From 72745a9acb981799011a30451ec7e3cc00ad5051 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 8 Jan 2026 07:20:09 +0000
Subject: [PATCH] Bump the pip group across 2 directories with 2 updates

Bumps the pip group with 1 update in the /python directory: [urllib3](https://github.com/urllib3/urllib3).
Bumps the pip group with 2 updates in the /template directory: [urllib3](https://github.com/urllib3/urllib3) and [bokeh](https://github.com/bokeh/bokeh).


Updates `urllib3` from 2.6.0 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3)

Updates `urllib3` from 2.6.0 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3)

Updates `bokeh` from 3.7.3 to 3.8.2
- [Changelog](https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG)
- [Commits](https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: bokeh
  dependency-version: 3.8.2
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 python/poetry.lock        | 6 +++---
 template/requirements.txt | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/python/poetry.lock b/python/poetry.lock
index 4cfe4e31..073f4849 100644
--- a/python/poetry.lock
+++ b/python/poetry.lock
@@ -1751,14 +1751,14 @@ files = [
 
 [[package]]
 name = "urllib3"
-version = "2.6.0"
+version = "2.6.3"
 description = "HTTP library with thread-safe connection pooling, file post, and more."
 optional = false
 python-versions = ">=3.9"
 groups = ["dev"]
 files = [
-    {file = "urllib3-2.6.0-py3-none-any.whl", hash = "sha256:c90f7a39f716c572c4e3e58509581ebd83f9b59cced005b7db7ad2d22b0db99f"},
-    {file = "urllib3-2.6.0.tar.gz", hash = "sha256:cb9bcef5a4b345d5da5d145dc3e30834f58e8018828cbc724d30b4cb7d4d49f1"},
+    {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"},
+    {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"},
 ]
 
 [package.extras]
diff --git a/template/requirements.txt b/template/requirements.txt
index c0abd490..99164507 100644
--- a/template/requirements.txt
+++ b/template/requirements.txt
@@ -14,7 +14,7 @@ e2b_charts
 # Other packages
 aiohttp==3.13.3
 beautifulsoup4==4.13.4
-bokeh==3.7.3
+bokeh==3.8.2
 gensim==4.3.3 # unmaintained, blocking numpy and scipy bump
 imageio==2.37.0
 joblib==1.5.0
@@ -38,7 +38,7 @@ soundfile==0.13.1
 spacy==3.8.2 # doesn't work on 3.13.x
 textblob==0.19.0
 tornado==6.5.1
-urllib3==2.6.0
+urllib3==2.6.3
 xarray==2025.4.0
 xlrd==2.0.1
 sympy==1.14.0