Bump the requirements group across 1 directory with 7 updates

[dependabot]

Bumps the requirements group with 7 updates in the / directory:

Package	From	To
numpy	1.26.4	2.0.1
ipywidgets	8.1.2	8.1.3
setuptools-scm	8.0.4	8.1.0
pytest	8.1.1	8.3.2
lmdb	1.4.1	1.5.1
redis	5.0.4	5.0.8
pymongo	4.6.3	4.8.0

Updates numpy from 1.26.4 to 2.0.1

Release notes

Sourced from numpy's releases.

v2.0.1

NumPy 2.0.1 Release Notes

NumPy 2.0.1 is a maintenance release that fixes bugs and regressions discovered after the 2.0.0 release. NumPy 2.0.1 is the last planned release in the 2.0.x series, 2.1.0rc1 should be out shortly.

The Python versions supported by this release are 3.9-3.12.

NOTE: Do not use the GitHub generated "Source code" files listed in the "Assets", they are garbage.

Improvements

np.quantile with method closest_observation chooses nearest even order statistic

This changes the definition of nearest for border cases from the nearest odd order statistic to nearest even order statistic. The numpy implementation now matches other reference implementations.

(gh-26656)

Contributors

A total of 15 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• @​vahidmech +
• Alex Herbert +
• Charles Harris
• Giovanni Del Monte +
• Leo Singer
• Lysandros Nikolaou
• Matti Picus
• Nathan Goldbaum
• Patrick J. Roddy +
• Raghuveer Devulapalli
• Ralf Gommers
• Rostan Tabet +
• Sebastian Berg
• Tyler Reddy
• Yannik Wicke +

Pull requests merged

A total of 24 pull requests were merged for this release.

• #26711: MAINT: prepare 2.0.x for further development
• #26792: TYP: fix incorrect import in ma/extras.pyi stub
• #26793: DOC: Mention '1.25' legacy printing mode in set_printoptions
• #26794: DOC: Remove mention of NaN and NAN aliases from constants

... (truncated)

Commits

• 4c9f431 Merge pull request #27000 from charris/prepare-2.0.1
• 0e70e00 REL: Prepare for the NumPy 2.0.1 release [wheel build]
• 4d10ffc Merge pull request #26995 from charris/backport-26985
• 764b667 BUG: Add object cast to avoid warning with limited API
• 9be6ad6 Merge pull request #26971 from charris/backport-26935
• 6d950e9 BUG: fix f2py tests to work with v2 API
• 89630c0 Merge pull request #26962 from charris/backport-26919
• 88fa840 TST: Apply test suggestion by Nathan for rlstrip fixes
• a9da01e BUG,MAINT: Fix utf-8 character stripping memory access
• 6afbbf8 Merge pull request #26963 from charris/backport-26930
• Additional commits viewable in compare view

Updates ipywidgets from 8.1.2 to 8.1.3

Release notes

Sourced from ipywidgets's releases.

8.1.3

Bug fixes

• Add support for widgets in JupyterLab code consoles by @​jtpio in jupyter-widgets/ipywidgets#3004
• Add return to pack_models by @​gjmooney in jupyter-widgets/ipywidgets#3923

Documentation

• Docs: Update jupyterlite by @​martinRenou in jupyter-widgets/ipywidgets#3918
• Docs: Fix jupyterlite deployment by @​martinRenou in jupyter-widgets/ipywidgets#3919

New Contributors

• @​gjmooney made their first contribution in jupyter-widgets/ipywidgets#3923

Full Changelog: jupyter-widgets/ipywidgets@8.1.2...8.1.3

Commits

• See full diff in compare view

Updates setuptools-scm from 8.0.4 to 8.1.0

Release notes

Sourced from setuptools-scm's releases.

v8.1.0

What's Changed

• correctly handle project config overrides when the version keyword is used together with pyproject.toml by @​RonnyPfannschmidt in pypa/setuptools_scm#947
• prepare v8.0.4 release by @​RonnyPfannschmidt in pypa/setuptools_scm#948
• fix #950 - add encoding args to io interaction by @​RonnyPfannschmidt in pypa/setuptools_scm#951
• Reword docker usage hint by @​WhyNotHugo in pypa/setuptools_scm#954
• Update requires by @​jaap3 in pypa/setuptools_scm#955
• Fix rst remnants by @​valberg in pypa/setuptools_scm#958
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#949
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#964
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#971
• Fix typo found by codespell by @​DimitriPapadopoulos in pypa/setuptools_scm#965
• Make Sphinx usage example clearer by @​matt-graham in pypa/setuptools_scm#973
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#975
• GitHub Actions python-tests on the current version of PyPy by @​cclauss in pypa/setuptools_scm#977
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#979
• Updated entangled-cli to account for not having rich extra by @​jamesbraza in pypa/setuptools_scm#980
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#983
• Documenting SETUPTOOLS_SCM_PRETEND_VERSION_FOR_${NORMALIZED_DIST_NAME} by @​jamesbraza in pypa/setuptools_scm#981
• Fix version file template name in documentation by @​crash5 in pypa/setuptools_scm#982
• Bump actions/setup-python from 4 to 5 by @​dependabot in pypa/setuptools_scm#989
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#988
• Update URL by @​DimitriPapadopoulos in pypa/setuptools_scm#995
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#992
• Bump hynek/build-and-inspect-python-package from 1 to 2 by @​dependabot in pypa/setuptools_scm#991
• Bump actions/download-artifact from 3 to 4 by @​dependabot in pypa/setuptools_scm#990
• Fix misspelling found by codespell by @​DimitriPapadopoulos in pypa/setuptools_scm#994
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#998
• Add a "only-version" version scheme by @​thejcannon in pypa/setuptools_scm#1005
• cleanups + bugfixes by @​RonnyPfannschmidt in pypa/setuptools_scm#996
• Fix non-escaped markdown in docs by @​JCGoran in pypa/setuptools_scm#1017
• Only depend on typing_extensions for Python < 3.10 by @​dcermak in pypa/setuptools_scm#1015
• fix 1018 allow non normalized semver by @​RonnyPfannschmidt in pypa/setuptools_scm#1020
• pre commit upgrade by @​RonnyPfannschmidt in pypa/setuptools_scm#1021
• add 'info' command to cli by @​con-f-use in pypa/setuptools_scm#959
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#1023
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#1026
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in pypa/setuptools_scm#1027
• Make .git_archival.txt more reproducible by @​LecrisUT in pypa/setuptools_scm#1033
• Read branch data from Mercurial archives by @​danchr in pypa/setuptools_scm#1024
• Fix timezone error by @​ap-- in pypa/setuptools_scm#1039

New Contributors

• @​WhyNotHugo made their first contribution in pypa/setuptools_scm#954
• @​valberg made their first contribution in pypa/setuptools_scm#958
• @​matt-graham made their first contribution in pypa/setuptools_scm#973
• @​crash5 made their first contribution in pypa/setuptools_scm#982
• @​thejcannon made their first contribution in pypa/setuptools_scm#1005
• @​JCGoran made their first contribution in pypa/setuptools_scm#1017
• @​dcermak made their first contribution in pypa/setuptools_scm#1015

... (truncated)

Changelog

Sourced from setuptools-scm's changelog.

Commits

• 234b74f Merge pull request #1039 from ap--/fix-timezone-error
• 3e613cd [pre-commit.ci] auto fixes from pre-commit.com hooks
• 49a89c9 setuptools_scm.git: fix handling of dates in isoformat ending with Z
• 9645373 tests: add git get_head_date test for isoformat dates ending with Z
• d75201a Merge pull request #1024 from danchr/hg-archive-branch
• d8d2b86 Merge pull request #1033 from LecrisUT/fix/git_archival
• 9ea57a0 Make .git_archival.txt more reproducible
• d081257 Merge pull request #1027 from pypa/pre-commit-ci-update-config
• c9b3860 [pre-commit.ci] pre-commit autoupdate
• 1ac50c2 Merge pull request #1026 from pypa/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates pytest from 8.1.1 to 8.3.2

Release notes

Sourced from pytest's releases.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

• #12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

  -- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

8.3.0

pytest 8.3.0 (2024-07-20)

New features

• #12231: Added [--xfail-tb]{.title-ref} flag, which turns on traceback output for XFAIL results.

  • If the [--xfail-tb]{.title-ref} flag is not given, tracebacks for XFAIL results are NOT shown.
  • The style of traceback for XFAIL is set with [--tb]{.title-ref}, and can be [auto|long|short|line|native|no]{.title-ref}.
  • Note: Even if you have [--xfail-tb]{.title-ref} set, you won't see them if [--tb=no]{.title-ref}.

  Some history:

  With pytest 8.0, [-rx]{.title-ref} or [-ra]{.title-ref} would not only turn on summary reports for xfail, but also report the tracebacks for xfail results. This caused issues with some projects that utilize xfail, but don't want to see all of the xfail tracebacks.

  This change detaches xfail tracebacks from [-rx]{.title-ref}, and now we turn on xfail tracebacks with [--xfail-tb]{.title-ref}. With this, the default [-rx]{.title-ref}/ [-ra]{.title-ref} behavior is identical to pre-8.0 with respect to xfail tracebacks. While this is a behavior change, it brings default behavior back to pre-8.0.0 behavior, which ultimately was considered the better course of action.

• #12281: Added support for keyword matching in marker expressions.

  Now tests can be selected by marker keyword arguments. Supported values are int{.interpreted-text role="class"}, (unescaped) str{.interpreted-text role="class"}, bool{.interpreted-text role="class"} & None{.interpreted-text role="data"}.

  See marker examples <marker_keyword_expression_example>{.interpreted-text role="ref"} for more information.

  -- by lovetheguitar{.interpreted-text role="user"}

• #12567: Added --no-fold-skipped command line option.

  If this option is set, then skipped tests in short summary are no longer grouped by reason but all tests are printed individually with their nodeid in the same way as other statuses.

  -- by pbrezina{.interpreted-text role="user"}

... (truncated)

Commits

• bbcec9c Prepare release version 8.3.2
• 78fe8b6 Merge pull request #12657 from pytest-dev/patchback/backports/8.3.x/6c806b499...
• 238bad2 Merge pull request #12656 from RonnyPfannschmidt/fix-12652-detect-conda-env
• ae6034a Merge pull request #12641 from pytest-dev/patchback/backports/8.3.x/c03989cee...
• 31337ab Merge pull request #12640 from pytest-dev/update-user
• ca3070b Merge pull request #12637 from pytest-dev/release-8.3.1
• de98446 Prepare release version 8.3.1
• bd0a042 Merge pull request #12636 from pytest-dev/update-release-notes
• 664325b doc/changelog: update 8.3.0 notes
• 19d225d Merge pull request #12635 from pytest-dev/release-8.3.0
• Additional commits viewable in compare view

Updates lmdb from 1.4.1 to 1.5.1

Changelog

Sourced from lmdb's changelog.

2024-07-01 1.5.1

• CI-only fix.

2024-06-30 1.5.0

• Add Python 3.12 binaries.

• Update bundled LMDB to 0.9.31.

• Remove Python 2.7 support.

Commits

• 7d9dfdf Bump version release
• 4ac135e CI: Fix publishing wheels 2
• 9780bb2 CI: Fix publishing wheels
• bba781c Bump version release
• 4ab5cb2 Update liblmdb, add building for 3.12 (#361)
• See full diff in compare view

Updates redis from 5.0.4 to 5.0.8

Release notes

Sourced from redis's releases.

5.0.8

Changes

• Resolve some docs warnings (#3322)
• Add missing type hints for retry.py (#3250)

🔥 Breaking Changes

• Timeseries insertion filters for close samples (#3228)

🚀 New Features

• Hash field expiration commands (#3218)
• Support the MAXAGE option for CLIENT KILL (#3187)
• Support NOVALUES parameter for HSCAN (#3157)
• Document XREAD of last message (+) (#3187)
• Support missing/empty values in search (#3231)
• Timeseries insertion filters for close samples (#3228)

🧰 Maintenance

• Add extra tests for GEO search (#3244)
• Test special characters escaping in search (#3276)

🐛 Bug Fixes

• Decode search results at field level (#3309)

5.0.7

Changes

🐛 Bug Fixes

• None UnixDomainSocket timeout (#3293)

🧰 Maintenance

• Updated redis version to represent latest available build (#3296)

Contributors

We'd like to thank all the contributors who worked on this release!

@​vladvildanov @​dmaier-redislabs

5.0.6

Changes

🐛 Bug Fixes

• Handle lists in the response of INFO

... (truncated)

Commits

• 6a2a636 Decode search results at field level (#3309)
• e7ef54a Fix bug: client side caching causes unexpected disconnections (async version)...
• 0cd0c5d Format connection errors in the same way everywhere (#3305)
• 6fedfef Prepare for Redis 7.4 RC2 (#3303)
• ed1680f Add details to the asyncio connection error message (#3211)
• 511fda0 Add missing type hints for retry.py (#3250)
• c1a6ff7 Bump rojopolis/spellcheck-github-actions from 0.37.0 to 0.38.0 (#3301)
• 338cbfd Re-enable Graph tests (#3287)
• 532bc02 Do not restrict pytest dependencies versions (#3286)
• b6a0f96 Add CODECOV token to CI (#3285)
• Additional commits viewable in compare view

Updates pymongo from 4.6.3 to 4.8.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

• The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
• The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
• Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
• Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
• Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
• Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

• Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.

---

Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

PyMongo 4.7.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-3-released/283508

PyMongo 4.7.2

Community Notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-2-released/279584

PyMongo 4.7.1

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

PyMongo 4.7.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-0-released/277656

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.8.0

.. warning:: PyMongo 4.8 drops support for Python 3.7 and PyPy 3.8: Python 3.8+ or PyPy 3.9+ is now required.

PyMongo 4.8 brings a number of improvements including:

• The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
• The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
• Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
• Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
• Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
• Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes ............................

• Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved ...............

See the PyMongo 4.8 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.8 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37057

Changes in Version 4.7.3

Version 4.7.3 has further fixes for lazily loading modules.

• Use deferred imports instead of importlib lazy module loading.
• Improve import time on Windows.
• Reduce verbosity of "Waiting for suitable server to become available" log message from info to debug.

Issues Resolved ...............

See the PyMongo 4.7.3 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.7.3 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=39865

Changes in Version 4.7.2

... (truncated)

Commits

• d504d14 BUMP 4.8.0
• ab9e748 PYTHON-4515 Improve 4.8 changelog (#1713)
• 2fdf707 PYTHON-4507 [v4.8] pip>=21.3 is required for editable installs (#1711)
• 5139adb PYTHON-4515 [v4.8] Update changelog for 4.8 (#1710)
• b3c55ff BUMP 4.8.0.dev1
• 113b9da BUMP 4.8.0b0
• 585411a PYTHON-4388 [v4.8] Fix security events handling in release workflow again (#1...
• f1f4938 PYTHON-4388 [v4.8] Fix permissions in release workflow (#1708)
• a0d232b PYTHON-4499 [v4.8] Log pymongo.connection at DEBUG without EventListeners (#1...
• 14ed482 PYTHON-4388 [v4.8] Fix dist handling in SSDLC workflow (#1706)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dstansby]

Yay it works!