Skip to content

chore(deps): bump the py-dependencies group across 3 directories with 5 updates #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

chore(deps): bump the py-dependencies group across 3 directories with 5 updates #31

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025 •
edited
Loading

Updates the requirements on torch, torchvision, matplotlib, pandas and joblib to permit the latest version.
Updates torch to 2.8.0

Release notes

Sourced from torch's releases.

PyTorch 2.8.0 Release Notes

Highlights

... (truncated)

Changelog

Sourced from torch's changelog.

Releasing PyTorch

Release Compatibility Matrix

Following is the Release Compatibility Matrix for PyTorch releases:

... (truncated)

Commits
  • ba56102 Cherrypick: Add the RunLLM widget to the website (#159592)
  • c525a02 [dynamo, docs] cherry pick torch.compile programming model docs into 2.8 (#15...
  • a1cb3cc [Release Only] Remove nvshmem from list of preload libraries (#158925)
  • c76b235 Move out super large one off foreach_copy test (#158880)
  • 20a0e22 Revert "[Dynamo] Allow inlining into AO quantization modules (#152934)" (#158...
  • 9167ac8 [MPS] Switch Cholesky decomp to column wise (#158237)
  • 5534685 [MPS] Reimplement tri[ul] as Metal shaders (#158867)
  • d19e08d Cherry pick PR 158746 (#158801)
  • a6c044a [cherry-pick] Unify torch.tensor and torch.ops.aten.scalar_tensor behavior (#...
  • 620ebd0 [Dynamo] Use proper sources for constructing dataclass defaults (#158689)
  • Additional commits viewable in compare view

Updates torchvision to 0.23.0

Release notes

Sourced from torchvision's releases.

Torchvision 0.23 release

Highlight - Transforming KeyPoints and Rotated boxes!

📦 This release is introducing two highly popular feature requests: Transforms support for KeyPoints and Rotated Bounding Boxes!

  • Rotated Bounding Boxes provide a tighter fit and alignment with rotated and elongated objects, which improves the localization, reduces overlap in densely packed images, and improves isolation of objects in crowded scenes.
  • KeyPoints offer a robust and accurate way to identify and locate specific points of interest within an image or video frame. These features aim at improving developer experience to implement use cases, including detecting & tracking objects, estimating pose, analyzing facial expressions, and creating augmented reality experiences.

We illustrated the use of Rotated Bounding Boxes below. You can expect keypoints and rotated boxes to work with all existing torchvision transforms in torchvision.transforms.v2. You can find some examples on how to use those transformations in our Transforms on Rotated Bounding Boxes tutorials.

[!NOTE] These features are released in BETA status. The API are unlikely to change, but we may have some rough edges and we may make some slight bug fixes in future releases. Please let us know if you encounter any issue!

Detailed changes

New Features

[transforms] Added support for BoundingBoxes formats and transforms (#9104, #9084, #9095, #9138) [transforms] Added the KeyPoints to TVTensor and support for transforms (#8817)

Improvements

[utils] Add label background to draw_bounding_boxes (#9018) [MPS] Add deformable conv2d kernel support on MPS (#9017, #9115) [documentation] Various documentation improvements (#9063, #9119, #9083, #9105, #9106, #9145) [code-quality] Bunch of code quality improvements (#9087, #9093, #8814, #9035, #9120, #9080, #9027, #9062, #9117, #9024, #9032)

Bug Fixes

[datasets] Fix COCO dataset to avoid issue when copying the dataset results (#9107) [datasets] Raise error when download=True for LFW dataset, which is not available for download anymore #9040) [tv_tensors] Add error message when setting 1D tensor ToImage() (#9114) [io] Warn when webp is asked to decode into grayscale (#9101)

Contributors

🎉 We're grateful for our community, which helps us improve Torchvision by submitting issues and PRs, and providing feedback and suggestions. The following persons have contributed patches for this release: @​AlannaBurke, @​Alexandre-SCHOEPP, @​atalman, @​AntoineSimoulin, @​BoyuanFeng, @​cyyever, @​elmuz, @​emmanuel-ferdman, @​hmk114, @​Isalia20, @​NicolasHug, @​malfet, @​chengolivia, @​RhutvikH, @​hvaara, @​scotts, @​alinpahontu2912, @​tsahiasher, and @​youcefouadjer.

Commits

Updates matplotlib to 3.9.4

Release notes

Sourced from matplotlib's releases.

REL: 3.9.4

This is the fourth bugfix release of the 3.9.x series.

This release contains two bug-fixes:

  • Fix toolbar icons in GTK backend
  • Fix Poly3DCollection initialization with list of lists
Commits

Updates pandas to 2.3.2

Release notes

Sourced from pandas's releases.

Pandas 2.3.2

We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 4665c10 RLS: 2.3.2
  • 633c68b DOC: fix syntax in whatsnew file
  • 456ad47 Backport PR #62152 on branch 2.3.x (DOC: prepare 2.3.2 whatsnew notes for rel...
  • 6cae644 [backport 2.3.x] DOC: move and reword whatsnew note for replace fix (GH-57865...
  • a91c50a Backport PR #62147 on branch 2.3.x (DOC: correct and rewrite string migration...
  • f7a2cfd [backport 2.3.x] BUG/DEPR: logical operation with bool and string (#61995) (#...
  • 7981a43 Backport PR #62124 on branch 2.3.x (CI/BLD: don't use strict xfail for '%m.%Y...
  • fafbcbd [backport 2.3.x] BUG(CoW): also raise for chained assignment for .at / .iat (...
  • 3ac64a7 [backport 2.3.x] BUG: Fix Series.str.contains with compiled regex on Arrow st...
  • 1f2dc4f [backport 2.3.x] BUG: fix Series.str.fullmatch() and Series.str.match() with ...
  • Additional commits viewable in compare view

Updates torch from 2.6.0 to 2.8.0

Release notes

Sourced from torch's releases.

PyTorch 2.8.0 Release Notes

Highlights

... (truncated)

Changelog

Sourced from torch's changelog.

Releasing PyTorch

Release Compatibility Matrix

Following is the Release Compatibility Matrix for PyTorch releases:

... (truncated)

Commits
  • ba56102 Cherrypick: Add the RunLLM widget to the website (#159592)
  • c525a02 [dynamo, docs] cherry pick torch.compile programming model docs into 2.8 (#15...
  • a1cb3cc [Release Only] Remove nvshmem from list of preload libraries (#158925)
  • c76b235 Move out super large one off foreach_copy test (#158880)
  • 20a0e22 Revert "[Dynamo] Allow inlining into AO quantization modules (#152934)" (#158...
  • 9167ac8 [MPS] Switch Cholesky decomp to column wise (#158237)
  • 5534685 [MPS] Reimplement tri[ul] as Metal shaders (#158867)
  • d19e08d Cherry pick PR 158746 (#158801)
  • a6c044a [cherry-pick] Unify torch.tensor and torch.ops.aten.scalar_tensor behavior (#...
  • 620ebd0 [Dynamo] Use proper sources for constructing dataclass defaults (#158689)
  • Additional commits viewable in compare view

Updates pandas from 2.2.3 to 2.3.2

Release notes

Sourced from pandas's releases.

Pandas 2.3.2

We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 4665c10 RLS: 2.3.2
  • 633c68b DOC: fix syntax in whatsnew file
  • 456ad47 Backport PR #62152 on branch 2.3.x (DOC: prepare 2.3.2 whatsnew notes for rel...
  • 6cae644 [backport 2.3.x] DOC: move and reword whatsnew note for replace fix (GH-57865...
  • a91c50a Backport PR #62147 on branch 2.3.x (DOC: correct and rewrite string migration...
  • f7a2cfd [backport 2.3.x] BUG/DEPR: logical operation with bool and string (#61995) (#...
  • 7981a43 Backport PR #62124 on branch 2.3.x (CI/BLD: don't use strict xfail for '%m.%Y...
  • fafbcbd [backport 2.3.x] BUG(CoW): also raise for chained assignment for .at / .iat (...
  • 3ac64a7 [backport 2.3.x] BUG: Fix Series.str.contains with compiled regex on Arrow st...
  • 1f2dc4f [backport 2.3.x] BUG: fix Series.str.fullmatch() and Series.str.match() with ...
  • Additional commits viewable in compare view

Updates joblib from 1.4.2 to 1.5.2

Changelog

Sourced from joblib's changelog.

Release 1.5.2 - 2025/08/27

Memory:


- Ensure that temporary files managed by the ``Memory`` object do not collide
  when using the same cache directory when the cache directory is accessed
  concurrently from different nodes on a cluster with a shared filesystem.
  https://github.com/joblib/joblib/pull/1656

Release 1.5.1 - 2025/05/23


    

  • 

    Fix backend hints causing errors when no multiprocessing is present
    
joblib/joblib#1721
    

    • 

  • 

    Vendor loky3.5.5 fixing the resource_tracker clean up with earlier Python
    
versions. joblib/joblib#1724
    

    • 



Release 1.5.0 -- 2025/05/03


Memory:

  • Enforce age_limit is a positive timedelta for Memory.reduce_size, to avoid silently ignoring it. joblib/joblib#1613

  • Remove deprecated bytes_limit argument for Memory, which should be passed directly to Memory.reduce_size. joblib/joblib#1569

  • Extend functionality of the check_call_in_cache method to now also check against cache validity. Before, it would only check for a given call if it is in cache memory. joblib/joblib#1584

  • The Memory object now automatically creates a .gitignore file in its cache directory, instructing git to ignore the entire folder. joblib/joblib#1674

Parallel:


- Fixed a bug that caused the ``timeout`` parameter in ``joblib.Parallel`` to be
</tr></table>

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the py-dependencies group across 3 directories with…
56698a8 
… 5 updates

Updates the requirements on [torch](https://github.com/pytorch/pytorch), [torchvision](https://github.com/pytorch/vision), [matplotlib](https://github.com/matplotlib/matplotlib), [pandas](https://github.com/pandas-dev/pandas) and [joblib](https://github.com/joblib/joblib) to permit the latest version.

Updates `torch` to 2.8.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.6.0...v2.8.0)

Updates `torchvision` to 0.23.0
- [Release notes](https://github.com/pytorch/vision/releases)
- [Commits](pytorch/vision@v0.21.0...0.23.0)

Updates `matplotlib` to 3.9.4
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.1...v3.9.4)

Updates `pandas` to 2.3.2
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.3...v2.3.2)

Updates `torch` from 2.6.0 to 2.8.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.6.0...v2.8.0)

Updates `pandas` from 2.2.3 to 2.3.2
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.3...v2.3.2)

Updates `joblib` from 1.4.2 to 1.5.2
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.4.2...1.5.2)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.8.0
  dependency-type: direct:production
  dependency-group: py-dependencies
- dependency-name: torchvision
  dependency-version: 0.23.0
  dependency-type: direct:production
  dependency-group: py-dependencies
- dependency-name: matplotlib
  dependency-version: 3.9.4
  dependency-type: direct:production
  dependency-group: py-dependencies
- dependency-name: pandas
  dependency-version: 2.3.2
  dependency-type: direct:production
  dependency-group: py-dependencies
- dependency-name: torch
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: py-dependencies
- dependency-name: pandas
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: py-dependencies
- dependency-name: joblib
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: py-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 1, 2025

Superseded by #34.

@dependabot dependabot bot closed this Oct 1, 2025
@dependabot dependabot bot deleted the dependabot/pip/covid19/py-dependencies-0539551b59 branch October 1, 2025 10:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant