Update patch-updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@changesets/read (source)	0.6.6 → 0.6.7
@types/node (source)	20.19.33 → 20.19.37
imageio	==2.37.2 → ==2.37.3
numpy (changelog)	2.4.2 → 2.4.3
poetry (changelog)	1.8.1 → 1.8.5
python-dotenv	1.2.1 → 1.2.2
python-dotenv	==1.2.1 → ==1.2.2
scipy	==1.17.0 → ==1.17.1

---

Release Notes

changesets/changesets (@​changesets/read)

v0.6.7

Compare Source

Patch Changes

• Updated dependencies [1f91879]:
  • @​changesets/parse@​0.4.3

imageio/imageio (imageio)

v2.37.3

Compare Source

Bug

• Update dependencies (#​1172,
  971b83e)

Maint

• Bump psf/black (dev dependency) to fix security vulnerability
  (#​1171,
  30a8bab)

numpy/numpy (numpy)

v2.4.3

Compare Source

python-poetry/poetry (poetry)

v1.8.5

Compare Source

Changed

• Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#​9888).
• Do not fail if the unknown metadata version is only a minor version update (#​9888).

v1.8.4

Compare Source

Added

• Add official support for Python 3.13 (#​9523).

Changed

• Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#​9757).

poetry-core (1.9.1)

• Add 3.13 to the list of available Python versions (#​747).

v1.8.3

Compare Source

Added

• Add support for untagged CPython builds with versions ending with a + (#​9207).

Changed

• Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#​9130).
• Improve locking on FIPS systems (#​9152).

Fixed

• Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#​9203,
  #​9226).
• Fix an issue where trailing slashes in git URLs where not handled correctly (#​9205).
• Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#​9302).
• Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#​9335).

Docs

• Fix incorrect information about poetry shell (#​9060).
• Add a git subdirectory example to poetry add (#​9080).
• Mention interactive credential configuration (#​9074).
• Add notes for optional advanced installation steps (#​9098).
• Add reference to configuration credentials in documentation of poetry publish (#​9110).
• Improve documentation for configuring credentials via environment variables (#​9121).
• Remove misleading wording around virtual environments (#​9213).
• Remove outdated advice regarding seeding keyring backends (#​9164).
• Add a pyproject.toml example for a dependency with multiple extras (#​9138).
• Clarify help of poetry add (#​9230).
• Add a note how to configure credentials for TestPyPI for poetry publish (#​9255).
• Fix information about the --readme option in poetry new (#​9260).
• Clarify what is special about the Python constraint in dependencies (#​9256).
• Update how to uninstall plugins via pipx (#​9320).

v1.8.2

Compare Source

Fixed

• Harden lazy-wheel error handling if the index server is behaving badly in an unexpected way (#​9051).
• Improve lazy-wheel error handling if the index server does not handle HTTP range requests correctly (#​9082).
• Improve lazy-wheel error handling if the index server pretends to support HTTP range requests but does not respect them (#​9084).
• Improve lazy-wheel to allow redirects for HEAD requests (#​9087).
• Improve debug logging for lazy-wheel errors (#​9059).
• Fix an issue where the hash of a metadata file could not be calculated correctly due to an encoding issue (#​9049).
• Fix an issue where poetry add failed in non-package mode if no project name was set (#​9046).
• Fix an issue where a hint to non-package mode was not compliant with the final name of the setting (#​9073).

theskumar/python-dotenv (python-dotenv)

v1.2.2

Compare Source

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#​588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in [#​607]
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in [#​590]

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some
  situations. This is no longer the case. For that behavior to be restored in
  all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This
  is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset
  used to reset the file mode of the modified .env file to 0o600 in some
  situations. This is no longer the case: The original mode of the file is now
  preserved. Is the file needed to be created or wasn't a regular file, mode
  0o600 is used.

scipy/scipy (scipy)

v1.17.1: SciPy 1.17.1

Compare Source

SciPy 1.17.1 Release Notes

SciPy 1.17.1 is a bug-fix release with no new features compared to 1.17.0.

Authors

• Name (commits)
• Evgeni Burovski (5)
• Lucas Colley (1)
• Christoph Gohlke (1)
• Ralf Gommers (6)
• Matt Haberland (5)
• Matthias Koeppe (1)
• Nick ODell (1)
• Ilhan Polat (10)
• Tyler Reddy (44)
• Martin Schuck (3)
• Dan Schult (3)
• stratakis (1) +
• ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (1)

A total of 13 people contributed to this release.
People with a "+" by their names contributed a patch for the first time.
This list of names is automatically generated, and may not be fully complete.

Complete issue list, PR list, and release asset hashes are available in the associated README.txt.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.