Skip to content

Bump the pip group across 1 directory with 31 updates #3721

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

Bump the pip group across 1 directory with 31 updates #3721

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the pip group with 31 updates in the /src directory:

Package From To
beautifulsoup4 4.13.4 4.14.3
biopython 1.85 1.86
bokeh 3.6.2 3.8.1
certifi 2025.7.14 2025.11.12
cryptography 45.0.5 46.0.3
idna 3.10 3.11
jsonschema 4.25.0 4.25.1
markdown 3.8.2 3.10
markupsafe 3.0.2 3.0.3
networkx 3.4.2 3.6.1
numpy 2.2.3 2.4.0
pillow 11.3.0 12.0.0
plotly 6.2.0 6.5.0
pycurl 7.45.6 7.45.7
pyopenssl 25.1.0 25.3.0
scipy 1.15.2 1.16.3
wordcloud 1.9.4 1.9.5
ipython 8.33.0 9.8.0
ipywidgets 8.1.7 8.1.8
pandas 2.3.1 2.3.3
pymongo 4.13.2 4.15.5
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
scikit-learn 1.6.1 1.8.0
statsmodels 0.14.5 0.14.6
tornado 6.5.1 6.5.4
coverage 7.10.1 7.13.1
pytest 8.4.1 9.0.2
pytest-cov 6.2.1 7.0.0
ruff 0.12.7 0.14.10
vcrpy 7.0.0 8.1.0

Updates beautifulsoup4 from 4.13.4 to 4.14.3

Updates biopython from 1.85 to 1.86

Changelog

Sourced from biopython's changelog.

28 October 2025: Biopython 1.86

This release of Biopython supports Python 3.10, 3.11, 3.12, 3.13 and 3.14. It has also been tested on PyPy3.10 v7.3.19.

Bio.SearchIO now supports parsing the tabular and plain text output of Infernal <http://eddylab.org/infernal/> (v1.0.0+) RNA search tool. The format names are infernal-tab and infernal-text.

The default value of the gap score of a PairwiseAligner object was changed in this release. Previously, for consistency with Bio.pairwise2, the default value for gap score was 0. However, this means that a mismatch, an insertion followed by a deletion, and a deletion followed by an insertion all get assigned a score of 0. The aligner then finds a large number of alignments that are logically the same, but have trivial differences between them. For example, aligning AAACAAA to AAAGAAA previously yielded the following three alignments, all with score 6::

 AAACAAA        AAAC-AAA        AAA-CAAA
 AAAGAAA        AAA-GAAA        AAAG-AAA

With the new default parameter for the gap score, only the first alignment is returned.

Bio.PDB.PDBIO now ensures that b-factor values are always at most 6 characters to ensure that we do not violate the wwPDB specification. This should not have an impact on the majority of uses, as b-factor values are generally small (less than 100). When 1000 <= b-factor < 10_000, the value is rounded to a single decimal place. When, 10_000 <= b-factor < 999_999, the value is rounded to zero decimal places. Values above 999_999 are now clamped. The justification for this is the rise in the b-factor field being used for additional metadata, typically from computational tools.

Bio.Align now provides a method Alignment.from_alignments_with_same_reference to construct a multiple sequence alignment from a collection of alignments that share the same reference sequence.

Bio.PDB.PDBIO will now raise module specific warnings: Bio.PDB.PDBExceptions.PDBIOWarning.

Bio.PDB.SCADIO now supports object selection by color in the OpenSCAD output file. This enables generation of separate STL files for each color for printing protein structures on multi-material 3D printers.

The iplotx library is mentioned in the Tutorial as an option to visualise trees using complex style options.

Many thanks to the Biopython developers and community for making this release possible, especially the following contributors:

... (truncated)

Commits

Updates bokeh from 3.6.2 to 3.8.1

Changelog

Sourced from bokeh's changelog.

2025-11-07 3.8.1:

  • bugfixes:

    • #14618 [component: docs] Local documentation build fails with Extension error (sphinxext.opengraph)
    • #14626 [component: docs] Local documentation fails on Windows because of missing svg icons
    • #14651 [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0

  • tasks:

2025-08-29 3.8:

  • bugfixes:

    • #12430 [component: bokehjs] [BUG] Step glyphs do not support linked brushing
    • #12994 [component: bokehjs] [BUG] Patch does not output under certain conditions
    • #13616 [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted
    • #14334 js_on_change not firing when range is updated in range tool
    • #14352 [component: bokehjs] Log Axis and Range1d < 1 failing
    • #14383 [component: bokehjs] SerializationError: circular reference When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.
    • #14396 [component: examples] Remove context from time of day in span example
    • #14399 Bad typings for list_attr_splat (e.g. Plot.axis)
    • #14413 [component: bokehjs] ValueRef formatter does not handle datetime nullable well
    • #14420 [component: bokehjs] Enhance performance of WebGL multi_marker
    • #14422 [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool
    • #14424 [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+
    • #14458 [component: bokehjs] Removing and re-adding DOM nodes causes React problems
    • #14461 [component: tests] The regression test for issue #14207 is unreliable
    • #14468 [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html
    • #14469 [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true
    • #14476 Improve handling of pd.NA in Property.matches
    • #14497 mypy 1.15.0 fails in CI but not locally
    • #14499 [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot
    • #14520 [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget
    • #14536 Flex layouts need to apply min_width and min_height selectively
    • #14540 [component: tests] Tests are failing on Windows and Python 3.10 after PR #14531
    • #14541 New SVG icons have inconsistent line widths
    • #14554 Add support for scalar uint32 color input.
    • #14565 [component: bokehjs] DataTable source update broken
    • #14574 [component: build] grammar build script failing with whitespace in path
    • #14597 [component: bokehjs] document_ready even trigger twice with Bokeh 3.4.0.dev4
    • #14602 [component: bokehjs] Layoutable components in side panels don't appear in exported images
    • #14620 Re-connect race condition on page reload

  • features:

    • #2603 [component: bokehjs] Add a SizeBar guide to label relative scatter glyph sizes
    • #7338 Setting areas for the activation of the hover.
    • #8608 [component: bokehjs] [Feature request] automatic reconnect to server
    • #9087 [component: bokehjs] Provide hit_filter property on HoverTool and TapTool
    • #9327 [component: bokehjs] [BUG] Not possible to disable multi-select behavior for DataTable
    • #12375 [FEATURE] Set axis label at a fixed distance from the axis

... (truncated)

Commits
  • 7e37a63 Deployment updates for release 3.8.1
  • 838b7c3 Merge pull request #14704 from bokeh/mattpap/3.8.1_backports
  • 477afb3 Added release notes
  • 360d9d6 set minimal version of sphinxext-opengraph to 0.11.0 (#14625)
  • fd662c1 add copy and delete for svg icons to make.bat (#14627)
  • 9f9d602 Restore @$name support and improve replace_placeholders() (#14652)
  • b63f691 Update switcher.json
  • 6431bdf Merge deployment staging branch staging-3.8.0
  • 2378619 Deployment updates for release 3.8.0
  • b83c74d Update switcher.json for 3.8 release (#14623)
  • Additional commits viewable in compare view

Updates certifi from 2025.7.14 to 2025.11.12

Commits

Updates cryptography from 45.0.5 to 46.0.3

Changelog

Sourced from cryptography's changelog.

46.0.3 - 2025-10-15


* Fixed compilation when using LibreSSL 4.2.0.

.. _v46-0-2:


46.0.2 - 2025-09-30

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.

.. _v46-0-1:

46.0.1 - 2025-09-16


* Fixed an issue where users installing via ``pip`` on Python 3.14 development
  versions would not properly install a dependency.
* Fixed an issue building the free-threaded macOS 3.14 wheels.

.. _v46-0-0:


46.0.0 - 2025-09-16

  • BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been removed.
  • Support for OpenSSL < 3.0 is deprecated and will be removed in the next release.
  • Support for x86_64 macOS (including publishing wheels) is deprecated and will be removed in two releases. We will switch to publishing an arm64 only wheel for macOS.
  • Support for 32-bit Windows (including publishing wheels) is deprecated and will be removed in two releases. Users should move to a 64-bit Python installation.
  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.
  • We now build ppc64le manylinux wheels and publish them to PyPI.
  • We now build win_arm64 (Windows on Arm) wheels and publish them to PyPI.
  • Added support for free-threaded Python 3.14.
  • Removed the deprecated get_attribute_for_oid method on :class:~cryptography.x509.CertificateSigningRequest. Users should use :meth:~cryptography.x509.Attributes.get_attribute_for_oid instead.
  • Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the cipher module. These are still available in :doc:/hazmat/decrepit/index.
  • In X.509, when performing a PSS signature with a SHA-3 hash, it is now encoded with the official NIST SHA3 OID.

.. _v45-0-7:

... (truncated)

Commits

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.
Commits
  • ad949ee Release v3.11
  • cae4ba7 Second release candidate for 3.11
  • 8adb305 Add space in RST link
  • 74cb2b6 Release candidate for 3.11
  • 05dab09 Format idna-data with ruff
  • 90eac78 Apply ruff formatting
  • a31ce7e Remove errant test vectors
  • 81f0333 Omit vectors known to be broken in test suite
  • a0f3257 Merge branch 'master' into unicode-16-uts46-changes
  • 38d9886 Remove extra UTS46 test vector
  • Additional commits viewable in compare view

Updates jsonschema from 4.25.0 to 4.25.1

Release notes

Sourced from jsonschema's releases.

v4.25.1

What's Changed

Full Changelog: python-jsonschema/jsonschema@v4.25.0...v4.25.1

Changelog

Sourced from jsonschema's changelog.

v4.25.1

  • Fix an incorrect required argument in the Validator protocol's type annotations (#1396).
Commits
  • 331c384 Add the fix to the changelog.
  • c1ec0a6 Merge pull request #1398 from python-jsonschema/dependabot/github_actions/ast...
  • 8e7d594 Merge pull request #1399 from python-jsonschema/dependabot/github_actions/act...
  • 460f4fa Merge pull request #1396 from sirosen/improve-protocol-init-signature
  • 1e58409 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 64bc217 Add a typing test for the Validator protocol
  • 6c25741 Bump actions/checkout from 4 to 5
  • bf603d5 Bump astral-sh/setup-uv from 6.4.3 to 6.5.0
  • a916d8f Fix Validator protocol init to match runtime
  • de60f18 Merge pull request #1397 from python-jsonschema/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates markdown from 3.8.2 to 3.10

Release notes

Sourced from markdown's releases.

Release 3.10.0

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

Release 3.9.0

Changed

  • Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

  • Ensure inline processing iterates through elements in document order (#1546).
  • Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).
Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to the Python Version Specification. See the Contributing Guide for details.

[Unreleased]

Fixed

  • Ensure nested elements inside inline comments are properly unescaped (#1571).
  • Make the docs build successfully with mkdocstrings-python 2.0 (#1575).
  • Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).

[3.10.0] - 2025-11-03

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

  • Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

  • Ensure inline processing iterates through elements in document order (#1546).
  • Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).
Commits

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505
Commits

Updates networkx from 3.4.2 to 3.6.1

Release notes

Sourced from networkx's releases.

NetworkX 3.6.1

networkx 3.6.1

We're happy to announce the release of networkx 3.6.1!

API Changes

  • Add spectral bipartition community finding and greedy bipartition using node swaps (#8347).

Enhancements

  • Nodelists for from_biadjacency_matrix (#7993).
  • Add spectral bipartition community finding and greedy bipartition using node swaps (#8347).
  • Fix draw_networkx_nodes with list node_shape and add regression test (#8363).

Bug Fixes

  • Fix: allow graph subclasses to have additional arguments (#8369).

Documentation

  • DOC: Improve benchmarking readme (#8358).
  • DOC: More details re: RC releases in the release process devdocs (#8346).
  • DOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tutorial (#8300).
  • DOC: Add blurb to contributor guide about drawing tests (#8370).
  • DOC: Fix underline lens in docstrings (#8371).
  • Rolling back shortest paths links (#8373).

Maintenance

  • MAINT: Replace string literal with comment (#8359).
  • Bump actions/checkout from 5 to 6 in the actions group (#8360).
  • pin python 3.14 to be version 3.14.0 until dataclasses are fixed (#8365).
  • Blocklist Python 3.14.1 (#8372).

Other

  • TST: add tests for unsupported graph types in MST algorithms (#8353).
  • TST: clean up isomorphism tests (#8364).

Contributors

10 authors added to this release (alphabetically):

... (truncated)

Commits
  • 7530809 Designate 3.6.1 release
  • 4788eb0 Rolling back shortest paths links (#8373)
  • 696edb6 Fix draw_networkx_nodes with list node_shape and add regression test (#8363)
  • c38830c Blocklist Python 3.14.1 (#8372)
  • 81d2311 DOC: Fix underline lens in docstrings. (#8371)
  • a6e2bfa DOC: Add blurb to contributor guide about drawing tests. (#8370)
  • 96b6282 DOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tu...
  • 75bdd73 Fix: allow graph subclasses to have additional arguments (#8369)
  • 7663fa5 TST: clean up isomorphism tests (#8364)
  • 3dacd1b Add spectral bipartition community finding and greedy bipartition using node ...
  • Additional commits viewable in compare view

Updates numpy from 2.2.3 to 2.4.0

Release notes

Sourced from numpy's releases.

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired deprecations and bug fixes as well.

This release supports Python versions 3.11-3.14

Highlights

Apart from annotations and same_value kwarg, the 2.4 highlights are mostly of interest to downstream developers. They should help in implementing new user dtypes.

  • Many annotation improvements. In particular, runtime signature introspection.
  • New casting kwarg 'same_value' for casting by value.
  • New PyUFunc_AddLoopsFromSpec function that can be used to add user sort loops using the ArrayMethod API.
  • New __numpy_dtype__ protocol.

Deprecations

Setting the strides attribute is deprecated

Setting the strides attribute is now deprecated since mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a new view (no copy) via:

  • np.lib.stride_tricks.strided_window_view if applicable,
  • np.lib.stride_tricks.as_strided for the general case,
  • or the np.ndarray constructor (buffer is the original array) for a light-weight version.

(gh-28925)

Positional out argument to np.maximum, np.minimum is deprecated

Passing the output array out positionally to numpy.maximum and numpy.minimum is deprecated. For example, np.maximum(a, b, c) will emit a deprecation warning, since c is treated as the output buffer rather than a third input.

Always pass the output with the keyword form, e.g. np.maximum(a, b, out=c). This makes intent clear and simplifies type annotations.

(gh-29052)

align= must be passed as boolean to np.dtype()

... (truncated)

Changelog

Sourced from numpy's changelog.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

The things to check are the cibuildwheel version in .github/workflows/wheels.yml and the openblas versions in openblas_requirements.txt.

Make a release PR

Four documents usually need to be updated or created for the release PR:

  • The changelog
  • The release notes
  • The .mailmap file
  • The pyproject.toml file

These changes should be made in an ordinary PR against the maintenance branch. Other small, miscellaneous fixes may be part of this PR. The commit message might be something like::

REL: Prepare for the NumPy 2.4.0 release

    

  • Create 2.4.0-changelog.rst.
    • 

  • Update 2.4.0-notes.rst.
    • 

  • Update .mailmap.
    • 

  • Update pyproject.toml

Set the release version

Check the pyproject.toml file and set the release version and update the classifier if needed::

$ gvim pyproject.toml

Check the doc/source/release.rst file

make sure that the release notes have an entry in the release.rst file::

... (truncated)

Commits

Updates pillow from 11.3.0 to 12.0.0

Release notes

Sourced from pillow's releases.

12.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits

Updates plotly from 6.2.0 to 6.5.0

Release notes

Sourced from plotly's releases.

v6.5.0

Updated

  • Update plotly.js from version 3.2.0 to version 3.3.0. See the plotly.js release notes for more information. [#5421]. Notable changes include:
    • Add hovertemplate for candlestick and ohlc traces [#7619]

Fixed

  • Fix bug where numpy datetime contained in Python list was converted to integer [#5415]

Full Changelog: plotly/plotly.py@v6.4.0...v6.5.0

v6.4.0

Updated

  • Update plotly.js from version 3.1.1 to version 3.2.0. See the plotly.js release notes for more information. [#5357]. Notable changes include:
    • Add hovertemplatefallback and texttemplatefallback attributes [#7577]
    • Add "SI extended" formatting rule for tick exponents on axis labels, allowing values to be displayed with extended SI prefixes (e.g., femto, pico, atto) [#7249]

Deprecated

  • Deprecate create_hexbin_mapbox in favor of create_hexbin_map, update related function calls [5358], with thanks to @​ajlien for the contribution!

v6.3.1

Updated

  • Update Plotly.js from version 3.1.0 to version 3.1.1. See the Plotly.js release notes for more information. [#5357]. Notable changes include:
    • Fix issue preventing Scattergl plots with text elements from rendering [plotly.js#7563]
  • Use native legends when converting from matplotlib [#5312], with thanks to @​robertoffmoura to the contribution!
  • Allow shared_yaxes to work with secondary axes [#5180], with thanks to @​gmjw for the contribution!

Fixed

  • Fix issue where width/height in plot layout were not respected during Kaleido image export [#5325]
  • Fix typo in default argument to _ternary_contour.py [#5315], with thanks to @​Lexachoc for the contribution!
  • Fix incorrect fig.show() behavior when ipython is installed [#5258]

Full Changelog: plotly/plotly.py@v6.3.0...v6.3.1

v6.3.0

Updated

  • Updated Plotly.js from version 3.0.1 to version 3.1.0. See the plotly.js

@dependabot
Bump the pip group across 1 directory with 31 updates
32d78c4 
Bumps the pip group with 31 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.4` | `4.14.3` |
| [biopython](https://github.com/biopython/biopython) | `1.85` | `1.86` |
| [bokeh](https://github.com/bokeh/bokeh) | `3.6.2` | `3.8.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.7.14` | `2025.11.12` |
| [cryptography](https://github.com/pyca/cryptography) | `45.0.5` | `46.0.3` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.0` | `4.25.1` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.8.2` | `3.10` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [networkx](https://github.com/networkx/networkx) | `3.4.2` | `3.6.1` |
| [numpy](https://github.com/numpy/numpy) | `2.2.3` | `2.4.0` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.0.0` |
| [plotly](https://github.com/plotly/plotly.py) | `6.2.0` | `6.5.0` |
| [pycurl](https://github.com/pycurl/pycurl) | `7.45.6` | `7.45.7` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `25.1.0` | `25.3.0` |
| [scipy](https://github.com/scipy/scipy) | `1.15.2` | `1.16.3` |
| [wordcloud](https://github.com/amueller/word_cloud) | `1.9.4` | `1.9.5` |
| [ipython](https://github.com/ipython/ipython) | `8.33.0` | `9.8.0` |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.7` | `8.1.8` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.1` | `2.3.3` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.13.2` | `4.15.5` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.1` | `1.8.0` |
| [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.5` | `0.14.6` |
| [tornado](https://github.com/tornadoweb/tornado) | `6.5.1` | `6.5.4` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.1` | `7.13.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `9.0.2` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.2.1` | `7.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.7` | `0.14.10` |
| [vcrpy](https://github.com/kevin1024/vcrpy) | `7.0.0` | `8.1.0` |



Updates `beautifulsoup4` from 4.13.4 to 4.14.3

Updates `biopython` from 1.85 to 1.86
- [Changelog](https://github.com/biopython/biopython/blob/master/NEWS.rst)
- [Commits](https://github.com/biopython/biopython/commits)

Updates `bokeh` from 3.6.2 to 3.8.1
- [Changelog](https://github.com/bokeh/bokeh/blob/3.8.1/docs/CHANGELOG)
- [Commits](bokeh/bokeh@3.6.2...3.8.1)

Updates `certifi` from 2025.7.14 to 2025.11.12
- [Commits](certifi/python-certifi@2025.07.14...2025.11.12)

Updates `cryptography` from 45.0.5 to 46.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@45.0.5...46.0.3)

Updates `idna` from 3.10 to 3.11
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.11)

Updates `jsonschema` from 4.25.0 to 4.25.1
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.0...v4.25.1)

Updates `markdown` from 3.8.2 to 3.10
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.8.2...3.10.0)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `networkx` from 3.4.2 to 3.6.1
- [Release notes](https://github.com/networkx/networkx/releases)
- [Commits](networkx/networkx@networkx-3.4.2...networkx-3.6.1)

Updates `numpy` from 2.2.3 to 2.4.0
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.2.3...v2.4.0)

Updates `pillow` from 11.3.0 to 12.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.0.0)

Updates `plotly` from 6.2.0 to 6.5.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v6.2.0...v6.5.0)

Updates `pycurl` from 7.45.6 to 7.45.7
- [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog)
- [Commits](https://github.com/pycurl/pycurl/commits)

Updates `pyopenssl` from 25.1.0 to 25.3.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@25.1.0...25.3.0)

Updates `scipy` from 1.15.2 to 1.16.3
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.15.2...v1.16.3)

Updates `wordcloud` from 1.9.4 to 1.9.5
- [Release notes](https://github.com/amueller/word_cloud/releases)
- [Changelog](https://github.com/amueller/word_cloud/blob/main/doc/changelog.rst)
- [Commits](amueller/word_cloud@1.9.4...1.9.5)

Updates `ipython` from 8.33.0 to 9.8.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@8.33.0...9.8.0)

Updates `ipywidgets` from 8.1.7 to 8.1.8
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.7...8.1.8)

Updates `pandas` from 2.3.1 to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.1...v2.3.3)

Updates `pymongo` from 4.13.2 to 4.15.5
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.13.2...4.15.5)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `scikit-learn` from 1.6.1 to 1.8.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.6.1...1.8.0)

Updates `statsmodels` from 0.14.5 to 0.14.6
- [Release notes](https://github.com/statsmodels/statsmodels/releases)
- [Changelog](https://github.com/statsmodels/statsmodels/blob/main/CHANGES.md)
- [Commits](statsmodels/statsmodels@v0.14.5...v0.14.6)

Updates `tornado` from 6.5.1 to 6.5.4
- [Changelog](https://github.com/tornadoweb/tornado/blob/v6.5.4/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.1...v6.5.4)

Updates `coverage` from 7.10.1 to 7.13.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.1...7.13.1)

Updates `pytest` from 8.4.1 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...9.0.2)

Updates `pytest-cov` from 6.2.1 to 7.0.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.2.1...v7.0.0)

Updates `ruff` from 0.12.7 to 0.14.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.7...0.14.10)

Updates `vcrpy` from 7.0.0 to 8.1.0
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v7.0.0...v8.1.0)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: biopython
  dependency-version: '1.86'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: bokeh
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 46.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: idna
  dependency-version: '3.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: jsonschema
  dependency-version: 4.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: markdown
  dependency-version: '3.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: networkx
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: numpy
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: plotly
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pycurl
  dependency-version: 7.45.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pyopenssl
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: scipy
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: wordcloud
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: ipython
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: ipywidgets
  dependency-version: 8.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pymongo
  dependency-version: 4.15.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: statsmodels
  dependency-version: 0.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: tornado
  dependency-version: 6.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: coverage
  dependency-version: 7.13.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pytest-cov
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: ruff
  dependency-version: 0.14.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: vcrpy
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 1, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 1, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant