Skip to content

Bump the pip-deps group across 1 directory with 7 updates - #348

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-16524fb30b
Closed

Bump the pip-deps group across 1 directory with 7 updates#348
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-16524fb30b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-deps group with 7 updates in the / directory:

Package From To
geopandas 1.1.2 1.1.3
numpy 2.4.2 2.4.3
boto3 1.42.61 1.42.68
botocore[crt] 1.42.61 1.42.68
asf-search 12.0.2 12.0.3
ruff 0.15.4 0.15.6
moto 5.1.21 5.1.22

Updates geopandas from 1.1.2 to 1.1.3

Release notes

Sourced from geopandas's releases.

Version 1.1.3

What's Changed

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points can now be fixed with rng (#3737).

Full Changelog: geopandas/geopandas@v1.1.2...v1.1.3

Changelog

Sourced from geopandas's changelog.

Version 1.1.3 (March 10, 2026)

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points`` can now be fixed with rng` (#3737).
Commits
  • f5fe3ff RLS: v1.1.3
  • c104670 pointpats <2.5.3 test compat
  • af36b14 ENH: add pointpats as an optional dependency & pass in rng (#3737)
  • d9ed84a COMPAT: fix failing test for loc concatenation crs preservation with pandas 3...
  • 1b1ddc2 MAINT: use trusted publishing for releasing to PyPI (#3734)
  • 8d0c05d changelog
  • a424f17 Avoid returning deep copies with pandas 3.0 (with Copy-on-Write) (#3298)
  • 03fa43e MAINT: cleanup release warning for project.license table (#3603)
  • 29fdb30 CI: remove usage of PANDAS_FUTURE_INFER_STRINGS=0 (#3715)
  • 9070e13 missing changelog entries
  • Additional commits viewable in compare view

Updates numpy from 2.4.2 to 2.4.3

Release notes

Sourced from numpy's releases.

2.4.3 (Mar 9, 2026)

NumPy 2.4.3 Release Notes

The NumPy 2.4.3 is a patch release that fixes bugs discovered after the 2.4.2 release. The most user visible fix may be a threading fix for OpenBLAS on ARM, closing issue #30816.

This release supports Python versions 3.11-3.14

Contributors

A total of 11 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Antareep Sarkar +
  • Charles Harris
  • Joren Hammudoglu
  • Matthieu Darbois
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Pieter Eendebak
  • Sebastian Berg
  • Warren Weckesser
  • stratakis +

Pull requests merged

A total of 14 pull requests were merged for this release.

  • #30759: MAINT: Prepare 2.4.x for further development
  • #30827: BUG: Fix some leaks found via LeakSanitizer (#30756)
  • #30841: MAINT: Synchronize 2.4.x submodules with main
  • #30849: TYP: matlib: missing extended precision imports
  • #30850: BUG: Fix weak hash function in np.isin(). (#30840)
  • #30921: BUG: fix infinite recursion in np.ma.flatten_structured_array...
  • #30922: BUG: Fix buffer overrun in CPU baseline validation (#30877)
  • #30923: BUG: Fix busdaycalendar's handling of a bool array weekmask....
  • #30924: BUG: Fix reference leaks and NULL pointer dereferences (#30908)
  • #30925: MAINT: fix two minor issues noticed when touching the C API setup
  • #30955: ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • #30957: BUG: fix type issues in uses if PyDataType macros
  • #30958: MAINT: Don't use vulture 2.15, it has false positives
  • #30973: MAINT: update openblas (#30961)
Commits
  • 8bcb2e7 Merge pull request #30974 from charris/prepare-2.4.3
  • 9a2b5ee REL: Prepare for the NumPy 2.4.3 release
  • a822ac2 Merge pull request #30973 from charris/backport-30961
  • 039bf54 MAINT: update openblas (#30961)
  • 254bafa Merge pull request #30955 from charris/backport-30879
  • 0cc7d38 ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • 9ee571d Merge pull request #30957 from charris/backport-30918
  • f302a16 Merge pull request #30958 from charris/backport-30938
  • d240a09 MAINT: Don't use vulture 2.15, it has false positives
  • 4fc08e9 MAINT: Don't use vulture 2.15, it has false positives
  • Additional commits viewable in compare view

Updates boto3 from 1.42.61 to 1.42.68

Commits
  • 6b10acd Merge branch 'release-1.42.68'
  • 0b7dcef Bumping version to 1.42.68
  • 5754b6f Add changelog entries from botocore
  • b1ff6b0 Merge branch 'release-1.42.67'
  • d62e89b Merge branch 'release-1.42.67' into develop
  • 3a20a6a Bumping version to 1.42.67
  • 6724c7e Add changelog entries from botocore
  • d233684 Merge branch 'release-1.42.66'
  • 7d89871 Merge branch 'release-1.42.66' into develop
  • 4f44a49 Bumping version to 1.42.66
  • Additional commits viewable in compare view

Updates botocore[crt] from 1.42.61 to 1.42.68

Commits
  • 7a0027d Merge branch 'release-1.42.68'
  • e735b45 Bumping version to 1.42.68
  • 8db5e18 Update endpoints model
  • 32ca194 Update to latest models
  • d45e39f Raise TypeError on bare test decorator usage and add regression tests (#3649)
  • 946ffef Merge branch 'release-1.42.67'
  • 6552428 Merge branch 'release-1.42.67' into develop
  • 8adef35 Bumping version to 1.42.67
  • ac82811 Update endpoints model
  • d3ee64d Update to latest models
  • Additional commits viewable in compare view

Updates asf-search from 12.0.2 to 12.0.3

Release notes

Sourced from asf-search's releases.

v12.0.3

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Changelog

Sourced from asf-search's changelog.

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Commits
  • 03ec63a Merge pull request #432 from asfadmin/topic-nisar-oe-lookup
  • 54e436e feat: add orbitType to jsonlite outputs
  • 66d1e44 feat: parse orbitType field on NISARProducts
  • 784b2e0 Merge pull request #427 from asfadmin/topic-aria-version
  • 199bf71 docs: add docstring to search method parameters
  • 3d8c74e docs: update changelog
  • 5157ade Merge branch 'master' into topic-aria-version
  • b73fbfe docs: changelog updates
  • d359afb feat: add aria version search attribute
  • See full diff in compare view

Updates ruff from 0.15.4 to 0.15.6

Release notes

Sourced from ruff's releases.

0.15.6

Release Notes

Released on 2026-03-12.

Preview features

  • Add support for lazy import parsing (#23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#23788)
  • Reject semantic syntax errors for lazy imports (#23757)
  • Drop a few rules from the preview default set (#23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
  • [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
  • [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
  • [isort] Retain lazy keyword when sorting imports (#23762)
  • [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
  • [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
  • [ruff] Add os-path-commonprefix (RUF071) (#23814)
  • [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
  • [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
  • [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

  • Fix --add-noqa creating unwanted leading whitespace (#23773)
  • Fix --add-noqa breaking shebangs (#23577)
  • [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
  • [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
  • [formatter] Preserve type-expression parentheses in the formatter (#23867)
  • [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
  • [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
  • [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
  • [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
  • [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

  • [flake8-bandit] Flag S501 with requests.request (#23873)
  • [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
  • [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

  • Update docs for Markdown code block formatting (#23871)
  • [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.6

Released on 2026-03-12.

Preview features

  • Add support for lazy import parsing (#23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#23788)
  • Reject semantic syntax errors for lazy imports (#23757)
  • Drop a few rules from the preview default set (#23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
  • [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
  • [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
  • [isort] Retain lazy keyword when sorting imports (#23762)
  • [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
  • [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
  • [ruff] Add os-path-commonprefix (RUF071) (#23814)
  • [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
  • [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
  • [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

  • Fix --add-noqa creating unwanted leading whitespace (#23773)
  • Fix --add-noqa breaking shebangs (#23577)
  • [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
  • [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
  • [formatter] Preserve type-expression parentheses in the formatter (#23867)
  • [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
  • [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
  • [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
  • [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
  • [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

  • [flake8-bandit] Flag S501 with requests.request (#23873)
  • [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
  • [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

  • Update docs for Markdown code block formatting (#23871)
  • [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

... (truncated)

Commits
  • e4c7f35 Bump 0.15.6 (#23919)
  • edfe6c1 [ty] Narrow type context during collection literal inference (#23844)
  • dd16d68 Exclude broken symlink in ecosystem check (#23921)
  • 3f94c6a Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23...
  • 91fc7bd [ty] Fix false-positive diagnostics for PEP-604 union annotations on attribut...
  • 04229cf [ty] Initial test suite for PEP-728 TypedDict features (#23832)
  • 728b9d6 [pep8-naming] Check naming conventions in match pattern bindings (N806,...
  • 88d1eec [ty] Ensure a type[] type T is always considered assignable to a union th...
  • 37cdd61 Fix lambda body formatting for multiline calls and subscripts (#23866)
  • a25a4df [ty] Disambiguate duplicate-looking overloaded callables in union display (#2...
  • Additional commits viewable in compare view

Updates moto from 5.1.21 to 5.1.22

Changelog

Sourced from moto's changelog.

5.1.22

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

* Athena:
    * tag_resource()
    * untag_resource()

    

  • 

    Pipes:
    

      

    • list_tags_for_resource()
      • 

    

    • 

  • 

    OSIS:
    

      

    • delete_resource_policy()
      • 

    • get_resource_policy()
      • 

    • put_resource_policy()
      • 

    

    • 

  • 

    RDS:
    

      

    • copy_db_cluster_parameter_group()
      • 

    

    • 

  • 

    STS:
    

      

    • get_access_key_info()
      • 

    

    • 

  • 

    Transfer:
    

      

    • list_servers()
      






Miscellaneous:

* CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources

* CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources

* CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources

* EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides

* EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter

* EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags

* RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy

* RDS: delete_db_cluster_parameter_group() now validates that the provided group exists

* S3: delete_object() now supports IfMatch

* SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)

* SQS: send_message() now returns the SequenceNumber-attribute

* VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip-deps group across 1 directory with 7 updates
fc7f0f6 
Bumps the pip-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [geopandas](https://github.com/geopandas/geopandas) | `1.1.2` | `1.1.3` |
| [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.4.3` |
| [boto3](https://github.com/boto/boto3) | `1.42.61` | `1.42.68` |
| [botocore[crt]](https://github.com/boto/botocore) | `1.42.61` | `1.42.68` |
| [asf-search](https://github.com/asfadmin/Discovery-asf_search) | `12.0.2` | `12.0.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.6` |
| [moto](https://github.com/getmoto/moto) | `5.1.21` | `5.1.22` |



Updates `geopandas` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/main/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.2...v1.1.3)

Updates `numpy` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.2...v2.4.3)

Updates `boto3` from 1.42.61 to 1.42.68
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.61...1.42.68)

Updates `botocore[crt]` from 1.42.61 to 1.42.68
- [Commits](boto/botocore@1.42.61...1.42.68)

Updates `asf-search` from 12.0.2 to 12.0.3
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.0.2...v12.0.3)

Updates `ruff` from 0.15.4 to 0.15.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.6)

Updates `moto` from 5.1.21 to 5.1.22
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.21...5.1.22)

---
updated-dependencies:
- dependency-name: geopandas
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: numpy
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.42.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: botocore[crt]
  dependency-version: 1.42.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: ruff
  dependency-version: 0.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: moto
  dependency-version: 5.1.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version patch Bump the patch version number of this project labels Mar 16, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner March 16, 2026 18:41
@dependabot @github

dependabot Bot commented on behalf of github Mar 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 23, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/pip-deps-16524fb30b branch March 23, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version patch Bump the patch version number of this project

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants