Bump the uv group across 1 directory with 3 updates

[dependabot]

Bumps the uv group with 3 updates in the / directory: jupyterlab, asteval and setuptools.

Updates jupyterlab from 4.5.9 to 4.5.10

Release notes

Sourced from jupyterlab's releases.

v4.5.10

4.5.10

(Full Changelog)

Security patches

• GHSA-gx64-gj6p-pc4c
• GHSA-89vp-jrxv-24w8
• GHSA-h5v5-8746-g7mm
• GHSA-pppj-hq3g-57pj
• GHSA-whvh-wf3x-g77j

Bugs fixed

• Backport of security patches to 4.5.x branch #19186 (@​krassowski, @​MUFFANUJ)

Maintenance and upkeep improvements

• Reconfigure 4.5.x branch (4.6.x is new stable) #19060 (@​krassowski)
• Split external link checks and only run if diff includes a URL #19029 (@​MUFFANUJ)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​krassowski (activity) | @​MUFFANUJ (activity)

Commits

• af5f5b3 [ci skip] Publish 4.5.10
• be9303f Backport of security patches to 4.5.x branch (#19186)
• a555fe1 Reconfigure 4.5.x branch (4.6.x is new stable) (#19060)
• 8d8cb6d Backport PR #19029 on branch 4.5.x (Split external link checks and only run i...
• See full diff in compare view

Updates asteval from 1.0.8 to 1.0.9

Release notes

Sourced from asteval's releases.

1.0.9

This fixes some usage problem and is also meant to address the securirty advisories GHSA-89v8-rhwq-hf77 and GHSA-9w56-46f6-3qhx

Changes:

• Fix unpacking of nested tuples in comprehensions (#149 from yistarostin)

• Fix error with lambda functions, so that calls from top level should clear previous errors and exceptions should clear the callstack before re-raising (#150)

• Add try/except for import of ctypes, so that this module is not required from asteval to run (#152)

• Update PyPI stats link in README

• Remove the "exiting exceptions", 'SystemExit' and 'GeneratorExit' from the symbol table to remove the possibily of such an exception in asteval from exiting the calling application. (#153)

• Make exception handling of BaseExceptions that are not also Exceptions (most notably, KeyboardInterrupt, which is not removed from the symbol table) more explicit, converting these to RuntimeError. (#153)

• Add 'ctypes', 'dump, and 'tofile' as unsafe attributes of numpyndarrays, so that these cannot be acccessed. (#153)

Commits

• 0b359d0 update docs for 1.0.9
• a3e56e7 Merge pull request #153 from lmfit/fix_exiting_exceptions
• bfec153 fix test when numpy is not available
• b239923 cleanups
• f17a27a update type test to not use ndarrays
• 55372d5 cleanups
• b8364db add unsafe ndarray attrributes, cleanups
• b3eaf5b add test for unsafe ndarray attributes, and that 'type(x)' returns a string
• 7ce27af fix typo
• fc85a37 add tests of handling of exiting exceptions
• Additional commits viewable in compare view

Updates setuptools from 82.0.0 to 83.0.0

Changelog

Sourced from setuptools's changelog.

v83.0.0

Features

• Require Python 3.10 or later.

Bugfixes

• MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. A pattern authored in one form (e.g. NFC, as typically saved by editors) now matches a file whose name is stored on disk in another (e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude, global-exclude, recursive-exclude, or prune rule could silently fail to drop a non-ASCII-named file from the source distribution, publishing it despite the exclusion -- see GHSA-h35f-9h28-mq5c.

Deprecations and Removals

• pypa/distutils#334

v82.0.1

Bugfixes

• Fix the loading of launcher manifest.xml file. (#5047)
• Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

• Add advice about how to improve predictability when installing sdists. (#5168)

Misc

• #4941, #5157, #5169, #5175

Commits

• 6519f72 Bump version: 82.0.1 → 83.0.0
• d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
• a2df31e Capture removal of dry_run parameter in changelog.
• 00144dc Moved newsfragment to the release where it occurred.
• a4a5a2b Add news fragment.
• 77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
• 3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
• bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
• a2bc3ac Fix broken intersphinx reference to build's installation docs
• 2d6a739 Use stacked parametrize decorators instead of itertools.product
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.