Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the python-packages group with 8 updates in the /images/python-arcgis directory:

Package From To
geopandas 1.1.1 1.1.2
python-dotenv 1.1.1 1.2.1
boto3 1.34.52 1.42.17
datadog-api-client 2.44.0 2.48.0
pyshp 2.3.1 3.0.3
gdal 3.6.4 3.12.1
azure-storage-blob 12.26.0 12.27.1
arcgis-mapping 4.31.0 4.33.0

Updates geopandas from 1.1.1 to 1.1.2

Release notes

Sourced from geopandas's releases.

Version 1.1.2

What's Changed

Bug fixes:

  • Fix an issue that caused an error in GeoDataFrame.from_features when there is no properties field (#3599).
  • Fix read_file and to_file errors (#3682)
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640)
  • value_counts on GeoSeries now preserves CRS in index (#3669)
  • Fix f-string placeholders appearing in error messages when pyogrio cannot be imported (#3682).
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640).
  • .to_json now provides a clearer error message when called on a GeoDataFrame without an active geometry column (#3648).
  • Calling del gdf["geometry"] now will downcast to a pd.DataFrame if there are no geometry columns left in the dataframe (#3648).
  • Fix SQL injection in to_postgis via geometry column name (#3681).

Full Changelog: geopandas/geopandas@v1.1.1...v1.1.2

Changelog

Sourced from geopandas's changelog.

Version 1.1.2 (December 22, 2025)

Bug fixes:

  • Fix an issue that caused an error in GeoDataFrame.from_features when there is no properties field (#3599).
  • Fix read_file and to_file errors (#3682)
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640)
  • value_counts on GeoSeries now preserves CRS in index (#3669)
  • Fix f-string placeholders appearing in error messages when pyogrio cannot be imported (#3682).
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640).
  • .to_json now provides a clearer error message when called on a GeoDataFrame without an active geometry column (#3648).
  • Calling del gdf["geometry"] now will downcast to a pd.DataFrame if there are no geometry columns left in the dataframe (#3648).
  • Fix SQL injection in to_postgis via geometry column name (#3681).
Commits

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits
  • eaf2a91 Do not remove .coverage file
  • 8716196 Bump version: 1.2.0 → 1.2.1
  • b87807f Update changelog
  • 3af77d3 Support reading .env from FIFOs (Unix) (#586)
  • 467ee22 Fix test failures after moving config to pyproject.toml
  • 76999e7 Move more config pyproject.toml
  • 222ce2c Update to use trusted publisher on pypi
  • 8ed4f79 Update docs requirements
  • 5bf8822 Bump version: 1.1.1 → 1.2.0
  • 1fe11cc upadate changelog
  • Additional commits viewable in compare view

Updates boto3 from 1.34.52 to 1.42.17

Commits
  • 9a88f84 Merge branch 'release-1.42.17'
  • 850e57e Bumping version to 1.42.17
  • 7fdd80a Add changelog entries from botocore
  • 663b0db Merge branch 'release-1.42.16'
  • 770ca10 Merge branch 'release-1.42.16' into develop
  • 251caad Bumping version to 1.42.16
  • ca9a619 Add changelog entries from botocore
  • 19a9efb Merge branch 'release-1.42.15'
  • 910d5d6 Merge branch 'release-1.42.15' into develop
  • 35be475 Bumping version to 1.42.15
  • Additional commits viewable in compare view

Updates datadog-api-client from 2.44.0 to 2.48.0

Release notes

Sourced from datadog-api-client's releases.

2.48.0

See ./CHANGELOG.md for details

2.47.0

See ./CHANGELOG.md for details

2.46.0

See ./CHANGELOG.md for details

2.45.0

See ./CHANGELOG.md for details

Changelog

Sourced from datadog-api-client's changelog.

2.48.0/2025-12-17

Changed

  • Mark Incident Impact Endpoints stable #3016
  • Vulnerability Management - Update ListVulnerabilities endpoint query params and response schema #3008
  • Update specs for AWS account updates and creation for CCM configs #3001
  • add suppression version history #2975
  • Add Security Finding Ticketing endpoints #2970
  • Flatten file_metadata response schema to avoid OneOf unmarshaling issues #2955
  • Add processors groups to Observability Pipelines #2929

Added

  • Update security finding triage specs #3009
  • Add routes for managing On-Call user notification channels #3004
  • Add host field to Post an event V2 API #3002
  • Add GET /api/v2/apm/services endpoint to public documentation #2999
  • Dashboards - Add semantic_mode support to FormulaAndFunctionMetricQueryDefinition #2993
  • Cloud SIEM - Add instantaneousBaseline feature parameter. #2990
  • Add new fields to usage metering api spec #2988
  • update geomap widget definition about conditional_format and text_formats and view focus #2981
  • On-Call Add positioned schedule policy target #2976
  • Introduced new APIs to manage team hierarchy links #2967
  • Add new endpoint for listing rules for a gate #2966
  • Add Row Update Endpoints to Reference Tables API spec #2956
  • Add incident management seats to spec #2953
  • Support provisioning teams from external sources #2952
  • security_monitoring - Add signalOutput field to ThreatHuntingJobResponseAttributes schema #2950
  • Add filter.scope to Monitor Notification Rules #2947
  • Allow providing a custom retry policy. #2946
  • Add suppression tags #2939
  • Add Team Connection API Documentation #2936
  • Add Support for Monitor Assets #2935
  • Add new summary keys for new standalone billing dimensions #2934
  • Add Bits AI Investigations and On-Call to API specs #2930
  • Add PreviewCatalogEntities #2926
  • Sync 'audience_management.yaml' files with backend #2921
  • Add api specs for deployment gates #2893
  • Add last_login_time to Users v2 API #2881
  • [DELA-208] Adding delegated token authentication in python client #2860

Removed

  • Tag security findings Jira endpoints as unstable #2997

Fixed

  • Add field attribute to the Workload Protection hash action #2972
  • obs_pipelines: make google auth optional #2961
  • Add 408s to retries to Python API Client #2945

Deprecated

  • [api-spec] Mark PATCH /api/v2/incidents/incident_id/attachments endpoint as deprecated #2937

... (truncated)

Commits

Updates pyshp from 2.3.1 to 3.0.3

Release notes

Sourced from pyshp's releases.

Documentation fix. Correct the version number in README.md

A rerelease of 3.0.2 for PyPi (to retrigger the CD deploy job)

No release notes provided.

Remove py.typed

so as not to enforce type checking on user's other projects.

More support for Paths, and no longer modifies the doctest module.

Improvements

  • Reader(shp=, dbf=, shx=) now support pathlib.Paths, and any pathlike object (@​mwtoews).

Bug fixes

Code quality

Changelog

Sourced from pyshp's changelog.

VERSION 3.0.3

2025-11-28 Type checking:

  • Add optional dependency, "stubs", containing the package "pyshp-stubs" generated with stubgen (to avoid including py.typed, and no longer being a single file project).

2025-10-25 Bug fix:

  • Prevented UnboundLocalError when reading non-single point M and Z type Shapefiles (@​ekawas-vrify).

2025-10-10 Testing:

  • Test on the Python 3.14 official release (no longer in beta)

VERSION 3.0.2

2025-10-10 .post1. Documentation update. Update version at the top of README.md. (to make what PyPi users see consistent with the changelog and version). 2025-10-10 .post0. Re-release as 3.0.2.post0 to trigger deploy job to Publish to Pypi

2025-10-09 Bug fix:

  • Deleted py.typed (probably temporarily). Including the py.typed marker file with a single file package caused type checkers to type check all other libraries installed in the same directory (whether they're typed or not, enforcing type checking for all the adjacent dirs libraries, regardless of the user's intentions for the type checker) (pointed out by @​dl1jbe). Discussions will be started about a longer term fix, possibly e.g. possibly refactoring to a package, and restoring py.typed.

2025-08-20 Code quality:

  • Ruff check's UP rule added (mimicks PyUpgrade) (@​mwtoews).

VERSION 3.0.1

2025-08-19 Improvements:

VERSION 3.0.0

... (truncated)

Commits
  • 0314c9d v3.0.3 Tested on Python 3.14 and 3.15 dev. Support stubs. Fixed UnboundLocal...
  • 4cf66d5 Add optional dependency group: stubs, containing pyshp-stubs, as an alternati...
  • 013dd40 Merge pull request #378 from GeospatialPython/Test_on_Py_3.15_dev
  • 3093500 Add 3.15-dev
  • e832238 Merge pull request #377 from ekawas-vrify/patch-1
  • bcf842d v3.0.3.dev. Document fix for UnboundLocalError and credit Edward
  • 7b73fbb Allow mbox returned from _read_ms_from_byte_stream to be None
  • 9f5540a Fix UnboundLocalError when reading byte_stream
  • 6fa929c Merge pull request #376 from GeospatialPython/Test_on_Python_3.14
  • 97b2785 In test matrix "3.14.0-beta.4" => "3.14" (Python versions)
  • Additional commits viewable in compare view

Updates gdal from 3.6.4 to 3.12.1

Release notes

Sourced from gdal's releases.

GDAL 3.12.1

Bug fix release. See release notes: https://github.com/OSGeo/gdal/blob/v3.12.1/NEWS.md

GDAL 3.12.0 "Chicoutimi"

The 3.12.0 release is a new feature release with the following highlights:

In a nutshell...

... (truncated)

Changelog

Sourced from gdal's changelog.

GDAL/OGR 3.12.1 Release Notes

GDAL 3.12.1 is a bugfix release.

Build

  • mkgdaldist.sh: add pytest.ini to gdalautotest distribution

GDAL 3.12.1

Port

  • VSIZipFilesystemHandler::GetFileInfo(): extra sanity check to avoid later huge memory allocations (ossfuzz#457877771)
  • /vsicurl/: fix a redirect to a URL ending with a slash followed by a 403

Algorithms

  • Rasterize: avoid integer overflows on huge geometry coordinates
  • GDALFPolygonize(): make it handle 64-bit float rasters on their native precision, and not Float32 (#13526)

Core

  • GDALGeoTransform::Apply(const OGREnvelope &, GDALRasterWindow&): avoid integer overflows
  • ComputeRasterMinMaxLocation(): fix on all inf/-inf rasters
  • GDALProxyPoolDataset::GetGCPSpatialRef(): fix nullptr dereference
  • Deferred plugin loading: add GDAL_DCAP_UPDATE to cached driver metadata items in proxy driver, to avoid plugins to be unnecessarily loaded
  • GDALJP2Metadata::CollectGMLData(): avoid memory leak on malformed documents
  • JPEG2000 writer: remove NUL terminated byte at end of payload of 'lbl ' and 'xml ' boxes
  • ComputeStatistics(): fix imprecise result on stddev on Float64 with SSE2/AVX2 optimization (3.12.0 regression) (#13543)
  • ComputeStatistics(): increase precision for mean and stddev computation on Float32 to Float64 (3.12.0 regression)

Raster utilities

  • gdalinfo -json output: fix stac:transform coefficient order (#13358)
  • gdalinfo -json: fix setting [stac][raster:bands][0][nodata] for floating-point datasets
  • GDALZonalStats: Fix error for certain polygons outside raster extent (#13376)
  • gdal raster zonal-stats: avoid integer overflows on geometries with huge coordinate values
  • gdal raster tile: fix stalling in --parallel-mode=spawn with CPL_DEBUG=ON on Windows (#13390)
  • gdal mdim convert: fix specifying multiple values for --group, --subset, --scale-axes

... (truncated)

Commits
  • 21882de .github/workflows/release.yml: fix extraeneous double quote
  • 70e6242 release.yml: update PROJ to 9.7.1
  • de971b7 NEWS.md: update for 3.12.1
  • ae7244c Bump version numbers to 3.12.1
  • e68c416 Merge pull request #13553 from OSGeo/backport-13546-to-release/3.12
  • 3cb20d5 Merge pull request #13552 from rouault/backport_pr_13549
  • 7e68a79 Merge pull request #13551 from OSGeo/backport-13548-to-release/3.12
  • 717554e HDF5: do not report GCPs on swath geolocation fields
  • a7424fe GDALRasterBand::ComputeStatistics(): increase precision for mean and stddev c...
  • d6bf9df GDALRasterBand::ComputeStatistics(): fix imprecise result on stddev on Float6...
  • Additional commits viewable in compare view

Updates azure-storage-blob from 12.26.0 to 12.27.1

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.27.1

12.27.1 (2025-10-29)

Bugs Fixed

  • Fixed MyPy attr-defined errors for BlobClient.
Commits
  • 2972b9e [Storage] Cherry Pick mypy fixes for STG 99 (#43664)
  • 0568271 [Storage] [STG 99] Changelogs for Removing __enter__ and __exit__ from As...
  • ad01347 Updated release date
  • 680072a Added back download_blob overloads to fix API Views (#42769)
  • 49dd75d Added changelogs for the bug fix (#43105)
  • c8ba802 [Storage] Fixed Pagination for list_directories_and_files when `name_starts...
  • ad36c0c Merge branch 'main' into release/storage/stg99-ga
  • 1c0344e Fix NFS tests (#42894)
  • 20f7d18 Added back download_blob overloads to fix API Views (#42769)
  • 28abd08 [Storage] Fix Blob test_helpers.py (#42712)
  • Additional commits viewable in compare view

Updates arcgis-mapping from 4.31.0 to 4.33.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 8 updates in the /images/python-arcgis directory:

| Package | From | To |
| --- | --- | --- |
| [geopandas](https://github.com/geopandas/geopandas) | `1.1.1` | `1.1.2` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` |
| [boto3](https://github.com/boto/boto3) | `1.34.52` | `1.42.17` |
| [datadog-api-client](https://github.com/DataDog/datadog-api-client-python) | `2.44.0` | `2.48.0` |
| [pyshp](https://github.com/GeospatialPython/pyshp) | `2.3.1` | `3.0.3` |
| [gdal](https://github.com/OSGeo/GDAL) | `3.6.4` | `3.12.1` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.26.0` | `12.27.1` |
| arcgis-mapping | `4.31.0` | `4.33.0` |



Updates `geopandas` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/main/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.1...v1.1.2)

Updates `python-dotenv` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1)

Updates `boto3` from 1.34.52 to 1.42.17
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.34.52...1.42.17)

Updates `datadog-api-client` from 2.44.0 to 2.48.0
- [Release notes](https://github.com/DataDog/datadog-api-client-python/releases)
- [Changelog](https://github.com/DataDog/datadog-api-client-python/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadog-api-client-python@2.44.0...2.48.0)

Updates `pyshp` from 2.3.1 to 3.0.3
- [Release notes](https://github.com/GeospatialPython/pyshp/releases)
- [Changelog](https://github.com/GeospatialPython/pyshp/blob/master/changelog.txt)
- [Commits](GeospatialPython/pyshp@2.3.1...3.0.3)

Updates `gdal` from 3.6.4 to 3.12.1
- [Release notes](https://github.com/OSGeo/GDAL/releases)
- [Changelog](https://github.com/OSGeo/gdal/blob/master/NEWS.md)
- [Commits](OSGeo/gdal@v3.6.4...v3.12.1)

Updates `azure-storage-blob` from 12.26.0 to 12.27.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.26.0...azure-storage-blob_12.27.1)

Updates `arcgis-mapping` from 4.31.0 to 4.33.0

---
updated-dependencies:
- dependency-name: geopandas
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: python-dotenv
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: boto3
  dependency-version: 1.42.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: datadog-api-client
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pyshp
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: gdal
  dependency-version: 3.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: azure-storage-blob
  dependency-version: 12.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: arcgis-mapping
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants