deps(python): bump the python-minor group across 1 directory with 12 updates (#8501)

Bumps the python-minor group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.1` |
`1.27.2` |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.3.1` | `3.4.2` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.8.0`
| `1.9.0` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) |
`0.104.1` | `0.107.1` |
|
[google-cloud-storage](https://github.com/googleapis/google-cloud-python)
| `3.10.1` | `3.11.0` |
| [pandas-stubs](https://github.com/pandas-dev/pandas-stubs) |
`3.0.0.260204` | `3.0.3.260530` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.14` | `0.15.16` |
| [plotly](https://github.com/plotly/plotly.py) | `6.7.0` | `6.8.0` |
| [bokeh](https://github.com/bokeh/bokeh) | `3.9.0` | `3.9.1` |
| [altair](https://github.com/vega/altair) | `6.1.0` | `6.2.1` |
| [plotnine](https://github.com/has2k1/plotnine) | `0.15.4` | `0.15.5` |
|
[webdriver-manager](https://github.com/SergeyPirogov/webdriver_manager)
| `4.1.1` | `4.1.2` |


Updates `mcp` from 1.27.1 to 1.27.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/python-sdk/releases">mcp's
releases</a>.</em></p>
<blockquote>
<h2>v1.27.2</h2>
<h2>What's Changed</h2>
<ul>
<li>[v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages
artifact by <a
href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/2635">modelcontextprotocol/python-sdk#2635</a></li>
<li>[v1.x] Add subject and claims to AccessToken by <a
href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/2690">modelcontextprotocol/python-sdk#2690</a></li>
<li>[v1.x] Bind transport sessions to the authenticated principal by <a
href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/2719">modelcontextprotocol/python-sdk#2719</a></li>
<li>[v1.x] Scope experimental tasks to the session that created them by
<a href="https://github.com/maxisbey"><code>@​maxisbey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/pull/2720">modelcontextprotocol/python-sdk#2720</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/python-sdk/compare/v1.27.1...v1.27.2">https://github.com/modelcontextprotocol/python-sdk/compare/v1.27.1...v1.27.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/modelcontextprotocol/python-sdk/commit/62137874ff26dd74d2fea80ff528a7fd9ca7a5e7"><code>6213787</code></a>
[v1.x] Scope experimental tasks to the session that created them (<a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/2720">#2720</a>)</li>
<li><a
href="https://github.com/modelcontextprotocol/python-sdk/commit/ce267b6fc515dc4efc1dc70b6975b16ff0feef0a"><code>ce267b6</code></a>
[v1.x] Bind transport sessions to the authenticated principal (<a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/2719">#2719</a>)</li>
<li><a
href="https://github.com/modelcontextprotocol/python-sdk/commit/1abcca2408a6b50e10ec601181f63f9978705c00"><code>1abcca2</code></a>
[v1.x] Add subject and claims to AccessToken (<a
href="https://redirect.github.com/modelcontextprotocol/python-sdk/issues/2690">#2690</a>)</li>
<li><a
href="https://github.com/modelcontextprotocol/python-sdk/commit/9773a3f75edab3157253c8e612db1bc338cb9a1b"><code>9773a3f</code></a>
[v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages
artifact (...</li>
<li>See full diff in <a
href="https://github.com/modelcontextprotocol/python-sdk/compare/v1.27.1...v1.27.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `fastmcp` from 3.3.1 to 3.4.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/PrefectHQ/fastmcp/releases">fastmcp's
releases</a>.</em></p>
<blockquote>
<h2>v3.4.2: Heads Up</h2>
<p>FastMCP 3.4.2 restores JWT compatibility for providers that include
private, non-critical JWS header parameters. Tokens from providers like
Clerk can carry header metadata such as <code>cat</code> without being
rejected before signature and claim validation, while unsupported
critical headers are still rejected.</p>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Fixes 🐞</h3>
<ul>
<li>Allow private JWT headers by <a
href="https://github.com/jlowin"><code>@​jlowin</code></a> in <a
href="https://redirect.github.com/PrefectHQ/fastmcp/pull/4290">PrefectHQ/fastmcp#4290</a></li>
</ul>
<h3>Docs 📚</h3>
<ul>
<li>Docs: add v3.4.1 changelog entries by <a
href="https://github.com/jlowin"><code>@​jlowin</code></a> in <a
href="https://redirect.github.com/PrefectHQ/fastmcp/pull/4289">PrefectHQ/fastmcp#4289</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/PrefectHQ/fastmcp/compare/v3.4.1...v3.4.2">https://github.com/PrefectHQ/fastmcp/compare/v3.4.1...v3.4.2</a></p>
<h2>v3.4.1: Floor It</h2>
<p>FastMCP 3.4.1 floors Starlette at <code>&gt;=1.0.1</code> so installs
can no longer resolve to a version affected by CVE-2026-48710 —
previously the dependency was only constrained transitively through
<code>mcp</code>, which allowed vulnerable versions. It also makes
OAuthProxy log refresh-token cache misses instead of failing
silently.</p>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Enhancements ✨</h3>
<ul>
<li>Log refresh-token misses in OAuthProxy instead of failing silently
by <a href="https://github.com/jlowin"><code>@​jlowin</code></a> in <a
href="https://redirect.github.com/PrefectHQ/fastmcp/pull/4276">PrefectHQ/fastmcp#4276</a></li>
</ul>
<h3>Security 🔒</h3>
<ul>
<li>Add explicit starlette&gt;=1.0.1 floor (CVE-2026-48710) by <a
href="https://github.com/jlowin"><code>@​jlowin</code></a> in <a
href="https://redirect.github.com/PrefectHQ/fastmcp/pull/4286">PrefectHQ/fastmcp#4286</a></li>
</ul>
<h3>Docs 📚</h3>
<ul>
<li>Document --notes-start-tag in release instructions by <a
href="https://github.com/jlowin"><code>@​jlowin</code></a> in <a
href="https://redirect.github.com/PrefectHQ/fastmcp/pull/4275">PrefectHQ/fastmcp#4275</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/PrefectHQ/fastmcp/compare/v3.4.0...v3.4.1">https://github.com/PrefectHQ/fastmcp/compare/v3.4.0...v3.4.1</a></p>
<h2>v3.4.0: Remote Control</h2>
<p>FastMCP 3.4 is about reaching servers that live somewhere else. The
headline is <code>fastmcp-remote</code>, a standalone bridge that
connects stdio-only MCP hosts to servers hosted over HTTP. Around it,
this release hardens the proxy layer those remote connections depend on
— making bridges fail loudly instead of silently, and keeping
authenticated sessions alive across the long idle periods that remote
clients are prone to.</p>
<h2>fastmcp-remote</h2>
<p>Some MCP hosts still insist on launching a local stdio command, even
when the server you want is already running over HTTP. FastMCP could
already proxy a remote URL through <code>fastmcp run</code>, but that
pulls in the full server-runner surface. <code>fastmcp-remote</code> is
the small, single-purpose version: one URL in, one local stdio proxy
out.</p>
<pre lang="json"><code>{
  &quot;mcpServers&quot;: {
    &quot;linear&quot;: {
      &quot;command&quot;: &quot;uvx&quot;,
&quot;args&quot;: [&quot;fastmcp-remote&quot;,
&quot;https://mcp.linear.app/mcp&quot;]
    }
  }
}
</code></pre>
<p>OAuth is enabled automatically for HTTPS servers, with support for
explicit bearer tokens and custom headers when you need them. The
implementation stays on FastMCP primitives — <code>Client</code>, OAuth,
<code>create_proxy</code>, and stdio — and credits the original npm
<code>mcp-remote</code> project for the command shape.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/3b8538e2422a1c43fdb69661c610de7985b785f2"><code>3b8538e</code></a>
Allow private JWT headers (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4290">#4290</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/0445c31feffa5581b1e47cbe3ea75eaabed18f9d"><code>0445c31</code></a>
chore: Update SDK documentation (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4223">#4223</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/9261793ae0858f009b6550159287a4965da9d51f"><code>9261793</code></a>
Docs: add v3.4.1 changelog entries (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4289">#4289</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/e1b52d00fe579faf3b76a3364a5639aec9ad8014"><code>e1b52d0</code></a>
Add explicit starlette&gt;=1.0.1 floor (CVE-2026-48710) (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4286">#4286</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/e58f386bacefe4283a8782b821ae0305c36bb073"><code>e58f386</code></a>
Log refresh-token misses in OAuthProxy instead of failing silently (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4276">#4276</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/3f09c683cc440b308c17db5a8f9c89ce4449df6c"><code>3f09c68</code></a>
Document --notes-start-tag requirement in release instructions (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4275">#4275</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/e124bde34eeea66f5472e239c70cda247508da34"><code>e124bde</code></a>
Fix MDX syntax error in changelog (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4270">#4270</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/dae11bbc40fd4ef3cf0a61e1f2363a1630186ba8"><code>dae11bb</code></a>
Backfill changelog and updates through v3.4.0 (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4269">#4269</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/0f4f78c46491a001ba0b409ef643a6649428a951"><code>0f4f78c</code></a>
Fix resource templates with query params on proxied servers (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4251">#4251</a>)</li>
<li><a
href="https://github.com/PrefectHQ/fastmcp/commit/1a06130fcfaece1d494bf444c1561e752d94c61a"><code>1a06130</code></a>
Fix GitHub MCP resource integration test (<a
href="https://redirect.github.com/PrefectHQ/fastmcp/issues/4253">#4253</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/PrefectHQ/fastmcp/compare/v3.3.1...v3.4.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `scikit-learn` from 1.8.0 to 1.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/scikit-learn/scikit-learn/releases">scikit-learn's
releases</a>.</em></p>
<blockquote>
<h2>Scikit-learn 1.9.0</h2>
<p>We're happy to announce the 1.9.0 release.</p>
<p>You can read the release highlights under <a
href="https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html">https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html</a>
and the long version of the change log under <a
href="https://scikit-learn.org/stable/whats_new/v1.9.html">https://scikit-learn.org/stable/whats_new/v1.9.html</a></p>
<p>This release adds <a
href="https://narwhals-dev.github.io/narwhals/">narwhals</a> as a new
dependency that will help to improve dataframe interoperability across
the project.</p>
<p>This version supports Python versions 3.11 to 3.14.</p>
<p>You can upgrade with pip as usual:</p>
<pre><code>pip install -U scikit-learn
</code></pre>
<p>The conda-forge builds can be installed using:</p>
<pre><code>conda install -c conda-forge scikit-learn
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/77def0ed6e3beab57244885d2a584470e96c103d"><code>77def0e</code></a>
trigger wheel builder [cd build]</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/ee7c0b0e34ffe0f5eff8c7aeda49783f70bd9faa"><code>ee7c0b0</code></a>
generate changelog</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/3d7fb048fc5f05555a202d2b24307628841904b5"><code>3d7fb04</code></a>
bump version</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/8954e7baf1f827320b17817f0ab76d025f5e6421"><code>8954e7b</code></a>
DOC Release highlights for 1.9 (<a
href="https://redirect.github.com/scikit-learn/scikit-learn/issues/34147">#34147</a>)</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/73a3eab9d7bc58b695e4da8765044815b90b8dee"><code>73a3eab</code></a>
Fix: Array-API - avoid failing for numpy fit + predict with sparse or
array-l...</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/8839aaeb2fa2a4e3ad2f0a5a69b5f427cffe1dd1"><code>8839aae</code></a>
DOC Thread-safety requirement for open_listener message consumer
callback (<a
href="https://redirect.github.com/scikit-learn/scikit-learn/issues/3">#3</a>...</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/4d2476a4e2acc9429b96d8ee80218a96d24c2bde"><code>4d2476a</code></a>
DOC Refactor array API docs page (<a
href="https://redirect.github.com/scikit-learn/scikit-learn/issues/34054">#34054</a>)</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/f9f812fe6a4ea54c482da6b195773917b636365e"><code>f9f812f</code></a>
:lock: :robot: CI Update lock files for scipy-dev CI build(s) :lock:
:robot: ...</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/d779dc335a31d74ef472003d9012066f07ee8834"><code>d779dc3</code></a>
:lock: :robot: CI Update lock files for free-threaded CI build(s) :lock:
:rob...</li>
<li><a
href="https://github.com/scikit-learn/scikit-learn/commit/6a03cf0906987ce77b37e780ccdebbe3f85e9235"><code>6a03cf0</code></a>
:lock: :robot: CI Update lock files for array-api CI build(s) :lock:
:robot: ...</li>
<li>Additional commits viewable in <a
href="https://github.com/scikit-learn/scikit-learn/compare/1.8.0...1.9.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `anthropic` from 0.104.1 to 0.107.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-python/releases">anthropic's
releases</a>.</em></p>
<blockquote>
<h2>v0.107.1</h2>
<h2>0.107.1 (2026-06-07)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.107.0...v0.107.1">v0.107.0...v0.107.1</a></p>
<h3>Bug Fixes</h3>
<ul>
<li><strong>foundry:</strong> send x-api-key header for API-key auth (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/62">#62</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/13381413d22ad14d85e66836c67cc8a13bd2b7bd">1338141</a>),
closes <a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/1661">#1661</a></li>
</ul>
<h2>v0.107.0</h2>
<h2>0.107.0 (2026-06-06)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.106.0...v0.107.0">v0.106.0...v0.107.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> small updates to Managed Agents types (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/72923f986f808597f86482a7eae4fba9a791e6ae">72923f9</a>)</li>
</ul>
<h2>v0.106.0</h2>
<h2>0.106.0 (2026-06-05)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.106.0">v0.105.2...v0.106.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> mark Claude Opus 4.1 as deprecated (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/85068cc4cb42feecb80a378942cec71e1baa8dcf">85068cc</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>client:</strong> make Foundry client copy() and
with_options() work (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/94146acdc1c6f66f187d5a42e4afbb911e692fe8">94146ac</a>)</li>
<li><strong>transform schema:</strong> preserve $defs when schema root
is a $ref (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/1642">#1642</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/fc58e06b78407b447c50dfea109c6fb300f4b97d">fc58e06</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>internal:</strong> fix artifact url (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/a6ed0c4124d29989a568a27293dadf66e7ebcd6f">a6ed0c4</a>)</li>
<li><strong>internal:</strong> fix branch names (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/3b0337074f0bbab47bf7f5a2b76b4d240cff719a">3b03370</a>)</li>
<li><strong>internal:</strong> update private repo name (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/7dbcb05706f1865afeee62fb06e400f5c4bf619e">7dbcb05</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>point security reports to Anthropic's HackerOne program (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/10">#10</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/80f2c97b8e9534f9879945de11c11aba00cf8704">80f2c97</a>)</li>
</ul>
<h2>v0.105.2</h2>
<h2>0.105.2 (2026-05-29)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.1...v0.105.2">v0.105.1...v0.105.2</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md">anthropic's
changelog</a>.</em></p>
<blockquote>
<h2>0.107.1 (2026-06-07)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.107.0...v0.107.1">v0.107.0...v0.107.1</a></p>
<h3>Bug Fixes</h3>
<ul>
<li><strong>foundry:</strong> send x-api-key header for API-key auth (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/62">#62</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/13381413d22ad14d85e66836c67cc8a13bd2b7bd">1338141</a>),
closes <a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/1661">#1661</a></li>
</ul>
<h2>0.107.0 (2026-06-06)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.106.0...v0.107.0">v0.106.0...v0.107.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> small updates to Managed Agents types (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/72923f986f808597f86482a7eae4fba9a791e6ae">72923f9</a>)</li>
</ul>
<h2>0.106.0 (2026-06-05)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.106.0">v0.105.2...v0.106.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> mark Claude Opus 4.1 as deprecated (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/85068cc4cb42feecb80a378942cec71e1baa8dcf">85068cc</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>client:</strong> make Foundry client copy() and
with_options() work (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/94146acdc1c6f66f187d5a42e4afbb911e692fe8">94146ac</a>)</li>
<li><strong>transform schema:</strong> preserve $defs when schema root
is a $ref (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/1642">#1642</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/fc58e06b78407b447c50dfea109c6fb300f4b97d">fc58e06</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>internal:</strong> fix artifact url (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/a6ed0c4124d29989a568a27293dadf66e7ebcd6f">a6ed0c4</a>)</li>
<li><strong>internal:</strong> fix branch names (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/3b0337074f0bbab47bf7f5a2b76b4d240cff719a">3b03370</a>)</li>
<li><strong>internal:</strong> update private repo name (<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/7dbcb05706f1865afeee62fb06e400f5c4bf619e">7dbcb05</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>point security reports to Anthropic's HackerOne program (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/10">#10</a>)
(<a
href="https://github.com/anthropics/anthropic-sdk-python/commit/80f2c97b8e9534f9879945de11c11aba00cf8704">80f2c97</a>)</li>
</ul>
<h2>0.105.2 (2026-05-29)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.1...v0.105.2">v0.105.1...v0.105.2</a></p>
<h2>0.105.1 (2026-05-29)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.0...v0.105.1">v0.105.0...v0.105.1</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/260e687082dfe2d9b7f20199dc8ab7c9e90ae1de"><code>260e687</code></a>
release: 0.107.1</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/49c5395b93f5f38a299b88228964b8267394b9d1"><code>49c5395</code></a>
fix(foundry): send x-api-key header for API-key auth (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/62">#62</a>)</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/4ceca722bedbd923671365f1a36f86d09fbec657"><code>4ceca72</code></a>
release: 0.107.0</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/3a6f9d9c217bdb504ddd229618149ab7e8033ad3"><code>3a6f9d9</code></a>
feat(api): small updates to Managed Agents types</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/6a70c9f72b16b04348564c5b92961a82ebe4b7da"><code>6a70c9f</code></a>
release: 0.106.0</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/8fa41c8acf6885fd8b7a0a67f705bbb9d3058672"><code>8fa41c8</code></a>
codegen metadata</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/1f553254640b45aecef37df0000da68dc2bcb9c5"><code>1f55325</code></a>
Don't leak ANTHROPIC_API_KEY to the Foundry endpoint (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/18">#18</a>)</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/a94498c6aa3dd4e237ed72dacdd26336bbd7d9fc"><code>a94498c</code></a>
fix(client): make Foundry client copy() and with_options() work</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/907d849f8dfec50dfeda06b5cdde0ee268f9b7f9"><code>907d849</code></a>
chore(internal): fix artifact url</li>
<li><a
href="https://github.com/anthropics/anthropic-sdk-python/commit/9676a5d0d40162a385001f60aa136f97b2718309"><code>9676a5d</code></a>
docs: point security reports to Anthropic's HackerOne program (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-python/issues/10">#10</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-python/compare/v0.104.1...v0.107.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `google-cloud-storage` from 3.10.1 to 3.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-python/releases">google-cloud-storage's
releases</a>.</em></p>
<blockquote>
<h2>google-cloud-storage: v3.11.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-storage-v3.10.1...google-cloud-storage-v3.11.0">v3.11.0</a>
(2026-06-02)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Added a new field
<code>ComposeObjectRequest.delete_source_objects</code> field
(PiperOrigin-RevId: 863087065) (<a
href="https://github.com/googleapis/google-cloud-python/commit/1230e174">1230e174</a>)</p>
</li>
<li>
<p>add object contexts in Python GCS SDK (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17039">#17039</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/15ec8bd7">15ec8bd7</a>)</p>
</li>
<li>
<p>Add delete_source_objects optional parameter to compose API (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17163">#17163</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/16ab4c26">16ab4c26</a>)</p>
</li>
<li>
<p>add fixed-key metadata support in AAOW (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16817">#16817</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/28487f5c">28487f5c</a>)</p>
</li>
<li>
<p>Add support for blob object in AAOW (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16577">#16577</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/32718318">32718318</a>)</p>
</li>
<li>
<p>implement AsyncMultiRangeDownloader with multiplexed bidi-gRPC stream
support (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16528">#16528</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/493df65b">493df65b</a>)</p>
</li>
<li>
<p>populate the <code>persisted_data_checksums</code> field with object
checksums on write object / query write status responses
(PiperOrigin-RevId: 895357062) (<a
href="https://github.com/googleapis/google-cloud-python/commit/56ccbd86">56ccbd86</a>)</p>
</li>
<li>
<p>Enhance Otel Span Attributes with BucketId and Location details for
every Bucket/Blob operation (<a
href="https://github.com/googleapis/google-cloud-python/commit/a0da993d">a0da993d</a>)</p>
</li>
<li>
<p>drop Python 3.7-3.9 support and regenerate (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17178">#17178</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/c804a935">c804a935</a>)</p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>updates typing for python 3.8 (<a
href="https://github.com/googleapis/google-cloud-python/commit/87b7ba97">87b7ba97</a>)</p>
</li>
<li>
<p>propagate quota_project_id and api_endpoint in AsyncGrpcClient (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16731">#16731</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/b8b457aa">b8b457aa</a>)</p>
</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>
<p>add multiplexing performance tests for AsyncMultiRangeDownloader (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16501">#16501</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/20969910">20969910</a>)</p>
</li>
<li>
<p>implement fast-path for queue delivery in _StreamMultiplexer (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16718">#16718</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/7073be16">7073be16</a>)</p>
</li>
<li>
<p>use google_crc32c.value for checksums (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16719">#16719</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/c6461a42">c6461a42</a>)</p>
</li>
<li>
<p>use google_crc32c.value() for simpler crc32c calculation (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/16761">#16761</a>)
(<a
href="https://github.com/googleapis/google-cloud-python/commit/c9846c92">c9846c92</a>)</p>
</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>
<p>Updated documentation for <code>BidiReadObject</code>,
<code>ReadObjectRequest</code>, and <code>ObjectContexts</code>
(PiperOrigin-RevId: 863087065) (<a
href="https://github.com/googleapis/google-cloud-python/commit/1230e174">1230e174</a>)</p>
</li>
<li>
<p>improve wording around <code>object_checksums</code> in bidi write
object requests (PiperOrigin-RevId: 895357062) (<a
href="https://github.com/googleapis/google-cloud-python/commit/56ccbd86">56ccbd86</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md">google-cloud-storage's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-documentai-v3.10.0...google-cloud-documentai-v3.11.0">3.11.0</a>
(2026-03-05)</h2>
<h3>Features</h3>
<ul>
<li>Added a field for enabling image and table annotation for layout
parser processor (<a
href="https://github.com/googleapis/google-cloud-python/commit/6120fb0db084f5e8d1502fb1bb37594ac9976f6e">6120fb0db084f5e8d1502fb1bb37594ac9976f6e</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-documentai-v3.9.0...google-cloud-documentai-v3.10.0">3.10.0</a>
(2026-02-12)</h2>
<h3>Documentation</h3>
<ul>
<li>Updated comments for various fields and messages (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>The method <code>ReviewDocument</code> in
<code>.google.cloud.documentai.v1beta3.DocumentProcessorService</code>
is deprecated (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>A new field <code>enable_table_split</code> is added to message
<code>.google.cloud.documentai.v1beta3.OcrConfig.LayoutParsingParams</code>
(<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>Added new messages <code>Documents</code> and
<code>RawDocuments</code> for inline document input (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>The field <code>skip_human_review</code> in messages
<code>.google.cloud.documentai.v1beta3.ProcessRequest</code> and
<code>.google.cloud.documentai.v1beta3.BatchProcessRequest</code> is
deprecated (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>A new field <code>document_prompt</code> is added to message
<code>.google.cloud.documentai.v1beta3.DocumentSchema</code> (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>A new field <code>revisions</code> is added to message
<code>.google.cloud.documentai.v1beta3.Evaluation</code> (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
<li>A new field <code>document_type</code> is added to message
<code>.google.cloud.documentai.v1beta3.ImportDocumentsRequest</code> (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Removed the <code>SpannerIndexingConfig</code> message and the
<code>spanner_indexing_config</code> field from
<code>.google.cloud.documentai.v1beta3.Dataset</code> BREAKING CHANGE:
The <code>SpannerIndexingConfig</code> message and the
<code>spanner_indexing_config</code> field within the
<code>Dataset</code> message have been removed. Client code referencing
these will need to stop referencing these in case of an error (<a
href="https://github.com/googleapis/google-cloud-python/commit/5371e8e931dfba1d504ac2ffbd48a7f4abdcc158">5371e8e931dfba1d504ac2ffbd48a7f4abdcc158</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-documentai-v3.8.0...google-cloud-documentai-v3.9.0">3.9.0</a>
(2026-01-29)</h2>
<h3>Documentation</h3>
<ul>
<li>Fixed language issues in multiple message field descriptions (<a
href="https://github.com/googleapis/google-cloud-python/commit/38754bbd8765298482b679b027e9bc0ac5a66bb3">38754bbd8765298482b679b027e9bc0ac5a66bb3</a>)</li>
<li>Regenerated REST and RPC Document AI documentation to include
missing changes from September 2024 to November 2025 (<a
href="https://github.com/googleapis/google-cloud-python/commit/38754bbd8765298482b679b027e9bc0ac5a66bb3">38754bbd8765298482b679b027e9bc0ac5a66bb3</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-documentai-v3.7.0...google-cloud-documentai-v3.8.0">3.8.0</a>
(2026-01-08)</h2>
<h3>Features</h3>
<ul>
<li>auto-enable mTLS when supported certificates are detected (<a
href="https://github.com/googleapis/google-cloud-python/commit/c353aa5bcc937ef9399c8efc90492dadbcf01aa2">c353aa5bcc937ef9399c8efc90492dadbcf01aa2</a>)</li>
<li>check Python and dependency versions in generated GAPICs (<a
href="https://github.com/googleapis/google-cloud-python/commit/c353aa5bcc937ef9399c8efc90492dadbcf01aa2">c353aa5bcc937ef9399c8efc90492dadbcf01aa2</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-documentai-v3.6.0...google-cloud-documentai-v3.7.0">3.7.0</a>
(2025-10-16)</h2>
<h3>Documentation</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/5accbb42b3f8372c4d03ef59a6b0000b165f2200"><code>5accbb4</code></a>
chore: librarian release pull request: 20260602T021047Z (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17336">#17336</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/86e57cb9b6ec4266773e99e8a5f60eda78cd1e11"><code>86e57cb</code></a>
fix(spanner_dbapi): replace insecure pickle with json for partition
deseriali...</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/6b62cb6fb3de94326b8944ae08a400c12529cad2"><code>6b62cb6</code></a>
feat(bigframes): Add ai_generate functions to the dataframe bq accessor
(<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17302">#17302</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/54fd04b618127ca20ae8f183734ea07add1af876"><code>54fd04b</code></a>
chore: librarian release pull request: 20260529T145921Z (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17312">#17312</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/c04f892621ceeefb5e2dcbf2b9ea0dddb1b9ad31"><code>c04f892</code></a>
chore: update googleapis and regenerate (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17313">#17313</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/1c2e24f3da44ecfdefe9acb099e28d41d66d46d2"><code>1c2e24f</code></a>
chore: generate google-cloud-monitoring-dashboards (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17309">#17309</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/06965d82a9676c6e0797bf20e616f2d14332c443"><code>06965d8</code></a>
chore: generate google-cloud-containeranalysis (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17308">#17308</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/20242246da615ef75d7ed64e0dfd2d6f72537583"><code>2024224</code></a>
chore: generate grafeas (<a
href="https://redirect.github.com/googleapis/google-cloud-python/issues/17307">#17307</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/9f2ed920d6525f1a1dd51c1b09ca848a04c28c78"><code>9f2ed92</code></a>
chore(spanner): deprecate experimental host option/parameter to replace
with ...</li>
<li><a
href="https://github.com/googleapis/google-cloud-python/commit/7813ca4e59dfc3d9e1546b9b5f0acba9e7536a8e"><code>7813ca4</code></a>
chore: add missing nox sessions and polish dependencies in
sqlalchemy-spanner...</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-storage-v3.10.1...google-cloud-storage-v3.11.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `pandas-stubs` from 3.0.0.260204 to 3.0.3.260530
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/1a40eeca820c57ebbe0287fa16ec71297593a7e5"><code>1a40eec</code></a>
Version 3.0.3.260530</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/0f063ecddd7a1d0fc20baadf9a9569b461e73bb7"><code>0f063ec</code></a>
Make mypy reject <code>float(Series)</code> calls (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1753">#1753</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/a0736699abf028a1f842e9a9f2175d0416735039"><code>a073669</code></a>
GH1415 Enhance typing of Series[Categorical] (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1748">#1748</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/9df3c52456826f1d0633b4e3defd38fef88148c5"><code>9df3c52</code></a>
TYP: GH1727 Narrow Series.to_numpy return types based on the dtype
argument (...</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/2da5f78212cd8b54010fa786501a21b55d7de1b5"><code>2da5f78</code></a>
GH1742 fix nightly CI (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1747">#1747</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/84e7d1af9120c5f7aa2b36d66e78f9a38a186783"><code>84e7d1a</code></a>
BUG: allow kwargs in Styler apply_index and map_index (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1725">#1725</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/82c9851dd7f795fc6f91b7bed480897580e8b8fa"><code>82c9851</code></a>
GH1654 Pandas 3.0 support (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1741">#1741</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/4f6f5336954521504040572d36434eda58be00ef"><code>4f6f533</code></a>
MNT: Fix missing check/assert_type harness where missing (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1749">#1749</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/3bbd508c7eecc6b3b1843e37b271214981b68cfa"><code>3bbd508</code></a>
chore(ci): declare contents: read on test (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1751">#1751</a>)</li>
<li><a
href="https://github.com/pandas-dev/pandas-stubs/commit/ee82af586ddcaf86bb9bfc64cb4f07a7793ffa16"><code>ee82af5</code></a>
Modernize project settings in pyproject.toml (<a
href="https://redirect.github.com/pandas-dev/pandas-stubs/issues/1746">#1746</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pandas-dev/pandas-stubs/compare/v3.0.0.260204...v3.0.3.260530">compare
view</a></li>
</ul>
</details>
<br />

Updates `ruff` from 0.15.14 to 0.15.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.15.16</h2>
<h2>Release Notes</h2>
<p>Released on 2026-06-04.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-async</code>] Implement
<code>yield-in-context-manager-in-async-generator</code>
(<code>ASYNC119</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24644">#24644</a>)</li>
<li>[<code>pylint</code>] Narrow diagnostic range and exclude cases
without exception handlers (<code>PLW0717</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25440">#25440</a>)</li>
<li>[<code>ruff</code>] Treat <code>yield</code> before
<code>break</code> from a terminal loop as terminal
(<code>RUF075</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25447">#25447</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[<code>eradicate</code>] Avoid flagging <code>ruff:ignore</code>
comments as code (<code>ERA001</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25537">#25537</a>)</li>
<li>[<code>eradicate</code>] Fix <code>ERA001</code>/<code>RUF100</code>
conflict when <code>noqa</code> is on commented-out code (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25414">#25414</a>)</li>
<li>[<code>pyflakes</code>] Avoid removing the <code>format</code> call
when it would change behavior (<code>F523</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25320">#25320</a>)</li>
<li>[<code>pylint</code>] Avoid syntax errors in invalid character
replacements in f-strings before Python 3.12 (<code>PLE2510</code>,
<code>PLE2512</code>, <code>PLE2513</code>, <code>PLE2514</code>,
<code>PLE2515</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25544">#25544</a>)</li>
<li>[<code>pyupgrade</code>] Avoid converting <code>format</code> calls
with more kinds of side effects (<code>UP032</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25484">#25484</a>)</li>
</ul>
<h3>Rule changes</h3>
<ul>
<li>[<code>flake8-pytest-style</code>] Avoid fixes for ambiguous
<code>argnames</code> and <code>argvalues</code> combinations
(<code>PT006</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24776">#24776</a>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Drop excess capacity from statement suites during parsing (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25368">#25368</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>[<code>pydocstyle</code>] Improve discoverability of rules enabled
for each convention (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24973">#24973</a>)</li>
<li>[<code>ruff</code>] Restore example code for Python versions before
3.15 (<code>RUF017</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25439">#25439</a>)</li>
<li>Fix typo <code>bin/active</code> → <code>bin/activate</code> in
tutorial (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25473">#25473</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>Shrink additional parser AST collections (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25465">#25465</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/Redslayer112"><code>@​Redslayer112</code></a></li>
<li><a
href="https://github.com/koriyoshi2041"><code>@​koriyoshi2041</code></a></li>
<li><a
href="https://github.com/George-Ogden"><code>@​George-Ogden</code></a></li>
<li><a
href="https://github.com/TejasAmle"><code>@​TejasAmle</code></a></li>
<li><a
href="https://github.com/anishgirianish"><code>@​anishgirianish</code></a></li>
<li><a href="https://github.com/ntBre"><code>@​ntBre</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@​MichaReiser</code></a></li>
<li><a
href="https://github.com/loganrosen"><code>@​loganrosen</code></a></li>
<li><a
href="https://github.com/RafaelJohn9"><code>@​RafaelJohn9</code></a></li>
<li><a
href="https://github.com/adityasingh2400"><code>@​adityasingh2400</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.15.16</h2>
<p>Released on 2026-06-04.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-async</code>] Implement
<code>yield-in-context-manager-in-async-generator</code>
(<code>ASYNC119</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24644">#24644</a>)</li>
<li>[<code>pylint</code>] Narrow diagnostic range and exclude cases
without exception handlers (<code>PLW0717</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25440">#25440</a>)</li>
<li>[<code>ruff</code>] Treat <code>yield</code> before
<code>break</code> from a terminal loop as terminal
(<code>RUF075</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25447">#25447</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[<code>eradicate</code>] Avoid flagging <code>ruff:ignore</code>
comments as code (<code>ERA001</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25537">#25537</a>)</li>
<li>[<code>eradicate</code>] Fix <code>ERA001</code>/<code>RUF100</code>
conflict when <code>noqa</code> is on commented-out code (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25414">#25414</a>)</li>
<li>[<code>pyflakes</code>] Avoid removing the <code>format</code> call
when it would change behavior (<code>F523</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25320">#25320</a>)</li>
<li>[<code>pylint</code>] Avoid syntax errors in invalid character
replacements in f-strings before Python 3.12 (<code>PLE2510</code>,
<code>PLE2512</code>, <code>PLE2513</code>, <code>PLE2514</code>,
<code>PLE2515</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25544">#25544</a>)</li>
<li>[<code>pyupgrade</code>] Avoid converting <code>format</code> calls
with more kinds of side effects (<code>UP032</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25484">#25484</a>)</li>
</ul>
<h3>Rule changes</h3>
<ul>
<li>[<code>flake8-pytest-style</code>] Avoid fixes for ambiguous
<code>argnames</code> and <code>argvalues</code> combinations
(<code>PT006</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24776">#24776</a>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Drop excess capacity from statement suites during parsing (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25368">#25368</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>[<code>pydocstyle</code>] Improve discoverability of rules enabled
for each convention (<a
href="https://redirect.github.com/astral-sh/ruff/pull/24973">#24973</a>)</li>
<li>[<code>ruff</code>] Restore example code for Python versions before
3.15 (<code>RUF017</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25439">#25439</a>)</li>
<li>Fix typo <code>bin/active</code> → <code>bin/activate</code> in
tutorial (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25473">#25473</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>Shrink additional parser AST collections (<a
href="https://redirect.github.com/astral-sh/ruff/pull/25465">#25465</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/Redslayer112"><code>@​Redslayer112</code></a></li>
<li><a
href="https://github.com/koriyoshi2041"><code>@​koriyoshi2041</code></a></li>
<li><a
href="https://github.com/George-Ogden"><code>@​George-Ogden</code></a></li>
<li><a
href="https://github.com/TejasAmle"><code>@​TejasAmle</code></a></li>
<li><a
href="https://github.com/anishgirianish"><code>@​anishgirianish</code></a></li>
<li><a href="https://github.com/ntBre"><code>@​ntBre</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@​MichaReiser</code></a></li>
<li><a
href="https://github.com/loganrosen"><code>@​loganrosen</code></a></li>
<li><a
href="https://github.com/RafaelJohn9"><code>@​RafaelJohn9</code></a></li>
<li><a
href="https://github.com/adityasingh2400"><code>@​adityasingh2400</code></a></li>
</ul>
<h2>0.15.15</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/6c498ab5394edc5622d7f348e12956bf86203716"><code>6c498ab</code></a>
Bump 0.15.16 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25635">#25635</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/e51e132831c4e1c4a5ac00fca4c9256354ab99bf"><code>e51e132</code></a>
[<code>flake8-async</code>] Implement
<code>yield-in-context-manager-in-async-generator</code> (`AS...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/7c6dcd9f2611999c449143d241c582dedf287964"><code>7c6dcd9</code></a>
[ty] Add caching for pattern match narrowing (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25613">#25613</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/27058fc071b542bf06395ba89cabed061d313ca6"><code>27058fc</code></a>
[ty] Compact retained definition and expression identities (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25606">#25606</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bf80d05f007c939799f530c9e775ed9449f5b2eb"><code>bf80d05</code></a>
Fix CODEOWNERS syntax (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25622">#25622</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/10ccd511e94a81d1e836b174f1c553a73ff3f1b3"><code>10ccd51</code></a>
Shrink additional parser AST collections (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25465">#25465</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/0d7135f4d23e7f4d8404daed16b9ef11d14f3fb9"><code>0d7135f</code></a>
[ty] Upgrade Salsa (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25545">#25545</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/49493a3cea83a08fa9aa143695017c816a540f1d"><code>49493a3</code></a>
[ty] Show type alias value on hover (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25381">#25381</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/85207d3b7657a84252f266766cb0d56034dc21cc"><code>85207d3</code></a>
[ty] sys.implementation.version is not sys.version_info (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25608">#25608</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/a8a0614348c1fcf47fc9b666eff61a103914d520"><code>a8a0614</code></a>
[ty] Avoid retaining duplicate function signatures (<a
href="https://redirect.github.com/astral-sh/ruff/issues/25609">#25609</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.15.14...0.15.16">compare
view</a></li>
</ul>
</details>
<br />

Updates `plotly` from 6.7.0 to 6.8.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/plotly/plotly.py/releases">plotly's
releases</a>.</em></p>
<blockquote>
<h2>v6.8.0</h2>
<h3>Added</h3>
<ul>
<li>Add optional <code>font</code> parameter for
<code>make_subplots</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5393">#5393</a>],
with thanks to <a
href="https://github.com/Zomtir"><code>@​Zomtir</code></a> for the
contribution!</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix issue where user-specified <code>color_continuous_scale</code>
was ignored when template had <code>autocolorscale=True</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5439">#5439</a>],
with thanks to <a
href="https://github.com/antonymilne"><code>@​antonymilne</code></a> for
the contribution!</li>
<li>Use presence of <code>COLAB_NOTEBOOK_ID</code> env var to enable
Colab renderer instead of testing import of <code>google.colab</code>
[<a
href="https://redirect.github.com/plotly/plotly.py/pull/5473">#5473</a>],
with thanks to <a
href="https://github.com/kevineger"><code>@​kevineger</code></a> for the
contribution!</li>
<li>Fix incorrect annotation placement for <code>add_vline</code>,
<code>add_hline</code>, <code>add_vrect</code>, and
<code>add_hrect</code> on datetime axes [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5508">#5508</a>],
with thanks to <a
href="https://github.com/mosh3eb"><code>@​mosh3eb</code></a> for the
contribution!</li>
<li>Update tests to be compatible with numpy 2.4 [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5522">#5522</a>],
with thanks to <a
href="https://github.com/thunze"><code>@​thunze</code></a> for the
contribution!</li>
<li>Fix issue where <code>js/</code> directory was unintentionally
installed as a top-level Python package when installing
<code>plotly</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5587">#5587</a>]</li>
<li>Add default headers to be passed in to Kaleido v1.3.0 to avoid
blocked Open Street Map tiles [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5588">#5588</a>]</li>
<li>Propagate the requested
<code>default_height</code>/<code>default_width</code> to the outer
wrapper div produced by <code>to_html</code> so that responsive
(percentage) dimensions inherit from a sized parent container instead of
collapsing to the plotly.js 450px fallback [<a
href="https://redirect.github.com/plotly/plotly.py/issues/5591">#5591</a>],
with thanks to <a
href="https://github.com/SharadhNaidu"><code>@​SharadhNaidu</code></a>
for the contribution!</li>
</ul>
<h3>Updated</h3>
<ul>
<li>The <code>__eq__</code> method for <code>graph_objects</code>
classes now returns <code>NotImplemented</code> to give the other
operand an opportunity to handle the comparison [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5547">#5547</a>],
with thanks to <a
href="https://github.com/RazerM"><code>@​RazerM</code></a> for the
contribution!</li>
<li>Update plotly.js from version 3.5.0 to version 3.6.0. See the
plotly.js <a
href="https://github.com/plotly/plotly.js/releases/tag/v3.6.0">release
notes</a> for more information [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5608">#5608</a>].
Notable changes include:
<ul>
<li>Add support for arrays for the pie property <code>legendrank</code>,
so that it can be configured per slice [<a
href="https://redirect.github.com/plotly/plotly.js/pull/7723">#7723</a>]</li>
<li>Add <code>hoversort</code> layout attribute to sort unified hover
label items by value [<a
href="https://redirect.github.com/plotly/plotly.js/pull/7734">#7734</a>]</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md">plotly's
changelog</a>.</em></p>
<blockquote>
<h2>[6.8.0] - 2026-06-03</h2>
<h3>Added</h3>
<ul>
<li>Add optional <code>font</code> parameter for
<code>make_subplots</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5393">#5393</a>],
with thanks to <a
href="https://github.com/Zomtir"><code>@​Zomtir</code></a> for the
contribution!</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix issue where user-specified <code>color_continuous_scale</code>
was ignored when template had <code>autocolorscale=True</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5439">#5439</a>],
with thanks to <a
href="https://github.com/antonymilne"><code>@​antonymilne</code></a> for
the contribution!</li>
<li>Use presence of <code>COLAB_NOTEBOOK_ID</code> env var to enable
Colab renderer instead of testing import of <code>google.colab</code>
[<a
href="https://redirect.github.com/plotly/plotly.py/pull/5473">#5473</a>],
with thanks to <a
href="https://github.com/kevineger"><code>@​kevineger</code></a> for the
contribution!</li>
<li>Fix incorrect annotation placement for <code>add_vline</code>,
<code>add_hline</code>, <code>add_vrect</code>, and
<code>add_hrect</code> on datetime axes [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5508">#5508</a>],
with thanks to <a
href="https://github.com/mosh3eb"><code>@​mosh3eb</code></a> for the
contribution!</li>
<li>Update tests to be compatible with numpy 2.4 [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5522">#5522</a>],
with thanks to <a
href="https://github.com/thunze"><code>@​thunze</code></a> for the
contribution!</li>
<li>Fix issue where <code>js/</code> directory was unintentionally
installed as a top-level Python package when installing
<code>plotly</code> [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5587">#5587</a>]</li>
<li>Add default headers to be passed in to Kaleido v1.3.0 to avoid
blocked Open Street Map tiles [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5588">#5588</a>]</li>
<li>Propagate the requested
<code>default_height</code>/<code>default_width</code> to the outer
wrapper div produced by <code>to_html</code> so that responsive
(percentage) dimensions inherit from a sized parent container instead of
collapsing to the plotly.js 450px fallback [<a
href="https://redirect.github.com/plotly/plotly.py/issues/5591">#5591</a>],
with thanks to <a
href="https://github.com/SharadhNaidu"><code>@​SharadhNaidu</code></a>
for the contribution!</li>
</ul>
<h3>Updated</h3>
<ul>
<li>The <code>__eq__</code> method for <code>graph_objects</code>
classes now returns <code>NotImplemented</code> to give the other
operand an opportunity to handle the comparison [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5547">#5547</a>],
with thanks to <a
href="https://github.com/RazerM"><code>@​RazerM</code></a> for the
contribution!</li>
<li>Update plotly.js from version 3.5.0 to version 3.6.0. See the
plotly.js <a
href="https://github.com/plotly/plotly.js/releases/tag/v3.6.0">release
notes</a> for more information [<a
href="https://redirect.github.com/plotly/plotly.py/pull/5608">#5608</a>].
Notable changes include:
<ul>
<li>Add support for arrays for the pie property <code>legendrank</code>,
so that it can be configured per slice [<a
href="https://redirect.github.com/plotly/plotly.js/pull/7723">#7723</a>]</li>
<li>Add <code>hoversort</code> layout attribute to sort unified hover
label items by value [<a
href="https://redirect.github.com/plotly/plotly.js/pull/7734">#7734</a>]</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/plotly/plotly.py/commit/ea4eca89c48f9549f5073607b22a4490a49954f7"><code>ea4eca8</code></a>
Address PR feedback</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/e57adbd447d35912e95e77b121907cb1ce053a59"><code>e57adbd</code></a>
Fix broken example</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/b8c2bf44bc9961419527f0af27c132ca077de524"><code>b8c2bf4</code></a>
Update Jupyter Lab extension files</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/2de1059a2eb00487f6cb86575f85ffabc35ab38a"><code>2de1059</code></a>
Update docs for release</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/f94e304fcd5106bfca6c6c5a13367dfb3f79e969"><code>f94e304</code></a>
Version changes for v6.8.0</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/7f2eb35237d99b9cef779fa26740d8420cecce32"><code>7f2eb35</code></a>
Merge pull request <a
href="https://redirect.github.com/plotly/plotly.py/issues/5608">#5608</a>
from plotly/cam/update-plotly.js-3.6.0</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/f57cf960db23faf1a42fad57e55b870fbb463ca5"><code>f57cf96</code></a>
Update command to run <code>npm install</code> for
<code>updateplotlyjs</code></li>
<li><a
href="https://github.com/plotly/plotly.py/commit/1f268208ed820e402fa7f84df1b822f91d201981"><code>1f26820</code></a>
Update lock file</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/8f699a303ab8ad575b756828dd365138b63f7fdb"><code>8f699a3</code></a>
chore: Update plotly.js to v3.6.0</li>
<li><a
href="https://github.com/plotly/plotly.py/commit/f0755e59dc42697a6d4b053ca2ecb8f7970ae1fd"><code>f0755e5</code></a>
Merge pull request <a
href="https://redirect.github.com/plotly/plotly.py/issues/5605">#5605</a>
from plotly/cam/pin-python-frontmatter</li>
<li>Additional commits viewable in <a
href="https://github.com/plotly/plotly.py/compare/v6.7.0...v6.8.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `bokeh` from 3.9.0 to 3.9.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bokeh/bokeh/blob/3.9.1/docs/CHANGELOG">bokeh's
changelog</a>.</em></p>
<blockquote>
<h2>2026-06-04    3.9.1:</h2>
<ul>
<li>
<p>bugfixes:</p>
<ul>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14944">#14944</a>
Document().to_json() is not JSON serializable</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/13477">#13477</a>
[component: docs] Dev docs no longer report precise version
information</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15041">#15041</a>
range_padding of y_range is not updated when changed via CustomJS</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/7297">#7297</a>
[component: bokehjs] Invert Colorbar Axis</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15004">#15004</a>
[component: bokehjs] Cannot update min_border of figure with CustomJS
callback</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14869">#14869</a>
[component: bokehjs] BoxAnnotation shows resize cursor by default</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/8787">#8787</a>
[component: bokehjs] vline hover misses some multi-lines</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/13838">#13838</a>
[BUG] Using array/list in line_dash for hspan doesn't work</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/13509">#13509</a>
[component: bokehjs] [BUG] Incorrectly formatted ticks with %N format
when time is older than the Epoch</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14665">#14665</a>
[component: bokehjs] [bokeh-3.8.0.min.js:405] Uncaught (in promise)
RangeError: Maximum call stack size exceeded</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14491">#14491</a>
[component: bokehjs] Legends are not synced with glyph visibility
state</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14741">#14741</a>
[component: bokehjs] Possible regression in muting of legend entries
since v3.7.0</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14856">#14856</a>
[component: bokehjs] Patches hover tooltip triggers inside holes
(hit-testing doesn't account for NaN-separated holes)</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14855">#14855</a>
[component: bokehjs] Canvas Patch fill doesn't respect holes (nonzero
fill rule instead of evenodd)</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15080">#15080</a>
[component: bokehjs] Bokeh plot frame height does not update when
changed via slider</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15015">#15015</a>
[component: bokehjs] Update of num_minor_ticks does not trigger a visual
update of the plot</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14907">#14907</a>
<code>NaT</code> is encoded as <code>float(nan)</code> by the
serializer</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15116">#15116</a>
[component: docs] Documentation of enums is broken in 3.10 branch</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15131">#15131</a>
[component: build] Release build failed for non pre-release version</li>
</ul>
</li>
<li>
<p>features:</p>
<ul>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14411">#14411</a>
Adding a performance mode</li>
</ul>
</li>
<li>
<p>tasks:</p>
<ul>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14922">#14922</a>
[component: docs] Update <code>dev</code> section of
<code>switcher.json</code> after 3.9 release</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15054">#15054</a>
[component: docs] Building documentation with
<code>BOKEH_DOCS_CDN=local</code> raises SphinxError</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15022">#15022</a>
[component: docs] Fix wrong formatted code block directives</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14878">#14878</a>
[component: docs] Toopltips are broken if special characters are in the
<code>source.data</code> keys</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14962">#14962</a>
[component: docs] <code>Document().models.freeze()</code> not
documented</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15098">#15098</a>
[component: docs] Add missing link and fix example for
<code>tex()</code> in figure class</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14961">#14961</a>
[component: tests] Make it possible to run the Python unit test run in
parallel</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/15089">#15089</a>
Backports for 3.9.1</li>
</ul>
</li>
</ul>
<h2>2026-03-11      3.9:</h2>
<ul>
<li>bugfixes:
<ul>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14584">#14584</a>
<code>Div</code> from <code>bokeh.models.dom</code> raisese ValueError
in <code>show</code> call</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14724">#14724</a>
Bokeh protocol doesn't use binary encoding in
<code>pull-doc-reply</code> message</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14569">#14569</a>
[component: bokehjs] Adjust overlay in case of 1D box zoom</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14799">#14799</a>
[component: build] Compilation failing with whitespace in path</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/13578">#13578</a>
[component: tests] Unit tests are failing due to changes in
pytest-asyncio</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14568">#14568</a>
[component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis
Range</li>
<li><a
href="https://redirect.github.com/bokeh/bokeh/issues/14817">#14817</a>
MyPy can crash on Bokeh 3.9.0.dev9 code</li>
…

Author: dependabot[bot]

pyproject.toml

@@ -19,8 +19,8 @@ dependencies = [
     "fastapi>=0.136.3",
     "uvicorn[standard]>=0.48.0",
     # MCP Server
-    "mcp>=1.27.1",
-    "fastmcp>=3.3.1",
+    "mcp>=1.27.2",
+    "fastmcp>=3.4.2",
     # Database
     "sqlalchemy[asyncio]>=2.0.50",
     "asyncpg>=0.30.0",
@@ -33,11 +33,11 @@ dependencies = [
     "matplotlib>=3.10.9",
     # Data Science & ML (for plot implementations)
     "scipy>=1.14.0",
-    "scikit-learn>=1.6.0",
+    "scikit-learn>=1.9.0",
     "statsmodels>=0.14.0",
     # AI & Cloud
-    "anthropic>=0.104.1",
-    "google-cloud-storage>=3.0.0",
+    "anthropic>=0.107.1",
+    "google-cloud-storage>=3.11.0",
     # Image Processing
     "pillow>=11.0.0",
     # HTTP Client
@@ -47,7 +47,7 @@ dependencies = [
     "pydantic-settings>=2.14.1",
     "pyyaml>=6.0.0",
     "python-dotenv>=1.0.0",
-    "pandas-stubs>=2.3.0",
+    "pandas-stubs>=3.0.3.260530",
     # Caching
     "cachetools>=7.1.4",
     # Auth — Cloudflare Access JWT verification on /debug/*
@@ -63,7 +63,7 @@ test = [
     "aiosqlite>=0.20.0",  # SQLite async driver for integration tests
 ]
 dev = [
-    "ruff>=0.15.14",
+    "ruff>=0.15.16",
     "pre-commit>=4.6.0",
 ]
 typecheck = [
@@ -72,22 +72,22 @@ typecheck = [
 plotting = [
     # Additional plotting libraries (matplotlib already in main dependencies)
     "seaborn>=0.13.0",
-    "plotly>=6.7.0",
-    "bokeh>=3.6.0",
-    "altair>=6.1.0",
-    "plotnine>=0.15.4",
+    "plotly>=6.8.0",
+    "bokeh>=3.9.1",
+    "altair>=6.2.1",
+    "plotnine>=0.15.5",
     "pygal>=3.0.0",
     "highcharts-core>=1.11.0",
     "lets-plot>=4.10.1",
     # PNG export dependencies
     "vl-convert-python>=1.7.0",  # altair PNG export
     "kaleido>=1.3.0",            # plotly PNG export
     "selenium>=4.44.0",          # bokeh/highcharts PNG export
-    "webdriver-manager>=4.1.1",  # auto-install chromedriver
+    "webdriver-manager>=4.1.2",  # auto-install chromedriver
     "cairosvg>=2.7.0",           # pygal PNG export
     # Common data science stack used across plot implementations
     "scipy>=1.14.0",
-    "scikit-learn>=1.6.0",
+    "scikit-learn>=1.9.0",
     "statsmodels>=0.14.0",
     # matplotlib add-ons required by individual specs:
     #   cartopy → map-projections, wordcloud → wordcloud-basic,
@@ -98,15 +98,15 @@ plotting = [
     "squarify>=0.4.0",
 ]
 # Per-library dependencies for CI (minimal installs)
-lib-matplotlib = ["matplotlib>=3.10.9", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-seaborn = ["seaborn>=0.13.0", "matplotlib>=3.10.9", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-plotly = ["plotly>=6.7.0", "kaleido>=1.3.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-bokeh = ["bokeh>=3.6.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0", "selenium>=4.44.0", "webdriver-manager>=4.1.1"]
-lib-altair = ["altair>=6.1.0", "vl-convert-python>=1.7.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-plotnine = ["plotnine>=0.15.4", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-pygal = ["pygal>=3.0.0", "cairosvg>=2.7.0", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
-lib-highcharts = ["highcharts-core>=1.11.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0", "selenium>=4.44.0", "webdriver-manager>=4.1.1"]
-lib-letsplot = ["lets-plot>=4.10.1", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.6.0", "statsmodels>=0.14.0"]
+lib-matplotlib = ["matplotlib>=3.10.9", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-seaborn = ["seaborn>=0.13.0", "matplotlib>=3.10.9", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-plotly = ["plotly>=6.8.0", "kaleido>=1.3.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-bokeh = ["bokeh>=3.9.1", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0", "selenium>=4.44.0", "webdriver-manager>=4.1.2"]
+lib-altair = ["altair>=6.2.1", "vl-convert-python>=1.7.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-plotnine = ["plotnine>=0.15.5", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-pygal = ["pygal>=3.0.0", "cairosvg>=2.7.0", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
+lib-highcharts = ["highcharts-core>=1.11.0", "numpy>=2.4.6", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0", "selenium>=4.44.0", "webdriver-manager>=4.1.2"]
+lib-letsplot = ["lets-plot>=4.10.1", "pandas>=3.0.3", "scipy>=1.14.0", "scikit-learn>=1.9.0", "statsmodels>=0.14.0"]
 all = [
     "anyplot[test,dev,plotting,typecheck]",
 ]