Skip to content

Bump the dependabot group with 4 updates#470

Merged
kralka merged 1 commit intomainfrom
dependabot/pip/dependabot-b2fac6c59a
Feb 2, 2026
Merged

Bump the dependabot group with 4 updates#470
kralka merged 1 commit intomainfrom
dependabot/pip/dependabot-b2fac6c59a

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps the dependabot group with 4 updates: absl-py, numpy, pip and wrapt.

Updates absl-py from 2.3.1 to 2.4.0

Release notes

Sourced from absl-py's releases.

v2.4.0

Added

  • Added support for Python 3.14.
  • Allow $PYTHONBREAKPOINT to affect runcall and post_mortem debugging.
  • (logging) Propagate **kwargs in conditional/rate-limited logging functions.

Changed

  • Dropped support for Python 3.8 and 3.9.
  • (flags) Change internals of absl.flags.get_help_width() implementation.
  • (cleanup) Modernize Bazel setup with MODULE.bazel.
  • (cleanup) Modernize type annotations using Python 3.10+ features.

Fixed

  • (flags) Fix duplicate flag definition when reloading a module.
  • (typechecking) Correct type signature of absltest.skipThisClass.
Changelog

Sourced from absl-py's changelog.

2.4.0 (2026-01-28)

Added

  • Added support for Python 3.14.
  • Allow $PYTHONBREAKPOINT to affect runcall and post_mortem debugging.
  • (logging) Propagate **kwargs in conditional/rate-limited logging functions.

Changed

  • Dropped support for Python 3.8 and 3.9.
  • (flags) Change internals of absl.flags.get_help_width() implementation.
  • (cleanup) Modernize Bazel setup with MODULE.bazel.
  • (cleanup) Modernize type annotations using Python 3.10+ features.

Fixed

  • (flags) Fix duplicate flag definition when reloading a module.
  • (typechecking) Correct type signature of absltest.skipThisClass.
Commits
  • 862e5d8 Release Abseil-py 2.4.0
  • 3ac7198 Modernize type annotations using Python 3.10+ features
  • c5a6e0a Replace get_help_width() implementation and add more tests
  • 4263e7c Move pytype disable to the correct line
  • 5fac5c6 Minor fixes in abseil-py
  • 2202ca4 Add support for Python 3.14 and drop support for Python 3.8 and 3.9
  • c95ce0e fix duplicate flag definition when reloading a module
  • 65cf6c4 Fix CI by setting Bazel version to 8.x
  • 41a5ce1 Remove monkey-patch for unittest.TestResult.wasSuccessful
  • a870f10 Propagate **kwargs in conditional/rate-limited logging functions.
  • Additional commits viewable in compare view

Updates numpy from 2.2.6 to 2.4.2

Release notes

Sourced from numpy's releases.

2.4.2 (Feb 1, 2026)

NumPy 2.4.2 Release Notes

The NumPy 2.4.2 is a patch release that fixes bugs discovered after the 2.4.1 release. Highlights are:

  • Fixes memory leaks
  • Updates OpenBLAS to fix hangs

This release supports Python versions 3.11-3.14

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Daniel Tang +
  • Joren Hammudoglu
  • Kumar Aditya
  • Matti Picus
  • Nathan Goldbaum
  • Ralf Gommers
  • Sebastian Berg
  • Vikram Kumar +

Pull requests merged

A total of 12 pull requests were merged for this release.

  • #30629: MAINT: Prepare 2.4.x for further development
  • #30636: TYP: arange: accept datetime strings
  • #30657: MAINT: avoid possible race condition by not touching os.environ...
  • #30700: BUG: validate contraction axes in tensordot (#30521)
  • #30701: DOC: __array_namespace__info__: set_module not __module__ (#30679)
  • #30702: BUG: fix free-threaded PyObject layout in replace_scalar_type_names...
  • #30703: TST: fix limited API example in tests for latest Cython
  • #30709: BUG: Fix some bugs found via valgrind (#30680)
  • #30712: MAINT: replace ob_type access with Py_TYPE in PyArray_CheckExact
  • #30713: BUG: Fixup the quantile promotion fixup
  • #30736: BUG: fix thread safety of array_getbuffer (#30667)
  • #30737: backport scipy-openblas version change

2.4.1 (Jan 10, 2026)

NumPy 2.4.1 Release Notes

The NumPy 2.4.1 is a patch release that fixes bugs discoved after the 2.4.0 release. In particular, the typo SeedlessSequence is preserved to enable wheels using the random Cython API and built against NumPy < 2.4.0 to run without errors.

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.
  • You can use the keyring app to store the PyPI password for twine. See the online twine documentation for details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • c81c49f Merge pull request #30757 from charris/prepare-2.4.2
  • b3ae9c5 REL: Prepare for the NumPy 2.4.2 release
  • 9de8984 Merge pull request #30737 from mattip/scipy-openblas-backport
  • b7be329 backport scipy-openblas version change
  • 7ff9863 Merge pull request #30736 from charris/backport-30667
  • 431fffb MAINT: Skip tests that require buffer.
  • 127235f BUG: fix thread safety of array_getbuffer (#30667)
  • 18bdb2e Merge pull request #30713 from charris/backport-30710
  • 41dd751 Merge pull request #30712 from charris/backport-30705
  • 7a278da BUG: Fixup the quantile promotion fixup
  • Additional commits viewable in compare view

Updates pip from 25.3 to 26.0

Changelog

Sourced from pip's changelog.

26.0 (2026-01-30)

Deprecations and Removals

  • Remove support for non-bare project names in egg fragments. Affected users should use the Direct URL requirement syntax <https://packaging.python.org/en/latest/specifications/version-specifiers/#direct-references>. ([#13157](https://github.com/pypa/pip/issues/13157) <https://github.com/pypa/pip/issues/13157>)

Features

  • Display pip's command-line help in colour, if possible. ([#12134](https://github.com/pypa/pip/issues/12134) <https://github.com/pypa/pip/issues/12134>_)

  • Support installing dependencies declared with inline script metadata (:pep:723) with --requirements-from-script. ([#12891](https://github.com/pypa/pip/issues/12891) <https://github.com/pypa/pip/issues/12891>_)

  • Add --all-releases and --only-final options to control pre-release and final release selection during package installation. ([#13221](https://github.com/pypa/pip/issues/13221) <https://github.com/pypa/pip/issues/13221>_)

  • Add --uploaded-prior-to option to only consider packages uploaded prior to a given datetime when the upload-time field is available from a remote index. ([#13625](https://github.com/pypa/pip/issues/13625) <https://github.com/pypa/pip/issues/13625>_)

  • Add --use-feature inprocess-build-deps to request that build dependencies are installed within the same pip install process. This new mechanism is faster, supports --no-clean and --no-cache-dir reliably, and supports prompting for authentication.

    Enabling this feature will also enable --use-feature build-constraints. This feature will become the default in a future pip version. ([#9081](https://github.com/pypa/pip/issues/9081) <https://github.com/pypa/pip/issues/9081>_)

  • pip cache purge and pip cache remove now clean up empty directories and legacy files left by older pip versions. ([#9058](https://github.com/pypa/pip/issues/9058) <https://github.com/pypa/pip/issues/9058>_)

Bug Fixes

  • Fix selecting pre-release versions when only pre-releases match. For example, package>1.0 with versions 1.0, 2.0rc1 now installs 2.0rc1 instead of failing. ([#13746](https://github.com/pypa/pip/issues/13746) <https://github.com/pypa/pip/issues/13746>_)
  • Revisions in version control URLs now must be percent-encoded. For example, use git+https://example.com/repo.git@issue%231 to specify the branch issue#1. If you previously used a branch name containing a % character in a version control URL, you now need to replace it with %25 to ensure correct percent-encoding. ([#13407](https://github.com/pypa/pip/issues/13407) <https://github.com/pypa/pip/issues/13407>_)
  • Preserve original casing when a path is displayed. ([#6823](https://github.com/pypa/pip/issues/6823) <https://github.com/pypa/pip/issues/6823>_)
  • Fix bash completion when the $IFS variable has been modified from its default. ([#13555](https://github.com/pypa/pip/issues/13555) <https://github.com/pypa/pip/issues/13555>_)
  • Precompute Python requirements on each candidate, reducing time of long resolutions. ([#13656](https://github.com/pypa/pip/issues/13656) <https://github.com/pypa/pip/issues/13656>_)
  • Skip redundant work converting version objects to strings when using the importlib.metadata backend. ([#13660](https://github.com/pypa/pip/issues/13660) <https://github.com/pypa/pip/issues/13660>_)
  • Fix pip index versions to honor only-binary/no-binary options. ([#13682](https://github.com/pypa/pip/issues/13682) <https://github.com/pypa/pip/issues/13682>_)
  • Fix fallthrough logic for options, allowing overriding global options with defaults from user config. ([#13703](https://github.com/pypa/pip/issues/13703) <https://github.com/pypa/pip/issues/13703>_)
  • Use a path-segment prefix comparison, not char-by-char. ([#13777](https://github.com/pypa/pip/issues/13777) <https://github.com/pypa/pip/issues/13777>_)

Vendored Libraries

... (truncated)

Commits

Updates wrapt from 2.0.0 to 2.1.0

Release notes

Sourced from wrapt's releases.

wrapt-2.1.0

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.1.0/ for more information.

wrapt-2.0.1

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.0.1/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 2.1.0

Features Changed

  • Drop support for Python 3.8. Python version 3.9 or later is now required.

Bugs Fixed

  • Improved type hints so that mypy and ty work better for methods of classes when using wrapt.decorator and wrapt.function_wrapper. Note that applying these to static methods still does not work correctly due to possibly limitations in those type checkers. The pyrefly tool still does not work correctly with wrapt.decorator and wrapt.function_wrapper applied to any methods of classes. Overall pyright provides the best experience when using wrapt with type checking.

Version 2.0.1

Bugs Fixed

  • The wrapt.lazy_import() function wasn't included in the __all__ attribute of the wrapt module, meaning that it wasn't accessible when using from wrapt import * and type checkers such as mypy or pylance may not see it as part of the public API.

  • When using wrapt.lazy_import() to lazily import a function of a module, the resulting proxy object wasn't marked as callable until something triggered the import of the module via the proxy. This meant a callable() check on the proxy would return False until the module was actually imported. Further, calling the proxy before the module was imported would raise TypeError: 'LazyObjectProxy' object is not callable rather than importing the module and calling the function as expected. In order to address this issue, an additional keyword argument interface has been added to wrapt.lazy_import() which can be used to specify the expected interface type of the wrapped object. This will default to Callable when an attribute name is supplied, and to ModuleType when no attribute name is supplied. If using wrapt.lazy_import() and supplying an attribute argument, and you expect the wrapped object to be something other than a callable, you should now also supply interface=... with the appropriate type from collections.abc to ensure the proxy behaves correctly prior to the module being imported. This should only be necessary where the wrapped object has special dunder methods on its type which need to exist on the proxy prior to the module being imported.

Commits
  • 0febe4a Merge branch 'release/2.1.0'
  • 6a526b6 Drop rc tag ready for release.
  • f136593 Add additional note to changes file.
  • 1ae09db Update version to 2.1.0rc1.
  • bf53813 Update for 2.1.0dev2 snapshot.
  • 56b5c3d Skip mypy tests when using pypy.
  • bfd71dc Improve type hints so works better with mypy and ty.
  • 64b95ec Stop using deprecated settings format.
  • ff1d033 Fix formatting of tests.
  • 3c91a0c Remove top level pycache directory.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependabot group with 4 updates: [absl-py](https://github.com/abseil/abseil-py), [numpy](https://github.com/numpy/numpy), [pip](https://github.com/pypa/pip) and [wrapt](https://github.com/GrahamDumpleton/wrapt).


Updates `absl-py` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/abseil/abseil-py/releases)
- [Changelog](https://github.com/abseil/abseil-py/blob/main/CHANGELOG.md)
- [Commits](abseil/abseil-py@v2.3.1...v2.4.0)

Updates `numpy` from 2.2.6 to 2.4.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.2.6...v2.4.2)

Updates `pip` from 25.3 to 26.0
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.3...26.0)

Updates `wrapt` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.0.0...2.1.0)

---
updated-dependencies:
- dependency-name: absl-py
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
- dependency-name: numpy
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
- dependency-name: pip
  dependency-version: '26.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependabot
- dependency-name: wrapt
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python labels Feb 2, 2026
@coveralls
Copy link

Pull Request Test Coverage Report for Build 21582165103

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 86.632%

Totals Coverage Status
Change from base Build 21578613712: 0.0%
Covered Lines: 3156
Relevant Lines: 3643

💛 - Coveralls

@kralka kralka added this pull request to the merge queue Feb 2, 2026
Merged via the queue into main with commit 035a485 Feb 2, 2026
19 checks passed
@dependabot dependabot bot deleted the dependabot/pip/dependabot-b2fac6c59a branch February 2, 2026 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants