Skip to content

Bump the pip-deps group across 1 directory with 8 updates - #349

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-a35f8b9f6a
Closed

Bump the pip-deps group across 1 directory with 8 updates#349
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-a35f8b9f6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-deps group with 8 updates in the / directory:

Package From To
geopandas 1.1.2 1.1.3
numpy 2.4.2 2.4.3
boto3 1.42.61 1.42.73
botocore[crt] 1.42.61 1.42.73
asf-search 12.0.2 12.0.4
cfn-lint 1.46.0 1.47.0
ruff 0.15.4 0.15.7
moto 5.1.21 5.1.22

Updates geopandas from 1.1.2 to 1.1.3

Release notes

Sourced from geopandas's releases.

Version 1.1.3

What's Changed

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points can now be fixed with rng (#3737).

Full Changelog: geopandas/geopandas@v1.1.2...v1.1.3

Changelog

Sourced from geopandas's changelog.

Version 1.1.3 (March 10, 2026)

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points`` can now be fixed with rng` (#3737).
Commits
  • f5fe3ff RLS: v1.1.3
  • c104670 pointpats <2.5.3 test compat
  • af36b14 ENH: add pointpats as an optional dependency & pass in rng (#3737)
  • d9ed84a COMPAT: fix failing test for loc concatenation crs preservation with pandas 3...
  • 1b1ddc2 MAINT: use trusted publishing for releasing to PyPI (#3734)
  • 8d0c05d changelog
  • a424f17 Avoid returning deep copies with pandas 3.0 (with Copy-on-Write) (#3298)
  • 03fa43e MAINT: cleanup release warning for project.license table (#3603)
  • 29fdb30 CI: remove usage of PANDAS_FUTURE_INFER_STRINGS=0 (#3715)
  • 9070e13 missing changelog entries
  • Additional commits viewable in compare view

Updates numpy from 2.4.2 to 2.4.3

Release notes

Sourced from numpy's releases.

2.4.3 (Mar 9, 2026)

NumPy 2.4.3 Release Notes

The NumPy 2.4.3 is a patch release that fixes bugs discovered after the 2.4.2 release. The most user visible fix may be a threading fix for OpenBLAS on ARM, closing issue #30816.

This release supports Python versions 3.11-3.14

Contributors

A total of 11 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Antareep Sarkar +
  • Charles Harris
  • Joren Hammudoglu
  • Matthieu Darbois
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Pieter Eendebak
  • Sebastian Berg
  • Warren Weckesser
  • stratakis +

Pull requests merged

A total of 14 pull requests were merged for this release.

  • #30759: MAINT: Prepare 2.4.x for further development
  • #30827: BUG: Fix some leaks found via LeakSanitizer (#30756)
  • #30841: MAINT: Synchronize 2.4.x submodules with main
  • #30849: TYP: matlib: missing extended precision imports
  • #30850: BUG: Fix weak hash function in np.isin(). (#30840)
  • #30921: BUG: fix infinite recursion in np.ma.flatten_structured_array...
  • #30922: BUG: Fix buffer overrun in CPU baseline validation (#30877)
  • #30923: BUG: Fix busdaycalendar's handling of a bool array weekmask....
  • #30924: BUG: Fix reference leaks and NULL pointer dereferences (#30908)
  • #30925: MAINT: fix two minor issues noticed when touching the C API setup
  • #30955: ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • #30957: BUG: fix type issues in uses if PyDataType macros
  • #30958: MAINT: Don't use vulture 2.15, it has false positives
  • #30973: MAINT: update openblas (#30961)
Commits
  • 8bcb2e7 Merge pull request #30974 from charris/prepare-2.4.3
  • 9a2b5ee REL: Prepare for the NumPy 2.4.3 release
  • a822ac2 Merge pull request #30973 from charris/backport-30961
  • 039bf54 MAINT: update openblas (#30961)
  • 254bafa Merge pull request #30955 from charris/backport-30879
  • 0cc7d38 ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • 9ee571d Merge pull request #30957 from charris/backport-30918
  • f302a16 Merge pull request #30958 from charris/backport-30938
  • d240a09 MAINT: Don't use vulture 2.15, it has false positives
  • 4fc08e9 MAINT: Don't use vulture 2.15, it has false positives
  • Additional commits viewable in compare view

Updates boto3 from 1.42.61 to 1.42.73

Commits
  • 3a06d63 Merge branch 'release-1.42.73'
  • ca7b043 Bumping version to 1.42.73
  • ef6697c Add changelog entries from botocore
  • 3c02c15 Merge branch 'release-1.42.72'
  • b7e01e9 Merge branch 'release-1.42.72' into develop
  • fcc3fe3 Bumping version to 1.42.72
  • 9d3625e Add changelog entries from botocore
  • dd8d8d6 Merge branch 'release-1.42.71'
  • 0d4401e Merge branch 'release-1.42.71' into develop
  • 45318a5 Bumping version to 1.42.71
  • Additional commits viewable in compare view

Updates botocore[crt] from 1.42.61 to 1.42.73

Commits
  • 08d494a Merge branch 'release-1.42.73'
  • 15967c3 Bumping version to 1.42.73
  • cd4cb60 Update endpoints model
  • 81d0826 Update to latest models
  • b2e20b2 Fix aws-chunked Content-Length handling for non-seekable S3 uploads (#3652)
  • 9a8fcce Merge branch 'release-1.42.72'
  • c251a91 Merge branch 'release-1.42.72' into develop
  • 0776153 Bumping version to 1.42.72
  • 09c9273 Update endpoints model
  • 983a4a2 Update to latest models
  • Additional commits viewable in compare view

Updates asf-search from 12.0.2 to 12.0.4

Release notes

Sourced from asf-search's releases.

v12.0.4

v12.0.4

Fixed

  • Updated NISAR dataset/platform concept-ids

v12.0.3

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Changelog

Sourced from asf-search's changelog.

v12.0.4

Fixed

  • Updated NISAR dataset/platform concept-ids

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Commits
  • 7f8cf0d Merge pull request #434 from asfadmin/chore-nisar-collections-update
  • 75cf362 fix: remove CRSD from NISAR dataset to prevent from showing in default search...
  • 434ed21 Chore: update test case, re-add crsd but as non-science product.
  • 0cc447b chore: update NISAR collection concept-ids
  • 03ec63a Merge pull request #432 from asfadmin/topic-nisar-oe-lookup
  • 54e436e feat: add orbitType to jsonlite outputs
  • 66d1e44 feat: parse orbitType field on NISARProducts
  • 784b2e0 Merge pull request #427 from asfadmin/topic-aria-version
  • 199bf71 docs: add docstring to search method parameters
  • 3d8c74e docs: update changelog
  • Additional commits viewable in compare view

Updates cfn-lint from 1.46.0 to 1.47.0

Release notes

Sourced from cfn-lint's releases.

Release v1.47.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.46.0...v1.47.0

Changelog

Sourced from cfn-lint's changelog.

v1.47.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.46.0...v1.47.0

Commits
  • e69698a Release v1.47.0 (#4391)
  • d54d24b Update CloudFormation schemas to 2026-03-13 (#4386)
  • b2c4f5f chore(deps): bump setuptools from 82.0.0 to 82.0.1 in /requirements (#4385)
  • ae5883f Fix/skip resolve unconstrained schema (#4388)
  • 1d40bb4 Update CloudFormation schemas to 2026-03-10 (#4381)
  • 09f25d0 Add unknown validation state for intrinsic functions in composite validators ...
  • 6e5bf6a feat: add region filtering to --update-specs (#4382)
  • f84f897 Remove Python 3.9 support (EOL October 2025) (#4383)
  • See full diff in compare view

Updates ruff from 0.15.4 to 0.15.7

Release notes

Sourced from ruff's releases.

0.15.7

Release Notes

Released on 2026-03-19.

Preview features

  • Display output severity in preview (#23845)
  • Don't show noqa hover for non-Python documents (#24040)

Rule changes

  • [pycodestyle] Recognize pyrefly: as a pragma comment (E501) (#24019)

Server

  • Don't return code actions for non-Python documents (#23905)

Documentation

  • Add company AI policy to contributing guide (#24021)
  • Document editor features for Markdown code formatting (#23924)
  • [pylint] Improve phrasing (PLC0208) (#24033)

Other changes

  • Use PEP 639 license information (#19661)

Contributors

Install ruff 0.15.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.7/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.7/ruff-installer.ps1 | iex"
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.7

Released on 2026-03-19.

Preview features

  • Display output severity in preview (#23845)
  • Don't show noqa hover for non-Python documents (#24040)

Rule changes

  • [pycodestyle] Recognize pyrefly: as a pragma comment (E501) (#24019)

Server

  • Don't return code actions for non-Python documents (#23905)

Documentation

  • Add company AI policy to contributing guide (#24021)
  • Document editor features for Markdown code formatting (#23924)
  • [pylint] Improve phrasing (PLC0208) (#24033)

Other changes

  • Use PEP 639 license information (#19661)

Contributors

0.15.6

Released on 2026-03-12.

Preview features

  • Add support for lazy import parsing (#23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#23788)
  • Reject semantic syntax errors for lazy imports (#23757)
  • Drop a few rules from the preview default set (#23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)

... (truncated)

Commits
  • 0ef39de Bump 0.15.7 (#24049)
  • beb543b [ty] ecosystem-analyzer: Fail on newly panicking projects (#24043)
  • 378fe73 Don't show noqa hover for non-Python documents (#24040)
  • b5665bd [pylint] Improve phrasing (PLC0208) (#24033)
  • 6e20f22 test: migrate show_settings and version tests to use CliTest (#23702)
  • f99b284 Drain file watcher events during test setup (#24030)
  • 744c996 [ty] Filter out unsatisfiable inference attempts during generic call narrowin...
  • 1616095 [ty] Avoid inferring intersection types for call arguments (#23933)
  • 7f275f4 [ty] Pin mypy_primer in setup_primer_project.py (#24020)
  • 7255e36 [pycodestyle] Recognize pyrefly: as a pragma comment (E501) (#24019)
  • Additional commits viewable in compare view

Updates moto from 5.1.21 to 5.1.22

Changelog

Sourced from moto's changelog.

5.1.22

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

* Athena:
    * tag_resource()
    * untag_resource()

    

  • 

    Pipes:
    

      

    • list_tags_for_resource()
      • 

    

    • 

  • 

    OSIS:
    

      

    • delete_resource_policy()
      • 

    • get_resource_policy()
      • 

    • put_resource_policy()
      • 

    

    • 

  • 

    RDS:
    

      

    • copy_db_cluster_parameter_group()
      • 

    

    • 

  • 

    STS:
    

      

    • get_access_key_info()
      • 

    

    • 

  • 

    Transfer:
    

      

    • list_servers()
      






Miscellaneous:

* CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources

* CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources

* CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources

* EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides

* EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter

* EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags

* RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy

* RDS: delete_db_cluster_parameter_group() now validates that the provided group exists

* S3: delete_object() now supports IfMatch

* SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)

* SQS: send_message() now returns the SequenceNumber-attribute

* VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip-deps group across 1 directory with 8 updates
32956c5 
Bumps the pip-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [geopandas](https://github.com/geopandas/geopandas) | `1.1.2` | `1.1.3` |
| [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.4.3` |
| [boto3](https://github.com/boto/boto3) | `1.42.61` | `1.42.73` |
| [botocore[crt]](https://github.com/boto/botocore) | `1.42.61` | `1.42.73` |
| [asf-search](https://github.com/asfadmin/Discovery-asf_search) | `12.0.2` | `12.0.4` |
| [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.46.0` | `1.47.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.7` |
| [moto](https://github.com/getmoto/moto) | `5.1.21` | `5.1.22` |



Updates `geopandas` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/main/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.2...v1.1.3)

Updates `numpy` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.2...v2.4.3)

Updates `boto3` from 1.42.61 to 1.42.73
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.61...1.42.73)

Updates `botocore[crt]` from 1.42.61 to 1.42.73
- [Commits](boto/botocore@1.42.61...1.42.73)

Updates `asf-search` from 12.0.2 to 12.0.4
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.0.2...v12.0.4)

Updates `cfn-lint` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.46.0...v1.47.0)

Updates `ruff` from 0.15.4 to 0.15.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.7)

Updates `moto` from 5.1.21 to 5.1.22
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.21...5.1.22)

---
updated-dependencies:
- dependency-name: geopandas
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: numpy
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.42.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: botocore[crt]
  dependency-version: 1.42.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: cfn-lint
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: ruff
  dependency-version: 0.15.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: moto
  dependency-version: 5.1.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version minor Bump the minor version number of this project labels Mar 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner March 23, 2026 18:24
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version minor Bump the minor version number of this project labels Mar 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 30, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/pip-deps-a35f8b9f6a branch March 30, 2026 19:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version minor Bump the minor version number of this project

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants