Skip to content

build(deps): bump the pip-dependencies group in /docker with 3 updates - #3224

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/pip-dependencies-8519fab8a9
Open

build(deps): bump the pip-dependencies group in /docker with 3 updates#3224
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/docker/pip-dependencies-8519fab8a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-dependencies group in /docker with 3 updates: geopandas, pandas and pydeck.

Updates geopandas from 1.1.3 to 1.1.4

Release notes

Sourced from geopandas's releases.

Version 1.1.4

What's Changed

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).

Full Changelog: geopandas/geopandas@v1.1.3...v1.1.4

Changelog

Sourced from geopandas's changelog.

Version 1.1.4 (June 26, 2026)

Bug fixes:

  • Further hardening of to_postgis against SQL injection (#3800).
  • Ensure that points generated by sample_points are not sorted along x-axis (#3773).
  • Fix GeoDataFrame.explore() ignoring custom legend_kwds={"labels": ...} for categorical and boolean columns (#3496).
  • More graceful handling of keep_geom_type in the overlay() function with empty input (#3745).
Commits
  • 91ec4af RLS: v1.1.4
  • b5d685f DOC: add changelog for 1.1.4
  • 158d993 BUG: further to_postgis hardening (#3800)
  • ce95930 BUG: honor legend_kwds["labels"] for categorical and boolean columns in explo...
  • 22bf845 BUG: overlay with empty input handles keep geom dtype gracefully (#3745)
  • 866a7f0 BUG: ensure that points from random sampling are not sorted (#3773)
  • 76b16ca DOC: update Code of Conduct reporting form link (#3794)
  • 3a04a5c switch to NumFOCUS Code of Conduct (#3671)
  • 6fedb19 BLD: setuptools 77+ required for PEP 639 support (#3746)
  • See full diff in compare view

Updates pandas from 2.3.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.3

We are pleased to announce the release of pandas 3.0.3. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

... (truncated)

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates pydeck from 0.9.2 to 0.9.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-dependencies group in /docker with 3 updates: [geopandas](https://github.com/geopandas/geopandas), [pandas](https://github.com/pandas-dev/pandas) and [pydeck](https://github.com/visgl/deck.gl).


Updates `geopandas` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/geopandas/geopandas/releases)
- [Changelog](https://github.com/geopandas/geopandas/blob/v1.1.4/CHANGELOG.md)
- [Commits](geopandas/geopandas@v1.1.3...v1.1.4)

Updates `pandas` from 2.3.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.5)

Updates `pydeck` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/visgl/deck.gl/releases)
- [Changelog](https://github.com/visgl/deck.gl/blob/master/CHANGELOG.md)
- [Commits](https://github.com/visgl/deck.gl/commits)

---
updated-dependencies:
- dependency-name: geopandas
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-dependencies
- dependency-name: pydeck
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from jiayuasu as a code owner August 1, 2026 00:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants