Skip to content

build(deps): bump the pip-dependencies group across 1 directory with 6 updates - #3305

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/pip-dependencies-f96bd860f2
Open

build(deps): bump the pip-dependencies group across 1 directory with 6 updates#3305
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/pip-dependencies-f96bd860f2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-dependencies group with 6 updates in the /docker directory:

Package From To
geopandas 1.1.3 1.1.4
jupyterlab 4.6.2 4.6.3
jupyterlab-widgets 3.0.16 3.0.17
pandas 2.3.3 3.0.5
pydeck 0.9.2 0.9.3
rasterio 1.5.0 1.5.1

Updates geopandas from 1.1.3 to 1.1.4

Release notes

Sourced from geopandas's releases.

Version 1.1.4

What's Changed

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Full Changelog: geopandas/geopandas@v1.1.3...v1.1.4

Changelog

Sourced from geopandas's changelog.

Version 1.1.4 (June 26, 2026)

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).
Commits
  • 91ec4af RLS: v1.1.4
  • b5d685f DOC: add changelog for 1.1.4
  • 158d993 BUG: further to_postgis hardening (#3800)
  • ce95930 BUG: honor legend_kwds["labels"] for categorical and boolean columns in explo...
  • 22bf845 BUG: overlay with empty input handles keep geom dtype gracefully (#3745)
  • 866a7f0 BUG: ensure that points from random sampling are not sorted (#3773)
  • 76b16ca DOC: update Code of Conduct reporting form link (#3794)
  • 3a04a5c switch to NumFOCUS Code of Conduct (#3671)
  • 6fedb19 BLD: setuptools 77+ required for PEP 639 support (#3746)
  • See full diff in compare view

Updates jupyterlab from 4.6.2 to 4.6.3

Release notes

Sourced from jupyterlab's releases.

v4.6.3

4.6.3

(Full Changelog)

Bugs fixed

  • Fix Shift-click cell selection after editor text selection #19243 (@​MUFFANUJ)
  • Fix active cell prompt and source blink in notebook tools & prevent a memory leak #19168 (@​MUFFANUJ)
  • Update the item positions when an item is removed from reactive toolbar #19227 (@​brichet)
  • Fix variable inspection, document autocomplete and variable inspect/render #19234 (@​krassowski)
  • Show "starting" rather than "idle" status when changing kernel via SessionContext.changeKernel() #19166 (@​Zsailer)

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​brichet (activity) | @​jtpio (activity) | @​krassowski (activity) | @​MUFFANUJ (activity) | @​Zsailer (activity)

Commits
  • e7255a9 [ci skip] Publish 4.6.3
  • 08c20a1 Backport PR #19243 on branch 4.6.x (Fix Shift-click cell selection after edit...
  • 4e08e0d Backport PR #19168 on branch 4.6.x (Fix active cell prompt and source blink i...
  • 9653490 Backport PR #19227 on branch 4.6.x (Update the item positions when an item is...
  • 243ee01 Backport PR #19234 on branch 4.6.x (Fix variable inspection, document autocom...
  • 9b7efed Backport PR #19166 on branch 4.6.x (Show "starting" rather than "idle" status...
  • edc8390 Backport PR #19212 on branch 4.6.x (Update JEP 91 link to the new MyST docs U...
  • 4cffbed Backport PR #19204 on branch 4.6.x (Update Altair snapshot) (#19205)
  • 7d0f5b6 Backport PR #19193 on branch 4.6.x (Switch pre-commit to language: system) ...
  • See full diff in compare view

Updates jupyterlab-widgets from 3.0.16 to 3.0.17

Commits

Updates pandas from 2.3.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.3

We are pleased to announce the release of pandas 3.0.3. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

... (truncated)

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates pydeck from 0.9.2 to 0.9.3

Commits

Updates rasterio from 1.5.0 to 1.5.1

Release notes

Sourced from rasterio's releases.

1.5.1

Version 1.5.1 fixes a number of bugs and unblocks the release of affine 3.0.0.

Thanks for being patient, folks! It's a weird time in the open source software world.

Bug fixes

  • DatasetBase.__dealloc__ has been removed and replaced by a __del__ method modeled after that of io.IOBase. This eliminates cryptic partial error messages from being printed as rio-calc finishes and finalizes (gh-3612).
  • The "bbox" attribute of GeoJSON data is no longer used by features.bounds() when optional parameters (transform and/or north_up=False) are provided. An unreported bug where transformation matrices were not applied to feature and geometry collections has also been fixed (gh-3609).
  • The size guard in sieve() was defective for 3D sources and has been fixed (gh-3606). As a side benefit, the dimensionality of output has been made consistent with the read() method of datasets: 3D output is no longer automatically squeezed to 2D. The previous behavior was a bug.
  • A test of subdataset support is skipped for GDAL versions >= 3.13.0 (gh-3534). The most recent versions of GDAL have a netCDF filename parsing defect.
  • Acknowledge new runtime warnings about invalid type casting using numpy (gh-3599).
  • Acknowledge the Python deprecation warnings from using "fork" start mode in testing warp error propagation (gh-3600).
  • Eliminate numpy deprecation warnings by reshaping views instead of setting their shape attributes (gh-3592).
  • Require pyparsing version >= 3.0 to eliminate a deprecation warning for use of parseString (gh-3551).
  • Remove a dependency on unmainted cligj by bringing some CLI options back into Rasterio (gh-3550).
  • Avoid a ValueError in reproject() when using a "==" comparison between array masks and np.ma.nomasked (gh-3531).

Documentation

  • Note that PROJ transformation grids and the PROJ_NETWORK environment variable are required to apply vertical (datum) shifts when reprojecting or transforming (gh-2929).

Dependencies

  • Rasterio 1.5.1 is compatible with affine versions 3.0rc1 and newer.

Packaging:

  • Wheels include GDAL 3.12.4, netCDF 4.10.1, cURL 8.20.0, and PROJ 9.8.1. Python 3.15 is supported for the first time.
Changelog

Sourced from rasterio's changelog.

1.5.1 (2026-08-07)

Bug fixes:

  • DatasetBase.dealloc has been removed and replaced by a del method modeled after that of io.IOBase. This eliminates cryptic partial error messages from being printed as rio-calc finishes and finalizes (gh-3612).
  • The "bbox" attribute of GeoJSON data is no longer used by features.bounds() when optional parameters (transform and/or north_up=False) are provided. An unreported bug where transformation matrices were not applied to feature and geometry collections has also been fixed (gh-3609).
  • The size guard in sieve() was defective for 3D sources and has been fixed (gh-3606). As a side benefit, the dimensionality of output has been made consistent with the read() method of datasets: 3D output is no longer automatically squeezed to 2D. The previous behavior was a bug.
  • A test of subdataset support is skipped for GDAL versions >= 3.13.0 (gh-3534). The most recent versions of GDAL have a NetCDF filename parsing defect.
  • Acknowledge new runtime warnings about invalid type casting using numpy (gh-3599).
  • Acknowledge the Python deprecation warnings from using "fork" start mode in testing warp error propagation (gh-3600).
  • Eliminate numpy deprecation warnings by reshaping views instead of setting their shape attributes (gh-3592).
  • Require pyparsing version >= 3.0 to eliminate a deprecation warning for use of parseString (gh-3551).
  • Remove a dependency on unmaintained cligj by bringing some CLI options back into Rasterio (gh-3550).
  • Avoid a ValueError in reproject() when using a "==" comparison between array masks and np.ma.nomasked (gh-3531).

Documentation:

  • Note that PROJ transformation grids and the PROJ_NETWORK environment variable are required to apply vertical (datum) shifts when reprojecting or transforming (gh-2929).

Dependencies:

  • Rasterio 1.5.1 is compatible with affine versions 3.0rc1 and newer.

Packaging:

  • Wheels include GDAL 3.12.4, netCDF 4.10.1, cURL 8.20.0, and PROJ 9.8.1.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the pip-dependencies group across 1 directory with …
c03a47d 
…6 updates

Bumps the pip-dependencies group with 6 updates in the /docker directory:

| Package | From | To |
| --- | --- | --- |
| [geopandas](https://github.com/geopandas/geopandas) | `1.1.3` | `1.1.4` |
| [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.6.2` | `4.6.3` |
| [jupyterlab-widgets](https://github.com/jupyter-widgets/ipywidgets) | `3.0.16` | `3.0.17` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.3` | `3.0.5` |
| [pydeck](https://github.com/visgl/deck.gl) | `0.9.2` | `0.9.3` |
| [rasterio](https://github.com/rasterio/rasterio) | `1.5.0` | `1.5.1` |



Updates `geopandas` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/v1.1.4/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.3...v1.1.4)

Updates `jupyterlab` from 4.6.2 to 4.6.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.6.2...@jupyterlab/lsp@4.6.3)

Updates `jupyterlab-widgets` from 3.0.16 to 3.0.17
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](https://github.com/jupyter-widgets/ipywidgets/commits)

Updates `pandas` from 2.3.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.5)

Updates `pydeck` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](https://github.com/visgl/deck.gl/commits)

Updates `rasterio` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/rasterio/rasterio/releases)
- [Changelog](https://github.com/rasterio/rasterio/blob/main/CHANGES.txt)
- [Commits](rasterio/rasterio@1.5.0...1.5.1)

---
updated-dependencies:
- dependency-name: geopandas
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: jupyterlab
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: jupyterlab-widgets
  dependency-version: 3.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-dependencies
- dependency-name: pydeck
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: rasterio
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from jiayuasu as a code owner September 1, 2026 00:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jiayuasu jiayuasu Awaiting requested review from jiayuasu jiayuasu is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants