{"id":22501,"name":"bokeh","ecosystem":"pip","repository_url":"https://github.com/bokeh/bokeh","issues_count":59,"created_at":"2025-06-07T02:54:46.927Z","updated_at":"2025-06-07T02:54:46.927Z","purl":"pkg:pypi/bokeh","metadata":{"id":2658858,"name":"bokeh","ecosystem":"pypi","description":"Interactive plots and applications in the browser from Python","homepage":null,"licenses":"Copyright (c) Anaconda, Inc., and Bokeh Contributors All rights reserved.  Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:  Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.  Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.  Neither the name of Anaconda nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission.  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. ","normalized_licenses":["Other"],"repository_url":"https://github.com/bokeh/bokeh","keywords_array":[],"namespace":null,"versions_count":221,"first_release_published_at":"2013-10-25T21:00:28.000Z","latest_release_published_at":"2024-12-03T15:39:22.000Z","latest_release_number":"3.6.2","last_synced_at":"2025-01-14T13:08:36.689Z","created_at":"2022-04-10T10:13:50.207Z","updated_at":"2025-01-14T13:56:23.556Z","registry_url":"https://pypi.org/project/bokeh/","install_command":"pip install bokeh --index-url https://pypi.org/simple","documentation_url":"https://bokeh.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Environment :: Console","Environment :: Web Environment","Intended Audience :: Developers","Intended Audience :: Education","Intended Audience :: End Users/Desktop","Intended Audience :: Financial and Insurance Industry","Intended Audience :: Healthcare Industry","Intended Audience :: Information Technology","Intended Audience :: Legal Industry","Intended Audience :: Other Audience","Intended Audience :: Science/Research","License :: OSI Approved :: BSD License","Programming Language :: JavaScript","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Topic :: Office/Business","Topic :: Office/Business :: Financial","Topic :: Scientific/Engineering","Topic :: Scientific/Engineering :: Information Analysis","Topic :: Scientific/Engineering :: Mathematics","Topic :: Scientific/Engineering :: Visualization","Topic :: Utilities"],"normalized_name":"bokeh"},"repo_metadata":{"id":2831656,"uuid":"3834332","full_name":"bokeh/bokeh","owner":"bokeh","description":"Interactive Data Visualization in the browser, from  Python","archived":false,"fork":false,"pushed_at":"2025-01-09T23:09:04.000Z","size":343849,"stargazers_count":19519,"open_issues_count":797,"forks_count":4201,"subscribers_count":439,"default_branch":"branch-3.7","last_synced_at":"2025-01-12T17:42:19.231Z","etag":null,"topics":["bokeh","data-visualisation","interactive-plots","javascript","jupyter","notebooks","numfocus","plots","plotting","python","visualisation","visualization"],"latest_commit_sha":null,"homepage":"https://bokeh.org","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bokeh.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE.txt","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["bokeh"],"patreon":null,"open_collective":null,"ko_fi":null,"tidelift":"pypi/bokeh","custom":"https://numfocus.org/donate-to-bokeh"}},"created_at":"2012-03-26T15:40:01.000Z","updated_at":"2025-01-12T04:09:32.000Z","dependencies_parsed_at":"2024-03-25T17:01:32.172Z","dependency_job_id":"7954436c-bdd3-43a4-a234-54d1edf3d458","html_url":"https://github.com/bokeh/bokeh","commit_stats":{"total_commits":17377,"total_committers":684,"mean_commits":25.40497076023392,"dds":0.7002934913966737,"last_synced_commit":"d6d1cf1e610980271a45e7260608d1a2d0c75c65"},"previous_names":[],"tags_count":184,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bokeh","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/refs/heads/branch-3.7","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":233903980,"owners_count":18748528,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"bokeh","name":"Bokeh","uuid":"8440965","kind":"organization","description":"Interactive Data Visualization ","email":"info@bokeh.org","website":"https://bokeh.org","location":null,"twitter":"bokeh","company":null,"icon_url":"https://avatars.githubusercontent.com/u/8440965?v=4","repositories_count":26,"last_synced_at":"2024-04-14T09:51:14.033Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/bokeh","funding_links":["https://github.com/sponsors/bokeh"],"total_stars":20329,"followers":167,"following":0,"created_at":"2022-11-02T16:22:57.432Z","updated_at":"2024-04-14T09:51:18.551Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bokeh","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bokeh/repositories"},"tags":[{"name":"3.7.0.dev5","sha":"064ef9bfa3b8148bfbdd4c6588fa21eeaf102c43","kind":"tag","published_at":"2025-01-09T16:16:04.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.7.0.dev5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.7.0.dev5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev5/manifests"},{"name":"3.7.0.dev4","sha":"b60a79cd34fe20e4c921d64682bbbe7f0084aa83","kind":"tag","published_at":"2024-12-03T23:14:51.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.7.0.dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.7.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev4/manifests"},{"name":"3.6.2","sha":"34cd4929c1471e2df5344746e178e176bb684f81","kind":"tag","published_at":"2024-12-03T15:13:13.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.2/manifests"},{"name":"3.6.1","sha":"e0f6801e77b03d8fd64e7beb7b4e5d5873969493","kind":"tag","published_at":"2024-11-06T19:24:11.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.1/manifests"},{"name":"3.7.0.dev3","sha":"2784e247673bf8b86d87d3d5a284fc3ebeff621e","kind":"tag","published_at":"2024-10-30T19:00:22.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.7.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.7.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev3/manifests"},{"name":"3.7.0.dev2","sha":"20072eaaa32f6a15625826cafeeca9be68824a77","kind":"tag","published_at":"2024-10-27T18:53:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.7.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.7.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev2/manifests"},{"name":"3.7.0.dev1","sha":"daf1ad80a10eecd815353ab9f80e1e5db799d4d0","kind":"tag","published_at":"2024-09-26T16:34:39.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.7.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.7.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.7.0.dev1/manifests"},{"name":"3.6.0","sha":"ab3963320445d4c795429063fedf46b63414a94c","kind":"tag","published_at":"2024-09-26T16:05:31.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0/manifests"},{"name":"3.6.0rc2","sha":"bba0ad513aafd102daa9fe389a011b1e799bcad3","kind":"tag","published_at":"2024-09-25T15:18:33.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0rc2/manifests"},{"name":"3.6.0rc1","sha":"2272b24e1de76d23292ee2101173e732f17a3cc7","kind":"tag","published_at":"2024-09-23T15:18:08.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0rc1/manifests"},{"name":"3.5.2","sha":"229737e6b397cb54bc1b44399b2430811ad412a5","kind":"tag","published_at":"2024-08-23T06:53:15.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.2/manifests"},{"name":"3.5.1","sha":"82533eb5945c1579aa54c6f771221023442ddb4f","kind":"tag","published_at":"2024-07-25T23:07:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.1/manifests"},{"name":"3.4.3","sha":"500c6272bf08c8f5db6a72dfdbd243dcc2b95925","kind":"tag","published_at":"2024-07-25T10:15:28.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.3/manifests"},{"name":"3.6.0.dev1","sha":"334d1413b93bd9df7f0eed6fdf48e5f663876943","kind":"tag","published_at":"2024-07-04T10:50:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.6.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.6.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.6.0.dev1/manifests"},{"name":"3.5.0","sha":"c9f67a2df7f58ba0511d069b3ffdba8dd2f32100","kind":"tag","published_at":"2024-07-04T09:35:58.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0/manifests"},{"name":"3.5.0rc2","sha":"c3ba2864eef921a46e32887cad36c4168b75e663","kind":"tag","published_at":"2024-06-29T07:40:26.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0rc2/manifests"},{"name":"3.4.2","sha":"49dfd6d1e1a456e7d2de72504871fe44fe95a1d9","kind":"tag","published_at":"2024-06-25T08:26:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.2/manifests"},{"name":"3.5.0rc1","sha":"4217685ad268332a4806cf4b91c6fac3b716de9c","kind":"tag","published_at":"2024-06-25T07:43:04.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0rc1/manifests"},{"name":"3.5.0.dev8","sha":"cccfcc41f4d2e11386c0df4843452a65723f178e","kind":"tag","published_at":"2024-06-14T10:05:14.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev8","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev8/manifests"},{"name":"3.5.0.dev7","sha":"98fd1b9e2128faa83429ce8d97377e38f4a7c588","kind":"tag","published_at":"2024-06-09T08:27:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev7","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev7/manifests"},{"name":"3.5.0.dev6","sha":"26122830baa784c88d174b23ac36ab62b72f531b","kind":"tag","published_at":"2024-06-04T03:16:25.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev6","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev6/manifests"},{"name":"3.5.0.dev5","sha":"9bb31eddc53269203a5761ef98d33f48337e9c51","kind":"tag","published_at":"2024-06-01T01:23:11.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev5/manifests"},{"name":"3.5.0.dev4","sha":"89468530446ac8a3284f9ee6e4a76c1727d5e55c","kind":"tag","published_at":"2024-05-21T08:26:15.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev4/manifests"},{"name":"3.5.0.dev3","sha":"62c6b15933f016fa829189eae962b88bb18fced7","kind":"tag","published_at":"2024-05-08T17:02:12.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev3/manifests"},{"name":"3.5.0.dev2","sha":"240ff2474d7ce8ecacc5fbb2318e81b125761d5b","kind":"tag","published_at":"2024-05-03T06:38:36.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev2/manifests"},{"name":"3.4.1","sha":"c2926ab02cec65fff2aa3379682cb3170e2ca42a","kind":"tag","published_at":"2024-04-11T20:32:54.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.1/manifests"},{"name":"3.5.0.dev1","sha":"51b92cd1006941ada68eb22f6df76581c9e95126","kind":"tag","published_at":"2024-03-18T16:00:08.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.5.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.5.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.5.0.dev1/manifests"},{"name":"3.4.0","sha":"b8b05b2529bf62e26e6943c1158ad9822c8b0308","kind":"tag","published_at":"2024-03-14T16:00:36.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0/manifests"},{"name":"3.4.0rc2","sha":"159e73bb617b1c84e9d4b3b4a783d57364337c58","kind":"tag","published_at":"2024-03-08T22:43:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0rc2/manifests"},{"name":"3.4.0rc1","sha":"f632d1f4040e4fa1857e04835dfddfdfdb4cf08a","kind":"tag","published_at":"2024-02-28T16:24:01.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0rc1/manifests"},{"name":"3.4.0.dev8","sha":"a49534c47c36bd3b61db615d179e4936e2383975","kind":"tag","published_at":"2024-02-15T12:44:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev8","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev8/manifests"},{"name":"3.4.0.dev7","sha":"dc0bd8b5d905f3a2c1bc0f38d7df34109f95e5b5","kind":"tag","published_at":"2024-01-30T22:01:07.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev7","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev7/manifests"},{"name":"3.3.4","sha":"1bc909c1a70f0a0a385ff60649d1865b36a5cdc3","kind":"tag","published_at":"2024-01-25T18:24:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.4/manifests"},{"name":"3.3.4rc1","sha":"0bb380ae3805460d535240e448c68ca0e130f414","kind":"tag","published_at":"2024-01-25T02:30:02.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.4rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.4rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.4rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.4rc1/manifests"},{"name":"3.4.0.dev6","sha":"a68d155a4428981fbbb6d3c003c85d9526dd9b14","kind":"tag","published_at":"2024-01-23T21:11:02.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev6","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev6/manifests"},{"name":"3.3.3","sha":"41736a65c07e124048f42f6ffe9384d3072f9dd7","kind":"tag","published_at":"2024-01-08T18:42:01.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.3/manifests"},{"name":"3.4.0.dev5","sha":"52c1d341e4986327a3cdb49870838eaa275f3903","kind":"tag","published_at":"2024-01-08T11:27:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev5/manifests"},{"name":"3.4.0.dev4","sha":"481978960ffce3bbd924c66aa38eda5a1cf01ead","kind":"tag","published_at":"2023-12-16T07:46:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev4/manifests"},{"name":"3.3.2","sha":"fab08a4f21e7ef1d2b6039fdbf763b0e0158554c","kind":"tag","published_at":"2023-12-01T18:37:59.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.2/manifests"},{"name":"3.3.1","sha":"907b8810e9df845dd8e5df89683c58a6889f520f","kind":"tag","published_at":"2023-11-09T18:40:04.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1/manifests"},{"name":"3.3.1rc1","sha":"76c84799f65faa82c07de2f2c9e2df1cfcde7803","kind":"tag","published_at":"2023-11-06T16:19:06.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.1rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.1rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1rc1/manifests"},{"name":"branch-3.2-final-commit","sha":"8efe0d60ed87ec38f62c94a781b5a1373221c611","kind":"tag","published_at":"2023-11-05T03:22:45.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-3.2-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-3.2-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.2-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.2-final-commit/manifests"},{"name":"branch-3.1-final-commit","sha":"82b34cb3e4e3e159a183dad4ffcb04acbfc90927","kind":"tag","published_at":"2023-11-05T03:21:03.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-3.1-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-3.1-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.1-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.1-final-commit/manifests"},{"name":"branch-3.0-final-commit","sha":"62e2d34cb9dd33c38445c7a78a423e8926e6da5e","kind":"tag","published_at":"2023-11-05T03:20:14.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-3.0-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-3.0-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.0-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-3.0-final-commit/manifests"},{"name":"branch-2.4-final-commit","sha":"e8c895f15d2f9ad456e1caf71c16c0f5de8d011b","kind":"tag","published_at":"2023-11-05T03:19:20.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-2.4-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-2.4-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.4-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.4-final-commit/manifests"},{"name":"branch-2.3-final-commit","sha":"b857d2d17d7c19779bb0a7be2601d8238fb1d5e9","kind":"tag","published_at":"2023-11-05T03:18:36.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-2.3-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-2.3-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.3-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.3-final-commit/manifests"},{"name":"branch-2.2-final-commit","sha":"2b0f7dea9c5acbd3f555837c9b96b65ee66dda48","kind":"tag","published_at":"2023-11-05T03:16:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-2.2-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-2.2-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.2-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.2-final-commit/manifests"},{"name":"branch-2.1-final-commit","sha":"130b5eb8b3f1a8715fb3f9ab6d6b33dc3f716531","kind":"tag","published_at":"2023-11-05T03:12:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/branch-2.1-final-commit","html_url":"https://github.com/bokeh/bokeh/releases/tag/branch-2.1-final-commit","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.1-final-commit","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/branch-2.1-final-commit/manifests"},{"name":"3.3.1.dev1","sha":"81bab760d2396ada79b6712c3de97322e50da5a8","kind":"tag","published_at":"2023-11-01T15:43:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.1.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.1.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.1.dev1/manifests"},{"name":"3.4.0.dev3","sha":"70d27af065d1e471759d80bba7d505a5ae724ea6","kind":"tag","published_at":"2023-10-25T08:52:10.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev3/manifests"},{"name":"3.4.0.dev2","sha":"499a155ec43dd2f76e561be96dd4e1e0a51d5abf","kind":"tag","published_at":"2023-10-20T02:07:32.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev2/manifests"},{"name":"3.4.0.dev1","sha":"1752add6fe9355e58153e2fa92486f5eb3a79025","kind":"tag","published_at":"2023-10-10T18:38:00.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.4.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.4.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.4.0.dev1/manifests"},{"name":"3.3.0","sha":"8cd571035424cd176320e89c95c0c3706adc1399","kind":"tag","published_at":"2023-10-10T15:48:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0/manifests"},{"name":"3.3.0rc3","sha":"7e3625ca298f0d34acf3e00e3b2d4bf5c9648f14","kind":"tag","published_at":"2023-10-09T17:46:12.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0rc3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc3/manifests"},{"name":"3.3.0rc2","sha":"80d4c34755b23b74e49a4f2e7894a7c6b74b0d58","kind":"tag","published_at":"2023-10-05T16:46:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc2/manifests"},{"name":"3.3.0rc1","sha":"d977255783d7ce1d4454ea48eec0ae47bc3cc2eb","kind":"tag","published_at":"2023-10-05T08:42:39.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0rc1/manifests"},{"name":"3.3.0.dev3","sha":"de7b118fa04ce0b6de5e34095269308179765878","kind":"tag","published_at":"2023-09-29T20:07:38.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev3/manifests"},{"name":"3.3.0.dev2","sha":"b682594529b6c58ae1a7edf0b59b33e71faca6db","kind":"tag","published_at":"2023-09-27T15:30:38.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev2/manifests"},{"name":"3.2.2","sha":"3cb8a1749c5cb7d01c8620cc1f1fbf9e73a913f7","kind":"tag","published_at":"2023-08-13T16:09:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.2/manifests"},{"name":"3.2.2rc1","sha":"0717a1ac990566ef80808a6f96774a3f91e759e7","kind":"tag","published_at":"2023-08-12T18:03:58.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.2rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.2rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.2rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.2rc1/manifests"},{"name":"3.2.1","sha":"91f0c3c9b04da751094642790511593fae41533d","kind":"tag","published_at":"2023-07-20T09:16:28.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.1/manifests"},{"name":"3.3.0.dev1","sha":"5aeaa7efbd7eb8154fe11a729df1f869f85362b5","kind":"tag","published_at":"2023-06-22T16:06:41.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.3.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.3.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.3.0.dev1/manifests"},{"name":"3.2.0","sha":"546f3c784f14786ae9068b53cf6630f33437d5f0","kind":"tag","published_at":"2023-06-21T18:15:50.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0/manifests"},{"name":"3.2.0rc3","sha":"a25b8c4a2b6852e605202fd14072ecad8db5061c","kind":"tag","published_at":"2023-06-18T19:11:08.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0rc3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc3/manifests"},{"name":"3.2.0rc2","sha":"f4455e4abd75f3f5871a6a8fa52e3bbe134442da","kind":"tag","published_at":"2023-06-15T03:33:05.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc2/manifests"},{"name":"3.2.0rc1","sha":"e60a49269e1a863a23386045e38c010cfb17a43b","kind":"tag","published_at":"2023-06-14T19:44:10.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0rc1/manifests"},{"name":"3.2.0.dev4","sha":"51f05d0fb99bd9a8686be28c5447fac51872523e","kind":"tag","published_at":"2023-06-09T10:33:14.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0.dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev4/manifests"},{"name":"3.2.0.dev3","sha":"107c2a4e0394c1d0d32f307f8de95ef3985e6916","kind":"tag","published_at":"2023-05-30T22:10:01.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev3/manifests"},{"name":"3.1.1","sha":"46b667b161c57087172c3270056452929976f609","kind":"tag","published_at":"2023-05-05T17:34:13.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.1/manifests"},{"name":"3.1.1rc1","sha":"3d02d452d54b59a10bf98717d55bddbd384e075c","kind":"tag","published_at":"2023-05-04T17:24:47.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.1rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.1rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.1rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.1rc1/manifests"},{"name":"3.2.0.dev2","sha":"a5b496aa76508f83f0af0cb92737610d0c360a88","kind":"tag","published_at":"2023-04-27T17:49:55.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev2/manifests"},{"name":"3.2.0.dev1","sha":"fc2177b8b0eac949d0a28a5f66cc9568854a7fe1","kind":"tag","published_at":"2023-04-17T12:21:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.2.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.2.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.2.0.dev1/manifests"},{"name":"3.1.0","sha":"5208b5fa8e8d6f3075a2c8072df81d86eff237e2","kind":"tag","published_at":"2023-03-09T23:28:00.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0/manifests"},{"name":"3.1.0rc3","sha":"74d2d892cb13827eb8660c2d446ed5de5bf6f3f9","kind":"tag","published_at":"2023-03-08T16:10:51.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0rc3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc3/manifests"},{"name":"3.1.0rc2","sha":"89ea7eee384c6f1aca09495a495e4deede7416e3","kind":"tag","published_at":"2023-03-08T02:52:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc2/manifests"},{"name":"3.1.0rc1","sha":"360794a94761ae4f06c700a0370acb0b56c7cebc","kind":"tag","published_at":"2023-03-04T15:09:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0rc1/manifests"},{"name":"3.1.0.dev5","sha":"74ebcb4f5d1510ba0c59dec2bafec9aba850ebf0","kind":"tag","published_at":"2023-03-03T16:16:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0.dev5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0.dev5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev5/manifests"},{"name":"3.1.0.dev4","sha":"1a83c3239912e0725a77ec37c55614881d462733","kind":"tag","published_at":"2023-02-27T18:45:58.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0.dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0.dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev4/manifests"},{"name":"3.1.0.dev3","sha":"9f462764624afecd2fbaaa623ea93ab9d8c7f0d0","kind":"tag","published_at":"2023-02-15T18:09:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0.dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0.dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev3/manifests"},{"name":"3.1.0.dev2","sha":"a4d6738acf4b5f6c1f56d739ff0af2cdc8234928","kind":"tag","published_at":"2023-02-08T08:09:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0.dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0.dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev2/manifests"},{"name":"3.1.0.dev1","sha":"4e6a90ac9c219549ee02802e3d8183fde2745562","kind":"tag","published_at":"2022-12-20T07:57:50.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.1.0.dev1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.1.0.dev1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.1.0.dev1/manifests"},{"name":"3.0.3","sha":"e5717422637ebfbd1885c07238e5768c4b52155f","kind":"tag","published_at":"2022-12-09T17:53:20.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.3/manifests"},{"name":"3.0.2","sha":"bba83ab0db6986f5b8e82ab01e2ad2d09b877cea","kind":"tag","published_at":"2022-11-14T18:30:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.2/manifests"},{"name":"3.0.1","sha":"17a0b288052afac80ebcf0aa74e3915452fce3ca","kind":"tag","published_at":"2022-11-03T19:38:41.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.1/manifests"},{"name":"3.0.1rc1","sha":"07246bb64c9f2cb46952eeeec07d1f09fa82835a","kind":"tag","published_at":"2022-11-03T17:19:48.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.1rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.1rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.1rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.1rc1/manifests"},{"name":"3.0.0","sha":"cf278f2469045cd3b4d402957e03f63973330404","kind":"tag","published_at":"2022-10-30T22:12:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0/manifests"},{"name":"3.0.0rc6","sha":"87021aa339c507eb599ae65f5c2a613c4fa188ec","kind":"tag","published_at":"2022-10-30T19:52:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc6","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc6/manifests"},{"name":"3.0.0rc5","sha":"1fa7aab543d233f7d06de018fde0c78511ee66aa","kind":"tag","published_at":"2022-10-25T03:53:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc5/manifests"},{"name":"3.0.0rc4","sha":"c0aa20cbe7e9b8cb4cee11e73eb5888c12b93284","kind":"tag","published_at":"2022-10-19T02:22:20.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc4/manifests"},{"name":"3.0.0rc3","sha":"5006e734fb68eb00562bdfa4523460386e1bddbf","kind":"tag","published_at":"2022-10-11T05:15:01.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc3/manifests"},{"name":"3.0.0rc2","sha":"edac5fca233d37b23cc762ccbe6b3b96bf1080ec","kind":"tag","published_at":"2022-10-11T01:18:40.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc2/manifests"},{"name":"3.0.0rc1","sha":"43f276c6a8dead718b76f6cb3bcadee67a50417e","kind":"tag","published_at":"2022-10-11T00:30:13.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0rc1","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0rc1/manifests"},{"name":"3.0.0.dev20","sha":"fc73b4ce57475c87684f7d8f45b765db66d07fea","kind":"tag","published_at":"2022-10-09T01:07:07.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev20","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev20","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev20","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev20/manifests"},{"name":"3.0.0.dev19","sha":"c6c0fc58342392864198f0aec7638f44b001ce4c","kind":"tag","published_at":"2022-10-02T06:28:09.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev19","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev19","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev19/manifests"},{"name":"3.0.0.dev18","sha":"0598e265e04d0a6b33992dec3658076e3b4a6285","kind":"tag","published_at":"2022-09-17T18:12:19.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev18","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev18","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev18/manifests"},{"name":"3.0.0.dev17","sha":"29124c24de4d0e0f2390e59e5ba9dc28b7ac0ebe","kind":"tag","published_at":"2022-09-17T05:45:40.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev17","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev17","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev17/manifests"},{"name":"3.0.0.dev16","sha":"abee08c5ac93e43a7b0e5bbe111ec842e6d67285","kind":"tag","published_at":"2022-09-13T14:41:39.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev16","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev16","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev16/manifests"},{"name":"3.0.0.dev15","sha":"75597b6b61f01682c1c4a7ed95f612d2e4cfd2c6","kind":"tag","published_at":"2022-09-03T06:48:48.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev15","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev15/manifests"},{"name":"3.0.0.dev14","sha":"d95a8d030569dd21ccf19244cec10f28b9ec98dd","kind":"tag","published_at":"2022-08-27T18:09:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev14","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev14/manifests"},{"name":"3.0.0.dev13","sha":"00884049d0435d94acfa06b0d8a2ca29a87a613f","kind":"tag","published_at":"2022-08-20T18:46:12.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev13","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev13/manifests"},{"name":"3.0.0.dev12","sha":"6d02108b458bfb7d713e0f3bfef5dd97caadcd6d","kind":"tag","published_at":"2022-08-20T18:05:32.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0.dev12","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0.dev12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0.dev12/manifests"},{"name":"3.0.0dev11","sha":"ac37d77200519062e4bf7b64f37ee7bd96f20fe4","kind":"tag","published_at":"2022-08-06T18:24:02.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev11","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev11/manifests"},{"name":"3.0.0dev10","sha":"c242ac107251d7a74a4213db0cbe02a37627ab44","kind":"tag","published_at":"2022-07-05T18:49:25.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev10","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev10/manifests"},{"name":"3.0.0dev9","sha":"ffb3b5e98f0b075aab6a5e88a201b69ad69f4cf9","kind":"tag","published_at":"2022-07-01T02:24:39.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev9","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev9/manifests"},{"name":"3.0.0dev8","sha":"f440b959a0743b64d2fafe9eccebf72c641e52c9","kind":"tag","published_at":"2022-06-24T23:22:09.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev8","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev8/manifests"},{"name":"3.0.0dev7","sha":"f0452c8f0092324c38a0ccdd7229bf3579378680","kind":"tag","published_at":"2022-06-13T18:45:35.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev7","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev7/manifests"},{"name":"2.4.3","sha":"a1931d48512a1cb369746025d48344a6ad1834b2","kind":"tag","published_at":"2022-05-18T18:10:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.4.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.3/manifests"},{"name":"3.0.0dev6","sha":"2ead5a7d2446f4ce91423489d9b715dbb69a4464","kind":"tag","published_at":"2022-04-27T02:29:01.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev6","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev6/manifests"},{"name":"3.0.0dev5","sha":"b647cc157c7c292238c29891c77ab82fafadb4c3","kind":"tag","published_at":"2022-03-03T18:20:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev5","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev5/manifests"},{"name":"3.0.0dev4","sha":"b8b857c1cb8bd3458625d21ef510e47fd9d7673c","kind":"tag","published_at":"2022-01-27T18:16:08.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev4","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev4/manifests"},{"name":"3.0.0dev3","sha":"c4815ef00dd013204756a359e91fbf10af5c4c56","kind":"tag","published_at":"2022-01-06T19:35:50.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev3","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev3/manifests"},{"name":"3.0.0dev2","sha":"1a7d0f4c3960c098c1df8256ad97b5ae3c205188","kind":"tag","published_at":"2021-12-09T00:39:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/3.0.0dev2","html_url":"https://github.com/bokeh/bokeh/releases/tag/3.0.0dev2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/3.0.0dev2/manifests"},{"name":"2.4.2","sha":"ad33147f5762af8830e68144419e31e46a024caf","kind":"tag","published_at":"2021-11-22T17:23:18.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.4.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.2/manifests"},{"name":"2.4.1","sha":"74ffffb827740e6beb5066ef4ecb0244f1d05a90","kind":"tag","published_at":"2021-10-13T17:24:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.4.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.1/manifests"},{"name":"2.4.0","sha":"a3bb60029702370f9853b78d68c20f651c70b6ee","kind":"tag","published_at":"2021-09-15T06:28:31.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.4.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.4.0/manifests"},{"name":"2.3.3","sha":"76b8b32af29a21057ac07076d296fe604b01f00d","kind":"tag","published_at":"2021-07-07T17:51:19.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.3.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.3/manifests"},{"name":"2.3.2","sha":"0b7bd67fc4962065f14cf3cef09ed171be307a56","kind":"tag","published_at":"2021-05-10T16:40:10.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.3.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.2/manifests"},{"name":"2.3.1","sha":"de39fa2bc1a9b5b31d1fc70a6f6214c754c18946","kind":"tag","published_at":"2021-04-07T17:50:50.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.3.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.1/manifests"},{"name":"2.3.0","sha":"04bb30fef2e72e64baaa8b2f330806d5bfdd3b11","kind":"tag","published_at":"2021-02-24T17:37:06.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.3.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.3.0/manifests"},{"name":"2.2.3","sha":"d3e4f3ab307546f4fc648bedc1ecfd93ea941857","kind":"tag","published_at":"2020-10-19T19:17:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.2.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.3/manifests"},{"name":"2.2.2","sha":"49cc036a3d9cfbeda55744291b41e9df4d2fe95a","kind":"tag","published_at":"2020-10-12T17:04:12.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.2.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.2/manifests"},{"name":"2.2.1","sha":"0b9526ef553d938bf5de187e2511564c648c13bd","kind":"tag","published_at":"2020-08-31T18:40:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.2.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.1/manifests"},{"name":"2.2.0","sha":"009b87275105c1af5c13a206c6336c45a3f2c22c","kind":"tag","published_at":"2020-08-24T15:49:11.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.2.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.2.0/manifests"},{"name":"2.1.1","sha":"39a1a60cb90a1243a9ccd7d4007440de8d89d321","kind":"tag","published_at":"2020-06-22T21:16:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.1.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.1.1/manifests"},{"name":"2.1.0","sha":"8d8f7e57cb982f0dc179c7f47efeb02e82747a2b","kind":"tag","published_at":"2020-06-15T01:06:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.1.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.1.0/manifests"},{"name":"2.0.2","sha":"bbe84dcf1d7047e3aaf75a2ae2918fc6fb57afab","kind":"tag","published_at":"2020-04-22T01:57:35.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.0.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.2/manifests"},{"name":"2.0.1","sha":"74ed93e5a6d52e91a5b5e895be44422dc7041b40","kind":"tag","published_at":"2020-03-29T20:06:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.0.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.1/manifests"},{"name":"2.0.0","sha":"cc894fa49465aacb9f5b7453a99d6a100995cc63","kind":"tag","published_at":"2020-03-09T03:57:18.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/2.0.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/2.0.0/manifests"},{"name":"1.4.0","sha":"b19f2c5547024bdc288d02e73fdb65e65991df5f","kind":"tag","published_at":"2019-11-04T05:25:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.4.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.4.0/manifests"},{"name":"1.3.4","sha":"de4587452d2b9275872c23d9a2a5eab95e0d86ff","kind":"tag","published_at":"2019-08-07T03:40:49.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.3.4","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.4/manifests"},{"name":"1.3.2","sha":"1ca01c4c22cdf4bb22e4dae269949f72b865c752","kind":"tag","published_at":"2019-08-04T20:42:18.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.3.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.2/manifests"},{"name":"1.3.1","sha":"b61ad45897a8c5d9202ace539002a2754adf9d9e","kind":"tag","published_at":"2019-07-30T03:01:20.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.3.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.1/manifests"},{"name":"1.3.0","sha":"96a5c8bb1f59ae73d109c29b744dd33b1c13d249","kind":"tag","published_at":"2019-07-23T02:18:22.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.3.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.3.0/manifests"},{"name":"1.2.0","sha":"9f510bc7cc2c0fb283bf80436d03b3cac49f22c8","kind":"tag","published_at":"2019-05-28T05:18:15.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.2.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.2.0/manifests"},{"name":"1.1.0","sha":"21e56fcb9eeda8fa9eec31f40b870adbdf6d31ea","kind":"tag","published_at":"2019-04-09T03:45:16.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.1.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.1.0/manifests"},{"name":"1.0.4","sha":"d260c429451a04b1fc00f593ef98f10ce1392e57","kind":"tag","published_at":"2019-01-09T20:44:54.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.0.4","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"f04830b6a62b91133655857ee14d88438df2febc","kind":"tag","published_at":"2018-12-31T20:08:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.0.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"daf9d511ec847a0498bd5ebafc5eaa7ee3bc09f4","kind":"tag","published_at":"2018-11-29T18:58:38.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.0.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"201ef74ba862d8e97589172f5c31506d68578371","kind":"tag","published_at":"2018-11-01T01:29:58.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.0.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"ac92b9f8c8f498e2b22cc51ae5179a2f13d3a2b6","kind":"tag","published_at":"2018-10-24T15:11:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/1.0.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/1.0.0/manifests"},{"name":"0.13.0","sha":"30aea2646c9b2f682826361ffe45b1209fd96823","kind":"tag","published_at":"2018-06-20T07:43:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.13.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.13.0/manifests"},{"name":"0.12.16","sha":"7e4333b0e60c173983f44eab06d26c9255564213","kind":"tag","published_at":"2018-05-14T19:52:27.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.16","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.16","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.16/manifests"},{"name":"0.12.15","sha":"2b3390bee93e62961d1f0284642309ada3668772","kind":"tag","published_at":"2018-03-29T16:40:56.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.15","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.15/manifests"},{"name":"0.12.14","sha":"8b336a711e20aabfc9f0de8176136945810f0b0c","kind":"tag","published_at":"2018-02-07T18:44:39.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.14","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.14/manifests"},{"name":"0.12.13","sha":"79041cc7c68d914a6a9b5d3e908f52552f9eb3b6","kind":"tag","published_at":"2017-12-06T22:06:09.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.13","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.13/manifests"},{"name":"0.12.12","sha":"eb90ea2b3aea074e40f9b46cfad68aecbe7cad75","kind":"tag","published_at":"2017-12-05T22:16:47.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.12","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.12/manifests"},{"name":"0.12.11","sha":"62d935d4158a5a540dff278f7744c37d2e636acc","kind":"tag","published_at":"2017-11-28T17:06:36.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.11","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.11/manifests"},{"name":"0.12.10","sha":"79ca2047633a299a6331cc4c607638c1555f1f47","kind":"tag","published_at":"2017-10-16T15:08:54.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.10","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.10/manifests"},{"name":"0.12.9","sha":"3010cf2c825788129323493dd30939fc715c4c34","kind":"tag","published_at":"2017-09-12T06:20:09.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.9","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.9/manifests"},{"name":"0.12.7","sha":"f00f0f2f93d077a3de6ccfaab32f61eda4867eaf","kind":"tag","published_at":"2017-08-29T00:32:24.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.7","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.7/manifests"},{"name":"0.12.6","sha":"6070bf96d9367150f423a4fa792a7d242421236b","kind":"tag","published_at":"2017-06-13T14:22:34.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.6","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.6/manifests"},{"name":"0.12.5","sha":"8f1cfc3b8dd56f815127032a7bb9419dea372ad8","kind":"tag","published_at":"2017-04-05T19:01:35.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.5","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.5/manifests"},{"name":"0.12.4","sha":"760396a6f253dd5f906db457d24bafaa1e3c2540","kind":"tag","published_at":"2017-01-09T16:17:27.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.4","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.4/manifests"},{"name":"0.12.3","sha":"03c1e713d736a3b19e98eb655c02b608f0b3d239","kind":"tag","published_at":"2016-10-07T15:13:10.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.3/manifests"},{"name":"0.12.2","sha":"7336b3b7dc952aae58f91ad9123b9cd4c420ec02","kind":"tag","published_at":"2016-09-06T19:15:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.2/manifests"},{"name":"0.12.1","sha":"87905439bb0ed1ada3f8ae0149d823b9058447a7","kind":"tag","published_at":"2016-07-28T17:54:22.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.1/manifests"},{"name":"0.12.0","sha":"bc9185360063239d5a1d9457549c4bee12f9e509","kind":"tag","published_at":"2016-06-27T23:56:23.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.12.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.12.0/manifests"},{"name":"0.11.1","sha":"64b6b1f2ee4e273138682bac6dee56df2e73d9d6","kind":"tag","published_at":"2016-02-04T19:10:17.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.11.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.11.1/manifests"},{"name":"0.11.0","sha":"69adee25d5229ce80d662b2c31da97b08b9f2660","kind":"tag","published_at":"2016-01-06T18:49:44.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.11.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.11.0/manifests"},{"name":"0.10.0","sha":"2061725748a24d9973eb347fcc7763b6c10c61a8","kind":"tag","published_at":"2015-09-25T16:03:12.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.10.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.10.0/manifests"},{"name":"0.9.3","sha":"476440b2953de7aa4c1c0ac72eae4f9f165fa9f5","kind":"tag","published_at":"2015-08-28T12:06:03.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.9.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.3/manifests"},{"name":"0.9.2","sha":"b47193ce7e048dea4fe4a5f630f59e8d4907a17c","kind":"tag","published_at":"2015-07-23T19:13:52.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.9.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.2/manifests"},{"name":"0.9.1","sha":"80d76fe15bbafa0c3f8a674a7867dda523c5b73c","kind":"tag","published_at":"2015-07-03T23:44:41.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.9.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.1/manifests"},{"name":"0.9.0","sha":"9f21bc95b443da35ce4b1fd23600e0705edd2014","kind":"tag","published_at":"2015-05-15T15:36:15.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.9.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.9.0/manifests"},{"name":"0.8.2","sha":"da429b96a9e264ede4222470c1fdc4aa3088930b","kind":"tag","published_at":"2015-03-25T21:34:53.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.8.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.2/manifests"},{"name":"0.8.1","sha":"e99b300fddc401e1234df8fb0762e70d8c262f7e","kind":"tag","published_at":"2015-02-23T19:39:08.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.8.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.1/manifests"},{"name":"0.8.0","sha":"0b9a07fdb123ac82816b50128157d4fa2dcea348","kind":"tag","published_at":"2015-02-16T21:38:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.8.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.8.0/manifests"},{"name":"0.7.1","sha":"23fb4188090309945d5dba11dd6d4da34c744332","kind":"tag","published_at":"2015-01-12T18:38:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.7.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.7.1/manifests"},{"name":"0.7.0","sha":"430e793ef3796fff7ebc7de205938290abc7e893","kind":"tag","published_at":"2014-12-05T17:10:40.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.7.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.7.0/manifests"},{"name":"0.6.1","sha":"e6ff2cae6ab19d04bc1d0b1302fadaef8a76958f","kind":"tag","published_at":"2014-09-25T00:02:03.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.6.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.6.1/manifests"},{"name":"0.6.0","sha":"08172e8f7ad9783dca15f1bfc4cdcb27c678615d","kind":"tag","published_at":"2014-09-09T19:48:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.6.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.6.0/manifests"},{"name":"0.5.2","sha":"c476b63af8c1d2f8ee2e609304ebc9d88386bc8e","kind":"tag","published_at":"2014-08-15T13:01:37.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.5.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.2/manifests"},{"name":"0.5.1","sha":"5ec54b101691bc007b762f29aa6ba2bcbbafbdfa","kind":"tag","published_at":"2014-07-23T16:26:44.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.5.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.1/manifests"},{"name":"0.5.0","sha":"ae52d6fd5281f4844a3a769a111b404028ebe30c","kind":"tag","published_at":"2014-07-08T18:58:29.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.5.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.5.0/manifests"},{"name":"0.4.4","sha":"76ef90c7848ab67d78f8cc74ffd5b7d5b72a10c2","kind":"tag","published_at":"2014-04-16T22:41:30.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.4.4","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.4/manifests"},{"name":"0.4.3","sha":"6b7c3e741b229fbd5e0413e159227901b976596b","kind":"tag","published_at":"2014-04-16T14:39:27.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.4.3","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.3/manifests"},{"name":"0.4.2","sha":"dbce236185fcd906e62355bc1bc71f62feca5c03","kind":"tag","published_at":"2014-03-10T16:13:09.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.4.2","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.2/manifests"},{"name":"0.4.1","sha":"cb443097266e49700f817cbbb4b2b9376ace502d","kind":"tag","published_at":"2014-02-19T00:08:54.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.4.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"37f438734cb06d67f6d8a9b6d26734d8e30fc58f","kind":"tag","published_at":"2014-02-04T21:46:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.4.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.4.0/manifests"},{"name":"0.3.0","sha":"99a06df37248f467a9fd78790273dfc8eab82f3f","kind":"commit","published_at":"2013-11-19T20:49:56.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.3.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.3.0/manifests"},{"name":"0.2.0","sha":"ee31e35ed160cb023abacb4719d81a8775326a13","kind":"tag","published_at":"2013-10-21T16:01:36.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.2.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.2.0/manifests"},{"name":"0.1.1","sha":"2d26511cfff79bf3b0f76e9a150b3e3bfb599a6a","kind":"tag","published_at":"2013-09-05T23:36:13.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.1.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"b7973493050f51bb0651702045b575c65aa14717","kind":"tag","published_at":"2013-09-03T23:04:02.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.1.0","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.1.0/manifests"},{"name":"0.0.1","sha":"494db4e99c21697f0d3ef9cfed9206cb05316f51","kind":"tag","published_at":"2013-06-04T00:39:57.000Z","download_url":"https://codeload.github.com/bokeh/bokeh/tar.gz/0.0.1","html_url":"https://github.com/bokeh/bokeh/releases/tag/0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bokeh%2Fbokeh/tags/0.0.1/manifests"}]},"repo_metadata_updated_at":"2025-01-14T13:56:23.553Z","dependent_packages_count":557,"downloads":3284535,"downloads_period":"last-month","dependent_repos_count":14255,"rankings":{"downloads":0.17467282071923432,"dependent_repos_count":0.07138802238090446,"dependent_packages_count":0.04366820517980858,"stargazers_count":null,"forks_count":null,"docker_downloads_count":0.3227649948072808,"average":0.15312351077180705},"purl":"pkg:pypi/bokeh","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/bokeh","docker_dependents_count":1286,"docker_downloads_count":383244024,"usage_url":"https://repos.ecosyste.ms/usage/pypi/bokeh","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/bokeh/dependencies","status":null,"funding_links":["https://github.com/sponsors/bokeh","https://tidelift.com/funding/github/pypi/bokeh","https://numfocus.org/donate-to-bokeh"],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/bokeh/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/bokeh/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/bokeh/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/bokeh/related_packages","maintainers":[{"uuid":"bigreddot","login":"bigreddot","name":null,"email":null,"url":null,"packages_count":4,"html_url":"https://pypi.org/user/bigreddot/","role":null,"created_at":"2022-12-08T06:05:08.668Z","updated_at":"2022-12-08T06:05:08.668Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/bigreddot/packages"},{"uuid":"ianthomas23","login":"ianthomas23","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/ianthomas23/","role":null,"created_at":"2023-05-16T15:09:10.566Z","updated_at":"2023-05-16T15:09:10.566Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ianthomas23/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":689698,"maintainers_count":292475,"namespaces_count":0,"keywords_count":228396,"github":"pypi","metadata":{"funded_packages_count":48936},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2025-06-04T05:22:32.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},"unique_repositories_count":47,"unique_repositories_count_past_30_days":0,"recent_issues":[{"uuid":"4298827215","node_id":"PR_kwDOK1eG_c7UG4b6","number":387,"state":"closed","title":"[DEPENDABOT]: Bump bokeh from 3.7.3 to 3.9.0","user":"dependabot[bot]","labels":["DEPENDABOT"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-20T12:46:39.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-20T21:31:46.000Z","updated_at":"2026-05-20T12:46:55.000Z","time_to_close":2560493,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"[DEPENDABOT]: Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.9.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/daisybio/drevalpy/pull/387","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/daisybio%2Fdrevalpy/issues/387","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/387/packages"},{"uuid":"4079713080","node_id":"PR_kwDOOjdRy87KyGLQ","number":171,"state":"closed","title":"build(deps-dev): bump bokeh from 3.8.2 to 3.9.0","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-08T01:26:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-16T01:26:21.000Z","updated_at":"2026-06-08T01:26:21.000Z","time_to_close":7257599,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"bokeh","old_version":"3.8.2","new_version":"3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.2 to 3.9.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.2...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.8.2\u0026new-version=3.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/ImperialCollegeLondon/rojak/pull/171","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImperialCollegeLondon%2Frojak/issues/171","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/171/packages"},{"uuid":"4067386674","node_id":"PR_kwDOD8M5l87KLPSB","number":222,"state":"closed","title":"Bump bokeh from 3.8.0 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-20T22:41:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-12T21:31:22.000Z","updated_at":"2026-03-20T22:41:37.000Z","time_to_close":695413,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.0 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.8.0\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ItziModel/itzi/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ItziModel/itzi/pull/222","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItziModel%2Fitzi/issues/222","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/222/packages"},{"uuid":"4065926059","node_id":"PR_kwDOEdr6SM7KGem1","number":73,"state":"closed","title":"Update bokeh requirement from ~=3.8.2 to ~=3.9.0","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-18T09:20:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-12T16:43:49.000Z","updated_at":"2026-03-18T09:21:00.000Z","time_to_close":491829,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"bokeh","old_version":"~=3.8.2","new_version":"~=3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [bokeh](https://github.com/bokeh/bokeh) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.2...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/lukeshingles/atlasserver/pull/73","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/lukeshingles%2Fatlasserver/issues/73","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/73/packages"},{"uuid":"3906895434","node_id":"PR_kwDOQ_55Cc7CASPI","number":2,"state":"closed","title":"Build(deps): Bump bokeh from 2.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-07T19:24:09.000Z","author_association":null,"state_reason":null,"created_at":"2026-02-06T13:56:00.000Z","updated_at":"2026-02-07T19:24:10.000Z","time_to_close":106089,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps): Bump","packages":[{"name":"bokeh","old_version":"2.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 2.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/2.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=2.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dwojcik1/mms-data-slicer/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dwojcik1/mms-data-slicer/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwojcik1%2Fmms-data-slicer/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"3881651866","node_id":"PR_kwDOAVOy2c7Ashnb","number":657,"state":"closed","title":"Bump the pip group across 1 directory with 38 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-01T09:23:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-02-01T09:27:06.000Z","updated_at":"2026-03-01T09:23:55.000Z","time_to_close":2419008,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":38,"packages":[{"name":"beautifulsoup4","old_version":"4.13.3","new_version":"4.14.3"},{"name":"biopython","old_version":"1.85","new_version":"1.86","repository_url":"https://github.com/biopython/biopython"},{"name":"bokeh","old_version":"3.6.2","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"certifi","old_version":"2025.1.31","new_version":"2026.1.4","repository_url":"https://github.com/certifi/python-certifi"},{"name":"cryptography","old_version":"44.0.1","new_version":"46.0.4","repository_url":"https://github.com/pyca/cryptography"},{"name":"idna","old_version":"3.10","new_version":"3.11","repository_url":"https://github.com/kjd/idna"},{"name":"jsonschema","old_version":"4.23.0","new_version":"4.26.0","repository_url":"https://github.com/python-jsonschema/jsonschema"},{"name":"markdown","old_version":"3.7","new_version":"3.10.1","repository_url":"https://github.com/Python-Markdown/markdown"},{"name":"markupsafe","old_version":"3.0.2","new_version":"3.0.3","repository_url":"https://github.com/pallets/markupsafe"},{"name":"networkx","old_version":"3.4.2","new_version":"3.6.1","repository_url":"https://github.com/networkx/networkx"},{"name":"numpy","old_version":"2.2.3","new_version":"2.4.2","repository_url":"https://github.com/numpy/numpy"},{"name":"pillow","old_version":"11.1.0","new_version":"12.1.0","repository_url":"https://github.com/python-pillow/Pillow"},{"name":"plotly","old_version":"5.24.1","new_version":"6.5.2","repository_url":"https://github.com/plotly/plotly.py"},{"name":"pyasn1","old_version":"0.6.1","new_version":"0.6.2","repository_url":"https://github.com/pyasn1/pyasn1"},{"name":"pycurl","old_version":"7.45.4","new_version":"7.45.7","repository_url":"https://github.com/pycurl/pycurl"},{"name":"pygments","old_version":"2.19.1","new_version":"2.19.2","repository_url":"https://github.com/pygments/pygments"},{"name":"pyopenssl","old_version":"25.0.0","new_version":"25.3.0","repository_url":"https://github.com/pyca/pyopenssl"},{"name":"rsa","old_version":"4.9","new_version":"4.9.1","repository_url":"https://github.com/sybrenstuvel/python-rsa"},{"name":"scipy","old_version":"1.15.2","new_version":"1.17.0","repository_url":"https://github.com/scipy/scipy"},{"name":"setuptools","old_version":"75.8.2","new_version":"80.10.2","repository_url":"https://github.com/pypa/setuptools"},{"name":"sympy","old_version":"1.13.3","new_version":"1.14.0","repository_url":"https://github.com/sympy/sympy"},{"name":"wordcloud","old_version":"1.9.4","new_version":"1.9.6","repository_url":"https://github.com/amueller/word_cloud"},{"name":"ipython","old_version":"8.33.0","new_version":"9.9.0","repository_url":"https://github.com/ipython/ipython"},{"name":"ipywidgets","old_version":"8.1.5","new_version":"8.1.8","repository_url":"https://github.com/jupyter-widgets/ipywidgets"},{"name":"jinja2","old_version":"3.1.5","new_version":"3.1.6","repository_url":"https://github.com/pallets/jinja"},{"name":"pandas","old_version":"2.2.3","new_version":"3.0.0","repository_url":"https://github.com/pandas-dev/pandas"},{"name":"pymongo","old_version":"4.11.1","new_version":"4.16.0","repository_url":"https://github.com/mongodb/mongo-python-driver"},{"name":"pyyaml","old_version":"6.0.2","new_version":"6.0.3","repository_url":"https://github.com/yaml/pyyaml"},{"name":"requests","old_version":"2.32.3","new_version":"2.32.5","repository_url":"https://github.com/psf/requests"},{"name":"scikit-learn","old_version":"1.6.1","new_version":"1.8.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"statsmodels","old_version":"0.14.4","new_version":"0.14.6","repository_url":"https://github.com/statsmodels/statsmodels"},{"name":"tornado","old_version":"6.4.2","new_version":"6.5.4","repository_url":"https://github.com/tornadoweb/tornado"},{"name":"coverage","old_version":"7.6.12","new_version":"7.13.2","repository_url":"https://github.com/coveragepy/coveragepy"},{"name":"pytest","old_version":"8.3.4","new_version":"9.0.2","repository_url":"https://github.com/pytest-dev/pytest"},{"name":"pytest-cov","old_version":"6.0.0","new_version":"7.0.0","repository_url":"https://github.com/pytest-dev/pytest-cov"},{"name":"pytest-recording","old_version":"0.13.2","new_version":"0.13.4","repository_url":"https://github.com/kiwicom/pytest-recording"},{"name":"ruff","old_version":"0.9.9","new_version":"0.14.14","repository_url":"https://github.com/astral-sh/ruff"},{"name":"vcrpy","old_version":"7.0.0","new_version":"8.1.1","repository_url":"https://github.com/kevin1024/vcrpy"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 38 updates in the /src directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.3` | `4.14.3` |\n| [biopython](https://github.com/biopython/biopython) | `1.85` | `1.86` |\n| [bokeh](https://github.com/bokeh/bokeh) | `3.6.2` | `3.8.2` |\n| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2026.1.4` |\n| [cryptography](https://github.com/pyca/cryptography) | `44.0.1` | `46.0.4` |\n| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |\n| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.23.0` | `4.26.0` |\n| [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.10.1` |\n| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |\n| [networkx](https://github.com/networkx/networkx) | `3.4.2` | `3.6.1` |\n| [numpy](https://github.com/numpy/numpy) | `2.2.3` | `2.4.2` |\n| [pillow](https://github.com/python-pillow/Pillow) | `11.1.0` | `12.1.0` |\n| [plotly](https://github.com/plotly/plotly.py) | `5.24.1` | `6.5.2` |\n| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` |\n| [pycurl](https://github.com/pycurl/pycurl) | `7.45.4` | `7.45.7` |\n| [pygments](https://github.com/pygments/pygments) | `2.19.1` | `2.19.2` |\n| [pyopenssl](https://github.com/pyca/pyopenssl) | `25.0.0` | `25.3.0` |\n| [rsa](https://github.com/sybrenstuvel/python-rsa) | `4.9` | `4.9.1` |\n| [scipy](https://github.com/scipy/scipy) | `1.15.2` | `1.17.0` |\n| [setuptools](https://github.com/pypa/setuptools) | `75.8.2` | `80.10.2` |\n| [sympy](https://github.com/sympy/sympy) | `1.13.3` | `1.14.0` |\n| [wordcloud](https://github.com/amueller/word_cloud) | `1.9.4` | `1.9.6` |\n| [ipython](https://github.com/ipython/ipython) | `8.33.0` | `9.9.0` |\n| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.5` | `8.1.8` |\n| [jinja2](https://github.com/pallets/jinja) | `3.1.5` | `3.1.6` |\n| [pandas](https://github.com/pandas-dev/pandas) | `2.2.3` | `3.0.0` |\n| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.11.1` | `4.16.0` |\n| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |\n| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` |\n| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.1` | `1.8.0` |\n| [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.4` | `0.14.6` |\n| [tornado](https://github.com/tornadoweb/tornado) | `6.4.2` | `6.5.4` |\n| [coverage](https://github.com/coveragepy/coveragepy) | `7.6.12` | `7.13.2` |\n| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `9.0.2` |\n| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `7.0.0` |\n| [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` |\n| [ruff](https://github.com/astral-sh/ruff) | `0.9.9` | `0.14.14` |\n| [vcrpy](https://github.com/kevin1024/vcrpy) | `7.0.0` | `8.1.1` |\n\n\nUpdates `beautifulsoup4` from 4.13.3 to 4.14.3\n\nUpdates `biopython` from 1.85 to 1.86\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biopython/biopython/blob/master/NEWS.rst\"\u003ebiopython's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e28 October 2025: Biopython 1.86\u003c/h1\u003e\n\u003cp\u003eThis release of Biopython supports Python 3.10, 3.11, 3.12, 3.13 and 3.14.  It\nhas also been tested on PyPy3.10 v7.3.19.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.SearchIO\u003c/code\u003e now supports parsing the tabular and plain text output of\n\u003ccode\u003eInfernal \u0026lt;http://eddylab.org/infernal/\u0026gt;\u003c/code\u003e (v1.0.0+) RNA search tool. The\nformat names are \u003ccode\u003einfernal-tab\u003c/code\u003e and \u003ccode\u003einfernal-text\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe default value of the gap score of a \u003ccode\u003ePairwiseAligner\u003c/code\u003e object was changed\nin this release.  Previously, for consistency with \u003ccode\u003eBio.pairwise2\u003c/code\u003e, the\ndefault value for gap score was 0.  However, this means that a mismatch, an\ninsertion followed by a deletion, and a deletion followed by an insertion all\nget assigned a score of 0.  The aligner then finds a large number of alignments\nthat are logically the same, but have trivial differences between them.  For\nexample, aligning AAACAAA to AAAGAAA previously yielded the following three\nalignments, all with score 6::\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e AAACAAA        AAAC-AAA        AAA-CAAA\n AAAGAAA        AAA-GAAA        AAAG-AAA\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eWith the new default parameter for the gap score, only the first alignment is\nreturned.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.PDBIO\u003c/code\u003e now ensures that b-factor values are always at most 6 characters to\nensure that we do not violate the wwPDB specification. This should not have an impact\non the majority of uses, as b-factor values are generally small (less than 100). When\n1000 \u0026lt;= b-factor \u0026lt; 10_000, the value is rounded to a single decimal place. When,\n10_000 \u0026lt;= b-factor \u0026lt; 999_999, the value is rounded to zero decimal places. Values\nabove 999_999 are now clamped. The justification for this is the rise in the b-factor\nfield being used for additional metadata, typically from computational tools.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.Align\u003c/code\u003e now provides a method \u003ccode\u003eAlignment.from_alignments_with_same_reference\u003c/code\u003e\nto construct a multiple sequence alignment from a collection of alignments\nthat share the same reference sequence.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.PDBIO\u003c/code\u003e will now raise module specific warnings:\n\u003ccode\u003eBio.PDB.PDBExceptions.PDBIOWarning\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.SCADIO\u003c/code\u003e now supports object selection by color in the OpenSCAD\noutput file.  This enables generation of separate STL files for each color for\nprinting protein structures on multi-material 3D printers.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003eiplotx\u003c/code\u003e library is mentioned in the Tutorial as an option to visualise\ntrees using complex style options.\u003c/p\u003e\n\u003cp\u003eMany thanks to the Biopython developers and community for making this release\npossible, especially the following contributors:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/biopython/biopython/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bokeh` from 3.6.2 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.6.2...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `certifi` from 2025.1.31 to 2026.1.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/c64d9f3a8496c0195548697f2080e716af66dd6a\"\u003e\u003ccode\u003ec64d9f3\u003c/code\u003e\u003c/a\u003e 2026.01.04 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/4ac232f05a547071543d2fb069aa3c62b1dc79f3\"\u003e\u003ccode\u003e4ac232f\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/95ae4b20e8abb7fa708e751e346466d16b36211a\"\u003e\u003ccode\u003e95ae4b2\u003c/code\u003e\u003c/a\u003e Update CI workflow to use Ubuntu 24.04 and Python 3.14 stable (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/386\"\u003e#386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/b72a7b1a40ae20755338d3132d8f880427b3b6fc\"\u003e\u003ccode\u003eb72a7b1\u003c/code\u003e\u003c/a\u003e Bump dessant/lock-threads from 5.0.1 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/385\"\u003e#385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ecc267216fbdcecb1b2aa2aa175152b773cc5ced\"\u003e\u003ccode\u003eecc2672\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/384\"\u003e#384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/6a897dbc1124b17f179ef225742fcda481ec96f3\"\u003e\u003ccode\u003e6a897db\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/27ca98ad845ee6d130a88301622c137893f71620\"\u003e\u003ccode\u003e27ca98a\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/381\"\u003e#381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/56c59a63909cfd3162b37e7bc16956e64df0f737\"\u003e\u003ccode\u003e56c59a6\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 6.0.0 to 6.0.1 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ae0021cd43a77bfba67d20a041469cdf6996570e\"\u003e\u003ccode\u003eae0021c\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/380\"\u003e#380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ddf5d0b5d2a3d55fd92a79f141dbb5e074caf924\"\u003e\u003ccode\u003eddf5d0b\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5.0.1 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/certifi/python-certifi/compare/2025.01.31...2026.01.04\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cryptography` from 44.0.1 to 46.0.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst\"\u003ecryptography's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e46.0.4 - 2026-01-27\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* `Dropped support for win_arm64 wheels`_.\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.\n\u003cp\u003e.. _v46-0-3:\u003c/p\u003e\n\u003cp\u003e46.0.3 - 2025-10-15\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed compilation when using LibreSSL 4.2.0.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. _v46-0-2:\u003c/p\u003e\n\u003cp\u003e46.0.2 - 2025-09-30\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.\n\u003cp\u003e.. _v46-0-1:\u003c/p\u003e\n\u003cp\u003e46.0.1 - 2025-09-16\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where users installing via \u003ccode\u003epip\u003c/code\u003e on Python 3.14 development\nversions would not properly install a dependency.\u003c/li\u003e\n\u003cli\u003eFixed an issue building the free-threaded macOS 3.14 wheels.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. _v46-0-0:\u003c/p\u003e\n\u003cp\u003e46.0.0 - 2025-09-16\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* **BACKWARDS INCOMPATIBLE:** Support for Python 3.7 has been removed.\n* Support for OpenSSL \u0026lt; 3.0 is deprecated and will be removed in the next\n  release.\n* Support for ``x86_64`` macOS (including publishing wheels) is deprecated\n  and will be removed in two releases. We will switch to publishing an\n  ``arm64`` only wheel for macOS.\n* Support for 32-bit Windows (including publishing wheels) is deprecated\n  and will be removed in two releases. Users should move to a 64-bit\n  Python installation.\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.\n* We now build ``ppc64le`` ``manylinux`` wheels and publish them to PyPI.\n* We now build ``win_arm64`` (Windows on Arm) wheels and publish them to PyPI.\n* Added support for free-threaded Python 3.14.\n* Removed the deprecated ``get_attribute_for_oid`` method on\n  :class:`~cryptography.x509.CertificateSigningRequest`. Users should use\n  :meth:`~cryptography.x509.Attributes.get_attribute_for_oid` instead.\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt; \n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e6f44fc8e6391f05d719fb9d369692325b87a471\"\u003e\u003ccode\u003ee6f44fc\u003c/code\u003e\u003c/a\u003e bump for 46.0.4 and drop win arm64 due to CI issues (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/14217\"\u003e#14217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/c0af4dd7b75921bbe9f1d41a03dbd4b64a9e3403\"\u003e\u003ccode\u003ec0af4dd\u003c/code\u003e\u003c/a\u003e release 46.0.3 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13681\"\u003e#13681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/99efe5ad150a56efadafacaffd0e3ee319373904\"\u003e\u003ccode\u003e99efe5a\u003c/code\u003e\u003c/a\u003e bump version for 46.0.2 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13531\"\u003e#13531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e735cfc27502320101c130335c556394a125ba52\"\u003e\u003ccode\u003ee735cfc\u003c/code\u003e\u003c/a\u003e release 46.0.1 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13450\"\u003e#13450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/4e457ffba43a6d87efc63c33041e2081438dd8a4\"\u003e\u003ccode\u003e4e457ff\u003c/code\u003e\u003c/a\u003e Explicitly specify python in mac uv build invocation (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/2726efdb6d67f1c90cf9c6062d9fe051965586f8\"\u003e\u003ccode\u003e2726efd\u003c/code\u003e\u003c/a\u003e Depend on CFFI 2.0.0 or newer on Python \u0026gt; 3.8 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13448\"\u003e#13448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/62230623d183706632c0eb7822c96ac95e3710a8\"\u003e\u003ccode\u003e6223062\u003c/code\u003e\u003c/a\u003e release 46.0.0 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13446\"\u003e#13446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/563c4915b0931455706f761a4579c26698824eae\"\u003e\u003ccode\u003e563c491\u003c/code\u003e\u003c/a\u003e Update comment for pyopenssl-release tag (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13445\"\u003e#13445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/d2f6f7faced35b73277bc624ff496f8af696b172\"\u003e\u003ccode\u003ed2f6f7f\u003c/code\u003e\u003c/a\u003e Bump downstream dependencies in CI (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13439\"\u003e#13439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e7ab02bd679d0b4f55d93486fe27e62554ef15d4\"\u003e\u003ccode\u003ee7ab02b\u003c/code\u003e\u003c/a\u003e we'll ship this with 3.5.3 why not (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13442\"\u003e#13442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pyca/cryptography/compare/44.0.1...46.0.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `idna` from 3.10 to 3.11\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/blob/master/HISTORY.rst\"\u003eidna's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.11 (2025-10-12)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 16.0.0, including significant changes to UTS46\nprocessing. As a result of Unicode ending support for it, transitional\nprocessing no longer has an effect and returns the same result.\u003c/li\u003e\n\u003cli\u003eAdd support for Python 3.14, lowest supported version is Python 3.8.\u003c/li\u003e\n\u003cli\u003eVarious updates to packaging, including PEP 740 support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/ad949ee3052c2265c66e3df2dd8871a5832ba327\"\u003e\u003ccode\u003ead949ee\u003c/code\u003e\u003c/a\u003e Release v3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/cae4ba779e0a543823894bd4136651c187944da8\"\u003e\u003ccode\u003ecae4ba7\u003c/code\u003e\u003c/a\u003e Second release candidate for 3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/8adb305165c77c4a45d1568a70ead75d2197692c\"\u003e\u003ccode\u003e8adb305\u003c/code\u003e\u003c/a\u003e Add space in RST link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/74cb2b652bb06133b0c4ab52cc98221be63162cf\"\u003e\u003ccode\u003e74cb2b6\u003c/code\u003e\u003c/a\u003e Release candidate for 3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/05dab09fdde5bbf7d52f757c4dc62e0ba934cca8\"\u003e\u003ccode\u003e05dab09\u003c/code\u003e\u003c/a\u003e Format idna-data with ruff\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/90eac78b737d26613776b490432fc6d926b15c55\"\u003e\u003ccode\u003e90eac78\u003c/code\u003e\u003c/a\u003e Apply ruff formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/a31ce7ecc0b767e40abb5ce28744ac567b73f366\"\u003e\u003ccode\u003ea31ce7e\u003c/code\u003e\u003c/a\u003e Remove errant test vectors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/81f03334211c78c1832991ce70ebafb3cbfbb79c\"\u003e\u003ccode\u003e81f0333\u003c/code\u003e\u003c/a\u003e Omit vectors known to be broken in test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/a0f32578c0cac28c7ffbb4c860c92eb2b9b579bd\"\u003e\u003ccode\u003ea0f3257\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into unicode-16-uts46-changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/38d98860e6a1ab92fd35ab09ea4739feabf339a3\"\u003e\u003ccode\u003e38d9886\u003c/code\u003e\u003c/a\u003e Remove extra UTS46 test vector\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kjd/idna/compare/v3.10...v3.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jsonschema` from 4.23.0 to 4.26.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-jsonschema/jsonschema/releases\"\u003ejsonschema's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.26.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1400\"\u003epython-jsonschema/jsonschema#1400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1405\"\u003epython-jsonschema/jsonschema#1405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.5.0 to 6.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1406\"\u003epython-jsonschema/jsonschema#1406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1407\"\u003epython-jsonschema/jsonschema#1407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1413\"\u003epython-jsonschema/jsonschema#1413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.6.0 to 6.6.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1412\"\u003epython-jsonschema/jsonschema#1412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1410\"\u003epython-jsonschema/jsonschema#1410\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.2 to 2.3.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1409\"\u003epython-jsonschema/jsonschema#1409\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-python from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1411\"\u003epython-jsonschema/jsonschema#1411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidators: avoid \u003ccode\u003eurllib.request\u003c/code\u003e at import-time by \u003ca href=\"https://github.com/gudnimg\"\u003e\u003ccode\u003e@​gudnimg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1416\"\u003epython-jsonschema/jsonschema#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.6.1 to 6.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1417\"\u003epython-jsonschema/jsonschema#1417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.3 to 2.3.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1418\"\u003epython-jsonschema/jsonschema#1418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1415\"\u003epython-jsonschema/jsonschema#1415\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.4 to 2.4.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1419\"\u003epython-jsonschema/jsonschema#1419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 3 to 4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1420\"\u003epython-jsonschema/jsonschema#1420\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.8.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1421\"\u003epython-jsonschema/jsonschema#1421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1424\"\u003epython-jsonschema/jsonschema#1424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.0 to 7.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1423\"\u003epython-jsonschema/jsonschema#1423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1425\"\u003epython-jsonschema/jsonschema#1425\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1429\"\u003epython-jsonschema/jsonschema#1429\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1431\"\u003epython-jsonschema/jsonschema#1431\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1432\"\u003epython-jsonschema/jsonschema#1432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.1 to 7.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1430\"\u003epython-jsonschema/jsonschema#1430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1434\"\u003epython-jsonschema/jsonschema#1434\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.2 to 7.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1435\"\u003epython-jsonschema/jsonschema#1435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1436\"\u003epython-jsonschema/jsonschema#1436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1437\"\u003epython-jsonschema/jsonschema#1437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.4.2 to 2.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1438\"\u003epython-jsonschema/jsonschema#1438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1439\"\u003epython-jsonschema/jsonschema#1439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003euuid\u003c/code\u003e format by \u003ca href=\"https://github.com/sim642\"\u003e\u003ccode\u003e@​sim642\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1440\"\u003epython-jsonschema/jsonschema#1440\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1441\"\u003epython-jsonschema/jsonschema#1441\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.4 to 7.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1442\"\u003epython-jsonschema/jsonschema#1442\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1443\"\u003epython-jsonschema/jsonschema#1443\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gudnimg\"\u003e\u003ccode\u003e@​gudnimg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1416\"\u003epython-jsonschema/jsonschema#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sim642\"\u003e\u003ccode\u003e@​sim642\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1440\"\u003epython-jsonschema/jsonschema#1440\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0\"\u003ehttps://github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.25.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eValidator\u003c/code\u003e protocol init to match runtime by \u003ca href=\"https://github.com/sirosen\"\u003e\u003ccode\u003e@​sirosen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1396\"\u003epython-jsonschema/jsonschema#1396\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst\"\u003ejsonschema's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev4.26.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eDecrease import time by delaying importing of \u003ccode\u003eurllib.request\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1416\"\u003e#1416\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.25.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix an incorrect required argument in the \u003ccode\u003eValidator\u003c/code\u003e protocol's type annotations (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1396\"\u003e#1396\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.25.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for the \u003ccode\u003eiri\u003c/code\u003e and \u003ccode\u003eiri-reference\u003c/code\u003e formats to the \u003ccode\u003eformat-nongpl\u003c/code\u003e extra via the MIT-licensed \u003ccode\u003erfc3987-syntax\u003c/code\u003e.\nThey were alread supported by the \u003ccode\u003eformat\u003c/code\u003e extra. (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1388\"\u003e#1388\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.24.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eProperly escape segments in \u003ccode\u003eValidationError.json_path\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/139\"\u003e#139\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.24.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix improper handling of \u003ccode\u003eunevaluatedProperties\u003c/code\u003e in the presence of \u003ccode\u003eadditionalProperties\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1351\"\u003e#1351\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSupport for Python 3.8 has been dropped, as it is end-of-life.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/a7277432b0f7bcd0551f6e589d30457017125df4\"\u003e\u003ccode\u003ea727743\u003c/code\u003e\u003c/a\u003e Add a changelog entry for 4.26.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/6d28c13efbbd6cf136143fdbb18f79d4476091f6\"\u003e\u003ccode\u003e6d28c13\u003c/code\u003e\u003c/a\u003e Update the lockfile.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/739499edc33c007ff62180c9fef61dbf5480bb7b\"\u003e\u003ccode\u003e739499e\u003c/code\u003e\u003c/a\u003e Update pre-commit hooks.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/cb2d77980713577f65cc7e7c7c115932206393fd\"\u003e\u003ccode\u003ecb2d779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1443\"\u003e#1443\u003c/a\u003e from python-jsonschema/pre-commit-ci-update-config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/e6bbbb7c5bcdb32a654572d17bfce264aefd1f9d\"\u003e\u003ccode\u003ee6bbbb7\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/d56037a88faac4881214c6674a785b4abd428617\"\u003e\u003ccode\u003ed56037a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1442\"\u003e#1442\u003c/a\u003e from python-jsonschema/dependabot/github_actions/ast...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/e54ce13fb590a5c17fb702431598a382de6e68f9\"\u003e\u003ccode\u003ee54ce13\u003c/code\u003e\u003c/a\u003e Bump astral-sh/setup-uv from 7.1.4 to 7.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/1f7c9fbd01d9c2f8ddd98065324062f7e122dbe1\"\u003e\u003ccode\u003e1f7c9fb\u003c/code\u003e\u003c/a\u003e Partially update docs requirements.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/241aec982bc8c867f276779faf20d49d9774532f\"\u003e\u003ccode\u003e241aec9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1441\"\u003e#1441\u003c/a\u003e from python-jsonschema/pre-commit-ci-update-config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/2818efb4fa446ed4fa7815b4e09a7b4b7c633852\"\u003e\u003ccode\u003e2818efb\u003c/code\u003e\u003c/a\u003e Apache-2.0 -\u0026gt; nongpl\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-jsonschema/jsonschema/compare/v4.23.0...v4.26.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown` from 3.7 to 3.10.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Python-Markdown/markdown/releases\"\u003emarkdown's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 3.10.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure nested elements inside inline comments are properly unescaped (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1571\"\u003e#1571\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMake the docs build successfully with mkdocstrings-python 2.0 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1575\"\u003e#1575\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix infinite loop when multiple bogus or unclosed HTML comments appear in input (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1578\"\u003e#1578\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix another infinite loop when handling bad comments (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1586\"\u003e#1586\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.10.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOfficially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9\nand PyPy 3.9.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix an HTML comment parsing case in some Python versions that can cause an\ninfinite loop (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1554\"\u003e#1554\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRevert the default behavior of \u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e (to \u003ccode\u003eTrue\u003c/code\u003e). The new\nbehavior introduced in 3.9.0 is experimental and results are inconsistent.\nIt should not have been made the default behavior (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1561\"\u003e#1561\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.9.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFootnotes are now ordered by the occurrence of their references in the\ndocument. A new configuration option for the footnotes extension,\n\u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e, has been added to support restoring the previous\nbehavior of ordering footnotes by the occurrence of definitions (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1367\"\u003e#1367\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure inline processing iterates through elements in document order (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1546\"\u003e#1546\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix handling of incomplete HTML tags in code spans in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1547\"\u003e#1547\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.8.2\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ecodecs\u003c/code\u003e deprecation in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed comment parsing in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed declarations in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed HTML tag \u003ccode\u003e\u0026lt;foo\u003c/code\u003e and Python 3.14.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.8.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure incomplete markup declaration in raw HTML doesn't crash parser (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1534\"\u003e#1534\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed dropped content in \u003ccode\u003emd_in_html\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1526\"\u003e#1526\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed HTML handling corner case that prevented some content from not being rendered (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1528\"\u003e#1528\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md\"\u003emarkdown's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[3.10.1] - 2026-01-21\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure nested elements inside inline comments are properly unescaped (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1571\"\u003e#1571\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMake the docs build successfully with mkdocstrings-python 2.0 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1575\"\u003e#1575\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix infinite loop when multiple bogus or unclosed HTML comments appear in input (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1578\"\u003e#1578\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix another infinite loop when handling bad comments (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1586\"\u003e#1586\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.10.0] - 2025-11-03\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOfficially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9\nand PyPy 3.9.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix an HTML comment parsing case in some Python versions that can cause an\ninfinite loop (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1554\"\u003e#1554\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRevert the default behavior of \u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e (to \u003ccode\u003eTrue\u003c/code\u003e). The new\nbehavior introduced in 3.9.0 is experimental and results are inconsistent.\nIt should not have been made the default behavior (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1561\"\u003e#1561\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.9.0] - 2025-09-04\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFootnotes are now ordered by the occurrence of their references in the\ndocument. A new configuration option for the footnotes extension,\n\u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e, has been added to support restoring the previous\nbehavior of ordering footnotes by the occurrence of definitions (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1367\"\u003e#1367\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure inline processing iterates through elements in document order (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1546\"\u003e#1546\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix handling of incomplete HTML tags in code spans in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1547\"\u003e#1547\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.8.2] - 2025-06-19\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ecodecs\u003c/code\u003e deprecation in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed comment parsing in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed declarations in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed HTML tag \u003ccode\u003e\u0026lt;foo\u003c/code\u003e and Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.8.1] - 2025-06-18\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/e5fa5b86e8ec380cbc520cfc637d72c779e5c601\"\u003e\u003ccode\u003ee5fa5b8\u003c/code\u003e\u003c/a\u003e Bump version to 3.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/f9253495f5d9919f2fdd5e147832b5fc21330f65\"\u003e\u003ccode\u003ef925349\u003c/code\u003e\u003c/a\u003e More HTML fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/9933a0a4699f3dea91f46528a2bf54863f531c08\"\u003e\u003ccode\u003e9933a0a\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Allow reference links with backticks\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/07dfa4eb43f7a2ab3181b4f842a960a03a6c1221\"\u003e\u003ccode\u003e07dfa4e\u003c/code\u003e\u003c/a\u003e Allow reference links with backticks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/fb6b27a6ff90980b5bcb0cd51528a7c9dc3a93ca\"\u003e\u003ccode\u003efb6b27a\u003c/code\u003e\u003c/a\u003e Fix infinite loop when text contains multiple unclosed comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/89112c293f7b399ae8808f3a06306f46601e9684\"\u003e\u003ccode\u003e89112c2\u003c/code\u003e\u003c/a\u003e Make the docs build successfully with mkdocstrings-python 2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/961856ceb30623b929d8b7abdf5ed7074db7184c\"\u003e\u003ccode\u003e961856c\u003c/code\u003e\u003c/a\u003e Update link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/2b49115b1002142afbd84b3002f13c0e98a0f487\"\u003e\u003ccode\u003e2b49115\u003c/code\u003e\u003c/a\u003e Ensure nested elements inside inline comments are properly unescaped.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/22e89c1fc346f72218a10e392a0c3b4731912522\"\u003e\u003ccode\u003e22e89c1\u003c/code\u003e\u003c/a\u003e Bump version to 3.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/c138aea5139a6aceae05bb957e866d9ce7577b94\"\u003e\u003ccode\u003ec138aea\u003c/code\u003e\u003c/a\u003e + PY314 - PY39\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Python-Markdown/markdown/compare/3.7...3.10.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markupsafe` from 3.0.2 to 3.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pallets/markupsafe/releases\"\u003emarkupsafe's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.0.3\u003c/h2\u003e\n\u003cp\u003eThis is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.\u003c/p\u003e\n\u003cp\u003ePyPI: \u003ca href=\"https://pypi.org/project/MarkupSafe/3.0.3/\"\u003ehttps://pypi.org/project/MarkupSafe/3.0.3/\u003c/a\u003e\nChanges: \u003ca href=\"https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3\"\u003ehttps://markupsafe.palletsprojects.com/page/changes/#version-3-0-3\u003c/a\u003e\nMilestone: \u003ca href=\"https://github.com/pallets/markupsafe/milestone/15?closed=1\"\u003ehttps://github.com/pallets/markupsafe/milestone/15?closed=1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e__version__\u003c/code\u003e raises \u003ccode\u003eDeprecationWarning\u003c/code\u003e instead of \u003ccode\u003eUserWarning\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/487\"\u003e#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdopt multi-phase initialization PEP 489 for the C extension. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/494\"\u003e#494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild Windows ARM64 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/485\"\u003e#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild Python 3.14 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/503\"\u003e#503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild riscv64 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/505\"\u003e#505\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pallets/markupsafe/blob/main/CHANGES.rst\"\u003emarkupsafe's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.0.3\u003c/h2\u003e\n\u003cp\u003eReleased 2025-09-27\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e__version__\u003c/code\u003e raises \u003ccode\u003eDeprecationWarning\u003c/code\u003e instead of \u003ccode\u003eUserWarning\u003c/code\u003e.\n:issue:\u003ccode\u003e487\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdopt multi-phase initialisation (:pep:\u003ccode\u003e489\u003c/code\u003e) for the C extension.\n:issue:\u003ccode\u003e494\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild Windows ARM64 wheels. :issue:\u003ccode\u003e485\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild Python 3.14 wheels. :issue:\u003ccode\u003e503\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild riscv64 wheels. :issue:\u003ccode\u003e505\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/297fc8e356e6836a62087949245d09a28e9f1b13\"\u003e\u003ccode\u003e297fc8e\u003c/code\u003e\u003c/a\u003e release version 3.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/7e4e6ce249107c5f27fa6fe890e29da7a8dc8f0c\"\u003e\u003ccode\u003e7e4e6ce\u003c/code\u003e\u003c/a\u003e Free-threading: run with pytest-run-paralell (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/507\"\u003e#507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/6100b9c0d466495a08d55b33cb172d7b5d8e9aa1\"\u003e\u003ccode\u003e6100b9c\u003c/code\u003e\u003c/a\u003e enable riscv64 wheels (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/506\"\u003e#506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/c9d5ecfc7eec6f611b19cdc8e1cde1aaa65cb8eb\"\u003e\u003ccode\u003ec9d5ecf\u003c/code\u003e\u003c/a\u003e enable riscv64 wheels\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/2f9b33753052e7c6df1464a7c900787d04ae9daf\"\u003e\u003ccode\u003e2f9b337\u003c/code\u003e\u003c/a\u003e tox for 3.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/78d951a9549dee9fc901c55fc79a74a5f01e96fc\"\u003e\u003ccode\u003e78d951a\u003c/code\u003e\u003c/a\u003e update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/bb6744e392e79611b110c5ba022238eb1b855cc2\"\u003e\u003ccode\u003ebb6744e\u003c/code\u003e\u003c/a\u003e add entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/65c4134ab16a3faccbcac2cba90da0db2b799542\"\u003e\u003ccode\u003e65c4134\u003c/code\u003e\u003c/a\u003e upgrade cibuildwheel, add \u003ccode\u003ecp314\u003c/code\u003e wheels and test on CPython 3.14 (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/504\"\u003e#504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/3a9bd88b84c9edba8b922bb12b84a59feed98788\"\u003e\u003ccode\u003e3a9bd88\u003c/code\u003e\u003c/a\u003e add cp314 wheels\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/aafe44d87bd7974bc82af8c4010dea9938441edf\"\u003e\u003ccode\u003eaafe44d\u003c/code\u003e\u003c/a\u003e remove slsa provenance (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/501\"\u003e#501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pallets/markupsafe/compare/3.0.2...3.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `networkx` from 3.4.2 to 3.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/networkx/networkx/releases\"\u003enetworkx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eNetworkX 3.6.1\u003c/h2\u003e\n\u003ch1\u003enetworkx 3.6.1\u003c/h1\u003e\n\u003cp\u003eWe're happy to announce the release of networkx 3.6.1!\u003c/p\u003e\n\u003ch2\u003eAPI Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd spectral bipartition community finding and greedy bipartition using node swaps (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8347\"\u003e#8347\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eEnhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNodelists for \u003ccode\u003efrom_biadjacency_matrix\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/7993\"\u003e#7993\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eAdd spectral bipartition community finding and greedy bipartition using node swaps (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8347\"\u003e#8347\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix draw_networkx_nodes with list node_shape and add regression test (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8363\"\u003e#8363\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix: allow graph subclasses to have additional arguments (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8369\"\u003e#8369\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDOC: Improve benchmarking readme (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8358\"\u003e#8358\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: More details re: RC releases in the release process devdocs (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8346\"\u003e#8346\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tutorial (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8300\"\u003e#8300\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: Add blurb to contributor guide about drawing tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8370\"\u003e#8370\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: Fix underline lens in docstrings (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8371\"\u003e#8371\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRolling back shortest paths links (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8373\"\u003e#8373\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMAINT: Replace string literal with comment (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8359\"\u003e#8359\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 in the actions group (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8360\"\u003e#8360\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003epin python 3.14 to be version 3.14.0 until dataclasses are fixed (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8365\"\u003e#8365\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBlocklist Python 3.14.1 (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8372\"\u003e#8372\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eTST: add tests for unsupported graph types in MST algorithms (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8353\"\u003e#8353\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTST: clean up isomorphism tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8364\"\u003e#8364\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003e10 authors added to this release (alphabetically):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Aka2210\"\u003e\u003ccode\u003e@​Aka2210\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jfinkels\"\u003e\u003ccode\u003e@​jfinkels\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaorTIRAM\"\u003e\u003ccode\u003e@​NaorTIRAM\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAditi Juneja (\u003ca href=\"https://github.com/Schefflera-Arboricola\"\u003e\u003ccode\u003e@​Schefflera-Arboricola\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlejandro Candioti (\u003ca href=\"https://github.com/amcandio\"\u003e\u003ccode\u003e@​amcandio\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eColman Bouton (\u003ca href=\"https://github.com/LorentzFactor\"\u003e\u003ccode\u003e@​LorentzFactor\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/7530809bfa1ea7ed6fdf918a4d1431488953cb1f\"\u003e\u003ccode\u003e7530809\u003c/code\u003e\u003c/a\u003e Designate 3.6.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/4788eb08f2492dd6bf6f97ce8ee07cd52aa6cf89\"\u003e\u003ccode\u003e4788eb0\u003c/code\u003e\u003c/a\u003e Rolling back shortest paths links (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8373\"\u003e#8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/696edb6efbbbb622959e96f1276fc0db68dc0954\"\u003e\u003ccode\u003e696edb6\u003c/code\u003e\u003c/a\u003e Fix draw_networkx_nodes with list node_shape and add regression test  (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8363\"\u003e#8363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/c38830c61a6fee3ee10f216071bb63cb9b92bfb9\"\u003e\u003ccode\u003ec38830c\u003c/code\u003e\u003c/a\u003e Blocklist Python 3.14.1 (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8372\"\u003e#8372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/81d231141b08600ebfd1c781e28ecbf791e94016\"\u003e\u003ccode\u003e81d2311\u003c/code\u003e\u003c/a\u003e DOC: Fix underline lens in docstrings. (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8371\"\u003e#8371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/a6e2bfadef51dda47df6466b32642e0d428c5801\"\u003e\u003ccode\u003ea6e2bfa\u003c/code\u003e\u003c/a\u003e DOC: Add blurb to contributor guide about drawing tests. (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/96b628295eff29d266e1c75355556fc9fe58cc16\"\u003e\u003ccode\u003e96b6282\u003c/code\u003e\u003c/a\u003e DOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/75bdd737ca8382d06eb76ff9018a81870c9f3443\"\u003e\u003ccode\u003e75bdd73\u003c/code\u003e\u003c/a\u003e Fix: allow graph subclasses to have additional arguments (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8369\"\u003e#8369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/7663fa5e5fd73d6921410a18c7ac4116ffa04f4d\"\u003e\u003ccode\u003e7663fa5\u003c/code\u003e\u003c/a\u003e TST: clean up isomorphism tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8364\"\u003e#8364\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/3dacd1bdcbd976b9e148a60ddebafd868c0a52f3\"\u003e\u003ccode\u003e3dacd1b\u003c/code\u003e\u003c/a\u003e Add spectral bipartition community finding and greedy bipartition using node ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/networkx/networkx/compare/networkx-3.4.2...networkx-3.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `numpy` from 2.2.3 to 2.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/numpy/numpy/releases\"\u003enumpy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.4.1 (Jan 10, 2026)\u003c/h2\u003e\n\u003ch1\u003eNumPy 2.4.1 Release Notes\u003c/h1\u003e\n\u003cp\u003eThe NumPy 2.4.1 is a patch release that fixes bugs discoved after the\n2.4.0 release. In particular, the typo \u003ccode\u003eSeedlessSequence\u003c/code\u003e is preserved to\nenable wheels using the random Cython API and built against NumPy \u0026lt; 2.4.0\nto run without errors.\u003c/p\u003e\n\u003cp\u003eThis release supports Python versions 3.11-3.14\u003c/p\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eA total of 9 people contributed to this release. People with a \u0026quot;+\u0026quot; by their\nnames contributed a patch for the first time.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAlexander Shadchin\u003c/li\u003e\n\u003cli\u003eBill Tompkins +\u003c/li\u003e\n\u003cli\u003eCharles Harris\u003c/li\u003e\n\u003cli\u003eJoren Hammudoglu\u003c/li\u003e\n\u003cli\u003eMarten van Kerkwijk\u003c/li\u003e\n\u003cli\u003eNathan Goldbaum\u003c/li\u003e\n\u003cli\u003eRaghuveer Devulapalli\u003c/li\u003e\n\u003cli\u003eRalf Gommers\u003c/li\u003e\n\u003cli\u003eSebastian Berg\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePull requests merged\u003c/h2\u003e\n\u003cp\u003eA total of 15 pull requests were merged for this release.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30490\"\u003e#30490\u003c/a\u003e: MAINT: Prepare 2.4.x for further development\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30503\"\u003e#30503\u003c/a\u003e: DOC: \u003ccode\u003enumpy.select\u003c/code\u003e: fix \u003ccode\u003edefault\u003c/code\u003e parameter docstring...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30504\"\u003e#30504\u003c/a\u003e: REV: Revert part of \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30164\"\u003e#30164\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30500\"\u003e#30500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30506\"\u003e#30506\u003c/a\u003e: TYP: \u003ccode\u003enumpy.select\u003c/code\u003e: allow passing array-like \u003ccode\u003edefault\u003c/code\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30507\"\u003e#30507\u003c/a\u003e: MNT: use if constexpr for compile-time branch selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30513\"\u003e#30513\u003c/a\u003e: BUG: Fix leak in flat assignment iterator\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30516\"\u003e#30516\u003c/a\u003e: BUG: fix heap overflow in fixed-width string multiply (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30511\"\u003e#30511\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30523\"\u003e#30523\u003c/a\u003e: BUG: Ensure summed weights returned by np.average always are...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30527\"\u003e#30527\u003c/a\u003e: TYP: Fix return type of histogram2d\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30594\"\u003e#30594\u003c/a\u003e: MAINT: avoid passing ints to random functions that take double...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30595\"\u003e#30595\u003c/a\u003e: BLD: Avoiding conflict with pygit2 for static build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30596\"\u003e#30596\u003c/a\u003e: MAINT: Fix msvccompiler missing error on FreeBSD\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30608\"\u003e#30608\u003c/a\u003e: BLD: update vendored Meson to 1.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30620\"\u003e#30620\u003c/a\u003e: ENH: use more fine-grained critical sections in array coercion...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30623\"\u003e#30623\u003c/a\u003e: BUG: Undo result type change of quantile/percentile but keep...\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.4.0 (Dec 20, 2025)\u003c/h2\u003e\n\u003ch1\u003eNumPy 2.4.0 Release Notes\u003c/h1\u003e\n\u003cp\u003eThe NumPy 2.4.0 release continues the work to improve free threaded Python\nsupport, user dtypes implementation, and annotations. There are many expired\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst\"\u003enumpy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eThis is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the\nfirst feature release using the \u003ccode\u003enumpy/numpy-release \u0026lt;https://github.com/numpy/numpy-release\u0026gt;\u003c/code\u003e__ repository.\u003c/p\u003e\n\u003cp\u003eThe commands can be copied into the command line, but be sure to replace 2.4.0\nwith the correct version. This should be read together with the\n:ref:\u003ccode\u003egeneral release guide \u0026lt;prepare_release\u0026gt;\u003c/code\u003e.\u003c/p\u003e\n\u003ch1\u003eFacility preparation\u003c/h1\u003e\n\u003cp\u003eBefore beginning to make a release, use the \u003ccode\u003erequirements/*_requirements.txt\u003c/code\u003e files to\nensure that you have the needed software. Most software can be installed with\npip, but some will require apt-get, dnf, or whatever your system uses for\nsoftware. You will also need a GitHub personal access token (PAT) to push the\ndocumentation. There are a few ways to streamline things:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eGit can be set up to use a keyring to store your GitHub personal access token.\nSearch online for the details.\u003c/li\u003e\n\u003cli\u003eYou can use the \u003ccode\u003ekeyring\u003c/code\u003e app to store the PyPI password for twine. See the\nonline twine documentation for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePrior to release\u003c/h1\u003e\n\u003ch2\u003eAdd/drop Python versions\u003c/h2\u003e\n\u003cp\u003eWhen adding or dropping Python versions, multiple config and CI files need to\nbe edited in addition to changing the minimum version in \u003ccode\u003epyproject.toml\u003c/code\u003e.\nMake these changes in an ordinary PR against main and backport if necessary.\nWe currently release wheels for new Python versions after the first Python RC\nonce manylinux and cibuildwheel support that new Python version.\u003c/p\u003e\n\u003ch2\u003eBackport pull requests\u003c/h2\u003e\n\u003cp\u003eChanges that have been marked for this release must be backported to the\nmaintenance/2.4.x branch.\u003c/p\u003e\n\u003ch2\u003eUpdate 2.4.0 milestones\u003c/h2\u003e\n\u003cp\u003eLook at the issues/prs with 2.4.0 milestones and either push them off to a\nlater version, or maybe remove the milestone. You may need to add a milestone.\u003c/p\u003e\n\u003cp\u003eCheck the numpy-release repo\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/c81c49f77451340651a751e76bca607d85e4fd55\"\u003e\u003ccode\u003ec81c49f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30757\"\u003e#30757\u003c/a\u003e from charris/prepare-2.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/b3ae9c59de627110458653836f1be81280222f85\"\u003e\u003ccode\u003eb3ae9c5\u003c/code\u003e\u003c/a\u003e REL: Prepare for the NumPy 2.4.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/9de89843c3918fa133f1aab9fb4435c38a3b0ba6\"\u003e\u003ccode\u003e9de8984\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30737\"\u003e#30737\u003c/a\u003e from mattip/scipy-openblas-backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/b7be329895e32de44578742b2745fb307cdf8625\"\u003e\u003ccode\u003eb7be329\u003c/code\u003e\u003c/a\u003e backport scipy-openblas version change\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/7ff98637f80dc1ff7a18fce8025ffabdded76094\"\u003e\u003ccode\u003e7ff9863\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30736\"\u003e#30736\u003c/a\u003e from charris/backport-30667\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/431fffbe91d86c04738f039e0048441f8f9b5fff\"\u003e\u003ccode\u003e431fffb\u003c/code\u003e\u003c/a\u003e MAINT: Skip tests that require \u003cstrong\u003ebuffer\u003c/strong\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/127235fcd9b2e80764da8f6c64f942a6bddb093a\"\u003e\u003ccode\u003e127235f\u003c/code\u003e\u003c/a\u003e BUG: fix thread safety of \u003ccode\u003earray_getbuffer\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30667\"\u003e#30667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/18bdb2e675b68daa5afc3250c41982ff77b3867f\"\u003e\u003ccode\u003e18bdb2e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30713\"\u003e#30713\u003c/a\u003e from charris/backport-30710\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/41dd7512de6dc3dd665b71d4e3a321aa1150dc48\"\u003e\u003ccode\u003e41dd751\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30712\"\u003e#30712\u003c/a\u003e from charris/backport-30705\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/7a278da99943376313b8f631905c3baaa7a82a30\"\u003e\u003ccode\u003e7a278da\u003c/code\u003e\u003c/a\u003e BUG: Fixup the quantile promotion fixup\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/numpy/numpy/compare/v2.2.3...v2.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 11.1.0 to 12.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.1.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate getdata(), in favour of new get_flattened_data() \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9292\"...\n\n_Description has been truncated_","html_url":"https://github.com/briehl/narrative/pull/657","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/briehl%2Fnarrative/issues/657","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/657/packages"},{"uuid":"3850733564","node_id":"PR_kwDOOclEzM6_Gsxx","number":45,"state":"open","title":"build(deps): bump the uv group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-24T09:34:54.000Z","updated_at":"2026-01-24T09:34:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"uv","update_count":6,"packages":[{"name":"orjson","old_version":"3.11.1","new_version":"3.11.5","repository_url":"https://github.com/ijl/orjson"},{"name":"urllib3","old_version":"2.5.0","new_version":"2.6.3","repository_url":"https://github.com/urllib3/urllib3"},{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"filelock","old_version":"3.18.0","new_version":"3.20.3","repository_url":"https://github.com/tox-dev/py-filelock"},{"name":"fonttools","old_version":"4.59.0","new_version":"4.60.2","repository_url":"https://github.com/fonttools/fonttools"},{"name":"virtualenv","old_version":"20.32.0","new_version":"20.36.1","repository_url":"https://github.com/pypa/virtualenv"}],"path":null,"ecosystem":"pip"},"body":"Bumps the uv group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [orjson](https://github.com/ijl/orjson) | `3.11.1` | `3.11.5` |\n| [urllib3](https://github.com/urllib3/urllib3) | `2.5.0` | `2.6.3` |\n| [bokeh](https://github.com/bokeh/bokeh) | `3.7.3` | `3.8.2` |\n| [filelock](https://github.com/tox-dev/py-filelock) | `3.18.0` | `3.20.3` |\n| [fonttools](https://github.com/fonttools/fonttools) | `4.59.0` | `4.60.2` |\n| [virtualenv](https://github.com/pypa/virtualenv) | `20.32.0` | `20.36.1` |\n\n\nUpdates `orjson` from 3.11.1 to 3.11.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ijl/orjson/releases\"\u003eorjson's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.11.5\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow simple error message instead of traceback when attempting to\nbuild on unsupported Python versions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.4\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eABI compatibility with CPython 3.15 alpha 1.\u003c/li\u003e\n\u003cli\u003ePublish PyPI wheels for 3.14 and manylinux i686, manylinux arm7,\nmanylinux ppc64le, manylinux s390x.\u003c/li\u003e\n\u003cli\u003eBuild now requires a C compiler.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.3\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix PyPI project metadata when using maturin 1.9.2 or later.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.2\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix build using Rust 1.89 on amd64.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuild now depends on Rust 1.85 or later instead of 1.82.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ijl/orjson/blob/master/CHANGELOG.md\"\u003eorjson's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.11.5 - 2025-12-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow simple error message instead of traceback when attempting to\nbuild on unsupported Python versions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.4 - 2025-10-24\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eABI compatibility with CPython 3.15 alpha 1.\u003c/li\u003e\n\u003cli\u003ePublish PyPI wheels for 3.14 and manylinux i686, manylinux arm7,\nmanylinux ppc64le, manylinux s390x.\u003c/li\u003e\n\u003cli\u003eBuild now requires a C compiler.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.3 - 2025-08-26\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix PyPI project metadata when using maturin 1.9.2 or later.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.2 - 2025-08-12\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix build using Rust 1.89 on amd64.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuild now depends on Rust 1.85 or later instead of 1.82.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/fb3eb1f729c7e7b019f780af5695722c99c7c695\"\u003e\u003ccode\u003efb3eb1f\u003c/code\u003e\u003c/a\u003e 3.11.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/52688e02c51c845cde24a46cd1011a6010d10eb8\"\u003e\u003ccode\u003e52688e0\u003c/code\u003e\u003c/a\u003e Record contributors in headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/dc083e87d5262e7dde3ba4b1d2a377b5b065a27c\"\u003e\u003ccode\u003edc083e8\u003c/code\u003e\u003c/a\u003e Further compatibility and build misc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/18f0186d47fbadd53c9db4e39a442d5b04225418\"\u003e\u003ccode\u003e18f0186\u003c/code\u003e\u003c/a\u003e Compatibility and build misc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/a4fdeb3aff125d501ec0dd0577f9b38b2b977b4f\"\u003e\u003ccode\u003ea4fdeb3\u003c/code\u003e\u003c/a\u003e 3.11.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/2e80d68afacafca8751e6a64ca05d0d4087dbd15\"\u003e\u003ccode\u003e2e80d68\u003c/code\u003e\u003c/a\u003e unlikely to cold_path, remove intrinsics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/27edea92f8da2fdfc3f1342474e2f1686f1edf55\"\u003e\u003ccode\u003e27edea9\u003c/code\u003e\u003c/a\u003e FFI through crate::ffi, partial non-CPython compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/416a8c9578da780d0d58b5e6b751793deafc610d\"\u003e\u003ccode\u003e416a8c9\u003c/code\u003e\u003c/a\u003e Unconditionally build yyjson\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/c8c1a17dca8436a2fee05ca060febd096e653d98\"\u003e\u003ccode\u003ec8c1a17\u003c/code\u003e\u003c/a\u003e edition 2024\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/af4179a1fa0aafffd0f867203b6c36e9a522f165\"\u003e\u003ccode\u003eaf4179a\u003c/code\u003e\u003c/a\u003e build maintenance, panic_immediate_abort break, test 3.15\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ijl/orjson/compare/3.11.1...3.11.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `urllib3` from 2.5.0 to 2.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/urllib3/urllib3/releases\"\u003eurllib3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.6.3\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by \u003ca href=\"https://github.com/D47A\"\u003e\u003ccode\u003e@​D47A\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-38jv-5279-wg99)\u003c/li\u003e\n\u003cli\u003eStarted treating \u003ccode\u003eRetry-After\u003c/code\u003e times greater than 6 hours as 6 hours by default. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3743\"\u003eurllib3/urllib3#3743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eurllib3.connection.VerifiedHTTPSConnection\u003c/code\u003e on Emscripten. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3752\"\u003eurllib3/urllib3#3752\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.2\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eHTTPResponse.read_chunked()\u003c/code\u003e to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3734\"\u003eurllib3/urllib3#3734\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore previously removed \u003ccode\u003eHTTPResponse.getheaders()\u003c/code\u003e and \u003ccode\u003eHTTPResponse.getheader()\u003c/code\u003e methods. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3731\"\u003e#3731\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.0\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where streaming API could improperly handle highly compressed HTTP content (\u0026quot;decompression bombs\u0026quot;) leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (CVE-2025-66471 reported by \u003ca href=\"https://github.com/Cycloctane\"\u003e\u003ccode\u003e@​Cycloctane\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-2xpw-w6gg-jr37)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the \u003ccode\u003eContent-Encoding\u003c/code\u003e header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (CVE-2025-66418 reported by \u003ca href=\"https://github.com/illia-v\"\u003e\u003ccode\u003e@​illia-v\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-gm62-xv2j-4w53)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf urllib3 is not installed with the optional \u003ccode\u003eurllib3[brotli]\u003c/code\u003e extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to  benefit from the security fixes and avoid warnings. Prefer using  \u003ccode\u003eurllib3[brotli]\u003c/code\u003e to install a compatible Brotli package automatically.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/urllib3/urllib3/blob/main/CHANGES.rst\"\u003eurllib3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.6.3 (2026-01-07)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a high-severity security issue where decompression-bomb safeguards of\nthe streaming API were bypassed when HTTP redirects were followed.\n(\u003ccode\u003eGHSA-38jv-5279-wg99 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eStarted treating \u003ccode\u003eRetry-After\u003c/code\u003e times greater than 6 hours as 6 hours by\ndefault. (\u003ccode\u003e[#3743](https://github.com/urllib3/urllib3/issues/3743) \u0026lt;https://github.com/urllib3/urllib3/issues/3743\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eurllib3.connection.VerifiedHTTPSConnection\u003c/code\u003e on Emscripten.\n(\u003ccode\u003e[#3752](https://github.com/urllib3/urllib3/issues/3752) \u0026lt;https://github.com/urllib3/urllib3/issues/3752\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.2 (2025-12-11)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eHTTPResponse.read_chunked()\u003c/code\u003e to properly handle leftover data in\nthe decoder's buffer when reading compressed chunked responses.\n(\u003ccode\u003e[#3734](https://github.com/urllib3/urllib3/issues/3734) \u0026lt;https://github.com/urllib3/urllib3/issues/3734\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.1 (2025-12-08)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eRestore previously removed \u003ccode\u003eHTTPResponse.getheaders()\u003c/code\u003e and\n\u003ccode\u003eHTTPResponse.getheader()\u003c/code\u003e methods.\n(\u003ccode\u003e[#3731](https://github.com/urllib3/urllib3/issues/3731) \u0026lt;https://github.com/urllib3/urllib3/issues/3731\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.0 (2025-12-05)\u003c/h1\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where streaming API could improperly handle highly\ncompressed HTTP content (\u0026quot;decompression bombs\u0026quot;) leading to excessive resource\nconsumption even when a small amount of data was requested. Reading small\nchunks of compressed data is safer and much more efficient now.\n(\u003ccode\u003eGHSA-2xpw-w6gg-jr37 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where an attacker could compose an HTTP response with\nvirtually unlimited links in the \u003ccode\u003eContent-Encoding\u003c/code\u003e header, potentially\nleading to a denial of service (DoS) attack by exhausting system resources\nduring decoding. The number of allowed chained encodings is now limited to 5.\n(\u003ccode\u003eGHSA-gm62-xv2j-4w53 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. caution::\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf urllib3 is not installed with the optional \u003ccode\u003eurllib3[brotli]\u003c/code\u003e extra, but\nyour environment contains a Brotli/brotlicffi/brotlipy package anyway, make\nsure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to\nbenefit from the security fixes and avoid warnings. Prefer using\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/0248277dd7ac0239204889ca991353ad3e3a1ddc\"\u003e\u003ccode\u003e0248277\u003c/code\u003e\u003c/a\u003e Release 2.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b\"\u003e\u003ccode\u003e8864ac4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/70cecb27ca99d56aaaeb63ac27ee270ef2b24c5c\"\u003e\u003ccode\u003e70cecb2\u003c/code\u003e\u003c/a\u003e Fix Scorecard issues related to vulnerable dev dependencies (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3755\"\u003e#3755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/41f249abe1ef3e20768588969c4035aba060a359\"\u003e\u003ccode\u003e41f249a\u003c/code\u003e\u003c/a\u003e Move \u0026quot;v2.0 Migration Guide\u0026quot; to the end of the table of contents (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3747\"\u003e#3747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/fd4dffd2fc544166b76151a2fa3d7b7c0eab540c\"\u003e\u003ccode\u003efd4dffd\u003c/code\u003e\u003c/a\u003e Patch \u003ccode\u003eVerifiedHTTPSConnection\u003c/code\u003e for Emscripten (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3752\"\u003e#3752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/13f0bfd55e4468fe1ea9c6f809d3a87b0f93ebab\"\u003e\u003ccode\u003e13f0bfd\u003c/code\u003e\u003c/a\u003e Handle massive values in Retry-After when calculating time to sleep for (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3743\"\u003e#3743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/8c480bf87bcefd321b3a1ae47f04e908b6b2ed7b\"\u003e\u003ccode\u003e8c480bf\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3748\"\u003e#3748\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/4b40616e959c0a2c466e8075f2a785a9f99bb0c1\"\u003e\u003ccode\u003e4b40616\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.3.0 to 5.0.1 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3750\"\u003e#3750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/82b8479663d037d220c883f1584dd01a43bb273b\"\u003e\u003ccode\u003e82b8479\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3749\"\u003e#3749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/34284cb01700bb7d4fdd472f909e22393e9174e2\"\u003e\u003ccode\u003e34284cb\u003c/code\u003e\u003c/a\u003e Mention experimental features in the security policy (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3746\"\u003e#3746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/urllib3/urllib3/compare/2.5.0...2.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bokeh` from 3.7.3 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `filelock` from 3.18.0 to 3.20.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tox-dev/py-filelock/releases\"\u003efilelock's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.20.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix TOCTOU symlink vulnerability in SoftFileLock by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/465\"\u003etox-dev/filelock#465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.2...3.20.3\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.2...3.20.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Unix systems without O_NOFOLLOW by \u003ca href=\"https://github.com/mwilliamson\"\u003e\u003ccode\u003e@​mwilliamson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/463\"\u003etox-dev/filelock#463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/464\"\u003etox-dev/filelock#464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mwilliamson\"\u003e\u003ccode\u003e@​mwilliamson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/463\"\u003etox-dev/filelock#463\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.1...3.20.2\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.1...3.20.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/461\"\u003etox-dev/filelock#461\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.0...3.20.1\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.0...3.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tox.toml to sdist by \u003ca href=\"https://github.com/mtelka\"\u003e\u003ccode\u003e@​mtelka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/436\"\u003etox-dev/filelock#436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docs with example by \u003ca href=\"https://github.com/znichollscr\"\u003e\u003ccode\u003e@​znichollscr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/438\"\u003etox-dev/filelock#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd 3.14 support and drop 3.9 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/448\"\u003etox-dev/filelock#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtelka\"\u003e\u003ccode\u003e@​mtelka\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/436\"\u003etox-dev/filelock#436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/znichollscr\"\u003e\u003ccode\u003e@​znichollscr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/438\"\u003etox-dev/filelock#438\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.19.1...3.20.0\"\u003ehttps://github.com/tox-dev/filelock/compare/3.19.1...3.20.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.19.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd 3.14t (free threading) to matrix by \u003ca href=\"https://github.com/paultiq\"\u003e\u003ccode\u003e@​paultiq\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/433\"\u003etox-dev/filelock#433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncrease test coverage by \u003ca href=\"https://github.com/paultiq\"\u003e\u003ccode\u003e@​paultiq\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/434\"\u003etox-dev/filelock#434\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5\"\u003e\u003ccode\u003e41b42dd\u003c/code\u003e\u003c/a\u003e Fix TOCTOU symlink vulnerability in SoftFileLock (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/465\"\u003e#465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/f2e7d4046b6a2b375a573bcfbad21827b99f8939\"\u003e\u003ccode\u003ef2e7d40\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/464\"\u003e#464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/50888548eb2f008d372e71f2835a47851ab83836\"\u003e\u003ccode\u003e5088854\u003c/code\u003e\u003c/a\u003e Support Unix systems without O_NOFOLLOW (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/377f62251d7cdf30768cc9ee1eb31cea1551c71b\"\u003e\u003ccode\u003e377f622\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/460\"\u003e#460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/4724d7f8c3393ec1f048c93933e6e3e6ec321f0e\"\u003e\u003ccode\u003e4724d7f\u003c/code\u003e\u003c/a\u003e Fix TOCTOU symlink vulnerability in lock file creation (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/461\"\u003e#461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/cb69414a2327cf0a9887e12054d1dc112ee700af\"\u003e\u003ccode\u003ecb69414\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5 to 6 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/459\"\u003e#459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/0769294f14a6c62eea64741722f7acef5386b4cd\"\u003e\u003ccode\u003e0769294\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6 to 7 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/458\"\u003e#458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/414193a188892bd376eb5c56eb45a9cf8ecc9284\"\u003e\u003ccode\u003e414193a\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/457\"\u003e#457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/1456797beb94ad59e5627462ad29f7ed3a966626\"\u003e\u003ccode\u003e1456797\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/456\"\u003e#456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/8d6bf90af313ac7fd6e41ef2b715d91dd6858f5c\"\u003e\u003ccode\u003e8d6bf90\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/455\"\u003e#455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tox-dev/py-filelock/compare/3.18.0...3.20.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fonttools` from 4.59.0 to 4.60.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fonttools/fonttools/releases\"\u003efonttools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.60.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBackport release\u003c/strong\u003e Same as 4.61.0 but without \u0026quot;Drop support for EOL Python 3.9\u0026quot; change to allow downstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3994\"\u003e#3994\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3999\"\u003e#3999\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[ufoLib] Reverted accidental method name change in \u003ccode\u003eUFOReader.getKerningGroupConversionRenameMaps\u003c/code\u003e\nthat broke compatibility with downstream projects like defcon (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3948\"\u003e#3948\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3947\"\u003e#3947\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/robotools/defcon/issues/478\"\u003erobotools/defcon#478\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[ufoLib] Added test coverage for \u003ccode\u003egetKerningGroupConversionRenameMaps\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3950\"\u003e#3950\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Don't try to subset BASE table; pass it through by default instead (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3949\"\u003e#3949\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove empty BaseRecord entries in MarkBasePos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3897\"\u003e#3897\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3892\"\u003e#3892\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3946\"\u003e#3946\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove duplicate features when subsetting (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3945\"\u003e#3945\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[Docs] Added documentation for the visitor module (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3944\"\u003e#3944\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[pointPen] Allow \u003ccode\u003ereverseFlipped\u003c/code\u003e parameter of \u003ccode\u003eDecomposingPointPen\u003c/code\u003e to take a \u003ccode\u003eReverseFlipped\u003c/code\u003e enum value to control whether/how to reverse contour direction of flipped components, in addition to the existing True/False. This allows to set \u003ccode\u003eReverseFlipped.ON_CURVE_FIRST\u003c/code\u003e to ensure that the decomposed outline starts with an on-curve point before being reversed, for better consistency with other segment-oriented contour transformations. The change is backward compatible, and the default behavior hasn't changed (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[filterPen] Added \u003ccode\u003eContourFilterPointPen\u003c/code\u003e, base pen for buffered contour operations, and \u003ccode\u003eOnCurveStartPointPen\u003c/code\u003e filter to ensure contours start with an on-curve point (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[cu2qu] Fixed difference in cython vs pure-python complex division by real number (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3930\"\u003e#3930\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[varLib.avar] Refactored and added some new sub-modules and scripts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3926\"\u003e#3926\u003c/a\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.build\u003c/code\u003e module to build avar (and a missing fvar) binaries into a possibly empty TTFont,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.unbuild\u003c/code\u003e module to print a .designspace snippet that would generate the same avar binary,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.map\u003c/code\u003e module to take TTFont and do the mapping, in user/normalized space,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.plan\u003c/code\u003e module moved from \u003ccode\u003evarLib.avarPlanner\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe bare \u003ccode\u003efonttools varLib.avar\u003c/code\u003e script is deprecated, in favour of \u003ccode\u003efonttools varLib.avar.build\u003c/code\u003e (or \u003ccode\u003eunbuild\u003c/code\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[interpolatable] Clarify \u003ccode\u003elinear_sum_assignment\u003c/code\u003e backend options and minimal dependency usage (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3927\"\u003e#3927\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[post] Speed up \u003ccode\u003ebuild_psNameMapping\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3923\"\u003e#3923\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[ufoLib] Added typing annotations to fontTools.ufoLib (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3875\"\u003e#3875\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.59.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[varLib] Clear \u003ccode\u003eUSE_MY_METRICS\u003c/code\u003e component flags when inconsistent across masters (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3912\"\u003e#3912\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib.instancer] Avoid negative advance width/height values when instatiating HVAR/VVAR, (unlikely in well-behaved fonts) (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3918\"\u003e#3918\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Fix shaping behaviour when pruning empty mark sets (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3915\"\u003e#3915\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/harfbuzz/harfbuzz/issues/5499\"\u003eharfbuzz/harfbuzz#5499\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Fixed \u003ccode\u003edot()\u003c/code\u003e product of perpendicular vectors not always returning exactly 0.0 in all Python implementations (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3911\"\u003e#3911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[varLib.instancer] Implemented fully-instantiating \u003ccode\u003eavar2\u003c/code\u003e fonts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3909\"\u003e#3909\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Allow float values in \u003ccode\u003eVariableScalar\u003c/code\u003e's axis locations (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3906\"\u003e#3906\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3907\"\u003e#3907\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Handle special case in \u003ccode\u003ecalc_intersect\u003c/code\u003e for degenerate cubic curves where 3 to 4 control points are equal (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3904\"\u003e#3904\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.59.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[featureVars] Update OS/2.usMaxContext if possible after addFeatureVariationsRaw (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3894\"\u003e#3894\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[vhmtx] raise TTLibError('not enough data...') when hmtx/vmtx are truncated (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3843\"\u003e#3843\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3901\"\u003e#3901\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Combine duplicate features that have the same set of lookups regardless of the order in which those lookups are added to the feature (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3895\"\u003e#3895\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib] Deprecate \u003ccode\u003evarLib.mutator\u003c/code\u003e in favor of \u003ccode\u003evarLib.instancer\u003c/code\u003e. The latter provides equivalent full (static font) instancing in addition to partial VF instancing.\u003cbr /\u003e\nCLI users should replace \u003ccode\u003efonttools varLib.mutator\u003c/code\u003e with \u003ccode\u003efonttools varLib.instancer\u003c/code\u003e. API users should migrate to \u003ccode\u003efontTools.varLib.instancer.instantiateVariableFont\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/2680\"\u003e#2680\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fonttools/fonttools/blob/main/NEWS.rst\"\u003efonttools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.60.2 (released 2025-12-09)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBackport release\u003c/strong\u003e Same as 4.61.0 but without \u0026quot;Drop support for EOL Python 3.9\u0026quot; change to allow\ndownstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3994\"\u003e#3994\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3999\"\u003e#3999\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.61.0 (released 2025-11-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[varLib.main]: \u003cstrong\u003eSECURITY\u003c/strong\u003e Only use basename(vf.filename) to prevent path traversal attacks when\nrunning \u003ccode\u003efonttools varLib\u003c/code\u003e command, or code which invokes \u003ccode\u003efonttools.varLib.main()\u003c/code\u003e.\nFixes CVE-2025-66034, see:\n\u003ca href=\"https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv\"\u003ehttps://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e[feaLib] Sort BaseLangSysRecords by tag (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3986\"\u003e#3986\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDrop support for EOL Python 3.9 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3982\"\u003e#3982\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[instancer] Support --remove-overlaps for fonts with CFF2 table (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3975\"\u003e#3975\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[CFF2ToCFF] Add --remove-overlaps option (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3976\"\u003e#3976\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Raise an error for rsub with NULL target (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3979\"\u003e#3979\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[bezierTools] Fix logic bug in curveCurveIntersections (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3963\"\u003e#3963\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Error when condition sets have the same name (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3958\"\u003e#3958\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu.ufo] skip processing empty glyphs to support sparse kerning masters (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3956\"\u003e#3956\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[unicodedata] Update to Unicode 17. Require \u003ccode\u003eunicodedata2 \u0026gt;= 17.0.0\u003c/code\u003e when installed with 'unicode' extra.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.1 (released 2025-09-29)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[ufoLib] Reverted accidental method name change in \u003ccode\u003eUFOReader.getKerningGroupConversionRenameMaps\u003c/code\u003e\nthat broke compatibility with downstream projects like defcon (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3948\"\u003e#3948\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3947\"\u003e#3947\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/robotools/defcon/issues/478\"\u003erobotools/defcon#478\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[ufoLib] Added test coverage for \u003ccode\u003egetKerningGroupConversionRenameMaps\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3950\"\u003e#3950\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Don't try to subset BASE table; pass it through by default instead (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3949\"\u003e#3949\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove empty BaseRecord entries in MarkBasePos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3897\"\u003e#3897\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3892\"\u003e#3892\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3946\"\u003e#3946\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove duplicate features when subsetting (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3945\"\u003e#3945\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[Docs] Added documentation for the visitor module (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3944\"\u003e#3944\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.0 (released 2025-09-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[pointPen] Allow \u003ccode\u003ereverseFlipped\u003c/code\u003e parameter of \u003ccode\u003eDecomposingPointPen\u003c/code\u003e to take a \u003ccode\u003eReverseFlipped\u003c/code\u003e\nenum value to control whether/how to reverse contour direction of flipped components, in addition to\nthe existing True/False. This allows to set \u003ccode\u003eReverseFlipped.ON_CURVE_FIRST\u003c/code\u003e to ensure that\nthe decomposed outline starts with an on-curve point before being reversed, for better consistency\nwith other segment-oriented contour transformations. The change is backward compatible, and the\ndefault behavior hasn't changed (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[filterPen] Added \u003ccode\u003eContourFilterPointPen\u003c/code\u003e, base pen for buffered contour operations, and\n\u003ccode\u003eOnCurveStartPointPen\u003c/code\u003e filter to ensure contours start with an on-curve point (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Fixed difference in cython vs pure-python complex division by real number (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3930\"\u003e#3930\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib.avar] Refactored and added some new sub-modules and scripts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3926\"\u003e#3926\u003c/a\u003e).\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.build\u003c/code\u003e module to build avar (and a missing fvar) binaries into a possibly empty TTFont,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.unbuild\u003c/code\u003e module to print a .designspace snippet that would generate the same avar binary,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/78ba5e8bb4ccf65ef8077d81bc48450ccacf1728\"\u003e\u003ccode\u003e78ba5e8\u003c/code\u003e\u003c/a\u003e Release 4.60.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/c3f9979dbf278baf82beba675dda40c94f78c48e\"\u003e\u003ccode\u003ec3f9979\u003c/code\u003e\u003c/a\u003e macos-13 runner is no more, use macos-15-intel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/8016403e0ad4b7de00c0b48d30afa4de9d7a29e4\"\u003e\u003ccode\u003e8016403\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Merge pull request \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3982\"\u003e#3982\u003c/a\u003e from fonttools/drop-py39\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/e691e3bef9fc4e8096e4023ccacbc327d2569905\"\u003e\u003ccode\u003ee691e3b\u003c/code\u003e\u003c/a\u003e Release 4.61.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/c2d540f4ada946ea1ef97f898e0daa9601bc1019\"\u003e\u003ccode\u003ec2d540f\u003c/code\u003e\u003c/a\u003e Update NEWS.rst\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/3859753a0511efc568d4d71c4933219c11b6207b\"\u003e\u003ccode\u003e3859753\u003c/code\u003e\u003c/a\u003e Update NEWS.rst\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/26eb070a55c731d9828dddf5cb022e0d79e9af45\"\u003e\u003ccode\u003e26eb070\u003c/code\u003e\u003c/a\u003e black\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/5ff73af3265e0b5207c3a2870c9f0ccc8ee19d0f\"\u003e\u003ccode\u003e5ff73af\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32\"\u003e\u003ccode\u003ea696d5b\u003c/code\u003e\u003c/a\u003e varLib: only use the basename(vf.filename)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/b00bc459efac4d9d52a1eafa2cdd2c7ff503ced7\"\u003e\u003ccode\u003eb00bc45\u003c/code\u003e\u003c/a\u003e varLib_test: test path traversal in variable-font filename\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fonttools/fonttools/compare/4.59.0...4.60.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `virtualenv` from 20.32.0 to 20.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/virtualenv/releases\"\u003evirtualenv's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.36.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.36.0 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3011\"\u003epypa/virtualenv#3011\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: resolve TOCTOU vulnerabilities in app_data and lock directory creation by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3013\"\u003epypa/virtualenv#3013\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.36.0...20.36.1\"\u003ehttps://github.com/pypa/virtualenv/compare/20.36.0...20.36.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.36.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.35.3 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2981\"\u003epypa/virtualenv#2981\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by \u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade pip and fix 3.15 picking old wheel by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2989\"\u003epypa/virtualenv#2989\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease 20.35.4 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2990\"\u003epypa/virtualenv#2990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wrong path on migrated venv by \u003ca href=\"https://github.com/sk1234567891\"\u003e\u003ccode\u003e@​sk1234567891\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2996\"\u003epypa/virtualenv#2996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest_too_many_open_files: assert on \u003ccode\u003eerrno.EMFILE\u003c/code\u003e instead of \u003ccode\u003estrerror\u003c/code\u003e by \u003ca href=\"https://github.com/pltrz\"\u003e\u003ccode\u003e@​pltrz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3001\"\u003epypa/virtualenv#3001\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 by \u003ca href=\"https://github.com/pythonhubdev\"\u003e\u003ccode\u003e@​pythonhubdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3002\"\u003epypa/virtualenv#3002\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: resolve EncodingWarning in tox upgrade environment by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3007\"\u003epypa/virtualenv#3007\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 by \u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3006\"\u003epypa/virtualenv#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. by \u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3008\"\u003epypa/virtualenv#3008\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sk1234567891\"\u003e\u003ccode\u003e@​sk1234567891\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2996\"\u003epypa/virtualenv#2996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pltrz\"\u003e\u003ccode\u003e@​pltrz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3001\"\u003epypa/virtualenv#3001\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pythonhubdev\"\u003e\u003ccode\u003e@​pythonhubdev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3002\"\u003epypa/virtualenv#3002\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3006\"\u003epypa/virtualenv#3006\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.35.3...20.36.0\"\u003ehttps://github.com/pypa/virtualenv/compare/20.35.3...20.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.35.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.35.3 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2981\"\u003epypa/virtualenv#2981\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by \u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade pip and fix 3.15 picking old wheel by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2989\"\u003epypa/virtualenv#2989\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.35.3...20.35.4\"\u003ehttps://github.com/pypa/virtualenv/compare/20.35.3...20.35.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.35.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst\"\u003evirtualenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev20.36.1 (2026-01-09)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.36.1\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Fix TOCTOU vulnerabilities in app_data and lock directory creation that could be exploited via symlink attacks - reported by :user:`tsigouris007`, fixed by :user:`gaborbernat`. (:issue:`3013`)\n\u003ch2\u003ev20.36.0 (2026-01-07)\u003c/h2\u003e\n\u003cp\u003eFeatures - 20.36.0\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. Users can now specify Python versions using operators like \u003ccode\u003e\u0026gt;=\u003c/code\u003e, \u003ccode\u003e\u0026lt;=\u003c/code\u003e, \u003ccode\u003e~=\u003c/code\u003e, etc. For example: \u003ccode\u003evirtualenv --python=\u0026quot;\u0026gt;=3.12\u0026quot; myenv\u003c/code\u003e \u003ccode\u003e. (:issue:\u003c/code\u003e2994`)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.4 (2025-10-28)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.4\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Fix race condition in ``_virtualenv.py`` when file is overwritten during import, preventing ``NameError`` when ``_DISTUTILS_PATCH`` is accessed - by :user:`gracetyy`. (:issue:`2969`)\n- Upgrade embedded wheels:\n\u003cul\u003e\n\u003cli\u003epip to \u003ccode\u003e25.3\u003c/code\u003e from \u003ccode\u003e25.2\u003c/code\u003e (:issue:\u003ccode\u003e2989\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.3 (2025-10-10)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.3\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAccept RuntimeError in \u003ccode\u003etest_too_many_open_files\u003c/code\u003e, by :user:\u003ccode\u003eesafak\u003c/code\u003e (:issue:\u003ccode\u003e2935\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.2 (2025-10-10)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.2\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Revert out changes related to the extraction of the discovery module - by :user:`gaborbernat`. (:issue:`2978`)\n\u003ch2\u003ev20.35.1 (2025-10-09)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.1\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePatch get_interpreter to handle missing cache and app_data - by :user:\u003ccode\u003eesafak\u003c/code\u003e (:issue:\u003ccode\u003e2972\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eFix backwards incompatible changes to \u003ccode\u003ePythonInfo\u003c/code\u003e - by :user:\u003ccode\u003egaborbernat\u003c/code\u003e. (:issue:\u003ccode\u003e2975\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.0 (2025-10-08)\u003c/h2\u003e\n\u003cp\u003eFeatures - 20.35.0\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/d0ad11d1146e81ea74d2461be9653f1da9cf3fd1\"\u003e\u003ccode\u003ed0ad11d\u003c/code\u003e\u003c/a\u003e release 20.36.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc\"\u003e\u003ccode\u003edec4cec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3013\"\u003e#3013\u003c/a\u003e from gaborbernat/fix-sec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/5fe5d38beb1273b489591a7b444f1018af2edf0a\"\u003e\u003ccode\u003e5fe5d38\u003c/code\u003e\u003c/a\u003e release 20.36.0 (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3011\"\u003e#3011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/9719376addaa710b61d9ed013774fa26f6224b4e\"\u003e\u003ccode\u003e9719376\u003c/code\u003e\u003c/a\u003e release 20.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/0276db6fcf8849c519d75465f659b12aefb2acd8\"\u003e\u003ccode\u003e0276db6\u003c/code\u003e\u003c/a\u003e Add support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3008\"\u003e#3008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/4f900c29044e17812981b5b98ddce45604858b7f\"\u003e\u003ccode\u003e4f900c2\u003c/code\u003e\u003c/a\u003e Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/13afcc62a3444d0386c8031d0a62277a8274ab07\"\u003e\u003ccode\u003e13afcc6\u003c/code\u003e\u003c/a\u003e fix: resolve EncodingWarning in tox upgrade environment (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3007\"\u003e#3007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/31b5d31581df3e3a7bbc55e52568b26dd01b0d57\"\u003e\u003ccode\u003e31b5d31\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/2997\"\u003e#2997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/7c284221b4751388801355fc6ebaa2abe60427bd\"\u003e\u003ccode\u003e7c28422\u003c/code\u003e\u003c/a\u003e fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/365628c544cd5498fbf0a3b6c6a8c1f41d25a749\"\u003e\u003ccode\u003e365628c\u003c/code\u003e\u003c/a\u003e test_too_many_open_files: assert on \u003ccode\u003eerrno.EMFILE\u003c/code\u003e instead of \u003ccode\u003estrerror\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3001\"\u003e#3001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.32.0...20.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AKJUS/pystac-client/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AKJUS/pystac-client/pull/45","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AKJUS%2Fpystac-client/issues/45","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/45/packages"},{"uuid":"3840602393","node_id":"PR_kwDODqcwas6-k2e3","number":2507,"state":"open","title":"build(deps): bump bokeh from 3.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-22T00:18:57.000Z","updated_at":"2026-01-22T22:03:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"bokeh","old_version":"3.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gee-community/geemap/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/gee-community/geemap/pull/2507","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gee-community%2Fgeemap/issues/2507","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2507/packages"},{"uuid":"3825201975","node_id":"PR_kwDOOiIGqc69yJtt","number":8,"state":"open","title":"Bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-17T13:35:43.000Z","updated_at":"2026-01-17T13:35:52.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sg26565/dask/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/sg26565/dask/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sg26565%2Fdask/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"},{"uuid":"3808735504","node_id":"PR_kwDOLufxkc687Kp8","number":131,"state":"open","title":"deps: bump the bokeh-updates group with 3 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-13T12:55:08.000Z","updated_at":"2026-01-17T18:01:44.483Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"bokeh-updates","update_count":3,"packages":[{"name":"bokeh","old_version":"3.6.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"narwhals","old_version":"2.13.0","new_version":"2.15.0","repository_url":"https://github.com/narwhals-dev/narwhals"},{"name":"xyzservices","old_version":"2024.9.0","new_version":"2025.11.0","repository_url":"https://github.com/geopandas/xyzservices"}],"path":null,"ecosystem":"pip"},"body":"Bumps the bokeh-updates group with 3 updates: [bokeh](https://github.com/bokeh/bokeh), [narwhals](https://github.com/narwhals-dev/narwhals) and [xyzservices](https://github.com/geopandas/xyzservices).\n\nUpdates `bokeh` from 3.6.0 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.6.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `narwhals` from 2.13.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/narwhals-dev/narwhals/releases\"\u003enarwhals's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eNarwhals v2.15.0\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: unxfail sqlframe tests for list functions (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3383\"\u003e#3383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: Test fairlearn using pytest marker (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3234\"\u003e#3234\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e✨ Enhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: unxfail sqlframe for \u003ccode\u003elist.median\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3387\"\u003e#3387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: Add \u003ccode\u003e{Expr,Series}.sin\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3365\"\u003e#3365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: add \u003ccode\u003elist.sort\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3356\"\u003e#3356\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: Various GPU fixes (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3390\"\u003e#3390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: separate numpy array for tests (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3385\"\u003e#3385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(docs): Keep table filter only in api-completeness page (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3367\"\u003e#3367\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: Fix \u003ccode\u003ehierarchicalforecast\u003c/code\u003e installation (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3362\"\u003e#3362\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(docs): Keep table filter only in api-completeness page (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3367\"\u003e#3367\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🛠️ Other improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: Refactor pandas-like pyarrow branching (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3361\"\u003e#3361\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThank you to all our contributors for making this release possible!\n\u003ca href=\"https://github.com/FBruzzesi\"\u003e\u003ccode\u003e@​FBruzzesi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/MarcoGorelli\"\u003e\u003ccode\u003e@​MarcoGorelli\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/liamholmes31\"\u003e\u003ccode\u003e@​liamholmes31\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/raisadz\"\u003e\u003ccode\u003e@​raisadz\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eNarwhals v2.14.0\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003ch2\u003e✨ Enhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add list aggregate methods (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3332\"\u003e#3332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: Add \u003ccode\u003e{Expr,Series}.any_value\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3315\"\u003e#3315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenh: Add support for \u003ccode\u003eslice(None)\u003c/code\u003e in series getitem (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3342\"\u003e#3342\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix median tests for list.agg methods (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3354\"\u003e#3354\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: \u003ccode\u003eArrowSeries.fill_null(strategy=..., limit=...)\u003c/code\u003e and \u003ccode\u003eNone\u003c/code\u003e at the \u0026quot;edge\u0026quot;  (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3335\"\u003e#3335\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: API Completeness overhaul (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3285\"\u003e#3285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: updated contributing with test_plugin install (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3345\"\u003e#3345\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🛠️ Other improvements\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/98f05d078f09f89e96f7f87af9ad3baf01f13df0\"\u003e\u003ccode\u003e98f05d0\u003c/code\u003e\u003c/a\u003e release: Bump version to 2.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/5ed4d81bf244dce18fa700f20fbf1536e0ca5cee\"\u003e\u003ccode\u003e5ed4d81\u003c/code\u003e\u003c/a\u003e test: Various GPU fixes (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3390\"\u003e#3390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0a0954790e4cfc703b2b7d0afc6b35e996ed2a28\"\u003e\u003ccode\u003e0a09547\u003c/code\u003e\u003c/a\u003e test: unxfail sqlframe for \u003ccode\u003elist.median\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3387\"\u003e#3387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/74d6cf01a0bb1ced35af65b332c6cbc507797343\"\u003e\u003ccode\u003e74d6cf0\u003c/code\u003e\u003c/a\u003e test: separate numpy array for tests (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3385\"\u003e#3385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/42a8d7d8123f98e0f8a2e4f2e1fe7812df456689\"\u003e\u003ccode\u003e42a8d7d\u003c/code\u003e\u003c/a\u003e feat: Add \u003ccode\u003e{Expr,Series}.sin\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3365\"\u003e#3365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/84ad2282b6e4ad7680397b7bf8e3c026cc20f301\"\u003e\u003ccode\u003e84ad228\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/download-artifact from 6 to 7 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3379\"\u003e#3379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0640ba1be40ec83af09e9524672aefef1cc7c822\"\u003e\u003ccode\u003e0640ba1\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/upload-artifact from 5 to 6 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3380\"\u003e#3380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/f2c96a6b6e91454e29d7035455d79b1b2925f8ec\"\u003e\u003ccode\u003ef2c96a6\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/cache from 4 to 5 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3382\"\u003e#3382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0fad4c5a6f71bc9fded5a690ff369689de90f3d4\"\u003e\u003ccode\u003e0fad4c5\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump sigstore/gh-action-sigstore-python from 3.1.0 to 3...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/ae6e7b4059844cd731e790eb98f4c312634f8a64\"\u003e\u003ccode\u003eae6e7b4\u003c/code\u003e\u003c/a\u003e test: unxfail sqlframe tests for list functions (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3383\"\u003e#3383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/narwhals-dev/narwhals/compare/v2.13.0...v2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `xyzservices` from 2024.9.0 to 2025.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/geopandas/xyzservices/releases\"\u003exyzservices's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2025.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded new Stamen Toner variants in Stadia Maps\u003c/li\u003e\n\u003cli\u003eFixed api key passthrough for HERE\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.10.0...2025.11.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.10.0...2025.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove deprecated HERE API v2 and rename HEREv3 to HERE updated to API v3\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.4.0...2025.10.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.4.0...2025.10.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add UN clear map by \u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/186\"\u003egeopandas/xyzservices#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/186\"\u003egeopandas/xyzservices#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.1.0...2025.4.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.1.0...2025.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove OpenStreetMap.BlackAndWhite and properly mark broken as broken by \u003ca href=\"https://github.com/martinfleis\"\u003e\u003ccode\u003e@​martinfleis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/183\"\u003egeopandas/xyzservices#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2024.9.0...2025.1.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2024.9.0...2025.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/geopandas/xyzservices/blob/main/CHANGELOG.md\"\u003exyzservices's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003exyzservices 2025.10.0 (October 30, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove deprecated HERE API v2 and rename HEREv3 to HERE updated to API v3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003exyzservices 2025.4.0 (April 25, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd UN clear map by \u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/186\"\u003e#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003exyzservices 2025.1.0 (January 18, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove OpenStreetMap.BlackAndWhite and properly mark broken as broken by \u003ca href=\"https://github.com/martinfleis\"\u003e\u003ccode\u003e@​martinfleis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/183\"\u003e#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/2a55c0ba7696ccefbb71bd9c78e9bc40c6a3df21\"\u003e\u003ccode\u003e2a55c0b\u003c/code\u003e\u003c/a\u003e GHA: fix email\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/09607ac435526acc5e4169e08621dd46ec5341a9\"\u003e\u003ccode\u003e09607ac\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/43cee42b3b416628132a9c01e7736815cc425474\"\u003e\u003ccode\u003e43cee42\u003c/code\u003e\u003c/a\u003e GHA: switch to bot committing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/1daf2e1edb00ef1c75e3f0f02b700e03761498c4\"\u003e\u003ccode\u003e1daf2e1\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/711f8ac0addb4e31cd49a2206feb69b46cb5c7b9\"\u003e\u003ccode\u003e711f8ac\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/3063a11dea207c39d8aaf2b504014591c3557491\"\u003e\u003ccode\u003e3063a11\u003c/code\u003e\u003c/a\u003e Update CHANGELOG.md with version history\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/a7367a21ae684d4d4e6fd421036300ec99f4073c\"\u003e\u003ccode\u003ea7367a2\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/d7eea7e8abd967a5acbb88b9c447b97b73da2a84\"\u003e\u003ccode\u003ed7eea7e\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/74c76539abe4e36fef5c3599c1c7c286d49eb244\"\u003e\u003ccode\u003e74c7653\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/191\"\u003e#191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/254bf8621ebb242e7b94e1227c4776e903ec5e17\"\u003e\u003ccode\u003e254bf86\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2024.9.0...2025.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/OpenMS/pyopenms_viz/pull/131","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenMS%2Fpyopenms_viz/issues/131","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/131/packages"},{"uuid":"3796146666","node_id":"PR_kwDOCpZOw868Shsl","number":1120,"state":"open","title":"build(deps): bump bokeh from 3.7.2 to 3.8.2 in /layers/layer4_python3_scientific/0500_extra_packages","user":"dependabot[bot]","labels":["Status: Revision Needed","dependencies","python"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-09T09:19:37.000Z","updated_at":"2026-01-10T04:01:09.085Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"bokeh","old_version":"3.7.2","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/layers/layer4_python3_scientific/0500_extra_packages","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.2 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.2...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.2\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/metwork-framework/mfextaddon_scientific/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/metwork-framework/mfextaddon_scientific/pull/1120","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/metwork-framework%2Fmfextaddon_scientific/issues/1120","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1120/packages"},{"uuid":"3794488856","node_id":"PR_kwDOMsXxzs68NGRH","number":20,"state":"closed","title":"chore(deps): bump bokeh from 2.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-07T16:56:12.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-08T21:19:22.000Z","updated_at":"2026-02-07T16:56:13.000Z","time_to_close":2576210,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bokeh","old_version":"2.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 2.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/2.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=2.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DrDavidL/autoanalyzer-ai/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DrDavidL/autoanalyzer-ai/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DrDavidL%2Fautoanalyzer-ai/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"},{"uuid":"3786039633","node_id":"PR_kwDOH22tks67xL4u","number":520,"state":"open","title":"chore(deps): bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":[],"assignees":["RichieHakim"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:07:38.000Z","updated_at":"2026-01-06T18:07:39.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/RichieHakim/ROICaT/pull/520","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RichieHakim%2FROICaT/issues/520","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/520/packages"},{"uuid":"3786036776","node_id":"PR_kwDOOb9qEs67xLRR","number":116,"state":"open","title":"deps(deps): bump bokeh from 3.8.1 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:40.000Z","updated_at":"2026-01-10T02:01:29.193Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Zachanardo/Intellicrack/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Zachanardo/Intellicrack/pull/116","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zachanardo%2FIntellicrack/issues/116","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/116/packages"},{"uuid":"3786035892","node_id":"PR_kwDOFFcPYc67xLEo","number":350,"state":"closed","title":"Bump bokeh from 3.1.1 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-26T09:48:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:27.000Z","updated_at":"2026-02-26T09:48:17.000Z","time_to_close":4376500,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.1.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.1.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.1.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.1.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/oda-hub/oda_api/network/alerts).\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/oda-hub/oda_api/pull/350","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/oda-hub%2Foda_api/issues/350","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/350/packages"},{"uuid":"3786035684","node_id":"PR_kwDOAPMsys67xLB3","number":335,"state":"open","title":"Bump bokeh from 3.8.0 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:23.000Z","updated_at":"2026-01-06T18:09:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.0 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.0\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/cerfacs-globc/icclim/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/cerfacs-globc/icclim/pull/335","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cerfacs-globc%2Ficclim/issues/335","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/335/packages"},{"uuid":"3786035660","node_id":"PR_kwDONN2uHc67xLBh","number":48,"state":"closed","title":"Bump bokeh from 3.8.1 to 3.8.2 in /e2e_playwright","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-01-06T18:38:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:23.000Z","updated_at":"2026-01-06T18:38:02.000Z","time_to_close":1897,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/e2e_playwright","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/streamlit/streamlit-bokeh/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/streamlit/streamlit-bokeh/pull/48","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamlit%2Fstreamlit-bokeh/issues/48","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/48/packages"},{"uuid":"3786035404","node_id":"PR_kwDOPVPEqc67xK-B","number":38,"state":"open","title":"Bump bokeh from 3.7.3 to 3.8.2 in /dockerfiles/gpu","user":"dependabot[bot]","labels":["Review effort 1/5","PR title format","dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:17.000Z","updated_at":"2026-01-06T18:06:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/dockerfiles/gpu","ecosystem":"pip"},"body":"### **User description**\nBumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/proteantecs/mlrun/network/alerts).\n\n\u003c/details\u003e\n\n\n___\n\n### **PR Type**\nEnhancement, Other\n\n\n___\n\n### **Description**\n- Upgrade bokeh to 3.8.2 in GPU image\n\n- Update pinned hashes for integrity\n\n- Maintain Python \u003e=3.11 constraint\n\n\n___\n\n### Diagram Walkthrough\n\n\n```mermaid\nflowchart LR\n  lockfile[\"dockerfiles/gpu/locked-requirements.txt\"]\n  bokeh373[\"bokeh==3.7.3 + old hashes\"]\n  bokeh382[\"bokeh==3.8.2 + new hashes\"]\n  lockfile -- \"upgrade pinned version\" --\u003e bokeh382\n  bokeh373 -- \"replace\" --\u003e bokeh382\n```\n\n\n\n\u003cdetails\u003e \u003csummary\u003e\u003ch3\u003e File Walkthrough\u003c/h3\u003e\u003c/summary\u003e\n\n\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003e\u003c/th\u003e\u003cth align=\"left\"\u003eRelevant files\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eDependencies\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003ctable\u003e\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003elocked-requirements.txt\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate bokeh pin and hashes in GPU lockfile\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\ndockerfiles/gpu/locked-requirements.txt\n\n\u003cul\u003e\u003cli\u003eBump \u003ccode\u003ebokeh\u003c/code\u003e from \u003ccode\u003e3.7.3\u003c/code\u003e to \u003ccode\u003e3.8.2\u003c/code\u003e.\u003cbr\u003e \u003cli\u003e Replace SHA256 hashes to match 3.8.2 wheels/sdist.\u003cbr\u003e \u003cli\u003e Keep Python full version constraint (\u003e= 3.11).\u003cbr\u003e \u003cli\u003e Preserve surrounding dependency pins unchanged.\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/proteantecs/mlrun/pull/38/files#diff-d1072636fb02e0eab486fbdfbff442293f0007edfa2fc22b36e2bed055365dba\"\u003e+3/-3\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\u003c/table\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\n\n\u003c/details\u003e\n\n___\n\n","html_url":"https://github.com/proteantecs/mlrun/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/proteantecs%2Fmlrun/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"},{"uuid":"3786035367","node_id":"PR_kwDOCY615s67xK9h","number":768,"state":"open","title":"⬆️ Bump bokeh from 3.8.1 to 3.8.2 in /jupyterlab","user":"dependabot[bot]","labels":["dependencies","stale"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:16.000Z","updated_at":"2026-02-06T08:36:50.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/jupyterlab","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hassio-addons/addon-jupyterlab/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hassio-addons/addon-jupyterlab/pull/768","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hassio-addons%2Faddon-jupyterlab/issues/768","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/768/packages"},{"uuid":"3786035354","node_id":"PR_kwDONMAkyM67xK9W","number":38,"state":"closed","title":"Bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-01-08T20:26:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:16.000Z","updated_at":"2026-01-08T20:26:03.000Z","time_to_close":181185,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ouslan/research-pr-salaries/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ouslan/research-pr-salaries/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ouslan%2Fresearch-pr-salaries/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"}],"issue_packages":[{"old_version":"3.7.3","new_version":"3.9.0","update_type":"minor","path":null,"pr_created_at":"2026-04-20T21:31:46.000Z","version_change":"3.7.3 → 3.9.0","issue":{"uuid":"4298827215","node_id":"PR_kwDOK1eG_c7UG4b6","number":387,"state":"closed","title":"[DEPENDABOT]: Bump bokeh from 3.7.3 to 3.9.0","user":"dependabot[bot]","labels":["DEPENDABOT"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-05-20T12:46:39.000Z","author_association":null,"state_reason":null,"created_at":"2026-04-20T21:31:46.000Z","updated_at":"2026-05-20T12:46:55.000Z","time_to_close":2560493,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"[DEPENDABOT]: Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.9.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e","html_url":"https://github.com/daisybio/drevalpy/pull/387","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/daisybio%2Fdrevalpy/issues/387","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/387/packages"}},{"old_version":"3.8.2","new_version":"3.9.0","update_type":"minor","path":null,"pr_created_at":"2026-03-16T01:26:21.000Z","version_change":"3.8.2 → 3.9.0","issue":{"uuid":"4079713080","node_id":"PR_kwDOOjdRy87KyGLQ","number":171,"state":"closed","title":"build(deps-dev): bump bokeh from 3.8.2 to 3.9.0","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-06-08T01:26:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-16T01:26:21.000Z","updated_at":"2026-06-08T01:26:21.000Z","time_to_close":7257599,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps-dev)","packages":[{"name":"bokeh","old_version":"3.8.2","new_version":"3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.2 to 3.9.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.2...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.8.2\u0026new-version=3.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/ImperialCollegeLondon/rojak/pull/171","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ImperialCollegeLondon%2Frojak/issues/171","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/171/packages"}},{"old_version":"3.8.0","new_version":"3.8.2","update_type":"patch","path":null,"pr_created_at":"2026-03-12T21:31:22.000Z","version_change":"3.8.0 → 3.8.2","issue":{"uuid":"4067386674","node_id":"PR_kwDOD8M5l87KLPSB","number":222,"state":"closed","title":"Bump bokeh from 3.8.0 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-20T22:41:35.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-12T21:31:22.000Z","updated_at":"2026-03-20T22:41:37.000Z","time_to_close":695413,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.0 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.8.0\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ItziModel/itzi/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ItziModel/itzi/pull/222","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItziModel%2Fitzi/issues/222","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/222/packages"}},{"old_version":"~=3.8.2","new_version":"~=3.9.0","update_type":"minor","path":null,"pr_created_at":"2026-03-12T16:43:49.000Z","version_change":"~=3.8.2 → ~=3.9.0","issue":{"uuid":"4065926059","node_id":"PR_kwDOEdr6SM7KGem1","number":73,"state":"closed","title":"Update bokeh requirement from ~=3.8.2 to ~=3.9.0","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-18T09:20:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-03-12T16:43:49.000Z","updated_at":"2026-03-18T09:21:00.000Z","time_to_close":491829,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Update","packages":[{"name":"bokeh","old_version":"~=3.8.2","new_version":"~=3.9.0","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Updates the requirements on [bokeh](https://github.com/bokeh/bokeh) to permit the latest version.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-03-11      3.9:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14584\"\u003e#14584\u003c/a\u003e \u003ccode\u003eDiv\u003c/code\u003e from \u003ccode\u003ebokeh.models.dom\u003c/code\u003e raisese ValueError in \u003ccode\u003eshow\u003c/code\u003e call\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14724\"\u003e#14724\u003c/a\u003e Bokeh protocol doesn't use binary encoding in \u003ccode\u003epull-doc-reply\u003c/code\u003e message\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14569\"\u003e#14569\u003c/a\u003e [component: bokehjs] Adjust overlay in case of 1D box zoom\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14799\"\u003e#14799\u003c/a\u003e [component: build] Compilation failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13578\"\u003e#13578\u003c/a\u003e [component: tests] Unit tests are failing due to changes in pytest-asyncio\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14568\"\u003e#14568\u003c/a\u003e [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14817\"\u003e#14817\u003c/a\u003e MyPy can crash on Bokeh 3.9.0.dev9 code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14776\"\u003e#14776\u003c/a\u003e [component: bokehjs] Don't add BBox if an axis has fixed position\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14815\"\u003e#14815\u003c/a\u003e [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14881\"\u003e#14881\u003c/a\u003e Default compression level seems too high\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14894\"\u003e#14894\u003c/a\u003e NoChannelsConfiguredError breaks CI after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14309\"\u003e#14309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/10706\"\u003e#10706\u003c/a\u003e [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14404\"\u003e#14404\u003c/a\u003e bokeh info should handle missing npm more gracefully\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14502\"\u003e#14502\u003c/a\u003e Legends fail to export using bokeh.io.export_svgs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14549\"\u003e#14549\u003c/a\u003e [component: bokehjs] Updating Div text from hover causes infinite loop\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14616\"\u003e#14616\u003c/a\u003e Add \u003ccode\u003eis_silenced\u003c/code\u003e function to the public API\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14645\"\u003e#14645\u003c/a\u003e [component: bokehjs] \u003ccode\u003eCategoricalSlider\u003c/code\u003e shows 'undefined' for some categories when a certain number of categories is given\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14690\"\u003e#14690\u003c/a\u003e [component: bokehjs] Bokehjs test/devtools server examples error on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14700\"\u003e#14700\u003c/a\u003e [component: tests] Regression test for \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/11339\"\u003e#11339\u003c/a\u003e fails randomly since Chrome version upgrade.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14709\"\u003e#14709\u003c/a\u003e [component: build] ESM minified bundles don't work due to bad imports\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14730\"\u003e#14730\u003c/a\u003e CI sometimes fails on MacOS with \u0026quot;The template is not valid\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14744\"\u003e#14744\u003c/a\u003e [component: bokehjs] Use \u003ccode\u003eoutline_width\u003c/code\u003e in \u003ccode\u003eLegend\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14750\"\u003e#14750\u003c/a\u003e [component: bokehjs] Block glyph doesn't account for reversed axes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14756\"\u003e#14756\u003c/a\u003e [component: build] Build CI job failing\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003efeatures:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14417\"\u003e#14417\u003c/a\u003e [component: bokehjs] Cannot scroll or wrap large number of tabs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14742\"\u003e#14742\u003c/a\u003e [FEATURE] Add padding to step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14772\"\u003e#14772\u003c/a\u003e [component: bokehjs] Add support for property value editing in \u003ccode\u003eExaminer\u003c/code\u003e component\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14779\"\u003e#14779\u003c/a\u003e Add support for displaying contents with Markdown syntax\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14607\"\u003e#14607\u003c/a\u003e Enhancements for \u003ccode\u003ebokeh settings\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14716\"\u003e#14716\u003c/a\u003e [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14346\"\u003e#14346\u003c/a\u003e Redesign \u003ccode\u003eDropdown\u003c/code\u003e widget to use \u003ccode\u003eMenu\u003c/code\u003e model\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14698\"\u003e#14698\u003c/a\u003e Use auto_box_zoom as the default tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14786\"\u003e#14786\u003c/a\u003e [component: build] Replace \u003ccode\u003ets-node\u003c/code\u003e and \u003ccode\u003etsconfig-paths\u003c/code\u003e with \u003ccode\u003etsc\u003c/code\u003e, ES modules and imports maps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14789\"\u003e#14789\u003c/a\u003e [component: build] Migrate to eslint 9.x\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14793\"\u003e#14793\u003c/a\u003e Enhance performance of bitset in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14795\"\u003e#14795\u003c/a\u003e [component: bokehjs] Enhance performance of indices map in CDS view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14782\"\u003e#14782\u003c/a\u003e [component: build] Drop \u003ccode\u003ebaseUrl\u003c/code\u003e from \u003ccode\u003etsconfig.json\u003c/code\u003e files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14802\"\u003e#14802\u003c/a\u003e [component: bokehjs] Enhance performance of _value_record_references in has_props\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14804\"\u003e#14804\u003c/a\u003e Pandas 3.0 compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14810\"\u003e#14810\u003c/a\u003e [component: bokehjs] Use ES2026 \u003ccode\u003eUInt8Array.{to,from}Base64\u003c/code\u003e if available\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14816\"\u003e#14816\u003c/a\u003e Adapt to new CoW behavior in Pandas 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14822\"\u003e#14822\u003c/a\u003e Allow to disable linking layouts cross panels in  \u003ccode\u003eTabs\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14824\"\u003e#14824\u003c/a\u003e [component: bokehjs] Perform inplace byte swap for big endian conversion\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/daae4513ac6f9e504ee97e1731e5f422e56b0118\"\u003e\u003ccode\u003edaae451\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/14f5d6f19fef9c175393439516dc9b3b5ffc5641\"\u003e\u003ccode\u003e14f5d6f\u003c/code\u003e\u003c/a\u003e Update \u003ccode\u003eswitcher.json\u003c/code\u003e for 3.9 release (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14920\"\u003e#14920\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/897960e1ddd2186968c6aae28f4faf040c136c74\"\u003e\u003ccode\u003e897960e\u003c/code\u003e\u003c/a\u003e Merge deployment staging branch staging-3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/bd1eaf0fd65416f0964f90a99a8c5ab26a2239db\"\u003e\u003ccode\u003ebd1eaf0\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.9.0rc1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/b0c83f8f19b2f705176b1d7866e087fa13d7bd6c\"\u003e\u003ccode\u003eb0c83f8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Resolve models' and their properties' typing issues (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14798\"\u003e#14798\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14898\"\u003e#14898\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f4c0d97f79f4e8544e48c857d65a7bdf837e231e\"\u003e\u003ccode\u003ef4c0d97\u003c/code\u003e\u003c/a\u003e Fix conda channel configuration by using Miniforge + mamba (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14892\"\u003e#14892\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/8416793dcc230afb98e7003a278014bca8dc7b8b\"\u003e\u003ccode\u003e8416793\u003c/code\u003e\u003c/a\u003e Add old sri hash tables (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14886\"\u003e#14886\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/fa2ec203a040ea6059f5c351f082a0bcdc478ffe\"\u003e\u003ccode\u003efa2ec20\u003c/code\u003e\u003c/a\u003e Add 3.8.x release notes (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14885\"\u003e#14885\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f58aa1733ad3e2489564a9423035160e3e597161\"\u003e\u003ccode\u003ef58aa17\u003c/code\u003e\u003c/a\u003e Update release notes for Bokeh 3.9 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14866\"\u003e#14866\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/f7fd1881070958b34544322d311dc75249d6fc0d\"\u003e\u003ccode\u003ef7fd188\u003c/code\u003e\u003c/a\u003e Lower the default compression level to 2 (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14883\"\u003e#14883\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.2...3.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/lukeshingles/atlasserver/pull/73","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/lukeshingles%2Fatlasserver/issues/73","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/73/packages"}},{"old_version":"2.4.3","new_version":"3.8.2","update_type":"major","path":null,"pr_created_at":"2026-02-06T13:56:00.000Z","version_change":"2.4.3 → 3.8.2","issue":{"uuid":"3906895434","node_id":"PR_kwDOQ_55Cc7CASPI","number":2,"state":"closed","title":"Build(deps): Bump bokeh from 2.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-07T19:24:09.000Z","author_association":null,"state_reason":null,"created_at":"2026-02-06T13:56:00.000Z","updated_at":"2026-02-07T19:24:10.000Z","time_to_close":106089,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Build(deps): Bump","packages":[{"name":"bokeh","old_version":"2.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 2.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/2.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=2.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dwojcik1/mms-data-slicer/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/dwojcik1/mms-data-slicer/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwojcik1%2Fmms-data-slicer/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"3.6.2","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-02-01T09:27:06.000Z","version_change":"3.6.2 → 3.8.2","issue":{"uuid":"3881651866","node_id":"PR_kwDOAVOy2c7Ashnb","number":657,"state":"closed","title":"Bump the pip group across 1 directory with 38 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-03-01T09:23:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-02-01T09:27:06.000Z","updated_at":"2026-03-01T09:23:55.000Z","time_to_close":2419008,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"pip","update_count":38,"packages":[{"name":"beautifulsoup4","old_version":"4.13.3","new_version":"4.14.3"},{"name":"biopython","old_version":"1.85","new_version":"1.86","repository_url":"https://github.com/biopython/biopython"},{"name":"bokeh","old_version":"3.6.2","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"certifi","old_version":"2025.1.31","new_version":"2026.1.4","repository_url":"https://github.com/certifi/python-certifi"},{"name":"cryptography","old_version":"44.0.1","new_version":"46.0.4","repository_url":"https://github.com/pyca/cryptography"},{"name":"idna","old_version":"3.10","new_version":"3.11","repository_url":"https://github.com/kjd/idna"},{"name":"jsonschema","old_version":"4.23.0","new_version":"4.26.0","repository_url":"https://github.com/python-jsonschema/jsonschema"},{"name":"markdown","old_version":"3.7","new_version":"3.10.1","repository_url":"https://github.com/Python-Markdown/markdown"},{"name":"markupsafe","old_version":"3.0.2","new_version":"3.0.3","repository_url":"https://github.com/pallets/markupsafe"},{"name":"networkx","old_version":"3.4.2","new_version":"3.6.1","repository_url":"https://github.com/networkx/networkx"},{"name":"numpy","old_version":"2.2.3","new_version":"2.4.2","repository_url":"https://github.com/numpy/numpy"},{"name":"pillow","old_version":"11.1.0","new_version":"12.1.0","repository_url":"https://github.com/python-pillow/Pillow"},{"name":"plotly","old_version":"5.24.1","new_version":"6.5.2","repository_url":"https://github.com/plotly/plotly.py"},{"name":"pyasn1","old_version":"0.6.1","new_version":"0.6.2","repository_url":"https://github.com/pyasn1/pyasn1"},{"name":"pycurl","old_version":"7.45.4","new_version":"7.45.7","repository_url":"https://github.com/pycurl/pycurl"},{"name":"pygments","old_version":"2.19.1","new_version":"2.19.2","repository_url":"https://github.com/pygments/pygments"},{"name":"pyopenssl","old_version":"25.0.0","new_version":"25.3.0","repository_url":"https://github.com/pyca/pyopenssl"},{"name":"rsa","old_version":"4.9","new_version":"4.9.1","repository_url":"https://github.com/sybrenstuvel/python-rsa"},{"name":"scipy","old_version":"1.15.2","new_version":"1.17.0","repository_url":"https://github.com/scipy/scipy"},{"name":"setuptools","old_version":"75.8.2","new_version":"80.10.2","repository_url":"https://github.com/pypa/setuptools"},{"name":"sympy","old_version":"1.13.3","new_version":"1.14.0","repository_url":"https://github.com/sympy/sympy"},{"name":"wordcloud","old_version":"1.9.4","new_version":"1.9.6","repository_url":"https://github.com/amueller/word_cloud"},{"name":"ipython","old_version":"8.33.0","new_version":"9.9.0","repository_url":"https://github.com/ipython/ipython"},{"name":"ipywidgets","old_version":"8.1.5","new_version":"8.1.8","repository_url":"https://github.com/jupyter-widgets/ipywidgets"},{"name":"jinja2","old_version":"3.1.5","new_version":"3.1.6","repository_url":"https://github.com/pallets/jinja"},{"name":"pandas","old_version":"2.2.3","new_version":"3.0.0","repository_url":"https://github.com/pandas-dev/pandas"},{"name":"pymongo","old_version":"4.11.1","new_version":"4.16.0","repository_url":"https://github.com/mongodb/mongo-python-driver"},{"name":"pyyaml","old_version":"6.0.2","new_version":"6.0.3","repository_url":"https://github.com/yaml/pyyaml"},{"name":"requests","old_version":"2.32.3","new_version":"2.32.5","repository_url":"https://github.com/psf/requests"},{"name":"scikit-learn","old_version":"1.6.1","new_version":"1.8.0","repository_url":"https://github.com/scikit-learn/scikit-learn"},{"name":"statsmodels","old_version":"0.14.4","new_version":"0.14.6","repository_url":"https://github.com/statsmodels/statsmodels"},{"name":"tornado","old_version":"6.4.2","new_version":"6.5.4","repository_url":"https://github.com/tornadoweb/tornado"},{"name":"coverage","old_version":"7.6.12","new_version":"7.13.2","repository_url":"https://github.com/coveragepy/coveragepy"},{"name":"pytest","old_version":"8.3.4","new_version":"9.0.2","repository_url":"https://github.com/pytest-dev/pytest"},{"name":"pytest-cov","old_version":"6.0.0","new_version":"7.0.0","repository_url":"https://github.com/pytest-dev/pytest-cov"},{"name":"pytest-recording","old_version":"0.13.2","new_version":"0.13.4","repository_url":"https://github.com/kiwicom/pytest-recording"},{"name":"ruff","old_version":"0.9.9","new_version":"0.14.14","repository_url":"https://github.com/astral-sh/ruff"},{"name":"vcrpy","old_version":"7.0.0","new_version":"8.1.1","repository_url":"https://github.com/kevin1024/vcrpy"}],"path":null,"ecosystem":"pip"},"body":"Bumps the pip group with 38 updates in the /src directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.13.3` | `4.14.3` |\n| [biopython](https://github.com/biopython/biopython) | `1.85` | `1.86` |\n| [bokeh](https://github.com/bokeh/bokeh) | `3.6.2` | `3.8.2` |\n| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2026.1.4` |\n| [cryptography](https://github.com/pyca/cryptography) | `44.0.1` | `46.0.4` |\n| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |\n| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.23.0` | `4.26.0` |\n| [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.10.1` |\n| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |\n| [networkx](https://github.com/networkx/networkx) | `3.4.2` | `3.6.1` |\n| [numpy](https://github.com/numpy/numpy) | `2.2.3` | `2.4.2` |\n| [pillow](https://github.com/python-pillow/Pillow) | `11.1.0` | `12.1.0` |\n| [plotly](https://github.com/plotly/plotly.py) | `5.24.1` | `6.5.2` |\n| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` |\n| [pycurl](https://github.com/pycurl/pycurl) | `7.45.4` | `7.45.7` |\n| [pygments](https://github.com/pygments/pygments) | `2.19.1` | `2.19.2` |\n| [pyopenssl](https://github.com/pyca/pyopenssl) | `25.0.0` | `25.3.0` |\n| [rsa](https://github.com/sybrenstuvel/python-rsa) | `4.9` | `4.9.1` |\n| [scipy](https://github.com/scipy/scipy) | `1.15.2` | `1.17.0` |\n| [setuptools](https://github.com/pypa/setuptools) | `75.8.2` | `80.10.2` |\n| [sympy](https://github.com/sympy/sympy) | `1.13.3` | `1.14.0` |\n| [wordcloud](https://github.com/amueller/word_cloud) | `1.9.4` | `1.9.6` |\n| [ipython](https://github.com/ipython/ipython) | `8.33.0` | `9.9.0` |\n| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.5` | `8.1.8` |\n| [jinja2](https://github.com/pallets/jinja) | `3.1.5` | `3.1.6` |\n| [pandas](https://github.com/pandas-dev/pandas) | `2.2.3` | `3.0.0` |\n| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.11.1` | `4.16.0` |\n| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |\n| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` |\n| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.6.1` | `1.8.0` |\n| [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.4` | `0.14.6` |\n| [tornado](https://github.com/tornadoweb/tornado) | `6.4.2` | `6.5.4` |\n| [coverage](https://github.com/coveragepy/coveragepy) | `7.6.12` | `7.13.2` |\n| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `9.0.2` |\n| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `7.0.0` |\n| [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` |\n| [ruff](https://github.com/astral-sh/ruff) | `0.9.9` | `0.14.14` |\n| [vcrpy](https://github.com/kevin1024/vcrpy) | `7.0.0` | `8.1.1` |\n\n\nUpdates `beautifulsoup4` from 4.13.3 to 4.14.3\n\nUpdates `biopython` from 1.85 to 1.86\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/biopython/biopython/blob/master/NEWS.rst\"\u003ebiopython's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e28 October 2025: Biopython 1.86\u003c/h1\u003e\n\u003cp\u003eThis release of Biopython supports Python 3.10, 3.11, 3.12, 3.13 and 3.14.  It\nhas also been tested on PyPy3.10 v7.3.19.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.SearchIO\u003c/code\u003e now supports parsing the tabular and plain text output of\n\u003ccode\u003eInfernal \u0026lt;http://eddylab.org/infernal/\u0026gt;\u003c/code\u003e (v1.0.0+) RNA search tool. The\nformat names are \u003ccode\u003einfernal-tab\u003c/code\u003e and \u003ccode\u003einfernal-text\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe default value of the gap score of a \u003ccode\u003ePairwiseAligner\u003c/code\u003e object was changed\nin this release.  Previously, for consistency with \u003ccode\u003eBio.pairwise2\u003c/code\u003e, the\ndefault value for gap score was 0.  However, this means that a mismatch, an\ninsertion followed by a deletion, and a deletion followed by an insertion all\nget assigned a score of 0.  The aligner then finds a large number of alignments\nthat are logically the same, but have trivial differences between them.  For\nexample, aligning AAACAAA to AAAGAAA previously yielded the following three\nalignments, all with score 6::\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e AAACAAA        AAAC-AAA        AAA-CAAA\n AAAGAAA        AAA-GAAA        AAAG-AAA\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003eWith the new default parameter for the gap score, only the first alignment is\nreturned.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.PDBIO\u003c/code\u003e now ensures that b-factor values are always at most 6 characters to\nensure that we do not violate the wwPDB specification. This should not have an impact\non the majority of uses, as b-factor values are generally small (less than 100). When\n1000 \u0026lt;= b-factor \u0026lt; 10_000, the value is rounded to a single decimal place. When,\n10_000 \u0026lt;= b-factor \u0026lt; 999_999, the value is rounded to zero decimal places. Values\nabove 999_999 are now clamped. The justification for this is the rise in the b-factor\nfield being used for additional metadata, typically from computational tools.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.Align\u003c/code\u003e now provides a method \u003ccode\u003eAlignment.from_alignments_with_same_reference\u003c/code\u003e\nto construct a multiple sequence alignment from a collection of alignments\nthat share the same reference sequence.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.PDBIO\u003c/code\u003e will now raise module specific warnings:\n\u003ccode\u003eBio.PDB.PDBExceptions.PDBIOWarning\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eBio.PDB.SCADIO\u003c/code\u003e now supports object selection by color in the OpenSCAD\noutput file.  This enables generation of separate STL files for each color for\nprinting protein structures on multi-material 3D printers.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003eiplotx\u003c/code\u003e library is mentioned in the Tutorial as an option to visualise\ntrees using complex style options.\u003c/p\u003e\n\u003cp\u003eMany thanks to the Biopython developers and community for making this release\npossible, especially the following contributors:\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/biopython/biopython/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bokeh` from 3.6.2 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.6.2...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `certifi` from 2025.1.31 to 2026.1.4\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/c64d9f3a8496c0195548697f2080e716af66dd6a\"\u003e\u003ccode\u003ec64d9f3\u003c/code\u003e\u003c/a\u003e 2026.01.04 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/4ac232f05a547071543d2fb069aa3c62b1dc79f3\"\u003e\u003ccode\u003e4ac232f\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/95ae4b20e8abb7fa708e751e346466d16b36211a\"\u003e\u003ccode\u003e95ae4b2\u003c/code\u003e\u003c/a\u003e Update CI workflow to use Ubuntu 24.04 and Python 3.14 stable (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/386\"\u003e#386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/b72a7b1a40ae20755338d3132d8f880427b3b6fc\"\u003e\u003ccode\u003eb72a7b1\u003c/code\u003e\u003c/a\u003e Bump dessant/lock-threads from 5.0.1 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/385\"\u003e#385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ecc267216fbdcecb1b2aa2aa175152b773cc5ced\"\u003e\u003ccode\u003eecc2672\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/384\"\u003e#384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/6a897dbc1124b17f179ef225742fcda481ec96f3\"\u003e\u003ccode\u003e6a897db\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/27ca98ad845ee6d130a88301622c137893f71620\"\u003e\u003ccode\u003e27ca98a\u003c/code\u003e\u003c/a\u003e Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/381\"\u003e#381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/56c59a63909cfd3162b37e7bc16956e64df0f737\"\u003e\u003ccode\u003e56c59a6\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 6.0.0 to 6.0.1 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ae0021cd43a77bfba67d20a041469cdf6996570e\"\u003e\u003ccode\u003eae0021c\u003c/code\u003e\u003c/a\u003e Bump actions/setup-python from 6.0.0 to 6.1.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/380\"\u003e#380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/certifi/python-certifi/commit/ddf5d0b5d2a3d55fd92a79f141dbb5e074caf924\"\u003e\u003ccode\u003eddf5d0b\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5.0.1 to 6.0.0 (\u003ca href=\"https://redirect.github.com/certifi/python-certifi/issues/378\"\u003e#378\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/certifi/python-certifi/compare/2025.01.31...2026.01.04\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `cryptography` from 44.0.1 to 46.0.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst\"\u003ecryptography's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e46.0.4 - 2026-01-27\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* `Dropped support for win_arm64 wheels`_.\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.\n\u003cp\u003e.. _v46-0-3:\u003c/p\u003e\n\u003cp\u003e46.0.3 - 2025-10-15\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed compilation when using LibreSSL 4.2.0.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. _v46-0-2:\u003c/p\u003e\n\u003cp\u003e46.0.2 - 2025-09-30\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.\n\u003cp\u003e.. _v46-0-1:\u003c/p\u003e\n\u003cp\u003e46.0.1 - 2025-09-16\u003cbr /\u003e\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eFixed an issue where users installing via \u003ccode\u003epip\u003c/code\u003e on Python 3.14 development\nversions would not properly install a dependency.\u003c/li\u003e\n\u003cli\u003eFixed an issue building the free-threaded macOS 3.14 wheels.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. _v46-0-0:\u003c/p\u003e\n\u003cp\u003e46.0.0 - 2025-09-16\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e\n* **BACKWARDS INCOMPATIBLE:** Support for Python 3.7 has been removed.\n* Support for OpenSSL \u0026lt; 3.0 is deprecated and will be removed in the next\n  release.\n* Support for ``x86_64`` macOS (including publishing wheels) is deprecated\n  and will be removed in two releases. We will switch to publishing an\n  ``arm64`` only wheel for macOS.\n* Support for 32-bit Windows (including publishing wheels) is deprecated\n  and will be removed in two releases. Users should move to a 64-bit\n  Python installation.\n* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.\n* We now build ``ppc64le`` ``manylinux`` wheels and publish them to PyPI.\n* We now build ``win_arm64`` (Windows on Arm) wheels and publish them to PyPI.\n* Added support for free-threaded Python 3.14.\n* Removed the deprecated ``get_attribute_for_oid`` method on\n  :class:`~cryptography.x509.CertificateSigningRequest`. Users should use\n  :meth:`~cryptography.x509.Attributes.get_attribute_for_oid` instead.\n\u0026lt;/tr\u0026gt;\u0026lt;/table\u0026gt; \n\u003c/code\u003e\u003c/pre\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e6f44fc8e6391f05d719fb9d369692325b87a471\"\u003e\u003ccode\u003ee6f44fc\u003c/code\u003e\u003c/a\u003e bump for 46.0.4 and drop win arm64 due to CI issues (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/14217\"\u003e#14217\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/c0af4dd7b75921bbe9f1d41a03dbd4b64a9e3403\"\u003e\u003ccode\u003ec0af4dd\u003c/code\u003e\u003c/a\u003e release 46.0.3 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13681\"\u003e#13681\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/99efe5ad150a56efadafacaffd0e3ee319373904\"\u003e\u003ccode\u003e99efe5a\u003c/code\u003e\u003c/a\u003e bump version for 46.0.2 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13531\"\u003e#13531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e735cfc27502320101c130335c556394a125ba52\"\u003e\u003ccode\u003ee735cfc\u003c/code\u003e\u003c/a\u003e release 46.0.1 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13450\"\u003e#13450\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/4e457ffba43a6d87efc63c33041e2081438dd8a4\"\u003e\u003ccode\u003e4e457ff\u003c/code\u003e\u003c/a\u003e Explicitly specify python in mac uv build invocation (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13447\"\u003e#13447\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/2726efdb6d67f1c90cf9c6062d9fe051965586f8\"\u003e\u003ccode\u003e2726efd\u003c/code\u003e\u003c/a\u003e Depend on CFFI 2.0.0 or newer on Python \u0026gt; 3.8 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13448\"\u003e#13448\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/62230623d183706632c0eb7822c96ac95e3710a8\"\u003e\u003ccode\u003e6223062\u003c/code\u003e\u003c/a\u003e release 46.0.0 (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13446\"\u003e#13446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/563c4915b0931455706f761a4579c26698824eae\"\u003e\u003ccode\u003e563c491\u003c/code\u003e\u003c/a\u003e Update comment for pyopenssl-release tag (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13445\"\u003e#13445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/d2f6f7faced35b73277bc624ff496f8af696b172\"\u003e\u003ccode\u003ed2f6f7f\u003c/code\u003e\u003c/a\u003e Bump downstream dependencies in CI (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13439\"\u003e#13439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pyca/cryptography/commit/e7ab02bd679d0b4f55d93486fe27e62554ef15d4\"\u003e\u003ccode\u003ee7ab02b\u003c/code\u003e\u003c/a\u003e we'll ship this with 3.5.3 why not (\u003ca href=\"https://redirect.github.com/pyca/cryptography/issues/13442\"\u003e#13442\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pyca/cryptography/compare/44.0.1...46.0.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `idna` from 3.10 to 3.11\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/kjd/idna/blob/master/HISTORY.rst\"\u003eidna's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e3.11 (2025-10-12)\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Unicode 16.0.0, including significant changes to UTS46\nprocessing. As a result of Unicode ending support for it, transitional\nprocessing no longer has an effect and returns the same result.\u003c/li\u003e\n\u003cli\u003eAdd support for Python 3.14, lowest supported version is Python 3.8.\u003c/li\u003e\n\u003cli\u003eVarious updates to packaging, including PEP 740 support.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/ad949ee3052c2265c66e3df2dd8871a5832ba327\"\u003e\u003ccode\u003ead949ee\u003c/code\u003e\u003c/a\u003e Release v3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/cae4ba779e0a543823894bd4136651c187944da8\"\u003e\u003ccode\u003ecae4ba7\u003c/code\u003e\u003c/a\u003e Second release candidate for 3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/8adb305165c77c4a45d1568a70ead75d2197692c\"\u003e\u003ccode\u003e8adb305\u003c/code\u003e\u003c/a\u003e Add space in RST link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/74cb2b652bb06133b0c4ab52cc98221be63162cf\"\u003e\u003ccode\u003e74cb2b6\u003c/code\u003e\u003c/a\u003e Release candidate for 3.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/05dab09fdde5bbf7d52f757c4dc62e0ba934cca8\"\u003e\u003ccode\u003e05dab09\u003c/code\u003e\u003c/a\u003e Format idna-data with ruff\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/90eac78b737d26613776b490432fc6d926b15c55\"\u003e\u003ccode\u003e90eac78\u003c/code\u003e\u003c/a\u003e Apply ruff formatting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/a31ce7ecc0b767e40abb5ce28744ac567b73f366\"\u003e\u003ccode\u003ea31ce7e\u003c/code\u003e\u003c/a\u003e Remove errant test vectors\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/81f03334211c78c1832991ce70ebafb3cbfbb79c\"\u003e\u003ccode\u003e81f0333\u003c/code\u003e\u003c/a\u003e Omit vectors known to be broken in test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/a0f32578c0cac28c7ffbb4c860c92eb2b9b579bd\"\u003e\u003ccode\u003ea0f3257\u003c/code\u003e\u003c/a\u003e Merge branch 'master' into unicode-16-uts46-changes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kjd/idna/commit/38d98860e6a1ab92fd35ab09ea4739feabf339a3\"\u003e\u003ccode\u003e38d9886\u003c/code\u003e\u003c/a\u003e Remove extra UTS46 test vector\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/kjd/idna/compare/v3.10...v3.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jsonschema` from 4.23.0 to 4.26.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-jsonschema/jsonschema/releases\"\u003ejsonschema's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.26.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1400\"\u003epython-jsonschema/jsonschema#1400\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1405\"\u003epython-jsonschema/jsonschema#1405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.5.0 to 6.6.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1406\"\u003epython-jsonschema/jsonschema#1406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1407\"\u003epython-jsonschema/jsonschema#1407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1413\"\u003epython-jsonschema/jsonschema#1413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.6.0 to 6.6.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1412\"\u003epython-jsonschema/jsonschema#1412\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1410\"\u003epython-jsonschema/jsonschema#1410\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.2 to 2.3.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1409\"\u003epython-jsonschema/jsonschema#1409\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/setup-python from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1411\"\u003epython-jsonschema/jsonschema#1411\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidators: avoid \u003ccode\u003eurllib.request\u003c/code\u003e at import-time by \u003ca href=\"https://github.com/gudnimg\"\u003e\u003ccode\u003e@​gudnimg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1416\"\u003epython-jsonschema/jsonschema#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.6.1 to 6.8.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1417\"\u003epython-jsonschema/jsonschema#1417\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.3 to 2.3.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1418\"\u003epython-jsonschema/jsonschema#1418\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1415\"\u003epython-jsonschema/jsonschema#1415\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.3.4 to 2.4.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1419\"\u003epython-jsonschema/jsonschema#1419\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump github/codeql-action from 3 to 4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1420\"\u003epython-jsonschema/jsonschema#1420\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 6.8.0 to 7.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1421\"\u003epython-jsonschema/jsonschema#1421\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1424\"\u003epython-jsonschema/jsonschema#1424\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.0 to 7.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1423\"\u003epython-jsonschema/jsonschema#1423\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1425\"\u003epython-jsonschema/jsonschema#1425\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1429\"\u003epython-jsonschema/jsonschema#1429\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1431\"\u003epython-jsonschema/jsonschema#1431\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1432\"\u003epython-jsonschema/jsonschema#1432\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.1 to 7.1.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1430\"\u003epython-jsonschema/jsonschema#1430\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1434\"\u003epython-jsonschema/jsonschema#1434\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.2 to 7.1.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1435\"\u003epython-jsonschema/jsonschema#1435\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1436\"\u003epython-jsonschema/jsonschema#1436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1437\"\u003epython-jsonschema/jsonschema#1437\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump softprops/action-gh-release from 2.4.2 to 2.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1438\"\u003epython-jsonschema/jsonschema#1438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1439\"\u003epython-jsonschema/jsonschema#1439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocument \u003ccode\u003euuid\u003c/code\u003e format by \u003ca href=\"https://github.com/sim642\"\u003e\u003ccode\u003e@​sim642\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1440\"\u003epython-jsonschema/jsonschema#1440\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1441\"\u003epython-jsonschema/jsonschema#1441\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump astral-sh/setup-uv from 7.1.4 to 7.1.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1442\"\u003epython-jsonschema/jsonschema#1442\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1443\"\u003epython-jsonschema/jsonschema#1443\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gudnimg\"\u003e\u003ccode\u003e@​gudnimg\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1416\"\u003epython-jsonschema/jsonschema#1416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sim642\"\u003e\u003ccode\u003e@​sim642\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1440\"\u003epython-jsonschema/jsonschema#1440\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0\"\u003ehttps://github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev4.25.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eValidator\u003c/code\u003e protocol init to match runtime by \u003ca href=\"https://github.com/sirosen\"\u003e\u003ccode\u003e@​sirosen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/pull/1396\"\u003epython-jsonschema/jsonschema#1396\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst\"\u003ejsonschema's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003ev4.26.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eDecrease import time by delaying importing of \u003ccode\u003eurllib.request\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1416\"\u003e#1416\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.25.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix an incorrect required argument in the \u003ccode\u003eValidator\u003c/code\u003e protocol's type annotations (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1396\"\u003e#1396\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.25.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for the \u003ccode\u003eiri\u003c/code\u003e and \u003ccode\u003eiri-reference\u003c/code\u003e formats to the \u003ccode\u003eformat-nongpl\u003c/code\u003e extra via the MIT-licensed \u003ccode\u003erfc3987-syntax\u003c/code\u003e.\nThey were alread supported by the \u003ccode\u003eformat\u003c/code\u003e extra. (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1388\"\u003e#1388\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.24.1\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eProperly escape segments in \u003ccode\u003eValidationError.json_path\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/139\"\u003e#139\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ev4.24.0\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFix improper handling of \u003ccode\u003eunevaluatedProperties\u003c/code\u003e in the presence of \u003ccode\u003eadditionalProperties\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1351\"\u003e#1351\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSupport for Python 3.8 has been dropped, as it is end-of-life.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/a7277432b0f7bcd0551f6e589d30457017125df4\"\u003e\u003ccode\u003ea727743\u003c/code\u003e\u003c/a\u003e Add a changelog entry for 4.26.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/6d28c13efbbd6cf136143fdbb18f79d4476091f6\"\u003e\u003ccode\u003e6d28c13\u003c/code\u003e\u003c/a\u003e Update the lockfile.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/739499edc33c007ff62180c9fef61dbf5480bb7b\"\u003e\u003ccode\u003e739499e\u003c/code\u003e\u003c/a\u003e Update pre-commit hooks.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/cb2d77980713577f65cc7e7c7c115932206393fd\"\u003e\u003ccode\u003ecb2d779\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1443\"\u003e#1443\u003c/a\u003e from python-jsonschema/pre-commit-ci-update-config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/e6bbbb7c5bcdb32a654572d17bfce264aefd1f9d\"\u003e\u003ccode\u003ee6bbbb7\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/d56037a88faac4881214c6674a785b4abd428617\"\u003e\u003ccode\u003ed56037a\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1442\"\u003e#1442\u003c/a\u003e from python-jsonschema/dependabot/github_actions/ast...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/e54ce13fb590a5c17fb702431598a382de6e68f9\"\u003e\u003ccode\u003ee54ce13\u003c/code\u003e\u003c/a\u003e Bump astral-sh/setup-uv from 7.1.4 to 7.1.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/1f7c9fbd01d9c2f8ddd98065324062f7e122dbe1\"\u003e\u003ccode\u003e1f7c9fb\u003c/code\u003e\u003c/a\u003e Partially update docs requirements.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/241aec982bc8c867f276779faf20d49d9774532f\"\u003e\u003ccode\u003e241aec9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/python-jsonschema/jsonschema/issues/1441\"\u003e#1441\u003c/a\u003e from python-jsonschema/pre-commit-ci-update-config\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/python-jsonschema/jsonschema/commit/2818efb4fa446ed4fa7815b4e09a7b4b7c633852\"\u003e\u003ccode\u003e2818efb\u003c/code\u003e\u003c/a\u003e Apache-2.0 -\u0026gt; nongpl\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/python-jsonschema/jsonschema/compare/v4.23.0...v4.26.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markdown` from 3.7 to 3.10.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Python-Markdown/markdown/releases\"\u003emarkdown's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 3.10.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure nested elements inside inline comments are properly unescaped (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1571\"\u003e#1571\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMake the docs build successfully with mkdocstrings-python 2.0 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1575\"\u003e#1575\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix infinite loop when multiple bogus or unclosed HTML comments appear in input (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1578\"\u003e#1578\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix another infinite loop when handling bad comments (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1586\"\u003e#1586\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.10.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOfficially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9\nand PyPy 3.9.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix an HTML comment parsing case in some Python versions that can cause an\ninfinite loop (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1554\"\u003e#1554\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRevert the default behavior of \u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e (to \u003ccode\u003eTrue\u003c/code\u003e). The new\nbehavior introduced in 3.9.0 is experimental and results are inconsistent.\nIt should not have been made the default behavior (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1561\"\u003e#1561\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.9.0\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFootnotes are now ordered by the occurrence of their references in the\ndocument. A new configuration option for the footnotes extension,\n\u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e, has been added to support restoring the previous\nbehavior of ordering footnotes by the occurrence of definitions (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1367\"\u003e#1367\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure inline processing iterates through elements in document order (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1546\"\u003e#1546\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix handling of incomplete HTML tags in code spans in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1547\"\u003e#1547\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.8.2\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ecodecs\u003c/code\u003e deprecation in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed comment parsing in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed declarations in Python 3.14.\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed HTML tag \u003ccode\u003e\u0026lt;foo\u003c/code\u003e and Python 3.14.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 3.8.1\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure incomplete markup declaration in raw HTML doesn't crash parser (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1534\"\u003e#1534\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed dropped content in \u003ccode\u003emd_in_html\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1526\"\u003e#1526\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFixed HTML handling corner case that prevented some content from not being rendered (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1528\"\u003e#1528\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md\"\u003emarkdown's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[3.10.1] - 2026-01-21\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure nested elements inside inline comments are properly unescaped (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1571\"\u003e#1571\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eMake the docs build successfully with mkdocstrings-python 2.0 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1575\"\u003e#1575\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix infinite loop when multiple bogus or unclosed HTML comments appear in input (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1578\"\u003e#1578\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix another infinite loop when handling bad comments (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1586\"\u003e#1586\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.10.0] - 2025-11-03\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOfficially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9\nand PyPy 3.9.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix an HTML comment parsing case in some Python versions that can cause an\ninfinite loop (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1554\"\u003e#1554\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRevert the default behavior of \u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e (to \u003ccode\u003eTrue\u003c/code\u003e). The new\nbehavior introduced in 3.9.0 is experimental and results are inconsistent.\nIt should not have been made the default behavior (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1561\"\u003e#1561\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.9.0] - 2025-09-04\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFootnotes are now ordered by the occurrence of their references in the\ndocument. A new configuration option for the footnotes extension,\n\u003ccode\u003eUSE_DEFINITION_ORDER\u003c/code\u003e, has been added to support restoring the previous\nbehavior of ordering footnotes by the occurrence of definitions (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1367\"\u003e#1367\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure inline processing iterates through elements in document order (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1546\"\u003e#1546\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix handling of incomplete HTML tags in code spans in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1547\"\u003e#1547\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.8.2] - 2025-06-19\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003ecodecs\u003c/code\u003e deprecation in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed comment parsing in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed declarations in Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix issue with unclosed HTML tag \u003ccode\u003e\u0026lt;foo\u003c/code\u003e and Python 3.14 (\u003ca href=\"https://redirect.github.com/Python-Markdown/markdown/issues/1537\"\u003e#1537\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[3.8.1] - 2025-06-18\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/e5fa5b86e8ec380cbc520cfc637d72c779e5c601\"\u003e\u003ccode\u003ee5fa5b8\u003c/code\u003e\u003c/a\u003e Bump version to 3.10.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/f9253495f5d9919f2fdd5e147832b5fc21330f65\"\u003e\u003ccode\u003ef925349\u003c/code\u003e\u003c/a\u003e More HTML fixes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/9933a0a4699f3dea91f46528a2bf54863f531c08\"\u003e\u003ccode\u003e9933a0a\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Allow reference links with backticks\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/07dfa4eb43f7a2ab3181b4f842a960a03a6c1221\"\u003e\u003ccode\u003e07dfa4e\u003c/code\u003e\u003c/a\u003e Allow reference links with backticks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/fb6b27a6ff90980b5bcb0cd51528a7c9dc3a93ca\"\u003e\u003ccode\u003efb6b27a\u003c/code\u003e\u003c/a\u003e Fix infinite loop when text contains multiple unclosed comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/89112c293f7b399ae8808f3a06306f46601e9684\"\u003e\u003ccode\u003e89112c2\u003c/code\u003e\u003c/a\u003e Make the docs build successfully with mkdocstrings-python 2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/961856ceb30623b929d8b7abdf5ed7074db7184c\"\u003e\u003ccode\u003e961856c\u003c/code\u003e\u003c/a\u003e Update link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/2b49115b1002142afbd84b3002f13c0e98a0f487\"\u003e\u003ccode\u003e2b49115\u003c/code\u003e\u003c/a\u003e Ensure nested elements inside inline comments are properly unescaped.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/22e89c1fc346f72218a10e392a0c3b4731912522\"\u003e\u003ccode\u003e22e89c1\u003c/code\u003e\u003c/a\u003e Bump version to 3.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Python-Markdown/markdown/commit/c138aea5139a6aceae05bb957e866d9ce7577b94\"\u003e\u003ccode\u003ec138aea\u003c/code\u003e\u003c/a\u003e + PY314 - PY39\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Python-Markdown/markdown/compare/3.7...3.10.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `markupsafe` from 3.0.2 to 3.0.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pallets/markupsafe/releases\"\u003emarkupsafe's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.0.3\u003c/h2\u003e\n\u003cp\u003eThis is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.\u003c/p\u003e\n\u003cp\u003ePyPI: \u003ca href=\"https://pypi.org/project/MarkupSafe/3.0.3/\"\u003ehttps://pypi.org/project/MarkupSafe/3.0.3/\u003c/a\u003e\nChanges: \u003ca href=\"https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3\"\u003ehttps://markupsafe.palletsprojects.com/page/changes/#version-3-0-3\u003c/a\u003e\nMilestone: \u003ca href=\"https://github.com/pallets/markupsafe/milestone/15?closed=1\"\u003ehttps://github.com/pallets/markupsafe/milestone/15?closed=1\u003c/a\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e__version__\u003c/code\u003e raises \u003ccode\u003eDeprecationWarning\u003c/code\u003e instead of \u003ccode\u003eUserWarning\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/487\"\u003e#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdopt multi-phase initialization PEP 489 for the C extension. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/494\"\u003e#494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild Windows ARM64 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/485\"\u003e#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild Python 3.14 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/503\"\u003e#503\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBuild riscv64 wheels. \u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/505\"\u003e#505\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pallets/markupsafe/blob/main/CHANGES.rst\"\u003emarkupsafe's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eVersion 3.0.3\u003c/h2\u003e\n\u003cp\u003eReleased 2025-09-27\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e__version__\u003c/code\u003e raises \u003ccode\u003eDeprecationWarning\u003c/code\u003e instead of \u003ccode\u003eUserWarning\u003c/code\u003e.\n:issue:\u003ccode\u003e487\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdopt multi-phase initialisation (:pep:\u003ccode\u003e489\u003c/code\u003e) for the C extension.\n:issue:\u003ccode\u003e494\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild Windows ARM64 wheels. :issue:\u003ccode\u003e485\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild Python 3.14 wheels. :issue:\u003ccode\u003e503\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eBuild riscv64 wheels. :issue:\u003ccode\u003e505\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/297fc8e356e6836a62087949245d09a28e9f1b13\"\u003e\u003ccode\u003e297fc8e\u003c/code\u003e\u003c/a\u003e release version 3.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/7e4e6ce249107c5f27fa6fe890e29da7a8dc8f0c\"\u003e\u003ccode\u003e7e4e6ce\u003c/code\u003e\u003c/a\u003e Free-threading: run with pytest-run-paralell (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/507\"\u003e#507\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/6100b9c0d466495a08d55b33cb172d7b5d8e9aa1\"\u003e\u003ccode\u003e6100b9c\u003c/code\u003e\u003c/a\u003e enable riscv64 wheels (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/506\"\u003e#506\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/c9d5ecfc7eec6f611b19cdc8e1cde1aaa65cb8eb\"\u003e\u003ccode\u003ec9d5ecf\u003c/code\u003e\u003c/a\u003e enable riscv64 wheels\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/2f9b33753052e7c6df1464a7c900787d04ae9daf\"\u003e\u003ccode\u003e2f9b337\u003c/code\u003e\u003c/a\u003e tox for 3.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/78d951a9549dee9fc901c55fc79a74a5f01e96fc\"\u003e\u003ccode\u003e78d951a\u003c/code\u003e\u003c/a\u003e update dev dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/bb6744e392e79611b110c5ba022238eb1b855cc2\"\u003e\u003ccode\u003ebb6744e\u003c/code\u003e\u003c/a\u003e add entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/65c4134ab16a3faccbcac2cba90da0db2b799542\"\u003e\u003ccode\u003e65c4134\u003c/code\u003e\u003c/a\u003e upgrade cibuildwheel, add \u003ccode\u003ecp314\u003c/code\u003e wheels and test on CPython 3.14 (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/504\"\u003e#504\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/3a9bd88b84c9edba8b922bb12b84a59feed98788\"\u003e\u003ccode\u003e3a9bd88\u003c/code\u003e\u003c/a\u003e add cp314 wheels\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pallets/markupsafe/commit/aafe44d87bd7974bc82af8c4010dea9938441edf\"\u003e\u003ccode\u003eaafe44d\u003c/code\u003e\u003c/a\u003e remove slsa provenance (\u003ca href=\"https://redirect.github.com/pallets/markupsafe/issues/501\"\u003e#501\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pallets/markupsafe/compare/3.0.2...3.0.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `networkx` from 3.4.2 to 3.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/networkx/networkx/releases\"\u003enetworkx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eNetworkX 3.6.1\u003c/h2\u003e\n\u003ch1\u003enetworkx 3.6.1\u003c/h1\u003e\n\u003cp\u003eWe're happy to announce the release of networkx 3.6.1!\u003c/p\u003e\n\u003ch2\u003eAPI Changes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd spectral bipartition community finding and greedy bipartition using node swaps (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8347\"\u003e#8347\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eEnhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eNodelists for \u003ccode\u003efrom_biadjacency_matrix\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/7993\"\u003e#7993\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eAdd spectral bipartition community finding and greedy bipartition using node swaps (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8347\"\u003e#8347\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eFix draw_networkx_nodes with list node_shape and add regression test (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8363\"\u003e#8363\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eBug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix: allow graph subclasses to have additional arguments (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8369\"\u003e#8369\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eDocumentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDOC: Improve benchmarking readme (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8358\"\u003e#8358\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: More details re: RC releases in the release process devdocs (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8346\"\u003e#8346\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tutorial (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8300\"\u003e#8300\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: Add blurb to contributor guide about drawing tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8370\"\u003e#8370\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDOC: Fix underline lens in docstrings (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8371\"\u003e#8371\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eRolling back shortest paths links (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8373\"\u003e#8373\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eMaintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMAINT: Replace string literal with comment (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8359\"\u003e#8359\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 5 to 6 in the actions group (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8360\"\u003e#8360\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003epin python 3.14 to be version 3.14.0 until dataclasses are fixed (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8365\"\u003e#8365\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eBlocklist Python 3.14.1 (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8372\"\u003e#8372\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOther\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eTST: add tests for unsupported graph types in MST algorithms (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8353\"\u003e#8353\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eTST: clean up isomorphism tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/pull/8364\"\u003e#8364\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003e10 authors added to this release (alphabetically):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Aka2210\"\u003e\u003ccode\u003e@​Aka2210\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jfinkels\"\u003e\u003ccode\u003e@​jfinkels\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NaorTIRAM\"\u003e\u003ccode\u003e@​NaorTIRAM\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAditi Juneja (\u003ca href=\"https://github.com/Schefflera-Arboricola\"\u003e\u003ccode\u003e@​Schefflera-Arboricola\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlejandro Candioti (\u003ca href=\"https://github.com/amcandio\"\u003e\u003ccode\u003e@​amcandio\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eColman Bouton (\u003ca href=\"https://github.com/LorentzFactor\"\u003e\u003ccode\u003e@​LorentzFactor\u003c/code\u003e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/7530809bfa1ea7ed6fdf918a4d1431488953cb1f\"\u003e\u003ccode\u003e7530809\u003c/code\u003e\u003c/a\u003e Designate 3.6.1 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/4788eb08f2492dd6bf6f97ce8ee07cd52aa6cf89\"\u003e\u003ccode\u003e4788eb0\u003c/code\u003e\u003c/a\u003e Rolling back shortest paths links (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8373\"\u003e#8373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/696edb6efbbbb622959e96f1276fc0db68dc0954\"\u003e\u003ccode\u003e696edb6\u003c/code\u003e\u003c/a\u003e Fix draw_networkx_nodes with list node_shape and add regression test  (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8363\"\u003e#8363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/c38830c61a6fee3ee10f216071bb63cb9b92bfb9\"\u003e\u003ccode\u003ec38830c\u003c/code\u003e\u003c/a\u003e Blocklist Python 3.14.1 (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8372\"\u003e#8372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/81d231141b08600ebfd1c781e28ecbf791e94016\"\u003e\u003ccode\u003e81d2311\u003c/code\u003e\u003c/a\u003e DOC: Fix underline lens in docstrings. (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8371\"\u003e#8371\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/a6e2bfadef51dda47df6466b32642e0d428c5801\"\u003e\u003ccode\u003ea6e2bfa\u003c/code\u003e\u003c/a\u003e DOC: Add blurb to contributor guide about drawing tests. (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8370\"\u003e#8370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/96b628295eff29d266e1c75355556fc9fe58cc16\"\u003e\u003ccode\u003e96b6282\u003c/code\u003e\u003c/a\u003e DOC: clarify difference between G.nodes/G.nodes() and G.edges/G.edges() in tu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/75bdd737ca8382d06eb76ff9018a81870c9f3443\"\u003e\u003ccode\u003e75bdd73\u003c/code\u003e\u003c/a\u003e Fix: allow graph subclasses to have additional arguments (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8369\"\u003e#8369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/7663fa5e5fd73d6921410a18c7ac4116ffa04f4d\"\u003e\u003ccode\u003e7663fa5\u003c/code\u003e\u003c/a\u003e TST: clean up isomorphism tests (\u003ca href=\"https://redirect.github.com/networkx/networkx/issues/8364\"\u003e#8364\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/networkx/networkx/commit/3dacd1bdcbd976b9e148a60ddebafd868c0a52f3\"\u003e\u003ccode\u003e3dacd1b\u003c/code\u003e\u003c/a\u003e Add spectral bipartition community finding and greedy bipartition using node ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/networkx/networkx/compare/networkx-3.4.2...networkx-3.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `numpy` from 2.2.3 to 2.4.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/numpy/numpy/releases\"\u003enumpy's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.4.1 (Jan 10, 2026)\u003c/h2\u003e\n\u003ch1\u003eNumPy 2.4.1 Release Notes\u003c/h1\u003e\n\u003cp\u003eThe NumPy 2.4.1 is a patch release that fixes bugs discoved after the\n2.4.0 release. In particular, the typo \u003ccode\u003eSeedlessSequence\u003c/code\u003e is preserved to\nenable wheels using the random Cython API and built against NumPy \u0026lt; 2.4.0\nto run without errors.\u003c/p\u003e\n\u003cp\u003eThis release supports Python versions 3.11-3.14\u003c/p\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eA total of 9 people contributed to this release. People with a \u0026quot;+\u0026quot; by their\nnames contributed a patch for the first time.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAlexander Shadchin\u003c/li\u003e\n\u003cli\u003eBill Tompkins +\u003c/li\u003e\n\u003cli\u003eCharles Harris\u003c/li\u003e\n\u003cli\u003eJoren Hammudoglu\u003c/li\u003e\n\u003cli\u003eMarten van Kerkwijk\u003c/li\u003e\n\u003cli\u003eNathan Goldbaum\u003c/li\u003e\n\u003cli\u003eRaghuveer Devulapalli\u003c/li\u003e\n\u003cli\u003eRalf Gommers\u003c/li\u003e\n\u003cli\u003eSebastian Berg\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePull requests merged\u003c/h2\u003e\n\u003cp\u003eA total of 15 pull requests were merged for this release.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30490\"\u003e#30490\u003c/a\u003e: MAINT: Prepare 2.4.x for further development\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30503\"\u003e#30503\u003c/a\u003e: DOC: \u003ccode\u003enumpy.select\u003c/code\u003e: fix \u003ccode\u003edefault\u003c/code\u003e parameter docstring...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30504\"\u003e#30504\u003c/a\u003e: REV: Revert part of \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30164\"\u003e#30164\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30500\"\u003e#30500\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30506\"\u003e#30506\u003c/a\u003e: TYP: \u003ccode\u003enumpy.select\u003c/code\u003e: allow passing array-like \u003ccode\u003edefault\u003c/code\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30507\"\u003e#30507\u003c/a\u003e: MNT: use if constexpr for compile-time branch selection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30513\"\u003e#30513\u003c/a\u003e: BUG: Fix leak in flat assignment iterator\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30516\"\u003e#30516\u003c/a\u003e: BUG: fix heap overflow in fixed-width string multiply (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30511\"\u003e#30511\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30523\"\u003e#30523\u003c/a\u003e: BUG: Ensure summed weights returned by np.average always are...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30527\"\u003e#30527\u003c/a\u003e: TYP: Fix return type of histogram2d\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30594\"\u003e#30594\u003c/a\u003e: MAINT: avoid passing ints to random functions that take double...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30595\"\u003e#30595\u003c/a\u003e: BLD: Avoiding conflict with pygit2 for static build\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30596\"\u003e#30596\u003c/a\u003e: MAINT: Fix msvccompiler missing error on FreeBSD\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30608\"\u003e#30608\u003c/a\u003e: BLD: update vendored Meson to 1.9.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30620\"\u003e#30620\u003c/a\u003e: ENH: use more fine-grained critical sections in array coercion...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/numpy/numpy/pull/30623\"\u003e#30623\u003c/a\u003e: BUG: Undo result type change of quantile/percentile but keep...\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.4.0 (Dec 20, 2025)\u003c/h2\u003e\n\u003ch1\u003eNumPy 2.4.0 Release Notes\u003c/h1\u003e\n\u003cp\u003eThe NumPy 2.4.0 release continues the work to improve free threaded Python\nsupport, user dtypes implementation, and annotations. There are many expired\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst\"\u003enumpy's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eThis is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the\nfirst feature release using the \u003ccode\u003enumpy/numpy-release \u0026lt;https://github.com/numpy/numpy-release\u0026gt;\u003c/code\u003e__ repository.\u003c/p\u003e\n\u003cp\u003eThe commands can be copied into the command line, but be sure to replace 2.4.0\nwith the correct version. This should be read together with the\n:ref:\u003ccode\u003egeneral release guide \u0026lt;prepare_release\u0026gt;\u003c/code\u003e.\u003c/p\u003e\n\u003ch1\u003eFacility preparation\u003c/h1\u003e\n\u003cp\u003eBefore beginning to make a release, use the \u003ccode\u003erequirements/*_requirements.txt\u003c/code\u003e files to\nensure that you have the needed software. Most software can be installed with\npip, but some will require apt-get, dnf, or whatever your system uses for\nsoftware. You will also need a GitHub personal access token (PAT) to push the\ndocumentation. There are a few ways to streamline things:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eGit can be set up to use a keyring to store your GitHub personal access token.\nSearch online for the details.\u003c/li\u003e\n\u003cli\u003eYou can use the \u003ccode\u003ekeyring\u003c/code\u003e app to store the PyPI password for twine. See the\nonline twine documentation for details.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePrior to release\u003c/h1\u003e\n\u003ch2\u003eAdd/drop Python versions\u003c/h2\u003e\n\u003cp\u003eWhen adding or dropping Python versions, multiple config and CI files need to\nbe edited in addition to changing the minimum version in \u003ccode\u003epyproject.toml\u003c/code\u003e.\nMake these changes in an ordinary PR against main and backport if necessary.\nWe currently release wheels for new Python versions after the first Python RC\nonce manylinux and cibuildwheel support that new Python version.\u003c/p\u003e\n\u003ch2\u003eBackport pull requests\u003c/h2\u003e\n\u003cp\u003eChanges that have been marked for this release must be backported to the\nmaintenance/2.4.x branch.\u003c/p\u003e\n\u003ch2\u003eUpdate 2.4.0 milestones\u003c/h2\u003e\n\u003cp\u003eLook at the issues/prs with 2.4.0 milestones and either push them off to a\nlater version, or maybe remove the milestone. You may need to add a milestone.\u003c/p\u003e\n\u003cp\u003eCheck the numpy-release repo\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/c81c49f77451340651a751e76bca607d85e4fd55\"\u003e\u003ccode\u003ec81c49f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30757\"\u003e#30757\u003c/a\u003e from charris/prepare-2.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/b3ae9c59de627110458653836f1be81280222f85\"\u003e\u003ccode\u003eb3ae9c5\u003c/code\u003e\u003c/a\u003e REL: Prepare for the NumPy 2.4.2 release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/9de89843c3918fa133f1aab9fb4435c38a3b0ba6\"\u003e\u003ccode\u003e9de8984\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30737\"\u003e#30737\u003c/a\u003e from mattip/scipy-openblas-backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/b7be329895e32de44578742b2745fb307cdf8625\"\u003e\u003ccode\u003eb7be329\u003c/code\u003e\u003c/a\u003e backport scipy-openblas version change\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/7ff98637f80dc1ff7a18fce8025ffabdded76094\"\u003e\u003ccode\u003e7ff9863\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30736\"\u003e#30736\u003c/a\u003e from charris/backport-30667\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/431fffbe91d86c04738f039e0048441f8f9b5fff\"\u003e\u003ccode\u003e431fffb\u003c/code\u003e\u003c/a\u003e MAINT: Skip tests that require \u003cstrong\u003ebuffer\u003c/strong\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/127235fcd9b2e80764da8f6c64f942a6bddb093a\"\u003e\u003ccode\u003e127235f\u003c/code\u003e\u003c/a\u003e BUG: fix thread safety of \u003ccode\u003earray_getbuffer\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30667\"\u003e#30667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/18bdb2e675b68daa5afc3250c41982ff77b3867f\"\u003e\u003ccode\u003e18bdb2e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30713\"\u003e#30713\u003c/a\u003e from charris/backport-30710\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/41dd7512de6dc3dd665b71d4e3a321aa1150dc48\"\u003e\u003ccode\u003e41dd751\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/numpy/numpy/issues/30712\"\u003e#30712\u003c/a\u003e from charris/backport-30705\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/numpy/numpy/commit/7a278da99943376313b8f631905c3baaa7a82a30\"\u003e\u003ccode\u003e7a278da\u003c/code\u003e\u003c/a\u003e BUG: Fixup the quantile promotion fixup\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/numpy/numpy/compare/v2.2.3...v2.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `pillow` from 11.1.0 to 12.1.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/python-pillow/Pillow/releases\"\u003epillow's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e12.1.0\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html\"\u003ehttps://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eDeprecations\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate getdata(), in favour of new get_flattened_data() \u003ca href=\"https://redirect.github.com/python-pillow/Pillow/issues/9292\"...\n\n_Description has been truncated_","html_url":"https://github.com/briehl/narrative/pull/657","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/briehl%2Fnarrative/issues/657","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/657/packages"}},{"old_version":"3.7.3","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-24T09:34:54.000Z","version_change":"3.7.3 → 3.8.2","issue":{"uuid":"3850733564","node_id":"PR_kwDOOclEzM6_Gsxx","number":45,"state":"open","title":"build(deps): bump the uv group across 1 directory with 6 updates","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-24T09:34:54.000Z","updated_at":"2026-01-24T09:34:57.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"uv","update_count":6,"packages":[{"name":"orjson","old_version":"3.11.1","new_version":"3.11.5","repository_url":"https://github.com/ijl/orjson"},{"name":"urllib3","old_version":"2.5.0","new_version":"2.6.3","repository_url":"https://github.com/urllib3/urllib3"},{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"filelock","old_version":"3.18.0","new_version":"3.20.3","repository_url":"https://github.com/tox-dev/py-filelock"},{"name":"fonttools","old_version":"4.59.0","new_version":"4.60.2","repository_url":"https://github.com/fonttools/fonttools"},{"name":"virtualenv","old_version":"20.32.0","new_version":"20.36.1","repository_url":"https://github.com/pypa/virtualenv"}],"path":null,"ecosystem":"pip"},"body":"Bumps the uv group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [orjson](https://github.com/ijl/orjson) | `3.11.1` | `3.11.5` |\n| [urllib3](https://github.com/urllib3/urllib3) | `2.5.0` | `2.6.3` |\n| [bokeh](https://github.com/bokeh/bokeh) | `3.7.3` | `3.8.2` |\n| [filelock](https://github.com/tox-dev/py-filelock) | `3.18.0` | `3.20.3` |\n| [fonttools](https://github.com/fonttools/fonttools) | `4.59.0` | `4.60.2` |\n| [virtualenv](https://github.com/pypa/virtualenv) | `20.32.0` | `20.36.1` |\n\n\nUpdates `orjson` from 3.11.1 to 3.11.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ijl/orjson/releases\"\u003eorjson's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.11.5\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow simple error message instead of traceback when attempting to\nbuild on unsupported Python versions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.4\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eABI compatibility with CPython 3.15 alpha 1.\u003c/li\u003e\n\u003cli\u003ePublish PyPI wheels for 3.14 and manylinux i686, manylinux arm7,\nmanylinux ppc64le, manylinux s390x.\u003c/li\u003e\n\u003cli\u003eBuild now requires a C compiler.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.3\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix PyPI project metadata when using maturin 1.9.2 or later.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.2\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix build using Rust 1.89 on amd64.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuild now depends on Rust 1.85 or later instead of 1.82.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ijl/orjson/blob/master/CHANGELOG.md\"\u003eorjson's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.11.5 - 2025-12-06\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eShow simple error message instead of traceback when attempting to\nbuild on unsupported Python versions.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.4 - 2025-10-24\u003c/h2\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eABI compatibility with CPython 3.15 alpha 1.\u003c/li\u003e\n\u003cli\u003ePublish PyPI wheels for 3.14 and manylinux i686, manylinux arm7,\nmanylinux ppc64le, manylinux s390x.\u003c/li\u003e\n\u003cli\u003eBuild now requires a C compiler.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.3 - 2025-08-26\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix PyPI project metadata when using maturin 1.9.2 or later.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.11.2 - 2025-08-12\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix build using Rust 1.89 on amd64.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBuild now depends on Rust 1.85 or later instead of 1.82.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/fb3eb1f729c7e7b019f780af5695722c99c7c695\"\u003e\u003ccode\u003efb3eb1f\u003c/code\u003e\u003c/a\u003e 3.11.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/52688e02c51c845cde24a46cd1011a6010d10eb8\"\u003e\u003ccode\u003e52688e0\u003c/code\u003e\u003c/a\u003e Record contributors in headers\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/dc083e87d5262e7dde3ba4b1d2a377b5b065a27c\"\u003e\u003ccode\u003edc083e8\u003c/code\u003e\u003c/a\u003e Further compatibility and build misc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/18f0186d47fbadd53c9db4e39a442d5b04225418\"\u003e\u003ccode\u003e18f0186\u003c/code\u003e\u003c/a\u003e Compatibility and build misc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/a4fdeb3aff125d501ec0dd0577f9b38b2b977b4f\"\u003e\u003ccode\u003ea4fdeb3\u003c/code\u003e\u003c/a\u003e 3.11.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/2e80d68afacafca8751e6a64ca05d0d4087dbd15\"\u003e\u003ccode\u003e2e80d68\u003c/code\u003e\u003c/a\u003e unlikely to cold_path, remove intrinsics\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/27edea92f8da2fdfc3f1342474e2f1686f1edf55\"\u003e\u003ccode\u003e27edea9\u003c/code\u003e\u003c/a\u003e FFI through crate::ffi, partial non-CPython compatibility\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/416a8c9578da780d0d58b5e6b751793deafc610d\"\u003e\u003ccode\u003e416a8c9\u003c/code\u003e\u003c/a\u003e Unconditionally build yyjson\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/c8c1a17dca8436a2fee05ca060febd096e653d98\"\u003e\u003ccode\u003ec8c1a17\u003c/code\u003e\u003c/a\u003e edition 2024\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ijl/orjson/commit/af4179a1fa0aafffd0f867203b6c36e9a522f165\"\u003e\u003ccode\u003eaf4179a\u003c/code\u003e\u003c/a\u003e build maintenance, panic_immediate_abort break, test 3.15\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ijl/orjson/compare/3.11.1...3.11.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `urllib3` from 2.5.0 to 2.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/urllib3/urllib3/releases\"\u003eurllib3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.6.3\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by \u003ca href=\"https://github.com/D47A\"\u003e\u003ccode\u003e@​D47A\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-38jv-5279-wg99)\u003c/li\u003e\n\u003cli\u003eStarted treating \u003ccode\u003eRetry-After\u003c/code\u003e times greater than 6 hours as 6 hours by default. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3743\"\u003eurllib3/urllib3#3743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eurllib3.connection.VerifiedHTTPSConnection\u003c/code\u003e on Emscripten. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3752\"\u003eurllib3/urllib3#3752\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.2\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eHTTPResponse.read_chunked()\u003c/code\u003e to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3734\"\u003eurllib3/urllib3#3734\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.1\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRestore previously removed \u003ccode\u003eHTTPResponse.getheaders()\u003c/code\u003e and \u003ccode\u003eHTTPResponse.getheader()\u003c/code\u003e methods. (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3731\"\u003e#3731\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.6.0\u003c/h2\u003e\n\u003ch2\u003e🚀 urllib3 is fundraising for HTTP/2 support\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support\"\u003eurllib3 is raising ~$40,000 USD\u003c/a\u003e to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects \u003ca href=\"https://opencollective.com/urllib3\"\u003eplease consider contributing financially\u003c/a\u003e to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.\u003c/p\u003e\n\u003cp\u003eThank you for your support.\u003c/p\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where streaming API could improperly handle highly compressed HTTP content (\u0026quot;decompression bombs\u0026quot;) leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (CVE-2025-66471 reported by \u003ca href=\"https://github.com/Cycloctane\"\u003e\u003ccode\u003e@​Cycloctane\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-2xpw-w6gg-jr37)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the \u003ccode\u003eContent-Encoding\u003c/code\u003e header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (CVE-2025-66418 reported by \u003ca href=\"https://github.com/illia-v\"\u003e\u003ccode\u003e@​illia-v\u003c/code\u003e\u003c/a\u003e, 8.9 High, GHSA-gm62-xv2j-4w53)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf urllib3 is not installed with the optional \u003ccode\u003eurllib3[brotli]\u003c/code\u003e extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to  benefit from the security fixes and avoid warnings. Prefer using  \u003ccode\u003eurllib3[brotli]\u003c/code\u003e to install a compatible Brotli package automatically.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/urllib3/urllib3/blob/main/CHANGES.rst\"\u003eurllib3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e2.6.3 (2026-01-07)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a high-severity security issue where decompression-bomb safeguards of\nthe streaming API were bypassed when HTTP redirects were followed.\n(\u003ccode\u003eGHSA-38jv-5279-wg99 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eStarted treating \u003ccode\u003eRetry-After\u003c/code\u003e times greater than 6 hours as 6 hours by\ndefault. (\u003ccode\u003e[#3743](https://github.com/urllib3/urllib3/issues/3743) \u0026lt;https://github.com/urllib3/urllib3/issues/3743\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eFixed \u003ccode\u003eurllib3.connection.VerifiedHTTPSConnection\u003c/code\u003e on Emscripten.\n(\u003ccode\u003e[#3752](https://github.com/urllib3/urllib3/issues/3752) \u0026lt;https://github.com/urllib3/urllib3/issues/3752\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.2 (2025-12-11)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ccode\u003eHTTPResponse.read_chunked()\u003c/code\u003e to properly handle leftover data in\nthe decoder's buffer when reading compressed chunked responses.\n(\u003ccode\u003e[#3734](https://github.com/urllib3/urllib3/issues/3734) \u0026lt;https://github.com/urllib3/urllib3/issues/3734\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.1 (2025-12-08)\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eRestore previously removed \u003ccode\u003eHTTPResponse.getheaders()\u003c/code\u003e and\n\u003ccode\u003eHTTPResponse.getheader()\u003c/code\u003e methods.\n(\u003ccode\u003e[#3731](https://github.com/urllib3/urllib3/issues/3731) \u0026lt;https://github.com/urllib3/urllib3/issues/3731\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e2.6.0 (2025-12-05)\u003c/h1\u003e\n\u003ch2\u003eSecurity\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a security issue where streaming API could improperly handle highly\ncompressed HTTP content (\u0026quot;decompression bombs\u0026quot;) leading to excessive resource\nconsumption even when a small amount of data was requested. Reading small\nchunks of compressed data is safer and much more efficient now.\n(\u003ccode\u003eGHSA-2xpw-w6gg-jr37 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003cli\u003eFixed a security issue where an attacker could compose an HTTP response with\nvirtually unlimited links in the \u003ccode\u003eContent-Encoding\u003c/code\u003e header, potentially\nleading to a denial of service (DoS) attack by exhausting system resources\nduring decoding. The number of allowed chained encodings is now limited to 5.\n(\u003ccode\u003eGHSA-gm62-xv2j-4w53 \u0026lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53\u0026gt;\u003c/code\u003e__)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e.. caution::\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eIf urllib3 is not installed with the optional \u003ccode\u003eurllib3[brotli]\u003c/code\u003e extra, but\nyour environment contains a Brotli/brotlicffi/brotlipy package anyway, make\nsure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to\nbenefit from the security fixes and avoid warnings. Prefer using\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/0248277dd7ac0239204889ca991353ad3e3a1ddc\"\u003e\u003ccode\u003e0248277\u003c/code\u003e\u003c/a\u003e Release 2.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b\"\u003e\u003ccode\u003e8864ac4\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/70cecb27ca99d56aaaeb63ac27ee270ef2b24c5c\"\u003e\u003ccode\u003e70cecb2\u003c/code\u003e\u003c/a\u003e Fix Scorecard issues related to vulnerable dev dependencies (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3755\"\u003e#3755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/41f249abe1ef3e20768588969c4035aba060a359\"\u003e\u003ccode\u003e41f249a\u003c/code\u003e\u003c/a\u003e Move \u0026quot;v2.0 Migration Guide\u0026quot; to the end of the table of contents (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3747\"\u003e#3747\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/fd4dffd2fc544166b76151a2fa3d7b7c0eab540c\"\u003e\u003ccode\u003efd4dffd\u003c/code\u003e\u003c/a\u003e Patch \u003ccode\u003eVerifiedHTTPSConnection\u003c/code\u003e for Emscripten (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3752\"\u003e#3752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/13f0bfd55e4468fe1ea9c6f809d3a87b0f93ebab\"\u003e\u003ccode\u003e13f0bfd\u003c/code\u003e\u003c/a\u003e Handle massive values in Retry-After when calculating time to sleep for (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3743\"\u003e#3743\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/8c480bf87bcefd321b3a1ae47f04e908b6b2ed7b\"\u003e\u003ccode\u003e8c480bf\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5.0.0 to 6.0.0 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3748\"\u003e#3748\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/4b40616e959c0a2c466e8075f2a785a9f99bb0c1\"\u003e\u003ccode\u003e4b40616\u003c/code\u003e\u003c/a\u003e Bump actions/cache from 4.3.0 to 5.0.1 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3750\"\u003e#3750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/82b8479663d037d220c883f1584dd01a43bb273b\"\u003e\u003ccode\u003e82b8479\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6.0.0 to 7.0.0 (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3749\"\u003e#3749\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/urllib3/urllib3/commit/34284cb01700bb7d4fdd472f909e22393e9174e2\"\u003e\u003ccode\u003e34284cb\u003c/code\u003e\u003c/a\u003e Mention experimental features in the security policy (\u003ca href=\"https://redirect.github.com/urllib3/urllib3/issues/3746\"\u003e#3746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/urllib3/urllib3/compare/2.5.0...2.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bokeh` from 3.7.3 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `filelock` from 3.18.0 to 3.20.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tox-dev/py-filelock/releases\"\u003efilelock's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.20.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix TOCTOU symlink vulnerability in SoftFileLock by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/465\"\u003etox-dev/filelock#465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.2...3.20.3\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.2...3.20.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.2\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Unix systems without O_NOFOLLOW by \u003ca href=\"https://github.com/mwilliamson\"\u003e\u003ccode\u003e@​mwilliamson\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/463\"\u003etox-dev/filelock#463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[pre-commit.ci] pre-commit autoupdate by \u003ca href=\"https://github.com/pre-commit-ci\"\u003e\u003ccode\u003e@​pre-commit-ci\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/464\"\u003etox-dev/filelock#464\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mwilliamson\"\u003e\u003ccode\u003e@​mwilliamson\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/463\"\u003etox-dev/filelock#463\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.1...3.20.2\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.1...3.20.2\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/461\"\u003etox-dev/filelock#461\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.20.0...3.20.1\"\u003ehttps://github.com/tox-dev/filelock/compare/3.20.0...3.20.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.20.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tox.toml to sdist by \u003ca href=\"https://github.com/mtelka\"\u003e\u003ccode\u003e@​mtelka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/436\"\u003etox-dev/filelock#436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate docs with example by \u003ca href=\"https://github.com/znichollscr\"\u003e\u003ccode\u003e@​znichollscr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/438\"\u003etox-dev/filelock#438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd 3.14 support and drop 3.9 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/448\"\u003etox-dev/filelock#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtelka\"\u003e\u003ccode\u003e@​mtelka\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/436\"\u003etox-dev/filelock#436\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/znichollscr\"\u003e\u003ccode\u003e@​znichollscr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/438\"\u003etox-dev/filelock#438\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/tox-dev/filelock/compare/3.19.1...3.20.0\"\u003ehttps://github.com/tox-dev/filelock/compare/3.19.1...3.20.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e3.19.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd 3.14t (free threading) to matrix by \u003ca href=\"https://github.com/paultiq\"\u003e\u003ccode\u003e@​paultiq\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/433\"\u003etox-dev/filelock#433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eIncrease test coverage by \u003ca href=\"https://github.com/paultiq\"\u003e\u003ccode\u003e@​paultiq\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/tox-dev/filelock/pull/434\"\u003etox-dev/filelock#434\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5\"\u003e\u003ccode\u003e41b42dd\u003c/code\u003e\u003c/a\u003e Fix TOCTOU symlink vulnerability in SoftFileLock (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/465\"\u003e#465\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/f2e7d4046b6a2b375a573bcfbad21827b99f8939\"\u003e\u003ccode\u003ef2e7d40\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/464\"\u003e#464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/50888548eb2f008d372e71f2835a47851ab83836\"\u003e\u003ccode\u003e5088854\u003c/code\u003e\u003c/a\u003e Support Unix systems without O_NOFOLLOW (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/377f62251d7cdf30768cc9ee1eb31cea1551c71b\"\u003e\u003ccode\u003e377f622\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/460\"\u003e#460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/4724d7f8c3393ec1f048c93933e6e3e6ec321f0e\"\u003e\u003ccode\u003e4724d7f\u003c/code\u003e\u003c/a\u003e Fix TOCTOU symlink vulnerability in lock file creation (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/461\"\u003e#461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/cb69414a2327cf0a9887e12054d1dc112ee700af\"\u003e\u003ccode\u003ecb69414\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 5 to 6 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/459\"\u003e#459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/0769294f14a6c62eea64741722f7acef5386b4cd\"\u003e\u003ccode\u003e0769294\u003c/code\u003e\u003c/a\u003e Bump actions/download-artifact from 6 to 7 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/458\"\u003e#458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/414193a188892bd376eb5c56eb45a9cf8ecc9284\"\u003e\u003ccode\u003e414193a\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/457\"\u003e#457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/1456797beb94ad59e5627462ad29f7ed3a966626\"\u003e\u003ccode\u003e1456797\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/456\"\u003e#456\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tox-dev/filelock/commit/8d6bf90af313ac7fd6e41ef2b715d91dd6858f5c\"\u003e\u003ccode\u003e8d6bf90\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 5 to 6 (\u003ca href=\"https://redirect.github.com/tox-dev/py-filelock/issues/455\"\u003e#455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tox-dev/py-filelock/compare/3.18.0...3.20.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `fonttools` from 4.59.0 to 4.60.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fonttools/fonttools/releases\"\u003efonttools's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.60.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBackport release\u003c/strong\u003e Same as 4.61.0 but without \u0026quot;Drop support for EOL Python 3.9\u0026quot; change to allow downstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3994\"\u003e#3994\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3999\"\u003e#3999\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[ufoLib] Reverted accidental method name change in \u003ccode\u003eUFOReader.getKerningGroupConversionRenameMaps\u003c/code\u003e\nthat broke compatibility with downstream projects like defcon (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3948\"\u003e#3948\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3947\"\u003e#3947\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/robotools/defcon/issues/478\"\u003erobotools/defcon#478\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[ufoLib] Added test coverage for \u003ccode\u003egetKerningGroupConversionRenameMaps\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3950\"\u003e#3950\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Don't try to subset BASE table; pass it through by default instead (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3949\"\u003e#3949\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove empty BaseRecord entries in MarkBasePos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3897\"\u003e#3897\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3892\"\u003e#3892\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3946\"\u003e#3946\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove duplicate features when subsetting (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3945\"\u003e#3945\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[Docs] Added documentation for the visitor module (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3944\"\u003e#3944\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[pointPen] Allow \u003ccode\u003ereverseFlipped\u003c/code\u003e parameter of \u003ccode\u003eDecomposingPointPen\u003c/code\u003e to take a \u003ccode\u003eReverseFlipped\u003c/code\u003e enum value to control whether/how to reverse contour direction of flipped components, in addition to the existing True/False. This allows to set \u003ccode\u003eReverseFlipped.ON_CURVE_FIRST\u003c/code\u003e to ensure that the decomposed outline starts with an on-curve point before being reversed, for better consistency with other segment-oriented contour transformations. The change is backward compatible, and the default behavior hasn't changed (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[filterPen] Added \u003ccode\u003eContourFilterPointPen\u003c/code\u003e, base pen for buffered contour operations, and \u003ccode\u003eOnCurveStartPointPen\u003c/code\u003e filter to ensure contours start with an on-curve point (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[cu2qu] Fixed difference in cython vs pure-python complex division by real number (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3930\"\u003e#3930\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[varLib.avar] Refactored and added some new sub-modules and scripts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3926\"\u003e#3926\u003c/a\u003e).\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.build\u003c/code\u003e module to build avar (and a missing fvar) binaries into a possibly empty TTFont,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.unbuild\u003c/code\u003e module to print a .designspace snippet that would generate the same avar binary,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.map\u003c/code\u003e module to take TTFont and do the mapping, in user/normalized space,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.plan\u003c/code\u003e module moved from \u003ccode\u003evarLib.avarPlanner\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThe bare \u003ccode\u003efonttools varLib.avar\u003c/code\u003e script is deprecated, in favour of \u003ccode\u003efonttools varLib.avar.build\u003c/code\u003e (or \u003ccode\u003eunbuild\u003c/code\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[interpolatable] Clarify \u003ccode\u003elinear_sum_assignment\u003c/code\u003e backend options and minimal dependency usage (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3927\"\u003e#3927\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[post] Speed up \u003ccode\u003ebuild_psNameMapping\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3923\"\u003e#3923\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[ufoLib] Added typing annotations to fontTools.ufoLib (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3875\"\u003e#3875\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.59.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[varLib] Clear \u003ccode\u003eUSE_MY_METRICS\u003c/code\u003e component flags when inconsistent across masters (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3912\"\u003e#3912\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib.instancer] Avoid negative advance width/height values when instatiating HVAR/VVAR, (unlikely in well-behaved fonts) (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3918\"\u003e#3918\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Fix shaping behaviour when pruning empty mark sets (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3915\"\u003e#3915\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/harfbuzz/harfbuzz/issues/5499\"\u003eharfbuzz/harfbuzz#5499\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Fixed \u003ccode\u003edot()\u003c/code\u003e product of perpendicular vectors not always returning exactly 0.0 in all Python implementations (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3911\"\u003e#3911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[varLib.instancer] Implemented fully-instantiating \u003ccode\u003eavar2\u003c/code\u003e fonts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3909\"\u003e#3909\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Allow float values in \u003ccode\u003eVariableScalar\u003c/code\u003e's axis locations (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3906\"\u003e#3906\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3907\"\u003e#3907\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Handle special case in \u003ccode\u003ecalc_intersect\u003c/code\u003e for degenerate cubic curves where 3 to 4 control points are equal (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3904\"\u003e#3904\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.59.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[featureVars] Update OS/2.usMaxContext if possible after addFeatureVariationsRaw (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3894\"\u003e#3894\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[vhmtx] raise TTLibError('not enough data...') when hmtx/vmtx are truncated (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3843\"\u003e#3843\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3901\"\u003e#3901\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Combine duplicate features that have the same set of lookups regardless of the order in which those lookups are added to the feature (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3895\"\u003e#3895\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib] Deprecate \u003ccode\u003evarLib.mutator\u003c/code\u003e in favor of \u003ccode\u003evarLib.instancer\u003c/code\u003e. The latter provides equivalent full (static font) instancing in addition to partial VF instancing.\u003cbr /\u003e\nCLI users should replace \u003ccode\u003efonttools varLib.mutator\u003c/code\u003e with \u003ccode\u003efonttools varLib.instancer\u003c/code\u003e. API users should migrate to \u003ccode\u003efontTools.varLib.instancer.instantiateVariableFont\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/2680\"\u003e#2680\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/fonttools/fonttools/blob/main/NEWS.rst\"\u003efonttools's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.60.2 (released 2025-12-09)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eBackport release\u003c/strong\u003e Same as 4.61.0 but without \u0026quot;Drop support for EOL Python 3.9\u0026quot; change to allow\ndownstream projects still on Python 3.9 to avail of the security fix for CVE-2025-66034 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3994\"\u003e#3994\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3999\"\u003e#3999\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.61.0 (released 2025-11-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[varLib.main]: \u003cstrong\u003eSECURITY\u003c/strong\u003e Only use basename(vf.filename) to prevent path traversal attacks when\nrunning \u003ccode\u003efonttools varLib\u003c/code\u003e command, or code which invokes \u003ccode\u003efonttools.varLib.main()\u003c/code\u003e.\nFixes CVE-2025-66034, see:\n\u003ca href=\"https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv\"\u003ehttps://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e[feaLib] Sort BaseLangSysRecords by tag (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3986\"\u003e#3986\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eDrop support for EOL Python 3.9 (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3982\"\u003e#3982\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[instancer] Support --remove-overlaps for fonts with CFF2 table (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3975\"\u003e#3975\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[CFF2ToCFF] Add --remove-overlaps option (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3976\"\u003e#3976\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Raise an error for rsub with NULL target (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3979\"\u003e#3979\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[bezierTools] Fix logic bug in curveCurveIntersections (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3963\"\u003e#3963\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[feaLib] Error when condition sets have the same name (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3958\"\u003e#3958\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu.ufo] skip processing empty glyphs to support sparse kerning masters (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3956\"\u003e#3956\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[unicodedata] Update to Unicode 17. Require \u003ccode\u003eunicodedata2 \u0026gt;= 17.0.0\u003c/code\u003e when installed with 'unicode' extra.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.1 (released 2025-09-29)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[ufoLib] Reverted accidental method name change in \u003ccode\u003eUFOReader.getKerningGroupConversionRenameMaps\u003c/code\u003e\nthat broke compatibility with downstream projects like defcon (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3948\"\u003e#3948\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3947\"\u003e#3947\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/robotools/defcon/issues/478\"\u003erobotools/defcon#478\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[ufoLib] Added test coverage for \u003ccode\u003egetKerningGroupConversionRenameMaps\u003c/code\u003e method (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3950\"\u003e#3950\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Don't try to subset BASE table; pass it through by default instead (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3949\"\u003e#3949\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove empty BaseRecord entries in MarkBasePos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3897\"\u003e#3897\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3892\"\u003e#3892\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Add pruning for MarkLigPos and MarkMarkPos lookups (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3946\"\u003e#3946\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[subset] Remove duplicate features when subsetting (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3945\"\u003e#3945\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[Docs] Added documentation for the visitor module (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3944\"\u003e#3944\u003c/a\u003e).\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e4.60.0 (released 2025-09-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[pointPen] Allow \u003ccode\u003ereverseFlipped\u003c/code\u003e parameter of \u003ccode\u003eDecomposingPointPen\u003c/code\u003e to take a \u003ccode\u003eReverseFlipped\u003c/code\u003e\nenum value to control whether/how to reverse contour direction of flipped components, in addition to\nthe existing True/False. This allows to set \u003ccode\u003eReverseFlipped.ON_CURVE_FIRST\u003c/code\u003e to ensure that\nthe decomposed outline starts with an on-curve point before being reversed, for better consistency\nwith other segment-oriented contour transformations. The change is backward compatible, and the\ndefault behavior hasn't changed (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[filterPen] Added \u003ccode\u003eContourFilterPointPen\u003c/code\u003e, base pen for buffered contour operations, and\n\u003ccode\u003eOnCurveStartPointPen\u003c/code\u003e filter to ensure contours start with an on-curve point (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3934\"\u003e#3934\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[cu2qu] Fixed difference in cython vs pure-python complex division by real number (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3930\"\u003e#3930\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003e[varLib.avar] Refactored and added some new sub-modules and scripts (\u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3926\"\u003e#3926\u003c/a\u003e).\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.build\u003c/code\u003e module to build avar (and a missing fvar) binaries into a possibly empty TTFont,\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003evarLib.avar.unbuild\u003c/code\u003e module to print a .designspace snippet that would generate the same avar binary,\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/78ba5e8bb4ccf65ef8077d81bc48450ccacf1728\"\u003e\u003ccode\u003e78ba5e8\u003c/code\u003e\u003c/a\u003e Release 4.60.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/c3f9979dbf278baf82beba675dda40c94f78c48e\"\u003e\u003ccode\u003ec3f9979\u003c/code\u003e\u003c/a\u003e macos-13 runner is no more, use macos-15-intel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/8016403e0ad4b7de00c0b48d30afa4de9d7a29e4\"\u003e\u003ccode\u003e8016403\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Merge pull request \u003ca href=\"https://redirect.github.com/fonttools/fonttools/issues/3982\"\u003e#3982\u003c/a\u003e from fonttools/drop-py39\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/e691e3bef9fc4e8096e4023ccacbc327d2569905\"\u003e\u003ccode\u003ee691e3b\u003c/code\u003e\u003c/a\u003e Release 4.61.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/c2d540f4ada946ea1ef97f898e0daa9601bc1019\"\u003e\u003ccode\u003ec2d540f\u003c/code\u003e\u003c/a\u003e Update NEWS.rst\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/3859753a0511efc568d4d71c4933219c11b6207b\"\u003e\u003ccode\u003e3859753\u003c/code\u003e\u003c/a\u003e Update NEWS.rst\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/26eb070a55c731d9828dddf5cb022e0d79e9af45\"\u003e\u003ccode\u003e26eb070\u003c/code\u003e\u003c/a\u003e black\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/5ff73af3265e0b5207c3a2870c9f0ccc8ee19d0f\"\u003e\u003ccode\u003e5ff73af\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32\"\u003e\u003ccode\u003ea696d5b\u003c/code\u003e\u003c/a\u003e varLib: only use the basename(vf.filename)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fonttools/fonttools/commit/b00bc459efac4d9d52a1eafa2cdd2c7ff503ced7\"\u003e\u003ccode\u003eb00bc45\u003c/code\u003e\u003c/a\u003e varLib_test: test path traversal in variable-font filename\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/fonttools/fonttools/compare/4.59.0...4.60.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `virtualenv` from 20.32.0 to 20.36.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/virtualenv/releases\"\u003evirtualenv's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e20.36.1\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.36.0 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3011\"\u003epypa/virtualenv#3011\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: resolve TOCTOU vulnerabilities in app_data and lock directory creation by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3013\"\u003epypa/virtualenv#3013\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.36.0...20.36.1\"\u003ehttps://github.com/pypa/virtualenv/compare/20.36.0...20.36.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.36.0\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.35.3 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2981\"\u003epypa/virtualenv#2981\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by \u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade pip and fix 3.15 picking old wheel by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2989\"\u003epypa/virtualenv#2989\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erelease 20.35.4 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2990\"\u003epypa/virtualenv#2990\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wrong path on migrated venv by \u003ca href=\"https://github.com/sk1234567891\"\u003e\u003ccode\u003e@​sk1234567891\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2996\"\u003epypa/virtualenv#2996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest_too_many_open_files: assert on \u003ccode\u003eerrno.EMFILE\u003c/code\u003e instead of \u003ccode\u003estrerror\u003c/code\u003e by \u003ca href=\"https://github.com/pltrz\"\u003e\u003ccode\u003e@​pltrz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3001\"\u003epypa/virtualenv#3001\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 by \u003ca href=\"https://github.com/pythonhubdev\"\u003e\u003ccode\u003e@​pythonhubdev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3002\"\u003epypa/virtualenv#3002\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: resolve EncodingWarning in tox upgrade environment by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3007\"\u003epypa/virtualenv#3007\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 by \u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3006\"\u003epypa/virtualenv#3006\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. by \u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3008\"\u003epypa/virtualenv#3008\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sk1234567891\"\u003e\u003ccode\u003e@​sk1234567891\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2996\"\u003epypa/virtualenv#2996\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pltrz\"\u003e\u003ccode\u003e@​pltrz\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3001\"\u003epypa/virtualenv#3001\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pythonhubdev\"\u003e\u003ccode\u003e@​pythonhubdev\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3002\"\u003epypa/virtualenv#3002\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rahuldevikar\"\u003e\u003ccode\u003e@​rahuldevikar\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/3006\"\u003epypa/virtualenv#3006\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.35.3...20.36.0\"\u003ehttps://github.com/pypa/virtualenv/compare/20.35.3...20.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.35.4\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erelease 20.35.3 by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2981\"\u003epypa/virtualenv#2981\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by \u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade pip and fix 3.15 picking old wheel by \u003ca href=\"https://github.com/gaborbernat\"\u003e\u003ccode\u003e@​gaborbernat\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2989\"\u003epypa/virtualenv#2989\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gracetyy\"\u003e\u003ccode\u003e@​gracetyy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/pypa/virtualenv/pull/2982\"\u003epypa/virtualenv#2982\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.35.3...20.35.4\"\u003ehttps://github.com/pypa/virtualenv/compare/20.35.3...20.35.4\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e20.35.3\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst\"\u003evirtualenv's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev20.36.1 (2026-01-09)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.36.1\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Fix TOCTOU vulnerabilities in app_data and lock directory creation that could be exploited via symlink attacks - reported by :user:`tsigouris007`, fixed by :user:`gaborbernat`. (:issue:`3013`)\n\u003ch2\u003ev20.36.0 (2026-01-07)\u003c/h2\u003e\n\u003cp\u003eFeatures - 20.36.0\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. Users can now specify Python versions using operators like \u003ccode\u003e\u0026gt;=\u003c/code\u003e, \u003ccode\u003e\u0026lt;=\u003c/code\u003e, \u003ccode\u003e~=\u003c/code\u003e, etc. For example: \u003ccode\u003evirtualenv --python=\u0026quot;\u0026gt;=3.12\u0026quot; myenv\u003c/code\u003e \u003ccode\u003e. (:issue:\u003c/code\u003e2994`)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.4 (2025-10-28)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.4\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Fix race condition in ``_virtualenv.py`` when file is overwritten during import, preventing ``NameError`` when ``_DISTUTILS_PATCH`` is accessed - by :user:`gracetyy`. (:issue:`2969`)\n- Upgrade embedded wheels:\n\u003cul\u003e\n\u003cli\u003epip to \u003ccode\u003e25.3\u003c/code\u003e from \u003ccode\u003e25.2\u003c/code\u003e (:issue:\u003ccode\u003e2989\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.3 (2025-10-10)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.3\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAccept RuntimeError in \u003ccode\u003etest_too_many_open_files\u003c/code\u003e, by :user:\u003ccode\u003eesafak\u003c/code\u003e (:issue:\u003ccode\u003e2935\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.2 (2025-10-10)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.2\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e- Revert out changes related to the extraction of the discovery module - by :user:`gaborbernat`. (:issue:`2978`)\n\u003ch2\u003ev20.35.1 (2025-10-09)\u003c/h2\u003e\n\u003cp\u003eBugfixes - 20.35.1\n\u003c/code\u003e\u003c/pre\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePatch get_interpreter to handle missing cache and app_data - by :user:\u003ccode\u003eesafak\u003c/code\u003e (:issue:\u003ccode\u003e2972\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eFix backwards incompatible changes to \u003ccode\u003ePythonInfo\u003c/code\u003e - by :user:\u003ccode\u003egaborbernat\u003c/code\u003e. (:issue:\u003ccode\u003e2975\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev20.35.0 (2025-10-08)\u003c/h2\u003e\n\u003cp\u003eFeatures - 20.35.0\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/d0ad11d1146e81ea74d2461be9653f1da9cf3fd1\"\u003e\u003ccode\u003ed0ad11d\u003c/code\u003e\u003c/a\u003e release 20.36.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc\"\u003e\u003ccode\u003edec4cec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3013\"\u003e#3013\u003c/a\u003e from gaborbernat/fix-sec\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/5fe5d38beb1273b489591a7b444f1018af2edf0a\"\u003e\u003ccode\u003e5fe5d38\u003c/code\u003e\u003c/a\u003e release 20.36.0 (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3011\"\u003e#3011\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/9719376addaa710b61d9ed013774fa26f6224b4e\"\u003e\u003ccode\u003e9719376\u003c/code\u003e\u003c/a\u003e release 20.36.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/0276db6fcf8849c519d75465f659b12aefb2acd8\"\u003e\u003ccode\u003e0276db6\u003c/code\u003e\u003c/a\u003e Add support for PEP 440 version specifiers in the \u003ccode\u003e--python\u003c/code\u003e flag. (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3008\"\u003e#3008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/4f900c29044e17812981b5b98ddce45604858b7f\"\u003e\u003ccode\u003e4f900c2\u003c/code\u003e\u003c/a\u003e Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3\"\u003e#3\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/13afcc62a3444d0386c8031d0a62277a8274ab07\"\u003e\u003ccode\u003e13afcc6\u003c/code\u003e\u003c/a\u003e fix: resolve EncodingWarning in tox upgrade environment (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3007\"\u003e#3007\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/31b5d31581df3e3a7bbc55e52568b26dd01b0d57\"\u003e\u003ccode\u003e31b5d31\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/2997\"\u003e#2997\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/7c284221b4751388801355fc6ebaa2abe60427bd\"\u003e\u003ccode\u003e7c28422\u003c/code\u003e\u003c/a\u003e fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/pypa/virtualenv/commit/365628c544cd5498fbf0a3b6c6a8c1f41d25a749\"\u003e\u003ccode\u003e365628c\u003c/code\u003e\u003c/a\u003e test_too_many_open_files: assert on \u003ccode\u003eerrno.EMFILE\u003c/code\u003e instead of \u003ccode\u003estrerror\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/pypa/virtualenv/issues/3001\"\u003e#3001\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/pypa/virtualenv/compare/20.32.0...20.36.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/AKJUS/pystac-client/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/AKJUS/pystac-client/pull/45","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AKJUS%2Fpystac-client/issues/45","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/45/packages"}},{"old_version":"3.4.3","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-22T00:18:57.000Z","version_change":"3.4.3 → 3.8.2","issue":{"uuid":"3840602393","node_id":"PR_kwDODqcwas6-k2e3","number":2507,"state":"open","title":"build(deps): bump bokeh from 3.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-22T00:18:57.000Z","updated_at":"2026-01-22T22:03:54.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"bokeh","old_version":"3.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gee-community/geemap/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/gee-community/geemap/pull/2507","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gee-community%2Fgeemap/issues/2507","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2507/packages"}},{"old_version":"3.7.3","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-17T13:35:43.000Z","version_change":"3.7.3 → 3.8.2","issue":{"uuid":"3825201975","node_id":"PR_kwDOOiIGqc69yJtt","number":8,"state":"open","title":"Bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python:uv"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-17T13:35:43.000Z","updated_at":"2026-01-17T13:35:52.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=uv\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sg26565/dask/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/sg26565/dask/pull/8","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sg26565%2Fdask/issues/8","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/8/packages"}},{"old_version":"3.6.0","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-13T12:55:08.000Z","version_change":"3.6.0 → 3.8.2","issue":{"uuid":"3808735504","node_id":"PR_kwDOLufxkc687Kp8","number":131,"state":"open","title":"deps: bump the bokeh-updates group with 3 updates","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-13T12:55:08.000Z","updated_at":"2026-01-17T18:01:44.483Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"bokeh-updates","update_count":3,"packages":[{"name":"bokeh","old_version":"3.6.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"},{"name":"narwhals","old_version":"2.13.0","new_version":"2.15.0","repository_url":"https://github.com/narwhals-dev/narwhals"},{"name":"xyzservices","old_version":"2024.9.0","new_version":"2025.11.0","repository_url":"https://github.com/geopandas/xyzservices"}],"path":null,"ecosystem":"pip"},"body":"Bumps the bokeh-updates group with 3 updates: [bokeh](https://github.com/bokeh/bokeh), [narwhals](https://github.com/narwhals-dev/narwhals) and [xyzservices](https://github.com/geopandas/xyzservices).\n\nUpdates `bokeh` from 3.6.0 to 3.8.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.6.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `narwhals` from 2.13.0 to 2.15.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/narwhals-dev/narwhals/releases\"\u003enarwhals's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eNarwhals v2.15.0\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: unxfail sqlframe tests for list functions (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3383\"\u003e#3383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: Test fairlearn using pytest marker (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3234\"\u003e#3234\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e✨ Enhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: unxfail sqlframe for \u003ccode\u003elist.median\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3387\"\u003e#3387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: Add \u003ccode\u003e{Expr,Series}.sin\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3365\"\u003e#3365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: add \u003ccode\u003elist.sort\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3356\"\u003e#3356\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: Various GPU fixes (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3390\"\u003e#3390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etest: separate numpy array for tests (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3385\"\u003e#3385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix(docs): Keep table filter only in api-completeness page (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3367\"\u003e#3367\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eci: Fix \u003ccode\u003ehierarchicalforecast\u003c/code\u003e installation (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3362\"\u003e#3362\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(docs): Keep table filter only in api-completeness page (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3367\"\u003e#3367\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🛠️ Other improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: Refactor pandas-like pyarrow branching (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3361\"\u003e#3361\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eThank you to all our contributors for making this release possible!\n\u003ca href=\"https://github.com/FBruzzesi\"\u003e\u003ccode\u003e@​FBruzzesi\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/MarcoGorelli\"\u003e\u003ccode\u003e@​MarcoGorelli\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/liamholmes31\"\u003e\u003ccode\u003e@​liamholmes31\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://github.com/raisadz\"\u003e\u003ccode\u003e@​raisadz\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eNarwhals v2.14.0\u003c/h2\u003e\n\u003ch2\u003eChanges\u003c/h2\u003e\n\u003ch2\u003e✨ Enhancements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add list aggregate methods (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3332\"\u003e#3332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: Add \u003ccode\u003e{Expr,Series}.any_value\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3315\"\u003e#3315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenh: Add support for \u003ccode\u003eslice(None)\u003c/code\u003e in series getitem (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3342\"\u003e#3342\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐞 Bug fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix median tests for list.agg methods (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3354\"\u003e#3354\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: \u003ccode\u003eArrowSeries.fill_null(strategy=..., limit=...)\u003c/code\u003e and \u003ccode\u003eNone\u003c/code\u003e at the \u0026quot;edge\u0026quot;  (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3335\"\u003e#3335\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📖 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: API Completeness overhaul (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3285\"\u003e#3285\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edocs: updated contributing with test_plugin install (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3345\"\u003e#3345\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🛠️ Other improvements\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/98f05d078f09f89e96f7f87af9ad3baf01f13df0\"\u003e\u003ccode\u003e98f05d0\u003c/code\u003e\u003c/a\u003e release: Bump version to 2.15.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/5ed4d81bf244dce18fa700f20fbf1536e0ca5cee\"\u003e\u003ccode\u003e5ed4d81\u003c/code\u003e\u003c/a\u003e test: Various GPU fixes (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3390\"\u003e#3390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0a0954790e4cfc703b2b7d0afc6b35e996ed2a28\"\u003e\u003ccode\u003e0a09547\u003c/code\u003e\u003c/a\u003e test: unxfail sqlframe for \u003ccode\u003elist.median\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3387\"\u003e#3387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/74d6cf01a0bb1ced35af65b332c6cbc507797343\"\u003e\u003ccode\u003e74d6cf0\u003c/code\u003e\u003c/a\u003e test: separate numpy array for tests (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3385\"\u003e#3385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/42a8d7d8123f98e0f8a2e4f2e1fe7812df456689\"\u003e\u003ccode\u003e42a8d7d\u003c/code\u003e\u003c/a\u003e feat: Add \u003ccode\u003e{Expr,Series}.sin\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3365\"\u003e#3365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/84ad2282b6e4ad7680397b7bf8e3c026cc20f301\"\u003e\u003ccode\u003e84ad228\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/download-artifact from 6 to 7 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3379\"\u003e#3379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0640ba1be40ec83af09e9524672aefef1cc7c822\"\u003e\u003ccode\u003e0640ba1\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/upload-artifact from 5 to 6 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3380\"\u003e#3380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/f2c96a6b6e91454e29d7035455d79b1b2925f8ec\"\u003e\u003ccode\u003ef2c96a6\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump actions/cache from 4 to 5 (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3382\"\u003e#3382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/0fad4c5a6f71bc9fded5a690ff369689de90f3d4\"\u003e\u003ccode\u003e0fad4c5\u003c/code\u003e\u003c/a\u003e skip changelog(deps): bump sigstore/gh-action-sigstore-python from 3.1.0 to 3...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/narwhals-dev/narwhals/commit/ae6e7b4059844cd731e790eb98f4c312634f8a64\"\u003e\u003ccode\u003eae6e7b4\u003c/code\u003e\u003c/a\u003e test: unxfail sqlframe tests for list functions (\u003ca href=\"https://redirect.github.com/narwhals-dev/narwhals/issues/3383\"\u003e#3383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/narwhals-dev/narwhals/compare/v2.13.0...v2.15.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `xyzservices` from 2024.9.0 to 2025.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/geopandas/xyzservices/releases\"\u003exyzservices's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2025.11.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded new Stamen Toner variants in Stadia Maps\u003c/li\u003e\n\u003cli\u003eFixed api key passthrough for HERE\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.10.0...2025.11.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.10.0...2025.11.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.10.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove deprecated HERE API v2 and rename HEREv3 to HERE updated to API v3\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.4.0...2025.10.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.4.0...2025.10.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add UN clear map by \u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/186\"\u003egeopandas/xyzservices#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/186\"\u003egeopandas/xyzservices#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2025.1.0...2025.4.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2025.1.0...2025.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e2025.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove OpenStreetMap.BlackAndWhite and properly mark broken as broken by \u003ca href=\"https://github.com/martinfleis\"\u003e\u003ccode\u003e@​martinfleis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/pull/183\"\u003egeopandas/xyzservices#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2024.9.0...2025.1.0\"\u003ehttps://github.com/geopandas/xyzservices/compare/2024.9.0...2025.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/geopandas/xyzservices/blob/main/CHANGELOG.md\"\u003exyzservices's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003exyzservices 2025.10.0 (October 30, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove deprecated HERE API v2 and rename HEREv3 to HERE updated to API v3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003exyzservices 2025.4.0 (April 25, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eadd UN clear map by \u003ca href=\"https://github.com/fede-bello\"\u003e\u003ccode\u003e@​fede-bello\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/186\"\u003e#186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003exyzservices 2025.1.0 (January 18, 2025)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove OpenStreetMap.BlackAndWhite and properly mark broken as broken by \u003ca href=\"https://github.com/martinfleis\"\u003e\u003ccode\u003e@​martinfleis\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/183\"\u003e#183\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/2a55c0ba7696ccefbb71bd9c78e9bc40c6a3df21\"\u003e\u003ccode\u003e2a55c0b\u003c/code\u003e\u003c/a\u003e GHA: fix email\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/09607ac435526acc5e4169e08621dd46ec5341a9\"\u003e\u003ccode\u003e09607ac\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/43cee42b3b416628132a9c01e7736815cc425474\"\u003e\u003ccode\u003e43cee42\u003c/code\u003e\u003c/a\u003e GHA: switch to bot committing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/1daf2e1edb00ef1c75e3f0f02b700e03761498c4\"\u003e\u003ccode\u003e1daf2e1\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/711f8ac0addb4e31cd49a2206feb69b46cb5c7b9\"\u003e\u003ccode\u003e711f8ac\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/3063a11dea207c39d8aaf2b504014591c3557491\"\u003e\u003ccode\u003e3063a11\u003c/code\u003e\u003c/a\u003e Update CHANGELOG.md with version history\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/a7367a21ae684d4d4e6fd421036300ec99f4073c\"\u003e\u003ccode\u003ea7367a2\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/d7eea7e8abd967a5acbb88b9c447b97b73da2a84\"\u003e\u003ccode\u003ed7eea7e\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/74c76539abe4e36fef5c3599c1c7c286d49eb244\"\u003e\u003ccode\u003e74c7653\u003c/code\u003e\u003c/a\u003e [pre-commit.ci] pre-commit autoupdate (\u003ca href=\"https://redirect.github.com/geopandas/xyzservices/issues/191\"\u003e#191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/geopandas/xyzservices/commit/254bf8621ebb242e7b94e1227c4776e903ec5e17\"\u003e\u003ccode\u003e254bf86\u003c/code\u003e\u003c/a\u003e Update leaflet providers/compress JSON [automated]\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/geopandas/xyzservices/compare/2024.9.0...2025.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/OpenMS/pyopenms_viz/pull/131","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/OpenMS%2Fpyopenms_viz/issues/131","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/131/packages"}},{"old_version":"3.7.2","new_version":"3.8.2","update_type":"minor","path":"/layers/layer4_python3_scientific/0500_extra_packages","pr_created_at":"2026-01-09T09:19:37.000Z","version_change":"3.7.2 → 3.8.2","issue":{"uuid":"3796146666","node_id":"PR_kwDOCpZOw868Shsl","number":1120,"state":"open","title":"build(deps): bump bokeh from 3.7.2 to 3.8.2 in /layers/layer4_python3_scientific/0500_extra_packages","user":"dependabot[bot]","labels":["Status: Revision Needed","dependencies","python"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-09T09:19:37.000Z","updated_at":"2026-01-10T04:01:09.085Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"bokeh","old_version":"3.7.2","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/layers/layer4_python3_scientific/0500_extra_packages","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.2 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.2...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.2\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/metwork-framework/mfextaddon_scientific/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/metwork-framework/mfextaddon_scientific/pull/1120","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/metwork-framework%2Fmfextaddon_scientific/issues/1120","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1120/packages"}},{"old_version":"2.4.3","new_version":"3.8.2","update_type":"major","path":null,"pr_created_at":"2026-01-08T21:19:22.000Z","version_change":"2.4.3 → 3.8.2","issue":{"uuid":"3794488856","node_id":"PR_kwDOMsXxzs68NGRH","number":20,"state":"closed","title":"chore(deps): bump bokeh from 2.4.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-07T16:56:12.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-08T21:19:22.000Z","updated_at":"2026-02-07T16:56:13.000Z","time_to_close":2576210,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bokeh","old_version":"2.4.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 2.4.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/2.4.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=2.4.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/DrDavidL/autoanalyzer-ai/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/DrDavidL/autoanalyzer-ai/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/DrDavidL%2Fautoanalyzer-ai/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"}},{"old_version":"3.7.3","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-06T18:07:38.000Z","version_change":"3.7.3 → 3.8.2","issue":{"uuid":"3786039633","node_id":"PR_kwDOH22tks67xL4u","number":520,"state":"open","title":"chore(deps): bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":[],"assignees":["RichieHakim"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:07:38.000Z","updated_at":"2026-01-06T18:07:39.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/RichieHakim/ROICaT/pull/520","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/RichieHakim%2FROICaT/issues/520","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/520/packages"}},{"old_version":"3.8.1","new_version":"3.8.2","update_type":"patch","path":null,"pr_created_at":"2026-01-06T18:06:40.000Z","version_change":"3.8.1 → 3.8.2","issue":{"uuid":"3786036776","node_id":"PR_kwDOOb9qEs67xLRR","number":116,"state":"open","title":"deps(deps): bump bokeh from 3.8.1 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:40.000Z","updated_at":"2026-01-10T02:01:29.193Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Zachanardo/Intellicrack/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/Zachanardo/Intellicrack/pull/116","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zachanardo%2FIntellicrack/issues/116","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/116/packages"}},{"old_version":"3.1.1","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-06T18:06:27.000Z","version_change":"3.1.1 → 3.8.2","issue":{"uuid":"3786035892","node_id":"PR_kwDOFFcPYc67xLEo","number":350,"state":"closed","title":"Bump bokeh from 3.1.1 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-02-26T09:48:07.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:27.000Z","updated_at":"2026-02-26T09:48:17.000Z","time_to_close":4376500,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.1.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.1.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.1.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.1.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/oda-hub/oda_api/network/alerts).\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/oda-hub/oda_api/pull/350","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/oda-hub%2Foda_api/issues/350","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/350/packages"}},{"old_version":"3.8.0","new_version":"3.8.2","update_type":"patch","path":null,"pr_created_at":"2026-01-06T18:06:23.000Z","version_change":"3.8.0 → 3.8.2","issue":{"uuid":"3786035684","node_id":"PR_kwDOAPMsys67xLB3","number":335,"state":"open","title":"Bump bokeh from 3.8.0 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:23.000Z","updated_at":"2026-01-06T18:09:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.0","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.0 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.0...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.0\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/cerfacs-globc/icclim/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/cerfacs-globc/icclim/pull/335","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/cerfacs-globc%2Ficclim/issues/335","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/335/packages"}},{"old_version":"3.8.1","new_version":"3.8.2","update_type":"patch","path":"/e2e_playwright","pr_created_at":"2026-01-06T18:06:23.000Z","version_change":"3.8.1 → 3.8.2","issue":{"uuid":"3786035660","node_id":"PR_kwDONN2uHc67xLBh","number":48,"state":"closed","title":"Bump bokeh from 3.8.1 to 3.8.2 in /e2e_playwright","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-01-06T18:38:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:23.000Z","updated_at":"2026-01-06T18:38:02.000Z","time_to_close":1897,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/e2e_playwright","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/streamlit/streamlit-bokeh/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/streamlit/streamlit-bokeh/pull/48","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamlit%2Fstreamlit-bokeh/issues/48","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/48/packages"}},{"old_version":"3.7.3","new_version":"3.8.2","update_type":"minor","path":"/dockerfiles/gpu","pr_created_at":"2026-01-06T18:06:17.000Z","version_change":"3.7.3 → 3.8.2","issue":{"uuid":"3786035404","node_id":"PR_kwDOPVPEqc67xK-B","number":38,"state":"open","title":"Bump bokeh from 3.7.3 to 3.8.2 in /dockerfiles/gpu","user":"dependabot[bot]","labels":["Review effort 1/5","PR title format","dependencies","python"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:17.000Z","updated_at":"2026-01-06T18:06:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/dockerfiles/gpu","ecosystem":"pip"},"body":"### **User description**\nBumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/proteantecs/mlrun/network/alerts).\n\n\u003c/details\u003e\n\n\n___\n\n### **PR Type**\nEnhancement, Other\n\n\n___\n\n### **Description**\n- Upgrade bokeh to 3.8.2 in GPU image\n\n- Update pinned hashes for integrity\n\n- Maintain Python \u003e=3.11 constraint\n\n\n___\n\n### Diagram Walkthrough\n\n\n```mermaid\nflowchart LR\n  lockfile[\"dockerfiles/gpu/locked-requirements.txt\"]\n  bokeh373[\"bokeh==3.7.3 + old hashes\"]\n  bokeh382[\"bokeh==3.8.2 + new hashes\"]\n  lockfile -- \"upgrade pinned version\" --\u003e bokeh382\n  bokeh373 -- \"replace\" --\u003e bokeh382\n```\n\n\n\n\u003cdetails\u003e \u003csummary\u003e\u003ch3\u003e File Walkthrough\u003c/h3\u003e\u003c/summary\u003e\n\n\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003e\u003c/th\u003e\u003cth align=\"left\"\u003eRelevant files\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eDependencies\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003ctable\u003e\n\u003ctr\u003e\n  \u003ctd\u003e\n    \u003cdetails\u003e\n      \u003csummary\u003e\u003cstrong\u003elocked-requirements.txt\u003c/strong\u003e\u003cdd\u003e\u003ccode\u003eUpdate bokeh pin and hashes in GPU lockfile\u003c/code\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/dd\u003e\u003c/summary\u003e\n\u003chr\u003e\n\ndockerfiles/gpu/locked-requirements.txt\n\n\u003cul\u003e\u003cli\u003eBump \u003ccode\u003ebokeh\u003c/code\u003e from \u003ccode\u003e3.7.3\u003c/code\u003e to \u003ccode\u003e3.8.2\u003c/code\u003e.\u003cbr\u003e \u003cli\u003e Replace SHA256 hashes to match 3.8.2 wheels/sdist.\u003cbr\u003e \u003cli\u003e Keep Python full version constraint (\u003e= 3.11).\u003cbr\u003e \u003cli\u003e Preserve surrounding dependency pins unchanged.\u003c/ul\u003e\n\n\n\u003c/details\u003e\n\n\n  \u003c/td\u003e\n  \u003ctd\u003e\u003ca href=\"https://github.com/proteantecs/mlrun/pull/38/files#diff-d1072636fb02e0eab486fbdfbff442293f0007edfa2fc22b36e2bed055365dba\"\u003e+3/-3\u003c/a\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp; \u003c/td\u003e\n\n\u003c/tr\u003e\n\u003c/table\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\n\n\u003c/details\u003e\n\n___\n\n","html_url":"https://github.com/proteantecs/mlrun/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/proteantecs%2Fmlrun/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"}},{"old_version":"3.8.1","new_version":"3.8.2","update_type":"patch","path":"/jupyterlab","pr_created_at":"2026-01-06T18:06:16.000Z","version_change":"3.8.1 → 3.8.2","issue":{"uuid":"3786035367","node_id":"PR_kwDOCY615s67xK9h","number":768,"state":"open","title":"⬆️ Bump bokeh from 3.8.1 to 3.8.2 in /jupyterlab","user":"dependabot[bot]","labels":["dependencies","stale"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:16.000Z","updated_at":"2026-02-06T08:36:50.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"⬆️ Bump","packages":[{"name":"bokeh","old_version":"3.8.1","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":"/jupyterlab","ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.8.1 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.8.1...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.8.1\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/hassio-addons/addon-jupyterlab/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/hassio-addons/addon-jupyterlab/pull/768","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hassio-addons%2Faddon-jupyterlab/issues/768","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/768/packages"}},{"old_version":"3.7.3","new_version":"3.8.2","update_type":"minor","path":null,"pr_created_at":"2026-01-06T18:06:16.000Z","version_change":"3.7.3 → 3.8.2","issue":{"uuid":"3786035354","node_id":"PR_kwDONMAkyM67xK9W","number":38,"state":"closed","title":"Bump bokeh from 3.7.3 to 3.8.2","user":"dependabot[bot]","labels":["dependencies","python"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-01-08T20:26:01.000Z","author_association":null,"state_reason":null,"created_at":"2026-01-06T18:06:16.000Z","updated_at":"2026-01-08T20:26:03.000Z","time_to_close":181185,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bokeh","old_version":"3.7.3","new_version":"3.8.2","repository_url":"https://github.com/bokeh/bokeh"}],"path":null,"ecosystem":"pip"},"body":"Bumps [bokeh](https://github.com/bokeh/bokeh) from 3.7.3 to 3.8.2.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG\"\u003ebokeh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2026-01-06    3.8.2:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14768\"\u003e#14768\u003c/a\u003e [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14767\"\u003e#14767\u003c/a\u003e Backports for 3.8.2\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-11-07    3.8.1:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003ebugfixes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14618\"\u003e#14618\u003c/a\u003e [component: docs] Local documentation build fails with \u003ccode\u003eExtension error (sphinxext.opengraph)\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14626\"\u003e#14626\u003c/a\u003e [component: docs] Local documentation fails on Windows because of missing svg icons\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14651\"\u003e#14651\u003c/a\u003e [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003etasks:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14704\"\u003e#14704\u003c/a\u003e Backports for 3.8.1\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2025-08-29      3.8:\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebugfixes:\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12430\"\u003e#12430\u003c/a\u003e [component: bokehjs] [BUG] Step glyphs do not support linked brushing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/12994\"\u003e#12994\u003c/a\u003e [component: bokehjs] [BUG] Patch does not output under certain conditions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/13616\"\u003e#13616\u003c/a\u003e [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14334\"\u003e#14334\u003c/a\u003e js_on_change not firing when range is updated in range tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14352\"\u003e#14352\u003c/a\u003e [component: bokehjs] Log Axis and Range1d \u0026lt; 1 failing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14383\"\u003e#14383\u003c/a\u003e [component: bokehjs] \u003ccode\u003eSerializationError: circular reference\u003c/code\u003e When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14396\"\u003e#14396\u003c/a\u003e [component: examples] Remove context from time of day in span example\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14399\"\u003e#14399\u003c/a\u003e Bad typings for \u003ccode\u003elist_attr_splat\u003c/code\u003e (e.g. \u003ccode\u003ePlot.axis\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14413\"\u003e#14413\u003c/a\u003e [component: bokehjs] \u003ccode\u003eValueRef\u003c/code\u003e \u003ccode\u003eformatter\u003c/code\u003e does not handle datetime nullable well\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14420\"\u003e#14420\u003c/a\u003e [component: bokehjs] Enhance performance of WebGL multi_marker\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14422\"\u003e#14422\u003c/a\u003e [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14424\"\u003e#14424\u003c/a\u003e [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14458\"\u003e#14458\u003c/a\u003e [component: bokehjs] Removing and re-adding DOM nodes causes React problems\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14461\"\u003e#14461\u003c/a\u003e [component: tests] The regression test for issue \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14207\"\u003e#14207\u003c/a\u003e is unreliable\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14468\"\u003e#14468\u003c/a\u003e [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14469\"\u003e#14469\u003c/a\u003e [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14476\"\u003e#14476\u003c/a\u003e Improve handling of pd.NA in Property.matches\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14497\"\u003e#14497\u003c/a\u003e mypy 1.15.0 fails in CI but not locally\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14499\"\u003e#14499\u003c/a\u003e [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14520\"\u003e#14520\u003c/a\u003e [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14536\"\u003e#14536\u003c/a\u003e Flex layouts need to apply \u003ccode\u003emin_width\u003c/code\u003e and \u003ccode\u003emin_height\u003c/code\u003e selectively\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14540\"\u003e#14540\u003c/a\u003e [component: tests] Tests are failing on Windows and Python 3.10 after PR \u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14531\"\u003e#14531\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14541\"\u003e#14541\u003c/a\u003e New SVG icons have inconsistent line widths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14554\"\u003e#14554\u003c/a\u003e Add support for scalar uint32 color input.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14565\"\u003e#14565\u003c/a\u003e [component: bokehjs] DataTable source update broken\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14574\"\u003e#14574\u003c/a\u003e [component: build] grammar build script failing with whitespace in path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14597\"\u003e#14597\u003c/a\u003e [component: bokehjs] \u003ccode\u003edocument_ready\u003c/code\u003e even trigger twice with Bokeh 3.4.0.dev4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14602\"\u003e#14602\u003c/a\u003e [component: bokehjs] Layoutable components in side panels don't appear in exported images\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14620\"\u003e#14620\u003c/a\u003e Re-connect race condition on page reload\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/e5ce879c388a990e2977d126be14db5f642cf540\"\u003e\u003ccode\u003ee5ce879\u003c/code\u003e\u003c/a\u003e Deployment updates for release 3.8.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2b3ee1081a7622d49daefea3214f1c6b07ad602c\"\u003e\u003ccode\u003e2b3ee10\u003c/code\u003e\u003c/a\u003e Don't validate npm credentials due to OICD limitations in npm (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14769\"\u003e#14769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/756e3aef85e95330c49f997d6936bf0bd522393e\"\u003e\u003ccode\u003e756e3ae\u003c/code\u003e\u003c/a\u003e Migrate from NPM tokens to trusted providers for publishing in CI (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14766\"\u003e#14766\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/2f225a1dbbc8ae74425b4e5acedf56aedc3f9d1d\"\u003e\u003ccode\u003e2f225a1\u003c/code\u003e\u003c/a\u003e Update dependencies in build environment (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14758\"\u003e#14758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/69d197c318da7dd1a67d7f2a101f21fcdd0065f0\"\u003e\u003ccode\u003e69d197c\u003c/code\u003e\u003c/a\u003e update switcher.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d915c8b9f42c67a90ac52f4a8d21be5e14e1e0af\"\u003e\u003ccode\u003ed915c8b\u003c/code\u003e\u003c/a\u003e update to latest ruff (\u003ca href=\"https://redirect.github.com/bokeh/bokeh/issues/14661\"\u003e#14661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/5f9f7b66bdd09cfac086da212d134a7654dfdab2\"\u003e\u003ccode\u003e5f9f7b6\u003c/code\u003e\u003c/a\u003e update release notes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e\"\u003e\u003ccode\u003ecedd113\u003c/code\u003e\u003c/a\u003e handle wildcard host with port correctly\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/a961ab7aad2a7d5d0350e861368e3d4294732caa\"\u003e\u003ccode\u003ea961ab7\u003c/code\u003e\u003c/a\u003e small CI fixes for advisory fork merge\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bokeh/bokeh/commit/d62939a6f9515d86010cf564ef6e256b62636725\"\u003e\u003ccode\u003ed62939a\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/bokeh/bokeh/compare/3.7.3...3.8.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bokeh\u0026package-manager=pip\u0026previous-version=3.7.3\u0026new-version=3.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ouslan/research-pr-salaries/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/ouslan/research-pr-salaries/pull/38","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ouslan%2Fresearch-pr-salaries/issues/38","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/38/packages"}}]}