chore(deps): update minor updates (stable/v0.8)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aiohttp	3.9.1 -> 3.9.5
fastavro	1.9.3 -> 1.9.4
matplotlib (source)	3.8.2 -> 3.8.4
mypy (source, changelog)	1.8.0 -> 1.10.0
pytest-mock (changelog)	3.12.0 -> 3.14.0
pytest-timeout	2.2.0 -> 2.3.1
scipy (source)	1.12.0 -> 1.13.0

---

Release Notes

aio-libs/aiohttp (aiohttp)

v3.9.5

Compare Source

==================

Bug fixes

• Fixed "Unclosed client session" when initialization of
  :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

  Related issues and pull requests on GitHub:
  :issue:8253.

• Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data
  part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

  Related issues and pull requests on GitHub:
  :issue:8332.

• Added default Content-Disposition in multipart/form-data responses to avoid broken
  form-data responses -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8335.

---

v3.9.4

Compare Source

==================

Bug fixes

• The asynchronous internals now set the underlying causes
  when assigning exceptions to the future objects
  -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:8089.

• Treated values of Accept-Encoding header as case-insensitive when checking
  for gzip files -- by :user:steverep.

  Related issues and pull requests on GitHub:
  :issue:8104.

• Improved the DNS resolution performance on cache hit -- by :user:bdraco.

  This is achieved by avoiding an :mod:asyncio task creation in this case.

  Related issues and pull requests on GitHub:
  :issue:8163.

• Changed the type annotations to allow dict on :meth:aiohttp.MultipartWriter.append,
  :meth:aiohttp.MultipartWriter.append_json and
  :meth:aiohttp.MultipartWriter.append_form -- by :user:cakemanny

  Related issues and pull requests on GitHub:
  :issue:7741.

• Ensure websocket transport is closed when client does not close it
  -- by :user:bdraco.

  The transport could remain open if the client did not close it. This
  change ensures the transport is closed when the client does not close
  it.

  Related issues and pull requests on GitHub:
  :issue:8200.

• Leave websocket transport open if receive times out or is cancelled
  -- by :user:bdraco.

  This restores the behavior prior to the change in #​7978.

  Related issues and pull requests on GitHub:
  :issue:8251.

• Fixed content not being read when an upgrade request was not supported with the pure Python implementation.
  -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:8252.

• Fixed a race condition with incoming connections during server shutdown -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8271.

• Fixed multipart/form-data compliance with :rfc:7578 -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8280.

• Fixed blocking I/O in the event loop while processing files in a POST request
  -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:8283.

• Escaped filenames in static view -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:8317.

• Fixed the pure python parser to mark a connection as closing when a
  response has no length -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8320.

Features

• Upgraded llhttp to 9.2.1, and started rejecting obsolete line folding
  in Python parser to match -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8146, :issue:8292.

Deprecations (removal in next major release)

• Deprecated content_transfer_encoding parameter in :py:meth:FormData.add_field() <aiohttp.FormData.add_field> -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8280.

Improved documentation

• Added a note about canceling tasks to avoid delaying server shutdown -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8267.

Contributor-facing changes

• The pull request template is now asking the contributors to
  answer a question about the long-term maintenance challenges
  they envision as a result of merging their patches
  -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:8099.

• Updated CI and documentation to use NPM clean install and upgrade
  node to version 18 -- by :user:steverep.

  Related issues and pull requests on GitHub:
  :issue:8116.

• A pytest fixture hello_txt was introduced to aid
  static file serving tests in
  :file:test_web_sendfile_functional.py. It dynamically
  provisions hello.txt file variants shared across the
  tests in the module.

  -- by :user:steverep

  Related issues and pull requests on GitHub:
  :issue:8136.

Packaging updates and notes for downstreams

• Added an internal pytest marker for tests which should be skipped
  by packagers (use -m 'not internal' to disable them) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8299.

---

v3.9.3

Compare Source

==================

Bug fixes

• Fixed backwards compatibility breakage (in 3.9.2) of ssl parameter when set outside
  of ClientSession (e.g. directly in TCPConnector) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:8097, :issue:8098.

Miscellaneous internal changes

• Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.

  Related issues and pull requests on GitHub:
  :issue:3957.

---

v3.9.2

Compare Source

==================

Bug fixes

• Fixed server-side websocket connection leak.

  Related issues and pull requests on GitHub:
  :issue:7978.

• Fixed web.FileResponse doing blocking I/O in the event loop.

  Related issues and pull requests on GitHub:
  :issue:8012.

• Fixed double compress when compression enabled and compressed file exists in server file responses.

  Related issues and pull requests on GitHub:
  :issue:8014.

• Added runtime type check for ClientSession timeout parameter.

  Related issues and pull requests on GitHub:
  :issue:8021.

• Fixed an unhandled exception in the Python HTTP parser on header lines starting with a colon -- by :user:pajod.

  Invalid request lines with anything but a dot between the HTTP major and minor version are now rejected.
  Invalid header field names containing question mark or slash are now rejected.
  Such requests are incompatible with :rfc:9110#section-5.6.2 and are not known to be of any legitimate use.

  Related issues and pull requests on GitHub:
  :issue:8074.

• Improved validation of paths for static resources requests to the server -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:8079.

Features

• Added support for passing :py:data:True to ssl parameter in ClientSession while
  deprecating :py:data:None -- by :user:xiangyan99.

  Related issues and pull requests on GitHub:
  :issue:7698.

Breaking changes

• Fixed an unhandled exception in the Python HTTP parser on header lines starting with a colon -- by :user:pajod.

  Invalid request lines with anything but a dot between the HTTP major and minor version are now rejected.
  Invalid header field names containing question mark or slash are now rejected.
  Such requests are incompatible with :rfc:9110#section-5.6.2 and are not known to be of any legitimate use.

  Related issues and pull requests on GitHub:
  :issue:8074.

Improved documentation

• Fixed examples of fallback_charset_resolver function in the :doc:client_advanced document. -- by :user:henry0312.

  Related issues and pull requests on GitHub:
  :issue:7995.

• The Sphinx setup was updated to avoid showing the empty
  changelog draft section in the tagged release documentation
  builds on Read The Docs -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:8067.

Packaging updates and notes for downstreams

• The changelog categorization was made clearer. The
  contributors can now mark their fragment files more
  accurately -- by :user:webknjaz.

  The new category tags are:

  * ``bugfix``
  
  * ``feature``
  
  * ``deprecation``
  
  * ``breaking`` (previously, ``removal``)
  
  * ``doc``
  
  * ``packaging``
  
  * ``contrib``
  
  * ``misc``
  

  Related issues and pull requests on GitHub:
  :issue:8066.

Contributor-facing changes

• Updated :ref:contributing/Tests coverage <aiohttp-contributing> section to show how we use codecov -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub:
  :issue:7916.

• The changelog categorization was made clearer. The
  contributors can now mark their fragment files more
  accurately -- by :user:webknjaz.

  The new category tags are:

  * ``bugfix``
  
  * ``feature``
  
  * ``deprecation``
  
  * ``breaking`` (previously, ``removal``)
  
  * ``doc``
  
  * ``packaging``
  
  * ``contrib``
  
  * ``misc``
  

  Related issues and pull requests on GitHub:
  :issue:8066.

Miscellaneous internal changes

• Replaced all tmpdir fixtures with tmp_path in test suite.

  Related issues and pull requests on GitHub:
  :issue:3551.

---

fastavro/fastavro (fastavro)

v1.9.4

Compare Source

matplotlib/matplotlib (matplotlib)

v3.8.4: REL: v3.8.4

Compare Source

This is the fourth micro release of the 3.8 series.

Highlights of the 3.8.4 release include:

• Enable building against numpy 2.0; released wheels are built against numpy 2
• macosx: Clean up single-shot timers correctly
• Add a draw during show for macos backend
• Fix color sequence data for Set2 and Set3
• gtk: Ensure pending draws are done before GTK draw
• Update "Created with" url in hand.svg
• Avoid modifying user input to Axes.bar
• fix quiver3d incorrect arrow colors

v3.8.3: REL: v3.8.3

Compare Source

This is the third micro release of the 3.8 series.

Highlights of the 3.8.3 release include:

• Improvements to the MacOS backend
  • Fix hanging on plt.pause
  • Fix warnings about "Secure coding is not enabled for restorable state"
• Fix crash at exit for PGF backend

python/mypy (mypy)

v1.10.0

Compare Source

v1.9.0

Compare Source

pytest-dev/pytest-mock (pytest-mock)

v3.14.0

Compare Source

• #&#8203;415 <https://github.com/pytest-dev/pytest-mock/pull/415>_: MockType and AsyncMockType can be imported from pytest_mock for type annotation purposes.

• #&#8203;420 <https://github.com/pytest-dev/pytest-mock/issues/420>_: Fixed a regression which would cause mocker.patch.object to not being properly cleared between tests.

v3.13.0

Compare Source

• #&#8203;417 <https://github.com/pytest-dev/pytest-mock/pull/417>_: spy now has spy_return_list, which is a list containing all the values returned by the spied function.
• pytest-mock now requires pytest>=6.2.5.
• #&#8203;410 <https://github.com/pytest-dev/pytest-mock/pull/410>: pytest-mock's setup.py file is removed.
  If you relied on this file, e.g. to install pytest using setup.py install,
  please see Why you shouldn't invoke setup.py directly <https://blog.ganssle.io/articles/2021/10/setup-py-deprecated.html#summary> for alternatives.

pytest-dev/pytest-timeout (pytest-timeout)

v2.3.1

Compare Source

scipy/scipy (scipy)

v1.13.0: SciPy 1.13.0

Compare Source

SciPy 1.13.0 Release Notes

SciPy 1.13.0 is the culmination of 3 months of hard work. This
out-of-band release aims to support NumPy 2.0.0, and is backwards
compatible to NumPy 1.22.4. The version of OpenBLAS used to build
the PyPI wheels has been increased to 0.3.26.dev.

This release requires Python 3.9+ and NumPy 1.22.4 or greater.

For running on PyPy, PyPy3 6.0+ is required.

Highlights of this release

• Support for NumPy 2.0.0.
• Interactive examples have been added to the documentation, allowing users
  to run the examples locally on embedded Jupyterlite notebooks in their
  browser.
• Preliminary 1D array support for the COO and DOK sparse formats.
• Several scipy.stats functions have gained support for additional
  axis, nan_policy, and keepdims arguments. scipy.stats also
  has several performance and accuracy improvements.

New features

scipy.integrate improvements

• The terminal attribute of scipy.integrate.solve_ivp events
  callables now additionally accepts integer values to specify a number
  of occurrences required for termination, rather than the previous restriction
  of only accepting a bool value to terminate on the first registered
  event.

scipy.io improvements

• scipy.io.wavfile.write has improved dtype input validation.

scipy.interpolate improvements

• The Modified Akima Interpolation has been added to
  interpolate.Akima1DInterpolator, available via the new method
  argument.
• New method BSpline.insert_knot inserts a knot into a BSpline instance.
  This routine is similar to the module-level scipy.interpolate.insert
  function, and works with the BSpline objects instead of tck tuples.
• RegularGridInterpolator gained the functionality to compute derivatives
  in place. For instance, RegularGridInterolator((x, y), values, method="cubic")(xi, nu=(1, 1)) evaluates the mixed second derivative,
  :math:\partial^2 / \partial x \partial y at xi.
• Performance characteristics of tensor-product spline methods of
  RegularGridInterpolator have been changed: evaluations should be
  significantly faster, while construction might be slower. If you experience
  issues with construction times, you may need to experiment with optional
  keyword arguments solver and solver_args. Previous behavior (fast
  construction, slow evaluations) can be obtained via "*_legacy" methods:
  method="cubic_legacy" is exactly equivalent to method="cubic" in
  previous releases. See gh-19633 for details.

scipy.signal improvements

• Many filter design functions now have improved input validation for the
  sampling frequency (fs).

scipy.sparse improvements

• coo_array now supports 1D shapes, and has additional 1D support for
  min, max, argmin, and argmax. The DOK format now has
  preliminary 1D support as well, though only supports simple integer indices
  at the time of writing.
• Experimental support has been added for pydata/sparse array inputs to
  scipy.sparse.csgraph.
• dok_array and dok_matrix now have proper implementations of
  fromkeys.
• csr and csc formats now have improved setdiag performance.

scipy.spatial improvements

• voronoi_plot_2d now draws Voronoi edges to infinity more clearly
  when the aspect ratio is skewed.

scipy.special improvements

• All Fortran code, namely, AMOS, specfun, and cdflib libraries
  that the majority of special functions depend on, is ported to Cython/C.
• The function factorialk now also supports faster, approximate
  calculation using exact=False.

scipy.stats improvements

• scipy.stats.rankdata and scipy.stats.wilcoxon have been vectorized,
  improving their performance and the performance of hypothesis tests that
  depend on them.
• stats.mannwhitneyu should now be faster due to a vectorized statistic
  calculation, improved caching, improved exploitation of symmetry, and a
  memory reduction. PermutationMethod support was also added.
• scipy.stats.mood now has nan_policy and keepdims support.
• scipy.stats.brunnermunzel now has axis and keepdims support.
• scipy.stats.friedmanchisquare, scipy.stats.shapiro,
  scipy.stats.normaltest, scipy.stats.skewtest,
  scipy.stats.kurtosistest, scipy.stats.f_oneway,
  scipy.stats.alexandergovern, scipy.stats.combine_pvalues, and
  scipy.stats.kstest have gained axis, nan_policy and
  keepdims support.
• scipy.stats.boxcox_normmax has gained a ymax parameter to allow user
  specification of the maximum value of the transformed data.
• scipy.stats.vonmises pdf method has been extended to support
  kappa=0. The fit method is also more performant due to the use of
  non-trivial bounds to solve for kappa.
• High order moment calculations for scipy.stats.powerlaw are now more
  accurate.
• The fit methods of scipy.stats.gamma (with method='mm') and
  scipy.stats.loglaplace are faster and more reliable.
• scipy.stats.goodness_of_fit now supports the use of a custom statistic
  provided by the user.
• scipy.stats.wilcoxon now supports PermutationMethod, enabling
  calculation of accurate p-values in the presence of ties and zeros.
• scipy.stats.monte_carlo_test now has improved robustness in the face of
  numerical noise.
• scipy.stats.wasserstein_distance_nd was introduced to compute the
  Wasserstein-1 distance between two N-D discrete distributions.

Deprecated features

• Complex dtypes in PchipInterpolator and Akima1DInterpolator have
  been deprecated and will raise an error in SciPy 1.15.0. If you are trying
  to use the real components of the passed array, use np.real on y.

Backwards incompatible changes

Other changes

• The second argument of scipy.stats.moment has been renamed to order
  while maintaining backward compatibility.

Authors

• Name (commits)
• h-vetinari (50)
• acceptacross (1) +
• Petteri Aimonen (1) +
• Francis Allanah (2) +
• Jonas Kock am Brink (1) +
• anupriyakkumari (12) +
• Aman Atman (2) +
• Aaditya Bansal (1) +
• Christoph Baumgarten (2)
• Sebastian Berg (4)
• Nicolas Bloyet (2) +
• Matt Borland (1)
• Jonas Bosse (1) +
• Jake Bowhay (25)
• Matthew Brett (1)
• Dietrich Brunn (7)
• Evgeni Burovski (65)
• Matthias Bussonnier (4)
• Tim Butters (1) +
• Cale (1) +
• CJ Carey (5)
• Thomas A Caswell (1)
• Sean Cheah (44) +
• Lucas Colley (97)
• com3dian (1)
• Gianluca Detommaso (1) +
• Thomas Duvernay (1)
• DWesl (2)
• f380cedric (1) +
• fancidev (13) +
• Daniel Garcia (1) +
• Lukas Geiger (3)
• Ralf Gommers (147)
• Matt Haberland (81)
• Tessa van der Heiden (2) +
• Shawn Hsu (1) +
• inky (3) +
• Jannes Münchmeyer (2) +
• Aditya Vidyadhar Kamath (2) +
• Agriya Khetarpal (1) +
• Andrew Landau (1) +
• Eric Larson (7)
• Zhen-Qi Liu (1) +
• Christian Lorentzen (2)
• Adam Lugowski (4)
• m-maggi (6) +
• Chethin Manage (1) +
• Ben Mares (1)
• Chris Markiewicz (1) +
• Mateusz Sokół (3)
• Daniel McCloy (1) +
• Melissa Weber Mendonça (6)
• Josue Melka (1)
• Michał Górny (4)
• Juan Montesinos (1) +
• Juan F. Montesinos (1) +
• Takumasa Nakamura (1)
• Andrew Nelson (27)
• Praveer Nidamaluri (1)
• Yagiz Olmez (5) +
• Dimitri Papadopoulos Orfanos (1)
• Drew Parsons (1) +
• Tirth Patel (7)
• Pearu Peterson (1)
• Matti Picus (3)
• Rambaud Pierrick (1) +
• Ilhan Polat (30)
• Quentin Barthélemy (1)
• Tyler Reddy (117)
• Pamphile Roy (10)
• Atsushi Sakai (8)
• Daniel Schmitz (10)
• Dan Schult (17)
• Eli Schwartz (4)
• Stefanie Senger (1) +
• Scott Shambaugh (2)
• Kevin Sheppard (2)
• sidsrinivasan (4) +
• Samuel St-Jean (1)
• Albert Steppi (31)
• Adam J. Stewart (4)
• Kai Striega (3)
• Ruikang Sun (1) +
• Mike Taves (1)
• Nicolas Tessore (3)
• Benedict T Thekkel (1) +
• Will Tirone (4)
• Jacob Vanderplas (2)
• Christian Veenhuis (1)
• Isaac Virshup (2)
• Ben Wallace (1) +
• Xuefeng Xu (3)
• Xiao Yuan (5)
• Irwin Zaid (8)
• Elmar Zander (1) +
• Mathias Zechmeister (1) +

A total of 96 people contributed to this release.
People with a "+" by their names contributed a patch for the first time.
This list of names is automatically generated, and may not be fully complete.

---

Configuration

📅 Schedule: Branch creation - "every 4th week on Thursday before 10am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.