1
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v8.2.1/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v8.1.3...v8.2.1)

Updates `sphinx-book-theme` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/executablebooks/sphinx-book-theme/releases)
- [Changelog](https://github.com/executablebooks/sphinx-book-theme/blob/master/CHANGELOG.md)
- [Commits](executablebooks/sphinx-book-theme@v1.1.3...v1.1.4)

Updates `ray[default]` from 2.40.0 to 2.43.0
- [Release notes](https://github.com/ray-project/ray/releases)
- [Commits](ray-project/ray@ray-2.40.0...ray-2.43.0)

Updates `torch` from 2.5.1 to 2.6.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: tox
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-book-theme
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ray[default]
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: torch
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner March 1, 2025 13:31
xiangchenjhu
xiangchenjhu approved these changes Mar 4, 2025
View reviewed changes
Copy link
Collaborator

@xiangchenjhu xiangchenjhu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 1, 2025
@dependabot dependabot bot deleted the dependabot/pip/all-minor-and-patch-dependency-updates-12cf5062f6 branch April 1, 2025 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@xiangchenjhu xiangchenjhu xiangchenjhu approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@xiangchenjhu