Skip to content

chore(deps): bump matplotlib from 3.10.8 to 3.10.9 - #10

Closed
dependabot[bot] wants to merge 1365 commits into
mainfrom
dependabot/pip/matplotlib-3.10.9
Closed

chore(deps): bump matplotlib from 3.10.8 to 3.10.9#10
dependabot[bot] wants to merge 1365 commits into
mainfrom
dependabot/pip/matplotlib-3.10.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor

Bumps matplotlib from 3.10.8 to 3.10.9.

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

SoheylM and others added 22 commits May 4, 2026 09:07
fix: make demo robust when Tavily is not configured
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Entire-Checkpoint: 6dee0841a26c
Generates an arXiv version of the EngiAI paper by lifting body content
from paper-revision/asmeconf/asmeconf-template.tex and injecting it into
EngiAI---arXiv submodule's hand-maintained template.tex. Adds
`make build-arxiv` and `make build-arxiv-dry-run` Makefile targets.

Post-processing applied to the copied body:
- Flatten IDETC multline/split math envs for single-column layout.
- Scale single-column figures (~0.55) and tables (~0.75) to match
  IDETC's visual proportions.
- Wrap wide raw-score tables in landscape pages.
- Truncate long bib author lists to 3 + "and others".

Also adds the literal LaTeX env name "multline" to codespell's ignore
list so it stops being flagged as a typo for "multiline".

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: 4eb5d6b4fb7d
The previous regex stopped at the first `}` so entries with protected
letters like `Wanderman-{M}ilne` or `Rockt\"{a}schel` were emitted with
a mid-name `}` that BibTeX rejected.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: a16c3a0aad40
- SIM102: flatten nested if in _validate
- PERF401: extend warnings via comprehension
- PLR0912/PLR0915: extract _assemble_body helper
- TRY400: use log.exception in main's RuntimeError handler

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: 15433d82d7a5
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: 6e63e660d0f6
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: b592198656b4
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: df97c19a165f
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: b93973d30316
Extends _scale_single_column_figures with an optional overrides map
keyed by an \includegraphics path substring (first match wins). Lets
specific figures deviate from scale_single_column_figures without
disturbing the global default. Bumps the arXiv submodule pointer to
pick up the new figure_scale_overrides entry for the architecture
diagram.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: 3231d6bda8a4
Drop the separate template.tex scaffold and rebuild main.tex in place
by replacing content between marker comment pairs (BEGIN/END ABSTRACT,
BEGIN/END BODY). Eliminates a confusing intermediate file that would
get compiled by mistake when opened in Overleaf.

Also extend _scale_single_column_figures to handle figure* envs (via
overrides only) so the per-figure width override map can target every
figure environment in the document, not just single-column figures.
Override semantics are now absolute width (replace source factor)
rather than multiplicative, which is more intuitive given the new
broader coverage.

Bumps the arXiv submodule pointer to pick up the matching config and
the unified figure widths.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Entire-Checkpoint: a6e54dd8e932
- Remove private submodules (thesis, paper-revision,
  EngiAI---arXiv) and .gitmodules.
- Replace hardcoded Postgres password in docker-compose.yml
  with the ${POSTGRES_PASSWORD:-change_me} pattern, both
  in POSTGRES_PASSWORD and in the default DATABASE_URL.
- Document POSTGRES_PASSWORD in .env.example.
- Scrub example credentials from docs/source/deployment.md
  and the README's Docker DATABASE_URL example.
- Add date-stamped public-snapshot status banner and the
  paper/demo links to README.md.

Entire-Checkpoint: 20ebfe359b5a
- Title: "Windows / macOS / Linux".
- Split Prerequisites into Windows and macOS/Linux blocks.
- Mark Install-WSL step as Windows-only; macOS/Linux skip it.
- Move the /mnt/c/... warning into a Windows/WSL-only
  callout under the clone step.
- Drop the "open in your Windows browser" wording.
- Tag Windows-only items in Troubleshooting and add a
  Linux note for the docker-not-found case.

Entire-Checkpoint: b8013db7fbae
Add a blank line so Markdown treats them as separate
paragraphs instead of collapsing into one.

Entire-Checkpoint: 14fcd521bce6
Reduce README from ~850 to ~85 lines: keep status banner,
description, paper/demo links, quick-start (demo + full
stack), brief agent list, repo layout, and a table linking
to the 14 dedicated pages under docs/source/.

The cut content (Conda setup, env-var reference, Weave/
LangSmith tracing, HPC/SSH walkthrough, project structure
tree, troubleshooting, API-keys section) already lives in
docs/ — no information is lost.

Entire-Checkpoint: 7e9d90b24d09
Bumps [matplotlib](https://github.com/matplotlib/matplotlib) from 3.10.8 to 3.10.9.
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.8...v3.10.9)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 19, 2026
@gioelemo gioelemo closed this May 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/matplotlib-3.10.9 branch May 19, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants