Bump the pip group across 3 directories with 4 updates#417
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the pip group across 3 directories with 4 updates#417dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the pip group with 2 updates in the /AI-Upscaling-With-NPU directory: [jupyterlab](https://github.com/jupyterlab/jupyterlab) and [notebook](https://github.com/jupyter/notebook). Bumps the pip group with 2 updates in the /LLM/rag directory: [langchain-core](https://github.com/langchain-ai/langchain) and [pypdf](https://github.com/py-pdf/pypdf). Bumps the pip group with 1 update in the /Text-Summarizer-Browser-Plugin directory: [pypdf](https://github.com/py-pdf/pypdf). Updates `jupyterlab` from 4.4.8 to 4.5.7 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.4.8...@jupyterlab/lsp@4.5.7) Updates `notebook` from 7.4.1 to 7.5.6 - [Release notes](https://github.com/jupyter/notebook/releases) - [Changelog](https://github.com/jupyter/notebook/blob/@jupyter-notebook/tree@7.5.6/CHANGELOG.md) - [Commits](https://github.com/jupyter/notebook/compare/@jupyter-notebook/tree@7.4.1...@jupyter-notebook/tree@7.5.6) Updates `langchain-core` from 1.2.22 to 1.3.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.3.3) Updates `pypdf` from 6.9.2 to 6.10.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.9.2...6.10.2) Updates `pypdf` from 6.9.2 to 6.10.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.9.2...6.10.2) --- updated-dependencies: - dependency-name: jupyterlab dependency-version: 4.5.7 dependency-type: direct:production dependency-group: pip - dependency-name: notebook dependency-version: 7.5.6 dependency-type: direct:production dependency-group: pip - dependency-name: langchain-core dependency-version: 1.3.3 dependency-type: direct:production dependency-group: pip - dependency-name: pypdf dependency-version: 6.10.2 dependency-type: direct:production dependency-group: pip - dependency-name: pypdf dependency-version: 6.10.2 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the pip group with 2 updates in the /AI-Upscaling-With-NPU directory: jupyterlab and notebook.
Bumps the pip group with 2 updates in the /LLM/rag directory: langchain-core and pypdf.
Bumps the pip group with 1 update in the /Text-Summarizer-Browser-Plugin directory: pypdf.
Updates
jupyterlabfrom 4.4.8 to 4.5.7Release notes
Sourced from jupyterlab's releases.
... (truncated)
Commits
f514041[ci skip] Publish 4.5.766fe9adBackport PR #18652 on branch 4.5.x (Video and Audio Content Providers: Fix Ju...f4455faFix syntax for Python 3.9 on4.5.xbranch (#18817)d2322b5Backport PR #18819 on branch 4.5.x (Fix linting issue) (#18820)5d9cb8cMerge commit from fork1de120bMerge commit from fork6926100Backport PR #18808 on branch 4.5.x (Fix notebook hang when dropping cells) (#...67e6e88Backport PR #18647 on branch 4.5.x (Update default font family to honor macOS...bf21eb9Backport PR #18747 on branch 4.5.x (Fix Contextual Help keyboard shortcut rel...73cafa5Backport PR #18788 on branch 4.5.x (Fix name of option for extension manager ...Updates
notebookfrom 7.4.1 to 7.5.6Release notes
Sourced from notebook's releases.
... (truncated)
Changelog
Sourced from notebook's changelog.
... (truncated)
Commits
1ab2d2bPublish 7.5.650e5222Merge commit from fork2e642f0Update to JupyterLab v4.5.7 (#7902)4b93f98Backport PR #7824: docs: Fix broken links in troubleshooting and migration do...9a2c88fPublish 7.5.54f8438bUpdate to JupyterLab v4.5.6 (#7861)f78fcfaBackport PR #7857: Fix check links (#7858)9e4cf2a[7.5.x] Drop Python 3.9 on CI (#7860)ecc3aafPublish 7.5.4e5d8418Update to JupyterLab v4.5.5 (#7842)Updates
langchain-corefrom 1.2.22 to 1.3.3Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
5039dferelease(core): 1.3.3 (#37198)55a7707fix(core): set deprecationsinceto 1.3.3 to match release (#37200)c979c61fix(core, langchain): hardenload()against untrusted manifests (#37197)d703110docs: update README.md (#37190)4d50a2aci(infra): run pre-release checks before TestPyPI publish (#37194)9bd730efix(fireworks): requireapi_keyinFireworksEmbeddings(#37193)f475f41release(mistralai): 1.1.4 (#37191)7dbff48fix(mistralai): strip non-wire keys fromToolMessage(#37188)913816crelease(fireworks): 1.3.1 (#37189)4498d3dfix(fireworks): strip non-wire keys fromToolMessagetext content blocks (#...Updates
pypdffrom 6.9.2 to 6.10.2Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
c476b4fREL: 6.10.2c50a010SEC: Do not rely on possibly invalid /Size for incremental cloning (#3735)ac734daSEC: Introduce limits for FlateDecode parameters and image decoding (#3734)b49e7ebREL: 6.10.162338e9SEC: Limit the allowed size of xref and object streams (#3733)5dcc0aeDEV: Update pytest-benchmark to 5.2.3b42e4aaDEV: Update pinned pillow and pytest where possible (#3732)717446bROB: Consider strict mode setting for decryption errors (#3731)9e461d3DEV: Bump softprops/action-gh-release from 2 to 3 (#3730)500d09dTST: Updatetest_embedded_file__basicto usetmp_pathfixture (#3726)Updates
pypdffrom 6.9.2 to 6.10.2Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
c476b4fREL: 6.10.2c50a010SEC: Do not rely on possibly invalid /Size for incremental cloning (#3735)ac734daSEC: Introduce limits for FlateDecode parameters and image decoding (#3734)b49e7ebREL: 6.10.162338e9SEC: Limit the allowed size of xref and object streams (#3733)5dcc0aeDEV: Update pytest-benchmark to 5.2.3b42e4aaDEV: Update pinned pillow and pytest where possible (#3732)717446bROB: Consider strict mode setting for decryption errors (#3731)9e461d3DEV: Bump softprops/action-gh-release from 2 to 3 (#3730)500d09dTST: Updatetest_embedded_file__basicto usetmp_pathfixture (#3726)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.