Skip to content

Build(deps): bump the pip-deps group in /requirements with 3 updates#301

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/requirements/pip-deps-1fce343f53
Closed

Build(deps): bump the pip-deps group in /requirements with 3 updates#301
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/requirements/pip-deps-1fce343f53

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Updates the requirements on pytest-sphinx, pandas and wheel to permit the latest version.
Updates pytest-sphinx from 0.6.3 to 0.7.1

Release notes

Sourced from pytest-sphinx's releases.

v0.7.1

Full Changelog: twmr/pytest-sphinx@v0.7.0...v0.7.1

v0.7.0

What's Changed

Full Changelog: twmr/pytest-sphinx@v0.6.3...v0.7.0

Changelog

Sourced from pytest-sphinx's changelog.

[0.7.1] - 2026-01-21

  • Fixed pypi upload issue

[0.7] - 2025-11-28

  • Drop support for python 3.8 and 3.9 and add support for 3.13 and 3.14
  • Adapt to changes in doctest stdlib package (Fixes #67)
Commits
  • f470f83 Set version to 0.7.1
  • f5a5ce7 Add pytest section to pyproject.toml
  • 7587e15 WIP New PyPI github workflow
  • 21972c4 Update version
  • d9ede38 Add ruff config
  • 3daa5c1 Fix tests that use sphinx-build
  • da49af1 Remove code that is no needed since we dropped support for py3.9
  • b37909d Adapt to change in the doctest pkg from the stdlib in >= py3.13
  • 1ea1853 Use ruff instead of flake8, black and isort
  • 3d717e8 Add support for python 3.14 and drop support for 3.9
  • Additional commits viewable in compare view

Updates pandas from 2.3.3 to 3.0.0

Release notes

Sourced from pandas's releases.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

See the announcement blog post and the detailed release notes for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 3.0.0rc2

No release notes provided.

Pandas 3.0.0rc1

No release notes provided.

Pandas 3.0.0rc0

We are pleased to announce a first release candidate for pandas 3.0.0. If all goes well, we'll release pandas 3.0.0 in a few weeks.

See the [whatsnew][0] for a list of all the changes.

The release is available on conda-forge and PyPI.

The release can be installed from PyPI

python -m pip install --upgrade --pre pandas==3.0.0rc0

Or from conda-forge

conda install -c conda-forge/label/pandas_rc pandas==3.0.0rc0

Please report any issues with the release candidate on the pandas issue tracker.

... (truncated)

Commits
  • 366ccdf RLS: 3.0.0
  • 139f4d0 DOC: split/reorder other enhancements section in 3.0.0 whatsnew notes (#63762)
  • fd2a4f4 TST: assert reading of legacy pickles against current data (#61792)
  • cc0bcaa DOC: update whatsnew section on datetimelike resolution (#63780)
  • 3ddbb49 DOC: remove 2.3.4 whatsnew file from released 3.0 docs (#63779)
  • ee63532 CLN: Create temporary HDF5 file path and HDFStore for pytables tests (#63492)
  • 9512e99 CoW: better chained assignment warning message for update() method (#63500)
  • 1db90d5 API: rename read_iceberg selected_fields keyword to columns (#63748)
  • c9b51fa BUG: .str methods failing on PyArrow using regex with \Z (#63705)
  • 7cff0f4 API: Period.to_timestamp default to microsecond unit (#63760)
  • Additional commits viewable in compare view

Updates wheel to 0.46.3

Release notes

Sourced from wheel's releases.

0.46.3

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command (#676)
Changelog

Sourced from wheel's changelog.

Release Notes

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

  • Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import

... (truncated)

Commits
  • 8b6fa74 Created a new release
  • 7445fb5 Fixed an import of a removed module
  • eba4036 Updated the version number for v0.46.2
  • 557fb54 Created a new release
  • 7a7d2de Fixed security issue around wheel unpack (#675)
  • 41418fa Fixed test failures due to metadata normalization changes
  • c1d442b [pre-commit.ci] pre-commit autoupdate (#674)
  • 0bac882 Update github actions environments (#673)
  • be9f45b [pre-commit.ci] pre-commit autoupdate (#667)
  • 6244f08 Update pre-commit ruff legacy alias (#668)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [pytest-sphinx](https://github.com/thisch/pytest-sphinx), [pandas](https://github.com/pandas-dev/pandas) and [wheel](https://github.com/pypa/wheel) to permit the latest version.

Updates `pytest-sphinx` from 0.6.3 to 0.7.1
- [Release notes](https://github.com/thisch/pytest-sphinx/releases)
- [Changelog](https://github.com/twmr/pytest-sphinx/blob/master/CHANGELOG.md)
- [Commits](twmr/pytest-sphinx@v0.6.3...v0.7.1)

Updates `pandas` from 2.3.3 to 3.0.0
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.0)

Updates `wheel` to 0.46.3
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.33.0...0.46.3)

---
updated-dependencies:
- dependency-name: pytest-sphinx
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: pandas
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: wheel
  dependency-version: 0.46.3
  dependency-type: direct:production
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 26, 2026

Labels

The following labels could not be found: dependencies, maintenance. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 2, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 2, 2026
@dependabot dependabot bot deleted the dependabot/pip/requirements/pip-deps-1fce343f53 branch February 2, 2026 23:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant