Build(deps): Bump the uv group across 2 directories with 9 updates - #2291
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: jupyterlab dependency-version: 4.5.10 dependency-type: direct:production dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production dependency-group: uv - dependency-name: pyasn1 dependency-version: 0.6.4 dependency-type: direct:production dependency-group: uv - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: indirect dependency-group: uv - dependency-name: gitpython dependency-version: 3.1.58 dependency-type: indirect dependency-group: uv - dependency-name: httplib2 dependency-version: 0.32.0 dependency-type: indirect dependency-group: uv - dependency-name: pillow dependency-version: 12.3.0 dependency-type: indirect dependency-group: uv - dependency-name: sqlparse dependency-version: 0.6.0 dependency-type: indirect dependency-group: uv - dependency-name: mlflow dependency-version: 3.15.2 dependency-type: direct:production dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 8 updates in the / directory:
4.5.14.5.103.13.33.14.30.6.10.6.446.0.350.0.03.1.463.1.580.31.00.32.012.1.012.3.00.5.50.6.0Bumps the uv group with 1 update in the /pipelines/matrix directory: mlflow.
Updates
jupyterlabfrom 4.5.1 to 4.5.10Release notes
Sourced from jupyterlab's releases.
... (truncated)
Commits
af5f5b3[ci skip] Publish 4.5.10be9303fBackport of security patches to4.5.xbranch (#19186)a555fe1Reconfigure 4.5.x branch (4.6.x is new stable) (#19060)8d8cb6dBackport PR #19029 on branch 4.5.x (Split external link checks and only run i...dd65403[ci skip] Publish 4.5.92693672Backport PR #18992: Fix hidden cells after moving collapsed headings (#19016)360c176Backport PR #18998 on branch 4.5.x (Fix toolbar popup row clipping in Safari)...e9db010Fixjupyter labextension buildcrash onwebpack ≥ 5.107(#19021)3b8428cBackport PR #19013 on branch 4.5.x (Forbid relative URLs in extensionmanager)...3c84a84Backport PR #19003 on branch 4.5.x (Fix XSS in extension manager's `homepage_...Updates
aiohttpfrom 3.13.3 to 3.14.3Updates
pyasn1from 0.6.1 to 0.6.4Release notes
Sourced from pyasn1's releases.
Changelog
Sourced from pyasn1's changelog.
... (truncated)
Commits
72e4803Prepare release 0.6.40c19eebPin PyPI publish action to immutable commit (#113)45bdb19Merge commit from fork628e36eMerge commit from forke60c691Merge commit from forkaf65c3bPrepare release 0.6.35a49bd1Merge commit from fork5494ba4Fix asDateTime incorrect fractional seconds parsing (#102)71f486eFix DeprecationWarning stacklevel for deprecated attributes (#101)d7cb42dFix OverflowError from oversized BER length field (#100)Updates
cryptographyfrom 46.0.3 to 50.0.0Changelog
Sourced from cryptography's changelog.
... (truncated)
Commits
dcb7050Prepare for 50.0.0 release (#15372)53fccd9Don't leak how PKCS#7 encryptedKey decryption failed (#15369)d472f97Addfrom __future__ import annotationsto all src/ Python files (#15371)908773dBump downstream dependencies in CI (#15368)2cc07ccBump BoringSSL, OpenSSL, AWS-LC in CI (#15367)c94ede9chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)67a8308chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)95018ffRelease the GIL in one-shot AEAD encrypt/decrypt (#15361)6954733Release the GIL during DH and DSA parameter generation (#15364)6893b94Import _serialization instead of serialization in x509/extensions (#15363)Updates
gitpythonfrom 3.1.46 to 3.1.58Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
30be45dprepare changelog for upcoming releasefc2f02cMerge pull request #2197 from Cyrus580529/shared-symlink-guardb10e250test: use the shared guard instead of local copiese3e5da8test: skip tests that need symlink privileges30d05e3test: add a shared symlink capability guard9a8f6feMerge pull request #2204 from gitpython-developers/security-fixesf2550b6Guard pathspec file inputs in high-level commandsd9ddb55Guard unsafe git init options9b5dcafGuard read-tree index output paths96a888fCheck joined short-option values before Git executionUpdates
httplib2from 0.31.0 to 0.32.0Changelog
Sourced from httplib2's changelog.
Commits
ba9bf50v0.32.0 release87581addecompression limited by size and ratio; require python 3.8+a99a11fv0.31.2 release370010adep-compat: pp.DelimitedList (camel case) only available in pyparsing>=3.16d2ea32v0.31.1 released1b0ce3auth: use pyparsing v3 PEP8-compliant method names3288ba7chore: harden publishing. use github attestationsUpdates
pillowfrom 12.1.0 to 12.3.0Release notes
Sourced from pillow's releases.
... (truncated)
Commits
bb1d8e812.3.0 version bumpe63fc48Add release notes for SBOM and performance improvements (#9747)13b701bAdd release notes for #96795564ca7List methodsa0920fdSpeed up ImageChops operations (#9738)07e9a6cSpeed upImage.filter()(#9736)a94578cSpeed upImage.getchannel(),Image.merge(),Image.putalpha()and `Image...53e02c4Speed upImage.fill(),Image.linear_gradient()and `Image.radial_gradient...af03747Speed upImage.resample()(#9739)5c9ca56Speed upalpha_composite,matrix,negative,quantize(#9740)Updates
sqlparsefrom 0.5.5 to 0.6.0Changelog
Sourced from sqlparse's changelog.
... (truncated)
Commits
2f40da9Update version number.5753f15Align the changelog entries for this release with previous onesb9588d9Unify the benchmark scripts on a shared harness519e416Pair comment/dollar-quote delimiters at the lexer positiona51df6dMeasure reindent offsets backwards to avoid quadratic CPU use73d9ccdUpdate CHANGELOGd1d8060Fix uncontrolled CPU consumption (ReDoS) in the lexer's handling of dollar-qu...ef2012aFix quadratic DoS in group_comments (GHSA-f2ff-p2ww-7p4p)26112ddUpdate Changelog.53ff44bEscape backslashes in output formatters.Updates
mlflowfrom 2.20.3 to 3.15.2Release notes
Sourced from mlflow's releases.
... (truncated)
Changelog
Sourced from mlflow's changelog.
... (truncated)
Commits
ca15da9Addbuild-docsworkflow for publishing release docs (#24857) (#25331)b2af107Bump version to 3.15.2 (#25327)e3efd50Backport runs.status constraint metadata alignment (#24890)878e786Backport MLFLOW_TRACE_ARCHIVAL_CONFIG delenv in workspace store testsc2e8848Pin litellm<1.97 in test-requirements for genai jobdd646e3Backport httpx2 lock assertion for unpinned openaidde2279Pin ag2<1 and litellm<1.97 to fix branch-3.15 CId5198d7Preserve base judge invocation flow in MemAlign aligned judges (#24883)fb67e7d[GenAI] Suppo...Description has been truncated