Skip to content

[Tech] Python - Bump the non-major-dependencies group in /pipeline with 6 updates - #5473

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pipeline/non-major-dependencies-6c030b5bc8
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pipeline/non-major-dependencies-6c030b5bc8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the non-major-dependencies group in /pipeline with 6 updates:

Package From To
pypdf 6.18.0 6.18.1
fastapi 0.135.4 0.141.1
matplotlib 3.11.1 3.11.2
sphinx-intl 2.3.2 2.4.0
sphinx-autoapi 3.8.0 3.8.1
scikit-learn 1.9.0 1.9.1

Updates pypdf from 6.18.0 to 6.18.1

Release notes

Sourced from pypdf's releases.

Version 6.18.1, 2026-09-11

What's new

Security (SEC)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.18.1, 2026-09-11

Security (SEC)

  • Further restrict FlateDecode recovery (#4073)
  • Limit entry count for TrueType and Type1 font /Widths (#4072)
  • Limit allowed length of tokens in parse_bfchar (#4071)

Bug Fixes (BUG)

  • Use current text matrix for visitor_text (#4062)
  • Repeat the letter for /S /A and /S /a page labels past Z (#4065)
  • Use font color for FreeText default appearance (#4051)

Robustness (ROB)

  • Fix compatibility with fonttools < 4.58.0 (#4050, #4059)

Documentation (DOC)

  • Use combined matrix in visitor examples (#4066)

Full Changelog

Commits
  • caf8cde REL: 6.18.1
  • d9d38cf SEC: Further restrict FlateDecode recovery (#4073)
  • 0fb26eb SEC: Limit entry count for TrueType and Type1 font /Widths (#4072)
  • 319d0b8 SEC: Limit allowed length of tokens in parse_bfchar (#4071)
  • 735d284 BUG: Use current text matrix for visitor_text (#4062)
  • 808a318 DOC: Use combined matrix in visitor examples (#4066)
  • c38feda BUG: Repeat the letter for /S /A and /S /a page labels past Z (#4065)
  • 3f7bc19 ROB: Do not crash when the XFA entry is not a well-formed array (#4064)
  • d80ccfc ROB: Fix compatibility for fonttools < 4.57.0 (#4050)
  • 7bb71dd ROB: Do not crash when the font encoding differences are not an array (#4058)
  • Additional commits viewable in compare view

Updates fastapi from 0.135.4 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates matplotlib from 3.11.1 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries
Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
  • 0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
  • ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
  • 8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
  • 93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
  • b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
  • Additional commits viewable in compare view

Updates sphinx-intl from 2.3.2 to 2.4.0

Release notes

Sourced from sphinx-intl's releases.

2.4.0

Environments

Features

Internals

Full Changelog: sphinx-doc/sphinx-intl@2.3.2...2.4.0

Changelog

Sourced from sphinx-intl's changelog.

2.4.0 (2026/08/30)

Environments

Incompatibility

Features

Bug Fixes

Documentation

Internals

Commits
  • fe7d98e Update changes for 2.4.0 release
  • 4832679 Update changes for stat exit status
  • 508e623 Make stat exit status indicate translation health (#143)
  • 51d9284 Update changes for 2.4.0 release
  • 2338a43 chore: ignore local worktrees
  • a0efa6e Drop Python-3.9 support and add Python-3.15 (#142)
  • d2a6f1c Bump the all-github-actions group across 1 directory with 3 updates (#140)
  • c412f28 fix for lint (#141)
  • 468913f Bump ghcr.io/devcontainers/features/docker-in-docker (#138)
  • e6b1048 Bump sigstore/gh-action-sigstore-python in the all-github-actions group (#136)
  • Additional commits viewable in compare view

Updates sphinx-autoapi from 3.8.0 to 3.8.1

Release notes

Sourced from sphinx-autoapi's releases.

v3.8.1

Bugfixes

  • Preserve ellipsis literals when rendering type annotations. (#562)

Improved Documentation

  • Document the autoapisummary directive. (#377)

Misc

  • #564
  • Switch to tox.toml and reorganise repo structure
Changelog

Sourced from sphinx-autoapi's changelog.

v3.8.1 (2026-08-23)

Bugfixes ^^^^^^^^

  • Preserve ellipsis literals when rendering type annotations. (#562)

Improved Documentation ^^^^^^^^^^^^^^^^^^^^^^

  • Document the autoapisummary directive. (#377)

Misc ^^^^

  • #564
  • Switch to tox.toml and reorganise repo structure
Commits
  • 7018ce6 Version 3.8.1
  • 9079d5b Fix ellipsis rendering in type annotations
  • f37bd4b Fix towncrier check failing in CI
  • 6df6d61 Bump the github-actions group with 2 updates
  • b76b462 Fix linting errors
  • 2b7d443 Fix use of class-scoped fixture as instance method
  • 2b8bb52 Bump the github-actions group with 2 updates
  • 2088028 Switch to tox.toml and reorganise repo structure
  • eca0b11 Document autoapisummary directive
  • 74ed53e Bump sigstore/gh-action-sigstore-python in the github-actions group
  • See full diff in compare view

Updates scikit-learn from 1.9.0 to 1.9.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.9.1

We're happy to announce the 1.9.1 release.

This release contains a few bug fixes and is the first version supporting Python 3.15.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.9.html#version-1-9-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • 866c0f5 generate changelog
  • 12f135f update upper bounds
  • 43ff2f2 bump version
  • b851524 DOC Mark dev index as orphan (#34916)
  • 01d56d4 DOC Fix wikipedia principal eigenvector example references (#34915)
  • b86a1e2 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
  • d282698 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#34897)
  • eb34279 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • 7581303 FIX: Fix QuantileTransformer(ignore_implicit_zeros=True) sub-sampling behav...
  • ac47f4d FIX: avoid EfficiencyWarning in OPTICS with metric='precomputed' (#34692)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-major-dependencies group in /pipeline with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.18.0` | `6.18.1` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.135.4` | `0.141.1` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.11.1` | `3.11.2` |
| [sphinx-intl](https://github.com/sphinx-doc/sphinx-intl) | `2.3.2` | `2.4.0` |
| [sphinx-autoapi](https://github.com/readthedocs/sphinx-autoapi) | `3.8.0` | `3.8.1` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.9.0` | `1.9.1` |


Updates `pypdf` from 6.18.0 to 6.18.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.18.0...6.18.1)

Updates `fastapi` from 0.135.4 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.4...0.141.1)

Updates `matplotlib` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2)

Updates `sphinx-intl` from 2.3.2 to 2.4.0
- [Release notes](https://github.com/sphinx-doc/sphinx-intl/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx-intl/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinx-intl@2.3.2...2.4.0)

Updates `sphinx-autoapi` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/readthedocs/sphinx-autoapi/releases)
- [Changelog](https://github.com/readthedocs/sphinx-autoapi/blob/main/CHANGELOG.rst)
- [Commits](readthedocs/sphinx-autoapi@v3.8.0...v3.8.1)

Updates `scikit-learn` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.9.0...1.9.1)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: sphinx-intl
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-dependencies
- dependency-name: sphinx-autoapi
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
- dependency-name: scikit-learn
  dependency-version: 1.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file tech. enhancement technical ehancement labels Sep 16, 2026
@tristanrobert

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file tech. enhancement technical ehancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants