Skip to content

deps: bump the conda-major group across 2 directories with 2 updates - #87

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/conda/containers/quantecon/conda-major-1e895faf34
Closed

deps: bump the conda-major group across 2 directories with 2 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/conda/containers/quantecon/conda-major-1e895faf34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the conda-major group with 1 update in the /containers/quantecon directory: anaconda.
Bumps the conda-major group with 1 update in the /containers/quantecon-build directory: pandas.

Updates anaconda from 2025.12 to 2026.06

Updates pandas from 2.3.3 to 3.0.3

@dependabot dependabot Bot added the maintenance Maintenance tasks on the repository label Jun 23, 2026
mmcky added a commit that referenced this pull request Jul 2, 2026
The previous PLAN.md was a migration-plan snapshot frozen in February
2026: Phase 1 (lecture-dp) has since shipped and runs the full chain in
production at v0.8.0, and a July 2026 deep technical review of all
actions, containers, workflows, docs, and open issues/PRs produced a
concrete backlog that had no home.

This rewrite makes PLAN.md the single forward-looking plan:

- Current state: v0.8.0, the June 2026 hardening pass, and a verified
  consumer table (lecture-dp full chain, lecture-python.myst previews)
- Prioritized backlog P0-P3 from the review, e.g. the container-mode
  gh-CLI alerting gap (see #83), missing failure-report artifacts,
  Dependabot conda-group drift (see #28, PRs #86/#87), and the
  preview-cloudflare alias URL (see #14)
- Dependency policy: the Anaconda-baseline "bump as a set" invariant
  and the hold on PRs #86/#87
- Open-issues disposition table from the triage
- Updated rollout status, compressing the completed February gap
  analysis to its two remaining RunsOn verification items

All factual claims were verified against the current tree and live
consumer repos.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Bumps the conda-major group with 1 update in the /containers/quantecon directory: anaconda.
Bumps the conda-major group with 1 update in the /containers/quantecon-build directory: pandas.


Updates `anaconda` from 2025.12 to 2026.06

Updates `pandas` from 2.3.3 to 3.0.3

---
updated-dependencies:
- dependency-name: anaconda
  dependency-version: '2026.06'
  dependency-type: direct:production
  dependency-group: conda-major
- dependency-name: pandas
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: conda-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/conda/containers/quantecon/conda-major-1e895faf34 branch from b8efd9b to 46216dd Compare July 7, 2026 05:24
@mmcky

mmcky commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Closing — anaconda 2025.12→2026.06 and pandas 2.3.3→3.0.3 are exactly the upgrade to defer to a coordinated bump of the lecture repos + both containers: pandas 3.0 is a major that's unvalidated across the lectures, and this would diverge the containers from the source repos (all still on 2025.12). It also leaves the lean image incoherent — pandas 3.0.3 sitting next to a 2025.12-era numpy 2.3.5. #95 adds anaconda + pandas (and the rest of the pinned stack) to Dependabot's ignore list so this holds until a deliberate, coordinated upgrade.

@mmcky mmcky closed this Jul 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/conda/containers/quantecon/conda-major-1e895faf34 branch July 8, 2026 06:00
mmcky added a commit that referenced this pull request Jul 8, 2026
All flagship lecture repos now pin `anaconda=2026.06`, so move the
containers to match — keeping them reproducible and consistent with the
source repos and with each other (the #28 / PR #84 rationale, now
retargeted from 2025.12 to 2026.06):

- Full `quantecon` image: anaconda 2025.12 -> 2026.06.
- Lean `quantecon-build` image: repin the individual scientific stack to
  the exact anaconda=2026.06 linux-64 py313 (MKL) versions — numpy 2.4.6,
  scipy 1.17.1, pandas 3.0.3, matplotlib 3.10.9, numba 0.65.1, networkx
  3.6.1, statsmodels 0.14.6, scikit-learn 1.8.0 (seaborn 0.13.2 / sympy
  1.14.0 unchanged). Resolved via `conda search anaconda=2026.06 --info`;
  linux-64 keeps MKL as the default BLAS, so the existing mkl pins stand.
  These are the deliberate coordinated-bump versions — not Dependabot's
  latest, which overshoot the baseline (numpy 2.5.0, scipy 1.18.0, etc.).

Also add the pinned stack + `anaconda` to the Dependabot conda `ignore`
list so it holds at 2026.06 until the next coordinated bump, instead of
being drifted piecemeal (the #86 / #87 PRs this supersedes).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
mmcky added a commit that referenced this pull request Jul 8, 2026
All flagship lecture repos now pin `anaconda=2026.06`, so move the
containers to match — keeping them reproducible and consistent with the
source repos and with each other (the #28 / PR #84 rationale, now
retargeted from 2025.12 to 2026.06):

- Full `quantecon` image: anaconda 2025.12 -> 2026.06.
- Lean `quantecon-build` image: repin the individual scientific stack to
  the exact anaconda=2026.06 linux-64 py313 (MKL) versions — numpy 2.4.6,
  scipy 1.17.1, pandas 3.0.3, matplotlib 3.10.9, numba 0.65.1, networkx
  3.6.1, statsmodels 0.14.6, scikit-learn 1.8.0 (seaborn 0.13.2 / sympy
  1.14.0 unchanged). Resolved via `conda search anaconda=2026.06 --info`;
  linux-64 keeps MKL as the default BLAS, so the existing mkl pins stand.
  These are the deliberate coordinated-bump versions — not Dependabot's
  latest, which overshoot the baseline (numpy 2.5.0, scipy 1.18.0, etc.).

Also add the pinned stack + `anaconda` to the Dependabot conda `ignore`
list so it holds at 2026.06 until the next coordinated bump, instead of
being drifted piecemeal (the #86 / #87 PRs this supersedes).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance Maintenance tasks on the repository

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant