Bump the all-dependencies group with 4 updates #84

dependabot · 2025-09-04T15:13:01Z

Bumps the all-dependencies group with 4 updates: click, dvc, mlflow and matplotlib.

Updates click from 8.1.8 to 8.2.1

Release notes

8.2.1

This is the Click 8.2.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-1 Milestone: https://github.com/pallets/click/milestone/24?closed=1

Fix flag value handling for flag options with a provided type. #2894 #2897

Fix shell completion for nested groups. #2906

Flush sys.stderr at the end of CliRunner.invoke. #2682

Fix EOF handling for stdin input in CliRunner. #2787

8.2.0

This is the Click 8.2.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.2.0/ Changes: https://click.palletsprojects.com/en/stable/changes/ Milestone https://github.com/pallets/click/milestone/15

Drop support for Python 3.7, 3.8,and 3.9. #2588, #2893

Use modern packaging metadata with pyproject.toml instead of setup.cfg. #2438

Use flit_core instead of setuptools as build backend. #2543

Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. #2598

BaseCommand is deprecated. Command is the base class for all commands. #2589

MultiCommand is deprecated. Group is the base class for all group commands. #2590

The current parser and related classes and methods, are deprecated. #2205

OptionParser and the parser module, which is a modified copy of optparse in the standard library.

Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.

Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.

split_arg_string is moved from parser to shell_completion.

Enable deferred evaluation of annotations with from __future__ import annotations. #2270

When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. #2322

Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. #2356

Do not display default values in prompts when Option.show_default is False. #2509

Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. #2516 #2517

Keep stdout and stderr streams independent in CliRunner. Always collect stderr output and never raise an exception. Add a new output stream to simulate what the user sees in its terminal. Removes the mix_stderr parameter in CliRunner. #2522 #2523

Option.show_envvar now also shows environment variable in error messages. #2695 #2696

Context.close will be called on exit. This results in all Context.call_on_close callbacks and context managers added via Context.with_resource to be closed on exit as well. #2680

Add ProgressBar(hidden: bool) to allow hiding the progressbar. #2609

A UserWarning will be shown when multiple parameters attempt to use the same name. #2396

When using Option.envvar with Option.flag_value, the flag_value will always be used instead of the value of the environment variable. #2746 #2788

Add Choice.get_invalid_choice_message method for customizing the invalid choice message. #2621 #2622

If help is shown because no_args_is_help is enabled (defaults to True for groups, False for commands), the exit code is 2 instead of 0. #1489 #1489

Contexts created during shell completion are closed properly, fixing a ResourceWarning when using click.File. #2644 #2800 #2767

click.edit(filename) now supports passing an iterable of filenames in case the editor supports editing multiple files at once. Its return type is now also typed: AnyStr if text is passed, otherwise None. #2067 #2068

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.2.1

Released 2025-05-20

Fix flag value handling for flag options with a provided type. :issue:2894 :issue:2897 :pr:2930

Fix shell completion for nested groups. :issue:2906 :pr:2907

Flush sys.stderr at the end of CliRunner.invoke. :issue:2682

Fix EOF handling for stdin input in CliRunner. :issue:2787

Version 8.2.0

Released 2025-05-10

Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

Use modern packaging metadata with pyproject.toml instead of setup.cfg. :pr:2438

Use flit_core instead of setuptools as build backend. :pr:2543

Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. :issue:2598

BaseCommand is deprecated. Command is the base class for all commands. :issue:2589

MultiCommand is deprecated. Group is the base class for all group commands. :issue:2590

The current parser and related classes and methods, are deprecated. :issue:2205

OptionParser and the parser module, which is a modified copy of optparse in the standard library.

Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.

Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.

split_arg_string is moved from parser to shell_completion.

Enable deferred evaluation of annotations with from __future__ import annotations. :pr:2270

When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. :issue:2322

Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. :issue:2356

Do not display default values in prompts when Option.show_default is False. :pr:2509

Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. :issue:2516 :pr:2517

... (truncated)

Commits

fd183b2 release version 8.2.1
262bdf0 Raise an exception on end of input in CliRunner (#2934)
80efdf6 Raise an exception on end of input in CliRunner
cfa6f4a Flush sys.stderr when CliRunner finalizes (#2933)
f3a4363 flush sys.stderr when CliRunner.invoke finalizes
b7cf069 fix shell completion for nested groups (#2935)
7c575d6 parametrize test
ac6a2ac Fix shell completion for nested groups
884af5c Fix flag value set when is_flag=True and type is provided (#2930)
4fd2fea Fix condition for setting flag value when type is provided
Additional commits viewable in compare view

Updates dvc from 3.62.0 to 3.63.0

Release notes

Sourced from dvc's releases.

3.63.0

What's Changed

Behavioral Changes (CLI)

In dvc status --cloud, target now supports specifying path to a dataset. Previously, specifying a directory as the target caused DVC to search for .dvc and dvc.yaml files inside it, from which the datasets specified in those files were then checked for cloud/remote status, rather than considering the directory itself as a dataset. While this is technically a breaking change, we consider the previous behavior a bug and inconsistent with other DVC commands, including plain dvc status. To restore the previous behavior, add the --recursive option.

Fixes iterative/dvc#9336.

🚀 New Features and Enhancements
add --remote option to dvc data status --not-in-remote for checking files against a specified remote (instead of a default one) by @skshetry in iterative/dvc#10843
# Check against the 'my-s3' remote instead of the default
$ dvc data status --not-in-remote --remote my-s3
exp show accepts multiple --keep and --drop arguments in iterative/dvc#10857
  $ dvc exp show --keep 'featurize' --keep 'avg_prec' --drop '.*train' --drop '.*split'
dvc init supports initializing DVC repository in an arbitrary directory in iterative/dvc#10861
  $ dvc init /path/to/dvc/repo/that/I/want/to/initialize
checkout and pull reports granular summary of changes in iterative/dvc#10842

Before, DVC would report statistics only about datasets affected during checkout phase.
  $ dvc pull dataset/train/4
A       dataset/
1 file added and 5843 files fetched
Now, it will report granular number of files affected by the operation.
  $ dvc pull dataset/train/4
A       dataset/
5842 files added and 5843 files fetched
data status now detects file moves/renames by default in iterative/dvc#10846

... (truncated)

Commits

75c5d17 fix(data status): handle missing DVC repo at Git HEAD (#10862)
ea9dd5f [pre-commit.ci] pre-commit autoupdate (#10860)
763cbf6 feat(cli): support initializing DVC repository in an arbitrary directory (#10...
6f4b8c9 completion: complete remote in zsh/bash (#10858)
a8bda30 feat(cli): support multiple --keep and --drop arguments in exp show (#1...
4f4c5b1 ignore: simplify and reuse same implementation across check-ignore and is_ign...
76cfe92 minor refactor on check-ignore (#10854)
7945455 [pre-commit.ci] pre-commit autoupdate (#10853)
8504684 fix(status): treat target as a dataset path for cloud instead of search path ...
e10b27a [pre-commit.ci] pre-commit autoupdate (#10848)
Additional commits viewable in compare view

Updates mlflow from 3.1.1 to 3.3.2

Release notes

Sourced from mlflow's releases.

v3.3.2

MLflow 3.3.2 is a patch release that includes several minor improvements and bugfixes

Features:

[Evaluation] Add support for dataset name persistence (#17250, @BenWilson2)

Bug fixes:

[Tracing] Add retry policy support to _invoke_litellm for improved reliability (#17394, @dbczumar)

[UI] fix ui sorting in experiments (#17340, @Flametaa)

[Serving] Add Databricks Lakebase Resource (#17277, @jennsun)

[Tracing] Fix set trace tags endpoint (#17362, @daniellok-db)

Documentation updates:

[Docs] Add docs for package lock (#17395, @BenWilson2)

[Docs] Fix span processor docs (#17386, @mr-brobot)

Small bug fixes and documentation updates:

#17301, #17299, @B-Step62; #17420, #17421, #17398, #17397, #17349, #17361, #17377, #17359, #17358, #17356, #17261, #17263, #17262, @serena-ruan; #17422, #17310, #17357, @TomeHirata; #17406, @sotagg; #17418, @annzhang-db; #17384, #17376, @daniellok-db

v3.3.1

MLflow 3.3.1 includes several improvements

Bug fixes:

[Tracking] Fix mlflow.genai.datasets attribute (#17307, @WeichenXu123) [UI] Fix tag display as column in experiment overview (#17296, @joelrobin18) [Tracing] Fix the slowness of dspy tracing (#17290, @TomeHirata) Small bug fixes and documentation updates:

#17295, @gunsodo; #17272, @bbqiu

For a comprehensive list of changes, check out the latest documentation on mlflow.org.

v3.3.0

3.3.0 (2025-08-19)

MLflow 3.3.0 includes several major features and improvements

Major new features:

🪝 Model Registry Webhooks: MLflow now supports webhooks for model registry events, enabling automated notifications and integrations with external systems. (#16583, @harupy)

🧭 Agno Tracing Integration: Added Agno tracing integration for enhanced observability of AI agent workflows. (#16995, @joelrobin18)

🧪 GenAI Evaluation in OSS: MLflow open-sources the new evaluation capability for LLM applications. This suite enables systematic measurement and improvement of LLM application quality, with tight integration into MLflow's observability, feedback collection, and experiment tracking capabilities. (#17161, #17159, @B-Step62)

🖥️ Revamped Trace Table View: The new trace view in MLflow UI provides a streamlined interface for exploring, filtering, and monitoring traces, with enhanced search capabilities including full-text search across requests.(#17092, @daniellok-db)

⚡️ FastAPI + Uvicorn Server: MLflow Tracking Server now defaults to FastAPI + Uvicorn for improved performance, while maintaining Flask compatibility. (#17038, @dbczumar)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.3.2 (2025-08-27)

MLflow 3.3.2 is a patch release that includes several minor improvements and bugfixes

Features:

[Evaluation] Add support for dataset name persistence (#17250, @BenWilson2)

Bug fixes:

[Tracing] Add retry policy support to _invoke_litellm for improved reliability (#17394, @dbczumar)

[UI] fix ui sorting in experiments (#17340, @Flametaa)

[Serving] Add Databricks Lakebase Resource (#17277, @jennsun)

[Tracing] Fix set trace tags endpoint (#17362, @daniellok-db)

Documentation updates:

[Docs] Add docs for package lock (#17395, @BenWilson2)

[Docs] Fix span processor docs (#17386, @mr-brobot)

Small bug fixes and documentation updates:

#17301, #17299, @B-Step62; #17420, #17421, #17398, #17397, #17349, #17361, #17377, #17359, #17358, #17356, #17261, #17263, #17262, @serena-ruan; #17422, #17310, #17357, @TomeHirata; #17406, @sotagg; #17418, @annzhang-db; #17384, #17376, @daniellok-db

3.3.1 (2025-08-20)

MLflow 3.3.1 includes several major features and improvements

Bug fixes:

[Tracking] Fix mlflow.genai.datasets attribute (#17307, @WeichenXu123)

[UI] Fix tag display as column in experiment overview (#17296, @joelrobin18)

[Tracing] Fix the slowness of dspy tracing (#17290, @TomeHirata)

Small bug fixes and documentation updates:

#17295, @gunsodo; #17272, @bbqiu

3.3.0 (2025-08-19)

MLflow 3.3.0 includes several major features and improvements

Major new features:

🪝 Model Registry Webhooks: MLflow now supports webhooks for model registry events, enabling automated notifications and integrations with external systems. (#16583, @harupy)

🧭 Agno Tracing Integration: Added Agno tracing integration for enhanced observability of AI agent workflows. (#16995, @joelrobin18)

🧪 GenAI Evaluation in OSS: MLflow open-sources the new evaluation capability for LLM applications. This suite enables systematic measurement and improvement of LLM application quality, with tight integration into MLflow's observability, feedback collection, and experiment tracking capabilities. (#17161, #17159, @B-Step62)

🖥️ Revamped Trace Table View: The new trace view in MLflow UI provides a streamlined interface for exploring, filtering, and monitoring traces, with enhanced search capabilities including full-text search across requests.(#17092, @daniellok-db)

⚡️ FastAPI + Uvicorn Server: MLflow Tracking Server now defaults to FastAPI + Uvicorn for improved performance, while maintaining Flask compatibility. (#17038, @dbczumar)

... (truncated)

Commits

9e9abf2 Run python3 dev/update_mlflow_versions.py pre-release ...
2c4ea8f remove openai pin (fixed upstream)
48eafa1 Fix LC cross version test (#17301)
a5a6148 update set_matrix
1267b47 ix genai package defs
307b18f Add back import MLflow event (#17420)
0e95f28 Decrease batch time interval (#17421)
f3756f2 Add sleep to deflake test_litellm_tracing_async (#17422)
48f1992 Add import for SpanType (#17406)
39bb945 Add deprecation warning to set_retriever_schema (#17418)
Additional commits viewable in compare view

Updates matplotlib from 3.10.5 to 3.10.6

Release notes

Sourced from matplotlib's releases.

REL: v3.10.6

This is a bugfix release in the 3.10.x series.

Highlights from this release include:
- Fix regression of hi-dpi support for Qt
- Fix race condition in TexManager.make_dvi & make_png
- Various documentation and other bugfixes

Commits

5cd38c3 REL: v3.10.6
b2358e7 Release prep v3.10.6
2e04783 Merge branch 'v3.10.5-doc' into v3.10.x
d3365af Github stats v3.10.6
81ed659 Merge pull request #30489 from meeseeksmachine/auto-backport-of-pr-30486-on-v...
5351097 Merge pull request #30488 from meeseeksmachine/auto-backport-of-pr-30486-on-v...
6b800b8 Merge pull request #30487 from meeseeksmachine/auto-backport-of-pr-30484-on-v...
25a97fd Backport PR #30486: doc: Update warnings about python-build-standalone
4b79495 Backport PR #30486: doc: Update warnings about python-build-standalone
a55b817 Backport PR #30484: FIX: be more cautious about checking widget size
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 4 updates: [click](https://github.com/pallets/click), [dvc](https://github.com/iterative/dvc), [mlflow](https://github.com/mlflow/mlflow) and [matplotlib](https://github.com/matplotlib/matplotlib). Updates `click` from 8.1.8 to 8.2.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.8...8.2.1) Updates `dvc` from 3.62.0 to 3.63.0 - [Release notes](https://github.com/iterative/dvc/releases) - [Commits](treeverse/dvc@3.62.0...3.63.0) Updates `mlflow` from 3.1.1 to 3.3.2 - [Release notes](https://github.com/mlflow/mlflow/releases) - [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md) - [Commits](mlflow/mlflow@v3.1.1...v3.3.2) Updates `matplotlib` from 3.10.5 to 3.10.6 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.10.5...v3.10.6) --- updated-dependencies: - dependency-name: click dependency-version: 8.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: dvc dependency-version: 3.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: mlflow dependency-version: 3.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: matplotlib dependency-version: 3.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-09-04T15:13:09Z

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

dependabot · 2025-10-01T18:26:57Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 4, 2025

dependabot bot requested a review from a team as a code owner September 4, 2025 15:13

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 4, 2025

dependabot bot closed this Oct 1, 2025

dependabot bot deleted the dependabot/pip/all-dependencies-327cccccba branch October 1, 2025 18:27

github-actions bot locked and limited conversation to collaborators Oct 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-dependencies group with 4 updates #84

Bump the all-dependencies group with 4 updates #84

Uh oh!

dependabot bot commented on behalf of github Sep 4, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Sep 4, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all-dependencies group with 4 updates #84

Bump the all-dependencies group with 4 updates #84

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.2.1

8.2.0

Version 8.2.1

Version 8.2.0

3.63.0

What's Changed

Behavioral Changes (CLI)

🚀 New Features and Enhancements

v3.3.2

v3.3.1

v3.3.0

3.3.0 (2025-08-19)

Major new features:

3.3.2 (2025-08-27)

3.3.1 (2025-08-20)

3.3.0 (2025-08-19)

Major new features:

REL: v3.10.6

Uh oh!

github-actions bot commented Sep 4, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Sep 4, 2025 •

edited

Loading