Skip to content

deps: bump the conda group across 1 directory with 7 updates - #86

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/conda/containers/quantecon-build/conda-69dbddc08e
Closed

deps: bump the conda group across 1 directory with 7 updates#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/conda/containers/quantecon-build/conda-69dbddc08e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the conda group with 7 updates in the /containers/quantecon-build directory:

Package From To
numpy 2.3.5 2.5.0
scipy 1.16.3 1.18.0
matplotlib 3.10.6 3.11.0
numba 0.62.1 0.65.1
networkx 3.5 3.6.1
statsmodels 0.14.5 0.14.6
scikit-learn 1.7.2 1.9.0

Updates numpy from 2.3.5 to 2.5.0

Updates scipy from 1.16.3 to 1.18.0

Updates matplotlib from 3.10.6 to 3.11.0

Updates numba from 0.62.1 to 0.65.1

Updates networkx from 3.5 to 3.6.1

Updates statsmodels from 0.14.5 to 0.14.6

Updates scikit-learn from 1.7.2 to 1.9.0

@dependabot dependabot Bot added the maintenance Maintenance tasks on the repository label Jun 23, 2026
mmcky added a commit that referenced this pull request Jul 2, 2026
The previous PLAN.md was a migration-plan snapshot frozen in February
2026: Phase 1 (lecture-dp) has since shipped and runs the full chain in
production at v0.8.0, and a July 2026 deep technical review of all
actions, containers, workflows, docs, and open issues/PRs produced a
concrete backlog that had no home.

This rewrite makes PLAN.md the single forward-looking plan:

- Current state: v0.8.0, the June 2026 hardening pass, and a verified
  consumer table (lecture-dp full chain, lecture-python.myst previews)
- Prioritized backlog P0-P3 from the review, e.g. the container-mode
  gh-CLI alerting gap (see #83), missing failure-report artifacts,
  Dependabot conda-group drift (see #28, PRs #86/#87), and the
  preview-cloudflare alias URL (see #14)
- Dependency policy: the Anaconda-baseline "bump as a set" invariant
  and the hold on PRs #86/#87
- Open-issues disposition table from the triage
- Updated rollout status, compressing the completed February gap
  analysis to its two remaining RunsOn verification items

All factual claims were verified against the current tree and live
consumer repos.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Bumps the conda group with 7 updates in the /containers/quantecon-build directory:

| Package | From | To |
| --- | --- | --- |
| numpy | `2.3.5` | `2.5.0` |
| scipy | `1.16.3` | `1.18.0` |
| matplotlib | `3.10.6` | `3.11.0` |
| numba | `0.62.1` | `0.65.1` |
| networkx | `3.5` | `3.6.1` |
| statsmodels | `0.14.5` | `0.14.6` |
| scikit-learn | `1.7.2` | `1.9.0` |



Updates `numpy` from 2.3.5 to 2.5.0

Updates `scipy` from 1.16.3 to 1.18.0

Updates `matplotlib` from 3.10.6 to 3.11.0

Updates `numba` from 0.62.1 to 0.65.1

Updates `networkx` from 3.5 to 3.6.1

Updates `statsmodels` from 0.14.5 to 0.14.6

Updates `scikit-learn` from 1.7.2 to 1.9.0

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: conda
- dependency-name: networkx
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: conda
- dependency-name: numba
  dependency-version: 0.65.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: conda
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: conda
- dependency-name: scikit-learn
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: conda
- dependency-name: scipy
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: conda
- dependency-name: statsmodels
  dependency-version: 0.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: conda
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/conda/containers/quantecon-build/conda-69dbddc08e branch from 57a7ba2 to 37942db Compare July 7, 2026 05:24
@mmcky

mmcky commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Closing — this drifts the lean quantecon-build scientific stack off the Anaconda 2025.12 baseline it's deliberately pinned to (issue #28 / PR #84). numpy 2.3.5→2.5.0 also crosses numpy 2.4's stricter array→scalar rule — the break class behind #28's un_insure.md failure — and these conda PRs aren't exercised by the workflow_run-gated container tests before merge, so the drift would only surface post-merge on :latest. This stack is bumped as a coordinated set with the lecture repos on the next Anaconda release, not piecemeal. #95 adds these packages to Dependabot's ignore list so they stop being re-proposed weekly.

@mmcky mmcky closed this Jul 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/conda/containers/quantecon-build/conda-69dbddc08e branch July 8, 2026 06:00
mmcky added a commit that referenced this pull request Jul 8, 2026
All flagship lecture repos now pin `anaconda=2026.06`, so move the
containers to match — keeping them reproducible and consistent with the
source repos and with each other (the #28 / PR #84 rationale, now
retargeted from 2025.12 to 2026.06):

- Full `quantecon` image: anaconda 2025.12 -> 2026.06.
- Lean `quantecon-build` image: repin the individual scientific stack to
  the exact anaconda=2026.06 linux-64 py313 (MKL) versions — numpy 2.4.6,
  scipy 1.17.1, pandas 3.0.3, matplotlib 3.10.9, numba 0.65.1, networkx
  3.6.1, statsmodels 0.14.6, scikit-learn 1.8.0 (seaborn 0.13.2 / sympy
  1.14.0 unchanged). Resolved via `conda search anaconda=2026.06 --info`;
  linux-64 keeps MKL as the default BLAS, so the existing mkl pins stand.
  These are the deliberate coordinated-bump versions — not Dependabot's
  latest, which overshoot the baseline (numpy 2.5.0, scipy 1.18.0, etc.).

Also add the pinned stack + `anaconda` to the Dependabot conda `ignore`
list so it holds at 2026.06 until the next coordinated bump, instead of
being drifted piecemeal (the #86 / #87 PRs this supersedes).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
mmcky added a commit that referenced this pull request Jul 8, 2026
All flagship lecture repos now pin `anaconda=2026.06`, so move the
containers to match — keeping them reproducible and consistent with the
source repos and with each other (the #28 / PR #84 rationale, now
retargeted from 2025.12 to 2026.06):

- Full `quantecon` image: anaconda 2025.12 -> 2026.06.
- Lean `quantecon-build` image: repin the individual scientific stack to
  the exact anaconda=2026.06 linux-64 py313 (MKL) versions — numpy 2.4.6,
  scipy 1.17.1, pandas 3.0.3, matplotlib 3.10.9, numba 0.65.1, networkx
  3.6.1, statsmodels 0.14.6, scikit-learn 1.8.0 (seaborn 0.13.2 / sympy
  1.14.0 unchanged). Resolved via `conda search anaconda=2026.06 --info`;
  linux-64 keeps MKL as the default BLAS, so the existing mkl pins stand.
  These are the deliberate coordinated-bump versions — not Dependabot's
  latest, which overshoot the baseline (numpy 2.5.0, scipy 1.18.0, etc.).

Also add the pinned stack + `anaconda` to the Dependabot conda `ignore`
list so it holds at 2026.06 until the next coordinated bump, instead of
being drifted piecemeal (the #86 / #87 PRs this supersedes).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance Maintenance tasks on the repository

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant