chore(deps): bump the python group across 2 directories with 4 updates

[dependabot]

Bumps the python group with 3 updates in the /global-images/datascience directory: numpy, scipy and plotly.
Bumps the python group with 1 update in the /scripts/init-realm directory: python-keycloak.

Updates numpy from 2.3.5 to 2.4.1

Release notes

Sourced from numpy's releases.

2.4.1 (Jan 10, 2026)

NumPy 2.4.1 Release Notes

The NumPy 2.4.1 is a patch release that fixes bugs discoved after the 2.4.0 release. In particular, the typo SeedlessSequence is preserved to enable wheels using the random Cython API and built against NumPy < 2.4.0 to run without errors.

This release supports Python versions 3.11-3.14

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Alexander Shadchin
• Bill Tompkins +
• Charles Harris
• Joren Hammudoglu
• Marten van Kerkwijk
• Nathan Goldbaum
• Raghuveer Devulapalli
• Ralf Gommers
• Sebastian Berg

Pull requests merged

A total of 15 pull requests were merged for this release.

• #30490: MAINT: Prepare 2.4.x for further development
• #30503: DOC: numpy.select: fix default parameter docstring...
• #30504: REV: Revert part of #30164 (#30500)
• #30506: TYP: numpy.select: allow passing array-like default...
• #30507: MNT: use if constexpr for compile-time branch selection
• #30513: BUG: Fix leak in flat assignment iterator
• #30516: BUG: fix heap overflow in fixed-width string multiply (#30511)
• #30523: BUG: Ensure summed weights returned by np.average always are...
• #30527: TYP: Fix return type of histogram2d
• #30594: MAINT: avoid passing ints to random functions that take double...
• #30595: BLD: Avoiding conflict with pygit2 for static build
• #30596: MAINT: Fix msvccompiler missing error on FreeBSD
• #30608: BLD: update vendored Meson to 1.9.2
• #30620: ENH: use more fine-grained critical sections in array coercion...
• #30623: BUG: Undo result type change of quantile/percentile but keep...

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.
• You can use the keyring app to store the PyPI password for twine. See the online twine documentation for details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• d24bb7f Merge pull request #30624 from charris/prepare-for-2.4.1
• d3bfd6d REL: Prepare for the NumPy 2.4.1 release
• abe3d86 Merge pull request #30623 from charris/backport-30601
• 5d89078 TST: Add test showing that q promotes (for "interpolating ones")
• 16890ce BUG: Fix result type change and make weak q safe
• bf7ef0b Merge pull request #30620 from charris/backport-30514
• 3d3af25 ENH: use more fine-grained critical sections in array coercion internals (#30...
• 8b7f197 Merge pull request #30608 from charris/update-vendored-meson
• 30999f6 BLD: update vendored Meson to 1.9.2
• e6bea65 Merge pull request #30596 from charris/remove-msvccompiler-check
• Additional commits viewable in compare view

Updates scipy from 1.16.3 to 1.17.0

Release notes

Sourced from scipy's releases.

SciPy 1.17.0 Release Notes

SciPy 1.17.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.17.x branch, and on adding new features on the main branch.

This release requires Python 3.11-3.14 and NumPy 1.26.4 or greater.

Highlights of this release

• Many SciPy functions have gained native support for batching of N-dimensional array input and additional support for the array API standard. An overall summary of the latter is now available in a set of tables.
• In scipy.sparse, coo_array now supports indexing. This includes integers, slices, arrays, np.newaxis, Ellipsis, in 1D, 2D and the relatively new nD. In scipy.sparse.linalg, ARPACK and PROPACK rewrites from Fortran77 to C now empower the use of external pseudorandom number generators, e.g. from numpy.
• In scipy.spatial, transform.Rotation and transform.RigidTransform have been extended to support N-D arrays. geometric_slerp now has support for extrapolation.
• scipy.stats has gained the matrix t and logistic distributions and many performance and accuracy improvements.
• Initial support for 64-bit integer (ILP64) BLAS and LAPACK libraries has been added, including for MKL and Apple Accelerate. Please report any issues with ILP64 you encounter.

New features

scipy.integrate improvements

• The integration routines dopri5, dopri853, LSODA, vode, and zvode have been ported from Fortran77 to C.
• scipy.integrate.quad now has a fast path for returning 0 when the integration interval is empty.
• The BDF, DOP853, RK23, RK45, OdeSolver, DenseOutput, ode, and complex_ode classes now support subscription, making them generic types, for compatibility with scipy-stubs.

... (truncated)

Commits

• 8c75ae7 REL: 1.17.0 "final" release commit [wheel build]
• 9d7f110 Merge pull request #24298 from tylerjereddy/treddy_prep_1.17.0_final
• 94373b6 MAINT: test wheels [wheel build]
• 723f4e2 DOC: update 1.17.0 relnotes
• bf042f0 CI: ensure we use pinned scipy-openblas version also in ILP64 job
• 3e00a04 CI: fix issue with ILP64 job; point to fixed numpy/meson commit
• 39bceab BUG: stats: fix va_args memory corruption bug
• 8f56387 DOC: update 1.17.0 release notes
• c50e9c0 Merge pull request #24304 from ev-br/edit_relnotes_for_ILP64
• b204495 DOC: clarify ILP64 support caveats in the release notes, remove mentions of O...
• Additional commits viewable in compare view

Updates plotly from 6.5.0 to 6.5.1

Release notes

Sourced from plotly's releases.

v6.5.1

Fixed

• Fix issue where Plotly Express ignored trace-specific color sequences defined in templates via template.data.<trace_type> [#5437], with thanks to @​antonymilne for the contribution!

Updated

• Speed up validate_gantt function [#5386], with thanks to @​misrasaurabh1 for the contribution!
• Update plotly.js from version 3.3.0 to version 3.3.1. See the plotly.js release notes for more information. [#5456]. Notable changes include:
  • Add support for arrays for the pie properties showlegend and legend, so that these can be configured per slice. [#7580]

Changelog

Sourced from plotly's changelog.

[6.5.1] - 2025-11-17

Fixed

• Fix issue where Plotly Express ignored trace-specific color sequences defined in templates via template.data.<trace_type> [#5437], with thanks to @​antonymilne for the contribution!

Updated

• Speed up validate_gantt function [#5386], with thanks to @​misrasaurabh1 for the contribution!
• Update plotly.js from version 3.3.0 to version 3.3.1. See the plotly.js release notes for more information. [#5456]. Notable changes include:
  • Add support for arrays for the pie properties showlegend and legend, so that these can be configured per slice. [#7580]

Commits

• d2aa044 Version changes for v6.5.1
• f4236c2 Merge pull request #5456 from plotly/cam/update-plotly.js-v3.3.1
• ca6e55e Update Jupyter support files
• 6f13fb0 Add missing lock file
• 6f94d9c Update plotly.js to v3.3.1 and associated files
• f265d9b Merge pull request #5448 from palmerusaf/update-contrib-docs
• 27b5bba Update editable installs ref in CONTRIBUTING doc
• fa4db1d Merge pull request #5442 from plotly/fix-docs-build-bug-2
• a5f469a update call to color_discrete_sequence with new call signature
• adfdfcd Merge pull request #5437 from antonymilne/main
• Additional commits viewable in compare view

Updates python-keycloak from 5.8.0 to 7.0.2

Changelog

Sourced from python-keycloak's changelog.

v7.0.2 (2026-01-08)

Fix

• Fix/python version and ci (#691)

v7.0.1 (2026-01-05)

Fix

• python version

v7.0.0 (2026-01-04)

BREAKING CHANGE

• this change introduces a very strong typing across the library. From now on, we demand that each method returns a single type and converts the results into the specified return type, otherwise it raises a TypeError exception. This should resolve any type checking linter errors within the library as well.

Fix

• updated lockfile
• pass along the default connection manager configuration into uma
• dont override transport for httpx
• pass query params in get groups
• removed async property as a dependency
• strong and consistent typing across the library

v6.0.0 (2025-12-28)

BREAKING CHANGE

• changes the behavior of get_group_by_path to raise an exception in case the path is not found, which is now the definitive new behavior

v5.12.0 (2025-12-27)

Feat

• Add PKCE support (RFC 7636) (#670)

v5.11.0 (2025-12-27)

Feat

• implement authz import request (#685)

v5.10.0 (2025-12-27)

Feat

• add get_role_composites_by_id method (#680)

... (truncated)

Commits

• 8eca957 fix: Fix/python version and ci (#691)
• 16487b7 docs: changelog update
• 2c62509 chore: Merge branch 'master' of https://github.com/marcospereirampj/python-ke...
• 9821540 fix: python version
• 5316890 docs: changelog update
• 15c0565 Merge pull request #687 from marcospereirampj/fix/pyright
• 3c43516 fix: updated lockfile
• 1556fbe chore: python version
• 3fe4886 fix: pass along the default connection manager configuration into uma
• 9a8c498 fix: dont override transport for httpx
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #4398.