Skip to content

Bump the pip-deps group across 1 directory with 10 updates - #352

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-19e8887b0d
Closed

Bump the pip-deps group across 1 directory with 10 updates#352
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-19e8887b0d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-deps group with 10 updates in the / directory:

Package From To
setuptools-scm 9.2.2 10.0.5
geopandas 1.1.2 1.1.3
requests 2.32.5 2.33.1
numpy 2.4.2 2.4.4
boto3 1.42.61 1.42.78
botocore 1.42.61 1.42.78
asf-search 12.0.2 12.0.6
cfn-lint 1.46.0 1.47.1
ruff 0.15.4 0.15.8
moto 5.1.21 5.1.22

Updates setuptools-scm from 9.2.2 to 10.0.5

Release notes

Sourced from setuptools-scm's releases.

setuptools-scm v10.0.5

Fixed

  • Allow dump_version() deprecation warning to be silenced by passing scm_version=None. (#1286)
  • Remove [tool.uv.sources] from setuptools-scm/pyproject.toml to fix sdist builds outside the workspace — the workspace root already declares the source mapping for development. (#1330)

setuptools-scm v10.0.4

Fixed

  • Anchor get_version in setup.py with relative_to and fallback_root so SCM fallbacks (e.g. PKG-INFO) do not resolve against the wrong directory when the build cwd is the workspace or repo root. (#1302)
  • Enter GlobalOverrides for SETUPTOOLS_SCM when using setuptools_scm.get_version / _get_version, avoiding implicit context warnings for direct API callers. (#1314)

Miscellaneous

  • Upgrade pre-commit hooks (Ruff, mypy, codespell), align locked Ruff with hooks, and add Ruff per-file configuration for setuptools_scm re-export modules. (#1311)

setuptools-scm v10.0.3

Fixed

  • Remove monorepo-only ../vcs-versioning/src from build-system.backend-path so sdists install under PEP 517 (paths must stay inside the source tree). (#1306)

Miscellaneous

  • Add griffecli to test dependencies so the API stability check keeps working after the Griffe CLI was split into a separate package. (#1310)

setuptools-scm v10.0.2

Fixed

  • Fix version file not generated for editable installs. Version files are now written to the source tree by default during inference (restoring pre-10.x behavior), and also registered as build_py outputs so strict editable installs include them in the persistent auxiliary directory. Set SETUPTOOLS_SCM_WRITE_TO_SOURCE=0 to disable source-tree writing (e.g., for read-only source directories). (#1298)

setuptools-scm v10.0.1

Miscellaneous

  • Simplify release tag creation to use a single createRelease API call instead of separate createTag/createRef/createRelease calls, avoiding dangling tag objects on partial failures. (#release-pipeline)

setuptools-scm v10.0.0

Removed

  • Drop Python 3.8 and 3.9 support. Minimum Python version is now 3.10. (#1228)

Added

  • setuptools-scm now depends on vcs-versioning for core version inference logic. This enables other build backends to use the same version inference without setuptools dependency. (#1228)
  • Version files (write_to and version_file) are now written to the build directory during build_py instead of the source tree during version inference. This enables installing packages from read-only source directories (e.g., Bazel builds).

... (truncated)

Commits
  • e2ba34f Merge pull request #1328 from pypa/release/main
  • d34d072 Prepare release: setuptools-scm v10.0.5
  • 7c62809 Merge pull request #1332 from RonnyPfannschmidt/fix/1330-remove-workspace-sou...
  • f600a29 fix: remove workspace source override from setuptools-scm member (fixes #1330)
  • f76244e Merge pull request #1327 from RonnyPfannschmidt/update-classifiers-python-3.14
  • 8c23c5b Merge pull request #1286 from effigies/scm_version_sentinel
  • 629842a build: update trove classifiers and add Python 3.14 support
  • 6a1fc3b Merge pull request #1318 from pypa/release/main
  • a63b13a Prepare release: setuptools-scm v10.0.4, vcs-versioning v1.1.0
  • 59275f7 Merge pull request #1325 from RonnyPfannschmidt/issue-1302-setuptools-build-b...
  • Additional commits viewable in compare view

Updates geopandas from 1.1.2 to 1.1.3

Release notes

Sourced from geopandas's releases.

Version 1.1.3

What's Changed

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points can now be fixed with rng (#3737).

Full Changelog: geopandas/geopandas@v1.1.2...v1.1.3

Changelog

Sourced from geopandas's changelog.

Version 1.1.3 (March 10, 2026)

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points`` can now be fixed with rng` (#3737).
Commits
  • f5fe3ff RLS: v1.1.3
  • c104670 pointpats <2.5.3 test compat
  • af36b14 ENH: add pointpats as an optional dependency & pass in rng (#3737)
  • d9ed84a COMPAT: fix failing test for loc concatenation crs preservation with pandas 3...
  • 1b1ddc2 MAINT: use trusted publishing for releasing to PyPI (#3734)
  • 8d0c05d changelog
  • a424f17 Avoid returning deep copies with pandas 3.0 (with Copy-on-Write) (#3298)
  • 03fa43e MAINT: cleanup release warning for project.license table (#3603)
  • 29fdb30 CI: remove usage of PANDAS_FUTURE_INFER_STRINGS=0 (#3715)
  • 9070e13 missing changelog entries
  • Additional commits viewable in compare view

Updates requests from 2.32.5 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits

Updates numpy from 2.4.2 to 2.4.4

Release notes

Sourced from numpy's releases.

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

The NumPy 2.4.4 is a patch release that fixes bugs discovered after the 2.4.3 release. It should finally close issue #30816, the OpenBLAS threading problem on ARM.

This release supports Python versions 3.11-3.14

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Daniel Haag +
  • Denis Prokopenko +
  • Harshith J +
  • Koki Watanabe
  • Marten van Kerkwijk
  • Matti Picus
  • Nathan Goldbaum

Pull requests merged

A total of 7 pull requests were merged for this release.

  • #30978: MAINT: Prepare 2.4.x for further development
  • #31049: BUG: Add test to reproduce problem described in #30816 (#30818)
  • #31052: BUG: fix FNV-1a 64-bit selection by using NPY_SIZEOF_UINTP (#31035)
  • #31053: BUG: avoid warning on ufunc with where=True and no output
  • #31058: DOC: document caveats of ndarray.resize on 3.14 and newer
  • #31079: TST: fix POWER VSX feature mapping (#30801)
  • #31084: MAINT: numpy.i: Replace deprecated sprintf with snprintf...

2.4.3 (Mar 9, 2026)

NumPy 2.4.3 Release Notes

The NumPy 2.4.3 is a patch release that fixes bugs discovered after the 2.4.2 release. The most user visible fix may be a threading fix for OpenBLAS on ARM, closing issue #30816.

This release supports Python versions 3.11-3.14

Contributors

A total of 11 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Antareep Sarkar +

... (truncated)

Commits
  • be93fe2 Merge pull request #31090 from charris/prepare-2.4.4
  • f5245dc REL: Prepare for the NumPy 2.4.4 release
  • 02e838b Merge pull request #31084 from charris/backport-31056
  • fa74b2d MAINT: numpy.i: Replace deprecated sprintf with snprintf (#31056)
  • 533a6db Merge pull request #31079 from charris/backport-20801
  • 9e496cb TST: fix POWER VSX feature mapping (#30801)
  • 8052c4b Merge pull request #31058 from charris/backport-31021
  • 7f13b5a MAINT: Skip test on PyPy.
  • 4c5fdd6 MAINT: Remove unused import of tracemalloc.
  • a3ca5ed Update numpy/_core/src/multiarray/shape.c
  • Additional commits viewable in compare view

Updates boto3 from 1.42.61 to 1.42.78

Commits
  • b5acf8b Merge branch 'release-1.42.78'
  • 1da17a5 Bumping version to 1.42.78
  • e298b64 Add changelog entries from botocore
  • 48369ea Merge branch 'release-1.42.77'
  • 8c30411 Merge branch 'release-1.42.77' into develop
  • 4398c8e Bumping version to 1.42.77
  • 7c449e2 Add changelog entries from botocore
  • ee6c3e4 Merge branch 'release-1.42.76'
  • a5ad9c3 Merge branch 'release-1.42.76' into develop
  • 1abf640 Bumping version to 1.42.76
  • Additional commits viewable in compare view

Updates botocore from 1.42.61 to 1.42.78

Commits
  • 08282cd Merge branch 'release-1.42.78'
  • 059d997 Bumping version to 1.42.78
  • 9e1c511 Update to latest models
  • a42e6cf Merge branch 'release-1.42.77'
  • ea561b3 Merge branch 'release-1.42.77' into develop
  • 7906a34 Bumping version to 1.42.77
  • 7f9c3cd Update endpoints model
  • 1db4cef Update to latest models
  • eded7ce Merge branch 'release-1.42.76'
  • 85f623c Merge branch 'release-1.42.76' into develop
  • Additional commits viewable in compare view

Updates asf-search from 12.0.2 to 12.0.6

Release notes

Sourced from asf-search's releases.

v12.0.6

v12.0.6

Added

  • utils module added as top level module
    • get_nisar_orbit_ephemeras() method returns dictionary with latest NISAR POE, MOE, NOE, and FOE orbit ephemeras

Fixed

  • Fix track based searches when processingLevel specified on NISAR dataset searches

v12.0.5

v12.0.5

Added

  • DIST-ALERT-S1 product type to OPERA dataset
    • TileID searchable attribute
    • productVersion attribute

Fixed

  • Fix edge-case with platform & processingLevel concept-id aliasing

v12.0.4

v12.0.4

Fixed

  • Updated NISAR dataset/platform concept-ids

v12.0.3

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Changelog

Sourced from asf-search's changelog.

v12.0.6

Added

  • utils module added as top level module
    • get_nisar_orbit_ephemeras() method returns dictionary with latest NISAR POE, MOE, NOE, and FOE orbit ephemeras

Fixed

  • Fix track based searches when processingLevel specified on NISAR dataset searches

v12.0.5

Added

  • DIST-ALERT-S1 product type to OPERA dataset
    • TileID searchable attribute
    • productVersion attribute

Fixed

  • Fix edge-case with platform & processingLevel concept-id aliasing

v12.0.4

Fixed

  • Updated NISAR dataset/platform concept-ids

v12.0.3

Added

  • Add ariaVersion as a searchable attribute
  • Add orbitType to NISARProduct properties dictionary
Commits
  • 0f8226f Merge pull request #440 from asfadmin/feat-nisar-oe-helper
  • 47e6593 feat: adds utils module with get_nisar_orbit_ephemeras() method.
  • 66fadbb Merge pull request #439 from asfadmin/bug-nisar-track-fix
  • 95cc067 chore: update changelog
  • 1f601ed bug: fix regression with frame search
  • bb7dfaa chore: add todo comment for nsiar frame bug
  • 6ec9957 fix: fix track not working when only specificying nisar dataset
  • 3efaa28 test: update authenticated NISAR test case
  • 3e3d577 Merge pull request #437 from asfadmin/feat-opera-dist
  • 9e0f3e8 fix: add tileID to search.py
  • Additional commits viewable in compare view

Updates cfn-lint from 1.46.0 to 1.47.1

Release notes

Sourced from cfn-lint's releases.

Release v1.47.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.47.0...v1.47.1

Release v1.47.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.46.0...v1.47.0

Changelog

Sourced from cfn-lint's changelog.

v1.47.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.47.0...v1.47.1

v1.47.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.46.0...v1.47.0

Commits
  • a351953 Release v1.47.1 (#4407)
  • 753166b Update CloudFormation schemas to 2026-03-24 (#4404)
  • e0b7014 Allow JSONata string expressions for Arguments in Step Functions (#4403)
  • 99dcefb Support multi-attribute composite keys in DynamoDB GSI KeySchema (#4402)
  • 001d1d1 Add EngineVersion of 8.0.0 to DocDB Cluster (#4401)
  • 5d6f815 Fix KeyError when AmazonGuardDutyFullAccess policy no longer exists (#4400)
  • bb96eb3 Cap resolve_value permutations to prevent exponential blowup (#4394)
  • 4aafe3a Fix E3677 false positive when Code is a string (aws-cli pattern) (#4399)
  • e69698a Release v1.47.0 (#4391)
  • d54d24b Update CloudFormation schemas to 2026-03-13 (#4386)
  • Additional commits viewable in compare view

Updates ruff from 0.15.4 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Commits
  • c2a8815 Release 0.15.8 (#24217)
  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
  • d812662 Use the release environment in publish-docs (#24214)
  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
  • 34998be [ty] Fix typo in comment (#24211)
  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
  • Additional commits viewable in compare view

Updates moto from 5.1.21 to 5.1.22

Changelog

Sourced from moto's changelog.

5.1.22

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

* Athena:
    * tag_resource()
    * untag_resource()

    

  • 

    Pipes:
    

      

    • list_tags_for_resource()
      • 

    

    • 

  • 

    OSIS:
    

      

    • delete_resource_policy()
      • 

    • get_resource_policy()
      • 

    • put_resource_policy()
      • 

    

    • 

  • 

    RDS:
    

      

    • copy_db_cluster_parameter_group()
      • 

    

    • 

  • 

    STS:
    

      

    • get_access_key_info()
      • 

    

    • 

  • 

    Transfer:
    

      

    • list_servers()
      






Miscellaneous:

* CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources

* CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources

* CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources

* EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides

* EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter

* EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags

* RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy

* RDS: delete_db_cluster_parameter_group() now validates that the provided group exists

* S3: delete_object() now supports IfMatch

* SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)

* SQS: send_message() now returns the SequenceNumber-attribute

* VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specifi...

Description has been truncated

@dependabot
Bump the pip-deps group across 1 directory with 10 updates
9015916 
Bumps the pip-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `9.2.2` | `10.0.5` |
| [geopandas](https://github.com/geopandas/geopandas) | `1.1.2` | `1.1.3` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.1` |
| [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.4.4` |
| [boto3](https://github.com/boto/boto3) | `1.42.61` | `1.42.78` |
| [botocore](https://github.com/boto/botocore) | `1.42.61` | `1.42.78` |
| [asf-search](https://github.com/asfadmin/Discovery-asf_search) | `12.0.2` | `12.0.6` |
| [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.46.0` | `1.47.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.8` |
| [moto](https://github.com/getmoto/moto) | `5.1.21` | `5.1.22` |



Updates `setuptools-scm` from 9.2.2 to 10.0.5
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@v9.2.2...setuptools-scm-v10.0.5)

Updates `geopandas` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/main/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.2...v1.1.3)

Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `numpy` from 2.4.2 to 2.4.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.2...v2.4.4)

Updates `boto3` from 1.42.61 to 1.42.78
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.61...1.42.78)

Updates `botocore` from 1.42.61 to 1.42.78
- [Commits](boto/botocore@1.42.61...1.42.78)

Updates `asf-search` from 12.0.2 to 12.0.6
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.0.2...v12.0.6)

Updates `cfn-lint` from 1.46.0 to 1.47.1
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.46.0...v1.47.1)

Updates `ruff` from 0.15.4 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.8)

Updates `moto` from 5.1.21 to 5.1.22
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.21...5.1.22)

---
updated-dependencies:
- dependency-name: setuptools-scm
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: geopandas
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: numpy
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.42.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: botocore
  dependency-version: 1.42.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: cfn-lint
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: moto
  dependency-version: 5.1.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels Mar 30, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner March 30, 2026 19:28
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels Mar 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 31, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 31, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/pip-deps-19e8887b0d branch March 31, 2026 22:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants