Skip to content

chore(deps)(deps): bump the python-versions group across 1 directory with 7 updates#950

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-0dadd71e52
Closed

chore(deps)(deps): bump the python-versions group across 1 directory with 7 updates#950
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-versions-0dadd71e52

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-versions group with 7 updates in the / directory:

Package From To
ruff 0.15.15 0.15.16
ipython 9.14.0 9.14.1
optuna 4.8.0 4.9.0
sphinx-autodoc-typehints 3.10.4 3.10.5
plotly 6.7.0 6.8.0
holidays 0.97 0.98
mlflow-skinny 3.12.0 3.13.0

Updates ruff from 0.15.15 to 0.15.16

Release notes

Sourced from ruff's releases.

0.15.16

Release Notes

Released on 2026-06-04.

Preview features

  • [flake8-async] Implement yield-in-context-manager-in-async-generator (ASYNC119) (#24644)
  • [pylint] Narrow diagnostic range and exclude cases without exception handlers (PLW0717) (#25440)
  • [ruff] Treat yield before break from a terminal loop as terminal (RUF075) (#25447)

Bug fixes

  • [eradicate] Avoid flagging ruff:ignore comments as code (ERA001) (#25537)
  • [eradicate] Fix ERA001/RUF100 conflict when noqa is on commented-out code (#25414)
  • [pyflakes] Avoid removing the format call when it would change behavior (F523) (#25320)
  • [pylint] Avoid syntax errors in invalid character replacements in f-strings before Python 3.12 (PLE2510, PLE2512, PLE2513, PLE2514, PLE2515) (#25544)
  • [pyupgrade] Avoid converting format calls with more kinds of side effects (UP032) (#25484)

Rule changes

  • [flake8-pytest-style] Avoid fixes for ambiguous argnames and argvalues combinations (PT006) (#24776)

Performance

  • Drop excess capacity from statement suites during parsing (#25368)

Documentation

  • [pydocstyle] Improve discoverability of rules enabled for each convention (#24973)
  • [ruff] Restore example code for Python versions before 3.15 (RUF017) (#25439)
  • Fix typo bin/activebin/activate in tutorial (#25473)

Other changes

  • Shrink additional parser AST collections (#25465)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.16

Released on 2026-06-04.

Preview features

  • [flake8-async] Implement yield-in-context-manager-in-async-generator (ASYNC119) (#24644)
  • [pylint] Narrow diagnostic range and exclude cases without exception handlers (PLW0717) (#25440)
  • [ruff] Treat yield before break from a terminal loop as terminal (RUF075) (#25447)

Bug fixes

  • [eradicate] Avoid flagging ruff:ignore comments as code (ERA001) (#25537)
  • [eradicate] Fix ERA001/RUF100 conflict when noqa is on commented-out code (#25414)
  • [pyflakes] Avoid removing the format call when it would change behavior (F523) (#25320)
  • [pylint] Avoid syntax errors in invalid character replacements in f-strings before Python 3.12 (PLE2510, PLE2512, PLE2513, PLE2514, PLE2515) (#25544)
  • [pyupgrade] Avoid converting format calls with more kinds of side effects (UP032) (#25484)

Rule changes

  • [flake8-pytest-style] Avoid fixes for ambiguous argnames and argvalues combinations (PT006) (#24776)

Performance

  • Drop excess capacity from statement suites during parsing (#25368)

Documentation

  • [pydocstyle] Improve discoverability of rules enabled for each convention (#24973)
  • [ruff] Restore example code for Python versions before 3.15 (RUF017) (#25439)
  • Fix typo bin/activebin/activate in tutorial (#25473)

Other changes

  • Shrink additional parser AST collections (#25465)

Contributors

Commits

Updates ipython from 9.14.0 to 9.14.1

Commits
  • 352c35b release 9.14.1
  • df72b1f Add forward compatibility for pdb.Pdb's mode argument (#15235)
  • a957d81 Handle pdb.Pdb mode argument and test signature compatibility
  • 3e1c054 ci: add zizmor GitHub Actions security analysis and harden workflows (#15238)
  • 0181ae3 ci: add zizmor GitHub Actions security analysis and harden workflows
  • fb831cc back to dev
  • See full diff in compare view

Updates optuna from 4.8.0 to 4.9.0

Release notes

Sourced from optuna's releases.

v4.9.0

This is the release note of v4.9.0.

Highlights

Enhance Multi-Objective Constrained Parallel Optimization in GPSampler

@​sawa3030 introduces parallelization enhancements to GPSampler, leveraging the Kriging Believer approach for constrained and multi-objective optimization (#6481). This improvement allows for more efficient exploration when multiple trials are running concurrently.

The GP surrogate is updated by assigning temporary objective function values ​​to the running trials.

For more technical details and benchmarks, please check out our blog post: Improving Optuna’s GPSampler Parallelization by Considering Running Trials.

Deprecate Several Features

The following features are deprecated in v4.9.0 and scheduled for removal in v6.0.0.

optuna

  • Several arguments in TPESampler (#6635)
    • prior_weight, consider_magic_clip, consider_endpoints, gamma, weights, hyperopt_parameters: These internal parameters are being deprecated to simplify the interface, as the default settings are optimal for most use cases.
    • warn_independent_sampling: Deprecated because TPESampler now robustly supports both independent and joint sampling, making this warning obsolete.
    • categorical_distance_func: This advanced feature will be migrated to OptunaHub in the future.
  • x0 and sigma0 options in CmaEsSampler (#6624)
    • These options have been deprecated because they require a deep understanding of CmaEsSampler's internals to be configured effectively.
  • optuna.terminator module (#6668)
    • This feature will be migrated to OptunaHub in the future.
  • RetryFailedTrialCallback (#6670)
    • This class has been renamed to RetryHeartbeatStaleTrialCallback to better reflect its behavior and avoid confusion with general trial retries (#6085).
  • optuna.integration module
    • The optuna.integration module currently acts as a shortcut to the external optuna_integration package for backward compatibility. Please import directly from the optuna_integration package going forward.

optuna-integration

  • PyCmaSampler: Please use Optuna's native CmaEsSampler instead.
  • CometCallback: This feature will be migrated to OptunaHub in the future.
  • MLflowCallback: This feature will be migrated to OptunaHub in the future.
  • TensorBoardCallback: This feature will be migrated to OptunaHub in the future.
  • TrackioCallback: This feature will be migrated to OptunaHub in the future.
  • WeightsAndBiasesCallback: This class has already been migrated to OptunaHub.

Breaking Changes

... (truncated)

Commits
  • 4db42e3 Merge pull request #6691 from c-bata/backport-v4.9-attestations
  • 6a15cf0 Add attestations: false to fix release workflow
  • a592e6c Merge pull request #6684 from c-bata/bump-up-to-v4.9.0
  • 490cfd6 Bump up to version number v4.9.0
  • 6135d54 Merge pull request #6651 from nabenabe0928/add-brute-force-info-to-grid-sampler
  • c41ec2d Merge remote-tracking branch 'upstream/master' into add-brute-force-info-to-g...
  • f845a8f Fix
  • 574749e Fix
  • af7fe8b Add note to best trial
  • b200bfb Update the NSGA-III doc
  • Additional commits viewable in compare view

Updates sphinx-autodoc-typehints from 3.10.4 to 3.10.5

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.10.5

What's Changed

New Contributors

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.10.4...3.10.5

Commits
  • bf535f6 🐛 fix(annotations): use class role for Ellipsis/NotImplementedType on 3.13+ (...
  • 9f50d8d [pre-commit.ci] pre-commit autoupdate (#706)
  • ac8ff5f process_signature: don't skip the first arg on bound instance methods (#705)
  • See full diff in compare view

Updates plotly from 6.7.0 to 6.8.0

Release notes

Sourced from plotly's releases.

v6.8.0

Added

  • Add optional font parameter for make_subplots [#5393], with thanks to @​Zomtir for the contribution!

Fixed

  • Fix issue where user-specified color_continuous_scale was ignored when template had autocolorscale=True [#5439], with thanks to @​antonymilne for the contribution!
  • Use presence of COLAB_NOTEBOOK_ID env var to enable Colab renderer instead of testing import of google.colab [#5473], with thanks to @​kevineger for the contribution!
  • Fix incorrect annotation placement for add_vline, add_hline, add_vrect, and add_hrect on datetime axes [#5508], with thanks to @​mosh3eb for the contribution!
  • Update tests to be compatible with numpy 2.4 [#5522], with thanks to @​thunze for the contribution!
  • Fix issue where js/ directory was unintentionally installed as a top-level Python package when installing plotly [#5587]
  • Add default headers to be passed in to Kaleido v1.3.0 to avoid blocked Open Street Map tiles [#5588]
  • Propagate the requested default_height/default_width to the outer wrapper div produced by to_html so that responsive (percentage) dimensions inherit from a sized parent container instead of collapsing to the plotly.js 450px fallback [#5591], with thanks to @​SharadhNaidu for the contribution!

Updated

  • The __eq__ method for graph_objects classes now returns NotImplemented to give the other operand an opportunity to handle the comparison [#5547], with thanks to @​RazerM for the contribution!
  • Update plotly.js from version 3.5.0 to version 3.6.0. See the plotly.js release notes for more information [#5608]. Notable changes include:
    • Add support for arrays for the pie property legendrank, so that it can be configured per slice [#7723]
    • Add hoversort layout attribute to sort unified hover label items by value [#7734]
Changelog

Sourced from plotly's changelog.

[6.8.0] - 2026-06-03

Added

  • Add optional font parameter for make_subplots [#5393], with thanks to @​Zomtir for the contribution!

Fixed

  • Fix issue where user-specified color_continuous_scale was ignored when template had autocolorscale=True [#5439], with thanks to @​antonymilne for the contribution!
  • Use presence of COLAB_NOTEBOOK_ID env var to enable Colab renderer instead of testing import of google.colab [#5473], with thanks to @​kevineger for the contribution!
  • Fix incorrect annotation placement for add_vline, add_hline, add_vrect, and add_hrect on datetime axes [#5508], with thanks to @​mosh3eb for the contribution!
  • Update tests to be compatible with numpy 2.4 [#5522], with thanks to @​thunze for the contribution!
  • Fix issue where js/ directory was unintentionally installed as a top-level Python package when installing plotly [#5587]
  • Add default headers to be passed in to Kaleido v1.3.0 to avoid blocked Open Street Map tiles [#5588]
  • Propagate the requested default_height/default_width to the outer wrapper div produced by to_html so that responsive (percentage) dimensions inherit from a sized parent container instead of collapsing to the plotly.js 450px fallback [#5591], with thanks to @​SharadhNaidu for the contribution!

Updated

  • The __eq__ method for graph_objects classes now returns NotImplemented to give the other operand an opportunity to handle the comparison [#5547], with thanks to @​RazerM for the contribution!
  • Update plotly.js from version 3.5.0 to version 3.6.0. See the plotly.js release notes for more information [#5608]. Notable changes include:
    • Add support for arrays for the pie property legendrank, so that it can be configured per slice [#7723]
    • Add hoversort layout attribute to sort unified hover label items by value [#7734]
Commits
  • ea4eca8 Address PR feedback
  • e57adbd Fix broken example
  • b8c2bf4 Update Jupyter Lab extension files
  • 2de1059 Update docs for release
  • f94e304 Version changes for v6.8.0
  • 7f2eb35 Merge pull request #5608 from plotly/cam/update-plotly.js-3.6.0
  • f57cf96 Update command to run npm install for updateplotlyjs
  • 1f26820 Update lock file
  • 8f699a3 chore: Update plotly.js to v3.6.0
  • f0755e5 Merge pull request #5605 from plotly/cam/pin-python-frontmatter
  • Additional commits viewable in compare view

Updates holidays from 0.97 to 0.98

Release notes

Sourced from holidays's releases.

v0.98

Version 0.98

Released June 1, 2026

New Contributors:

Full Changelog: vacanza/holidays@v0.97...v0.98

Changelog

Sourced from holidays's changelog.

Version 0.98

Released June 1, 2026

Commits

Updates mlflow-skinny from 3.12.0 to 3.13.0

Release notes

Sourced from mlflow-skinny's releases.

v3.13.0

MLflow 3.13.0 includes several major features and improvements

Major New Features

  • 🔐 Role-Based Access Control & Admin UI: A full RBAC system with reusable roles and workspace-scoped grants, plus a new web Admin UI for managing users, roles, and permissions on self-hosted MLflow.
  • 🗄️ Trace Retention & Auto Archival: Automatically move aged trace span data out of your SQL backend into object storage (e.g. S3) while keeping every trace fully readable in the UI and APIs.
  • 🤖 One-click observability & governance for coding agents: Onboard Claude Code, OpenAI Codex, or Gemini CLI to the AI Gateway in one click for tracing, usage tracking, budgets, and guardrails.
  • New engines for MLflow Assistant: Run MLflow Assistant on a local Ollama model, the OpenAI Codex CLI, or any MLflow AI Gateway endpoint, in addition to Claude Code.
  • ☸️ Helm chart for Kubernetes: An official, production-ready Helm chart for deploying the MLflow tracking server to any Kubernetes cluster.
  • 🌐 Hermes Agent support: Route the Hermes Agent runtime through the AI Gateway and capture its end-to-end traces in MLflow over OpenTelemetry.
  • 🪵 Span log levels: Python-logging-style severity levels on spans, with a "Minimum log level" filter in the trace UI to hide low-level noise.

Breaking Changes

  • The permission system has been overhauled into a unified Role-Based Access Control model. The legacy per-resource permission tables, REST endpoints, and client methods are removed and replaced by roles backed by role_permissions, default_permission now acts as a floor rather than an override, and a workspace USE grant is sufficient to create experiments and registered models. Code that relied on the old per-resource permission APIs must migrate to the new role-based APIs. (#22855, #22859, #22941, #23337, #23379, @​PattaraS)
  • MLServer is no longer available as a pyfunc serving backend. The previously deprecated enable_mlserver option has been removed, so mlflow models serve always uses the built-in scoring server. (#23356, @​harupy)
  • mlflow autolog claude no longer installs the old Python autolog hook; Claude Code tracing is now provided by the official Claude plugin, which must be installed separately. (#23339, @​B-Step62)
  • The default optimizer used by judge.align() is now MemAlign, so existing alignment workflows may produce different judges than before unless an optimizer is passed explicitly. (#23254, @​veronicalyu320)
  • Pointing the tracking or model registry store at a local file-system path now raises an error by default; set MLFLOW_ALLOW_FILE_STORE=true to keep using a file-based store. (#22773, @​harupy)

Other Assorted Features & Improvements:

... (truncated)

Changelog

Sourced from mlflow-skinny's changelog.

3.13.0 (2026-05-29)

MLflow 3.13.0 includes several major features and improvements

Major New Features

  • 🔐 Role-Based Access Control & Admin UI: A full RBAC system with reusable roles and workspace-scoped grants, plus a new web Admin UI for managing users, roles, and permissions on self-hosted MLflow.
  • 🗄️ Trace Retention & Auto Archival: Automatically move aged trace span data out of your SQL backend into object storage (e.g. S3) while keeping every trace fully readable in the UI and APIs.
  • 🤖 One-click observability & governance for coding agents: Onboard Claude Code, OpenAI Codex, or Gemini CLI to the AI Gateway in one click for tracing, usage tracking, budgets, and guardrails.
  • New engines for MLflow Assistant: Run MLflow Assistant on a local Ollama model, the OpenAI Codex CLI, or any MLflow AI Gateway endpoint, in addition to Claude Code.
  • ☸️ Helm chart for Kubernetes: An official, production-ready Helm chart for deploying the MLflow tracking server to any Kubernetes cluster.
  • 🌐 Hermes Agent support: Route the Hermes Agent runtime through the AI Gateway and capture its end-to-end traces in MLflow over OpenTelemetry.
  • 🪵 Span log levels: Python-logging-style severity levels on spans, with a "Minimum log level" filter in the trace UI to hide low-level noise.

Breaking Changes

  • The permission system has been overhauled into a unified Role-Based Access Control model. The legacy per-resource permission tables, REST endpoints, and client methods are removed and replaced by roles backed by role_permissions, default_permission now acts as a floor rather than an override, and a workspace USE grant is sufficient to create experiments and registered models. Code that relied on the old per-resource permission APIs must migrate to the new role-based APIs. (#22855, #22859, #22941, #23337, #23379, @​PattaraS)
  • MLServer is no longer available as a pyfunc serving backend. The previously deprecated enable_mlserver option has been removed, so mlflow models serve always uses the built-in scoring server. (#23356, @​harupy)
  • mlflow autolog claude no longer installs the old Python autolog hook; Claude Code tracing is now provided by the official Claude plugin, which must be installed separately. (#23339, @​B-Step62)
  • The default optimizer used by judge.align() is now MemAlign, so existing alignment workflows may produce different judges than before unless an optimizer is passed explicitly. (#23254, @​veronicalyu320)
  • Pointing the tracking or model registry store at a local file-system path now raises an error by default; set MLFLOW_ALLOW_FILE_STORE=true to keep using a file-based store. (#22773, @​harupy)

Other Assorted Features & Improvements:

... (truncated)

Commits
  • 8a77494 Cherry-pick #23486 (Kubernetes deployment guide) into branch-3.13 (#23698)
  • e2e8bb3 Bump version to 3.13.0 (#23675)
  • 0c83e30 Warn on submit with an unsaved direct-grant draft (#23612)
  • 6adeed3 Reword FileStore maintenance-mode error and document escape hatch (#23637)
  • c4e3fb7 Clarify trace archival max-traces behavior. (#23656)
  • f3d07f5 Clear archive-now requests for non-archivable leftovers (#23655)
  • a6fb0e2 docs: fix admonition rendering broken by Docusaurus 3.10 (#23635)
  • ae70af0 Refresh Claude Code tracing docs and split Claude Agent SDK page (#23633)
  • 6140716 docs: fix tip admonition rendering in tracing quickstart (#23557)
  • 0e85233 Forward MLflow client telemetry from inside Databricks workloads (#23483)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 7 updates

Bumps the python-versions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.15` | `0.15.16` |
| [ipython](https://github.com/ipython/ipython) | `9.14.0` | `9.14.1` |
| [optuna](https://github.com/optuna/optuna) | `4.8.0` | `4.9.0` |
| [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.10.4` | `3.10.5` |
| [plotly](https://github.com/plotly/plotly.py) | `6.7.0` | `6.8.0` |
| [holidays](https://github.com/vacanza/holidays) | `0.97` | `0.98` |
| [mlflow-skinny](https://github.com/mlflow/mlflow) | `3.12.0` | `3.13.0` |



Updates `ruff` from 0.15.15 to 0.15.16
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.15...0.15.16)

Updates `ipython` from 9.14.0 to 9.14.1
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.14.0...9.14.1)

Updates `optuna` from 4.8.0 to 4.9.0
- [Release notes](https://github.com/optuna/optuna/releases)
- [Commits](optuna/optuna@v4.8.0...v4.9.0)

Updates `sphinx-autodoc-typehints` from 3.10.4 to 3.10.5
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@3.10.4...3.10.5)

Updates `plotly` from 6.7.0 to 6.8.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v6.7.0...v6.8.0)

Updates `holidays` from 0.97 to 0.98
- [Release notes](https://github.com/vacanza/holidays/releases)
- [Changelog](https://github.com/vacanza/holidays/blob/dev/CHANGES.md)
- [Commits](vacanza/holidays@v0.97...v0.98)

Updates `mlflow-skinny` from 3.12.0 to 3.13.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.12.0...v3.13.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: ipython
  dependency-version: 9.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: optuna
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.10.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-versions
- dependency-name: plotly
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: holidays
  dependency-version: '0.98'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
- dependency-name: mlflow-skinny
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 9, 2026
@dependabot dependabot Bot requested a review from a team June 9, 2026 04:27
@sonarqubecloud

sonarqubecloud Bot commented Jun 9, 2026

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 10, 2026
@dependabot dependabot Bot deleted the dependabot/uv/python-versions-0dadd71e52 branch June 10, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants