build(deps): bump the minor-updates group across 1 directory with 12 updates

[dependabot]

Bumps the minor-updates group with 12 updates in the / directory:

Package	From	To
alembic	1.19.1	1.20.0
torch	2.13.0	2.14.0
torchvision	0.28.0	0.29.0
uvicorn	0.52.4	0.53.0
pyjwt	2.13.0	2.14.0
onnxruntime	1.29.0	1.30.0
pyproj	3.7.2	3.8.0
build123d	0.11.1	0.13.0
networkx	3.6.1	3.7
ocpsvg	0.6.0	0.7.0
svgpathtools	1.7.2	1.8.0
trimesh	5.0.0	5.1.0

Updates alembic from 1.19.1 to 1.20.0

Release notes

Sourced from alembic's releases.

1.20.0

Released: September 11, 2026

usecase

• [usecase] [batch] Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any ~sqlalchemy.schema.CheckConstraint in Operations.batch_alter_table.table_args is taken to indicate that the case has been accommodated, and no warning is emitted.

  References: #1846

• [usecase] [autogenerate] Autogenerate now renders a warning comment above any rendered Operations.drop_constraint() directive for which the constraint name is None, as is the case when a constraint that has no name in the model is dropped, most typically within the downgrade() function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.

  References: #916

bug

• [bug] [batch] Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with ~sqlalchemy.types.Boolean.create_constraint set to True, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.

  References: #1768

• [bug] [batch] Fixed bug in batch mode where a CHECK constraint generated by a type such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.

... (truncated)

Commits

• See full diff in compare view

Updates torch from 2.13.0 to 2.14.0

Release notes

Sourced from torch's releases.

PyTorch 2.14.0 Release Notes

• Highlights
• Backwards Incompatible Changes
• Deprecations
• New Features
• Improvements
• Bug fixes
• Performance
• Documentation
• Security
• Developers

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

torch.nn

• torch.nn.LinearCrossEntropyOptions no longer accepts acc_policy="balanced"; use "compact" instead (#188283)

  The "balanced" policy was removed because "compact" provides the same weight-gradient accumulation precision with lower memory use on CUDA, already uses the equivalent scratch layout for mixed-precision inputs on other devices, and was never selected by "auto". Constructing the options with acc_policy="balanced" now raises ValueError: invalid acc_policy: 'balanced'; expected one of 'auto', 'accurate', 'compact'.

  Before:

  options = torch.nn.LinearCrossEntropyOptions(acc_policy="balanced")
  loss = torch.nn.functional.linear_cross_entropy(
      input, linear_weight, target, options=options
  )

  After:

  options = torch.nn.LinearCrossEntropyOptions(acc_policy="compact")
  loss = torch.nn.functional.linear_cross_entropy(

... (truncated)

Commits

• 2b3ec34 [release/2.14] Import SDPAParams in test_transformers to fix lint (#194970)
• 08187d9 [cuDNN] Add guards for cuDNN SDPA decode (#194963)
• 8ceea97 Pin cython < 3.3.0 for the Windows Triton wheel build (#194931)
• 99ecebc [Cherry-pick][release/2.14] [inductor] Fix loop-local load CSE lifetime (#194...
• ec283a7 Bump the Python 3.15 numpy pin to 2.5.2 (#194821)
• 65890f3 Fix docker-release validate job to use the channel matching the pushed image ...
• 1682388 Fix macOS py3.15 wheel builds: pin Cython < 3.3.0 and bump the cp315 numpy pi...
• 9724418 Fix Windows py3.15 builds: constrain Cython < 3.3.0 and bump the cp315 numpy ...
• f1b7554 [MPS] Fix pin_memory() recycling buffers still in use by the GPU (#194662)
• 9f205f7 [MPS] fail loudly on large reductions (#194661)
• Additional commits viewable in compare view

Updates torchvision from 0.28.0 to 0.29.0

Release notes

Sourced from torchvision's releases.

TorchVision 0.29: ABI stability!

TorchVision 0.29 is out! It comes with two major changes: ABI stability, and deprecation of the image decoders and encoders (now in TorchCodec)!

ABI Stability with torch 2.14

TorchVision is now ABI stable w.r.t. torch 2.14! This means that torchvision 0.29 will be compatible with future versions of torch: 2.15, 2.16, etc. You won’t need to install a new version of TorchVision when you upgrade torch.

As a result, we might stop releasing TorchVision in sync with pytorch. But TorchVision is still actively maintained and developed: we’ll still be pushing releases, just not with the same cadence.

Thanks to Adrian Abeyta @​adabeyta for the fantastic porting effort!

PRs: #9524, #9597, #9598, #9605, #9612, #9610, #9614, #9584, #9617, #9618, #9619, #9620, #9582, #9573, #9625, #9623, #9626, #9583, #9633, #9572, #9549, #9533, #9535, #9539, #9543, #9550, #9552, #9555, #9557, #9558, #9554

Image decoders and encoders are deprecated. Use TorchCodec!

The image decoders and encoders in torchvision.io are now deprecated, and they will be removed in a future release. They are now available in torchcodec >= 0.16, where they are significantly more capable. You’ll just need to pip install torchcodec, and you can refer to this migration guide for migrating your code (most APIs for decoding are the same).

This finalizes a clear separation of concerns for the three media-processing libraries of PyTorch: torchcodec is for decoding and encoding all media (images, videos, and audio), while torchvision and torchaudio focus on the transforms.

Bug fixes

[ops] Fix for deformable convolution kernels always running on default stream (#9522) [ops, MPS] Fix gradient overaccumulation in ROI ops (#9563, #9510) [transforms] Fix JPEG transform for non-contiguous batches (#9615)

Contributors

🎉 We're grateful for our community, which helps us improve Torchvision by submitting issues and PRs, and providing feedback and suggestions. The following persons have contributed patches for this release:

Adrian Abeyta, Andrey Talman, Dmitry Nikolaev, Irakli Salia, Jeff Daily , Kasra Ghodsi, Nicolas Hug, Nikita Shulga, Simon Byrne, Yutao Xu, Zhewen

Commits

• fc73f5a Merge branch 'release/0.29' of github.com:pytorch/vision into release/0.29
• f9b2669 [Cherry-pick for 0.29] (#9634)
• e1b5802 Revert "Update version.txt for 0.30.0 (#9607)"
• 2757376 Merge remote-tracking branch 'origin' into release/0.29
• 9e21b88 Consolidate CUDA helpers and remove the legacy _C extension in place of Stabl...
• 541c083 Port deform_conv2d (CUDA) to stable ABI. (#9626)
• 2f411e7 Port ps_roi_pool (CUDA) to stable ABI. (#9623)
• ae0ca92 Port ps_roi_align (CUDA) to stable ABI. (#9625)
• ff1a18d Port roi_align (CUDA) to stable ABI. (#9573)
• 8af7a68 Port roi_pool (CUDA) to stable ABI. (#9582)
• Additional commits viewable in compare view

Updates uvicorn from 0.52.4 to 0.53.0

Release notes

Sourced from uvicorn's releases.

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0

• Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
• HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

• Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

• Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
• Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
• Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Changelog

Sourced from uvicorn's changelog.

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

• Add experimental HTTP/2 support through zttp (#2982, #3101)
• Add support for zuvloop (#3104)

Fixed

• Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
• Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
• Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

Commits

• 421708f Version 0.53.0 (#3136)
• f1a1bff Unset the keep-alive timer when upgrading to WebSocket (#3107)
• 63971ed Document HTTP/2 support (#3130)
• 7d1a005 Remove race from multiprocess health check test (#3128)
• 5ac6265 Add ::1 to FORWARDED_ALLOW_IPS (#3119)
• 098b206 Remove timing race from SIGHUP supervisor test (#3127)
• 968f15e chore(deps): bump the github-actions group with 4 updates (#3113)
• 7d4c08c chore(deps): bump the python-packages group across 1 directory with 11 update...
• fe528a4 Require explicit opt-in for zttp HTTP/2 (#3101)
• fa324a4 chore(deps-dev): bump httpx2 from 2.10.0 to 2.12.0 (#3121)
• Additional commits viewable in compare view

Updates pyjwt from 2.13.0 to 2.14.0

Release notes

Sourced from pyjwt's releases.

2.14.0

See the 2.14.0 changelog for the complete release details and related security advisories.

Changelog

Sourced from pyjwt's changelog.

v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>__

Security

- Harden HMAC key validation against public-key material supplied as JWK,
  JWKS, array, encoded, BOM-prefixed, DER, or PEM input. See
  `GHSA-r6x4-923q-g947 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947>`__,
  `GHSA-ffc3-869f-jxw9 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9>`__,
  `GHSA-p4g4-x82p-q773 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773>`__,
  and `GHSA-w2cx-738m-mc7w <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w>`__.
- Reject automatic redirects when ``PyJWKClient`` fetches a JWKS, preventing
  redirected destinations from being treated as trusted key sources. See
  `GHSA-9v7f-9g4p-ffgj <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj>`__.
- Limit repeated JWKS refreshes caused by unknown key IDs while preserving
  normal key-rotation behavior. See
  `GHSA-2gx3-rcp4-g85q <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q>`__.
- Handle deeply nested and malformed JWS/JWK input without uncaught recursion
  errors or whole-set parsing failures. See
  `GHSA-8wjv-2p76-3863 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863>`__
  and `GHSA-w6j9-cwv2-h6wq <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq>`__.
- Enforce compact JWS encoding rules during decoding. See
  `GHSA-hxm8-2xgr-2p9m <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m>`__.
- Reject detached-payload arguments for attached JWS inputs. Thanks to `@xclow3n
  <https://github.com/xclow3n>`__ for reporting this behavior; fixed in commit
  `37b54877 <https://github.com/jpadilla/pyjwt/commit/37b54877bf7bea67e8149130e96929e3ec798122>`__.
Fixed

- Apply HMAC key validation consistently when keys are loaded through
  ``PyJWK`` and ``PyJWKClient``. See
  `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
- Reject empty HMAC keys when represented as JWKs.
  See `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/jpadilla/pyjwt/commit/c6fe464b356ff4b1ebc9ba62172d331a40aa27df&quot;&gt;&lt;code&gt;c6fe464&lt;/code&gt;&lt;/a> release: prepare v2.14.0</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/f5413029ae7a2e31b1367b5303ea86a2f54ccf42&quot;&gt;&lt;code&gt;f541302&lt;/code&gt;&lt;/a> style: apply Ruff formatting</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95&quot;&gt;&lt;code&gt;801cd12&lt;/code&gt;&lt;/a> fix: reject public JWK container HMAC keys</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/af8181ca0bec5e6b372fbba9afbe23702b787ceb&quot;&gt;&lt;code&gt;af8181c&lt;/code&gt;&lt;/a> fix: reject empty HMAC keys from JWKs</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1&quot;&gt;&lt;code&gt;ba4853a&lt;/code&gt;&lt;/a> Throttle repeated PyJWKClient refreshes</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499&quot;&gt;&lt;code&gt;2798504&lt;/code&gt;&lt;/a> fix: reject DER public keys as HMAC secrets</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07&quot;&gt;&lt;code&gt;8b4e233&lt;/code&gt;&lt;/a> fix: reject loader-accepted PEM variants</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/1f8180a211256dfe5cf32294b6753f554a5a4258&quot;&gt;&lt;code&gt;1f8180a&lt;/code&gt;&lt;/a> fix: format JWS tests</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/cff1ac55fe5f1096fd05295b269fce053ee290ab&quot;&gt;&lt;code&gt;cff1ac5&lt;/code&gt;&lt;/a> Fix redirect handler return annotation</li>

<li><a href="https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56&quot;&gt;&lt;code&gt;0a795b8&lt;/code&gt;&lt;/a> Reject redirects in PyJWKClient fetches</li>

<li>Additional commits viewable in <a href="https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates onnxruntime from 1.29.0 to 1.30.0

Release notes
Sourced from onnxruntime's releases.

ONNX Runtime v1.30.0
ONNX Runtime 1.30.0 expands generative AI inference, improves CPU and GPU performance, adds Go bindings, and strengthens runtime reliability. These notes cover changes since ONNX Runtime 1.29.1.
Highlights

Expanded CUDA inference support with variable-length causal convolution for continuous batching, speculative decoding in paged XQA, and INT4 paged KV caches with per-channel scales (#32168, #32340, #32515).
Improved WebGPU PagedAttention, added GPT-OSS support and INT8 KV-cache block quantization, and extended convolution optimizations (#31727, #32277, #32284, #32420).
Added fused CPU LinearAttention kernels for AVX-512, Arm64 NEON, and SVE, plus AVX2 LayerNorm/RMSNorm acceleration (#31674, #31973, #32178, #32356).
Added Go bindings for the ONNX Runtime C API and DeepSeek Engram contrib operators (#29615, #32268).

Announcements & Compatibility

FP4 QMoE kernels are now enabled by default in CUDA builds, with Windows build support added in this release. Source builds can opt out with -Donnxruntime_USE_FP4_QMOE=OFF (#32096, #32163).
CUDA fpA-intB builds now default to a compact kernel set for FP16 activations, INT4/INT8 weights, scale-only quantization, and block_size=32. Set -Donnxruntime_USE_FPA_INTB_GEMM_FULL=ON when building from source to retain the full kernel set, including BF16, zero-point, bias, larger-block-size, and native Hopper variants (#32324).
CPU FP16 Gemm and MatMul execution is gated on hardware acceleration. CPU-assigned FP16 nodes without a matching kernel now fall back to FP32 (#32301, #32197).
WebGPU plugin EP packaging now supports Linux AArch64. Plugin versions were advanced to WebGPU 0.4.0 and CUDA 0.2 (#32287, #31960, #31970).

Security & Reliability
Model Loading, Memory, and Input Validation

Limited nested model-graph depth and canonicalized external-data locations to harden model loading (#32344, #32135).
Added checked rounding for BFC arena allocations and fixed prepacked-weight reference lifetimes (#32010, #32040).
Strengthened shape, rank, and parameter validation for Split, Scan, GatherND, ScatterND, SpaceToDepth/DepthToSpace, Crop, Conv, Normalizer, and pooling (#29461, #31668, #32034, #32039, #32076, #32157, #32160, #32161, #32345, #32349).
Hardened generation and attention input handling, including attention-attribute narrowing, BifurcationDetector inputs, generation subgraph shapes, and QEmbed segment inputs. BeamSearch buffer expansion now uses dynamic shape storage (#31648, #31701, #32009, #32078, #32144).
Validated TreeEnsemble node references and bounded subtree comparison, rejected non-finite CPU RoiAlign coordinates, and required ImageScaler bias to match the channel count (#32031, #32043, #32011, #32002).
Added an allowlist of safe LoRA adapter parameter data types, validated MatMulFpQ4 shape inputs, and checked MLAS blockwise quantization/dequantization index ranges (#31682, #32032, #32007).

GPU Bounds and Resource Lifetimes

Hardened CUDA indexing and buffer-size arithmetic in MatMulNBits, RemovePadding, RotaryEmbedding, SparseAttention, Whisper beam search, NMS, QDQ, and GatherElements (#31643, #31994, #31995, #31996, #31998, #32014, #32029, #32030).
Fixed overflow in CUDA reduction scans and Softmax offset arithmetic, and handled zero-sized outputs in CUDA random-generator kernels (#32137, #32330, #31997).
Fixed CUDA MultiHeadAttention shared-cache scratch lifetimes and kept CudaAsyncBuffer staging storage alive across CUDA graph replay (#31968, #32121).
Fixed WebGPU out-of-bounds subgroup-matrix loads for partial tiles, zero-initialized writable device-allocator buffers, and rejected foreign GPU handles in built-in data transfers (#32364, #32063, #32317).

Dependencies and Tooling

Upgraded Protobuf to 33.6 and refreshed Python documentation dependencies, including an ONNX security-related update (#29906, #32190, #32424).
Updated JavaScript dependencies including js-yaml, joi, fast-uri, and the Next.js end-to-end fixture (#32397, #32486, #32488, #32505, #32508).
Pinned GitHub Actions to full-length commit SHAs and strengthened packaging infrastructure with authenticated package feeds and NPM network isolation (#32176, #32005, #32440).

New Features
Core APIs & Runtime

Added Go bindings for the ONNX Runtime C API (#29615).
Extended memory importing with host-pointer support and added access to preallocated outputs through KernelContext::GetPreallocatedOutput (#29726, #32089).
Added packed-attention workspace recipes and estimates, and made workspace input-shape handling aware of optional inputs (#32283, #32321, #32312).
Added DeepSeek Engram contrib operators, EngramGate and NGramHashMapping, and expanded kernel coverage for Qwen-3.5 operators (#32268, #32106).



... (truncated)


Commits

f2c39fe [CUDA] Add INT4 paged KV cache with per-channel scales (#32515)
5894ba8 Add portable random-access file reads to Env (#32503)
a2ee3eb Fix CUDA plugin device discovery on WSL (#32517)
b652e59 [WebGPU] Prepack Conv weights for the im2col-matmul path (#32420)
0f0f29f Get rid of spurious warning about not being able to find spectre mitigation (...
23dd651 Register ONNX schemas only when static registration is disabled (#32353)
33af5d3 Release external data loaders after graph initialization (#32502)
2e3c24d Clarify external initializer and EP context path interaction (#32442)
e76036b [CUDA] Pin FP8 GEMV residency for grids just past two blocks per SM (#32433)
82583c5 Add session option for a BNHS GroupQueryAttention Value cache layout (#32139)
Additional commits viewable in compare view




Updates pyproj from 3.7.2 to 3.8.0

Release notes
Sourced from pyproj's releases.

3.8.0 Release
What's Changed

DEP: Minimum supported Python version 3.12 by @​snowman2 in pyproj4/pyproj#1629
WHL: Wheels contain PROJ 9.8.1 by @​snowman2 in pyproj4/pyproj#1630
WHL: Remove MacOS 13 (X86_64) wheels by @​snowman2 in pyproj4/pyproj#1533
WHL: Update to MacOS 15 (x86_64) wheels by @​snowman2 in pyproj4/pyproj#1543
BLD: update build-time dependencies by @​neutrinoceros in pyproj4/pyproj#1575
BLD: cleanup redundant instructions in MANIFEST.in by @​neutrinoceros in pyproj4/pyproj#1576
MNT: Use dependency-groups (PEP 735) instead of requirements files by @​mwtoews in pyproj4/pyproj#1602
WHL: upgrade cibuildwheel to 4.1.0 by @​neutrinoceros in pyproj4/pyproj#1599
PERF: improve single point transform and remove warning from numpy scalars by @​greglucas in pyproj4/pyproj#1616
ENH: Add query_geodetic_crs_from_datum by @​jjimenezshaw in pyproj4/pyproj#1390
ENH: add pivot_crs and grid_check args to TransformerGroup (#1554) by @​phaarnes in pyproj4/pyproj#1555
ENH: TransformerGroup: add option to ignore CRS extents (Fixes #1497) by @​phaarnes in pyproj4/pyproj#1538
ENH: add always_xy arg to from_pipeline method by @​phaarnes in pyproj4/pyproj#1566
BUG: Fix use-after-free when ContextManager frees a context on anothe… by @​Troppy2 in pyproj4/pyproj#1626  (This resolved multithreading issues 🥳 )
BUG: Clear CONTEXT_THREAD_KEY when destroying the PJ_CONTEXT by @​dgburr in pyproj4/pyproj#1541
BUG: Default skew angle for CF grid mapping oblique mercator to 90 by @​snowman2 in pyproj4/pyproj#1544
BUG: Fix linting issues by @​dgburr in pyproj4/pyproj#1542
BUG: fix TransformerGroup crash when proj_normalize_for_visualization() returns NULL by @​phaarnes in pyproj4/pyproj#1556
BUG: Update and fix linting by @​mwtoews in pyproj4/pyproj#1603
BUG: Fix CRS.to_2d() on CustomConstructorCRS subclasses by @​dylanpulver in pyproj4/pyproj#1625
TYP: Type the Geod.npts method and some crs dict typings by @​jack-volantautonomy in pyproj4/pyproj#1594
TST: Fix tests for PROJ 9.7.0 and newer  by @​phaarnes in pyproj4/pyproj#1557
TST: Fix tests for RGF93 v1 -> ETRS89-FRA [RGF93 v1] by @​phaarnes in pyproj4/pyproj#1560
TST: Update tests with new transformations in PROJ 9.8 by @​phaarnes in pyproj4/pyproj#1568
TST: Fix tests and workflows by @​phaarnes in pyproj4/pyproj#1571
TST: Adjust transformer tests for PROJ 9.8 behavior changes by @​xylar in pyproj4/pyproj#1581
TST: Add Python 3.14 to the testing by @​cclauss in pyproj4/pyproj#1608
TST: update for PROJ 9.8.1 by @​snowman2 in pyproj4/pyproj#1628
TST: update for PROJ 9.9 by @​snowman2 in pyproj4/pyproj#1631 & pyproj4/pyproj#1632
MNT: Update release instructions with more details by @​djhoese in pyproj4/pyproj#1517
MNT: Update wheels to proj 9.7.1 by @​phaarnes in pyproj4/pyproj#1573
DOC: fix tiny typo in docstring by @​steveberardi in pyproj4/pyproj#1587
DOC: Spelling fix in test function names by @​kratzert in pyproj4/pyproj#1589
DOC: Fix typos by @​schwehr in pyproj4/pyproj#1590
DOC: Update fiona CRS compatibility for fiona 1.9+ by @​HugoFara in pyproj4/pyproj#1609
DOC: add CPython 3.14 support trove classifier by @​neutrinoceros in pyproj4/pyproj#1598
DOC: Fix doubled word in transformer docstring by @​latent-9 in pyproj4/pyproj#1615
DOC: added windows specfic intructions for building documentation by @​Troppy2 in pyproj4/pyproj#1583
CI: stop publishing Sphinx doctree cache to gh-pages by @​greglucas in pyproj4/pyproj#1620
CI: Fix build CI pulling in free-threaded python by @​djhoese in pyproj4/pyproj#1624

New Contributors

@​dgburr made their first contribution in pyproj4/pyproj#1542
@​phaarnes made their first contribution in pyproj4/pyproj#1538
@​neutrinoceros made their first contribution in pyproj4/pyproj#1575
@​xylar made their first contribution in pyproj4/pyproj#1581
@​steveberardi made their first contribution in pyproj4/pyproj#1587
@​kratzert made their first contribution in pyproj4/pyproj#1589



... (truncated)


Changelog
Sourced from pyproj's changelog.

3.8.0

WHL: Wheels contain PROJ 9.8.1 (pull #1630)
WHL: Upgrade from MacOS 13 to MacOS 15 (X86_64) wheels (issue #1532 & #1543)
DEP: Minimum supported Python version 3.12 (issue #1482)
ENH: Add :meth:database.query_geodetic_crs_from_datum (pull #1390)
ENH: Added crs_extent_use kwarg to :class:pyproj.transformer.TransformerGroup aligning with PROJ CLI --crs-extent-use (pull #1538)
ENH: Added :class:pyproj.enums.CRSExtentUse enum for TransformerGroup crs_extent_use kwarg (pull #1538)
ENH: Added pivot_crs kwarg to :class:pyproj.transformer.TransformerGroup mirroring PROJ CLI --pivot-crs (pull #1538)
ENH: Added :class:pyproj.enums.IntermediateCRSUse to support TransformerGroup pivot_crs kwarg (pull #1538)
ENH: Added grid_check kwarg to :class:pyproj.transformer.TransformerGroup mirroring PROJ CLI --grid-check (pull #1555)
ENH: Added :class:pyproj.enums.GridAvailabilityUse enum for TransformerGroup grid_check kwarg (pull #1555)
ENH: Added always_xy kwarg to :meth:pyproj.transformer.Transformer.from_pipeline (pull #1566)
PERF: Optimize single point transformations and remove typecast warning (issue #1309)
BUG: Default skew angle for CF grid mapping oblique mercator to 90 (issue #1506)
BUG: Clear CONTEXT_THREAD_KEY when destroying PJ_CONTEXT (pull #1541)
BUG: Fix use-after-free when ContextManager frees a context on another thread (pull #1626)
BUG: Fix :meth:pyproj.crs.CRS.to_2d raising on :class:pyproj.crs.CustomConstructorCRS subclasses (pull #1625)
BLD: update build-time dependencies (pull #1575)
MNT: * Use dependency-groups (PEP 735) instead of requirements files (pull #1602)
DOC: Update fiona CRS compatibility for fiona 1.9+ (issue #1360)




Commits

a7a12db MNT: version 3.8.0
e28d276 DOC: Update contributors
1c9875d MNT: 3.8.0rc0 & update release notes
1b97491 TST: remove PROJ 9 compat for test_transformer_group__get_transform_crs (#1632)
f188df4 WHL: Wheels contain PROJ 9.8.1 (#1630)
16e6905 TST: update for PROJ 9.9 (#1631)
3f7ccc7 DEP: Minimum supported Python version 3.12 (#1629)
be21a4c TST: update for PROJ 9.8.1 (#1628)
706c677 Enable free-threaded Python builds in release workflow (#1627)
37c6179 BUG: Fix CRS.to_2d() on CustomConstructorCRS subclasses (#1625)
Additional commits viewable in compare view




Updates build123d from 0.11.1 to 0.13.0

Release notes
Sourced from build123d's releases.

v0.13.0
Compatibility Notes

Upgraded underlying kernel to OCP 8.0.1.0.0: Updated all internal bindings and geometry calls to support OCCT / OCP 8.0.1. This release is otherwise identical to build123d v0.12.0. By @​bernhard-42 in #1442.

Full Changelog: https://github.com/gumyr/build123d/compare/v0.12.0...v0.13.0
v0.12.0
Breaking Changes

APIs deprecated in earlier releases have been removed by @​gumyr in a1d4f223.

The tangent objects ArcArcTangentArc, ArcArcTangentLine, PointArcTangentArc and PointArcTangentLine are replaced by ConstrainedArcs and ConstrainedLines
Face.make_plane() by Face(Plane); Shape.is_planar_face by Face.is_planar; Shape.split_by_perimeter by the Face/Shell method
Vector.to_tuple, Vertex.to_tuple, Location.to_tuple, Location.to_axis, Axis.to_plane, Edge.to_axis, Edge.to_wire, Wire.to_wire, Face.to_arcs, Shape.relocate and the LocationEncoder JSON helper are gone; the end_angle and angular_direction parameters of the center arcs are replaced by arc_size; and the is_inkscape_label parameter of import_svg is removed.


Unit is now a StrEnum whose values are the unit symbols (Unit.MM == "mm"), as part of the materials work by @​bernhard-42 in #1270.

Compatibility Notes
These are compatibility-related changes that users should review. They are not necessarily all breaking changes.

Builders are refactored around a unified BuildScope: they construct in a local coordinate system on Plane.XY and publish their result through the enclosing placement, so a builder can now be positioned by an enclosing Locations context, and objects created inside custom Base*Object classes no longer leak into the caller's builder by @​gumyr in #1373.
Select.LAST and Select.NEW now come from the kernel's own history of the operation rather than a before/after comparison, so a face an operation merely trimmed no longer counts as new, and Select.NEW works for every shape type and on the result of Algebra operations too. Select.LAST and others also now work with all shape types now, and not only edges as before. Builder.new_edges is deprecated in favor of edges(Select.NEW) by @​gumyr in 1a7751a1 and 86952b27.
The builder operation add() is renamed insert(); add() remains as a deprecated wrapper by @​gumyr in 51f251b8.
BoundBox.is_inside() is deprecated in favor of BoundBox.within(), BoundBox.find_outside_box_2d() in favor of BoundBox.contains(), and BoundBox.intersects() is back to tolerance-aware contact semantics while overlaps() stays the strict interior test by @​gumyr in 0147c20d and 8a825f5d.
ExportSVG accepts ColorLike values everywhere and inherits colors from faces, edges and wires; ColorIndex values, ezdxf RGB values and 0-255 RG...
Description has been truncated