Build(deps): Bump bokeh from 3.8.2 to 3.9.2

[dependabot]

Bumps bokeh from 3.8.2 to 3.9.2.

Changelog

Sourced from bokeh's changelog.

2026-07-25 3.9.2:

• bugfixes:

  • #11991 [component: server] Authentication doesn't work with prefix? [BUG]
  • #12160 [BUG] theme is not applied to json_item plot
  • #14439 [component: bokehjs] Hiding map tiles attribution when multiple tiles renderer are added to the plot
  • #15006 [component: bokehjs] Python callback updates min interval of y range but fails to update the plot
  • #15026 [component: bokehjs] JS callback does not change the color of arrow head
  • #15031 [component: bokehjs] Cannot recover the original state of the plot after toggling scientific notation
  • #15063 [component: bokehjs] Scientific precision not updating when zooming in
  • #15034 [component: bokehjs] Bokeh Button is still resizable after setting resizable to false with CustomJS
  • #15122 [component: bokehjs] DataRange1d.max_interval runtime update does not recompute the visible range
  • #15135 [component: bokehjs] Primary group labels of a nested categorical axis are not centered
  • #15151 CI failing due to pytest 9.1.0 deprecations
  • #15212 [component: bokehjs] on_transitive_change has a resource leak
  • #15218 [component: tests] Handle precision issue in flaky mercator tick test
  • #15251 [component: bokehjs] bokeh init uses npm incompabible bokehjs version

• tasks:

  • #10067 [BUG] _line_stack() doesn't accept np.ndarray in stackers argument
  • #13177 Remove message "User authentication hooks NOT provided (default user enabled)"
  • #14026 [component: docs] Update environment variables section in dev docs
  • #14689 [component: docs] Document caveats of visual integration tests in bokehjs
  • #15120 [component: bokehjs] Axis.fixed_location string value on numeric range can throw UnreachableError during initial render
  • #15125 [component: server] Verify WebSocket token signatures before payload parsing
  • #15234 [component: tests] Fix flaky macos BokehJS Pantool test
  • #15260 [component: examples] Fix/improve faces example
  • #15189 [component: docs] Fix parameter name mismatches in docstrings

2026-06-04 3.9.1:

• bugfixes:
  • #14944 Document().to_json() is not JSON serializable
  • #13477 [component: docs] Dev docs no longer report precise version information
  • #15041 range_padding of y_range is not updated when changed via CustomJS
  • #7297 [component: bokehjs] Invert Colorbar Axis
  • #15004 [component: bokehjs] Cannot update min_border of figure with CustomJS callback
  • #14869 [component: bokehjs] BoxAnnotation shows resize cursor by default
  • #8787 [component: bokehjs] vline hover misses some multi-lines
  • #13838 [BUG] Using array/list in line_dash for hspan doesn't work
  • #13509 [component: bokehjs] [BUG] Incorrectly formatted ticks with %N format when time is older than the Epoch
  • #14665 [component: bokehjs] [bokeh-3.8.0.min.js:405] Uncaught (in promise) RangeError: Maximum call stack size exceeded
  • #14491 [component: bokehjs] Legends are not synced with glyph visibility state
  • #14741 [component: bokehjs] Possible regression in muting of legend entries since v3.7.0
  • #14856 [component: bokehjs] Patches hover tooltip triggers inside holes (hit-testing doesn't account for NaN-separated holes)
  • #14855 [component: bokehjs] Canvas Patch fill doesn't respect holes (nonzero fill rule instead of evenodd)
  • #15080 [component: bokehjs] Bokeh plot frame height does not update when changed via slider
  • #15015 [component: bokehjs] Update of num_minor_ticks does not trigger a visual update of the plot
  • #14907 NaT is encoded as float(nan) by the serializer
  • #15116 [component: docs] Documentation of enums is broken in 3.10 branch

... (truncated)

Commits

• 1605765 Deployment updates for release 3.9.2
• 5fe45c9 Backports for 3.9.2 (#15264)
• 0764cdd Merge deployment staging branch staging-3.9.1
• 0d983b5 Deployment updates for release 3.9.1
• 808d988 Verify switcher.json after updating it in release automation (#15132)
• c7cb2d9 Merge pull request #15089 from bokeh/mattpap/3.9.1_backports
• b9c7c97 Add release notes
• 3907ae8 Resolve npm audit's complaints
• bfd0e34 Update visual baselines
• 2d1718c Restore Python 3.10 compatibility
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)