Bump the actions group across 1 directory with 9 updates

[dependabot]

Bumps the actions group with 9 updates in the / directory:

Package	From	To
numpy	2.2.5	2.3.4
scipy	1.15.2	1.16.3
matplotlib	3.10.1	3.10.7
pandas	2.2.3	2.3.3
patsy	1.0.1	1.0.2
pyarrow	20.0.0	22.0.0
scikit-learn	1.6.1	1.7.2
statsmodels	0.14.4	0.14.5
pre-commit	4.2.0	4.3.0

Updates numpy from 2.2.5 to 2.3.4

Release notes

Sourced from numpy's releases.

v2.3.4 (Oct 15, 2025)

NumPy 2.3.4 Release Notes

The NumPy 2.3.4 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. This release is based on Python 3.14.0 final.

Changes

The npymath and npyrandom libraries now have a .lib rather than a .a file extension on win-arm64, for compatibility for building with MSVC and setuptools. Please note that using these static libraries is discouraged and for existing projects using it, it's best to use it with a matching compiler toolchain, which is clang-cl on Windows on Arm.

(gh-29750)

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• !DWesl
• Charles Harris
• Christian Barbia +
• Evgeni Burovski
• Joren Hammudoglu
• Maaz +
• Mateusz Sokół
• Matti Picus
• Nathan Goldbaum
• Ralf Gommers
• Riku Sakamoto +
• Sandeep Gupta +
• Sayed Awad
• Sebastian Berg
• Sergey Fedorov +
• Warren Weckesser
• dependabot[bot]

Pull requests merged

A total of 30 pull requests were merged for this release.

• #29725: MAINT: Prepare 2.3.x for further development
• #29781: MAINT: Pin some upstream dependences
• #29782: BLD: enable x86-simd-sort to build on KNL with -mavx512f
• #29783: BUG: Include python-including headers first (#29281)
• #29784: TYP: fix np.number and np.*integer method declaration
• #29785: TYP: mypy 1.18.1

... (truncated)

Commits

• 1458b9e REL: Prepare for the NumPy 2.3.4 release (#29955)
• 7583bed Merge pull request #29950 from charris/backport-29885
• 3186751 Merge pull request #29949 from charris/backport-29948
• 7fd2ad9 STY: rename @classmethod arg to cls
• fe8447d MAINT: Simplify string arena growth strategy (#29885)
• a90f073 Merge pull request #29940 from charris/backport-29937
• 55d91ab MAINT: Bump pypa/cibuildwheel from 3.1.4 to 3.2.1
• e2f0383 Merge pull request #29926 from charris/backport-29609
• b427e83 BUG: fix negative samples generated by Wald distribution (#29609)
• 36363d6 Merge pull request #29922 from charris/backport-29914
• Additional commits viewable in compare view

Updates scipy from 1.15.2 to 1.16.3

Release notes

Sourced from scipy's releases.

SciPy 1.16.3 Release Notes

SciPy 1.16.3 is a bug-fix release with no new features compared to 1.16.2.

Authors

• Name (commits)
• ChrisAB (1) +
• Lucas Colley (1)
• Ralf Gommers (3)
• Matt Haberland (8)
• Nick ODell (2)
• Ilhan Polat (1)
• Tyler Reddy (28)
• Lucas Roberts (2)

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

The full issue and pull request lists, and the release asset hashes are available in the associated README.txt file.

SciPy 1.16.2 Release Notes

SciPy 1.16.2 is a bug-fix release with no new features compared to 1.16.1. This is the first stable release of SciPy to provide Windows on ARM wheels on PyPI.

Authors

• Name (commits)
• Dietrich Brunn (1)
• Ralf Gommers (6)
• Adam Jones (1)
• Gleb Khmyznikov (1) +
• Jost Migenda (1) +
• newyork_loki (1)
• Nick ODell (3)
• Dimitri Papadopoulos Orfanos (1)
• Ilhan Polat (2)
• Tyler Reddy (26)
• Mugunthan Selvanayagam (1) +
• Shuhei Watanabe (1) +

A total of 12 people contributed to this release.

... (truncated)

Commits

• b9105cc REL: 1.16.3 rel commit [wheel build]
• 4b7699c Merge pull request #23805 from tylerjereddy/treddy_backports_1.16.3
• 874b75b MAINT: PR 23805 wheel builds [wheel build]
• de06a58 DOC: PR 23805 revisions
• f642304 TST: linalg.svd: skip on 32-bit due to limited memory
• df47908 CI: PR 23805 revisions
• f584063 TST: stats.boxcox_llf: bump test tolerance for Accelerate (#23864)
• fc60b2f DOC: PR 23805 revisions
• 0dd12ec BLD: stats.multivariate_normal: silence pythran build warning
• d3b1e62 Revert "BLD: stats.multivariate_normal: suppress pythran build warning"
• Additional commits viewable in compare view

Updates matplotlib from 3.10.1 to 3.10.7

Release notes

Sourced from matplotlib's releases.

REL: v3.10.7

This is the latest bugfix release in the 3.10.x series.

The most important update in this release is that the minimum version of pyparsing has been updated to version 3.0.

REL: v3.10.6

This is a bugfix release in the 3.10.x series.

Highlights from this release include:

- Fix regression of hi-dpi support for Qt
- Fix race condition in TexManager.make_dvi & make_png
- Various documentation and other bugfixes

REL: v3.10.5

This is the fourth bugfix release of the 3.10.x series.

Included in this release is distributed wheels for Python 3.14 (including freethreaded) and Windows ARM.

There are also several smaller bugfixes.

REL: v3.10.3

This is the third bugfix release of the 3.10.x series

Commits

• 4aeb773 REL: v3.10.7
• 080add3 Merge branch 'v3.10.6-doc' into v3.10.x
• a604a8b Github Stats v3.10.7
• f550261 Zenodo v3.10.6
• 9a5e3e4 Merge pull request #30628 from meeseeksmachine/auto-backport-of-pr-30626-on-v...
• eb8cb0c Backport PR #30626: MNT: Fix new F401 unused imports warnings
• 8fadc71 Backport PR #29745: Use PEP8 style method and function names from (#30589)
• 098876e Merge pull request #30614 from meeseeksmachine/auto-backport-of-pr-30612-on-v...
• eb42d86 Backport PR #30612: MNT: update black pin
• 4a9c187 Merge pull request #30572 from QuLogic/auto-backport-of-pr-30571-on-v3.10.x
• Additional commits viewable in compare view

Updates pandas from 2.2.3 to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.3.2

We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 2.3.1

We are pleased to announce the release of pandas 2.3.1. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.1 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

... (truncated)

Commits

• 9c8bc3e RLS: 2.3.3
• 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
• b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
• 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
• 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
• 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
• e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
• e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
• 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
• 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
• Additional commits viewable in compare view

Updates patsy from 1.0.1 to 1.0.2

Release notes

Sourced from patsy's releases.

v1.0.2

This is a minor release that:

• Fixes compatibility with Pandas 3's new StringDtype.

There are no other changes compared to 1.0.1, and all users are recommended to upgrade.

Full Changelog: pydata/patsy@v1.0.1...v1.0.2

Changelog

Sourced from patsy's changelog.

v1.0.2

• Fixed compatibility with Pandas 3's new StringDtype.

Commits

• 3555c06 1.0.2
• efa450f MAINT: Prepare patsy for pandas3 StringDtype (#229)
• 430348a Merge pull request #235 from pydata/pre-commit-ci-update-config
• 31c489f [pre-commit.ci] pre-commit autoupdate
• 8b70231 Update README.md (#234)
• 715d6b7 Merge pull request #233 from pydata/pre-commit-ci-update-config
• e599e60 [pre-commit.ci] pre-commit autoupdate
• 7b58db5 Merge pull request #231 from pydata/pre-commit-ci-update-config
• 30541e0 [pre-commit.ci] pre-commit autoupdate
• 31c341d Merge pull request #230 from pydata/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates pyarrow from 20.0.0 to 22.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 22.0.0

Release Notes URL: https://arrow.apache.org/release/22.0.0.html

Apache Arrow 22.0.0 RC1

Release Notes: Release Candidate: 22.0.0 RC1

Apache Arrow 22.0.0 RC0

Release Notes: Release Candidate: 22.0.0 RC0

Apache Arrow 21.0.0

Release Notes URL: https://arrow.apache.org/release/21.0.0.html

Apache Arrow 21.0.0 RC6

Release Notes: Release Candidate: 21.0.0 RC6

Apache Arrow 21.0.0 RC5

Release Notes: Release Candidate: 21.0.0 RC5

Apache Arrow 21.0.0 RC4

Release Notes: Release Candidate: 21.0.0 RC4

Apache Arrow 21.0.0 RC3

Release Notes: Release Candidate: 21.0.0 RC3

Apache Arrow 21.0.0 RC2

Release Notes: Release Candidate: 21.0.0 RC2

Commits

• 5aeb5f2 MINOR: [Release] Update versions for 22.0.0
• 81563ad MINOR: [Release] Update .deb/.rpm changelogs for 22.0.0
• c505536 MINOR: [Release] Update CHANGELOG.md for 22.0.0
• e04fafb GH-47838: [C++][Parquet] Set Variant specification version to 1 to align with...
• 07e4d5a GH-47819: [CI][Packaging][Release] Avoid triggering Linux packages on release...
• e2fa94c GH-47809: [CI][Release] Fix Windows verification job trying to install patch ...
• 2140934 GH-47738: [R] Update NEWS.md for 22.0.0 (#47739)
• 08f5304 GH-47803: [C++][Parquet] Fix read out of bounds on invalid RLE data (#47804)
• d5b8e2b GH-47438: [Python][Packaging] Set up wheel building for Python 3.14 (#47616)
• 618f609 GH-47795: [Archery] Add support for custom Docker registry (#47796)
• Additional commits viewable in compare view

Updates scikit-learn from 1.6.1 to 1.7.2

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.7.2

We're happy to announce the 1.7.2 release.

This release contains a few bug fixes and is the first version supporting Python 3.14.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.7.html#version-1-7-2

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Scikit-learn 1.7.1

We're happy to announce the 1.7.1 release.

This release contains fixes for a few regressions introduced in 1.7.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.7.html#version-1-7-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Scikit-learn 1.7.0

We're happy to announce the 1.7.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_7_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.7.html

This version supports Python versions 3.10 to 3.13 and features an experimental support of free-threaded CPython.

You can upgrade with pip as usual:

... (truncated)

Commits

• 25dee60 missing tag in changelog [cd build]
• 290b5af bump upper bounds [cd build]
• 813681d CI Add Python 3.14 nightly wheels (#32012)
• 9cc302d fix changelog
• 6596658 fix changelog
• da98b43 generate changelog 1.7.2
• f2ff9e8 set version 1.7.2
• 8b41b0f Fix uncomparable values in SimpleImputer tie-breaking strategy (#31820)
• 401f6c4 DOC: Fix formatting issues with bold font and backquote (#31950)
• 3d063ad DOC Clean up Building from source instructions on macOS (#31938)
• Additional commits viewable in compare view

Updates statsmodels from 0.14.4 to 0.14.5

Release notes

Sourced from statsmodels's releases.

Release 0.14.5

This patch release fixes an issue with recent SciPy releases (1.16+) that prevented statsmodels from importing. It also addresses some small changes that improve future compatibility.

Commits

• 1107ea5 Merge pull request #9591 from bashtage/rls-0-14-5-notes
• f3b362a MAINT: Update CI
• e2249ab DOC: Final fixes
• 41758ad DOC: Add release note for 0.14.5
• aea8126 Merge pull request #9586 from bashtage/rls-0-14-5
• ccc1948 TST: Change optim options
• 2c5292b MAINT: Reduce noise for future changes
• d9ccc11 MAINT: Reduce noise for future changes
• 699740f TST: xfail test with issues and relax tol
• 132c549 MAINT: Reduce noise for future changes
• Additional commits viewable in compare view

Updates pre-commit from 4.2.0 to 4.3.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.3.0

Features

• language: docker / language: docker_image: detect rootless docker.
  • #3446 PR by @​matthewhughes934.
  • #1243 issue by @​dkolepp.
• language: julia: avoid startup.jl when executing hooks.
  • #3496 PR by @​ericphanson.
• language: dart: support latest dart versions which require a higher sdk lower bound.
  • #3507 PR by @​bc-lee.

Changelog

Sourced from pre-commit's changelog.

4.3.0 - 2025-08-09

Features

• language: docker / language: docker_image: detect rootless docker.
  • #3446 PR by @​matthewhughes934.
  • #1243 issue by @​dkolepp.
• language: julia: avoid startup.jl when executing hooks.
  • #3496 PR by @​ericphanson.
• language: dart: support latest dart versions which require a higher sdk lower bound.
  • #3507 PR by @​bc-lee.

Commits

• b74a22d v4.3.0
• cc899de Merge pull request #3507 from bc-lee/dart-fix
• 2a0bcea Downgrade Dart SDK version installed in the CI
• f1cc7a4 Make Dart pre-commit hook compatible with the latest Dart SDKs
• 72a3b71 Merge pull request #3504 from pre-commit/pre-commit-ci-update-config
• c8925a4 [pre-commit.ci] pre-commit autoupdate
• a5fe6c5 Merge pull request #3496 from ericphanson/eph/jl-startup
• 6f1f433 Julia language: skip startup.jl file
• c681721 Merge pull request #3499 from pre-commit/pre-commit-ci-update-config
• 4fd4537 [pre-commit.ci] pre-commit autoupdate
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions