Skip to content

build(deps): update skops requirement from <0.14.0,>=0.13.0 to >=0.13.0,<0.15.0#1266

Open
dependabot[bot] wants to merge 2 commits into
devfrom
dependabot/pip/skops-gte-0.13.0-and-lt-0.15.0
Open

build(deps): update skops requirement from <0.14.0,>=0.13.0 to >=0.13.0,<0.15.0#1266
dependabot[bot] wants to merge 2 commits into
devfrom
dependabot/pip/skops-gte-0.13.0-and-lt-0.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on skops to permit the latest version.

Changelog

Sourced from skops's changelog.

.. include:: _authors.rst

.. _changelog:

skops Changelog

.. contents:: Table of Contents :depth: 1 :local:

v0.15

v0.14

  • Trust internal scikit-learn types needed by GradientBoosting and HistGradientBoosting models, so they no longer surface as untrusted types. :pr:513 by :user:cakedev0 <cakedev0> and Adrin Jalali_.

v0.13

  • Card now requires a new parameter, allow_pickle, to call get_model with models that are not .skops files. This change is to mitigate security risks associated with pickles. :pr:485 by Io_no_.

v0.12

  • huggingface_hub dependency is now optional. :pr:462 by Adrin Jalali_.
  • Objects' __reduce__ is used when the output of it is of the form (type, (constructor_args,) where type is the same as the type(obj). :pr:467 by Adrin Jalali_.
  • MethodNode and OperatorNode have a hardened audit now, removing certain security vulnerabilities. :pr:482 by Adrin Jalali_.

v0.11

  • Correctly restore default_factory when saving and loading a defaultdict. :pr:433 by Adrin Jalali_.
  • Support more loss functions implemented in Cython in scikit-learn. :pr:453 by Adrin Jalali_.
  • Fixes for scikit-learn=1.6 release. :pr:447 by :user:Tamara Atanasoska <TamaraAtanasoska>.

v0.10

  • Removes Pythn 3.8 support and adds Python 3.12 Support :pr:418 by :user:Thomas Lazarus <lazarust>.
  • Removes a shortcut to add sklearn-intelex as a not dependency. :pr:420 by :user:Thomas Lazarus < lazarust > .
  • trusted=True is now removed from skops.io.load and skops.io.loads.

... (truncated)

Commits
  • fd19593 update version
  • e74ebfb Trust internal scikit-learn types needed for GB/HGB models (#513)
  • 2c42dbb MNT: Update type hints to modern Python 3.10+ syntax (#511)
  • 7969d5d DOC refresh docs to represent current status more clearly (#512)
  • 1576473 Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.14.0 (#510)
  • 2639483 Bump prefix-dev/setup-pixi from 0.9.3 to 0.9.5 (#509)
  • 2746277 Maint: Change development status from Planning to Beta (#500)
  • 0e1c43b Fix a security issue in LossNode (#506)
  • b5861ce Bump codecov/codecov-action from 5 to 6 (#507)
  • 9e225a1 MNT Fix CI issue from new scikit-learn==1.8.0 (#503)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [skops](https://github.com/skops-dev/skops) to permit the latest version.
- [Release notes](https://github.com/skops-dev/skops/releases)
- [Changelog](https://github.com/skops-dev/skops/blob/main/docs/changes.rst)
- [Commits](skops-dev/skops@v0.13.0...v0.14)

---
updated-dependencies:
- dependency-name: skops
  dependency-version: 0.14.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Build dependencies Pull requests that update a dependency file python Pull requests that update Python code size-XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant