dependabot[bot] opened a new pull request, #42778:
URL: https://github.com/apache/superset/pull/42778

   Bumps [numpy](https://github.com/numpy/numpy) from 1.26.4 to 2.4.6.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/numpy/numpy/releases";>numpy's releases</a>.</em></p>
   <blockquote>
   <h2>v2.4.6 (May 18, 2026)</h2>
   <h1>NumPy 2.4.6 Release Notes</h1>
   <p>NumPy 2.4.6 is a quick release that fixes a regression discovered in the 
2.4.5
   release.</p>
   <p>This release supports Python versions 3.11-3.14</p>
   <h2>Contributors</h2>
   <p>A total of 4 people contributed to this release. People with a 
&quot;+&quot; by their
   names contributed a patch for the first time.</p>
   <ul>
   <li>!EarlMilktea</li>
   <li>Charles Harris</li>
   <li>Sebastian Berg</li>
   <li>Warren Weckesser</li>
   </ul>
   <h2>Pull requests merged</h2>
   <p>A total of 4 pull requests were merged for this release.</p>
   <ul>
   <li><a href="https://redirect.github.com/numpy/numpy/pull/31444";>#31444</a>: 
MAINT: Prepare 2.4.x for further development</li>
   <li><a href="https://redirect.github.com/numpy/numpy/pull/31453";>#31453</a>: 
BUG: Fix regression in <code>arr.conj()</code></li>
   <li><a href="https://redirect.github.com/numpy/numpy/pull/31459";>#31459</a>: 
BUG: <code>np.linalg.svd(..., hermitian=True)</code> returns non-unitary...</li>
   <li><a href="https://redirect.github.com/numpy/numpy/pull/31460";>#31460</a>: 
BUG: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator...</li>
   </ul>
   <h2>v2.4.5 (May 15, 2026)</h2>
   <h1>NumPy 2.4.5 Release Notes</h1>
   <p>NumPy 2.4.5 is a patch release that fixes bugs discovered after the 2.4.4
   release, has some typing improvements, and maintains infrastructure.</p>
   <p>This release supports Python versions 3.11-3.14</p>
   <h2>Contributors</h2>
   <p>A total of 17 people contributed to this release. People with a 
&quot;+&quot; by their
   names contributed a patch for the first time.</p>
   <ul>
   <li>Aleksei Nikiforov</li>
   <li>Anarion Zuo +</li>
   <li>Ankit Ahlawat</li>
   <li>Breno Favaretto +</li>
   <li>Charles Harris</li>
   <li>Igor Krivenko +</li>
   <li>Ijtihed Kilani +</li>
   <li>Joren Hammudoglu</li>
   <li>Maarten Baert +</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst";>numpy's
 changelog</a>.</em></p>
   <blockquote>
   <p>This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be 
the
   first feature release using the <code>numpy/numpy-release 
&lt;https://github.com/numpy/numpy-release&gt;</code>__ repository.</p>
   <p>The commands can be copied into the command line, but be sure to replace 
2.4.0
   with the correct version. This should be read together with the
   :ref:<code>general release guide &lt;prepare_release&gt;</code>.</p>
   <h1>Facility preparation</h1>
   <p>Before beginning to make a release, use the 
<code>requirements/*_requirements.txt</code> files to
   ensure that you have the needed software. Most software can be installed with
   pip, but some will require apt-get, dnf, or whatever your system uses for
   software. You will also need a GitHub personal access token (PAT) to push the
   documentation. There are a few ways to streamline things:</p>
   <ul>
   <li>Git can be set up to use a keyring to store your GitHub personal access 
token.
   Search online for the details.</li>
   </ul>
   <h1>Prior to release</h1>
   <h2>Add/drop Python versions</h2>
   <p>When adding or dropping Python versions, multiple config and CI files 
need to
   be edited in addition to changing the minimum version in 
<code>pyproject.toml</code>.
   Make these changes in an ordinary PR against main and backport if necessary.
   We currently release wheels for new Python versions after the first Python RC
   once manylinux and cibuildwheel support that new Python version.</p>
   <h2>Backport pull requests</h2>
   <p>Changes that have been marked for this release must be backported to the
   maintenance/2.4.x branch.</p>
   <h2>Update 2.4.0 milestones</h2>
   <p>Look at the issues/prs with 2.4.0 milestones and either push them off to a
   later version, or maybe remove the milestone. You may need to add a 
milestone.</p>
   <h2>Check the numpy-release repo</h2>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/numpy/numpy/commit/b832a09cf2a169c833dd2371e7c07aa00b293242";><code>b832a09</code></a>
 Merge pull request <a 
href="https://redirect.github.com/numpy/numpy/issues/31462";>#31462</a> from 
charris/prepare-2.4.6</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/57cc147d2ceacffc6534642bfbdebb3a80428e1e";><code>57cc147</code></a>
 REL: Prepare for the NumPy 2.4.6 release</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/0c72b0b53b6b83c004e434b2c7855e73c000d21e";><code>0c72b0b</code></a>
 Merge pull request <a 
href="https://redirect.github.com/numpy/numpy/issues/31459";>#31459</a> from 
charris/backport-31347</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/9778d26e0475d381ccb7817c3b4dd8cacef2b9eb";><code>9778d26</code></a>
 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. 
(#...</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/e0e38767d5d0f848ab44befeedcad71e8ef589c7";><code>e0e3876</code></a>
 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. 
(#...</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/d1bffeb9ec4ec0bf029c94ea35abffa92d5c30f2";><code>d1bffeb</code></a>
 BUG: <code>np.linalg.svd(..., hermitian=True)</code> returns non-unitary 
<code>vh</code> (<a 
href="https://redirect.github.com/numpy/numpy/issues/31347";>#31347</a>)</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/8d8d7e5a14a1da0bfb0faf609a7a7610c431e6e9";><code>8d8d7e5</code></a>
 Merge pull request <a 
href="https://redirect.github.com/numpy/numpy/issues/31453";>#31453</a> from 
seberg/issue-31452</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/bddaab7ace45f90148d8f2bb6e67daab2d45ec76";><code>bddaab7</code></a>
 BUG: Fix regression in <code>arr.conj()</code></li>
   <li><a 
href="https://github.com/numpy/numpy/commit/37a1ecca8dff09b2c579a991194ac55b9971f3a7";><code>37a1ecc</code></a>
 Merge pull request <a 
href="https://redirect.github.com/numpy/numpy/issues/31444";>#31444</a> from 
charris/begin-2.4.6</li>
   <li><a 
href="https://github.com/numpy/numpy/commit/3c0e043217a759a8a948ade158fec14348c3b459";><code>3c0e043</code></a>
 MAINT: Prepare 2.4.x for further development</li>
   <li>Additional commits viewable in <a 
href="https://github.com/numpy/numpy/compare/v1.26.4...v2.4.6";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=numpy&package-manager=pip&previous-version=1.26.4&new-version=2.4.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to