Skip to content

Bump the docs-toolchain group across 1 directory with 4 updates - #65

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs-toolchain-acbe6293de
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs-toolchain-acbe6293de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the docs-toolchain group with 4 updates in the / directory: lxml, matplotlib, oasislmf and ods-tools.

Updates lxml from 6.1.2 to 6.1.3

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

  • LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.
Commits
  • 3c1a4c7 Prepare release of 6.1.3.
  • c1191fc Update changelog.
  • 03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
  • 11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
  • 9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
  • 9716fb1 Build: Include older PyPy versions.
  • 0f3327d Build: Exclude Win-Aarch64 from wheel build.
  • 6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
  • 061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
  • ce9fe0d Build: Fix Py3.8 windows build.
  • See full diff in compare view

Updates matplotlib from 3.11.1 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries
Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
  • 0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
  • ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
  • 8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
  • 93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
  • b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
  • Additional commits viewable in compare view

Updates oasislmf from 2.5.6 to 2.5.7

Release notes

Sourced from oasislmf's releases.

Release 2.5.7

OasisLMF Changelog - 2.5.7

  • #2065 - docs: Diátaxis restructure + ktools→pytools kernel + executable notebooks
  • #2067 - ci: allow OasisModels CLI workflow to target an external oasislmf fork
  • #2073 - refactor(gulmc): split compute_event_losses into inlined njit helpers
  • #2076 - fix/run with env dtype
  • #2079 - vectorisation of cond_info
  • #2080 - google style docstrings (1356)
  • #2083 - Fix CI codecov uploads
  • #2085 - Issue 2084 cyber loc_idx bug
  • #2087 - Fix typo: 'vulnerbaility_id' -> 'vulnerability_id' in gul_inputs.py
  • #2092 - issue 2090 sparse event definition
  • #2094 - h3 vectorise
  • #2095 - ri filter vectorise
  • #2099 - Hubspot ticket tracking
  • #2102 - Removing dead code
  • #2105 - Feature/decouple websocket
  • #2106 - Fix for flaky test
  • #2107 - Exposure summary vectorise
  • #2110 - gul input vectorise
  • #2111 - Array operations speedup
  • #2112 - feat/validate_before_keys
  • #2117 - Issue 2109 repeated exposure run header issue
  • #2119 - RI in exposure run propagation
  • #2120 - fix/exposure_run_preanalysis

OasisLMF Notes

fix/run with env dtype - [(PR #2076)](OasisLMF/OasisLMF#2076)

  • fix oasislmf model run with dtypes set by env variables (OASIS_INT, OASIS_FLOAT, OASIS_AREAPERIL_TYPE)
  • tested with OasisModel/PiWindDtype

Fix CI codecov uploads - [(PR #2083)](OasisLMF/OasisLMF#2083)

Update workflow to use a token for uploading cov data

Hubspot ticket tracking - [(PR #2099)](OasisLMF/OasisLMF#2099)

If an issue is create, commented, or closed it will be mirrored on Hubspot CMS. the workflow will only update issues with the labels bug,enhancement,feature,production,support

Fixes to run platform without redis websocket - [(PR #2105)](OasisLMF/OasisLMF#2105)

Works with OasisLMF/OasisPlatform#1427 add an option to send event processing updates via a HTTP instead of websocket

Bug: periodic ping timer never reset in gul/manager.py

  • oasislmf/pytools/gul/manager.py — the periodic-ping loop reset counter = 0 after each ping but never reset timer. Once SERVER_UPDATE_TIME first elapsed, the stale timer meant every subsequent event satisfied the "time elapsed" check, so pings fired on every event for the rest of the run instead of being throttled to the interval. gulmc/manager.py already did this correctly (timer = time.time()); gul/manager.py now matches.

oasislmf/utils/ping.py updates

  • port_override ordering bug: json.dumps(data) was called before

... (truncated)

Changelog

Sourced from oasislmf's changelog.

OasisLMF Changelog

2.5.8_

  • #2060 - fix(pre-analysis): preserve original exposure file format for snapshot saves
  • #2063 - feat(gulmc): coverage dependency (source-driven conditional vulnerability)
  • #2108 - Dummy model vectorise
  • #2130 - Only Track issues with the hubspot label
  • #2132 - Fix fmpy back-allocation rule 1 for layers above layer 1
  • #2133 - Fix IntCastingNaNError in write_empty_policy_layer when an account has no policy-layer terms
  • #2135 - Pre-analysis hook constructs the user's class twice and prints kwargs
  • #2138 - fix(lookup): reproject vector geometries to EPSG:4326 in build_rtree (#2134)
  • #2140 - fix/csvtobin_pipe
  • #2141 - fix/elt-plt-reset-state-buffer-full
  • #2142 - fix/rerun-stale-fifo-redirect
  • #2148 - Make optional arguments not required
  • #2150 - docs: scope the docstring rule, and correct what CI enforces
  • #2152 - Add global logging options to all computaion funcs
  • #2154 - fix(cli): print help when oasislmf api get is called without options set
  • #2155 - feature/not-modelled-locations
  • #2157 - Parallelise the ExposurePreAnalysis hook by account group
  • #2158 - docs: author version availability as NEXT, resolve it at release
  • #2160 - fix(losses): pre-build GUL structures for the engine that actually runs
  • #2163 - Check and wait for pytools logging to complete
  • #2164 - FileNotFoundError on GenerateLossesDir.run
  • #2166 - feat(lookup): add geog_lookup builtin for OED GeogScheme/GeogName (#2144)
  • #2167 - fix/gul_error_csv_write
  • #2170 - Fix Crash in a Cyber model using PreAnalysis hook
  • #2173 - Fix FootprintCsv crashing on a bare pd.read_csv() call .. _2.5.8: OasisLMF/OasisLMF@2.5.7...2.5.8

2.5.7_

  • #2065 - docs: Diátaxis restructure + ktools→pytools kernel + executable notebooks
  • #2067 - ci: allow OasisModels CLI workflow to target an external oasislmf fork
  • #2073 - refactor(gulmc): split compute_event_losses into inlined njit helpers
  • #2076 - fix/run with env dtype
  • #2079 - vectorisation of cond_info
  • #2080 - google style docstrings (1356)
  • #2083 - Fix CI codecov uploads
  • #2085 - Issue 2084 cyber loc_idx bug
  • #2087 - Fix typo: 'vulnerbaility_id' -> 'vulnerability_id' in gul_inputs.py
  • #2092 - issue 2090 sparse event definition
  • #2094 - h3 vectorise
  • #2095 - ri filter vectorise
  • #2099 - Hubspot ticket tracking
  • #2102 - Removing dead code
  • #2105 - Feature/decouple websocket
  • #2106 - Fix for flaky test

... (truncated)

Commits

Updates ods-tools from 5.0.7 to 5.0.8

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 17, 2026
Bumps the docs-toolchain group with 4 updates in the / directory: [lxml](https://github.com/lxml/lxml), [matplotlib](https://github.com/matplotlib/matplotlib), [oasislmf](https://github.com/OasisLMF/oasislmf) and [ods-tools](https://github.com/OasisLMF/OpenDataStandards).


Updates `lxml` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.2...lxml-6.1.3)

Updates `matplotlib` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2)

Updates `oasislmf` from 2.5.6 to 2.5.7
- [Release notes](https://github.com/OasisLMF/oasislmf/releases)
- [Changelog](https://github.com/OasisLMF/OasisLMF/blob/main/CHANGELOG.rst)
- [Commits](OasisLMF/OasisLMF@2.5.6...2.5.7)

Updates `ods-tools` from 5.0.7 to 5.0.8
- [Release notes](https://github.com/OasisLMF/OpenDataStandards/releases)
- [Changelog](https://github.com/OasisLMF/ODS_OpenExposureData/blob/main/Changelog.rst)
- [Commits](https://github.com/OasisLMF/OpenDataStandards/commits)

---
updated-dependencies:
- dependency-name: lxml
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docs-toolchain
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docs-toolchain
- dependency-name: oasislmf
  dependency-version: 2.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docs-toolchain
- dependency-name: ods-tools
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docs-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/docs-toolchain-acbe6293de branch from 1989770 to ddf95bd Compare October 1, 2026 14:33
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 8, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/docs-toolchain-acbe6293de branch October 8, 2026 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants