deps(py): bump the python-minor group with 8 updates by dependabot[bot] · Pull Request #1082 · marketcalls/openalgo

dependabot · 2026-03-09T08:55:43Z

Bumps the python-minor group with 8 updates:

Package	From	To
charset-normalizer	`3.4.4`	`3.4.5`
ipython	`9.10.0`	`9.11.0`
numpy	`2.4.2`	`2.4.3`
platformdirs	`4.9.2`	`4.9.4`
plotly	`6.5.2`	`6.6.0`
pydantic-core	`2.41.5`	`2.42.0`
pyngrok	`7.5.0`	`7.5.1`
sqlalchemy	`2.0.47`	`2.0.48`

Updates charset-normalizer from 3.4.4 to 3.4.5

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.5

3.4.5 (2026-03-06)

Changed

Update setuptools constraint to setuptools>=68,<=82.

Raised upper bound of mypyc for the optional pre-built extension to v1.19.1

Fixed

Add explicit link to lib math in our optimized build. (#692)

Logger level not restored correctly for empty byte sequences. (#701)

TypeError when passing bytearray to from_bytes. (#703)

Misc

Applied safe micro-optimizations in both our noise detector and language detector.

Rewrote the query_yes_no function (inside CLI) to avoid using ambiguous licensed code.

Added cd.py submodule into mypyc optional compilation to reduce further the performance impact.

[!WARNING]
mypyc changed the usual binary output for the optimized wheel. Beware, especially if using PyInstaller or alike. See jawah/charset_normalizer#714

Changelog

Sourced from charset-normalizer's changelog.

3.4.5 (2026-03-06)

Changed

Update setuptools constraint to setuptools>=68,<=82.

Raised upper bound of mypyc for the optional pre-built extension to v1.19.1

Fixed

Add explicit link to lib math in our optimized build. (#692)

Logger level not restored correctly for empty byte sequences. (#701)

TypeError when passing bytearray to from_bytes. (#703)

Misc

Applied safe micro-optimizations in both our noise detector and language detector.

Rewrote the query_yes_no function (inside CLI) to avoid using ambiguous licensed code.

Added cd.py submodule into mypyc optional compilation to reduce further the performance impact.

Commits

7411396 📝 update changelog
8de6012 Merge pull request #713 from jawah/release-3.4.5
39d0fba Merge branch 'master' into release-3.4.5
f211d4a ⬆️ Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#707)
9123864 ⬆️ Bump github/codeql-action from 4.32.0 to 4.32.4 (#710)
5cb1f12 ⬆️ Bump actions/download-artifact from 7.0.0 to 8.0.0 (#711)
7e68582 ⬆️ Update setuptools requirement from <=81,>=68 to >=68,<=82.0.0 (#712)
e1e2ccb correct cp_similarity ratio ceiling (#704)
209f9ff fix TypeError when passing bytearray to from_bytes (#703)
6a8503f Fix logger level not restored correctly for empty byte sequences (#701)
Additional commits viewable in compare view

Updates ipython from 9.10.0 to 9.11.0

Commits

f5e51b8 release 9.11.0
2de974e redo by hand
7f24f50 Update version9.rst: document all IPython 9.10 PRs and add narrative sections
8f42bf4 Skip flaky test_run_separate_script_namespace_2 in pyflyby downstream tests
e662a43 Have a static banner when setting SOURCE_DATE_EPOCH
2ef6876 Fix SQLite ResourceWarning: unclosed database in HistoryAccessor (#15128)
ddca958 Add type annotations to utils contexts, dir2, decorators, and frame modules (...
972a0ca Skip failing test_debug_namespace_1_py3[prompt_toolkit] in pyflyby downstream...
65dc67c Skip failing test_debug_namespace_1_py3[prompt_toolkit] in pyflyby downstream...
bb30c9e Add type annotations to utils contexts, dir2, decorators, and frame modules
Additional commits viewable in compare view

Updates numpy from 2.4.2 to 2.4.3

Commits

8bcb2e7 Merge pull request #30974 from charris/prepare-2.4.3
9a2b5ee REL: Prepare for the NumPy 2.4.3 release
a822ac2 Merge pull request #30973 from charris/backport-30961
039bf54 MAINT: update openblas (#30961)
254bafa Merge pull request #30955 from charris/backport-30879
0cc7d38 ENH: Test .kind not .char in np.testing.assert_equal (#30879)
9ee571d Merge pull request #30957 from charris/backport-30918
f302a16 Merge pull request #30958 from charris/backport-30938
d240a09 MAINT: Don't use vulture 2.15, it has false positives
4fc08e9 MAINT: Don't use vulture 2.15, it has false positives
Additional commits viewable in compare view

Updates platformdirs from 4.9.2 to 4.9.4

Release notes

Sourced from platformdirs's releases.

4.9.4

What's Changed

Add permissions to workflows by @gaborbernat in tox-dev/platformdirs#455

Move SECURITY.md to .github/SECURITY.md by @gaborbernat in tox-dev/platformdirs#456

Standardize .github files to .yaml suffix by @gaborbernat in tox-dev/platformdirs#458

📝 docs: add project logo to documentation by @gaborbernat in tox-dev/platformdirs#459

Full Changelog: tox-dev/platformdirs@4.9.3...4.9.4

4.9.3

What's Changed

Fix test failures on BSD for runtime directory defaults by @Fridayai700 in tox-dev/platformdirs#451

Respect XDG_CONFIG_HOME in _get_user_dirs_folder by @bysiber in tox-dev/platformdirs#453

Add missing _optionally_create_directory in Android user_log_dir and user_runtime_dir by @bysiber in tox-dev/platformdirs#452

New Contributors

@Fridayai700 made their first contribution in tox-dev/platformdirs#451

@bysiber made their first contribution in tox-dev/platformdirs#453

Full Changelog: tox-dev/platformdirs@4.9.2...4.9.3

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

4.9.4 (2026-03-05)

[pre-commit.ci] pre-commit autoupdate :pr:461 - by :user:pre-commit-ci[bot]

Update README.md

📝 docs: add project logo to documentation :pr:459

Standardize .github files to .yaml suffix

build(deps): bump the all group with 2 updates :pr:457 - by :user:dependabot[bot]

Move SECURITY.md to .github/SECURITY.md

Add permissions to workflows :pr:455

Add security policy

[pre-commit.ci] pre-commit autoupdate :pr:454 - by :user:pre-commit-ci[bot]

4.9.2 (2026-02-16)

📝 docs: restructure following Diataxis framework :pr:448

📝 docs(platforms): fix RST formatting and TOC hierarchy :pr:447

4.9.1 (2026-02-14)

📝 docs: enhance README, fix issues, and reorganize platforms.rst :pr:445

4.9.0 (2026-02-14)

📚 docs: split usage guide into tutorial, how-to, and reference :pr:441

✨ feat(api): add site_bin_dir property :pr:443

✨ feat(api): add site_applications_dir property :pr:442

🐛 fix(unix): use correct runtime dir path for OpenBSD :pr:440

📝 docs(usage): document use_site_for_root parameter :pr:439

4.8.0 (2026-02-14)

📝 docs(usage): note that home dir is in stdlib :pr:431

✨ feat(api): add user_applications_dir property :pr:432

✨ feat(api): add user_bin_dir property :pr:430

🐛 fix(macos): yield individual site dirs in iter_*_dirs :pr:429

✨ feat(windows): add WIN_PD_OVERRIDE_* env var overrides :pr:428

... (truncated)

Commits

3fdb23e Release 4.9.4
96e0ed0 [pre-commit.ci] pre-commit autoupdate (#461)
455f98e Update README.md
423bc18 📝 docs: add project logo to documentation (#459)
b10b8c5 Standardize .github files to .yaml suffix
27582df build(deps): bump the all group with 2 updates (#457)
da59cc6 Move SECURITY.md to .github/SECURITY.md
5ef8a10 Add permissions to workflows (#455)
2f0cd48 Add security policy
aeb0da1 [pre-commit.ci] pre-commit autoupdate (#454)
Additional commits viewable in compare view

Updates plotly from 6.5.2 to 6.6.0

Release notes

Sourced from plotly's releases.

v6.6.0

Fixed

Remove unneeded type="text/javascript" attribute from <style> tag [#5454], with thanks to @hannob for the contribution!

Remove global warning format side effect [#5481], with thanks to @emmanuel-ferdman for the contribution!

Fix spurious engine deprecation warning in write_image [#5517], with thanks to @mosh3eb for the contribution!

Updated

Update plotly.js from version 3.3.1 to version 3.4.0. See the plotly.js release notes for more information. [#5527]. Notable changes include:

Add support for clicking legend titles to toggle visibility of all traces in legend [#7698]

Add support for shapes to reference multiple axes [#7666]

Add support for dashed marker lines in scatter plots [#7673]

Increase axis autorange when bar charts have outside text labels, to avoid labels being clipped [#7675]

Full Changelog: plotly/plotly.py@v6.5.2...v6.6.0

Changelog

Sourced from plotly's changelog.

[6.6.0] - 2026-03-02

Fixed

Remove unneeded type="text/javascript" attribute from <style> tag [#5454], with thanks to @hannob for the contribution!

Remove global warning format side effect [#5481], with thanks to @emmanuel-ferdman for the contribution!

Fix spurious engine deprecation warning in write_image [#5517], with thanks to @mosh3eb for the contribution!

Updated

Update plotly.js from version 3.3.1 to version 3.4.0. See the plotly.js release notes for more information. [#5527]. Notable changes include:

Add support for clicking legend titles to toggle visibility of all traces in legend [#7698]

Add support for shapes to reference multiple axes [#7666]

Add support for dashed marker lines in scatter plots [#7673]

Increase axis autorange when bar charts have outside text labels, to avoid labels being clipped [#7675]

Commits

837d27e changes for v6.6.0
e0278b3 update changelog
bb783da Merge pull request #5516 from plotly/new-charts
5aabff0 Merge branch 'main' into new-charts
03fd2ed Merge pull request #5527 from plotly/update-plotlyjs-3.4.0
aee4c33 update changelog
46a8aa2 update js artifacts
7dc360c update package-lock
cf1b9ae upgrade plotly.js to v3.4.0
a4832a8 Merge branch 'main' into new-charts
Additional commits viewable in compare view

Updates pydantic-core from 2.41.5 to 2.42.0

Commits

See full diff in compare view

Updates pyngrok from 7.5.0 to 7.5.1

Release notes

Sourced from pyngrok's releases.

7.5.1

Changed

Migrated CDN URLs from bin.equinox.io to bin.ngrok.com.

Changelog

Sourced from pyngrok's changelog.

7.5.1 - 2026-03-06

Changed

Migrated CDN URLs from bin.equinox.io to bin.ngrok.com.

Commits

226c7cc Update CHANGELOG.md
8631685 Update ngrok CDN URLs to bin.ngrok.com
96df7b5 Update ngrok CDN URLs and bump version
a86a5bb Use dm in PyPI downloads badge
8d69ad8 Update index.rst
49dfebf Update README.md
b064592 Merge branch 'develop' of github.com:alexdlaird/pyngrok into develop
9f5deab Update .gitignore
See full diff in compare view

Updates sqlalchemy from 2.0.47 to 2.0.48

Release notes

Sourced from sqlalchemy's releases.

2.0.48

Released: March 2, 2026

engine

[engine] [bug] Fixed a critical issue in Engine where connections created in conjunction with the DialectEvents.do_connect() event listeners would receive shared, mutable collections for the connection arguments, leading to a variety of potential issues including unlimited growth of the argument list as well as elements within the parameter dictionary being shared among concurrent connection calls. In particular this could impact do_connect routines making use of complex mutable authentication structures.

References: #13144

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update eight Python dependencies to current minor/patch versions for stability and small features. Notable improvements include SQLAlchemy engine bug fix and plotly 6.6.0 (plotly.js 3.4.0).

Dependencies
- charset-normalizer: 3.4.4 → 3.4.5
- ipython: 9.10.0 → 9.11.0
- numpy: 2.4.2 → 2.4.3
- platformdirs: 4.9.2 → 4.9.4
- plotly: 6.5.2 → 6.6.0
- pydantic-core: 2.41.5 → 2.42.0
- pyngrok: 7.5.0 → 7.5.1
- SQLAlchemy: 2.0.47 → 2.0.48

^{Written for commit ad8e8ab. Summary will update on new commits.}

Bumps the python-minor group with 8 updates: | Package | From | To | | --- | --- | --- | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.4` | `3.4.5` | | [ipython](https://github.com/ipython/ipython) | `9.10.0` | `9.11.0` | | [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.4.3` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.9.2` | `4.9.4` | | [plotly](https://github.com/plotly/plotly.py) | `6.5.2` | `6.6.0` | | [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.41.5` | `2.42.0` | | [pyngrok](https://github.com/alexdlaird/pyngrok) | `7.5.0` | `7.5.1` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.47` | `2.0.48` | Updates `charset-normalizer` from 3.4.4 to 3.4.5 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.4...3.4.5) Updates `ipython` from 9.10.0 to 9.11.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.10.0...9.11.0) Updates `numpy` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.4.2...v2.4.3) Updates `platformdirs` from 4.9.2 to 4.9.4 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.9.2...4.9.4) Updates `plotly` from 6.5.2 to 6.6.0 - [Release notes](https://github.com/plotly/plotly.py/releases) - [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md) - [Commits](plotly/plotly.py@v6.5.2...v6.6.0) Updates `pydantic-core` from 2.41.5 to 2.42.0 - [Release notes](https://github.com/pydantic/pydantic-core/releases) - [Commits](https://github.com/pydantic/pydantic-core/commits) Updates `pyngrok` from 7.5.0 to 7.5.1 - [Release notes](https://github.com/alexdlaird/pyngrok/releases) - [Changelog](https://github.com/alexdlaird/pyngrok/blob/main/CHANGELOG.md) - [Commits](alexdlaird/pyngrok@7.5.0...7.5.1) Updates `sqlalchemy` from 2.0.47 to 2.0.48 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) --- updated-dependencies: - dependency-name: charset-normalizer dependency-version: 3.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: ipython dependency-version: 9.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: numpy dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: platformdirs dependency-version: 4.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: plotly dependency-version: 6.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pydantic-core dependency-version: 2.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pyngrok dependency-version: 7.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: sqlalchemy dependency-version: 2.0.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor ... Signed-off-by: dependabot[bot] <support@github.com>

cubic-dev-ai

No issues found across 3 files

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 9, 2026

cubic-dev-ai bot reviewed Mar 9, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(py): bump the python-minor group with 8 updates#1082

deps(py): bump the python-minor group with 8 updates#1082
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-minor-b23a43907a

dependabot bot commented on behalf of github Mar 9, 2026 •

edited by cubic-dev-ai bot

Loading

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 9, 2026 • edited by cubic-dev-ai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 3.4.5

3.4.5 (2026-03-06)

Changed

Fixed

Misc

3.4.5 (2026-03-06)

Changed

Fixed

Misc

4.9.4

What's Changed

4.9.3

What's Changed

New Contributors

v6.6.0

Fixed

Updated

[6.6.0] - 2026-03-02

Fixed

Updated

7.5.1

Changed

7.5.1 - 2026-03-06

Changed

2.0.48

engine

Summary by cubic

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Mar 9, 2026 •

edited by cubic-dev-ai bot

Loading