chore(deps): bump the python-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #83 · Colinho22/maestro

dependabot · 2026-07-24T10:10:02Z

Updates the requirements on pandas, streamlit, matplotlib, ruff and nbstripout to permit the latest version.
Updates pandas to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

e68db09 RLS: 3.0.5
0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
8188eb1 RLS: 3.0.4 (#66079)
bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
Additional commits viewable in compare view

Updates streamlit to 1.60.0

Release notes

Sourced from streamlit's releases.

1.60.0

What's Changed

Breaking Changes 🛠

[feature] Add server.maxWidgetStateSize config option by @lukasmasuch in streamlit/streamlit#15804

[fix] Limit client-supplied query string size and field count by @lukasmasuch in streamlit/streamlit#15803

[fix] Reject spoofed host messages from child frames and scripts by @lukasmasuch in streamlit/streamlit#15800

New Features 🎉

[feature] Move vega-lite chart actions to native toolbar by @lukasmasuch in streamlit/streamlit#15806

[feature] Support integer pixel values for gap parameter (#13005) by @sfc-gh-dbyttow in streamlit/streamlit#15850

[feature] Use key as main identity for st.data_editor if num_rows="fixed" by @lukasmasuch in streamlit/streamlit#15884

[feature] Add height parameter to st.tabs (#12217) by @sfc-gh-dbyttow in streamlit/streamlit#15847

[feature] Disable dataframe data export by @lukasmasuch in streamlit/streamlit#15910

[feature] Neutral treatment for zero delta in st.metric by @lukasmasuch in streamlit/streamlit#15790

[feature] Preserve st.dataframe row selections on sort by @lukasmasuch in streamlit/streamlit#16020

Bug Fixes 🐛

[fix] Reject non-finite float values from URL params by @lukasmasuch in streamlit/streamlit#15799

[fix] Sanitize dangerous Graphviz link URLs by @lukasmasuch in streamlit/streamlit#15819

[fix] Virtualize selectbox dropdown option list by @lukasmasuch in streamlit/streamlit#15870

[fix] Keep viewport gutter around dialog on narrow screens by @lukasmasuch in streamlit/streamlit#15875

[fix] Surface missing httpx error for auth extra by @lukasmasuch in streamlit/streamlit#15864

[fix] Honor expose_tokens with st.App programmatic secrets by @lukasmasuch in streamlit/streamlit#15865

[fix] Fix React Aria dialog overlay stacking by @lukasmasuch in streamlit/streamlit#15876

[fix] st.tabs panels stacking after widget rerun by @lukasmasuch in streamlit/streamlit#15894

[fix] Remove flaky Missing Submit Button warning by @lukasmasuch in streamlit/streamlit#15889

[fix] Escape HTML in pydeck chart tooltip interpolation by @lukasmasuch in streamlit/streamlit#15820

[fix] Dedupe run_every auto-rerun timers per fragment by @sfc-gh-lwilby-1 in streamlit/streamlit#15912

[fix] Remove redundant keyboard tab stop from file uploader dropzone by @sfc-gh-lwilby-1 in streamlit/streamlit#15928

[fix] Avoid PyArrow 25 thread initialization crash by @lukasmasuch in streamlit/streamlit#15947

Fix RuntimeError: reentrant call inside _io.BufferedWriter on Ctrl+C by @chang-pro in streamlit/streamlit#15949

Fix IndexError in simplify_number for values >= 1 quadrillion by @eeshsaxena in streamlit/streamlit#15971

[fix] Sanitize dangerous st.link_button and st.image URLs by @lukasmasuch in streamlit/streamlit#15851

[fix] Cap server dependency major versions by @lukasmasuch in streamlit/streamlit#15948

[fix] stop auto rerun on fragment evict by @sfc-gh-lwilby-1 in streamlit/streamlit#15932

[fix] Style selectbox 'No results' empty state by @lukasmasuch in streamlit/streamlit#15967

[fix] Overlays inside popover: stacking and dismissal by @sfc-gh-lwilby-1 in streamlit/streamlit#15961

[fix] Restore type-to-search in st.selectbox by @sfc-gh-lwilby-1 in streamlit/streamlit#15996

[fix] Fix st.metric area chart fill baseline by @lukasmasuch in streamlit/streamlit#15907

[fix] Prevent file watcher crash on Windows drive paths by @lukasmasuch in streamlit/streamlit#15951

[fix] Ignore skill symlinks in generated gitignore snippet by @lukasmasuch in streamlit/streamlit#15963

[fix] Suppress mobile keyboard for selectbox filter_mode=None by @lukasmasuch in streamlit/streamlit#15962

[fix] Submit typed number_input value on first Enter in form by @lukasmasuch in streamlit/streamlit#16013

[fix] Improve hashing fallback warning messages by @lukasmasuch in streamlit/streamlit#16040

[fix] Bundle the skills meta-skill in the wheel; install it locally (no GitHub download) by @sfc-gh-nbellante in streamlit/streamlit#16026

[bugfix] Include decorators in st.echo output by @sfc-gh-dbyttow in streamlit/streamlit#16068

[bugfix] Fix inconsistent checkbox margin in horizontal container within column (#13162) by @sfc-gh-dbyttow in streamlit/streamlit#16060

[bugfix] Fix widgets inside popover-in-dialog being unclickable by @sfc-gh-dbyttow in streamlit/streamlit#16067

Other Changes

[chore] Update emojis/material icons by @github-actions[bot] in streamlit/streamlit#15860

... (truncated)

Commits

70c32f1 Up version to 1.60.0
5b2bbbe [bugfix] Fix widgets inside popover-in-dialog being unclickable (#16067)
c5e4012 [bugfix] Fix inconsistent checkbox margin in horizontal container within colu...
96cf9d6 [docs] Pause external pull request contributions (#16037)
d71628c [bugfix] Include decorators in st.echo output (#16068)
cc1676a Bump the eslint group across 1 directory with 2 updates (#16083)
4ccad5d [chore] Add typing test for st.pydeck_chart (#15801)
fc2cb5d Bump the codeql-action group with 2 updates (#16058)
6022987 Bump vite-bundle-analyzer from 1.3.8 to 1.3.9 in /frontend in the vite group ...
db297c6 Bump the protobufjs group in /frontend with 2 updates (#16073)
Additional commits viewable in compare view

Updates matplotlib to 3.11.1

Release notes

Sourced from matplotlib's releases.

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

Fix tight layout of multiple subplots with sharey=True

Fix NoNorm cursor formatting for uint8 images

Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)

Fix clipped Axis labels on 3D plots with tight layout

Fix inverted Axis on 3D plots

Fix restoring 'auto' aspect in 3D axes after switching from 'equal'

Fix missing glyphs when subsetting Type 1 fonts in PDF

Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

Commits

3c1757a REL: v3.11.1
792c6b5 DOC: Prepare for 3.11.1
aaff9f6 Merge branch 'v3.11.0-doc' into v3.11.x
d4f4527 Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...
6ad4bcf Merge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...
7fb74d3 Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...
c624aec Backport PR #32038: Fix occasional misalignment in reported mouse position (a...
8eda2b7 Backport PR #32037: Bump the actions group with 3 updates
a0e7ae5 Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...
9001323 Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...
Additional commits viewable in compare view

Updates ruff to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:
❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted
See the CLI help or documentation for the full list of supported formats.
The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:
❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

... (truncated)

Commits

a2635fd Bump 0.16.0 (#27136)
3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
17ef711 Stabilize --add-ignore (#27125)
ef912bb Add newly stabilized rules to defaults (#27055)
b30f040 Stabilize new default rules (#27035)
bcd70c5 Exclude Markdown files from format-dev runs (#27052)
87e51e2 Fix format --check spans for syntax errors (#27045)
afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
Additional commits viewable in compare view

Updates nbstripout to 0.9.1

Release notes

Sourced from nbstripout's releases.

0.9.1

Don't rewrite files when there is no change (@s-weigand, #210)

Add --unix-newline flag to force using LF linebreaks (@s-weigand, #209)

Changelog

Sourced from nbstripout's changelog.

0.9.1 - 2026-02-21

Don't rewrite files when there is no change (@s-weigand, #210)

Add --unix-newline flag to force using LF linebreaks (@s-weigand, #209)

0.9.0 - 2026-01-17

Add GitHub Action checking that output is stripped (@lagamura, #205, #207)

Add --drop-output-type, --keep-output-type flags (@rgeorgi, #175, #204)

Drop support for Python 3.8 and 3.9, add support for Python 3.13 and 3.14

Migrate to pyproject.toml, remove setup.py and setup.cfg

0.8.2 - 2025-11-16

Preserve Windows CRLF file endings in output file (#202)

Prevent BrokenPipeError when flushing the output (@blaketastic2, #203)

README: update usage instructions for git-filter-repo (@fztrevisan, #201)

README: add note about argument quoting for pre-commit hook (#119).

Use ruff for code formatting

Add type annotations

0.8.1 - 2024-11-17

In dry run mode, only print output if there would have been a change (#152).

Declare git filter to be required when installing, such that it must succeed (#191).

0.8.0 - 2024-11-03

Adds --verify flag, similar to --dry-run but returning 1 if any affected files would have changed (@jspaezp, #153, #195).

Adds script to apply nbstripout retroactively using git-filter-repo to README (@LunarLanding @tokleine, #194 #197).

Documents nbstripout on all files in the current directory and subdirectories recursively (#127).

Accepts notebooks without nbformat version specified.

Improves test coverage.

0.7.1 - 2024-02-04

Fix regression where input file was truncated before reading (#190).

0.7.0 - 2024-02-04

This release has been yanked from PyPI due to a major regression (#190).

Drop support for Python 3.7 (end of life 2023-06-27), require Python 3.8.

Add support for Python 3.12.

Drop backwards compability with IPython.nbformat for IPython <4.

Rename cell ids to be sequential by default. Disable by passing --keep-id (@JasonJooste, #184).

... (truncated)

Commits

34071b7 Bump version: 0.9.0 → 0.9.1
dd14582 Update changelog for 0.9.1 release
aa27891 README: address some Markdown lint
186d22f Add --unix-newline flag to force UNIX line endings in output (#209)
2b96276 Don't touch files when there is no change required (#210)
498ec11 Add GitHub workflow for publishing to PyPI
9d9c48b Bump version: 0.8.2 → 0.9.0
82385b7 Update changelog for 0.9.0 release
71289b6 Ruff format all files
08d27c4 Drop support for Python 3.8 & 3.9, add 3.13 & 3.14
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Updates the requirements on [pandas](https://github.com/pandas-dev/pandas), [streamlit](https://github.com/streamlit/streamlit), [matplotlib](https://github.com/matplotlib/matplotlib), [ruff](https://github.com/astral-sh/ruff) and [nbstripout](https://github.com/kynan/nbstripout) to permit the latest version. Updates `pandas` to 3.0.5 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.3...v3.0.5) Updates `streamlit` to 1.60.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.59.1...1.60.0) Updates `matplotlib` to 3.11.1 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.11.0...v3.11.1) Updates `ruff` to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.16.0) Updates `nbstripout` to 0.9.1 - [Release notes](https://github.com/kynan/nbstripout/releases) - [Changelog](https://github.com/kynan/nbstripout/blob/main/CHANGELOG.md) - [Commits](kynan/nbstripout@0.8.1...0.9.1) --- updated-dependencies: - dependency-name: pandas dependency-version: 3.0.5 dependency-type: direct:production dependency-group: python-deps - dependency-name: streamlit dependency-version: 1.60.0 dependency-type: direct:production dependency-group: python-deps - dependency-name: matplotlib dependency-version: 3.11.1 dependency-type: direct:production dependency-group: python-deps - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development dependency-group: python-deps - dependency-name: nbstripout dependency-version: 0.9.1 dependency-type: direct:development dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>

Colinho22 · 2026-07-24T12:14:03Z

@dependabot ignore ruff minor version

dependabot · 2026-07-24T12:14:05Z

OK, I won't notify you about version 0.16.x of ruff again, unless you unignore it.

dependabot · 2026-07-24T12:16:15Z

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 24, 2026

chore(deps): carve out ruff 0.16 from group bump, keep the rest

b7894dd

Colinho22 approved these changes Jul 24, 2026

View reviewed changes

Colinho22 merged commit 282db4d into main Jul 24, 2026
1 check passed

Colinho22 deleted the dependabot/pip/python-deps-173fd9b0b3 branch July 24, 2026 12:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the python-deps group across 1 directory with 5 updates - #83

chore(deps): bump the python-deps group across 1 directory with 5 updates#83
Colinho22 merged 2 commits into
mainfrom
dependabot/pip/python-deps-173fd9b0b3

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading

Uh oh!

Colinho22 commented Jul 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 24, 2026

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

pandas 3.0.5

1.60.0

What's Changed

Breaking Changes 🛠

New Features 🎉

Bug Fixes 🐛

Other Changes

REL: v3.11.1

0.16.0

Release Notes

Breaking changes

0.16.0

Breaking changes

0.9.1

0.9.1 - 2026-02-21

0.9.0 - 2026-01-17

0.8.2 - 2025-11-16

0.8.1 - 2024-11-17

0.8.0 - 2024-11-03

0.7.1 - 2024-02-04

0.7.0 - 2024-02-04

Uh oh!

Colinho22 commented Jul 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 24, 2026

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading