Bump the uv-dependencies group across 1 directory with 27 updates

[dependabot]

Bumps the uv-dependencies group with 27 updates in the / directory:

Package	From	To
algoliasearch-django	3.0.0	4.0.0
celery[redis]	5.5.3	5.6.2
django-anymail	10.0	14.0
django-avatar	8.0.1	9.0.0
django-crispy-forms	1.13.0	2.5
django-reversion	6.0.0	6.1.0
django	5.2.8	6.0.1
google-analytics-data	0.19.0	0.20.0
google-auth	2.43.0	2.48.0
matplotlib	3.10.7	3.10.8
numpy	2.3.4	2.4.2
pillow	12.0.0	12.1.0
sentry-sdk	2.44.0	2.51.0
gunicorn	23.0.0	25.0.0
scout-apm	3.5.0	3.5.2
crispy-bootstrap5	0.7	2025.6
playwright	1.56.0	1.58.0
pytest-playwright	0.7.1	0.7.2
pytest	8.4.2	9.0.2
basedpyright	1.33.0	1.37.3
celery-types	0.23.0	0.24.0
djangorestframework-stubs	3.16.5	3.16.7
ipython	9.7.0	9.9.0
pandas	2.3.3	3.0.0
pdbpp	0.11.7	0.12.0.post1
prek	0.2.14	0.3.1
ruff	0.14.5	0.14.14

Updates algoliasearch-django from 3.0.0 to 4.0.0

Release notes

Sourced from algoliasearch-django's releases.

4.0.0

⚠ BREAKING CHANGES

• drop support for python <3.8
• drop support for python <4.0
• remove method clear_index in favor of clear_objects

See upgrade guide

Changelog

Sourced from algoliasearch-django's changelog.

2024-12-26 4.0.0

• [MAJOR] drop support for python <3.8 #336
• [MAJOR] drop support for django <4.0 #336
• [MAJOR] remove method clear_index in favor of clear_objects #336

Commits

• cbf5df0 chore: release v4 (#338)
• e869b15 fix: remove highlightResult from response (#337)
• b71984f feat!: support new algoliasearch and django versions (#336)
• 7f23fc2 chore: add release process (#332)
• 2233054 chore: bump to 3.0.0
• See full diff in compare view

Updates celery[redis] from 5.5.3 to 5.6.2

Release notes

Sourced from celery[redis]'s releases.

v5.6.2

What's Changed

• Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string by @​bruunotrindade in celery/celery#10045
• Bugfix: Revoked tasks now immediately update backend status to REVOKED by @​Nusnus in celery/celery#9869
• Prepare for release: v5.6.2 by @​Nusnus in celery/celery#10049

New Contributors

• @​bruunotrindade made their first contribution in celery/celery#10045

Full Changelog: celery/celery@v5.6.1...v5.6.2

v5.6.1

What's Changed

• Fix Redis Sentinel ACL authentication support by @​anthonykuzmich7 in celery/celery#10013
• Fix: Broker heartbeats not sent during graceful shutdown by @​weetster in celery/celery#9986
• docs #5410 -- Document confirm_publish broker transport option by @​JaeHyuckSa in celery/celery#10016
• close DB pools only in prefork mode by @​petrprikryl in celery/celery#10020
• Fix: Avoid unnecessary Django database connection creation during cleanup by @​snopoke in celery/celery#10015
• reliable prefork detection by @​petrprikryl in celery/celery#10023
• better coverage by @​petrprikryl in celery/celery#10029
• Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example by @​SpaceShaman in celery/celery#10030
• Stop importing pytest_subtests by @​cjwatson in celery/celery#10032
• Only use exceptiongroup backport for Python < 3.11 by @​cjwatson in celery/celery#10033
• Prepare for release: v5.6.1 by @​Nusnus in celery/celery#10037

New Contributors

• @​anthonykuzmich7 made their first contribution in celery/celery#10013
• @​weetster made their first contribution in celery/celery#9986
• @​JaeHyuckSa made their first contribution in celery/celery#10016
• @​snopoke made their first contribution in celery/celery#10015
• @​SpaceShaman made their first contribution in celery/celery#10030

Full Changelog: celery/celery@v5.6.0...v5.6.1

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

... (truncated)

Changelog

Sourced from celery[redis]'s changelog.

5.6.2

:release-date: 2026-01-04 :release-by: Tomer Nosrati

What's Changed

- Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string ([#10045](https://github.com/celery/celery/issues/10045))
- Bugfix: Revoked tasks now immediately update backend status to REVOKED ([#9869](https://github.com/celery/celery/issues/9869))
- Prepare for release: v5.6.2 ([#10049](https://github.com/celery/celery/issues/10049))
.. _version-5.6.1:
5.6.1
:release-date: 2025-12-29
:release-by: Tomer Nosrati
What's Changed

• Fix Redis Sentinel ACL authentication support (#10013)
• Fix: Broker heartbeats not sent during graceful shutdown (#9986)
• docs #5410 -- Document confirm_publish broker transport option (#10016)
• close DB pools only in prefork mode (#10020)
• Fix: Avoid unnecessary Django database connection creation during cleanup (#10015)
• reliable prefork detection (#10023)
• better coverage (#10029)
• Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example (#10030)
• Stop importing pytest_subtests (#10032)
• Only use exceptiongroup backport for Python < 3.11 (#10033)
• Prepare for release: v5.6.1 (#10037)

.. _version-5.6.0:

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights

See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.
</tr></table> 

... (truncated)

Commits

• 6a43c84 Prepare for release: v5.6.2 (#10049)
• 333a82f Bugfix: Revoked tasks now immediately update backend status to REVOKED (#9869)
• 9d6ab11 Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeEr...
• 21dbc73 Prepare for release: v5.6.1 (#10037)
• ba20bed Only use exceptiongroup backport for Python < 3.11 (#10033)
• 2167529 Stop importing pytest_subtests
• 0527296 Bump google-cloud-firestore from 2.21.0 to 2.22.0
• 5f8659b Clarify 'result_extended' setting usage in tasks
• f19db70 Bump mypy from 1.19.0 to 1.19.1 (#10028)
• 6da72bd better coverage (#10029)
• Additional commits viewable in compare view

Updates django-anymail from 10.0 to 14.0

Release notes

Sourced from django-anymail's releases.

v14.0

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 and adds the much-requested ESP Mailtrap.

See the Changelog for breaking changes and a full list of other features and fixes.

v13.1

Changelog

v13.0.1

Changelog

v13.0

Changelog

v12.0

Changelog

v11.1

Changelog

v11.0.1

Changelog

(This release is solely to update documentation and metadata. Code is identical to v11.0.)

v11.0

• Breaking changes for Amazon SES; SparkPost (with template_id)
• New merge_headers feature
• And more…

Please check the changelog

v10.3

Changelog

v10.2

Changelog

v10.1

Changelog

Changelog

Sourced from django-anymail's changelog.

v14.0

2025-12-17

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email <https://anymail.dev/en/stable/tips/international_email/#idna>_ in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 (earlier versions worked, but provoked deprecation warnings) and adds the much-requested ESP Mailtrap.

Breaking changes

(These changes don't affect the vast majority of Anymail users.)


International domain names: When sending email to a non-ASCII domain name,

use IDNA 2008 with UTS-46 pre-processing rather than obsolete IDNA 2003

encoding. This ensures email can be sent to newer domains enabled by IDNA 2008.
This change should make no difference for virtually all real-world email

addresses that worked with earlier Anymail releases. But trying to send to

emoji domains or others no longer allowed by IDNA 2008 will now raise an

AnymailInvalidAddress error.
To restore the old behavior or select a different encoding, use the new

IDNA_ENCODER setting. See

Domains (IDNA) <https://anymail.dev/en/stable/tips/international_email/#idna>_

in the docs.
As part of this change, Anymail now has a direct dependency on the idna

package. (It was already being installed as a sub-dependency of requests.)


Brevo: Raise an error if metadata or custom header values include Unicode

characters. This avoids a Brevo API bug that sends unencoded 8-bit headers,

which can cause bounces or dropped messages.


Mailgun: Raise an error if the from_email uses EAI (has a Unicode

local part). This avoids a Mailgun API bug that generates undeliverable

messages.


Resend: Raise an error if an attachment's filename has an extension that

doesn't match its content type. This tries to help you avoid a Resend API bug

that can silently drop sent messages.


Scaleway TEM: Raise an error if any address field uses EAI (has a Unicode

</tr></table>

... (truncated)

Commits

• e0f50c2 Release 14.0
• a575bfc Docs: update some outdated examples
• d6e8374 CI/CD: reduce permissions to GitHub workflows
• 5ee1e0d Thank contributors and sponsors in readme
• 793617c Mailtrap: new ESP
• ee96317 Postmark: Avoid KeyError in tracking webhook for bounce/unsubscribe payload
• ab2e85f Amazon SES (docs): show TenantName and EndpointId examples
• f57bdc7 Exempt webhooks from Django's LoginRequiredMiddleware
• 643f46f Support Django 6.0
• 131b1c1 Improve handling of non-ASCII characters in attachments
• Additional commits viewable in compare view

Updates django-avatar from 8.0.1 to 9.0.0

Release notes

Sourced from django-avatar's releases.

Close all open files

• Fix files not closed in create_thumbnail
• Add Django 5.2 and 6.0 support
• Add Python 3.13, 3.14 support
• Drop Python 3.8, 3.9 support

Changelog

Sourced from django-avatar's changelog.

• 9.0.0
  • Fix files not closed in create_thumbnail
  • Add Django 5.2 and 6.0 support
  • Add Python 3.13, 3.14 support
  • Drop Python 3.8, 3.9 support

Commits

• 12e4745 9.0.0
• 0f72578 Update CHANGELOG for version 9.0.0
• 80a7c95 Close files in create thumbnail (#252)
• 7cb5533 [pre-commit.ci] pre-commit autoupdate (#250)
• d1801ed Fix url in cofirm_delete (#254)
• 4955d2d Update versions of Python, Django, GitHub Actions, and pre-commit hooks (#253)
• 14495e8 Enable parameters for LibRavatar (#255)
• 45e741a Update Python and Django versions in CI workflow
• a6cafaa [pre-commit.ci] pre-commit autoupdate (#249)
• See full diff in compare view

Updates django-crispy-forms from 1.13.0 to 2.5

Release notes

Sourced from django-crispy-forms's releases.

2.5

• Confirmed support for Python 3.14.
• Confirmed support for Django 6.0.
• Dropped support for Python 3.8.

2.4

• Added support for Python 3.13.
• Confirmed support for Django 5.2.

2.3

What's Changed

• Fixed unexpected addition the 'active' css_class to AccordionGroup

2.2

• Added support for Django 5.1.
• Allowed pass through of context when rendering a Fieldset layout object.

Full Changelog: django-crispy-forms/django-crispy-forms@2.1...2.2

2.1

What's Changed

• Added support for Django 5.0.
• Dropped support for Django 3.2, 4.0 and 4.1.
• Added support for Python 3.12.
• Dropped support for Python 3.7.

New Contributors

• @​DanielSwain made their first contribution in django-crispy-forms/django-crispy-forms#1340
• @​sankarebarri made their first contribution in django-crispy-forms/django-crispy-forms#1342
• @​foarsitter made their first contribution in django-crispy-forms/django-crispy-forms#1353

Full Changelog: django-crispy-forms/django-crispy-forms@2.0...2.1

2.0 (2023-02-13)

Major Changes and Migration Guide

• Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

  • Boostrap 2: PyPI -- GitHub
  • Boostrap 3: PyPI -- GitHub
  • Boostrap 4: PyPI -- GitHub

  Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.

... (truncated)

Changelog

Sourced from django-crispy-forms's changelog.

2.5 (2025-11-06)

• Confirmed support for Python 3.14.
• Confirmed support for Django 6.0.
• Dropped support for Python 3.8.

2.4 (2025-04-13)

• Added support for Python 3.13.
• Confirmed support for Django 5.2.

2.3 (2024-07-19)

• Fixed a bug in AccordionGroup rendering then it gets an unexpected css class active.

2.2 (2024-06-15)

• Added support for Django 5.1.
• Allowed pass through of context when rendering a Fieldset layout object.

2.1 (2023-10-15)

• Added support for Django 5.0.
• Dropped support for Django 3.2, 4.0 and 4.1.
• Added support for Python 3.12.
• Dropped support for Python 3.7.

See the 2.1 Milestone for the full change list.

2.0 (2023-02-13)

Release of django-crispy-forms 2.0. No changes introduced since 2.0a1.

2.0a1 (2023-01-18)

Major Changes and Migration Guide

• Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

  • Boostrap 2: PyPI -- GitHub
  • Boostrap 3: PyPI -- GitHub
  • Boostrap 4: PyPI -- GitHub

  Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.

• Removed uni-form template pack. Uni-Form specific classes previously added to every template pack e.g. textInput are now removed. If you require these classes, the previous behaviour can be restored by adding the following to CRISPY_CLASS_CONVERTERS in your settings file.

    converters = {
      "textinput": "textinput textInput",
      "fileinput": "fileinput fileUpload",
      "passwordinput": "textinput textInput",
  

... (truncated)

Commits

• 65fa8ae 2.5 Release. (#1424)
• ca4ca14 PEP 639 licenses (#1413)
• aaabe68 Updated pre-commit hook versions.
• 125dd16 Pyupgrade 3.9+
• 1f9c8ec Confirmed support for Python 3.14, Django. Drop support for Python 3.8.
• 93cb8c8 Correct names in special thanks section (#1421)
• e327548 Added security policy. (#1419)
• 6481342 Enabled GitHub code of conduct (#1416)
• dabd719 Add Project Logo. (#1415)
• b3f1d22 2.4 Release. (#1412)
• Additional commits viewable in compare view

Updates django-reversion from 6.0.0 to 6.1.0

Release notes

Sourced from django-reversion's releases.

v6.1.0

What's Changed

• Implement date-based ordering and custom version sort by @​micmarc in etianen/django-reversion#992

New Contributors

• @​micmarc made their first contribution in etianen/django-reversion#992

Full Changelog: etianen/django-reversion@v6.0.0...v6.1.0

Changelog

Sourced from django-reversion's changelog.

6.1.0 - 2025-12-12

• Added history_order_by_date and get_version_ordering to VersionAdmin (@​micmarc).

Commits

• 98483a3 v6.1.0
• d2e425f Merge pull request #992 from micmarc/custom-version-sort
• 2ae8d84 Implement history_order_by_date and get_version_ordering() hook with defa...
• abe3535 Update CHANGELOG.rst
• ed6ef82 Update CHANGELOG.rst
• See full diff in compare view

Updates django from 5.2.8 to 6.0.1

Commits

• 85eb963 [6.0.x] Bumped version for 6.0.1 release.
• ac4a550 [6.0.x] Added release date for 6.0.1.
• dcfc5b0 [6.0.x] Added release date for 5.2.10.
• 42bab76 [6.0.x] Fixed #36843, #36793 -- Reverted "Fixed #27489 -- Renamed permissions...
• 764af47 [6.0.x] Refs #33647 -- Fixed silent data truncation in bulk_create on Postgres.
• b7b5465 [6.0.x] Fixed #36829 -- Reverted value of ClearableFileInput.use_fieldset to ...
• 90daa65 [6.0.x] Fixed #30515 -- Documented resolve_url() in docs/topics/http/shortcut...
• d35daf8 [6.0.x] Fixed #36796 -- Handled lazy routes correctly in RoutePattern.match().
• 16107ab [6.0.x] Refs #36810 -- Avoided infinite recursion in LazyNonce.repr().
• 774543e [6.0.x] Fixed #36305 -- Added documentation indentation guidelines to contrib...
• Additional commits viewable in compare view

Updates google-analytics-data from 0.19.0 to 0.20.0

Release notes

Sourced from google-analytics-data's releases.

google-cloud-compute-v1beta 0.6.0

0.6.0 (2026-01-29)

Features

• Update Compute Engine v1beta API to revision 20251230 (#1143) (7260dd49)

Commits

• c60ded4 chore: librarian release pull request: 20260108T181058Z (#15005)
• c0e3e9d chore: disable treat warnings as errors (#15008)
• 45d4cee docs(samples): Update BigQuery Storage Arrow samples batching logic (#14961)
• 45149ba chore: librarian release pull request: 20260108T162506Z (#15001)
• d58a9ba test: Add 'cryptography' 'cachetools' to test deps for bigquery-storage (#14999)
• 1028946 feat: add v1 api for google-cloud-maintenance-api (#14998)
• b3cb4de chore: librarian generate pull request: 20260107T084051Z (#14995)
• 17cc128 chore: librarian generate pull request: 20251231T091651Z (#14991)
• c353aa5 chore: librarian update image pull request: 20251219T024955Z (#14985)
• f384538 chore: librarian release pull request: 20251217T215552Z (#14980)
• Additional commits viewable in compare view

Updates google-auth from 2.43.0 to 2.48.0

Release notes

Sourced from google-auth's releases.

google-auth 2.48.0

2.48.0 (2026-01-21)

Features

• honor NO_GCE_CHECK environment variable (#1610) (383c9827)

• add configurable GCE Metadata Server retries (#1488) (454b441b)

• add cryptography as required dependency (#1929) (52558ae2)

• Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1)

Bug Fixes

• resolve circular imports (#1942) (25c1b064)

• Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a240)

• removes content-header from AWS IMDS get request (#1934) (97bfea9e)

• detect correct auth when ADC env var is set but empty (#1374) (bfc07e10)

• replace deprecated utcfromtimestamp (#1799) (e431f20c)

v2.48.0rc0

2.48.0rc0 (2026-01-20)

Features

• honor NO_GCE_CHECK environment variable (#1610) (383c98)
• add configurable GCE Metadata Server retries (#1488) (454b44)
• support mTLS IAM domain for Certificate based Access (#1938) (8dcf91)
• add cryptography as required dependency (#1929) (52558a)

Bug Fixes

• Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a2)
• replace deprecated utcfromtimestamp (#1799) (e431f2)
• detect correct auth when ADC env var is set by empty (#1374) (bfc07e)
• removed content-header from AWS IMDS (#1934) (97bfea)
• resolve circular imports (#1942) (25c1b0)

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

... (truncated)

Changelog

Sourced from google-auth's changelog.

2.48.0 (2026-01-22)

Features

• add cryptography as required dependency (#1929) (52558ae2881b1e6555f6f5c0d76365c15807ead9)
• Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1b05c85fbbd0bcee78d66e498099102ab)
• add configurable GCE Metadata Server retries (#1488) (454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37)
• honor NO_GCE_CHECK environment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)

Bug Fixes

• resolve circular imports (#1942) (25c1b064545702cbef087cfcd15fbbb6ef1af74f)
• removes content-header from AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)
• detect correct auth when ADC env var is set but empty (#1374) (bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2)
• replace deprecated utcfromtimestamp (#1799) (e431f20cf73ccac71926a23ec454468cea92e053)
• Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)

2.47.0 (2026-01-06)

Features

• drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

• Python 3.8 support (#1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

2.46.0 (2026-01-05)

Documentation

• update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2d1014ea1d244a4c3470e52d74d55404b)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d573123e358c347ffa067637f992af61b4)

Bug Fixes

• add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588f7793b59d923a4185c8c07738da618f7)
• fix the document of secure_authorized_session (#1536) (5d0014707fc359782df5ccfcaa75fd372fe9dce3)
• remove setup.cfg configuration for creating universal wheels (#1693) (c767531ce05a89002d109f595187aff1fcaacfb7)
• use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f808809e8abf1141f98d88ab720c3899b)

... (truncated)

Commits

• 6a982be chore: librarian release pull request: 20260121T162706Z (#1946)
• 526d6c6 chore(tests): add cryptography to constraints file (#1944)
• 52558ae feat: add cryptography as required dependency (#1929)
• 8dcf91a feat(iam): Support the mTLS IAM domain for Certificate based Access (#1938)
• db17a64 chore(tests): add sleep mocks (#1943)
• 25c1b06 fix: resolve circular imports (#1942)
• e5a28b5 tests: system tests for expired User Credentials (#1937)
• 4292ab0 chore(deps): update dependency google-cloud-compute to v1.42.0 (#1939)
• 4848ac4 chore: extracts unit tests to individual github actions (#1941)
• 71e6e8e chore: dedent deprecation warning message (#1932)
• Additional commits viewable in compare view

Updates matplotlib from 3.10.7 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

Commits

• 1392cbe REL: v3.10.8
• 0b9ebb3 Doc release prep v3.10.8
• bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
• 86b38d3 Github stats v3.10.8
• 9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
• d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
• 799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
• 134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
• 5b8e219 TST: Run macosx backends in a subprocess
• 878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
• Additional commits viewable in compare view

Updates numpy from 2.3.4 to 2.4.2

Release notes

Sourced from numpy's releases.

2.4.2 (Feb 1, 2026)

NumPy 2.4.2 Release Notes

The NumPy 2.4.2 is a patch release that fixes bugs discovered after the 2.4.1 release. Highlights are:

• Fixes memory leaks
• Updates OpenBLAS to fix hangs

This release supports Python versions 3.11-3.14

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Charles Harris
• Daniel Tang +
• Joren Hammudoglu
• Kumar Aditya
• Matti Picus
• Nathan Goldbaum
• Ralf Gommers
• Sebastian Berg
• Vikram Kumar +

Pull requests merged

A total of 12 pull requests were merged for this release.

• #30629: MAINT: Prepare 2.4.x for further development
• #30636: TYP: arange: accept datetime strings
• #30657: MAINT: avoid possible race condition by not touching os.environ...
• #30700: BUG: validate contraction axes in tensordot (#30521)
• #30701: DOC: __array_namespace__info__: set_module not __module__ (#30679)
• #30702: BUG: fix free-threaded PyObject layout in replace_scalar_type_names...
• #30703: TST: fix limited API example in tests for latest Cython

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.59%. Comparing base (8fcdc79) to head (d595e5a).
⚠️ Report is 2 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (8fcdc79) and HEAD (d595e5a). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (8fcdc79)	HEAD (d595e5a)
	4	3

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #409      +/-   ##
==========================================
- Coverage   62.72%   54.59%   -8.14%     
==========================================
  Files         115      115              
  Lines        9200     9200              
==========================================
- Hits         5771     5023     -748     
- Misses       3429     4177     +748     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.