chore(deps): bump the core group across 1 directory with 7 updates

[dependabot]

Bumps the core group with 7 updates in the / directory:

Package	From	To
cachetools	6.2.1	6.2.4
matplotlib	3.10.7	3.10.8
numdifftools	0.9.41	0.9.42
numpy	2.3.4	2.3.5
pydantic	2.12.3	2.12.5
rapidfuzz	3.14.1	3.14.3
scipy	1.16.2	1.16.3

Updates cachetools from 6.2.1 to 6.2.4

Changelog

Sourced from cachetools's changelog.

v6.2.4 (2025-12-15)

• Fix license information displayed on PyPI be using an updated version of twine for uploading.

v6.2.3 (2025-12-12)

• Improve documentation regarding @cachedmethod with condition parameter.

• Minor style and readability improvements.

• Modernize build environment.

• Update CI environment.

v6.2.2 (2025-11-13)

• Minor improvements from GitHub Copilot code review.

• Improve documentation.

Commits

• 9983ef8 Bump version for uploading with updated twine.
• c935468 Release v6.2.3.
• 94d1099 Prepare v6.2.3.
• af8b7d4 Fix #372: Convert setup.cfg to pyproject.toml.
• 20b8a19 Fix #370: Mention that using @​cachedmethod with condition requires self to be...
• 116fb4c Minor style and readability improvements.
• 96546ea Bump actions/checkout from 5.0.0 to 6.0.0
• 0106cc1 Bump actions/setup-python from 6.0.0 to 6.1.0
• 4ee2600 Release v6.2.2.
• f1cec39 Minor improvements from GitHub Copilot code review.
• Additional commits viewable in compare view

Updates matplotlib from 3.10.7 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

Commits

• 1392cbe REL: v3.10.8
• 0b9ebb3 Doc release prep v3.10.8
• bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
• 86b38d3 Github stats v3.10.8
• 9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
• d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
• 799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
• 134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
• 5b8e219 TST: Run macosx backends in a subprocess
• 878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
• Additional commits viewable in compare view

Updates numdifftools from 0.9.41 to 0.9.42

Changelog

Sourced from numdifftools's changelog.

[0.9.42]

🐛 Bug Fixes

• Removed deprecated "cross_platform" from pdm.lock
• Updated doctests.
• Updated required modules for doc-generation.
• Skip two tests not working on python=3.14 in test_nd_algopy.
• Replaced trapz with trapezoid in test_extrapolation.py and extrapolation.py.
• The function approx_fprime_cs now handles matrix valued functions correctly in nd_statsmodels.py.
• _Limit._add_error_to_outliers method can now handle complex numbers.

📚 Documentation

• Updated configuration for docs generation.
• Updated documentation of dea3.

⚙️ Miscellaneous Tasks

• Added .readthedocs.yml, cliff.toml, pyproject.toml.
• Updated pyproject.toml and github workflows.
• Calculate the Hessian of functions with n-D output.
• Deleted obsolete files.
• Added prepare-release script

Commits

• 51dfaed Release v0.9.42
• 06840b4 Prepare for release 0.9.42
• 76cdf29 chore (pyproject.toml): Added prepare-release script
• 24f0d95 fix (pdm.lock) : Removed deprecated "cross_platform"
• a7c545c feat (pyproject.toml) : Add doctest script
• d4922da fix : Updated doctests
• 1868564 chore (docs/conf.py) : Updated configuration for docs generation.
• 5f1abbb fix (docs/requirements.txt): Updated required modules for doc-generation.
• c3d758c style (test_nd_algopy.py): Style nitpicks.
• c347540 chore (workflows/test.yml) : Integrated coverage reporting with testing
• Additional commits viewable in compare view

Updates numpy from 2.3.4 to 2.3.5

Release notes

Sourced from numpy's releases.

2.3.5 (Nov 16, 2025)

NumPy 2.3.5 Release Notes

The NumPy 2.3.5 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14.

Contributors

A total of 10 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Aaron Kollasch +
• Charles Harris
• Joren Hammudoglu
• Matti Picus
• Nathan Goldbaum
• Rafael Laboissière +
• Sayed Awad
• Sebastian Berg
• Warren Weckesser
• Yasir Ashfaq +

Pull requests merged

A total of 16 pull requests were merged for this release.

• #29979: MAINT: Prepare 2.3.x for further development
• #30026: SIMD, BLD: Backport FPMATH mode on x86-32 and filter successor...
• #30029: MAINT: Backport write_release.py
• #30041: TYP: Various typing updates
• #30059: BUG: Fix np.strings.slice if stop=None or start and stop >= len...
• #30063: BUG: Fix np.strings.slice if start > stop
• #30076: BUG: avoid negating INT_MIN in PyArray_Round implementation (#30071)
• #30090: BUG: Fix resize when it contains references (#29970)
• #30129: BLD: update scipy-openblas, use -Dpkg_config_path (#30049)
• #30130: BUG: Avoid compilation error of wrapper file generated with SWIG...
• #30157: BLD: use scipy-openblas 0.3.30.7 (#30132)
• #30158: DOC: Remove nonexistent order parameter docs of ma.asanyarray...
• #30185: BUG: Fix check of PyMem_Calloc return value. (#30176)
• #30217: DOC: fix links for newly rebuilt numpy-tutorials site
• #30218: BUG: Fix build on s390x with clang (#30214)
• #30237: ENH: Make FPE blas check a runtime check for all apple arm systems

Commits

• c3d60fc Merge pull request #30238 from charris/prepare-2.3.5
• 11451fa REL: Prepare for the NumPy 2.3.5 release
• eab5bd4 Merge pull request #30237 from charris/backport-30102
• 7cea31a Fixup merge of multiarraymodule.c
• b898173 Update numpy/_core/src/common/blas_utils.h
• f755483 Report FPE ignoring in matmul in show_runtime()
• c47116f Move test to Python
• bd7b93f ooops, needs to be a calloc of course.
• 83a1517 Guard for HAVE_CBLAS and always compile the helpers
• ab680ef ENH: Make FPE blas check a runtime check for all arm systems
• Additional commits viewable in compare view

Updates pydantic from 2.12.3 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

• Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
• Several updates to the documentation by @​Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

• Fix issue with forward references in parent TypedDict classes by @​Viicos in #12427.

  This issue is only relevant on Python 3.14 and greater.

• Exclude fields with exclude_if from JSON Schema required fields by @​Viicos in #12430

• Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @​davidhewitt in pydantic-core#1833.

  This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

• Add type inference for IP address types by @​davidhewitt in pydantic-core#1868.

  The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

• Avoid getting default values from defaultdict by @​davidhewitt in pydantic-core#1853.

  This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

• Fix issue with field serializers on nested typed dictionaries by @​davidhewitt in pydantic-core#1879.

• Add more pydantic-core builds for the three-threaded version of Python 3.14 by @​davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

• Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
• Several updates to the documentation by @​Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

• Fix issue with forward references in parent TypedDict classes by @​Viicos in #12427.

  This issue is only relevant on Python 3.14 and greater.

• Exclude fields with exclude_if from JSON Schema required fields by @​Viicos in #12430

• Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @​davidhewitt in pydantic-core#1833.

  This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

• Add type inference for IP address types by @​davidhewitt in pydantic-core#1868.

  The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

• Avoid getting default values from defaultdict by @​davidhewitt in pydantic-core#1853.

  This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

• Fix issue with field serializers on nested typed dictionaries by @​davidhewitt in pydantic-core#1879.

• Add more pydantic-core builds for the three-threaded version of Python 3.14 by @​davidhewitt in pydantic-core#1864.

Commits

• bd2d0dd Prepare release v2.12.5
• 7d0302e Document security implications when using create_model()
• e9ef980 Fix typo in Standard Library Types documentation
• f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
• a76c1aa Update documentation about JSON Schema
• 8cbc72c Add documentation about custom __init__()
• 99eba59 Add additional test for FieldInfo.get_default()
• c710769 Special case MISSING sentinel in smart_deepcopy()
• 20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
• c86515a Update parts of the model and revalidate_instances documentation
• Additional commits viewable in compare view

Updates rapidfuzz from 3.14.1 to 3.14.3

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.3

Fixed

• add missing pypy and freethreaded linux wheels

Removed

• drop s390x and ppc64le wheels since they are virtually unused and require extremely long to build under emulation

Release 3.14.2

Changed

• upgrade to Cython==3.1.6
• enable free threading

Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.3] - 2025-11-01 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* add missing pypy and freethreaded linux wheels
Removed

• drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^ Changed

* upgrade to ``Cython==3.1.6``
* enable free threading
[3.14.1] - 2025-09-08
^^^^^^^^^^^^^^^^^^^^^
Fixed
* Fully disable line tracing in release builds
[3.14.0] - 2025-08-27

^^^^^^^^^^^^^^^^^^^^^

Changed

</code></pre>

<ul>

<li>upgrade to <code>Cython==3.1.3</code>. This enables compilation with free threaded python.</li>

<li>upgrade to <code>rapidfuzz-cpp==3.3.3</code></li>

</ul>

<p>Added</p>

<pre><code>* add support for freethreaded Python

add python 3.14 wheels

Removed

</code></pre>

<ul>

<li>dropped support for Python3.9</li>

<li>drop 32 bit linux wheels</li>

</ul>

<p>Fixed</p>

<pre><code>* remove unused hook-dirs from pyinstaller config to fix a warning

fixed WRatio for a length ratio of exactly 8.0

[3.13.0] - 2025-04-03

^^^^^^^^^^^^^^^^^^^^^

Added

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/53c66fe97b6d8e8660c2ab150926b998feecd740&quot;&gt;&lt;code&gt;53c66fe&lt;/code&gt;&lt;/a> fix wheels</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/2b0eb7eb68ec79d5f29995d9b3cf7b4627e9f483&quot;&gt;&lt;code&gt;2b0eb7e&lt;/code&gt;&lt;/a> add back missing wheels</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/1e440180bffbc23672b06f4488016ed11644e451&quot;&gt;&lt;code&gt;1e44018&lt;/code&gt;&lt;/a> fix dependency</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/e6d5b674af930f33ede634624190cd95fdd18d55&quot;&gt;&lt;code&gt;e6d5b67&lt;/code&gt;&lt;/a> fix dependency</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f47491f07df591a41058a42017782380b4566992&quot;&gt;&lt;code&gt;f47491f&lt;/code&gt;&lt;/a> fix changelog</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/fe35655f898ba81ff3b2fbea00ee00a2d761bc62&quot;&gt;&lt;code&gt;fe35655&lt;/code&gt;&lt;/a> disable deadline</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/8f9f09bc83b04cf26696f579261a5a7dca59fa35&quot;&gt;&lt;code&gt;8f9f09b&lt;/code&gt;&lt;/a> update version number</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/8ac20f7a5bb0aae54a5dd5ce0f42ac8b62c57bc6&quot;&gt;&lt;code&gt;8ac20f7&lt;/code&gt;&lt;/a> fix free threading compatible tag</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/c5b41aeed205c2ce4cda8c8bba7d5774ca7d0148&quot;&gt;&lt;code&gt;c5b41ae&lt;/code&gt;&lt;/a> add python 3.14 to branchbuild</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/26df40520fd4f583b537b749efaa7a8823c396e7&quot;&gt;&lt;code&gt;26df405&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 5 updates</li>

<li>Additional commits viewable in <a href="https://github.com/rapidfuzz/RapidFuzz/compare/v3.14.1...v3.14.3&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates scipy from 1.16.2 to 1.16.3

Release notes
Sourced from scipy's releases.

SciPy 1.16.3 Release Notes
SciPy 1.16.3 is a bug-fix release with no new features compared to 1.16.2.
Authors

Name (commits)
ChrisAB (1) +
Lucas Colley (1)
Ralf Gommers (3)
Matt Haberland (8)
Nick ODell (2)
Ilhan Polat (1)
Tyler Reddy (28)
Lucas Roberts (2)

A total of 8 people contributed to this release.
People with a "+" by their names contributed a patch for the first time.
This list of names is automatically generated, and may not be fully complete.
The full issue and pull request lists, and the release asset hashes are available
in the associated README.txt file.



Commits

b9105cc REL: 1.16.3 rel commit [wheel build]
4b7699c Merge pull request #23805 from tylerjereddy/treddy_backports_1.16.3
874b75b MAINT: PR 23805 wheel builds [wheel build]
de06a58 DOC: PR 23805 revisions
f642304 TST: linalg.svd: skip on 32-bit due to limited memory
df47908 CI: PR 23805 revisions
f584063 TST: stats.boxcox_llf: bump test tolerance for Accelerate (#23864)
fc60b2f DOC: PR 23805 revisions
0dd12ec BLD: stats.multivariate_normal: silence pythran build warning
d3b1e62 Revert "BLD: stats.multivariate_normal: suppress pythran build warning"
Additional commits viewable in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions