Update streamlit[performance] requirement from >=1.59.0 to >=1.60.0

[dependabot]

Updates the requirements on streamlit[performance] to permit the latest version.

Release notes

Sourced from streamlit[performance]'s releases.

1.60.0

What's Changed

Breaking Changes 🛠

• [feature] Add server.maxWidgetStateSize config option by @​lukasmasuch in streamlit/streamlit#15804
• [fix] Limit client-supplied query string size and field count by @​lukasmasuch in streamlit/streamlit#15803
• [fix] Reject spoofed host messages from child frames and scripts by @​lukasmasuch in streamlit/streamlit#15800

New Features 🎉

• [feature] Move vega-lite chart actions to native toolbar by @​lukasmasuch in streamlit/streamlit#15806
• [feature] Support integer pixel values for gap parameter (#13005) by @​sfc-gh-dbyttow in streamlit/streamlit#15850
• [feature] Use key as main identity for st.data_editor if num_rows="fixed" by @​lukasmasuch in streamlit/streamlit#15884
• [feature] Add height parameter to st.tabs (#12217) by @​sfc-gh-dbyttow in streamlit/streamlit#15847
• [feature] Disable dataframe data export by @​lukasmasuch in streamlit/streamlit#15910
• [feature] Neutral treatment for zero delta in st.metric by @​lukasmasuch in streamlit/streamlit#15790
• [feature] Preserve st.dataframe row selections on sort by @​lukasmasuch in streamlit/streamlit#16020

Bug Fixes 🐛

• [fix] Reject non-finite float values from URL params by @​lukasmasuch in streamlit/streamlit#15799
• [fix] Sanitize dangerous Graphviz link URLs by @​lukasmasuch in streamlit/streamlit#15819
• [fix] Virtualize selectbox dropdown option list by @​lukasmasuch in streamlit/streamlit#15870
• [fix] Keep viewport gutter around dialog on narrow screens by @​lukasmasuch in streamlit/streamlit#15875
• [fix] Surface missing httpx error for auth extra by @​lukasmasuch in streamlit/streamlit#15864
• [fix] Honor expose_tokens with st.App programmatic secrets by @​lukasmasuch in streamlit/streamlit#15865
• [fix] Fix React Aria dialog overlay stacking by @​lukasmasuch in streamlit/streamlit#15876
• [fix] st.tabs panels stacking after widget rerun by @​lukasmasuch in streamlit/streamlit#15894
• [fix] Remove flaky Missing Submit Button warning by @​lukasmasuch in streamlit/streamlit#15889
• [fix] Escape HTML in pydeck chart tooltip interpolation by @​lukasmasuch in streamlit/streamlit#15820
• [fix] Dedupe run_every auto-rerun timers per fragment by @​sfc-gh-lwilby-1 in streamlit/streamlit#15912
• [fix] Remove redundant keyboard tab stop from file uploader dropzone by @​sfc-gh-lwilby-1 in streamlit/streamlit#15928
• [fix] Avoid PyArrow 25 thread initialization crash by @​lukasmasuch in streamlit/streamlit#15947
• Fix RuntimeError: reentrant call inside _io.BufferedWriter on Ctrl+C by @​chang-pro in streamlit/streamlit#15949
• Fix IndexError in simplify_number for values >= 1 quadrillion by @​eeshsaxena in streamlit/streamlit#15971
• [fix] Sanitize dangerous st.link_button and st.image URLs by @​lukasmasuch in streamlit/streamlit#15851
• [fix] Cap server dependency major versions by @​lukasmasuch in streamlit/streamlit#15948
• [fix] stop auto rerun on fragment evict by @​sfc-gh-lwilby-1 in streamlit/streamlit#15932
• [fix] Style selectbox 'No results' empty state by @​lukasmasuch in streamlit/streamlit#15967
• [fix] Overlays inside popover: stacking and dismissal by @​sfc-gh-lwilby-1 in streamlit/streamlit#15961
• [fix] Restore type-to-search in st.selectbox by @​sfc-gh-lwilby-1 in streamlit/streamlit#15996
• [fix] Fix st.metric area chart fill baseline by @​lukasmasuch in streamlit/streamlit#15907
• [fix] Prevent file watcher crash on Windows drive paths by @​lukasmasuch in streamlit/streamlit#15951
• [fix] Ignore skill symlinks in generated gitignore snippet by @​lukasmasuch in streamlit/streamlit#15963
• [fix] Suppress mobile keyboard for selectbox filter_mode=None by @​lukasmasuch in streamlit/streamlit#15962
• [fix] Submit typed number_input value on first Enter in form by @​lukasmasuch in streamlit/streamlit#16013
• [fix] Improve hashing fallback warning messages by @​lukasmasuch in streamlit/streamlit#16040
• [fix] Bundle the skills meta-skill in the wheel; install it locally (no GitHub download) by @​sfc-gh-nbellante in streamlit/streamlit#16026
• [bugfix] Include decorators in st.echo output by @​sfc-gh-dbyttow in streamlit/streamlit#16068
• [bugfix] Fix inconsistent checkbox margin in horizontal container within column (#13162) by @​sfc-gh-dbyttow in streamlit/streamlit#16060
• [bugfix] Fix widgets inside popover-in-dialog being unclickable by @​sfc-gh-dbyttow in streamlit/streamlit#16067

Other Changes

• [chore] Update emojis/material icons by @​github-actions[bot] in streamlit/streamlit#15860

... (truncated)

Commits

• 70c32f1 Up version to 1.60.0
• 5b2bbbe [bugfix] Fix widgets inside popover-in-dialog being unclickable (#16067)
• c5e4012 [bugfix] Fix inconsistent checkbox margin in horizontal container within colu...
• 96cf9d6 [docs] Pause external pull request contributions (#16037)
• d71628c [bugfix] Include decorators in st.echo output (#16068)
• cc1676a Bump the eslint group across 1 directory with 2 updates (#16083)
• 4ccad5d [chore] Add typing test for st.pydeck_chart (#15801)
• fc2cb5d Bump the codeql-action group with 2 updates (#16058)
• 6022987 Bump vite-bundle-analyzer from 1.3.8 to 1.3.9 in /frontend in the vite group ...
• db297c6 Bump the protobufjs group in /frontend with 2 updates (#16073)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)