Scheduled weekly dependency update for week 09 by pyup-bot · Pull Request #992 · pyinstaller/pyinstaller-hooks-contrib

pyup-bot · 2026-03-02T19:04:19Z

Update boto3 from 1.42.54 to 1.42.59.

Changelog

1.42.59

=======

* api-change:``arc-region-switch``: [``botocore``] Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events.
* api-change:``batch``: [``botocore``] This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete
* api-change:``bedrock``: [``botocore``] Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs.
* api-change:``cognito-idp``: [``botocore``] Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks.
* api-change:``connect``: [``botocore``] Deprecate EvaluationReviewMetadata&#x27;s CreatedBy and CreatedTime, add EvaluationReviewMetadata&#x27;s RequestedBy and RequestedTime
* api-change:``customer-profiles``: [``botocore``] This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values.
* api-change:``health``: [``botocore``] Updates the regex for validating availabilityZone strings used in the describe events filters.
* api-change:``keyspacesstreams``: [``botocore``] Added support for Change Data Capture (CDC) streams with Duration DataType.
* api-change:``odb``: [``botocore``] ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s).
* api-change:``ram``: [``botocore``] Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter

1.42.58

=======

* api-change:``backup-gateway``: [``botocore``] This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates.
* api-change:``ec2``: [``botocore``] Add c8id, m8id and hpc8a instance types.
* api-change:``ecs``: [``botocore``] Adding support for Capacity Reservations for ECS Managed Instances by introducing a new &quot;capacityOptionType&quot; value of &quot;RESERVED&quot; and new field &quot;capacityReservations&quot; for CreateCapacityProvider and UpdateCapacityProvider APIs.
* api-change:``marketplace-entitlement``: [``botocore``] Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response.
* api-change:``meteringmarketplace``: [``botocore``] Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters.
* api-change:``securityhub``: [``botocore``] Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2

1.42.57

=======

* api-change:``batch``: [``botocore``] AWS Batch documentation update for service job capacity units.
* api-change:``ec2``: [``botocore``] Add support for EC2 Capacity Blocks in Local Zones.
* api-change:``ecr``: [``botocore``] Update repository name regex to comply with OCI Distribution Specification
* api-change:``neptune``: [``botocore``] Neptune global clusters now supports tags
* api-change:``wafv2``: [``botocore``] AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name.

1.42.56

=======

* api-change:``cloudwatch``: [``botocore``] This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods.
* api-change:``ec2``: [``botocore``] Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization-wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances.
* api-change:``elementalinference``: [``botocore``] Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``es``: [``botocore``] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request.
* api-change:``medialive``: [``botocore``] AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive.
* api-change:``observabilityadmin``: [``botocore``] Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field
* api-change:``opensearch``: [``botocore``] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request.
* api-change:``partnercentral-selling``: [``botocore``] Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines.

1.42.55

=======

* api-change:``bedrock``: [``botocore``] Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types.
* api-change:``connectcases``: [``botocore``] SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField&#x27;s hard limit of 100 fields per domain has been lifted.
* api-change:``controlcatalog``: [``botocore``] Updated ExemptedPrincipalArns parameter documentation for improved accuracy
* api-change:``datazone``: [``botocore``] Add workflow properties support to connections APIs
* api-change:``dynamodb``: [``botocore``] This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``mediatailor``: [``botocore``] Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations.
* api-change:``quicksight``: [``botocore``] Adds support for SEMISTRUCT to InputColumn Type
* api-change:``wickr``: [``botocore``] AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes.

Links

PyPI: https://pypi.org/project/boto3
Changelog: https://data.safetycli.com/changelogs/boto3/
Repo: https://github.com/boto/boto3

Update botocore from 1.42.54 to 1.42.59.

Changelog

1.42.59

=======

* api-change:``arc-region-switch``: Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events.
* api-change:``batch``: This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete
* api-change:``bedrock``: Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs.
* api-change:``cognito-idp``: Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks.
* api-change:``connect``: Deprecate EvaluationReviewMetadata&#x27;s CreatedBy and CreatedTime, add EvaluationReviewMetadata&#x27;s RequestedBy and RequestedTime
* api-change:``customer-profiles``: This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values.
* api-change:``health``: Updates the regex for validating availabilityZone strings used in the describe events filters.
* api-change:``keyspacesstreams``: Added support for Change Data Capture (CDC) streams with Duration DataType.
* api-change:``odb``: ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s).
* api-change:``ram``: Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter

1.42.58

=======

* api-change:``backup-gateway``: This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates.
* api-change:``ec2``: Add c8id, m8id and hpc8a instance types.
* api-change:``ecs``: Adding support for Capacity Reservations for ECS Managed Instances by introducing a new &quot;capacityOptionType&quot; value of &quot;RESERVED&quot; and new field &quot;capacityReservations&quot; for CreateCapacityProvider and UpdateCapacityProvider APIs.
* api-change:``marketplace-entitlement``: Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response.
* api-change:``meteringmarketplace``: Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters.
* api-change:``securityhub``: Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2

1.42.57

=======

* api-change:``batch``: AWS Batch documentation update for service job capacity units.
* api-change:``ec2``: Add support for EC2 Capacity Blocks in Local Zones.
* api-change:``ecr``: Update repository name regex to comply with OCI Distribution Specification
* api-change:``neptune``: Neptune global clusters now supports tags
* api-change:``wafv2``: AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name.

1.42.56

=======

* api-change:``cloudwatch``: This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods.
* api-change:``ec2``: Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization-wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances.
* api-change:``elementalinference``: Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
* api-change:``es``: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request.
* api-change:``medialive``: AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive.
* api-change:``observabilityadmin``: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field
* api-change:``opensearch``: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request.
* api-change:``partnercentral-selling``: Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines.

1.42.55

=======

* api-change:``bedrock``: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types.
* api-change:``connectcases``: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField&#x27;s hard limit of 100 fields per domain has been lifted.
* api-change:``controlcatalog``: Updated ExemptedPrincipalArns parameter documentation for improved accuracy
* api-change:``datazone``: Add workflow properties support to connections APIs
* api-change:``dynamodb``: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode.
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
* api-change:``mediatailor``: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations.
* api-change:``quicksight``: Adds support for SEMISTRUCT to InputColumn Type
* api-change:``wickr``: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes.

Links

PyPI: https://pypi.org/project/botocore
Changelog: https://data.safetycli.com/changelogs/botocore/
Repo: https://github.com/boto/botocore

Update ddgs from 9.10.0 to 9.11.1.

Changelog

9.11.1

What&#x27;s Changed 
* Bugfix &#x27;ddgs api&#x27; startup error due to missing dependencies: https://github.com/deedy5/ddgs/commit/942a3c4e4905688889f338fe1381bd30b0dcaa19

**Full Changelog**: https://github.com/deedy5/ddgs/compare/v9.11.0...v9.11.1

9.11.0

What&#x27;s Changed
* Add FastAPI web service with Docker support and MCP transports by deedy5 in https://github.com/deedy5/ddgs/pull/406
* Bump primp to v1.0.0 by deedy5 in https://github.com/deedy5/ddgs/pull/415
* fix(engines): normalize whitespace in text extraction by deedy5 in https://github.com/deedy5/ddgs/pull/419
* feat(api)!: add cli command and restructure server with integrated mcp by deedy5 in https://github.com/deedy5/ddgs/pull/420
* chore(deps): replace pre-commit with prek by deedy5 in https://github.com/deedy5/ddgs/pull/421


**Full Changelog**: https://github.com/deedy5/ddgs/compare/v9.10.0...v9.11.0

Links

PyPI: https://pypi.org/project/ddgs
Changelog: https://data.safetycli.com/changelogs/ddgs/

Update eccodes from 2.45.0 to 2.46.0.

Changelog

2.46.0

--------------------

- ECC-2219: High-level BUFR interface: set method not working for data keys
- ECC-2220: Fix inadvertent string truncation in uncompressed BUFR messages
- Fix path to BUFR md files
- Add support for Python version 3.14

Links

PyPI: https://pypi.org/project/eccodes
Changelog: https://data.safetycli.com/changelogs/eccodes/
Repo: https://github.com/ecmwf/eccodes-python

Update google-api-python-client from 2.190.0 to 2.191.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update python-gitlab from 8.0.0 to 8.1.0.

Changelog

8.1.0

Bug Fixes

- **types**: Add explicit submodule import for pyright compatibility
([`84ad3fd`](https://github.com/python-gitlab/python-gitlab/commit/84ad3fd19cfbc236e962ac77c910571b0888c000))

Features

- **api**: Add support for order_by filter in runner jobs
([`d5dc73d`](https://github.com/python-gitlab/python-gitlab/commit/d5dc73d0f82a15d96a956c1d868c253c9586e1bf))

- **api**: Add support for sort filter in runner jobs
([`b117ee3`](https://github.com/python-gitlab/python-gitlab/commit/b117ee3d139f422e463ebeb5007517a2052af8a4))

Links

PyPI: https://pypi.org/project/python-gitlab
Changelog: https://data.safetycli.com/changelogs/python-gitlab/

Update nicegui from 3.7.1 to 3.8.0.

Changelog

3.8.0

Security

- ⚠️ Prevent XSS via unsanitized method names in `run_method()` (GHSA-78qv-3mpx-9cqq by anuraagbaishya, evnchn, falkoschindler)

 **Breaking change:** For security reasons, `run_method()` and `run_*_method()` no longer accept arbitrary JavaScript expressions as method names. Only actual method names are supported now. If you previously passed JS functions like
 py
 row = await grid.run_grid_method(&#x27;(g) =&gt; g.getDisplayedRowAtIndex(0).data&#x27;)
 
 use
 py
 row = await run_javascript(f&#x27;return getElement({grid.id}).api.getDisplayedRowAtIndex(0).data&#x27;)
 
 instead.

New features and enhancements

- Preserve cursor position when calling `ui.codemirror.set_value` (5775 by falkoschindler, evnchn)
- Wake outbox loop on `stop()` to avoid ~1s shutdown delay (5804, 5805 by Denubis, evnchn, falkoschindler)
- Prevent `prune_user_storage` crash when UI elements are created before `ui.run_with()` (5480, 5768 by TulyOpt, Phloog, jammerhund, evnchn, falkoschindler)
- Expose `ui.aggrid.VERSION` constant for AG Grid version reference (5726, 5727 by taschini, evnchn, falkoschindler)

Bugfixes

- Guard innerHTML writes in `ui.html`, `ui.markdown` and `ui.interactive_image` to avoid server-side updates overwriting client-side DOM modifications (5749, 5761, 5816, 5821, 5823, 5826 by Denubis, phifuh, evnchn, falkoschindler)
- Fix `ui.echart` zoom reset on data update by using `getOption()` API (5819, 5822 by rtrrtr, falkoschindler, evnchn)
- Fix `ui.log` background color being tinted by inner scroll-area element (5828, 5831 by rolfn, falkoschindler, evnchn)
- Cancel connection-wait task when page coroutine completes first to prevent task leak (5803, 5806 by Denubis, evnchn, falkoschindler)
- Fix jumpy `ui.table` fullscreen toggle with smooth scrolling enabled (5789 by falkoschindler, evnchn)
- Guard against missing element in `beforeUnmount` hooks during `ui.refreshable` rebuild (5765, 5766 by evnchn, falkoschindler)
- Fix Leaflet Draw circle resize broken by ES module strict mode (5751, 5756 by MicaelJarniac, evnchn, falkoschindler)
- Exclude Python prefix directory from reload file watcher to prevent spurious reloads (5750, 5780 by phifuh, evnchn)
- Fix WebSocket URL missing host on HTTPS due to JS operator precedence (5734 by evnchn)
- Fix race condition: use static DOMPurify import to avoid mid-module yield (5732, 5799 by evnchn, codingpaula, rodja, falkoschindler)

Documentation

- Add security best practices section (5736 by evnchn, falkoschindler)
- Add a &quot;Reaktiv Order Calculator&quot; example (4758, 5783, 5812 by FabianGoessling, buiapp, evnchn, buiapp, falkoschindler)
- Add a &quot;Device Control&quot; example with events and logging (5201, 5737 by weinibuliu, rodja, eddie3ruff, evnchn, falkoschindler)
- Add AI co-authorship attribution guidance to CONTRIBUTING.md (5758 by evnchn, falkoschindler)
- Upgrade the &quot;SQLite Database&quot; example to Tortoise ORM 1.0.0 (5754 by falkoschindler)
- Improve Plausible&#x27;s SPA compatibility for website analytics (5830 by evnchn, rodja)
- Make first demo always load immediately for better SEO (5793, 5800 by evnchn, falkoschindler)
- Fix Googlebot homepage screenshot with unbounded `h-screen` (5792 by evnchn)
- Select search text when reopening search dialog (5744, 5779 by Aleborg-Finansforbundet, marcrichard22, evnchn, falkoschindler)
- Fix sponsor button border styling with dark mode support (5778 by evnchn)
- Use static URL for sponsor images instead of local path (5733 by evnchn)

Testing

- Reuse Chrome driver across screen tests for faster execution (5729 by evnchn, falkoschindler)
- Add support for typing numbers in `UserInteraction` (5771, 5772 by atollk, falkoschindler, evnchn)
- Reset `_page_exception_handler` in `App.reset()` for test isolation (5809 by evnchn)
- Fix flaky page test (5818 by falkoschindler, evnchn)

Dependencies

- Update bundled Google Fonts: Material Symbols and Roboto v50 (5743, 5762 by VerteinPL, evnchn, falkoschindler)
- Bump Mermaid to 11.12.2 (5755 by henriknoren, falkoschindler, evnchn)

Infrastructure

- Add Copilot coding agent setup (5770 by evnchn, falkoschindler)
- Remove `nanasess/setup-chromedriver` from CI in favor of runner&#x27;s preinstalled Chrome (5740 by evnchn)
- Add GitHub CLI and pre-commit hooks to devcontainer (5741 by evnchn, falkoschindler)
- Add CLAUDE.md with native AGENTS.md import (5730 by rodja, evnchn)

---

Special thanks to our top sponsors [Lechler GmbH](https://github.com/lechler-gmbh) and [TestMu AI](https://github.com/lambdaTest) ✨

and all our other [sponsors](https://github.com/sponsors/zauberzeug) and [contributors](https://github.com/zauberzeug/nicegui/graphs/contributors) for supporting this project!

🙏 _Want to support this project? Check out our [GitHub Sponsors page](https://github.com/sponsors/zauberzeug) to help us keep building amazing features!_

Links

PyPI: https://pypi.org/project/nicegui
Changelog: https://data.safetycli.com/changelogs/nicegui/

Update panel from 1.8.7 to 1.8.8.

Changelog

1.8.8

philippjfr, SumaiyaIslam, emunsing, AtharvaJaiswal005, DevilSpecial, DanielAlanBates, FlorianVerdonck, ahuang11, SimonHeybrock, Coderambling, and MarcSkovMadsen.

✨ Enhancements

* Allow list handling improvements ([8405](https://github.com/holoviz/panel/pull/8405))
* Add additional safety guards to custom models ([8410](https://github.com/holoviz/panel/pull/8410))
* **Experimental `freeze` support in `hold()`**
Add a `freeze=True` option to defer expensive Bokeh model graph recomputation until the hold context exits. This can significantly improve performance when batch-updating many models.
*(Marked experimental.)* ([8417](https://github.com/holoviz/panel/pull/8417))
* Add missing `Callback.unwatch()` method with tests ([8453](https://github.com/holoviz/panel/pull/8453))
* Ensure ESM model definitions can be loaded dynamically ([8432](https://github.com/holoviz/panel/pull/8432))
* Improve `widget.link()` to properly support HoloViews streams ([8450](https://github.com/holoviz/panel/pull/8450))

🐛 Bug Fixes

* Ensure `ReactComponent` children render even when view initialization is slow ([8406](https://github.com/holoviz/panel/pull/8406))
* Fix CDN resolution issues in server mode for `loading.css` and `es-module-shims` ([8408](https://github.com/holoviz/panel/pull/8408))
* Fix `LaTeX` rendering in `Markdown` pane under Pyodide ([8424](https://github.com/holoviz/panel/pull/8424))
* Fix resource resolution when `pathname` changes ([8433](https://github.com/holoviz/panel/pull/8433))
* Ensure only param *value* events are deduplicated ([8436](https://github.com/holoviz/panel/pull/8436))
* Fix OAuth user data being overwritten during updates ([8447](https://github.com/holoviz/panel/pull/8447))
* Fix pipeline &quot;Next&quot; button disabled state when navigating back ([8443](https://github.com/holoviz/panel/pull/8443))
* Fix `Video` pane rejecting URLs with query parameters ([8440](https://github.com/holoviz/panel/pull/8440))
* Fix `Number` and `String` indicators defaulting to black in dark theme ([8441](https://github.com/holoviz/panel/pull/8441))
* Ensure embedding works correctly with `.from_param()` ([8445](https://github.com/holoviz/panel/pull/8445))

📦 Dependency Updates

* Bump `pyodide` to 0.29.3 ([8446](https://github.com/holoviz/panel/pull/8446))

📚 Documentation

* Update ChatFeed OpenAI examples to SDK v1.0+ format ([8426](https://github.com/holoviz/panel/pull/8426))
* Documentation link updates (croniter README) ([8401](https://github.com/holoviz/panel/pull/8401))

🧪 Tests &amp; Maintenance

* Use direct `html.escape` import for clarity ([8409](https://github.com/holoviz/panel/pull/8409))
* Add tests for Button `on_click` parameter ([8435](https://github.com/holoviz/panel/pull/8435))

Links

PyPI: https://pypi.org/project/panel
Changelog: https://data.safetycli.com/changelogs/panel/

Update phonenumbers from 9.0.24 to 9.0.25.

Changelog

9.0.25

Metadata changes:
- Updated alternate formatting data for country calling code(s): 90
- Updated phone metadata for region code(s): 882, HK, MY, PA, SL, TG, TR
- Updated short number metadata for region code(s): KR
- New geocoding data for country calling code(s): 1728 (en)
- Updated carrier data for country calling code(s):
33 (en), 44 (en), 55 (en), 60 (en), 81 (en), 90 (en), 228 (en), 232 (en),
420 (en), 852 (en, zh)
- Updated / refreshed time zone meta data.

Links

PyPI: https://pypi.org/project/phonenumbers
Changelog: https://data.safetycli.com/changelogs/phonenumbers/

Update pingouin from 0.5.5 to 0.6.0.

Changelog

0.6.0

* Fix sklearn version in test_prerelease by raphaelvallat in https://github.com/raphaelvallat/pingouin/pull/493
* Disable failing unit test for sklearn 1.8+; allow latest sklearn in CI by raphaelvallat in https://github.com/raphaelvallat/pingouin/pull/494
* Remove legacy file index.html by raphaelvallat in https://github.com/raphaelvallat/pingouin/pull/495

New Contributors
* sbwiecko made their first contribution in https://github.com/raphaelvallat/pingouin/pull/442
* Petemir made their first contribution in https://github.com/raphaelvallat/pingouin/pull/448
* rhazn made their first contribution in https://github.com/raphaelvallat/pingouin/pull/457
* AlexanderJCS made their first contribution in https://github.com/raphaelvallat/pingouin/pull/474

**Full Changelog**: https://github.com/raphaelvallat/pingouin/compare/v0.5.5...v0.6.0

Links

PyPI: https://pypi.org/project/pingouin
Changelog: https://data.safetycli.com/changelogs/pingouin/

Update sentry-sdk from 2.53.0 to 2.54.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/sentry-sdk
Repo: https://github.com/getsentry/sentry-python

Update great-expectations from 1.12.3 to 1.13.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/great-expectations
Changelog: https://data.safetycli.com/changelogs/great-expectations/
Repo: https://github.com/great-expectations/great_expectations
Homepage: https://greatexpectations.io

Update tables from 3.10.2 to 3.11.1.

Changelog

3.11.0

=========================

* Add support for Python 3.14.
* Set Cython &quot;freethreading_compatible&quot; directive. Please refer to https://www.pytables.org/cookbook/threading.html for details about threading support.
* Python wheel packages are now generated exploiting limited API and stable ABI (abi3).

Thanks to:

* Rene Leonhardt
* Neil Schemenauer
* Eric Larson

Links

PyPI: https://pypi.org/project/tables
Changelog: https://data.safetycli.com/changelogs/tables/

Update tkinterweb[recommended] from 4.23.3 to 4.24.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/tkinterweb
Repo: https://github.com/Andereoo/TkinterWeb

Update globus-sdk from 4.4.0 to 4.4.1.

Changelog

4.4.1

===================

Fixed
-----

- Fixed a bug in ``globus_sdk.TransferData`` which failed to convert
``deadline`` to a string when a ``datetime.datetime`` object is given.
(:pr:`1372`)

.. _changelog-4.4.0:

Links

PyPI: https://pypi.org/project/globus-sdk
Changelog: https://data.safetycli.com/changelogs/globus-sdk/

Update PyTaskbar from 0.1.0 to 0.1.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/pytaskbar

pyup-bot and others added 17 commits March 2, 2026 19:04

Update boto3 from 1.42.54 to 1.42.59

c5ae32f

Update botocore from 1.42.54 to 1.42.59

1002439

Update ddgs from 9.10.0 to 9.11.1

ef1711f

Update eccodes from 2.45.0 to 2.46.0

87d5d9d

Update google-api-python-client from 2.190.0 to 2.191.0

6540b7d

Update python-gitlab from 8.0.0 to 8.1.0

a265a33

Update nicegui from 3.7.1 to 3.8.0

3cd8d23

Update panel from 1.8.7 to 1.8.8

1d0107c

Update phonenumbers from 9.0.24 to 9.0.25

4109005

Update pingouin from 0.5.5 to 0.6.0

a22ce4b

Update sentry-sdk from 2.53.0 to 2.54.0

91ab9e5

Update great-expectations from 1.12.3 to 1.13.0

0c9de32

Update tables from 3.10.2 to 3.11.1

ec11463

Update tkinterweb from 4.23.3 to 4.24.1

f0e9f89

Update globus-sdk from 4.4.0 to 4.4.1

58ae20a

Update pytaskbar from 0.1.0 to 0.1.1

bb3f7b8

tests: pingouin 0.6.0 requires python >= 3.10

dc128a7

rokm merged commit 0c3a814 into master Mar 2, 2026
57 of 58 checks passed

rokm deleted the pyup-scheduled-update-2026-03-02 branch March 2, 2026 23:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Scheduled weekly dependency update for week 09#992

Scheduled weekly dependency update for week 09#992
rokm merged 17 commits intomasterfrom
pyup-scheduled-update-2026-03-02

pyup-bot commented Mar 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

pyup-bot commented Mar 2, 2026

Update boto3 from 1.42.54 to 1.42.59.

1.42.59

1.42.58

1.42.57

1.42.56

1.42.55

Update botocore from 1.42.54 to 1.42.59.

1.42.59

1.42.58

1.42.57

1.42.56

1.42.55

Update ddgs from 9.10.0 to 9.11.1.

9.11.1

9.11.0

Update eccodes from 2.45.0 to 2.46.0.

2.46.0

Update google-api-python-client from 2.190.0 to 2.191.0.

Update python-gitlab from 8.0.0 to 8.1.0.

8.1.0

Update nicegui from 3.7.1 to 3.8.0.

3.8.0

Update panel from 1.8.7 to 1.8.8.

1.8.8

Update phonenumbers from 9.0.24 to 9.0.25.

9.0.25

Update pingouin from 0.5.5 to 0.6.0.

0.6.0

Update sentry-sdk from 2.53.0 to 2.54.0.

Update great-expectations from 1.12.3 to 1.13.0.

Update tables from 3.10.2 to 3.11.1.

3.11.0

Update tkinterweb[recommended] from 4.23.3 to 4.24.1.

Update globus-sdk from 4.4.0 to 4.4.1.

4.4.1

Update PyTaskbar from 0.1.0 to 0.1.1.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants