Skip to content

Bump the pip group across 2 directories with 11 updates#68

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/pip-4506094f83
Closed

Bump the pip group across 2 directories with 11 updates#68
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/pip-4506094f83

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 3, 2024

Bumps the pip group with 11 updates in the / directory:

Package From To
dash 2.3.1 2.15.0
eventlet 0.30.2 0.35.2
flask 2.1.1 2.2.5
flask-cors 3.0.10 4.0.0
numpy 1.21.5 1.22.0
setuptools 61.2.0 65.5.1
torch 1.9.0 1.13.1
tqdm 4.64.0 4.66.3
transformers 4.21.0 4.38.0
werkzeug 2.1.1 2.3.8
gevent 22.10.2 23.9.0

Bumps the pip group with 4 updates in the /external_apps/webex_bot directory: numpy, torch, tqdm and transformers.

Updates dash from 2.3.1 to 2.15.0

Release notes

Sourced from dash's releases.

Dash v2.15.0

Added

  • #2695 Adds triggered_id to dash_clientside.callback_context. Fixes #2692
  • #2723 Improve dcc Slider/RangeSlider tooltips. Fixes #1846
    • Add tooltip.template a string for the format template, {value} will be formatted with the actual value.
    • Add tooltip.style a style object to give to the div of the tooltip.
    • Add tooltip.transform a reference to a function in the window.dccFunctions namespace.
  • #2732 Add special key _dash_error to setProps, allowing component developers to send error without throwing in render. Usage props.setProps({_dash_error: new Error("custom error")})

Fixed

  • #2732 Sanitize html props that are vulnerable to xss vulnerability if user data is inserted. Fix Validate url to prevent XSS attacks #2729

Changed

  • #2652 dcc.Clipboard supports htm_content and triggers a copy to clipboard when n_clicks are changed
  • #2721 Remove ansi2html, fixes #2613

Dash v2.14.2

Fixed

  • #2700 Fix _allow_dynamic_callbacks for newly-added components.

Dash v2.14.1

Fixed

  • #2672 Fix get_caller_name in case the source is not available.

Changed

  • #2674 Raise flask & werkzeug limits to <3.1

Dash v2.14.0

Fixed

  • #2634 Fix deprecation warning on pkg_resources, fix #2631

Changed

  • #2635 Get proper app module name, remove need to give __name__ to Dash constructor.

Added

  • #2647 routing_callback_inputs allowing to pass more Input and/or State arguments to the pages routing callback
  • #2649 Add _allow_dynamic_callbacks, register new callbacks inside other callbacks. WARNING: dynamic callback creation can be dangerous, use at you own risk. It is not intended for use in a production app, multi-user or multiprocess use as it only works for a single user.

Dash v2.13.0

Changed

  • #2610 Load plotly.js bundle/version from plotly.py

... (truncated)

Changelog

Sourced from dash's changelog.

[2.15.0] - 2024-01-31

Added

  • #2695 Adds triggered_id to dash_clientside.callback_context. Fixes #2692
  • #2723 Improve dcc Slider/RangeSlider tooltips. Fixes #1846
    • Add tooltip.template a string for the format template, {value} will be formatted with the actual value.
    • Add tooltip.style a style object to give to the div of the tooltip.
    • Add tooltip.transform a reference to a function in the window.dccFunctions namespace.
  • #2732 Add special key _dash_error to setProps, allowing component developers to send error without throwing in render. Usage props.setProps({_dash_error: new Error("custom error")})

Fixed

  • #2732 Sanitize html props that are vulnerable to xss vulnerability if user data is inserted. Fix Validate url to prevent XSS attacks #2729

Changed

  • #2652 dcc.Clipboard supports htm_content and triggers a copy to clipboard when n_clicks are changed
  • #2721 Remove ansi2html, fixes #2613

[2.14.2] - 2023-11-27

Fixed

  • #2700 Fix _allow_dynamic_callbacks for newly-added components.

[2.14.1] - 2023-10-26

Fixed

  • #2672 Fix get_caller_name in case the source is not available.

Changed

  • #2674 Raise flask & werkzeug limits to <3.1

[2.14.0] - 2023-10-11

Fixed

  • #2634 Fix deprecation warning on pkg_resources, fix #2631

Changed

  • #2635 Get proper app module name, remove need to give __name__ to Dash constructor.

Added

  • #2647 routing_callback_inputs allowing to pass more Input and/or State arguments to the pages routing callback
  • #2649 Add _allow_dynamic_callbacks, register new callbacks inside other callbacks. WARNING: dynamic callback creation can be dangerous, use at you own risk. It is not intended for use in a production app, multi-user or multiprocess use as it only works for a single user.

... (truncated)

Commits

Updates eventlet from 0.30.2 to 0.35.2

Changelog

Sourced from eventlet's changelog.

0.35.2

0.35.1

0.35.0

0.34.3

0.34.2

... (truncated)

Commits

Updates flask from 2.1.1 to 2.2.5

Release notes

Sourced from flask's releases.

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

2.2.4

This is a fix release for the 2.2.x release branch.

2.2.3

This is a fix release for the 2.2.x release branch.

2.2.2

This is a fix release for the 2.2.0 feature release.

2.2.1

This is a fix release for the 2.2.0 feature release.

2.2.0

This is a feature release, which includes new features and removes previously deprecated code. The 2.2.x branch is now the supported bug fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

2.1.3

2.1.2

This is a fix release for the 2.1.0 feature release.

Changelog

Sourced from flask's changelog.

Version 2.2.5

Released 2023-05-02

  • Update for compatibility with Werkzeug 2.3.3.
  • Set Vary: Cookie header when the session is accessed, modified, or refreshed.

Version 2.2.4

Released 2023-04-25

  • Update for compatibility with Werkzeug 2.3.

Version 2.2.3

Released 2023-02-15

  • Autoescape is enabled by default for .svg template files. :issue:4831
  • Fix the type of template_folder to accept pathlib.Path. :issue:4892
  • Add --debug option to the flask run command. :issue:4777

Version 2.2.2

Released 2022-08-08

  • Update Werkzeug dependency to >= 2.2.2. This includes fixes related to the new faster router, header parsing, and the development server. :pr:4754
  • Fix the default value for app.env to be "production". This attribute remains deprecated. :issue:4740

Version 2.2.1

Released 2022-08-03

  • Setting or accessing json_encoder or json_decoder raises a deprecation warning. :issue:4732

Version 2.2.0

... (truncated)

Commits

Updates flask-cors from 3.0.10 to 4.0.0

Release notes

Sourced from flask-cors's releases.

Release 4.0.0

What's Changed

New Contributors

Full Changelog: corydolphin/flask-cors@3.1.01...v4.0.0

3.1.01

What's Changed

New Contributors

Full Changelog: corydolphin/flask-cors@3.0.10...3.1.01

Changelog

Sourced from flask-cors's changelog.

4.0.0

3.1.01

Commits

Updates numpy from 1.21.5 to 1.22.0

Release notes

Sourced from numpy's releases.

v1.22.0

NumPy 1.22.0 Release Notes

NumPy 1.22.0 is a big release featuring the work of 153 contributors spread over 609 pull requests. There have been many improvements, highlights are:

  • Annotations of the main namespace are essentially complete. Upstream is a moving target, so there will likely be further improvements, but the major work is done. This is probably the most user visible enhancement in this release.
  • A preliminary version of the proposed Array-API is provided. This is a step in creating a standard collection of functions that can be used across application such as CuPy and JAX.
  • NumPy now has a DLPack backend. DLPack provides a common interchange format for array (tensor) data.
  • New methods for quantile, percentile, and related functions. The new methods provide a complete set of the methods commonly found in the literature.
  • A new configurable allocator for use by downstream projects.

These are in addition to the ongoing work to provide SIMD support for commonly used functions, improvements to F2PY, and better documentation.

The Python versions supported in this release are 3.8-3.10, Python 3.7 has been dropped. Note that 32 bit wheels are only provided for Python 3.8 and 3.9 on Windows, all other wheels are 64 bits on account of Ubuntu, Fedora, and other Linux distributions dropping 32 bit support. All 64 bit wheels are also linked with 64 bit integer OpenBLAS, which should fix the occasional problems encountered by folks using truly huge arrays.

Expired deprecations

Deprecated numeric style dtype strings have been removed

Using the strings "Bytes0", "Datetime64", "Str0", "Uint32", and "Uint64" as a dtype will now raise a TypeError.

(gh-19539)

Expired deprecations for loads, ndfromtxt, and mafromtxt in npyio

numpy.loads was deprecated in v1.15, with the recommendation that users use pickle.loads instead. ndfromtxt and mafromtxt were both deprecated in v1.17 - users should use numpy.genfromtxt instead with the appropriate value for the usemask parameter.

(gh-19615)

... (truncated)

Commits

Updates setuptools from 61.2.0 to 65.5.1

Release notes

Sourced from setuptools's releases.

v65.5.1

No release notes provided.

v65.5.0

No release notes provided.

v65.4.1

No release notes provided.

v65.4.0

No release notes provided.

v65.3.0

No release notes provided.

v65.2.0

No release notes provided.

v65.1.1

No release notes provided.

v65.1.0

No release notes provided.

v65.0.2

No release notes provided.

v65.0.1

No release notes provided.

v65.0.0

No release notes provided.

v64.0.3

No release notes provided.

v64.0.2

No release notes provided.

v64.0.1

No release notes provided.

v64.0.0

No release notes provided.

v63.4.3

No release notes provided.

v63.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from setuptools's changelog.

v65.5.1

Misc

  • #3638: Drop a test dependency on the mock package, always use :external+python:py:mod:unittest.mock -- by :user:hroncok
  • #3659: Fixed REDoS vector in package_index -- by :user:SCH227

v65.5.0

Changes

  • #3624: Fixed editable install for multi-module/no-package src-layout projects.
  • #3626: Minor refactorings to support distutils using stdlib logging module.

Documentation changes

  • #3419: Updated the example version numbers to be compliant with PEP-440 on the "Specifying Your Project’s Version" page of the user guide.

Misc

  • #3569: Improved information about conflicting entries in the current working directory and editable install (in documentation and as an informational warning).
  • #3576: Updated version of validate_pyproject.

v65.4.1

Misc

v65.4.0

Changes

v65.3.0

... (truncated)

Commits

Updates torch from 1.9.0 to 1.13.1

Release notes

Sourced from torch's releases.

PyTorch 1.13.1 Release, small bug fix release

This release is meant to fix the following issues (regressions / silent correctness):

  • RuntimeError by torch.nn.modules.activation.MultiheadAttention with bias=False and batch_first=True #88669
  • Installation via pip on Amazon Linux 2, regression #88869
  • Installation using poetry on Mac M1, failure #88049
  • Missing masked tensor documentation #89734
  • torch.jit.annotations.parse_type_line is not safe (command injection) #88868
  • Use the Python frame safely in _pythonCallstack #88993
  • Double-backward with full_backward_hook causes RuntimeError #88312
  • Fix logical error in get_default_qat_qconfig #88876
  • Fix cuda/cpu check on NoneType and unit test #88854 and #88970
  • Onnx ATen Fallback for BUILD_CAFFE2=0 for ONNX-only ops #88504
  • Onnx operator_export_type on the new registry #87735
  • torchrun AttributeError caused by file_based_local_timer on Windows #85427

The release tracker should contain all relevant pull requests related to this release as well as links to related issues

PyTorch 1.13: beta versions of functorch and improved support for Apple’s new M1 chips are now available

Pytorch 1.13 Release Notes

  • Highlights
  • Backwards Incompatible Changes
  • New Features
  • Improvements
  • Performance
  • Documentation
  • Developers

Highlights

We are excited to announce the release of PyTorch 1.13! This includes stable versions of BetterTransformer. We deprecated CUDA 10.2 and 11.3 and completed migration of CUDA 11.6 and 11.7. Beta includes improved support for Apple M1 chips and functorch, a library that offers composable vmap (vectorization) and autodiff transforms, being included in-tree with the PyTorch release. This release is composed of over 3,749 commits and 467 contributors since 1.12.1. We want to sincerely thank our dedicated community for your contributions.

Summary:

  • The BetterTransformer feature set supports fastpath execution for common Transformer models during Inference out-of-the-box, without the need to modify the model. Additional improvements include accelerated add+matmul linear algebra kernels for sizes commonly used in Transformer models and Nested Tensors is now enabled by default.

  • Timely deprecating older CUDA versions allows us to proceed with introducing the latest CUDA version as they are introduced by Nvidia®, and hence allows support for C++17 in PyTorch and new NVIDIA Open GPU Kernel Modules.

  • Previously, functorch was released out-of-tree in a separate package. After installing PyTorch, a user will be able to import functorch and use functorch without needing to install another package.

  • PyTorch is offering native builds for Apple® silicon machines that use Apple's new M1 chip as a beta feature, providing improved support across PyTorch's APIs.

Stable Beta Prototype
Better TransformerCUDA 10.2 and 11.3 CI/CD Deprecation Enable Intel® VTune™ Profiler's Instrumentation and Tracing Technology APIsExtend NNC to support channels last and bf16Functorch now in PyTorch Core LibraryBeta Support for M1 devices Arm® Compute Library backend support for AWS Graviton CUDA Sanitizer

You can check the blogpost that shows the new features here.

Backwards Incompatible changes

... (truncated)

Changelog

Sourced from torch's changelog.

Releasing PyTorch

Release Compatibility Matrix

Following is the Release Compatibility Matrix for PyTorch releases:

... (truncated)

Commits

Updates tqdm from 4.64.0 to 4.66.3

Release notes

Sourced from tqdm's releases.

tqdm v4.66.3 stable

tqdm v4.66.2 stable

  • pandas: add DataFrame.progress_map (#1549)
  • notebook: fix HTML padding (#1506)
  • keras: fix resuming training when verbose>=2 (#1508)
  • fix format_num negative fractions missing leading zero (#1548)
  • fix Python 3.12 DeprecationWarning on import (#1519)
  • linting: use f-strings (#1549)
  • update tests (#1549)
  • CI: bump actions (#1549)

tqdm v4.66.1 stable

  • fix utils.envwrap types (#1493 <- #1491, #1320 <- #966, #1319)
    • e.g. cloudwatch & kubernetes workaround: export TQDM_POSITION=-1
  • drop mentions of unsupported Python versions

tqdm v4.66.0 stable

  • environment variables to override defaults (TQDM_*) (#1491 <- #1061, #950 <- #614, #1318, #619, #612, #370)
    • e.g. in CI jobs, export TQDM_MININTERVAL=5 to avoid log spam
    • add tests & docs for tqdm.utils.envwrap
  • fix & update CLI completion
  • fix & update API docs
  • minor code tidy: replace os.path => pathlib.Path
  • fix docs image hosting
  • release with CI bot account again (cli/cli#6680)

tqdm v4.65.2 stable

  • exclude examples from distributed wheel (#1492)

tqdm v4.65.1 stable

  • migrate setup.{cfg,py} => pyproject.toml (

@dependabot
Bump the pip group across 2 directories with 11 updates
9e98dec 
Bumps the pip group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dash](https://github.com/plotly/dash) | `2.3.1` | `2.15.0` |
| [eventlet](https://github.com/eventlet/eventlet) | `0.30.2` | `0.35.2` |
| [flask](https://github.com/pallets/flask) | `2.1.1` | `2.2.5` |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `3.0.10` | `4.0.0` |
| [numpy](https://github.com/numpy/numpy) | `1.21.5` | `1.22.0` |
| [setuptools](https://github.com/pypa/setuptools) | `61.2.0` | `65.5.1` |
| [torch](https://github.com/pytorch/pytorch) | `1.9.0` | `1.13.1` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.64.0` | `4.66.3` |
| [transformers](https://github.com/huggingface/transformers) | `4.21.0` | `4.38.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `2.1.1` | `2.3.8` |
| [gevent](https://github.com/gevent/gevent) | `22.10.2` | `23.9.0` |

Bumps the pip group with 4 updates in the /external_apps/webex_bot directory: [numpy](https://github.com/numpy/numpy), [torch](https://github.com/pytorch/pytorch), [tqdm](https://github.com/tqdm/tqdm) and [transformers](https://github.com/huggingface/transformers).


Updates `dash` from 2.3.1 to 2.15.0
- [Release notes](https://github.com/plotly/dash/releases)
- [Changelog](https://github.com/plotly/dash/blob/dev/CHANGELOG.md)
- [Commits](plotly/dash@v2.3.1...v2.15.0)

Updates `eventlet` from 0.30.2 to 0.35.2
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](eventlet/eventlet@v0.30.2...v0.35.2)

Updates `flask` from 2.1.1 to 2.2.5
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@2.1.1...2.2.5)

Updates `flask-cors` from 3.0.10 to 4.0.0
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@3.0.10...4.0.0)

Updates `numpy` from 1.21.5 to 1.22.0
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.21.5...v1.22.0)

Updates `setuptools` from 61.2.0 to 65.5.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v61.2.0...v65.5.1)

Updates `torch` from 1.9.0 to 1.13.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v1.9.0...v1.13.1)

Updates `tqdm` from 4.64.0 to 4.66.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.64.0...v4.66.3)

Updates `transformers` from 4.21.0 to 4.38.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.21.0...v4.38.0)

Updates `werkzeug` from 2.1.1 to 2.3.8
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@2.1.1...2.3.8)

Updates `gevent` from 22.10.2 to 23.9.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@22.10.2...23.9.0)

Updates `numpy` from 1.21.5 to 1.22.0
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.21.5...v1.22.0)

Updates `torch` from 1.9.0 to 1.13.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v1.9.0...v1.13.1)

Updates `tqdm` from 4.64.0 to 4.66.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.64.0...v4.66.3)

Updates `transformers` from 4.21.0 to 4.38.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.21.0...v4.38.0)

---
updated-dependencies:
- dependency-name: dash
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: eventlet
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: flask
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: flask-cors
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: numpy
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: torch
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: tqdm
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: transformers
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gevent
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: numpy
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: torch
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: tqdm
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: transformers
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner May 3, 2024 20:51
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 3, 2024
@dependabot dependabot bot mentioned this pull request May 3, 2024
Closed
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github May 6, 2024

Superseded by #69.

@dependabot dependabot bot closed this May 6, 2024
@dependabot dependabot bot deleted the dependabot/pip/pip-4506094f83 branch May 6, 2024 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants