Skip to content

Bump the dependencies group with 14 updates#84

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-1b68d044c7
Open

Bump the dependencies group with 14 updates#84
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-1b68d044c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 14 updates:

Package From To
filelock 3.0.0 3.30.2
geopandas 0.14.4 1.1.4
joblib 1.4.2 1.5.3
numpy 1.26.4 2.5.1
pandas 2.2.2 3.0.3
pystac 1.10.1 1.15.1
pystac-client 0.7.7 0.9.0
rasterio 1.4.0 1.5.0
scipy 1.13.0 1.18.0
shapely 2.0.4 2.1.2
torch 2.3.0 2.13.0
tqdm 4.66.4 4.68.4
xarray 2025.3.1 2026.7.0
zarr 3.1.0 3.2.1

Updates filelock from 3.0.0 to 3.30.2

Release notes

Sourced from filelock's releases.

3.30.2

What's Changed

Full Changelog: tox-dev/filelock@3.30.1...3.30.2

3.30.1

What's Changed

Full Changelog: tox-dev/filelock@3.30.0...3.30.1

3.30.0

What's Changed

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.30.2 (2026-07-16)

  • Stop :class:~filelock.SoftFileLease deleting a live marker whose mode it does not implement. An unrecognized mode now names its owner instead of reading as malformed, so a record written by a newer filelock survives the grace window rather than being evicted after two seconds. :pr:672
  • Stop :class:~filelock.StrictSoftFileLock and :class:~filelock.AsyncStrictSoftFileLock calling themselves a native OS lock when they warn that they ignore lifetime; they now say a strict claim is only ever cleared by force_break(). :pr:672
  • Cover every lock type in the tutorials and how-to guides, with examples drawn from projects that use filelock, and color the mermaid diagrams. Correct the claims that StrictSoftFileLock exposes owner, that :class:~filelock.SoftFileLock evicts a strict sentinel, that :class:~filelock.ReadWriteLock requires a .db extension, and that every log record is DEBUG. :pr:672

3.30.1 (2026-07-16)

  • StrictSoftFileLock and AsyncStrictSoftFileLock no longer abort acquisition when a peer's claim vanishes as an NFSv3 stale filehandle instead of a clean removal; the reader revalidates and skips it, so strict locks hold mutual exclusion across independent NFSv3 client caches. :pr:669
  • SoftFileLease reads a marker whose lease duration is nan or inf as malformed rather than as a valid lease, so such a marker ages out through the grace window instead of raising LeaseSettingsMismatch on every contender. :pr:670

3.30.0 (2026-07-16)

  • Add context_error_policy to surface body and release failures as a :exc:BaseExceptionGroup. :pr:618
  • Add close_error_policy to control an :func:os.close failure after the OS unlock. :pr:619
  • Add :func:~filelock.lock_descriptor and :func:~filelock.unlock_descriptor to lock a caller-owned file descriptor. :pr:620
  • Add fallback_to_soft to fail closed instead of downgrading to :class:~filelock.SoftFileLock on ENOSYS. :pr:622
  • Add preserve_lock_file so native locks keep the lock pathname on release. :pr:624
  • Add an on_acquired hook that runs a callback on the locked descriptor once the lock is held. :pr:625
  • Add StrictSoftFileLock, which treats every marker it did not publish as contention, and SoftFileLease, whose claim expires and whose holder learns through on_compromise when it is lost. SoftFileLock(lifetime=...) now warns and names them. Both publish a record SoftFileLock evicts, so do not mix contracts on one path. :pr:636
  • Add StrictSoftFileLock and AsyncStrictSoftFileLock with owner-specific hard-linked claims. Strict mode fails closed on claim damage, exposes each recovery token, and requires an exact claim name for a force break. :pr:637
  • Ignore lifetime on native locks with a warning; only :class:~filelock.SoftFileLock honors it. :pr:593
  • Stop mutating the Unix lock file before :func:fcntl.flock is held. :pr:594
  • Bind the Windows reparse-point check to the locked handle to close a symlink-swap race. :pr:596
  • Evict a non-regular soft lock file without reading it. :pr:597
  • Write a soft lock's holder record atomically so a short write cannot create overlapping holders. :pr:614
  • Make native lock release transactional so a failed unlock is retried, not dropped. :pr:615
  • Open the Windows lock file via NtCreateFile so a real access denial is raised, not reported as a timeout. :pr:617
  • Canonicalize singleton keys so equivalent path spellings share an instance, without following a final symlink. :pr:621

... (truncated)

Commits
  • 9a71d06 Release 3.30.2
  • 0dfa1b2 Document every lock type, and stop evicting a marker we cannot read (#672)
  • 47d435f Release 3.30.1
  • 9b7b3b1 reject non-finite lease duration in marker records (#670)
  • cfafd70 Match fork-reset protocol on the class object (#671)
  • e4c0eb3 🐛 fix: tolerate NFSv3 stale handle in strict claim read (#669)
  • d0450d5 📝 docs: separate changelog releases with a blank line (#668)
  • 1b09406 Release 3.30.0
  • 5f2d663 👷 ci(matrix): add SMB, capability, and matrix docs (#665)
  • 2345750 Replace prettier with mdformat and yamlfmt (#667)
  • Additional commits viewable in compare view

Updates geopandas from 0.14.4 to 1.1.4

Release notes

Sourced from geopandas's releases.

Version 1.1.4

What's Changed

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Full Changelog: geopandas/geopandas@v1.1.3...v1.1.4

Version 1.1.3

What's Changed

This release addresses a handful of small compatibility issues with pandas 3.0 and backports some bugfixes.

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points can now be fixed with rng (#3737).

Full Changelog: geopandas/geopandas@v1.1.2...v1.1.3

Version 1.1.2

What's Changed

Bug fixes:

  • Fix an issue that caused an error in GeoDataFrame.from_features when there is no properties field (#3599).
  • Fix read_file and to_file errors (#3682)
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640)
  • value_counts on GeoSeries now preserves CRS in index (#3669)
  • Fix f-string placeholders appearing in error messages when pyogrio cannot be imported (#3682).
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640).
  • .to_json now provides a clearer error message when called on a GeoDataFrame without an active geometry column (#3648).
  • Calling del gdf["geometry"] now will downcast to a pd.DataFrame if there are no geometry columns left in the dataframe (#3648).
  • Fix SQL injection in to_postgis via geometry column name (#3681).

Full Changelog: geopandas/geopandas@v1.1.1...v1.1.2

v1.1.1

... (truncated)

Changelog

Sourced from geopandas's changelog.

Version 1.1.4 (June 26, 2026)

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Version 1.1.3 (March 10, 2026)

Bug fixes:

  • Improved compatibility with pandas 3.0 Copy-on-Write feature, making use of deferred copies where possible (#3298, #3711).
  • Fix GeoSeries.sample_points not accepting list-like size when generating points using pointpaterns (#3710).
  • Fix from_wkt/wkb to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3714).
  • Fix to_postgis to correctly handle missing values with pandas 3 (where the new str dtype is used) (#3722).
  • Using loc to assign column values to a new row index now correctly preserves the column CRS and geometry dtype on pandas 3.1, due to an upstream bug fix (#3741, Pandas #62523)
  • Random states in pointpats methods of sample_points can now be fixed with rng (#3737).

Version 1.1.2 (December 22, 2025)

Bug fixes:

  • Fix an issue that caused an error in GeoDataFrame.from_features when there is no properties field (#3599).
  • Fix read_file and to_file errors (#3682)
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640)
  • value_counts on GeoSeries now preserves CRS in index (#3669)
  • Fix f-string placeholders appearing in error messages when pyogrio cannot be imported (#3682).
  • Fix read_parquet with to_pandas_kwargs for complex (list/struct) arrow types (#3640).
  • .to_json now provides a clearer error message when called on a GeoDataFrame without an active geometry column (#3648).
  • Calling del gdf["geometry"] now will downcast to a pd.DataFrame if there are no geometry columns left in the dataframe (#3648).
  • Fix SQL injection in to_postgis via geometry column name (#3681).

Version 1.1.1 (June 27, 2025)

Bug fixes:

  • Fix regression in the GeoDataFrame constructor when np.nan is given as an only geometry (#3591).
  • Fix regression in overlay with how="identity" when input dataframes have column names that are equal (#3596).

Version 1.1.0 (June 1, 2025)

... (truncated)

Commits
  • 91ec4af RLS: v1.1.4
  • b5d685f DOC: add changelog for 1.1.4
  • 158d993 BUG: further to_postgis hardening (#3800)
  • ce95930 BUG: honor legend_kwds["labels"] for categorical and boolean columns in explo...
  • 22bf845 BUG: overlay with empty input handles keep geom dtype gracefully (#3745)
  • 866a7f0 BUG: ensure that points from random sampling are not sorted (#3773)
  • 76b16ca DOC: update Code of Conduct reporting form link (#3794)
  • 3a04a5c switch to NumFOCUS Code of Conduct (#3671)
  • 6fedb19 BLD: setuptools 77+ required for PEP 639 support (#3746)
  • f5fe3ff RLS: v1.1.3
  • Additional commits viewable in compare view

Updates joblib from 1.4.2 to 1.5.3

Changelog

Sourced from joblib's changelog.

Release 1.5.3 - 2025/12/15

  • The Memory object won't overwrite an already existing .gitignore file in its cache directory anymore. joblib/joblib#1742

  • Harden the safety checks in eval_expr(pre_dispatch) to prevent excessive memory allocation and potential crashes by limiting the allowed length of the expression and the maximum numeric value of sub-expressions and not evaluating expressions with non-numeric literals. joblib/joblib#1744

  • Vendor cloudpickle 3.1.2 to fix a pickling problem with interactively defined abstract base classes and type annotations in Python 3.14+.

Release 1.5.2 - 2025/08/27

Memory:


- Ensure that temporary files managed by the ``Memory`` object do not collide
  when using the same cache directory when the cache directory is accessed
  concurrently from different nodes on a cluster with a shared filesystem.
  https://github.com/joblib/joblib/pull/1656

Release 1.5.1 - 2025/05/23


    

  • 

    Fix backend hints causing errors when no multiprocessing is present
    
joblib/joblib#1721
    

    • 

  • 

    Vendor loky3.5.5 fixing the resource_tracker clean up with earlier Python
    
versions. joblib/joblib#1724
    

    • 



Release 1.5.0 -- 2025/05/03


Memory:

  • Enforce age_limit is a positive timedelta for Memory.reduce_size, to avoid silently ignoring it. joblib/joblib#1613

  • Remove deprecated bytes_limit argument for Memory, which should

... (truncated)

Commits

Updates numpy from 1.26.4 to 2.5.1

Release notes

Sourced from numpy's releases.

v2.5.1 (July 4, 2026)

NumPy 2.5.1 Release Notes

The NumPy 2.5.1 is a patch release that fixes bugs discovered after the 2.5.0 release. The most noticeable is the fix is to the numpy datetime cython API which should allow downstream to support NumPy versions older than 2.5. Preparation for Python 3.15 continues along with typing improvements.

This release supports Python versions 3.12-3.14

Changes

  • The minimum supported GCC version has been updated from 9.3.0 to 10.3.0

    (gh-31843)

Contributors

A total of 10 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Adhyan Gupta +
  • Ankit Ahlawat
  • Charles Harris
  • Iason Krommydas
  • Joren Hammudoglu
  • Kumar Aditya
  • Nathan Goldbaum
  • Sebastian Berg
  • Ties Jan Hefting +
  • Vineet Kumar

Pull requests merged

A total of 20 pull requests were merged for this release.

  • #31707: MAINT: Prepare 2.5.x for further development
  • #31721: CI: fix new cython-lint errors (#31711)
  • #31723: MAINT: Update meson to match main
  • #31729: TST: use setup-sde instead of curl to get SDE binaries (#31727)
  • #31829: BUG: Relax finfo to be easier accessible for all user dtypes...
  • #31831: TYP: Fix flatiter.__next__ return type for object_ and...
  • #31832: BUG: avoid deadlocks using NpyString API (#31682)
  • #31833: BUG: fix out array leak in reduceat and accumulate when dtype...
  • #31835: BUG: fix numpy datetime cython APIs to be compatible with older...
  • #31836: TYP: Fix incorrect dtype inference of asarray([]) (#31732)
  • #31837: TYP: Fix np.ma.masked_array 2.5.0 regression
  • #31838: FIX: Refactor error handling in array_setstate to prevent typecode...
  • #31839: TST: xfail multithreaded BLAS test more generously
  • #31840: MAINT: Rename subroutine for crackfortran tests

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • 5e1d03f Merge pull request #31863 from charris/prepare-2.5.1
  • ad0b66b REL: Prepare for the NumPy 2.5.1 release.
  • 9df8516 Merge pull request #31858 from charris/backport-31688
  • 4dee265 Merge pull request #31857 from charris/backport-31775
  • dc8d553 Merge pull request #31856 from charris/backport-31846
  • 67cb4a8 fix:Signed integer overflow in datetime.c (#31688)
  • baa2589 TST: Clean up imports, formatting, and assertions
  • 2fe5ba4 TEST: Refactor tests to use np.testing.assert_raises_regex per review
  • bb46581 MAINT: Remove deprecated Python recursion fix
  • 8f34214 MAINT: Move SeedSequence recursion guard to C-layer and add tests
  • Additional commits viewable in compare view

Updates pandas from 2.2.2 to 3.0.3

Release notes

Sourced from pandas's releases.

pandas 3.0.3

We are pleased to announce the release of pandas 3.0.3. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.2

We are pleased to announce the release of pandas 3.0.2. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

... (truncated)

Commits
  • 72f2fea RLS: 3.0.3 (#65590)
  • 2897590 Backport PR #65436 on branch 3.0.x (Account for privatization of matplotlib `...
  • 49894b5 Backport PR #65499 on branch 3.0.x (BUG: fix check if pyarrow is installed in...
  • 1c6d1e3 [backport 3.0.x] PERF: remove special casing for zoneinfo in tz_localize_to_u...
  • 2a54711 Backport PR #64379 on branch 3.0.x (PERF: improve performance with ZoneInfo t...
  • 036bb7c Backport PR #65482 on branch 3.0.x (PERF: don't call unique on dtypes for che...
  • bf4c182 Backport PR #65410 on branch 3.0.x (TST: also convert str index to object in ...
  • dd02d75 [backport 3.0.x] BUG: keep fsspec OpenFile alive for chained URL reads (#6547...
  • aef3d0f [backport 3.0.x] CI: lowercase types-pymysql/types-pyyaml to fix mamba 2.6.0 ...
  • bb8e248 Backport PR #65399 on branch 3.0.x (DOC: fix source link for classes in the r...
  • Additional commits viewable in compare view

Updates pystac from 1.10.1 to 1.15.1

Release notes

Sourced from pystac's releases.

pystac-core-v1.15.0

No release notes provided.

pystac-core-v1.15.0-rc.1

Second rc for pystac-core

pystac-core-v1.15.0-rc.0

The first pre-release for v1.15.0, which includes the extension package refactor: stac-utils/pystac#1650. See stac-utils/pystac#1725 for the release checklist.

Changelog

Sourced from pystac's changelog.

1.15.1 (2026-06-30)

Bug Fixes

  • actually link pystac-core and pystac via release-please (207e38d)
  • consolidate core and top-level package in release-please (#1760) (c6a9fbd)
  • more release-please flailing (#1762) (bcf1062)
  • remove invalid version specifier (#1756) (bc70651)

1.15.0 (2026-06-25)

Bug Fixes

Miscellaneous Chores

  • manually set next versions (64fd083)

1.14.3 (2026-01-08)

Bug Fixes

1.14.2 (2025-12-17)

Bug Fixes

  • Remove unused pystac.validation import (#1583)
  • clone extra_fields for Item (#1601) (6ba7da1)
  • make release-please two separate jobs (#1607) (bb6d289)
  • Make extent not required for VerticalSpatialDimension (#1596)
  • Asset.get_absolute_href() now properly resolves root relative hrefs (#1599)
  • Clone extra fields on Item (#1601)

[v1.14.1] - 2025-09-18

Fixed

... (truncated)

Commits

Updates pystac-client from 0.7.7 to 0.9.0

Release notes

Sourced from pystac-client's releases.

v0.9.0

What's Changed

New Contributors

Full Changelog: stac-utils/pystac-client@v0.8.6...v0.9.0

v0.8.6

What's Changed

Full Changelog: stac-utils/pystac-client@v0.8.5...v0.8.6

v0.8.5

What's Changed

Full Changelog: stac-utils/pystac-client@v0.8.4...v0.8.5

v0.8.4

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from pystac-client's changelog.

[v0.9.0] - 2025-07-17

Added

  • Coerce cql2 style to match HTTP method using cql2 library (#804)

Fixed

  • Fix usage documentation of ItemSearch (#790)
  • Fix fields argument to CLI (#797)
  • Clarify recursive behaviour of the get_items method in the method docstring (#800)

[v0.8.6] - 2025-02-11

Changed

  • Use uv for development (#784)
  • Updated to Python 3.10 syntax with pyupgrade (#783)

Fixed

  • Client.get_collection for static catalogs (#782)
  • Permissive collection reading (#787)

[v0.8.5] - 2024-10-23

Fixed

  • Use urljoin to build hrefs (#746)

[v0.8.4] - 2024-10-16

Added

  • Support for collection search via CollectionSearch class and associated client methods (#735)

Removed

  • Python 3.9 support (#724)

[v0.8.3] - 2024-07-01

Fixed

  • Actually set timeout when initializing StacApiIO (#709)
  • Set _stac_io on CollectionClient when reading (#709)

[v0.8.2] - 2024-05-30

Added

... (truncated)

Commits

@dependabot
Bump the dependencies group with 14 updates
00700fb 
Bumps the dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.0.0` | `3.30.2` |
| [geopandas](https://github.com/geopandas/geopandas) | `0.14.4` | `1.1.4` |
| [joblib](https://github.com/joblib/joblib) | `1.4.2` | `1.5.3` |
| [numpy](https://github.com/numpy/numpy) | `1.26.4` | `2.5.1` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.2.2` | `3.0.3` |
| [pystac](https://github.com/stac-utils/pystac) | `1.10.1` | `1.15.1` |
| [pystac-client](https://github.com/stac-utils/pystac-client) | `0.7.7` | `0.9.0` |
| [rasterio](https://github.com/rasterio/rasterio) | `1.4.0` | `1.5.0` |
| [scipy](https://github.com/scipy/scipy) | `1.13.0` | `1.18.0` |
| [shapely](https://github.com/shapely/shapely) | `2.0.4` | `2.1.2` |
| [torch](https://github.com/pytorch/pytorch) | `2.3.0` | `2.13.0` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.66.4` | `4.68.4` |
| [xarray](https://github.com/pydata/xarray) | `2025.3.1` | `2026.7.0` |
| [zarr](https://github.com/zarr-developers/zarr-python) | `3.1.0` | `3.2.1` |


Updates `filelock` from 3.0.0 to 3.30.2
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@v3.0.0...3.30.2)

Updates `geopandas` from 0.14.4 to 1.1.4
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/v1.1.4/CHANGELOG.md)
- [Commits](geopandas/geopandas@v0.14.4...v1.1.4)

Updates `joblib` from 1.4.2 to 1.5.3
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.4.2...1.5.3)

Updates `numpy` from 1.26.4 to 2.5.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.26.4...v2.5.1)

Updates `pandas` from 2.2.2 to 3.0.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.2.2...v3.0.3)

Updates `pystac` from 1.10.1 to 1.15.1
- [Release notes](https://github.com/stac-utils/pystac/releases)
- [Changelog](https://github.com/stac-utils/pystac/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac@v1.10.1...v1.15.1)

Updates `pystac-client` from 0.7.7 to 0.9.0
- [Release notes](https://github.com/stac-utils/pystac-client/releases)
- [Changelog](https://github.com/stac-utils/pystac-client/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac-client@v0.7.7...v0.9.0)

Updates `rasterio` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/rasterio/rasterio/releases)
- [Changelog](https://github.com/rasterio/rasterio/blob/main/CHANGES.txt)
- [Commits](rasterio/rasterio@1.4.0...1.5.0)

Updates `scipy` from 1.13.0 to 1.18.0
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.13.0...v1.18.0)

Updates `shapely` from 2.0.4 to 2.1.2
- [Release notes](https://github.com/shapely/shapely/releases)
- [Changelog](https://github.com/shapely/shapely/blob/main/CHANGES.txt)
- [Commits](shapely/shapely@2.0.4...2.1.2)

Updates `torch` from 2.3.0 to 2.13.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.3.0...v2.13.0)

Updates `tqdm` from 4.66.4 to 4.68.4
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.66.4...v4.68.4)

Updates `xarray` from 2025.3.1 to 2026.7.0
- [Release notes](https://github.com/pydata/xarray/releases)
- [Commits](pydata/xarray@v2025.03.1...v2026.07.0)

Updates `zarr` from 3.1.0 to 3.2.1
- [Release notes](https://github.com/zarr-developers/zarr-python/releases)
- [Changelog](https://github.com/zarr-developers/zarr-python/blob/main/docs/release-notes.md)
- [Commits](zarr-developers/zarr-python@v3.1.0...v3.2.1)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: geopandas
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: joblib
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: numpy
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pandas
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pystac
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pystac-client
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rasterio
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: scipy
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: shapely
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: torch
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tqdm
  dependency-version: 4.68.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: xarray
  dependency-version: 2026.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: zarr
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants