chore(deps): bump the python-dependencies group across 1 directory with 20 updates

[dependabot]

Updates the requirements on fastapi, uvicorn[standard], pydantic-settings, sqlalchemy, alembic, akshare, yfinance, anthropic, apscheduler, feedparser, pandas, lightgbm, openai, pytest, ruff, mypy, pre-commit, mcp, efinance and setuptools to permit the latest version.
Updates fastapi from 0.136.3 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

• 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

• 📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @​tiangolo.

0.141.0

Features

• ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

• 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @​SAURABHSALVE.

Docs

• 📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @​AshNicolus.
• 📝 Add API reference page for fastapi.sse. PR #15930 by @​SAURABHSALVE.

0.140.12

Fixes

• 🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @​Zawwarsami16.

0.140.11

Fixes

• 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

• 🐛 Fix handling sequences with nested Annotated types. PR #14874 by @​YuriiMotov.

Internal

• 🐛 Accept any base test failure as regression. PR #16092 by @​tiangolo.
• 🐛 Preserve pytest exit code in regression check. PR #16091 by @​tiangolo.
• ✅ Test PR regressions against base code. PR #16090 by @​tiangolo.

0.140.9

Fixes

• 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits

• 95f8322 🔖 Release version 0.141.1 (#16106)
• f137944 📝 Update release notes
• d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
• 1d211b9 📝 Update release notes
• 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
• c7e7b65 🔖 Release version 0.141.0 (#16103)
• 6bceb84 📝 Update release notes
• 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
• 628663f 🔖 Release version 0.140.13 (#16096)
• 0b54fd0 📝 Update release notes
• Additional commits viewable in compare view

Updates uvicorn[standard] to 0.52.1

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

• Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

• Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

... (truncated)

Commits

• ee8e45c Version 0.52.1 (#3056)
• b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
• 49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
• 2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
• 8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
• e148451 Handle connection loss during WebSocket write backpressure (#3050)
• e16a69b Add missing write flow control to websockets-sansio (#3048)
• ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

• case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
• Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
• Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

• Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
• PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
• toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
• Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
• GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

• Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
• Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
• Fix AliasPath on nested model fields not JSON-decoding env values (#898).
• Fix case-insensitive matching for optional nested models (#905).
• Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
• Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
• Fix Secret subclasses crashing when loaded from the environment (#920).
• Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
• An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
• NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
• GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
• AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

• Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
• Recommend an async settings loading pattern (#908).
• Clarify behavior when an unprefixed value is present in a dotenv file (#895).
• Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

• Update documentation link for Pydantic settings by @​hramezani in pydantic/pydantic-settings#863
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#865
• docs: clarify environment variable helper descriptions by @​vip892766gma in pydantic/pydantic-settings#867
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#870
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#875
• Skip list_secrets call when case_sensitive=True by @​ecerulm in pydantic/pydantic-settings#862
• GoogleSecretManagerSettingsSource: read project_id from previous sources by @​ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

• f725ca1 Prepare release 2.15.0 (#930)
• 28f35c2 Bump the python-packages group with 4 updates (#929)
• 9056db0 test: move function-local imports to the top of test modules (#927)
• f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
• ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
• 798dcea Bump the python-packages group with 4 updates (#924)
• a190041 Bump the github-actions group with 4 updates (#925)
• 5d93332 Bump the python-packages group with 4 updates (#921)
• d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
• 2256a4e Bump the python-packages group with 3 updates (#915)
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.50 to 2.0.51

Release notes

Sourced from sqlalchemy's releases.

2.0.51

Released: June 15, 2026

orm

• [orm] [bug] Fixed issue where _orm.subqueryload() combined with PropComparator.of_type() and PropComparator.and_() would silently drop the additional filter criteria, causing all related objects to be loaded instead of only those matching the filter. The LoaderCriteriaOption was being constructed against the base entity rather than the effective entity indicated by PropComparator.of_type(). Pull request courtesy Arya Rizky.

  References: #13207

• [orm] [bug] Fixed bug where a failure during tpc_prepare() within _orm.Session.commit() for a two-phase session would raise IllegalStateChangeError instead of the original database exception. The internal _prepare_impl() method's error handler was unable to invoke _orm.SessionTransaction.rollback() due to a state-change guard, preventing proper cleanup and masking the underlying error.

  References: #13356

engine

• [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous column names present in the original CursorResult, causing key-based access on the thawed result to silently return a value instead of raising InvalidRequestError. The SimpleResultMetaData now accepts and propagates ambiguous key information so that frozen, thawed, and pickled results raise consistently for duplicate column names. Pull request courtesy Saurabh Kohli.

  References: #9427

sql

• [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy attribute access through the cached "expected" expression rather than the resolved expression, causing stale closure-bound parameter values to be used when a lambda statement was extended with non-lambda criteria such as an additional .where() clause. Courtesy cjc0013.

  References: #10827

... (truncated)

Commits

• See full diff in compare view

Updates alembic from 1.18.4 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

• [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

  References: #1842

1.19.0

Released: August 4, 2026

changed

• [changed] [installation] Environmental updates:

  -   Trove classifiers now include Python 3.15 which is now part of CI
      integration
  
  
  Python 3.14 is also added to trove classifiers which had been previously
  omitted
  
  
  Implemented PEP 604 style unions in type annotations
  

feature

• [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

  References: #508

bug

... (truncated)

Commits

• See full diff in compare view

Updates akshare from 1.18.64 to 1.18.83

Changelog

Sourced from akshare's changelog.

1.18.83 fix: fix fund_portfolio_hold_em interface

1. 修复 fund_etf_fund_info_em 接口因东方财富历史净值返回体新增字段而触发 Length mismatch 的问题
2. 修复 fund_financial_fund_info_em 接口因 `pageSize=10000` 失效导致返回空数据的问题
3. 修复 fund_graded_fund_info_em 接口因东方财富历史净值返回体新增字段而触发 Length mismatch 的问题

1.18.82 fix: fix fund_portfolio_hold_em interface

1. 修复 fund_portfolio_hold_em 接口因东方财富 `topline=10000` 失效而只能返回首屏摘要持仓的问题
2. 修复 stock_szse_sector_summary 接口在查询深交所尚未发布月份时直接抛出 KeyError 的问题
3. 修复 fund_etf_fund_info_em 接口因东方财富历史净值返回体新增字段而触发 Length mismatch 的问题
4. 修复 fund_financial_fund_info_em 接口因 `pageSize=10000` 失效导致返回空数据的问题
5. 修复 fund_graded_fund_info_em 接口因东方财富历史净值返回体新增字段而触发 Length mismatch 的问题

1.18.81 fix: fix fund_value_estimation_em interface

1. 修复 fund_value_estimation_em 接口在东方财富旧统一估值接口失效后持续返回空结果的问题

1.18.80 fix: fix Xueqiu stock info interfaces

1. 修复 stock_individual_basic_info_xq 系列接口在雪球返回登录态错误时抛出 KeyError 的问题
2. 修复 stock_individual_spot_xq 接口在雪球返回登录态错误时抛出 KeyError 的问题
3. 加固雪球热榜和内部交易接口的异常处理与空结果兜底逻辑

1.18.79 fix: fix amac_aoin_info interface

1. 修复 amac_aoin_info 接口因 AMAC 分页参数变更导致的 JSONDecodeError 问题

1.18.78 fix: fix fund_value_estimation_em interface

1. 修复 fund_value_estimation_em 接口

1.18.77 fix: fix futures_inventory_99 interface

1. 修复 futures_inventory_99 接口

1.18.76 fix: fix Python 3.9 compatibility regression

1. 修复 fund_portfolio_em 模块中`dict[str, str] | None` 类型注解导致的 Python 3.9 导入报错问题

1.18.75 fix: fix stock_gdfx_free_holding_detail_em interface

1. 修复 stock_gdfx_free_holding_detail_em 接口

1.18.74 fix: fix stock_margin_bse interface

1. 修复 stock_margin_bse 接口

1.18.73 fix: fix stock_sector_fund_flow_rank interface

... (truncated)

Commits

• 5cb11b4 fix(基金, 文档): 升级版本至1.18.83并修复多个基金接口故障 (#7375)
• e977951 fix: 修复基金持仓和深交所行业汇总接口及文档 (#7373)
• c6f7105 fix(fund): 修复 fund_value_estimation_em 接口返回空结果 (#7369)
• 8191507 fix(stock): 修复雪球股票接口的异常处理与登录态问题 (#7368)
• 03600cd fix(fund_amac): 修复amac系列接口分页参数变更导致的解析错误 (#7365)
• 7d4a41f 修复(基金估值接口): 优化fund_value_estimation_em接口空数据处理 (#7363)
• 7d92d19 fix(futures_inventory_99): 修复99期货网大宗商品库存数据接口 (#7360)
• c6ce243 fix(fund_portfolio_em): 修复 Python 3.9 兼容性回归问题 (#7358)
• d0f50ba docs(介绍): 更新文档最后更新时间至2026-07-24 (#7356)
• d0c5932 fix(stock_gdfx_free_holding_detail_em): 修复接口并优化分页参数 (#7355)
• Additional commits viewable in compare view

Updates yfinance from 1.4.1 to 1.5.2

Release notes

Sourced from yfinance's releases.

1.5.2

Fix yfinance breaking with curl_cffi>=0.16

Thanks @​dokson

1.5.1

Version 1.5.0 retracted - I forgot to merge in dev branch

Minor changes

• Handle fundamentals fetch time-out
• Optimise valuation-measures fetch

Patches

• Login, info, price repair

Full changelog #2862

Thanks @​dokson @​avesed @​gyx09212214-prog @​HaozheZhang6 @​parthdongre @​joaopedroassad @​he-yufeng

Changelog

Sourced from yfinance's changelog.

Changelog

Unreleased

Commits

• beac22d Version 1.5.2
• e8f005e Merge pull request #2910 from dokson/fix/curl-cffi-cache-attr-detection
• e5f9079 Fix: don't treat curl_cffi>=0.16 sessions as caching (presence of .cache != a...
• 38c73ce Version 1.5.1
• 9eef6c1 Merge pull request #2862 from ranaroussi/dev
• 4fedcfd docs: changelog entry for 125b12e
• 80a768c docs: changelog entry for 15ba022
• 33cb3ab Merge branch 'main' into dev
• f10e765 docs: changelog entry for b375cd8
• b375cd8 Version 1.5.0
• Additional commits viewable in compare view

Updates anthropic from 0.109.1 to 0.121.0

Release notes

Sourced from anthropic's releases.

v0.121.0

0.121.0 (2026-08-07)

Full Changelog: v0.120.2...v0.121.0

Features

• api: add mid-conversation-tool-changes-2026-07-01 beta (c7d1531)
• api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (193bae0)

Chores

• api: remove retired Claude Opus 4.1 models (5352a33)
• docs: small updates to descriptions (b8d4176)
• docs: updates to a few documentation strings (3a5dd69)
• ensure all dependencies have major version constraints (#274) (d52999b)

v0.120.2

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

• mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

v0.120.1

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

• mcp: pin mcp extra to <2 (#1783) (fb66371)

v0.120.0

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

• api: add claude-opus-5 model (bf4e31c)
• api: add tool addition/removal blocks and tool_change events (bf4e31c)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

v0.119.0

0.119.0 (2026-07-23)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.121.0 (2026-08-07)

Full Changelog: v0.120.2...v0.121.0

Features

• api: add mid-conversation-tool-changes-2026-07-01 beta (c7d1531)
• api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (193bae0)

Chores

• api: remove retired Claude Opus 4.1 models (5352a33)
• docs: small updates to descriptions (b8d4176)
• docs: updates to a few documentation strings (3a5dd69)
• ensure all dependencies have major version constraints (#274) (d52999b)

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

• mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

• mcp: pin mcp extra to <2 (#1783) (fb66371)

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

• api: add claude-opus-5 model (bf4e31c)
• api: add tool addition/removal blocks and tool_change events (bf4e31c)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

• api: add new stop reason 'model_context_window_exceeded' (d983cde)

... (truncated)

Commits

• 204fa8e release: 0.121.0
• 284a537 feat(api): add support for session budgets, advisor tool, pinned inference lo...
• de568f2 chore(docs): updates to a few documentation strings
• e271587 chore(api): remove retired Claude Opus 4.1 models
• 3d4115e chore: ensure all dependencies have major version constraints (#274)
• 5840eaa chore(docs): small updates to descriptions
• b4cfb5e feat(api): add mid-conversation-tool-changes-2026-07-01 beta
• f5c30d0 release: 0.120.2
• 8b327c3 fix(mcp): support mcp sdk v2 alongside v1 (#300)
• 3b65b23 release: 0.120.1
• Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3

Release notes

Sourced from apscheduler's releases.

3.11.3

• Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
• Fixed imported jobs missing their scheduler and job store links (#1119)

Commits

• 4308ec9 Added the release version
• ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
• 36936e9 Updated actions
• c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
• 1b782c9 Fixed fixture coreapp not found
• dc3dde4 Test against PySide6 on all Python versions
• 18a6f6b Fixed imported jobs missing their scheduler and job store links
• 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
• 0636bf4 Added Python 3.14 to the test matrix
• 3eb3de8 Fixed bad use of pytest.raises()
• Additional commits viewable in compare view

Updates feedparser from 6.0.12 to 6.0.14

Release notes

Sourced from feedparser's releases.

v6.0.14

Changed

• Upgrade to feedparser-sgmllib 2.0.0. (#585)

v6.0.13

Python support

• Drop support for Python 3.9 and lower.

Changed

• Migrate from sgmllib3k to feedparser-sgmllib.

Fixed

• Resolve package build warnings.

Changelog

Sourced from feedparser's changelog.

6.0.14 - 2026-07-30

• Upgrade to feedparser-sgmllib 2.0.0. (#585)

6.0.13 - 2026-07-28

Python support

• Drop support for Python 3.9 and lower.

Changed

• Migrate from sgmllib3k to feedparser-sgmllib.

Fixed

• Resolve package build warnings.

Commits

• 14425f6 Hotfix v6.0.14 (#586)
• 64757d0 Update project metadata
• 67ad0ed Upgrade to feedparser-sgmllib 2.x
• c1c7d72 Hotfix 6.0.13 (#582)
• 587b7d6 Update project metadata
• 5eb46d2 Migrate from sgmllib3k to feedparser-sgmllib
• See full diff in compare view

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• e68db09 RLS: 3.0.5
• 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
• 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
• bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
• 8188eb1 RLS: 3.0.4 (#66079)
• bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
• 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
• 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
• 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
• f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
• Additional commits viewable in compare view

Updates lightgbm from 4.6.0 to 4.7.0

Release notes

Sourced from lightgbm's releases.

v4.7.0

Highlights

The Python package now supports polars inputs, thanks to narwhals. Thanks to @​borchero for the main implementation and to everyone who contributed design work, especially on lightgbm-org/LightGBM#6204 (@​maxzw @​detrin @​jmoralez @​lcrmorin @​Ic3fr0g @​MarcoGorelli @​kylebarron @​vyasr).

Significantly improved GPU support including the first ROCm builds (lightgbm-org/LightGBM#6086) and multi-GPU support for NVIDIA GPUs via NCCL (lightgbm-org/LightGBM#6138). (@​jeffdaily @​shiyu1994 @​StrikerRUS)

Improvements to distributed training / Dask. Lots of bugfixes in this area, still ongoing work, thanks especially to @​wagner-austin for all the help.

Some organizational changes. The project has changed GitHub orgs (Microsoft -> lightgbm-org) and default branch names (master -> main).

Changes

💡 New Features

• [python-package] allow access to eval result attributes by name @​jameslamb (#7161)
• [python-package] Allow to pass Arrow array & Polars series as position @​maxzw (#7260)
• [c++][python-package] Leverage Arrow PyCapsule Interface for Arrow interoperability (including polars support) @​borchero (#7275)
• [python-package] publish nightlies to pypi.anaconda.org @​jameslamb (#7245)
• [python-package] Add decision_function() to LGBMClassifier @​CoderWota (#7159)
• [CUDA] Multi-GPU for CUDA Version @​shiyu1994 (#6138)
• [python-package] scikit-learn fit() methods: add eval_X, eval_y, deprecate eval_set @​lorentzenchr (#6857)
• [CUDA] Add CUDA version of binary error metric @​nicklamiller (#7070)
• [c++] Add CPU version of standard R-squared metric @​nicklamiller (#7008)
• [python-package] Follow symlinks to lib_lightgbm in library-loading @​gmhewett (#6977)
• [ROCm] add support for ROCm/HIP device @​jeffdaily (#6086)
• [python-package][sklearn] Support PyArrow Table as an input in scikit-learn methods @​StrikerRUS (#6910)
• [ci] [dask] test lightgbm.dask on macOS

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.