Skip to content

Update dependencies and current shared CI workflow - #14

Merged
soodoku merged 6 commits into
mainfrom
dependabot/uv/python-minor-and-patch-1e6cfb594b
Oct 21, 2026
Merged

soodoku merged 6 commits into
mainfrom
dependabot/uv/python-minor-and-patch-1e6cfb594b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Combines the dependency updates with #8 and #9. Advances the shared CI workflow to the current v1 commit, updates setup-uv, explicitly tests Python 3.11–3.14, and patches the audited Pillow vulnerability.

Validation: 47 package tests passed locally on both Python 3.11 and 3.13; two experiment tests passed. Also passed local lint, type checking, docstrings, package tests, distribution build, formal theory checks, generated-result consistency checks, and the full LaTeX paper build. Research artifacts are unchanged.

Bumps [gojiplus/py-canon/.github/workflows/reusable-ci.yml](https://github.com/gojiplus/py-canon) from 6381ef50660166e3836a2e687f81b5f9b5640b2e to 5171a442a11b1e45820b092b09af9af37efc5f9d.
- [Release notes](https://github.com/gojiplus/py-canon/releases)
- [Changelog](https://github.com/gojiplus/py-canon/blob/main/CHANGELOG.md)
- [Commits](gojiplus/py-canon@6381ef5...5171a44)

---
updated-dependencies:
- dependency-name: gojiplus/py-canon/.github/workflows/reusable-ci.yml
  dependency-version: 5171a442a11b1e45820b092b09af9af37efc5f9d
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the actions-minor-and-patch group with 1 update in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `astral-sh/setup-uv` from 10.1.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@bec219d...1c37ad0)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the python-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.11.1` | `3.11.2` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.5` | `3.0.6` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.9.0` | `1.9.1` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.19.0` | `6.20.0` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.17.0` |



Updates `matplotlib` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2)

Updates `pandas` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.5...v3.0.6)

Updates `scikit-learn` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.9.0...1.9.1)

Updates `pypdf` from 6.19.0 to 6.20.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.19.0...6.20.0)

Updates `pyright` from 1.1.411 to 1.1.414
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414)

Updates `ruff` from 0.16.4 to 0.17.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.17.0)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pandas
  dependency-version: 3.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: scikit-learn
  dependency-version: 1.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pypdf
  dependency-version: 6.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pyright
  dependency-version: 1.1.414
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 19, 2026
…plus/py-canon/dot-github/workflows/reusable-ci.yml-5171a442a11b1e45820b092b09af9af37efc5f9d' and 'origin/dependabot/github_actions/actions-minor-and-patch-3a0b6790fd' into sweep-queue-shift
@soodoku soodoku changed the title Bump the python-minor-and-patch group across 1 directory with 6 updates Update dependencies and current shared CI workflow Oct 21, 2026
@soodoku
soodoku merged commit 64ee458 into main Oct 21, 2026
11 checks passed
@soodoku
soodoku deleted the dependabot/uv/python-minor-and-patch-1e6cfb594b branch October 21, 2026 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant