Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps the dependencies group with 2 updates: pylint and numpy.

Updates pylint from 4.0.0 to 4.0.2

Commits
  • 0eb92d2 Bump pylint to 4.0.2, update changelog
  • caf95d5 [Backport maintenance/4.0.x] Fix FP for invalid-name for partially uninfera...
  • 4d52769 [Backport maintenance/4.0.x] Ignore unraisable exceptions on stdlib primer (#...
  • 92a13df [Backport maintenance/4.0.x] Fix FP for invalid-name on module-level consta...
  • 4c913c0 [Backport maintenance/4.0.x] Fix FP for invalid-name for TypedDicts (#10674)
  • 9a30350 Bump pylint to 4.0.1, update changelog (#10667)
  • 0ad9d26 [Backport maintenance/4.0.x] Check enums created with functional syntax again...
  • 60a01e4 [Backport maintenance/4.0.x] Improve conditionals (#10655)
  • e60b80e [Backport maintenance/4.0.x] Fix unused-variable false positive with `__all...
  • abcf2ed [Backport maintenance/4.0.x] Fix false-positive for bare-name-capture-pattern...
  • Additional commits viewable in compare view

Updates numpy from 2.3.3 to 2.3.4

Release notes

Sourced from numpy's releases.

v2.3.4 (Oct 15, 2025)

NumPy 2.3.4 Release Notes

The NumPy 2.3.4 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. This release is based on Python 3.14.0 final.

Changes

The npymath and npyrandom libraries now have a .lib rather than a .a file extension on win-arm64, for compatibility for building with MSVC and setuptools. Please note that using these static libraries is discouraged and for existing projects using it, it's best to use it with a matching compiler toolchain, which is clang-cl on Windows on Arm.

(gh-29750)

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • !DWesl
  • Charles Harris
  • Christian Barbia +
  • Evgeni Burovski
  • Joren Hammudoglu
  • Maaz +
  • Mateusz Sokół
  • Matti Picus
  • Nathan Goldbaum
  • Ralf Gommers
  • Riku Sakamoto +
  • Sandeep Gupta +
  • Sayed Awad
  • Sebastian Berg
  • Sergey Fedorov +
  • Warren Weckesser
  • dependabot[bot]

Pull requests merged

A total of 30 pull requests were merged for this release.

  • #29725: MAINT: Prepare 2.3.x for further development
  • #29781: MAINT: Pin some upstream dependences
  • #29782: BLD: enable x86-simd-sort to build on KNL with -mavx512f
  • #29783: BUG: Include python-including headers first (#29281)
  • #29784: TYP: fix np.number and np.*integer method declaration
  • #29785: TYP: mypy 1.18.1

... (truncated)

Commits
  • 1458b9e REL: Prepare for the NumPy 2.3.4 release (#29955)
  • 7583bed Merge pull request #29950 from charris/backport-29885
  • 3186751 Merge pull request #29949 from charris/backport-29948
  • 7fd2ad9 STY: rename @classmethod arg to cls
  • fe8447d MAINT: Simplify string arena growth strategy (#29885)
  • a90f073 Merge pull request #29940 from charris/backport-29937
  • 55d91ab MAINT: Bump pypa/cibuildwheel from 3.1.4 to 3.2.1
  • e2f0383 Merge pull request #29926 from charris/backport-29609
  • b427e83 BUG: fix negative samples generated by Wald distribution (#29609)
  • 36363d6 Merge pull request #29922 from charris/backport-29914
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [pylint](https://github.com/pylint-dev/pylint) and [numpy](https://github.com/numpy/numpy).


Updates `pylint` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.0...v4.0.2)

Updates `numpy` from 2.3.3 to 2.3.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.3.3...v2.3.4)

---
updated-dependencies:
- dependency-name: pylint
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: numpy
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 20, 2025 17:21
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 20, 2025
@jmeridth jmeridth enabled auto-merge (squash) October 20, 2025 17:22
@jmeridth jmeridth merged commit 4264fdd into main Oct 20, 2025
33 checks passed
@jmeridth jmeridth deleted the dependabot/pip/dependencies-a02df682f8 branch October 20, 2025 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant