Bump dash from 2.18.2 to 4.1.0

[dependabot]

Bumps dash from 2.18.2 to 4.1.0.

Release notes

Sourced from dash's releases.

Dash v4.1.0

Added

• #3637 Added debounce prop to Dropdown.

Fixed

• #3629 Fix date pickers not showing date when initially rendered in a hidden container.
• #3660 Allow same date to be selected for both start and end in DatePickerRange components
• #3600 DatePicker support for the Moment.js Y year token
• #3627 Make dropdowns searchable wheen focused, without requiring to open them first
• #3656 Improved dropdown performance for large collections of options
• #3643 Fix multiselect dropdown with components as labels
• #3609 Add backward compat alias for _Wildcard
• #3672 Improve browser performance when app contains a large number of pattern matching callback callbacks. Exposes an api endpoint to fetch the latest computeGraph call.

Dash Version 4.1.0rc0

Added

• Add support for multiple backend implementation beside flask such as fastapi and quart (both included).
  • Add app = Dash(backend="flask" | "fastapi" | "quart" | CustomBackendImpl) parameter to automatically setup
  • An existing Fastapi, Quart or Flask instance can also be given as app = Dash(server=Fastapi()) to automatically setup a dash app on the server.
  • Install fastapi dependencies with pip install dash[fastapi] or quart with pip install dash[quart], flask is still included by default.
  • Custom backend implementation can be added as a subclass of dash.backends.base_server.BaseDashServer and response/request adapters.

Dash Version 4.0.0

Added

• Redesigned dash core components

Added since 4.0.0rc6

• Add a prop to sliders, allow_direct_input, that can be used to disable the inputs rendered with sliders.
• Improve CSS styles in calendar when looking at selected dates outside the current calendar month (show_outside_days=True)

v4.0.0rc6

Added

• Restored missing implementation for with_portal and with_full_screen_portal in datepickers

Changed

• Bugfixes for feedback received in rc5: notably, popovers are position: fixed once again.

v4.0.0rc5

Added

• New prop in dcc.Upload allows users to recursively upload entire folders at once

Changed

• Bugfixes for feedback received in rc4

v4.0.0rc4

• New dcc.Button component that mirrors html.Button but with default styles applied
• Fix various bugs found in rc3

v4.0.0rc3

... (truncated)

Changelog

Sourced from dash's changelog.

[4.1.0] - 2026-03-23

Added

• #3637 Added debounce prop to Dropdown.

Fixed

• #3629 Fix date pickers not showing date when initially rendered in a hidden container.
• #3660 Allow same date to be selected for both start and end in DatePickerRange components
• #3600 DatePicker support for the Moment.js Y year token
• #3627 Make dropdowns searchable wheen focused, without requiring to open them first
• #3656 Improved dropdown performance for large collections of options
• #3643 Fix multiselect dropdown with components as labels
• #3609 Add backward compat alias for _Wildcard
• #3672 Improve browser performance when app contains a large number of pattern matching callback callbacks. Exposes an api endpoint to fetch the latest computeGraph call.

[4.0.0] - 2026-02-03

Added

• Finalize all redesigned dash core components
• Add a prop to sliders, allow_direct_input, that can be used to disable the inputs rendered with sliders.
• Improve CSS styles in calendar when looking at selected dates outside the current calendar month (show_outside_days=True)

[4.0.0rc6] - 2026-01-07

Added

• Restored missing implementation for with_portal and with_full_screen_portal in datepickers

Changed

• Bugfixes for feedback received in rc5: notably, popovers are position: fixed once again.

[4.0.0rc5] - 2025-12-16

Added

• #3464 Add folder upload functionality to dcc.Upload component. When multiple=True, users can now select and upload entire folders in addition to individual files. The folder hierarchy is preserved in filenames (e.g., folder/subfolder/file.txt). Files within folders are filtered according to the accept prop. Folder support is available in Chrome, Edge, and Opera; other browsers gracefully fall back to file-only mode. The uploaded files use the same output API as multiple file uploads.

Changed

• Bugfixes for feedback received in rc4

[4.0.0rc4] - 2025-12-04

Added

• New dcc.Button component that mirrors html.Button but with default styles applied

[4.0.0rc3] - 2025-11-27

• Modernized dcc.Tabs
• Modernized dcc.DatePickerSingle and dcc.DatePickerRange
• DatePicker calendars can now accept translations as an external script, either with Dash's external_scripts or from the assets folder. See documentation for the underlying library that supports this.

Changed

... (truncated)

Commits

• 6c500cd Merge pull request #3686 from plotly/master-4.1.0
• 8830051 update build artifacts
• 6a7bb4a Merge branch 'dev' into master-4.1.0
• e33d2e4 Merge pull request #3685 from plotly/release/4.1.0
• 4e70240 Merge branch 'dev' into release/4.1.0
• 67992ea Merge pull request #3672 from BSd3v/fix/3661-compute-graphs2
• 136e66c add missing changelog entry
• 575c7f1 bump versions
• ac5ca89 Merge branch 'dev' into fix/3661-compute-graphs2
• aede54b Merge branch 'dev' into release/4.1.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)