Skip to content

Bump the python-minor-patch group across 1 directory with 19 updates - #446

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/python-minor-patch-0179d82dc1
Open

Bump the python-minor-patch group across 1 directory with 19 updates#446
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/python-minor-patch-0179d82dc1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 19 updates in the / directory:

Package From To
flask-cors 6.0.2 6.0.5
python-dotenv 1.2.2 1.2.3
duckdb 1.4.4 1.5.5
numpy 2.4.2 2.4.6
beautifulsoup4 4.14.3 4.15.0
scikit-learn 1.8.0 1.9.0
pyarrow 25.0.0 25.0.1
yfinance 1.5.1 1.7.0
azure-cosmos 4.16.3 4.16.4
azure-storage-blob 12.28.0 12.30.1
azure-identity 1.25.1 1.25.3
azure-kusto-data 6.0.1 6.0.4
azure-keyvault-secrets 4.10.0 4.11.2
mssql-python 1.11.0 1.14.0
psycopg2-binary 2.9.11 2.9.12
db-dtypes 1.5.0 1.7.1
cryptography 50.0.0 50.0.1
playwright 1.61.0 1.62.0
pyinstaller 6.21.0 6.22.2

Updates flask-cors from 6.0.2 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

Commits
  • 91ebc49 Typing Hotfix: support blueprints in the type system
  • d601665 Add strict MyPy Typing
  • c8e8871 Harden release publishing workflow (#406)
  • e1d4034 Derive package version from git tag via setuptools-scm (#405)
  • See full diff in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates duckdb from 1.4.4 to 1.5.5

Release notes

Sourced from duckdb's releases.

v1.5.5 Bugfix Release

See DuckDB's changelog for all changes in DuckDB.

What's Changed in DuckDB-Python

v1.5.4 Bugfix Release

See DuckDB's changelog for all changes in DuckDB.

What's Changed in DuckDB-Python

v1.5.3 Bugfix Release

See the DuckDB core release notes here: https://github.com/duckdb/duckdb/releases/tag/v1.5.3

What's Changed in DuckDB Python

Full Changelog: duckdb/duckdb-python@v1.5.2...v1.5.3

v1.5.2 Bugfix Release

See the DuckDB core release notes here: https://github.com/duckdb/duckdb/releases/tag/v1.5.2

What's Changed in duckdb-python

v1.5.1 Bugfix Release

DuckDB core v1.5.1 Changelog: duckdb/duckdb@v1.5.0...v1.5.1

What's Changed

  • Re-added basic support for the GEOMETRY type

DuckDB Python 1.5.0 "Variegata"

This is the 1.5.0 release of DuckDB's Python bindings. For a list of changes in DuckDB core, have a look at the DuckDB release notes and the blogpost.

Breaking Changes

  • Dropped Python 3.9 support. The minimum supported version is now Python 3.10.
  • Removed deprecated duckdb.typing and duckdb.functional modules. These were deprecated in 1.4.0. Use duckdb.sqltypes and duckdb.func instead.

... (truncated)

Commits

Updates numpy from 2.4.2 to 2.4.6

Release notes

Sourced from numpy's releases.

v2.4.6 (May 18, 2026)

NumPy 2.4.6 Release Notes

NumPy 2.4.6 is a quick release that fixes a regression discovered in the 2.4.5 release.

This release supports Python versions 3.11-3.14

Contributors

A total of 4 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • !EarlMilktea
  • Charles Harris
  • Sebastian Berg
  • Warren Weckesser

Pull requests merged

A total of 4 pull requests were merged for this release.

  • #31444: MAINT: Prepare 2.4.x for further development
  • #31453: BUG: Fix regression in arr.conj()
  • #31459: BUG: np.linalg.svd(..., hermitian=True) returns non-unitary...
  • #31460: BUG: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator...

v2.4.5 (May 15, 2026)

NumPy 2.4.5 Release Notes

NumPy 2.4.5 is a patch release that fixes bugs discovered after the 2.4.4 release, has some typing improvements, and maintains infrastructure.

This release supports Python versions 3.11-3.14

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Aleksei Nikiforov
  • Anarion Zuo +
  • Ankit Ahlawat
  • Breno Favaretto +
  • Charles Harris
  • Igor Krivenko +
  • Ijtihed Kilani +
  • Joren Hammudoglu
  • Maarten Baert +

... (truncated)

Commits
  • b832a09 Merge pull request #31462 from charris/prepare-2.4.6
  • 57cc147 REL: Prepare for the NumPy 2.4.6 release
  • 0c72b0b Merge pull request #31459 from charris/backport-31347
  • 9778d26 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
  • e0e3876 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
  • d1bffeb BUG: np.linalg.svd(..., hermitian=True) returns non-unitary vh (#31347)
  • 8d8d7e5 Merge pull request #31453 from seberg/issue-31452
  • bddaab7 BUG: Fix regression in arr.conj()
  • 37a1ecc Merge pull request #31444 from charris/begin-2.4.6
  • 3c0e043 MAINT: Prepare 2.4.x for further development
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.14.3 to 4.15.0

Updates scikit-learn from 1.8.0 to 1.9.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.9.0

We're happy to announce the 1.9.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.9.html

This release adds narwhals as a new dependency that will help to improve dataframe interoperability across the project.

This version supports Python versions 3.11 to 3.14.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn
Commits
  • 77def0e trigger wheel builder [cd build]
  • ee7c0b0 generate changelog
  • 3d7fb04 bump version
  • 8954e7b DOC Release highlights for 1.9 (#34147)
  • 73a3eab Fix: Array-API - avoid failing for numpy fit + predict with sparse or array-l...
  • 8839aae DOC Thread-safety requirement for open_listener message consumer callback (#3...
  • 4d2476a DOC Refactor array API docs page (#34054)
  • f9f812f 🔒 🤖 CI Update lock files for scipy-dev CI build(s) 🔒 🤖 ...
  • d779dc3 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • 6a03cf0 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
  • Additional commits viewable in compare view

Updates pyarrow from 25.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Commits

Updates yfinance from 1.5.1 to 1.7.0

Release notes

Sourced from yfinance's releases.

1.7.0

Main change:

  • history_metadata now lazy-loads tradingPeriods

Fixes for:

  • proxy
  • stock-split price-repair

Full changelog #2959

Thanks @​amosli

1.6.0

Main changes:

  • Price repair improvements
  • Few new fields to Balance Sheet and Screener
  • Many little fixes

Full changelog #2935

Thanks @​foley40 @​dokson @​vignesh-nagarajan-vn @​shanehull @​DogInfantry @​Kaif10 @​nyxst4ck @​DMZ22 @​Aaritp @​etbala @​aleks-drozy

1.5.2

Fix yfinance breaking with curl_cffi>=0.16

Thanks @​dokson

Changelog

Sourced from yfinance's changelog.

1.7.0

Features / improvements:

  • Make history_metadata lazy-load 'tradingPeriods' #2922 Fixes
  • Improve robustness of YfData when behind a SOCKS5 proxy #2953 Price repair:
  • Fix bug in volume-validation of stock-split-repair #2958

1.6.0

Features / improvements

1.5.2

Patches

  • Fix yfinance breaking with curl_cffi>=0.16
Commits
  • 3d9d2f0 Version 1.7.0
  • 43f3021 Merge pull request #2959 from ranaroussi/dev
  • 686a031 Minor test fix
  • fdede94 Merge pull request #2953 from amosli/fix/cookie-crumb-proxy-resilience
  • 5c1f64e Fixes for PR #2958
  • c732994 Merge pull request #2958 from ranaroussi/fix/price-repair-split-volume-valida...
  • ba7b650 Fix proxy wipe and make cookie/crumb failures non-fatal
  • 0f29c85 Fix bug in volume-validation of stock-split-repair, that was wrongly blocking...
  • baeca64 Merge pull request #2918 from dokson/fix/drop-nospam-extra
  • 5261b4d Drop unusable nospam extra and py2 cruft
  • Additional commits viewable in compare view

Updates azure-cosmos from 4.16.3 to 4.16.4

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.16.4

4.16.4 (2026-09-02)

Bugs Fixed

  • Fixed regression with handling of v1 legacy containers when passing {} as a partition key. {} and NonePartitionKeyValue now both resolve to the Undefined effective partition key. See PR 48422
  • Fixed the same TypeError on system key (migrated) containers, where a missing partition key value resolves to _Empty instead of Undefined. It now maps to the minimum effective partition key. See PR 48422

Other Changes

  • Marked the Throughput Buckets feature as GA. See 48838.
Commits

Updates azure-storage-blob from 12.28.0 to 12.30.1

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.30.1

12.30.1 (2026-08-24)

Bugs Fixed

  • Fixed a bug where client-side encryption 2.0 could not detect a rearrangement of otherwise-untampered authenticated regions in blob content. This is now detected and exceptions are thrown. For data recovery purposes, this behavior can be reverted by setting the "AZURE_STORAGE_CSE_V2_ALLOW_MISORDERED_AUTH_REGIONS" environment variable.
  • Fixed a bug in client-side encryption where version downgrades, and other metadata tampering, was only detected at the start of a download.
Commits
  • c274a90 Exclude azure-storage-extensions from storage CI
  • 7edaedd Sync ci.yml from main
  • ca8e6ac [Storage] Prepare GA patch for CSE fixes (#48692)
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102
  • 33075a4 [Storage] Fix Changelog Typos (#46930)
  • 4b183cf [Storage] Updated changelogs after 101 GA (#46914)
  • edf5833 Regenerate azure-mgmt-storagesync with latest code generator tool (#46884)
  • 1f5e399 [Storage] [Datalake] Fixed all next-pylint errors for `azure-storage-file-d...
  • Additional commits viewable in compare view

Updates azure-identity from 1.25.1 to 1.25.3

Commits

Updates azure-kusto-data from 6.0.1 to 6.0.4

Release notes

Sourced from azure-kusto-data's releases.

v6.0.4

Changed

  • Bumped dependencies: azure-identity ≥ 1.25.3 and msal ≥ 1.35.1 for sovereign cloud support.

v6.0.3

What's Changed

Full Changelog: Azure/azure-kusto-python@v6.0.2...v6.0.3

v6.0.2

Fixed

  • Fixed dataframe_from_result_table crashing with pandas 3.0 when a datetime column contains all null values.
  • Removed legacy pandas 1.x code path in parse_datetime (minimum supported pandas is now 2.3.1).
Changelog

Sourced from azure-kusto-data's changelog.

[6.0.4] - 2026-05-06

Changed

  • Bumped dependencies: azure-identity ≥ 1.25.3 and msal ≥ 1.35.1 for sovereign cloud support.

[6.0.3] - 2026-03-31

Fixed

  • Fixed KustoApiError crashing when no message is provided by defaulting to "Unknown Kusto service error".
  • Updated KustoApiError.__init__ message parameter type to Optional[str].

Changed

  • Bumped dependencies: aiohttp 3.13.4, azure-core 1.39.0, cryptography 46.0.6, pygments 2.20.0, pyjwt 2.12.1, urllib3 2.6.3.

[6.0.2] - 2026-02-19

Fixed

  • Fixed dataframe_from_result_table crashing with pandas 3.0 when a datetime column contains all null values.
  • Removed legacy pandas 1.x code path in parse_datetime (minimum supported pandas is now 2.3.1).
Commits
  • 5a8a712 Bump version to 6.0.4 and update changelog (#639)
  • d71f65a Bump azure-identity ≥ 1.25.3 and msal ≥ 1.35.1 for sovereign cloud support (#...
  • 7a7eb81 docs: add changelog entry for 6.0.3 (#636)
  • 4e30e20 PR: 628 (#635)
  • 64fb50e chore: consolidate uv dependency upgrades (#634)
  • 6c198cf *Allow transformation functions for CSV and SCSV formats as well (#629)
  • dc3d28b [bugfix]: Fixes datetime parsing for all nulls data (#621)
  • See full diff in compare view

Updates azure-keyvault-secrets from 4.10.0 to 4.11.2

Release notes

Sourced from azure-keyvault-secrets's releases.

azure-keyvault-secrets_4.11.2

4.11.2 (2026-08-25)

Bugs Fixed

  • Fixed the challenge authentication policy to cache the authentication challenge only after the challenge resource is verified, so that a rejected challenge is not cached and reused by subsequent requests.

azure-keyvault-secrets_4.11.1

4.11.1 (2026-08-12)

Bugs Fixed

  • Fixed a replay bug in the challenge authentication policy where a request copy stashed on the shared policy instance was never cleared, allowing one request's method, URL, and body to leak into a later, unrelated request made by the same client (for example, after an Entra ID Continuous Access Evaluation challenge). The original request is now stored per-request instead of on the policy instance. This mirrors the fix already applied to azure-keyvault-keys and azure-keyvault-administration in #47742.
Commits
  • 5c95cf1 Hotfix: cache Key Vault challenge only after validation (secrets 4.11.2) (#48...
  • 63f9d76 [KeyVault] Fix Challenge Auth replay bug in secrets, certificates (#48537)
  • 8050793 Don't use sparse chekout for private repos (#47776)
  • 19001b1 Update helper function to print nested exception details. (#48520)
  • c9e6a74 Enable CFSClean network isolation for Python pipelines (#48483)
  • 23a9d53 [Storage] Bump versions after STG 104 beta release (#48528)
  • 0c2dca4 Sync eng/common directory with azure-sdk-tools for PR 16685 (#48522)
  • fab4548 [AutoPR azure-mgmt-fabric]-generated-from-SDK Generation - Python-6671798 (#4...
  • 833b8c5 [AutoPR azure-mgmt-netapp]-generated-from-SDK Generation - Python-6620664 (#4...
  • 529ae05 [AgentServer] Set StateStore release dates (#48532)
  • Additional commits viewable in compare view

Updates mssql-python from 1.11.0 to 1.14.0

Release notes

Sourced from mssql-python's releases.

Release Notes - Version 1.14.0

Enhancements

• Faster Parameter Detection and Execution (#549)

What changed: Parameter type detection and binding now run in a single native C++ pipeline, removing per-parameter Python and pybind11 overhead from the standard execute() path. Who benefits: Applications with wide parameterized statements and batched execute workloads. Impact: Parameter detection is approximately 60 times faster; benchmarks showed about 50% faster execution for statements with 50 or more parameters and 1.5-1.6 times higher end-to-end throughput in representative bulk insert scenarios.

PR #549 | GitHub Issue #500

Bug Fixes

• Bulk Copy Accepts timeout=0 (#698)

What changed: bulkcopy() now passes a zero timeout through as an unlimited timeout, matching the BCP API contract, while still rejecting negative, non-integer, and boolean values. Who benefits: Users who explicitly disable bulk-copy timeouts with timeout=0. Impact: The documented no-timeout behavior now works instead of raising a validation error.

PR #698 | GitHub Issue #697

• Arrow Reader Fetch Exceptions Are Preserved (#718)

What changed: Defensive Arrow cursor cleanup now checks cursor state before cleanup and no longer raises a secondary error that replaces the original fetch exception. Who benefits: Applications that consume Arrow result batches and encounter a fetch failure. Impact: Callers now receive the actual fetch error, making failures accurate and diagnosable.

PR #718 | GitHub Issue #712

• Decimal Conversion Errors No Longer Expose Parameter Values (#719)

What changed: executemany() Decimal conversion failures now report only row index, column index, and value type. Potentially value-bearing exception causes are suppressed so sensitive data cannot leak through chained tracebacks. Who benefits: Applications that log or export database exceptions to monitoring and APM systems. Impact: Invalid Decimal parameters remain diagnosable without exposing parameter rows, personally identifiable information, or secrets.

PR #719

• Arrow View Types Work in Bulk Copy (#729)

What changed: The bundled mssql_py_core 0.1.9 adds support for Arrow View types, with end-to-end coverage for Polars string_view columns passed directly through the Arrow C Data Interface. Who benefits: Polars users and other Arrow producers that export variable-length View arrays to bulkcopy_arrow(). Impact: String View values and NULLs now round-trip correctly without requiring conversion through DataFrame.to_arrow().

PR #729 | GitHub Issue #708 - Thanks @​gargsaumya for the contribution! (via mssql_py_core)

• connect(timeout=) Sets the Login Timeout (#728)

What changed: The constructor timeout is now applied as SQL_ATTR_LOGIN_TIMEOUT instead of a per-statement query timeout; query timeout remains independently configurable through Connection.timeout, and both entry points validate values consistently. Who benefits: Users who need connection attempts to fail within a predictable time while allowing long-running queries. Impact: connect(timeout=N) now bounds login attempts as documented and no longer aborts queries after N seconds.

... (truncated)

Commits

@dependabot
Bump the python-minor-patch group across 1 directory with 19 updates
717ef76 
Bumps the python-minor-patch group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.2` | `6.0.5` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.4.4` | `1.5.5` |
| [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.4.6` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.14.3` | `4.15.0` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.8.0` | `1.9.0` |
| [pyarrow](https://github.com/apache/arrow) | `25.0.0` | `25.0.1` |
| [yfinance](https://github.com/ranaroussi/yfinance) | `1.5.1` | `1.7.0` |
| [azure-cosmos](https://github.com/Azure/azure-sdk-for-python) | `4.16.3` | `4.16.4` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.28.0` | `12.30.1` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.25.1` | `1.25.3` |
| [azure-kusto-data](https://github.com/Azure/azure-kusto-python) | `6.0.1` | `6.0.4` |
| [azure-keyvault-secrets](https://github.com/Azure/azure-sdk-for-python) | `4.10.0` | `4.11.2` |
| [mssql-python](https://github.com/microsoft/mssql-python) | `1.11.0` | `1.14.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.11` | `2.9.12` |
| [db-dtypes](https://github.com/googleapis/google-cloud-python) | `1.5.0` | `1.7.1` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.21.0` | `6.22.2` |



Updates `flask-cors` from 6.0.2 to 6.0.5
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.2...6.0.5)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `duckdb` from 1.4.4 to 1.5.5
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.4.4...v1.5.5)

Updates `numpy` from 2.4.2 to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.2...v2.4.6)

Updates `beautifulsoup4` from 4.14.3 to 4.15.0

Updates `scikit-learn` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.8.0...1.9.0)

Updates `pyarrow` from 25.0.0 to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-25.0.1)

Updates `yfinance` from 1.5.1 to 1.7.0
- [Release notes](https://github.com/ranaroussi/yfinance/releases)
- [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst)
- [Commits](ranaroussi/yfinance@1.5.1...1.7.0)

Updates `azure-cosmos` from 4.16.3 to 4.16.4
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.16.3...azure-cosmos_4.16.4)

Updates `azure-storage-blob` from 12.28.0 to 12.30.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.28.0...azure-storage-blob_12.30.1)

Updates `azure-identity` from 1.25.1 to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.1...azure-identity_1.25.3)

Updates `azure-kusto-data` from 6.0.1 to 6.0.4
- [Release notes](https://github.com/Azure/azure-kusto-python/releases)
- [Changelog](https://github.com/Azure/azure-kusto-python/blob/master/CHANGELOG.md)
- [Commits](Azure/azure-kusto-python@v6.0.1...v6.0.4)

Updates `azure-keyvault-secrets` from 4.10.0 to 4.11.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-keyvault-secrets_4.10.0...azure-keyvault-secrets_4.11.2)

Updates `mssql-python` from 1.11.0 to 1.14.0
- [Release notes](https://github.com/microsoft/mssql-python/releases)
- [Changelog](https://github.com/microsoft/mssql-python/blob/main/CHANGELOG.md)
- [Commits](microsoft/mssql-python@v1.11.0...v1.14.0)

Updates `psycopg2-binary` from 2.9.11 to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.11...2.9.12)

Updates `db-dtypes` from 1.5.0 to 1.7.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@db-dtypes-v1.5.0...db-dtypes-v1.7.1)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.61.0...v1.62.0)

Updates `pyinstaller` from 6.21.0 to 6.22.2
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.21.0...v6.22.2)

---
updated-dependencies:
- dependency-name: flask-cors
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: scikit-learn
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: yfinance
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: azure-cosmos
  dependency-version: 4.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: azure-storage-blob
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: azure-kusto-data
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: azure-keyvault-secrets
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: mssql-python
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: db-dtypes
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pyinstaller
  dependency-version: 6.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants