Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2024

Bumps the all-minor-and-patch-dependency-updates group with 10 updates:

Package From To
bandit 1.7.9 1.7.10
build 1.2.1 1.2.2
pytest 8.3.2 8.3.3
ruff 0.6.3 0.6.8
tox 4.18.0 4.21.0
sphinx-automodapi 0.17.0 0.18.0
pandas 2.2.2 2.2.3
ray[default] 2.35.0 2.37.0
torch 2.4.0 2.4.1
torch-geometric 2.5.3 2.6.1

Updates bandit from 1.7.9 to 1.7.10

Release notes

Sourced from bandit's releases.

1.7.10

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

Commits
  • 36fd650 Pytorch Load / Save Plugin (#1114)
  • 4ac55df Use consistent file naming of docs (#1170)
  • 68022aa Bump docker/build-push-action from 6.6.1 to 6.7.0 (#1168)
  • 77566a0 Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 (#1165)
  • 221ced6 Bump docker/build-push-action from 6.5.0 to 6.6.1 (#1166)
  • 701b7d5 Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 (#1163)
  • 320495c Bump docker/build-push-action from 6.3.0 to 6.5.0 (#1160)
  • 90490c7 Bump docker/login-action from 3.2.0 to 3.3.0 (#1159)
  • 708ab74 Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 (#1158)
  • 89d2345 Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (#1156)
  • Additional commits viewable in compare view

Updates build from 1.2.1 to 1.2.2

Release notes

Sourced from build's releases.

Version 1.2.2

What's Changed

  • Add editable to builder.get_requries_for_build's static types (PR #764, fixes issue #763)
  • Include artifact attestations in our release (PR #782)
  • Fix typing compatibility with typed pyproject-hooks (PR #788)
  • Mark more tests with network (PR #808)
  • Add more intersphinx links to docs (PR #804)
  • Make uv optional for tests (PR #807 and #813)

New Contributors

Full Changelog: pypa/build@1.2.1...1.2.2

Changelog

Sourced from build's changelog.

1.2.2 (2024-09-06)

  • Add editable to builder.get_requries_for_build's static types (PR :pr:764, fixes issue :issue:763)
  • Include artifact attestations in our release (PR :pr:782)
  • Fix typing compatibility with typed pyproject-hooks (PR :pr:788)
  • Mark more tests with network (PR :pr:808)
  • Add more intersphinx links to docs (PR :pr:804)
  • Make uv optional for tests (PR :pr:807 and :pr:813)
Commits
  • 3b0b5d0 docs: changelog for 1.2.2 (#812)
  • b44a886 docs: more info in README
  • 8e19948 build(deps): bump actions/attest-build-provenance in the actions group (#814)
  • b90956c tests: add module case to uv detection (#813)
  • e79f1b3 ci: remove bot comments from generated release notes (#810)
  • f6da25a pre-commit: bump repositories (#801)
  • 9a52c50 tests: optional uv (#807)
  • 553b700 docs: Add a few intersphinx links to the Python Packaging User Guide (#804)
  • 336efcb build(deps): bump actions/attest-build-provenance in the actions group (#802)
  • 73b7213 tests: mark more network tests (#808)
  • Additional commits viewable in compare view

Updates pytest from 8.3.2 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

  • #12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

  • #12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

  • #12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

  • #12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

  • #12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

  • #6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

  • #9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

    -- by GTowers1{.interpreted-text role="user"}

Improved documentation

  • #12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.
  • #12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

  • #12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.
Commits

Updates ruff from 0.6.3 to 0.6.8

Release notes

Sourced from ruff's releases.

0.6.8

Release Notes

Preview features

  • Remove unnecessary parentheses around match case clauses (#13510)
  • Parenthesize overlong if guards in match..case clauses (#13513)
  • Detect basic wildcard imports in ruff analyze graph (#13486)
  • [pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

  • [lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • [pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

  • Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • Exit gracefully on broken pipe errors (#13485)
  • Avoid panic when analyze graph hits broken pipe (#13484)

Performance

  • Reuse BTreeSets in module resolver (#13440)
  • Skip traversal for non-compound statements (#13441)

Contributors

Install ruff 0.6.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.8/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.8

Preview features

  • Remove unnecessary parentheses around match case clauses (#13510)
  • Parenthesize overlong if guards in match..case clauses (#13513)
  • Detect basic wildcard imports in ruff analyze graph (#13486)
  • [pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

  • [lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • [pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

  • Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • Exit gracefully on broken pipe errors (#13485)
  • Avoid panic when analyze graph hits broken pipe (#13484)

Performance

  • Reuse BTreeSets in module resolver (#13440)
  • Skip traversal for non-compound statements (#13441)

0.6.7

Preview features

  • Add Python version support to ruff analyze CLI (#13426)
  • Add exclude support to ruff analyze (#13425)
  • Fix parentheses around return type annotations (#13381)

Rule changes

  • [pycodestyle] Fix: Don't autofix if the first line ends in a question mark? (D400) (#13399)

Bug fixes

  • Respect lint.exclude in ruff check --add-noqa (#13427)

Performance

  • Avoid tracking module resolver files in Salsa (#13437)
  • Use forget for module resolver database (#13438)

0.6.6

Preview features

... (truncated)

Commits
  • ae39ce5 Bump version to 0.6.8 (#13522)
  • ff2d214 Don't skip over imports and other nodes containing nested statements in impor...
  • 9442cd8 Parenthesize match..case if guards (#13513)
  • 8012707 Align formatting of patterns in match-cases with expression formatting in cla...
  • d7ffe46 Disable the typeset plugin (#13517)
  • 7c83af4 red-knot: Implement the not operator for all Type variants (#13432)
  • bbb044e Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • 4810652 Avoid UP028 false negatives with non-reference shadowed bindings of loop vari...
  • 11f06e0 Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • f27a8b8 [internal] ComparableExpr (f)strings and bytes made invariant under concate...
  • Additional commits viewable in compare view

Updates tox from 4.18.0 to 4.21.0

Release notes

Sourced from tox's releases.

4.18.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.18.0...4.18.1

Changelog

Sourced from tox's changelog.

v4.21.0 (2024-09-30)

Features - 4.21.0

- Native TOML configuration support - by :user:`gaborbernat`. (:issue:`999`)

Improved Documentation - 4.21.0

  • Update Loader docs - by :user:ziima (:issue:3352)

v4.20.0 (2024-09-18)

Features - 4.20.0

- Separate the list dependencies functionality to a separate abstract class allowing code reuse in plugins (such as
  ``tox-uv``) - by :gaborbernat`. (:issue:`3347`)

v4.19.0 (2024-09-17)

Features - 4.19.0

  • Support pypy-<major>.<minor> environment names for PyPy environments - by :user:gaborbernat. (:issue:3346)

v4.18.1 (2024-09-07)

Bugfixes - 4.18.1

- Fix and test the string spec for the ``sys.executable`` interpreter (introduced in :pull:`3325`)
  - by :user:`hroncok` (:issue:`3327`)

Improved Documentation - 4.18.1

  • Changes the tox_env_teardown docstring to explain the hook is called after a tox env was teared down. (:issue:3305)
Commits

Updates sphinx-automodapi from 0.17.0 to 0.18.0

Release notes

Sourced from sphinx-automodapi's releases.

v0.18.0 Release Notes

What's Changed

New Contributors

Full Changelog: astropy/sphinx-automodapi@v0.17.0...v0.18.0

Changelog

Sourced from sphinx-automodapi's changelog.

0.18.0 (2024-09-13)

  • Fixed an issue where items defined in __all__ but originally imported from elsewhere, e.g. a private module, were not documented. #190
Commits
  • e07759c Finalizing change log for 0.18.0
  • 2e1f9e0 Merge pull request #190 from astrofrog/import-private-into-public
  • 7673171 Include a class imported from a public submodule too
  • 23d4849 Add missing {posargs} in tox.ini
  • c7e52e1 Added changelog entry
  • baa2716 all should take precedence over onlylocals for determining what is public
  • 1775419 Added regression test for importing a class from a private submodule into a p...
  • 7e5e6fa Merge pull request #189 from bsipocz/MAINT_adding_sphinx8
  • d671dd5 MAINT: adding sphinx 8.0.x to the testing matrix
  • e7c3b5c Add sort option to automodsumm (#182)
  • Additional commits viewable in compare view

Updates pandas from 2.2.2 to 2.2.3

Release notes

Sourced from pandas's releases.

Pandas 2.2.3

We are pleased to announce the release of pandas 2.2.3. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.3 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

Updates ray[default] from 2.35.0 to 2.37.0

Release notes

Sourced from ray[default]'s releases.

Ray-2.37.0

Ray Libraries

Ray Data

💫 Enhancements:

  • Simplify custom metadata provider API (#47575)
  • Change counts of metrics to rates of metrics (#47236)
  • Throw exception for non-streaming HF datasets with "override_num_blocks" argument (#47559)
  • Refactor custom optimizer rules (#47605)

🔨 Fixes:

  • Remove ineffective retry code in plan_read_op (#47456)
  • Fix incorrect pending task size if outputs are empty (#47604)

Ray Train

💫 Enhancements:

  • Update run status and add stack trace to TrainRunInfo (#46875)

Ray Serve

💫 Enhancements:

  • Allow control of some serve configuration via env vars (#47533)
  • [serve] Faster detection of dead replicas (#47237)

🔨 Fixes:

  • [Serve] fix component id logging field (#47609)

RLlib

💫 Enhancements:

  • New API stack:
    • Add restart-failed-env option to EnvRunners. (#47608)
    • Offline RL: Store episodes in state form. (#47294)
    • Offline RL: Replace GAE in MARWILOfflinePreLearner with GeneralAdvantageEstimation connector in learner pipeline. (#47532)
    • Off-policy algos: Add episode sampling to EpisodeReplayBuffer. (#47500)
    • RLModule APIs: Add SelfSupervisedLossAPI for RLModules that bring their own loss and InferenceOnlyAPI. (#47581, #47572)

Ray Core

💫 Enhancements:

  • [aDAG] Allow custom NCCL group for aDAG (#47141)
  • [aDAG] support buffered input (#47272)
  • [aDAG] Support multi node multi reader (#47480)
  • [Core] Make is_gpu, is_actor, root_detached_id fields late bind to workers. (#47212)
  • [Core] Reconstruct actor to run lineage reconstruction triggered actor task (#47396)
  • [Core] Optimize GetAllJobInfo API for performance (#47530)

🔨 Fixes:

  • [aDAG] Fix ranks ordering for custom NCCL group (#47594)

Ray Clusters

📖 Documentation:

  • [KubeRay] add a guide for deploying vLLM with RayService (#47038)

... (truncated)

Commits

Updates torch from 2.4.0 to 2.4.1

Release notes

Sourced from torch's releases.

PyTorch 2.4.1 Release, bug fix release

This release is meant to fix the following issues (regressions / silent correctness):

Breaking Changes:

  • The pytorch/pytorch docker image now installs the PyTorch package through pip and has switch its conda installation from miniconda to miniforge (#134274)

Windows:

  • Fix performance regression on Windows related to MKL static linking (#130619) (#130697)
  • Fix error during loading on Windows: [WinError 126] The specified module could not be found. (#131662) (#130697)

MPS:

  • Fix tensor.clamp produces wrong values (#130226)
  • Fix Incorrect result from batch norm with sliced inputs (#133610)

ROCM:

  • Fix for launching kernel invalid config error when calling embedding with large index (#130994)
  • Added a check and a warning when attempting to use hipBLASLt on an unsupported architecture (#128753)
  • Fix image corruption with Memory Efficient Attention when running HuggingFace Diffusers Stable Diffusion 3 pipeline (#133331)

Distributed:

  • Fix FutureWarning when using torch.load internally (#130663)
  • Fix FutureWarning when using torch.cuda.amp.autocast internally (#130660)

Torch.compile:

  • Fix exception with torch compile when onnxruntime-training and deepspeed packages are installed. (#131194)
  • Fix silent incorrectness with torch.library.custom_op with mutable inputs and torch.compile (#133452)
  • Fix SIMD detection on Linux ARM (#129075)
  • Do not use C++20 features in cpu_inducotr code (#130816)

Packaging:

  • Fix for exposing statically linked libstdc++ CXX11 ABI symbols (#134494)
  • Fix error while building pytorch from source due to not missing QNNPACK module (#131864)
  • Make PyTorch buildable from source on PowerPC (#129736)
  • Fix XPU extension building (#132847)

Other:

  • Fix warning when using pickle on a nn.Module that contains tensor attributes (#130246)
  • Fix NaNs return in MultiheadAttention when need_weights=False (#130014)
  • Fix nested tensor MHA produces incorrect results (#130196)
  • Fix error when using torch.utils.flop_counter.FlopCounterMode (#134467)

Tracked Regressions:

  • The experimental remote caching feature for Inductor's autotuner (enabled via TORCHINDUCTOR_AUTOTUNE_REMOTE_CACHE) is known to still be broken in this release and actively worked on in main. Following Error is generated: redis.exceptions.DataError: Invalid input of type: 'dict'. Please use nightlies if you need this feature (reported and Fixed by PR: #134032)

Release tracker #132400 contains all relevant pull requests related to this release as well as links to related issues.

Commits

Updates torch-geometric from 2.5.3 to 2.6.1

Release notes

Sourced from torch-geometric's releases.

PyG 2.6.1: Bugfixes

PyG 2.6.1 includes a bugfix in the WebQSDataset.

Bug Fixes

  • Fixed a bug in the WebQSDataset dataset where empty edges were not treated gracefully (#9665)

Full Changelog: pyg-team/pytorch_geometric@2.6.0...2.6.1

PyG 2.6.0

We are excited to announce the release of PyG 2.6 🎉🎉🎉

PyG 2.6 is the culmination of work from 59 contributors who have worked on features and bug-fixes for a total of over 238 commits since torch-geometric==2.5.0.

Highlights

PyTorch 2.4 Support

PyG 2.6 is fully compatible with PyTorch 2.4, and supports the following combinations:

PyTorch 2.2 cpu cu118 cu121 cu124
Linux
macOS
Windows

You can still install PyG 2.6 with an older PyTorch release up to PyTorch 1.13 in case you are not eager to update your PyTorch version.

GNNs+LLMs

In order to facilitate further research on combining GNNs with LLMs, PyG 2.6 introduces

Index Tensor Representation

Similar to the EdgeIndex class introduced in PyG 2.5, torch-geometric==2.6.0 introduces the Index class for efficient storage of 1D indices. While Index sub-classes a general torch.Tensor, it can hold additional (meta)data, i.e.:

  • dim_size: The size of the underlying sparse vector, i.e. the size of a dimension that can be indexed via Index. By default, it is inferred as dim_size=index.max() + 1
  • is_sorted: Whether indices are sorted in ascending order.

... (truncated)

Commits

Bumps the all-minor-and-patch-dependency-updates group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/PyCQA/bandit) | `1.7.9` | `1.7.10` |
| [build](https://github.com/pypa/build) | `1.2.1` | `1.2.2` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.2` | `8.3.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.6.3` | `0.6.8` |
| [tox](https://github.com/tox-dev/tox) | `4.18.0` | `4.21.0` |
| [sphinx-automodapi](https://github.com/astropy/sphinx-automodapi) | `0.17.0` | `0.18.0` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.2.2` | `2.2.3` |
| [ray[default]](https://github.com/ray-project/ray) | `2.35.0` | `2.37.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.4.0` | `2.4.1` |
| [torch-geometric](https://github.com/pyg-team/pytorch_geometric) | `2.5.3` | `2.6.1` |


Updates `bandit` from 1.7.9 to 1.7.10
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.9...1.7.10)

Updates `build` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.2.1...1.2.2)

Updates `pytest` from 8.3.2 to 8.3.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.2...8.3.3)

Updates `ruff` from 0.6.3 to 0.6.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.3...0.6.8)

Updates `tox` from 4.18.0 to 4.21.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.18.0...4.21.0)

Updates `sphinx-automodapi` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/astropy/sphinx-automodapi/releases)
- [Changelog](https://github.com/astropy/sphinx-automodapi/blob/main/CHANGES.rst)
- [Commits](astropy/sphinx-automodapi@v0.17.0...v0.18.0)

Updates `pandas` from 2.2.2 to 2.2.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.2...v2.2.3)

Updates `ray[default]` from 2.35.0 to 2.37.0
- [Release notes](https://github.com/ray-project/ray/releases)
- [Commits](ray-project/ray@ray-2.35.0...ray-2.37.0)

Updates `torch` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.4.0...v2.4.1)

Updates `torch-geometric` from 2.5.3 to 2.6.1
- [Release notes](https://github.com/pyg-team/pytorch_geometric/releases)
- [Changelog](https://github.com/pyg-team/pytorch_geometric/blob/master/CHANGELOG.md)
- [Commits](pyg-team/pytorch_geometric@2.5.3...2.6.1)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: tox
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-automodapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pandas
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ray[default]
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: torch
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: torch-geometric
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner October 1, 2024 13:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 1, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 1, 2024

Superseded by #87.

@dependabot dependabot bot closed this Nov 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/all-minor-and-patch-dependency-updates-f940859f32 branch November 1, 2024 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant