Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

infra: bump the dev-dependencies group across 4 directories with 7 updates #317

Closed
wants to merge 1 commit into from
Closed

infra: bump the dev-dependencies group across 4 directories with 7 updates #317

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025 •
edited
Loading

Bumps the dev-dependencies group with 1 update in the / directory: boto3.
Bumps the dev-dependencies group with 5 updates in the /base/jobs/docker/1.0/py3 directory:

Package From To
boto3 1.35.82 1.35.98
awscli 1.36.23 1.36.39
botocore 1.35.82 1.35.98
scikit-learn 1.6.0 1.6.1
scipy 1.14.1 1.15.1

Bumps the dev-dependencies group with 7 updates in the /pytorch/jobs/docker/2.2/py3 directory:

Package From To
boto3 1.35.82 1.35.98
awscli 1.36.23 1.36.39
botocore 1.35.82 1.35.98
scikit-learn 1.6.0 1.6.1
scipy 1.14.1 1.15.1
jinja2 3.1.4 3.1.5
pydantic 2.10.3 2.10.5

Bumps the dev-dependencies group with 7 updates in the /tensorflow/jobs/docker/2.14/py3 directory:

Package From To
boto3 1.35.82 1.35.98
awscli 1.36.23 1.36.39
botocore 1.35.82 1.35.98
scikit-learn 1.6.0 1.6.1
scipy 1.14.1 1.15.1
jinja2 3.1.4 3.1.5
pydantic 2.10.3 2.10.5

Updates boto3 from 1.35.82 to 1.35.98

Commits
  • 3902cc2 Merge branch 'release-1.35.98'
  • 66657ad Bumping version to 1.35.98
  • 177fa3b Add changelog entries from botocore
  • 4673c59 Merge branch 'release-1.35.97'
  • 4088aef Merge branch 'release-1.35.97' into develop
  • 7b9ebbb Bumping version to 1.35.97
  • e28898c Add changelog entries from botocore
  • 72c953c Merge branch 'release-1.35.96'
  • 28fc5bb Merge branch 'release-1.35.96' into develop
  • 15f3198 Bumping version to 1.35.96
  • Additional commits viewable in compare view

Updates boto3 from 1.35.82 to 1.35.98

Commits
  • 3902cc2 Merge branch 'release-1.35.98'
  • 66657ad Bumping version to 1.35.98
  • 177fa3b Add changelog entries from botocore
  • 4673c59 Merge branch 'release-1.35.97'
  • 4088aef Merge branch 'release-1.35.97' into develop
  • 7b9ebbb Bumping version to 1.35.97
  • e28898c Add changelog entries from botocore
  • 72c953c Merge branch 'release-1.35.96'
  • 28fc5bb Merge branch 'release-1.35.96' into develop
  • 15f3198 Bumping version to 1.35.96
  • Additional commits viewable in compare view

Updates awscli from 1.36.23 to 1.36.39

Commits
  • 453f2b9 Merge branch 'release-1.36.39'
  • 07fddce Bumping version to 1.36.39
  • 8f19e75 Update changelog based on model updates
  • 629f33b Merge branch 'release-1.36.38'
  • a63bbc4 Merge branch 'release-1.36.38' into develop
  • 8ca2e5a Bumping version to 1.36.38
  • bfda5d1 Update changelog based on model updates
  • f836ad2 Merge pull request #9178 from elysahall/awsdocs-12-23-24-p2
  • 3006a70 Merge pull request #9180 from elysahall/awsdocs-12-30-24-p2
  • 70de5b4 Merge branch 'release-1.36.37'
  • Additional commits viewable in compare view

Updates botocore from 1.35.82 to 1.35.98

Commits
  • accadd6 Merge branch 'release-1.35.98'
  • 323aa12 Bumping version to 1.35.98
  • 3b2ac97 Update endpoints model
  • 951fb2a Update to latest models
  • cebd1c3 Merge branch 'release-1.35.97'
  • c4cee22 Merge branch 'release-1.35.97' into develop
  • f950c93 Bumping version to 1.35.97
  • e66f100 Update endpoints model
  • c441f30 Update to latest models
  • 48d0701 Merge branch 'release-1.35.96'
  • Additional commits viewable in compare view

Updates scikit-learn from 1.6.0 to 1.6.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.6.1

We're happy to announce the 1.6.1 release.

This release contains fixes for a few regressions introduced in 1.6.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.6.html#version-1-6-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • f159b78 trigger wheel builder [cd build]
  • 73cca70 generate changelog
  • afaa070 bump version
  • 1f43fd2 DOC: Updates to Macro vs micro-averaging in plot_roc.py (#29845)
  • ea8a725 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#30593)
  • bc291f1 🔒 🤖 CI Update lock files for scipy-dev CI build(s) 🔒 🤖 ...
  • f5f2b9c 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • acbb862 TST Fix doctest due to GradientBoostingClassifier difference with scipy 1.15 ...
  • 42831e5 FIX warn if an estimator does have a concrete sklearn_tags implementation...
  • 0d2ce43 FIX change FutureWarnings to DeprecationWarnings for the tags (#30573)
  • Additional commits viewable in compare view

Updates scipy from 1.14.1 to 1.15.1

Release notes

Sourced from scipy's releases.

SciPy 1.15.1 Release Notes

SciPy 1.15.1 is a bug-fix release with no new features compared to 1.15.0. Importantly, an issue with the import of scipy.optimize breaking other packages has been fixed.

Authors

  • Name (commits)
  • Ralf Gommers (3)
  • Rohit Goswami (1)
  • Matt Haberland (2)
  • Tyler Reddy (7)
  • Daniel Schmitz (1)

A total of 5 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

SciPy 1.15.0 Release Notes

SciPy 1.15.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.15.x branch, and on adding new features on the main branch.

This release requires Python 3.10-3.13 and NumPy 1.23.5 or greater.

Highlights of this release

  • Sparse arrays are now fully functional for 1-D and 2-D arrays. We recommend that all new code use sparse arrays instead of sparse matrices and that developers start to migrate their existing code from sparse matrix to sparse array: migration_to_sparray. Both sparse.linalg and sparse.csgraph work with either sparse matrix or sparse array and work internally with sparse array.
  • Sparse arrays now provide basic support for n-D arrays in the COO format

... (truncated)

Commits
  • df134ea REL: 1.15.1 rel commit [wheel build]
  • f939c19 Merge pull request #22296 from tylerjereddy/treddy_1.15.1_backports
  • 609bb3c DOC: PR 22296 revisions
  • 5bfd6a2 TST: stats.Normal: bump tolerance on test of logcdf (#22276)
  • f9a549c DOC: update 1.15.1 relnotes
  • 6f011d8 MAINT: Update highs subproject commit
  • 0ff01de TST: fix thread safety issue in interpolate.bsplines memmap test
  • 21c65ab BLD: fix some issues with undeclared internal build dependencies
  • 826759e MAINT: fix url for array-api-extra git submodule
  • 9af1fcd Merge pull request #22235 from tylerjereddy/treddy_prep_1.15.1
  • Additional commits viewable in compare view

Updates boto3 from 1.35.82 to 1.35.98

Commits
  • 3902cc2 Merge branch 'release-1.35.98'
  • 66657ad Bumping version to 1.35.98
  • 177fa3b Add changelog entries from botocore
  • 4673c59 Merge branch 'release-1.35.97'
  • 4088aef Merge branch 'release-1.35.97' into develop
  • 7b9ebbb Bumping version to 1.35.97
  • e28898c Add changelog entries from botocore
  • 72c953c Merge branch 'release-1.35.96'
  • 28fc5bb Merge branch 'release-1.35.96' into develop
  • 15f3198 Bumping version to 1.35.96
  • Additional commits viewable in compare view

Updates awscli from 1.36.23 to 1.36.39

Commits
  • 453f2b9 Merge branch 'release-1.36.39'
  • 07fddce Bumping version to 1.36.39
  • 8f19e75 Update changelog based on model updates
  • 629f33b Merge branch 'release-1.36.38'
  • a63bbc4 Merge branch 'release-1.36.38' into develop
  • 8ca2e5a Bumping version to 1.36.38
  • bfda5d1 Update changelog based on model updates
  • f836ad2 Merge pull request #9178 from elysahall/awsdocs-12-23-24-p2
  • 3006a70 Merge pull request #9180 from elysahall/awsdocs-12-30-24-p2
  • 70de5b4 Merge branch 'release-1.36.37'
  • Additional commits viewable in compare view

Updates botocore from 1.35.82 to 1.35.98

Commits
  • accadd6 Merge branch 'release-1.35.98'
  • 323aa12 Bumping version to 1.35.98
  • 3b2ac97 Update endpoints model
  • 951fb2a Update to latest models
  • cebd1c3 Merge branch 'release-1.35.97'
  • c4cee22 Merge branch 'release-1.35.97' into develop
  • f950c93 Bumping version to 1.35.97
  • e66f100 Update endpoints model
  • c441f30 Update to latest models
  • 48d0701 Merge branch 'release-1.35.96'
  • Additional commits viewable in compare view

Updates scikit-learn from 1.6.0 to 1.6.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.6.1

We're happy to announce the 1.6.1 release.

This release contains fixes for a few regressions introduced in 1.6.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.6.html#version-1-6-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • f159b78 trigger wheel builder [cd build]
  • 73cca70 generate changelog
  • afaa070 bump version
  • 1f43fd2 DOC: Updates to Macro vs micro-averaging in plot_roc.py (#29845)
  • ea8a725 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#30593)
  • bc291f1 🔒 🤖 CI Update lock files for scipy-dev CI build(s) 🔒 🤖 ...
  • f5f2b9c 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • acbb862 TST Fix doctest due to GradientBoostingClassifier difference with scipy 1.15 ...
  • 42831e5 FIX warn if an estimator does have a concrete sklearn_tags implementation...
  • 0d2ce43 FIX change FutureWarnings to DeprecationWarnings for the tags (#30573)
  • Additional commits viewable in compare view

Updates scipy from 1.14.1 to 1.15.1

Release notes

Sourced from scipy's releases.

SciPy 1.15.1 Release Notes

SciPy 1.15.1 is a bug-fix release with no new features compared to 1.15.0. Importantly, an issue with the import of scipy.optimize breaking other packages has been fixed.

Authors

  • Name (commits)
  • Ralf Gommers (3)
  • Rohit Goswami (1)
  • Matt Haberland (2)
  • Tyler Reddy (7)
  • Daniel Schmitz (1)

A total of 5 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

SciPy 1.15.0 Release Notes

SciPy 1.15.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.15.x branch, and on adding new features on the main branch.

This release requires Python 3.10-3.13 and NumPy 1.23.5 or greater.

Highlights of this release

  • Sparse arrays are now fully functional for 1-D and 2-D arrays. We recommend that all new code use sparse arrays instead of sparse matrices and that developers start to migrate their existing code from sparse matrix to sparse array: migration_to_sparray. Both sparse.linalg and sparse.csgraph work with either sparse matrix or sparse array and work internally with sparse array.
  • Sparse arrays now provide basic support for n-D arrays in the COO format

... (truncated)

Commits
  • df134ea REL: 1.15.1 rel commit [wheel build]
  • f939c19 Merge pull request #22296 from tylerjereddy/treddy_1.15.1_backports
  • 609bb3c DOC: PR 22296 revisions
  • 5bfd6a2 TST: stats.Normal: bump tolerance on test of logcdf (#22276)
  • f9a549c DOC: update 1.15.1 relnotes
  • 6f011d8 MAINT: Update highs subproject commit
  • 0ff01de TST: fix thread safety issue in interpolate.bsplines memmap test
  • 21c65ab BLD: fix some issues with undeclared internal build dependencies
  • 826759e MAINT: fix url for array-api-extra git submodule
  • 9af1fcd Merge pull request #22235 from tylerjereddy/treddy_prep_1.15.1
  • Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scientific notation. #1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
  • Fix copy/pickle support for the internal missing object. #2027
  • Environment.overlay(enable_async) is applied correctly. #2061
  • The error message from FileSystemLoader includes the paths that were searched. #1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
  • Improve annotations for methods returning copies. #1880
  • urlize does not add mailto: to values like @a@b. #1870
  • Tests decorated with @pass_context can be used with the |select filter. #1624
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253
Changelog

Sourced from jinja2's changelog.

Version 3.1.5

Released 2024-12-21

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
  • Calling sync render for an async template uses asyncio.run. :pr:1952
  • Avoid unclosed auto_aiter warnings. :pr:1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
  • The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
  • |int filter handles OverflowError from scientific notation. :issue:1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
  • Fix copy/pickle support for the internal missing object. :issue:2027
  • Environment.overlay(enable_async) is applied correctly. :pr:2061
  • The error message from FileSystemLoader includes the paths that were searched. :issue:1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
  • Improve annotations for methods returning copies. :pr:1880
  • urlize does not add mailto: to values like @a@b. :pr:1870
  • Tests decorated with @pass_context`` can be used with the ``|select`` filter. :issue:1624`
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. :issue:1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. :issue:1253
Commits
  • 877f6e5 release version 3.1.5
  • 8d58859 remove test pypi
  • eda8fe8 update dev dependencies
  • c8fdce1 Fix bug involving calling set on a template parameter within all branches of ...
  • 66587ce Fix bug where set would sometimes fail within if
  • fbc3a69 Add support for namespaces in tuple parsing (#1664)
  • b8f4831 more comments about nsref assignment
  • ee83219 Add support for namespaces in tuple assignment
  • 1d55cdd Triple quotes in docs (#2064)
  • 8a8eafc edit block assignment section
  • Additional commits viewable in compare view

Updates pydantic from 2.10.3 to 2.10.5

Release notes

Sourced from pydantic's releases.

v2.10.5 2024-12-18

v2.10.5 (2025-01-08)

What's Changed

v2.10.4 2024-12-18

What's Changed

Packaging

Fixes

New Contributors

Full Changelog: pydantic/pydantic@v2.10.3...v2.10.4

Changelog

Sourced from pydantic's changelog.

v2.10.5 (2025-01-08)

GitHub release

What's Changed

v2.10.4 (2024-12-18)

GitHub release

What's Changed

Packaging

Fixes

New Contributors

Commits

Updates boto3 from 1.35.82 to 1.35.98

Commits
  • 3902cc2 Merge branch 'release-1.35.98'
  • 66657ad Bumping version to 1.35.98
  • 177fa3b Add changelog entries from botocore
  • 4673c59 Merge branch 'release-1.35.97'
  • 4088aef Merge branch 'release-1.35.97' into develop
  • 7b9ebbb Bumping version to 1.35.97
  • e28898c Add changelog entries from botocore
  • 72c953c Merge branch 'release-1.35.96'
  • 28fc5bb Merge branch 'release-1.35.96' into develop
  • 15f3198 Bumping version to 1.35.96
  • Additional commits viewable in compare view

Updates awscli from 1.36.23 to 1.36.39

Commits
  • 453f2b9 Merge branch 'release-1.36.39'
  • 07fddce Bumping version to 1.36.39
  • 8f19e75 Update changelog based on model updates
  • 629f33b Merge branch 'release-1.36.38'
  • a63bbc4 Merge branch 'release-1.36.38' into develop
  • 8ca2e5a Bumping version to 1.36.38
  • bfda5d1 Update changelog based on model updates
  • f836ad2 Merge pull request #9178 from elysahall/awsdocs-12-23-24-p2
  • 3006a70 Merge pull request #9180 from elysahall/awsdocs-12-30-24-p2
  • 70de5b4 Merge branch 'release-1.36.37'
  • Additional commits viewable in compare view

Updates botocore from 1.35.82 to 1.35.98

Commits
  • accadd6 Merge branch 'release-1.35.98'
  • 323aa12 Bumping version to 1.35.98
  • 3b2ac97 Update endpoints model
  • 951fb2a Update to latest models
  • cebd1c3 Merge branch 'release-1.35.97'
  • c4cee22 Merge branch 'release-1.35.97' into develop
  • f950c93 Bumping version to 1.35.97
  • e66f100 Update endpoints model
  • c441f30 Update to latest models
  • 48d0701 Merge branch 'release-1.35.96'
  • Additional commits viewable in compare view

Updates scikit-learn from 1.6.0 to 1.6.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.6.1

We're happy to announce the 1.6.1 release.

This release contains fixes for a few regressions introduced in 1.6.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.6.html#version-1-6-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • f159b78 trigger wheel builder [cd build]
  • 73cca70 generate changelog
  • afaa070 bump version
  • 1f43fd2 DOC: Updates to Macro vs micro-averaging in plot_roc.py (#29845)
  • ea8a725 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#30593)
  • bc291f1 🔒 🤖 CI Update lock files for scipy-dev CI build(s) 🔒 🤖 ...
  • f5f2b9c 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • acbb862 TST Fix doctest due to GradientBoostingClassifier difference with scipy 1.15 ...
  • 42831e5 FIX warn if an estimator does have a concrete sklearn_tags implementation...
  • 0d2ce43 FIX change FutureWarnings to DeprecationWarnings for the tags (#30573)
  • Additional commits viewable in compare view

Updates scipy from 1.14.1 to 1.15.1

Release notes

Sourced from scipy's releases.

SciPy 1.15.1 Release Notes

SciPy 1.15.1 is a bug-fix release with no new features compared to 1.15.0. Importantly, an issue with the import of scipy.optimize breaking other packages has been fixed.

Authors

  • Name (commits)
  • Ralf Gommers (3)
  • Rohit Goswami (1)
  • Matt Haberland (2)
  • Tyler Reddy (7)
  • Daniel Schmitz (1)

A total of 5 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

SciPy 1.15.0 Release Notes

SciPy 1.15.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.15.x branch, and on adding new features on the main branch.

This release requires Python 3.10-3.13 and NumPy 1.23.5 or greater.

Highlights of this release

  • Sparse arrays are now fully functional for 1-D and 2-D arrays. We recommend that all new code use sparse arrays instead of sparse matrices and that developers start to migrate their existing code from sparse matrix to sparse array: migration_to_sparray. Both sparse.linalg and sparse.csgraph work with either sparse matrix or sparse array and work internally with sparse array.
  • Sparse arrays now provide basic support for n-D arrays in the COO format

... (truncated)

Commits
  • df134ea REL: 1.15.1 rel commit [wheel build]
  • f939c19 Merge pull request #22296 from tylerjereddy/treddy_1.15.1_backports
  • 609bb3c DOC: PR 22296 revisions
  • 5bfd6a2 TST: stats.Normal: bump tolerance on test of logcdf (#22276)
  • f9a549c DOC: update 1.15.1 relnotes
  • 6f011d8 MAINT: Update highs subproject commit
  • 0ff01de TST: fix thread safety issue in interpolate.bsplines memmap test
  • 21c65ab BLD: fix some issues with undeclared internal build dependencies
  • 826759e MAINT: fix url for array-api-extra git submodule
  • 9af1fcd Merge pull request #22235 from tylerjereddy/treddy_prep_1.15.1
  • Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scienti...

    Description has been truncated

@dependabot
infra: bump the dev-dependencies group across 4 directories with 7 up…
5c2c884 
…dates

Bumps the dev-dependencies group with 1 update in the / directory: [boto3](https://github.com/boto/boto3).
Bumps the dev-dependencies group with 5 updates in the /base/jobs/docker/1.0/py3 directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.35.82` | `1.35.98` |
| [awscli](https://github.com/aws/aws-cli) | `1.36.23` | `1.36.39` |
| [botocore](https://github.com/boto/botocore) | `1.35.82` | `1.35.98` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.0` | `1.6.1` |
| [scipy](https://github.com/scipy/scipy) | `1.14.1` | `1.15.1` |

Bumps the dev-dependencies group with 7 updates in the /pytorch/jobs/docker/2.2/py3 directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.35.82` | `1.35.98` |
| [awscli](https://github.com/aws/aws-cli) | `1.36.23` | `1.36.39` |
| [botocore](https://github.com/boto/botocore) | `1.35.82` | `1.35.98` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.0` | `1.6.1` |
| [scipy](https://github.com/scipy/scipy) | `1.14.1` | `1.15.1` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.10.3` | `2.10.5` |

Bumps the dev-dependencies group with 7 updates in the /tensorflow/jobs/docker/2.14/py3 directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.35.82` | `1.35.98` |
| [awscli](https://github.com/aws/aws-cli) | `1.36.23` | `1.36.39` |
| [botocore](https://github.com/boto/botocore) | `1.35.82` | `1.35.98` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.0` | `1.6.1` |
| [scipy](https://github.com/scipy/scipy) | `1.14.1` | `1.15.1` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.10.3` | `2.10.5` |



Updates `boto3` from 1.35.82 to 1.35.98
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.82...1.35.98)

Updates `boto3` from 1.35.82 to 1.35.98
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.82...1.35.98)

Updates `awscli` from 1.36.23 to 1.36.39
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](aws/aws-cli@1.36.23...1.36.39)

Updates `botocore` from 1.35.82 to 1.35.98
- [Commits](boto/botocore@1.35.82...1.35.98)

Updates `scikit-learn` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.6.0...1.6.1)

Updates `scipy` from 1.14.1 to 1.15.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.14.1...v1.15.1)

Updates `boto3` from 1.35.82 to 1.35.98
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.82...1.35.98)

Updates `awscli` from 1.36.23 to 1.36.39
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](aws/aws-cli@1.36.23...1.36.39)

Updates `botocore` from 1.35.82 to 1.35.98
- [Commits](boto/botocore@1.35.82...1.35.98)

Updates `scikit-learn` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.6.0...1.6.1)

Updates `scipy` from 1.14.1 to 1.15.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.14.1...v1.15.1)

Updates `jinja2` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.5)

Updates `pydantic` from 2.10.3 to 2.10.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.10.3...v2.10.5)

Updates `boto3` from 1.35.82 to 1.35.98
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.82...1.35.98)

Updates `awscli` from 1.36.23 to 1.36.39
- [Release notes](https://github.com/aws/aws-cli/releases)
- [Commits](aws/aws-cli@1.36.23...1.36.39)

Updates `botocore` from 1.35.82 to 1.35.98
- [Commits](boto/botocore@1.35.82...1.35.98)

Updates `scikit-learn` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.6.0...1.6.1)

Updates `scipy` from 1.14.1 to 1.15.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.14.1...v1.15.1)

Updates `jinja2` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.5)

Updates `pydantic` from 2.10.3 to 2.10.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.10.3...v2.10.5)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: awscli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scikit-learn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scipy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: awscli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scikit-learn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scipy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: awscli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scikit-learn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: scipy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner January 13, 2025 23:27
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 13, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 20, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 20, 2025
@dependabot dependabot bot deleted the dependabot/pip/dev-dependencies-5aa0b6b4b8 branch January 20, 2025 23:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants