Bump the python-workflow-requirements group in /.github/workflows/requirements with 9 updates by dependabot[bot] · Pull Request #202 · CAVISE/OpenCDA

dependabot · 2026-10-01T07:57:23Z

Bumps the python-workflow-requirements group in /.github/workflows/requirements with 9 updates:

Package	From	To
cmake	`4.4.2`	`4.4.3`
lxml	`6.1.2`	`6.1.3`
matplotlib	`3.11.1`	`3.11.2`
networkx	`3.6.1`	`3.7`
ninja	`1.13.0`	`1.13.2`
numpy	`2.5.2`	`2.5.3`
protobuf	`7.36.0`	`7.36.2`
pytest-mock	`3.15.1`	`3.16.0`
tqdm	`4.70.0`	`4.70.1`

Updates cmake from 4.4.2 to 4.4.3

Release notes

Sourced from cmake's releases.

4.4.3

What's Changed

ci: use actions/attest instead of actions/attest-build-provenance by @henryiii in scikit-build/cmake-python-distributions#723

[Bot] Update to OpenSSL 3.5.8 by @scikit-build-app-bot[bot] in scikit-build/cmake-python-distributions#726

[Bot] Update to CMake 4.4.3 by @scikit-build-app-bot[bot] in scikit-build/cmake-python-distributions#727

Full Changelog: scikit-build/cmake-python-distributions@4.4.2...4.4.3

Commits

6003035 [Bot] Update to CMake 4.4.3 (#727)
23030f4 chore(deps): bump the actions group with 2 updates (#728)
ceee561 [Bot] Update to OpenSSL 3.5.8 (#726)
ce3a7eb chore(deps): bump the actions group with 2 updates (#725)
f320aff chore(deps): bump pypa/cibuildwheel (#724)
0cb59ec ci: use actions/attest instead of actions/attest-build-provenance (#723)
030dd2a chore(deps): update pre-commit hooks (#720)
140e91c chore(deps): bump the actions group with 2 updates (#721)
See full diff in compare view

Updates lxml from 6.1.2 to 6.1.3

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.

Commits

3c1a4c7 Prepare release of 6.1.3.
c1191fc Update changelog.
03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
9716fb1 Build: Include older PyPy versions.
0f3327d Build: Exclude Win-Aarch64 from wheel build.
6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
ce9fe0d Build: Fix Py3.8 windows build.
See full diff in compare view

Updates matplotlib from 3.11.1 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

Speed up RGBA-stage image resampling

Fix hexbin clipping in PDF output

Fix \text with internal braces

Fix some crashes and make some checks more robust to unlikely cases

Fix frame skew when saving GIF animations with PillowWriter

Fix HiDPI handling in Qt toolbar and WebAgg embeddings

Fix ResizeEvent handling for TextBox

Fix bug with PGF hatch linewidth and color

Fix a bug with drawing an empty Collection

Fix incorrect glyphs in Cairo backends

Improve build system to prevent conflicts between wheels and system libraries

Commits

d3ca917 REL: v3.11.2
b76fea9 DOC: Set current version to 3.11.2
39c7f06 DOC: Prepare GitHub stats for 3.11.2
5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
Additional commits viewable in compare view

Updates networkx from 3.6.1 to 3.7

Release notes

Sourced from networkx's releases.

NetworkX 3.7

networkx 3.7

We're happy to announce the release of networkx 3.7!

Highlights

The isomorphism checking suite of tools has been upgraded. The VF2++ functions now provide subgraph isomorphism and subgraph monomorphism checking (#8506).

Leiden based community detection algorithms are now supported via leiden_communities and leiden_partitions. This provides an alternative, often improved, community detection algorithm compared to the Louvain functions (#8509).

The pygraphviz library is now provided via pip with wheels that include the GraphViz binaries. This should make the NetworkX interface to pygraphviz easier to use for graph layout and rendering (#8694).

API Changes

Expire random lobster dep (#8499).

API: Expire deprecations of could-be isomorphism aliases (#8498).

Proposal to deprecate bfs_predecessors (#8494).

Change maximal_independent_set to return set instead of list (#8564).

Add centroid as alias to barycenter (#8622).

API: Deprecate p2g module (#8855).

Enhancements

Adding the Tree Optimization in Floyd Warshall (#8361).

Kruskal MST early break for efficiency (#8296).

create new generator that returns a random k-lift of a d-regular graph (#8045).

Floyd Warshall: Adding support for weight parameter as a callable (#8386).

[ENH] Flow algorithms: Add support for callable capacity parameter (#8406).

fix: add suggestions from #8021 and #8029 to is_aperiodic (#8148).

Improve chordal code readability by removing helper function (#8479).

FEAT: Added basic random walk utilities #8378 (#8383).

Implement Constant-Potts Model (for use with Leiden community detection) (#8507).

The isomorphism checking suite of tools has been upgraded. The VF2++ functions now provide subgraph isomorphism and subgraph monomorphism checking (#8506).

Adding optional sp arg to closeness_centrality (#8424).

perf: replace built-in sum() with np.sum() in pagerank and katz (#8561).

ENH: Add format parameter to adjacency_matrix (#8545).

Proposal: Add density to nx.describe defaults (#8569).

Add utility to extract faces from PlanarEmbedding (#8512).

Improving views exceptions (#8588).

Optimize _build_paths_from_predecessors stack logic for 30-40% speedup (#8460).

EHN: Add nonedge argument to from_numpy_array and complete the roundtrip (#8552).

State-of-the-art implementation of Tarjan's algorithm (#8615).

Add description and keywords support to GEXF reader/writer (#8629).

DOC: more barycenter and centroid equivalence (#8630).

ENH: Add Barber's bipartite modularity quality function (#8618).

Leiden based community detection algorithms are now supported via leiden_communities and leiden_partitions. This provides an alternative, often improved, community detection algorithm compared to the Louvain functions (#8509).

ENH: Add Shen's overlapping modularity quality function (#8647).

ENH: leiden test and doc_string improvements (#8656).

Add butterflies() to bipartite cluster module (#8591).

Avoid O(E) lookup in nx.display -issue8639 (#8663).

Add HITS algorithm benchmark to benchmark suite (#8625).

... (truncated)

Commits

49ca229 Designate 3.7 release
bd45cfe Update minimum dependencies (SPEC 0) (#8916)
fee1ebc Bump release version
4106c33 Designate 3.7rc0 release
083e472 BUG: Hold the graph weakly in cached edge and degree views (#8892)
8977f1c Merge pull request #8896 from jarrodmillman/py3.15
2d91736 Remove failing tests
0d6ac7a make lint happy
9ca76bf move python_rc to py315 specific features
ccf0995 Support for Py3.15
Additional commits viewable in compare view

Updates ninja from 1.13.0 to 1.13.2

Release notes

Sourced from ninja's releases.

v1.13.2

Fix Ninja exit code when interrupted (issue #2681) #2690

v1.13.1

Bugfixes:

Fix LINK : fatal error LNK1104: cannot open file on Windows in some cases #2616

Compatibility with older distros for Linux ARM version #2619

Restore "multiple rules generate" error with dyndep #2621

Commits

3441b63 v1.13.2
bd56313 Fix Ninja exit code when interrupted.
79feac0 v1.13.1
5807cf7 Merge branch 'master' into release
31af250 Merge pull request #2636 from jhasse/rsp-crlf
516a0dd Add output test for multiple rules + dyndep, fix #2621
114fb93 Convert \n to \r\n on Windows in rsp files, fix #2616
d60673d Merge pull request #2628 from userdocs/workflows-fix-triggers
9659311 prevent duplicate runs being triggered when a release tag is published.
b783add Merge pull request #2627 from userdocs/linux.yml-build
Additional commits viewable in compare view

Updates numpy from 2.5.2 to 2.5.3

Release notes

Sourced from numpy's releases.

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

The NumPy 2.5.3 is a patch release that fixes bugs discovered after the 2.5.2 release. Apart from the usual bug and maintenance work, there are a number of StringDType related fixes for problems discovered during the ongoing string work in the main branch.

This release supports Python versions 3.12-3.15

Changes

Casting a fixed-width byte string array (np.bytes_) to StringDType now raises TypeError when the bytes are not valid UTF-8. Previously the invalid bytes were stored as-is and later caused undefined behavior in string operations.

(gh-32296)

MaskedArray._fill_value would become stale when ufuncs that change dtype left the result holding a fill_value typed for the old dtype. The mismatch was silent until something later called _check_fill_value, such as .view(), and then a TypeError would be raised. Now, when the copied fill_value is no longer valid for the new dtype, fall back to the default fill_value for that dtype instead of propagating the stale value. This may raise a ComplexWarning if the fill_value is complex and the new dtype is real.

(gh-32423)

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Charles Harris

Iason Krommydas

James Davies +

Joren Hammudoglu

Maanas Arora

Matti Picus

Nathan Goldbaum

Shikhar Goel +

Yeonho Kim +

Pull requests merged

A total of 27 pull requests were merged for this release.

#32235: MAINT: Prepare 2.5.x for further development

... (truncated)

Commits

dd88c0c Merge pull request #32511 from charris/prepare-2.5.3
edcac6a REL: Prepare for the NumPy 2.5.3 release
fd4d908 Merge pull request #32509 from charris/backport-32496
65bb1da BUG: fix crash in ufunc.resolve_dtypes with a Python scalar type (#32496)
294956e Merge pull request #32506 from charris/backport-32503
26428d9 DOC: fix scipy docs links in intersphinx mapping (#32507)
5fab1cb DOC: use static scipy doc site for intershpinx (#32503)
7beed2f Merge pull request #32481 from ngoldbaum/stringdtype-backport
8972f70 Merge pull request #32478 from charris/backport-32466
ab1b589 Merge pull request #32477 from charris/backport-32423
Additional commits viewable in compare view

Updates protobuf from 7.36.0 to 7.36.2

Updates pytest-mock from 3.15.1 to 3.16.0

Release notes

Sourced from pytest-mock's releases.

v3.16.0

2026-09-27

#604: Fixed duplicate_iterators=True for async functions spied with mocker.spy.

#611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.

#606: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.

#547: Added SpyType for annotating mocker.spy results.

Dropped support for EOL Python 3.9.

#147: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.

Added support for Python 3.15.

Changelog

Sourced from pytest-mock's changelog.

3.16.0

2026-09-27

[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixed duplicate_iterators=True for async functions spied with mocker.spy.

[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.

[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.

[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: Added SpyType for annotating mocker.spy results.

Dropped support for EOL Python 3.9.

[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.

Added support for Python 3.15.

Commits

f3b531f Release 3.16.0
71ed673 Fix duplicate_iterators for async spies (#604)
0797e3d Fix async assertion argument introspection (#611)
e24c334 docs: import os in the opening usage example (#612)
9e7eb7b [pre-commit.ci] pre-commit autoupdate (#613)
445fd4d [pre-commit.ci] pre-commit autoupdate (#610)
a8bd0b1 Honour resetall() arguments for non-callable mocks (#606)
6559fdf [pre-commit.ci] pre-commit autoupdate (#608)
466d026 [pre-commit.ci] pre-commit autoupdate (#605)
164defe [pre-commit.ci] pre-commit autoupdate (#603)
Additional commits viewable in compare view

Updates tqdm from 4.70.0 to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

contrib.concurrent: fix no-len iterables (#1830 <- #1828)

tests: major overhaul (#1819)

update AI policy in PR template

misc lint & tidy

CI: bump workflow actions & pre-commit hooks

Commits

9cf5a12 Merge pull request #1830 from eaubin/master
24b9e1e misc tidy
2a9e4e8 contrib.concurrent: fix no-len iterables
8d6ff8d Merge pull request #1819 from tqdm/devel
bed3796 tests: major overhaul
4d3d319 AI policy
5dcb022 minor syntax update
309effe tests: pre-commit coverage
604193a tests: slight tidy
17f1cac CI: bump workflow actions
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-workflow-requirements group in /.github/workflows/requirements with 9 updates: | Package | From | To | | --- | --- | --- | | [cmake](https://github.com/scikit-build/cmake-python-distributions) | `4.4.2` | `4.4.3` | | [lxml](https://github.com/lxml/lxml) | `6.1.2` | `6.1.3` | | [matplotlib](https://github.com/matplotlib/matplotlib) | `3.11.1` | `3.11.2` | | [networkx](https://github.com/networkx/networkx) | `3.6.1` | `3.7` | | [ninja](https://github.com/ninja-build/ninja) | `1.13.0` | `1.13.2` | | [numpy](https://github.com/numpy/numpy) | `2.5.2` | `2.5.3` | | [protobuf](https://developers.google.com/protocol-buffers/) | `7.36.0` | `7.36.2` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.15.1` | `3.16.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.70.0` | `4.70.1` | Updates `cmake` from 4.4.2 to 4.4.3 - [Release notes](https://github.com/scikit-build/cmake-python-distributions/releases) - [Changelog](https://github.com/scikit-build/cmake-python-distributions/blob/main/HISTORY.rst) - [Commits](scikit-build/cmake-python-distributions@4.4.2...4.4.3) Updates `lxml` from 6.1.2 to 6.1.3 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-6.1.2...lxml-6.1.3) Updates `matplotlib` from 3.11.1 to 3.11.2 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2) Updates `networkx` from 3.6.1 to 3.7 - [Release notes](https://github.com/networkx/networkx/releases) - [Commits](networkx/networkx@networkx-3.6.1...networkx-3.7) Updates `ninja` from 1.13.0 to 1.13.2 - [Release notes](https://github.com/ninja-build/ninja/releases) - [Commits](ninja-build/ninja@v1.13.0...v1.13.2) Updates `numpy` from 2.5.2 to 2.5.3 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.5.2...v2.5.3) Updates `protobuf` from 7.36.0 to 7.36.2 Updates `pytest-mock` from 3.15.1 to 3.16.0 - [Release notes](https://github.com/pytest-dev/pytest-mock/releases) - [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-mock@v3.15.1...v3.16.0) Updates `tqdm` from 4.70.0 to 4.70.1 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.70.0...v4.70.1) --- updated-dependencies: - dependency-name: cmake dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: lxml dependency-version: 6.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: matplotlib dependency-version: 3.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: networkx dependency-version: '3.7' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-workflow-requirements - dependency-name: ninja dependency-version: 1.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: numpy dependency-version: 2.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: protobuf dependency-version: 7.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements - dependency-name: pytest-mock dependency-version: 3.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-workflow-requirements - dependency-name: tqdm dependency-version: 4.70.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-workflow-requirements ... Signed-off-by: dependabot[bot] <support@github.com>

…ents/python-workflow-requirements-26d2dff6d3

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 1, 2026

Merge branch 'main' into dependabot/pip/dot-github/workflows/requirem…

ae29bc7

…ents/python-workflow-requirements-26d2dff6d3

Haralishev77 self-requested a review October 1, 2026 09:24

Haralishev77 approved these changes Oct 1, 2026

View reviewed changes

Haralishev77 merged commit f1a4c82 into main Oct 1, 2026
7 checks passed

Haralishev77 deleted the dependabot/pip/dot-github/workflows/requirements/python-workflow-requirements-26d2dff6d3 branch October 1, 2026 09:24

Navigation Menu

Repository navigation

Bump the python-workflow-requirements group in /.github/workflows/requirements with 9 updates - #202

Bump the python-workflow-requirements group in /.github/workflows/requirements with 9 updates#202
Haralishev77 merged 2 commits into
mainfrom
dependabot/pip/dot-github/workflows/requirements/python-workflow-requirements-26d2dff6d3

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

4.4.3

What's Changed

6.1.3 (2026-09-02)

Bugs fixed

REL: v3.11.2

NetworkX 3.7

networkx 3.7

Highlights

API Changes

Enhancements

v1.13.2

v1.13.1

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

Changes

Contributors

Pull requests merged

v3.16.0

3.16.0

tqdm v4.70.1 stable

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant