Skip to content

MAINT: Bump the minor-and-patch group with 12 updates - #2675

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/minor-and-patch-cb91201a35
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/minor-and-patch-cb91201a35

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates:

Package From To
alembic 1.19.2 1.20.0
numpy 2.2.6 2.4.6
pypdf 6.17.0 6.18.1
scipy 1.16.3 1.17.1
tinytag 2.3.1 2.3.2
tqdm 4.70.0 4.70.1
transformers 5.16.1 5.17.0
accelerate 1.14.0 1.15.0
azure-ai-ml 1.34.1 1.35.0
matplotlib 3.10.9 3.11.2
ty 0.0.78 0.0.80
ruff 0.16.6 0.16.7

Updates alembic from 1.19.2 to 1.20.0

Release notes

Sourced from alembic's releases.

1.20.0

Released: September 11, 2026

usecase

  • [usecase] [batch] Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any ~sqlalchemy.schema.CheckConstraint in Operations.batch_alter_table.table_args is taken to indicate that the case has been accommodated, and no warning is emitted.

    References: #1846

  • [usecase] [autogenerate] Autogenerate now renders a warning comment above any rendered Operations.drop_constraint() directive for which the constraint name is None, as is the case when a constraint that has no name in the model is dropped, most typically within the downgrade() function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.

    References: #916

bug

  • [bug] [batch] Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with ~sqlalchemy.types.Boolean.create_constraint set to True, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.

    References: #1768

  • [bug] [batch] Fixed bug in batch mode where a CHECK constraint generated by a type such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.

... (truncated)

Commits

Updates numpy from 2.2.6 to 2.4.6

Release notes

Sourced from numpy's releases.

v2.4.6 (May 18, 2026)

NumPy 2.4.6 Release Notes

NumPy 2.4.6 is a quick release that fixes a regression discovered in the 2.4.5 release.

This release supports Python versions 3.11-3.14

Contributors

A total of 4 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • !EarlMilktea
  • Charles Harris
  • Sebastian Berg
  • Warren Weckesser

Pull requests merged

A total of 4 pull requests were merged for this release.

  • #31444: MAINT: Prepare 2.4.x for further development
  • #31453: BUG: Fix regression in arr.conj()
  • #31459: BUG: np.linalg.svd(..., hermitian=True) returns non-unitary...
  • #31460: BUG: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator...

v2.4.5 (May 15, 2026)

NumPy 2.4.5 Release Notes

NumPy 2.4.5 is a patch release that fixes bugs discovered after the 2.4.4 release, has some typing improvements, and maintains infrastructure.

This release supports Python versions 3.11-3.14

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Aleksei Nikiforov
  • Anarion Zuo +
  • Ankit Ahlawat
  • Breno Favaretto +
  • Charles Harris
  • Igor Krivenko +
  • Ijtihed Kilani +
  • Joren Hammudoglu
  • Maarten Baert +

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • b832a09 Merge pull request #31462 from charris/prepare-2.4.6
  • 57cc147 REL: Prepare for the NumPy 2.4.6 release
  • 0c72b0b Merge pull request #31459 from charris/backport-31347
  • 9778d26 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
  • e0e3876 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
  • d1bffeb BUG: np.linalg.svd(..., hermitian=True) returns non-unitary vh (#31347)
  • 8d8d7e5 Merge pull request #31453 from seberg/issue-31452
  • bddaab7 BUG: Fix regression in arr.conj()
  • 37a1ecc Merge pull request #31444 from charris/begin-2.4.6
  • 3c0e043 MAINT: Prepare 2.4.x for further development
  • Additional commits viewable in compare view

Updates pypdf from 6.17.0 to 6.18.1

Release notes

Sourced from pypdf's releases.

Version 6.18.1, 2026-09-11

What's new

Security (SEC)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Full Changelog

Version 6.18.0, 2026-09-07

What's new

Please note that this release requires users which previously overwrote the default limits to migrate to the new approach: Docs

In short:

  • Use apply_configuration as a context manager to temporarily overwrite configuration values.
  • Use overwrite_configuration to change the configuration values for the whole session.

The old overwrites should continue to work in most cases. If you have migrated successfully and do not need the legacy handling anymore (which can cause some overhead), consider using the temporary disable_legacy_handling setting:

from pypdf import overwrite_configuration
overwrite_configuration(disable_legacy_handling=True)

In case you are experiencing some unexpected issues after the migration, consider opening a new issue (or commenting on an existing one) with the necessary details to reproduce it.

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033) by @​PJBrs

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.18.1, 2026-09-11

Security (SEC)

  • Further restrict FlateDecode recovery (#4073)
  • Limit entry count for TrueType and Type1 font /Widths (#4072)
  • Limit allowed length of tokens in parse_bfchar (#4071)

Bug Fixes (BUG)

  • Use current text matrix for visitor_text (#4062)
  • Repeat the letter for /S /A and /S /a page labels past Z (#4065)
  • Use font color for FreeText default appearance (#4051)

Robustness (ROB)

  • Fix compatibility with fonttools < 4.58.0 (#4050, #4059)

Documentation (DOC)

  • Use combined matrix in visitor examples (#4066)

Full Changelog

Version 6.18.0, 2026-09-07

Security (SEC)

  • Limit allowed length of indirect object tokens (#4055)

Deprecations (DEP)

  • Rework configuration value handling (#4044)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033)

Full Changelog

Commits
  • caf8cde REL: 6.18.1
  • d9d38cf SEC: Further restrict FlateDecode recovery (#4073)
  • 0fb26eb SEC: Limit entry count for TrueType and Type1 font /Widths (#4072)
  • 319d0b8 SEC: Limit allowed length of tokens in parse_bfchar (#4071)
  • 735d284 BUG: Use current text matrix for visitor_text (#4062)
  • 808a318 DOC: Use combined matrix in visitor examples (#4066)
  • c38feda BUG: Repeat the letter for /S /A and /S /a page labels past Z (#4065)
  • 3f7bc19 ROB: Do not crash when the XFA entry is not a well-formed array (#4064)
  • d80ccfc ROB: Fix compatibility for fonttools < 4.57.0 (#4050)
  • 7bb71dd ROB: Do not crash when the font encoding differences are not an array (#4058)
  • Additional commits viewable in compare view

Updates scipy from 1.16.3 to 1.17.1

Release notes

Sourced from scipy's releases.

SciPy 1.17.1 Release Notes

SciPy 1.17.1 is a bug-fix release with no new features compared to 1.17.0.

Authors

  • Name (commits)
  • Evgeni Burovski (5)
  • Lucas Colley (1)
  • Christoph Gohlke (1)
  • Ralf Gommers (6)
  • Matt Haberland (5)
  • Matthias Koeppe (1)
  • Nick ODell (1)
  • Ilhan Polat (10)
  • Tyler Reddy (44)
  • Martin Schuck (3)
  • Dan Schult (3)
  • stratakis (1) +
  • ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (1)

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Complete issue list, PR list, and release asset hashes are available in the associated README.txt.

SciPy 1.17.0 Release Notes

SciPy 1.17.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.17.x branch, and on adding new features on the main branch.

This release requires Python 3.11-3.14 and NumPy 1.26.4 or greater.

Highlights of this release

  • Many SciPy functions have gained native support for batching of N-dimensional array input and additional support for the array API standard. An overall

... (truncated)

Commits
  • 527eb7f REL: 1.17.1 release commit [wheel build]
  • f11663b Merge pull request #24584 from tylerjereddy/treddy_prep_1.17.1
  • 2c49e68 DOC: PR 24584 revisions
  • 400fa15 safely convert index dtypes to intc for csgraph and superLU
  • 8c70404 MAINT: PR 24584 revisions [wheel build]
  • 6dda8c1 BUG: PR 24584 revisions
  • 4a187e5 DOC: PR 24584 revisions
  • 463ee9f ENH: linalg/inv: re-enable overwrite_a for 2D inputs (#24442)
  • df746ee BUG: linalg: restore dtypes in inv, solve, det
  • 246bfee MAINT:optimize: Enable multi-phase init to DIRECT
  • Additional commits viewable in compare view

Updates tinytag from 2.3.1 to 2.3.2

Release notes

Sourced from tinytag's releases.

2.3.2

  • ID3: Optimize parsing of UTF-16 strings
  • MP4: Only parse decoder specific info if it exists
  • ASF: Decode strings as UTF-16LE instead of system byte order
Commits
  • c123836 Release 2.3.2 (#369)
  • 3a4acef ID3: Optimize parsing of UTF-16 strings (#368)
  • c11fc76 fuzz.yml: reduce number of runs to 5 million
  • fb397ac CI: add fuzzing job (#367)
  • 3f64d4b MP4: Only parse decoder specific info if it exists (#365)
  • ec1d985 MP4: Fix parsing of certain files without btrt atom (#363)
  • cf456ab tinytag.py: avoid some unnecessary calculations
  • cf6c24b tinytag.py: don't disable consider-ternary-expression
  • b171277 Pylint: disable 'consider-ternary-expression' plugin
  • a8347a0 tinytag.py: re-enable pylint checks
  • Additional commits viewable in compare view

Updates tqdm from 4.70.0 to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

  • contrib.concurrent: fix no-len iterables (#1830 <- #1828)
  • tests: major overhaul (#1819)
  • update AI policy in PR template
  • misc lint & tidy
  • CI: bump workflow actions & pre-commit hooks
Commits

Updates transformers from 5.16.1 to 5.17.0

Release notes

Sourced from transformers's releases.

Release 5.17.0

Release v5.17.0

New Model additions

HYV4

Hy4-Preview is a 780B-parameter mixture-of-experts language model that activates 49B parameters per token. Each MoE layer holds 256 routed experts plus one always-active shared expert and routes every token to 8 of them. The context window is 1M tokens.

The architecture combines four features:

  • Multi-head Latent Attention (MLA) compresses keys and values into a low-rank latent (kv_lora_rank) that kv_b_proj expands back to one key/value per query head.
  • DeepSeek Sparse Attention (DSA) selects index_topk keys per query with a lightweight indexer. Following IndexShare, only the layers marked "full" in indexer_types run an indexer; "shared" layers reuse the previous full layer's selection.
  • Gated MLA with learnable attention sinks, where each head owns a sink logit that participates in the softmax and contributes no value, as in GPT-OSS.
  • Independent Hyper-Connections (iHC) replace the plain residual path with hc_mult parallel residual streams that are collapsed before, and redistributed after, every sublayer.

The implementation does not execute the multi-token prediction (MTP) layers. Released checkpoints keep those weights so that other runtimes can use them for speculative decoding; they are ignored at load time.

Links: Documentation

VibeVoice

VibeVoice is a novel framework for synthesizing high-fidelity, long-form speech with multiple speakers by employing a next-token diffusion approach within a Large Language Model (LLM) structure. It's designed to capture the authentic conversational "vibe" and is particularly suited for generating audio content like podcasts and multi-participant audiobooks.

Links: Documentation

NeoMME

NeoMME is a family of efficient 260M and 800M parameter multimodal-native multilingual foundation encoders from H Company. It processes multilingual text tokens and raw image patches in a single bidirectional Transformer encoder, without a separately pretrained vision tower or causal language model.

NeoMME-Retriever is a model fine-tuned from the NeoMME backbone for visual document retrieval with joint late-interaction and dense objectives. It takes text queries and documents (text or page screenshots) and produces multi-vector embeddings for MeanMaxSim scoring (late-interaction) and mean-pooled embeddings for cosine similarity (dense).

Links: Documentation

... (truncated)

Commits
  • 856157a v5.17.0
  • 5b7dcb0 MRoPE continued (#48594)
  • 50bbcc6 [fix] Update stale expected strings in HunYuanVL integration tests (#48646)
  • e8bcd79 [Quantizaiton]support 5/6/7 bits in AutoRound (#48481)
  • 3283d5f [fix] Update stale golden values and fix expected_logits shape in FlavaForPre...
  • 5f47b5a [tests] Fix integration test golden values broken by fast image processor def...
  • fc50134 Add Fun-ASR-Nano model (#46180)
  • d9fe823 Fix YOLOS device mismatch with device_map="auto" (#46886)
  • cbc1651 [Generate] Avoid unconditionally downloading remote hub file (#48620)
  • bd05a4b Honor shift_labels in decoder-only LLM/VLM losses (#48493)
  • Additional commits viewable in compare view

Updates accelerate from 1.14.0 to 1.15.0

Release notes

Sourced from accelerate's releases.

v1.15.0: FSDP2 activation memory, dtensor improvements

FSDP2

A large batch of FSDP2 work this release: two fixes that cut activation memory at long sequence lengths, tied-embedding support on torch >= 2.13, and a round of checkpointing correctness and scale fixes.

Activation checkpointing was wrapping each child of the matched layer (self_attn, mlp, the norms) instead of the layer itself, so every inter-child activation stayed saved for backward. It now wraps the layer.

There's also a new FSDP2-only activation_checkpointing_offload, which moves the remaining per-layer checkpoint inputs to pinned CPU memory. Gradients are exactly those of plain activation checkpointing:

# fsdp2.yaml
fsdp_config:
  fsdp_version: 2
  fsdp_auto_wrap_policy: TRANSFORMER_BASED_WRAP
  fsdp_activation_checkpointing: true
  fsdp_activation_checkpointing_offload: true
accelerate launch --config_file fsdp2.yaml train.py
  • FSDP2 activation checkpointing: wrap the matched transformer layer itself, not each of its children by @​qgallouedec in #4172
  • Add FSDP2 activation_checkpointing_offload: offload checkpointed layer inputs to pinned CPU memory by @​qgallouedec in #4175
  • Fix FSDP2 tied-embedding models on torch >= 2.13: put the output embedding in the same fully_shard group by @​qgallouedec in #4171
  • Fix FSDP2/PEFT/FULL_STATE_DICT dropping every rank's adapter shard except rank 0 by @​AmineDiro in #4206
  • FSDP2: per-rank torch.save/load for SHARDED_STATE_DICT to fix 2800+ NPU checkpoint timeout by @​gygdh-001 in #4105
  • Fix FSDP sharded checkpoint path resolution by @​HaomingSong in #4119
  • Raise a clear error when FSDP is enabled on a mesh with no shard dimension by @​qgallouedec in #4180

DTensor

Two fixes for DTensor-sharded models, which you hit with FSDP2, tensor parallelism, or any N-D parallelism setup: gradient clipping no longer fails on the foreach op when plain tensors and DTensors are mixed, and prepare_model leaves an already-sharded model where it is:

Offloading & Quantization

An entire model can now be dispatched to disk, including tied weights — useful for tools like llm-compressor that compress large models on machines that can't hold them:

Trackers

Custom trackers can be registered by name and then selected from log_with= like any built-in one:

from accelerate import Accelerator
from accelerate.tracking import register_tracker_class
</tr></table> 

... (truncated)

Commits
  • 6afc1e5 Release: v1.15.0
  • 636a934 Fix nightly CI: tensor parallel size detection and DeepSpeed warmup steps (#4...
  • 385d9fb docs: fix three dead links left by the docs restructure (#4230)
  • c424d0b docs: fix garbled sentence in CONTRIBUTING.md (#4231)
  • 0f7e35f Clip grad norm support for dtensors (#4219)
  • b2ac509 Fix FSDP2/ PEFT/FULL_STATE_DICT dropping every rank's adapter shard except ...
  • 33e8bc4 Fix load_accelerator_state only restoring one RNG backend (#4217)
  • 50de3ad Treat MPS out-of-memory errors as OOM in find_executable_batch_size (#4227)
  • ab5fe8e feat: add the neuron device branch in state (#4218)
  • 9baf95b Fix MLFLOW_NESTED_RUN never being able to turn nesting off (#4223)
  • Additional commits viewable in compare view

Updates azure-ai-ml from 1.34.1 to 1.35.0

Release notes

Sourced from azure-ai-ml's releases.

azure-ai-ml_1.35.0

1.35.0 (2026-09-08)

Bugs Fixed

  • Simplified schedule validation errors so invalid local job paths report the relevant file error instead of errors from every supported job schema.
  • Fixed internal pipeline Command node dropping node-level interactive services (SSH, JupyterLab, TensorBoard, VS Code, etc.) during serialization, which prevented interactive endpoints from being created for Singularity jobs. The services are now serialized into the pipeline REST request and round-tripped on deserialization, matching the public Command node behavior.
  • Fixed MLClient.jobs.create_or_update, archive, and restore failing for previously-fetched jobs across all job types by routing metadata-only edits through the RunHistory PATCH endpoint.
  • Fixed DeploymentTemplate.creation_context always being None when retrieved via get() or list(). The created/modified timestamps and identity returned by the service (as createdTime / modifiedTime / createdBy) are now populated on creation_context, making DeploymentTemplate consistent with Model and Environment.
  • Fixed DeploymentTemplate.creation_context.last_modified_by always being None even after the service began returning the modifying identity. The service sends it as a flattened modifiedBy field (top-level for get(), nested under properties for list()) alongside a present-but-null lastModifiedBy; last_modified_by is now populated from modifiedBy, matching how created_by is read.
  • Fixed deployment_templates.list(name=...) raising AttributeError: 'str' object has no attribute 'request_timeout'. In the list response, requestSettings / livenessProbe / readinessProbe arrive as stringified dicts nested under properties; these are now parsed before conversion, giving list() parity with models.list() / environments.list().
  • Fixed deployment_templates.get(name) failing with a 404 (DeploymentTemplate {name}:latest not found) when no version was supplied, because the literal string "latest" was sent as the version. The latest version is now resolved client-side (the service exposes no latest label and no server-side ordering), and get() accepts a label keyword (label="latest" resolves to the latest version) mirroring models.get(). delete(name) resolves the latest version the same way.
  • Fixed models.get(name, label="latest") returning a Model whose default_deployment_template / allowed_deployment_templates references had asset_id=None. Label resolution goes through the version list endpoint (top=1), whose items omit the deployment-template references; for registry models the resolved version is now re-fetched through the get endpoint, so the label path hydrates these references identically to the explicit version= path.
  • Added MLClient.jobs.begin_delete(name) to delete a job.
  • Fixed loading a registered MLTable data asset via mltable.load("azureml://.../data/<name>/versions/<version>") failing with AttributeError: 'DataVersionEntity' object has no attribute 'additional_properties'. When the dataset_dataplane client was migrated to the TypeSpec (hybrid) model, DataVersionEntity stopped exposing the msrest additional_properties attribute that the mltable package reads (isV2 / legacyDataflow) on the local resolution path. The attribute is now restored as a compatibility shim returning the un-modeled wire keys, so the on-the-wire contract is unchanged.

Other Changes

  • Migrated SDK entities and their consumers off the per-version msrest REST clients onto the shared arm_ml_service hybrid client. This is an internal change; the on-the-wire request/response contract is unchanged.
Commits
  • 59fb7a9 Update CHANGELOG for version 1.35.0 release date (#48847)
  • b95aa88 Update _version.py
  • 8f90a15 Update _version.py
  • 659c803 Configure Agent Server trace sampling and instrumentation defaults (#48753)
  • 71ebbb4 [Search] Include Issue Cleanup starting 2026-08-01-preview release (#48767)
  • fc72d1a [Storage Blob] Migrating to TypeSpec (#45133)
  • 11200c9 Scope durable task IDs by hosted session GUID (#48776)
  • aeeef3d Prepare azure-postgresql-auth 1.1.0 for release (#48762)
  • ce9b039 Populate measurements on telemetry from the microsoft.custom_measurements a...
  • eacd370 Increment package version after release of azure-ai-agentserver-responses (#4...
  • Additional commits viewable in compare view

Updates matplotlib from 3.10.9 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Fix tight layout of multiple subplots with sharey=True
  • Fix NoNorm cursor formatting for uint8 images
  • Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)
  • Fix clipped Axis labels on 3D plots with tight layout
  • Fix inverted Axis on 3D plots
  • Fix restoring 'auto' aspect in 3D axes after switching from 'equal'
  • Fix missing glyphs when subsetting Type 1 fonts in PDF
  • Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

REL: v3.11.0

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. See the release notes for more information.

REL: v3.11.0rc2

This is the second release candidate for the meso release 3.11.0.

This release candidate fixes some problems with downstream packages, removes some missed deprecations, and corrects some additional minor bugs.

REL: v3.11.0rc1

After an extended development stretch, we are pleased to announce the first release candidate of Matplotlib 3.11.0.

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner. Due to the update to the font rendering stack, we cannot guarantee that text will be bit-for-bit perfect with previous releases, so if you are using Matplotlib for testing, it may be necessary to introduce/raise a tolerance within your tests.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. Final release notes are still being curated, but you may browse the list of new features, API changes, and all issues/pull requests on the milestone.

... (truncated)

Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
  • 0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
  • ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
  • 8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
  • 93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
  • b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
  • Additional commits viewable in compare view

Updates ty from 0.0.78 to 0.0.80

Release notes

Sourced from ty's releases.

0.0.80

Release Notes

Released on 2026-09-09.

Bug fixes

  • Fix --force-exclude for directories with an excluded ancestor (#28451)
  • Preserve metaclass candidates after conflicts (#28461)

LSP server

  • Give existing autofixes descriptive titles (#28456)
  • Prevent LSP hangs during inlay hint bursts (#28390)

Diagnostic improvements

  • Preserve redundant-condition diagnostics with unreachable operands (#28374)

Core type checking

  • Check captured receivers when calling wrapped classmethods (#28467)
  • Fix cached classmethods on generic classes (#28207)
  • Fix disjointness of type guards and boolean literals (#28363)
  • Infer tuple variance from the full tuple spec (#28446)
  • Infer tuple variance more precisely (#28426)
  • Preserve callable identity across specialized types (#28409)
  • Preserve callback type context through ParamSpec forwarding (#28439)
  • Preserve wrapped functions in precise functools.partial relations (#28460)
  • Respect descriptor protocol for __set__ itself (#28408)
  • Respect type-variable bounds in argument context (#28448)
  • Unwrap union alternatives in overload implementations (#28468)

Performance

  • Distribute len inference over unions (#28470)
  • Fast-path concrete literal intersections (#28348)

Memory usage improvements

  • Avoid excess capacity in multi-binding tables (#28412)
  • Share equivalent place tables within a file (#28319)
  • Share names in synthesized constructor parameters (#28398)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.80

Released on 2026-09-09.

Bug fixes

  • Fix --force-exclude for directories with an excluded ancestor (#28451)
  • Preserve metaclass candidates after conflicts (#28461)

LSP server

  • Give existing autofixes descriptive titles (#28456)
  • Prevent LSP hangs during inlay hint bursts (#28390)

Diagnostic improvements

  • Preserve redundant-condition diagnostics with unreachable operands (#28374)

Core type checking

  • Check captured receivers when calling wrapped classmethods (#28467)
  • Fix cached classmethods on generic classes (#28207)
  • Fix disjointness of type guards and boolean literals (#28363)
  • Infer tuple variance from the full tuple spec (#28446)
  • Infer tuple variance more precisely (#28426)
  • Preserve callable identity across specialized types (#28409)
  • Preserve callback type context through ParamSpec forwarding (#28439)
  • Preserve wrapped functions in precise functools.partial relations (#28460)
  • Respect descriptor protocol for __set__ itself (#28408)
  • Respect type-variable bounds in argument context (#28448)
  • Unwrap union alternatives in overload implementations (#28468)

Performance

  • Distribute len inference over unions (#28470)
  • Fast-path concrete literal intersections (#28348)

Memory usage improvements

  • Avoid excess capacity in multi-binding tables (#28412)
  • Share equivalent place tables within a file (#28319)
  • Share names in synthesized constructor parameters (

Bumps the minor-and-patch group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.19.2` | `1.20.0` |
| [numpy](https://github.com/numpy/numpy) | `2.2.6` | `2.4.6` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.17.0` | `6.18.1` |
| [scipy](https://github.com/scipy/scipy) | `1.16.3` | `1.17.1` |
| [tinytag](https://github.com/tinytag/tinytag) | `2.3.1` | `2.3.2` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.70.0` | `4.70.1` |
| [transformers](https://github.com/huggingface/transformers) | `5.16.1` | `5.17.0` |
| [accelerate](https://github.com/huggingface/accelerate) | `1.14.0` | `1.15.0` |
| [azure-ai-ml](https://github.com/Azure/azure-sdk-for-python) | `1.34.1` | `1.35.0` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.9` | `3.11.2` |
| [ty](https://github.com/astral-sh/ty) | `0.0.78` | `0.0.80` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.6` | `0.16.7` |


Updates `alembic` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `numpy` from 2.2.6 to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.2.6...v2.4.6)

Updates `pypdf` from 6.17.0 to 6.18.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.17.0...6.18.1)

Updates `scipy` from 1.16.3 to 1.17.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.16.3...v1.17.1)

Updates `tinytag` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/tinytag/tinytag/releases)
- [Commits](tinytag/tinytag@2.3.1...2.3.2)

Updates `tqdm` from 4.70.0 to 4.70.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.70.0...v4.70.1)

Updates `transformers` from 5.16.1 to 5.17.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.16.1...v5.17.0)

Updates `accelerate` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/huggingface/accelerate/releases)
- [Commits](huggingface/accelerate@v1.14.0...v1.15.0)

Updates `azure-ai-ml` from 1.34.1 to 1.35.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-ml_1.34.1...azure-ai-ml_1.35.0)

Updates `matplotlib` from 3.10.9 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.9...v3.11.2)

Updates `ty` from 0.0.78 to 0.0.80
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.78...0.0.80)

Updates `ruff` from 0.16.6 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.7)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pypdf
  dependency-version: 6.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: scipy
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tinytag
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tqdm
  dependency-version: 4.70.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: transformers
  dependency-version: 5.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: accelerate
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: azure-ai-ml
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.80
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant