Update plotly requirement from <7.1,>5.10 to >5.10,<7.2

[dependabot]

Updates the requirements on plotly to permit the latest version.

Release notes

Sourced from plotly's releases.

v7.1.0

Added

• Support marginal_x/marginal_y="heatmap" in density_heatmap, drawing a single-row/column heatmap strip in the margin colored by the same z/histfunc aggregate as the main plot and sharing its color scale [#5706], with thanks to @​lucasjamar for the contribution!
• Add support for custom tick values in mpl_to_plotly when the matplotlib tick positions don't follow an arithmetic progression, including custom tick labels and tick values on date axes [#5262], with thanks to @​robertoffmoura for the contribution!

Fixed

• Fix Plotly Express treating unsigned integer columns (uint8, uint16, uint32, uint64) in pandas DataFrames as categorical, which caused px.bar and other functions to pick the wrong orientation and render unexpected plots [#4291, #4344], with thanks to @​Belagum for the contribution!
• Fix mpl_to_plotly not setting paper_bgcolor and plot_bgcolor from the matplotlib figure and axes backgrounds, so converted figures match the source figure's background colors [#5285], with thanks to @​robertoffmoura for the contribution!
• Fix rendering issue causing a too-large div when calling Figure.show() in Google Colab [#5718]
• Fix the sphinx-gallery scraper so that it generates thumbnails for figures shown with fig.show() or displayed as the last expression of a code block [#5701], with thanks to @​larsoner for the contribution!
  • The scaper now warns once (instead of failing the build) when static image export is unavailable
• The sphinx-gallery scraper no longer scrapes files belonging to other examples during parallel builds [#5701], with thanks to @​larsoner for the contribution!

Updated

• Update plotly.js from version 4.0.0 to version 4.1.1 [#5722, #5730]. See the plotly.js release notes for v4.1.0 and v4.1.1 for details. Notable changes include:
  • Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022]
  • Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997]
  • Increase default double-click delay threshold to 500ms (from 300) [#8014]
  • Fix issue with per-point marker color for hover labels in scattergl, quiver traces [#8027]
  • Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
    • Note: Safari 15, Chrome 56, Firefox 51 and later are now required for map traces
• Update hex_to_rgb function to raise error for invalid-length hex codes, and emit warning for hex codes containing alpha [#5729], with thanks to @​dylanpulver for the contribution!

Changelog

Sourced from plotly's changelog.

[7.1.0] - 2026-09-15

Added

• Support marginal_x/marginal_y="heatmap" in density_heatmap, drawing a single-row/column heatmap strip in the margin colored by the same z/histfunc aggregate as the main plot and sharing its color scale [#5706], with thanks to @​lucasjamar for the contribution!
• Add support for custom tick values in mpl_to_plotly when the matplotlib tick positions don't follow an arithmetic progression, including custom tick labels and tick values on date axes [#5262], with thanks to @​robertoffmoura for the contribution!

Fixed

• Fix Plotly Express treating unsigned integer columns (uint8, uint16, uint32, uint64) in pandas DataFrames as categorical, which caused px.bar and other functions to pick the wrong orientation and render unexpected plots [#4291, #4344], with thanks to @​Belagum for the contribution!
• Fix mpl_to_plotly not setting paper_bgcolor and plot_bgcolor from the matplotlib figure and axes backgrounds, so converted figures match the source figure's background colors [#5285], with thanks to @​robertoffmoura for the contribution!
• Fix rendering issue causing a too-large div when calling Figure.show() in Google Colab [#5718]
• Fix the sphinx-gallery scraper so that it generates thumbnails for figures shown with fig.show() or displayed as the last expression of a code block [#5701], with thanks to @​larsoner for the contribution!
  • The scaper now warns once (instead of failing the build) when static image export is unavailable
• The sphinx-gallery scraper no longer scrapes files belonging to other examples during parallel builds [#5701], with thanks to @​larsoner for the contribution!

Updated

• Update plotly.js from version 4.0.0 to version 4.1.1 [#5722, #5730]. See the plotly.js release notes for v4.1.0 and v4.1.1 for details. Notable changes include:
  • Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022]
  • Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997]
  • Increase default double-click delay threshold to 500ms (from 300) [#8014]
  • Fix issue with per-point marker color for hover labels in scattergl, quiver traces [#8027]
  • Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
    • Note: Safari 15, Chrome 56, Firefox 51 and later are now required for map traces
• Update hex_to_rgb function to raise error for invalid-length hex codes, and emit warning for hex codes containing alpha [#5729], with thanks to @​dylanpulver for the contribution!

[7.0.0] - 2026-08-25

Fixed

• Fix hex_to_rgb parsing of 3-digit shorthand hexadecimal colors such as #FFF [#5662], with thanks to @​genrichez for the contribution!
• Improve px.*_map() auto-fitting behavior when zoom and center are not specified [#5686]
• Add <!doctype html> to the to_html() template to comply with modern web standards [#5693], with thanks to @​mishrakushal for the contribution!
• Apply histfunc/z aggregation to marginal_x/marginal_y="histogram" subplots in density_heatmap/density_contour, instead of always showing raw bin counts [#3521], with thanks to @​lucasjamar for the contribution!
• Fix mpl_to_plotly silently dropping matplotlib path collections in data coordinates (such as violin plots, pcolor, event plots, stack plots, fill_between, and stem plots) by rendering them as filled polygons or lines [#5702], with thanks to @​robertoffmoura for the contribution!

Updated

• Update plotly.js from version 3.6.0 to version 4.0.0 [#5673]. This is a major-version release with many changes. See the plotly.js release notes for the full list. The most significant changes include:
  • Add quiver trace type to visualize vector fields using arrows [#7710, #7945]
  • Add "Share Chart" modebar button for generating a chart-sharing link via Plotly Cloud [#7909]
  • Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]. Use the equivalent *map traces instead.
    • The corresponding graph_objects and Plotly Express functions have also been removed in plotly.py; use the map versions instead
  • Drop support for MathJax v2, and add support for v4 [#7898]. MathJax is the JavaScript library used for rendering mathematical equations in plotly charts.
  • Switch color processing library from TinyColor to culori [#7536, #7962]. There are some changes to supported color string formats as a result:
    • rgb()/rgba() strings with decimal 0–1 fractions are no longer supported
    • hsv() color strings are no longer supported
    • Strings with invalid syntax such as hsl(120, 50% 50%) are no longer supported
    • New supported formats: '#ff0000aa', '#f00a', 'rgb(255 0 0)', 'rgba(255 0 0 / 0.5)', 'hsl(0 100% 50% / 0.5)', 'hsla(0, 100%, 50%, 0.5)', 'hwb(0 0% 0%)', lab(), lch(), oklab(), oklch(), color(), hsl(0.5turn 60% 40%), hsl(none 60% 40%)
  • Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]. Most country names are handled exactly the same; a small number of legacy entries have been removed.
  • Change layout.geo.fitbounds default from false to 'locations' [#7895]. geo subplots will now auto-fit the initial view to the trace data by default.
  • Dynamically compute center and zoom values for scattermap and densitymap traces. The initial map view will now auto-fit to the trace data by default. Add layout.map.fitbounds attribute (default 'locations') to enable or disable auto-fitting behavior [#7884, #7913]
  • Fix GeoJSON bounding-box computation for choropleth and scattergeo traces whose geometry crosses the antimeridian [#7891]

... (truncated)

Commits

• 243bfd0 version changes for v7.1.0
• 9b3c4da Merge pull request #5729 from dylanpulver/hex-to-rgb-rejects-invalid-length
• 3aa898c Merge branch 'main' into hex-to-rgb-rejects-invalid-length
• a93dcc0 update changelog
• 7c85d48 add test for hex_to_rgb 4- and 8-character hex codes
• 80a94ec accept 4- and 8- character hex codes with a warning
• ac78b8b Merge pull request #5726 from Belagum/px-unsigned-int-continuous
• 1cf7756 Merge branch 'main' into px-unsigned-int-continuous
• ec79917 add attribution
• ac7bc28 edit changelog entry
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)