build(deps): bump the production group across 1 directory with 6 updates

[dependabot]

Bumps the production group with 6 updates in the / directory:

Package	From	To
matplotlib	3.10.3	3.10.8
numpy	2.2.6	2.4.2
polars	1.29.0	1.37.1
scikit-learn	1.6.1	1.8.0
statsmodels	0.14.4	0.14.6
xxhash	3.5.0	3.6.0

Updates matplotlib from 3.10.3 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

REL: v3.10.7

This is the latest bugfix release in the 3.10.x series.

The most important update in this release is that the minimum version of pyparsing has been updated to version 3.0.

REL: v3.10.6

This is a bugfix release in the 3.10.x series.

Highlights from this release include:

- Fix regression of hi-dpi support for Qt
- Fix race condition in TexManager.make_dvi & make_png
- Various documentation and other bugfixes

REL: v3.10.5

This is the fourth bugfix release of the 3.10.x series.

Included in this release is distributed wheels for Python 3.14 (including freethreaded) and Windows ARM.

There are also several smaller bugfixes.

Commits

• 1392cbe REL: v3.10.8
• 0b9ebb3 Doc release prep v3.10.8
• bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
• 86b38d3 Github stats v3.10.8
• 9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
• d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
• 799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
• 134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
• 5b8e219 TST: Run macosx backends in a subprocess
• 878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
• Additional commits viewable in compare view

Updates numpy from 2.2.6 to 2.4.2

Release notes

Sourced from numpy's releases.

2.4.1 (Jan 10, 2026)

NumPy 2.4.1 Release Notes

The NumPy 2.4.1 is a patch release that fixes bugs discoved after the 2.4.0 release. In particular, the typo SeedlessSequence is preserved to enable wheels using the random Cython API and built against NumPy < 2.4.0 to run without errors.

This release supports Python versions 3.11-3.14

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Alexander Shadchin
• Bill Tompkins +
• Charles Harris
• Joren Hammudoglu
• Marten van Kerkwijk
• Nathan Goldbaum
• Raghuveer Devulapalli
• Ralf Gommers
• Sebastian Berg

Pull requests merged

A total of 15 pull requests were merged for this release.

• #30490: MAINT: Prepare 2.4.x for further development
• #30503: DOC: numpy.select: fix default parameter docstring...
• #30504: REV: Revert part of #30164 (#30500)
• #30506: TYP: numpy.select: allow passing array-like default...
• #30507: MNT: use if constexpr for compile-time branch selection
• #30513: BUG: Fix leak in flat assignment iterator
• #30516: BUG: fix heap overflow in fixed-width string multiply (#30511)
• #30523: BUG: Ensure summed weights returned by np.average always are...
• #30527: TYP: Fix return type of histogram2d
• #30594: MAINT: avoid passing ints to random functions that take double...
• #30595: BLD: Avoiding conflict with pygit2 for static build
• #30596: MAINT: Fix msvccompiler missing error on FreeBSD
• #30608: BLD: update vendored Meson to 1.9.2
• #30620: ENH: use more fine-grained critical sections in array coercion...
• #30623: BUG: Undo result type change of quantile/percentile but keep...

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.
• You can use the keyring app to store the PyPI password for twine. See the online twine documentation for details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• c81c49f Merge pull request #30757 from charris/prepare-2.4.2
• b3ae9c5 REL: Prepare for the NumPy 2.4.2 release
• 9de8984 Merge pull request #30737 from mattip/scipy-openblas-backport
• b7be329 backport scipy-openblas version change
• 7ff9863 Merge pull request #30736 from charris/backport-30667
• 431fffb MAINT: Skip tests that require buffer.
• 127235f BUG: fix thread safety of array_getbuffer (#30667)
• 18bdb2e Merge pull request #30713 from charris/backport-30710
• 41dd751 Merge pull request #30712 from charris/backport-30705
• 7a278da BUG: Fixup the quantile promotion fixup
• Additional commits viewable in compare view

Updates polars from 1.29.0 to 1.37.1

Release notes

Sourced from polars's releases.

Python Polars 1.37.1

🚀 Performance improvements

• Speed up SQL interface "UNION" clauses (#26039)

🐞 Bug fixes

• Optimize slicing support on compressed IPC (#26071)
• CPU check for musl builds (#26076)
• Propagate C Stream import errors instead of panicking (#26036)
• Fix slicing on compressed IPC (#26066)

📖 Documentation

• Clarify min_by/max_by behavior on ties (#26077)

🛠️ Other improvements

• Mark top slow normal tests as slow (#26080)
• Update breaking deps (#26055)
• Fix for upstream url bug and update deps (#26052)
• Properly pin chrono (#26051)
• Don't run rust doctests (#26046)
• Update deps (#26042)
• Ignore very slow test (#26041)

Thank you to all our contributors for making this release possible! @​Voultapher, @​alexander-beedie, @​kdn36, @​nameexhaustion, @​orlp, @​ritchie46 and @​wtn

Python Polars 1.37.0

🚀 Performance improvements

• Speed up SQL interface "ORDER BY" clauses (#26037)
• Add fast kernel for is_nan and use it for numpy NaN->null conversion (#26034)
• Optimize ArrayFromIter implementations for ObjectArray (#25712)
• New streaming NDJSON sink pipeline (#25948)
• New streaming CSV sink pipeline (#25900)
• Dispatch partitioned usage of sink_* functions to new-streaming by default (#25910)
• Replace ryu with faster zmij (#25885)
• Reduce memory usage for .item() count in grouped first/last (#25787)
• Skip schema inference if schema provided for scan_csv/ndjson (#25757)
• Add width-aware chunking to prevent degradation with wide data (#25764)
• Use new sink pipeline for write/sink_ipc (#25746)
• Reduce memory usage when scanning multiple parquet files in streaming (#25747)
• Don't call cluster_with_columns optimization if not needed (#25724)

✨ Enhancements

• Add new pl.PartitionBy API (#26004)
• ArrowStreamExportable and sink_delta (#25994)

... (truncated)

Commits

• bb79993 Python Polars 1.37.1 (#26078)
• 26a9d09 chore: Mark top slow normal tests as slow (#26080)
• 451f247 refactor(rust): Simplify PlPath (#26053)
• b532aad docs: Clarify min_by/max_by behavior on ties (#26077)
• 7077967 fix: Optimize slicing support on compressed IPC (#26071)
• 44c1397 fix: CPU check for musl builds (#26076)
• 35ec398 chore: Update breaking deps (#26055)
• 84fa663 fix(python): Propagate C Stream import errors instead of panicking (#26036)
• e9e20e4 fix: Fix slicing on compressed IPC (#26066)
• b0fdbd3 chore: Fix for upstream url bug and update deps (#26052)
• Additional commits viewable in compare view

Updates scikit-learn from 1.6.1 to 1.8.0

Release notes

Sourced from scikit-learn's releases.

Release 1.8.0

We're happy to announce the 1.8.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_8_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.8.html

This version supports Python versions 3.11 to 3.14 and features support of free-threaded CPython.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Scikit-learn 1.7.2

We're happy to announce the 1.7.2 release.

This release contains a few bug fixes and is the first version supporting Python 3.14.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.7.html#version-1-7-2

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Scikit-learn 1.7.1

We're happy to announce the 1.7.1 release.

This release contains fixes for a few regressions introduced in 1.7.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.7.html#version-1-7-1

You can upgrade with pip as usual:

</tr></table> 

... (truncated)

Commits

• 646da0f [cd build]
• 4f4f283 Generate changelog
• 967dcde Set version
• cb1424b DOC Release highlights for 1.8 (#32809)
• 5645b27 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#32859)
• 6b9fb11 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
• a0f6d88 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
• c1de8fc FIX Make get_namespace handle pandas dataframe input (#32838)
• 764249a Fix _safe_indexing with non integer arrays on array API inputs (#32840)
• eca5e0a FIX Add new default max_samples=None in Bagging estimators (#32825)
• Additional commits viewable in compare view

Updates statsmodels from 0.14.4 to 0.14.6

Release notes

Sourced from statsmodels's releases.

Release 0.14.6

This patch release fixes an issue with pandas 3.0.0 that prevented statsmodels from importing. It also addresses some minor changes that improve future compatibility in NumPy.

Release 0.14.5

This patch release fixes an issue with recent SciPy releases (1.16+) that prevented statsmodels from importing. It also addresses some small changes that improve future compatibility.

Commits

• 40e6a84 Merge pull request #9701 from bashtage/doc-0.14.6-changes
• 120ad27 DOC: Release note for 0.14.6
• e8b0ab0 Merge pull request #9700 from bashtage/final-0.14.6-changes
• 8ad398a MAINT: Improve compatability wiht recent NumPy
• 9495808 Merge pull request #9633 from bashtage/changes-0-14-6
• b44854a STY: Fix linting fails
• e7b2fa5 MAINT: Update for recent changes
• 1107ea5 Merge pull request #9591 from bashtage/rls-0-14-5-notes
• f3b362a MAINT: Update CI
• e2249ab DOC: Final fixes
• Additional commits viewable in compare view

Updates xxhash from 3.5.0 to 3.6.0

Release notes

Sourced from xxhash's releases.

v3.6.0

• Build wheels for Python 3.14
• Python free-threading support
• Typing: Use Buffer type stubs
• Deprecate xxhash.VERSION_TUPLE, it will be removed in the next major release

---

Full list of changes: ifduyue/python-xxhash@v3.5.0...v3.6.0

Changelog

Sourced from xxhash's changelog.

v3.6.0 2025-10-02

- Build wheels for Python 3.14
- Python free-threading support
- Typing: Use Buffer type stubs
- Deprecate xxhash.VERSION_TUPLE, it will be removed in the next major release

Commits

• 4fad0dd Prepare 3.6.0
• fdfcd18 Mark VERSION_TUPLE deprecated
• 7ff1c53 Already enable python free-threading in github action yaml
• 601c103 Add trove Programming Language :: Python :: Free Threading :: 1 - Unstable
• 3bfe968 ci: cibuildwheel enable cpython-freethreading
• 87e78a7 Add trove Programming Language :: Python :: 3.14
• 341b44b Bump actions/checkout from 4 to 5
• c918900 Bump actions/download-artifact from 4 to 5
• 4655adb Bump actions/setup-python from 5 to 6
• d200a9d Bump pypa/gh-action-pypi-publish in /.github/workflows
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions