Bump streamlit from 1.56.0 to 1.57.0 by dependabot[bot] · Pull Request #61 · alphasecio/model-armor

dependabot · 2026-05-02T01:42:08Z

Bumps streamlit from 1.56.0 to 1.57.0.

Release notes

1.57.0

What's Changed

Breaking Changes 🛠

[feature] Make Starlette the default server and remove Tornado by @lukasmasuch in streamlit/streamlit#14553

[chore] Remove deprecated kwargs from plotly_chart and vega_lite_chart by @lukasmasuch in streamlit/streamlit#14800

[chore] Remove deprecated _get_websocket_headers function by @lukasmasuch in streamlit/streamlit#14801

[feature] Direct polars to arrow conversion bypassing pandas by @lukasmasuch in streamlit/streamlit#14885

New Features 🎉

[feature] Hide chevron for menu-style icon labels for st.menu_button and st.popover by @lukasmasuch in streamlit/streamlit#14697

[feature] Add pills, segmented_control properties and dataframe key to AppTest by @lukasmasuch in streamlit/streamlit#14518

[feature] Add title parameter to alert elements by @lukasmasuch in streamlit/streamlit#14665

[feat] Add :shimmer[] markdown directive for animated loading text by @lukasmasuch in streamlit/streamlit#14055

[feature] Expose App in the st namespace by @lukasmasuch in streamlit/streamlit#14722

Bundle OSS developing-with-streamlit core skills in pip package by @sfc-gh-nbellante in streamlit/streamlit#14745

[fix] Add border radius to video and map elements by @lukasmasuch in streamlit/streamlit#14781

[feature] Add secrets parameter to st.App by @lukasmasuch in streamlit/streamlit#14861

Add app and theme templates to bundled skills by @sfc-gh-nbellante in streamlit/streamlit#14746

[feature] Expose st.bottom container by @lukasmasuch in streamlit/streamlit#14726

Bug Fixes 🐛

[feature] Deduplicate equivalent file extensions in file uploader display by @lukasmasuch in streamlit/streamlit#14552

[fix] st.dataframe crash with pandas 3 ArrowStringArray by @lukasmasuch in streamlit/streamlit#14611

fix(caching): chain original exception in UnserializableReturnValueError by @mango766 in streamlit/streamlit#14655

[fix] inconsistent space encoding in query params by @sfc-gh-lwilby in streamlit/streamlit#14691

[fix] Preserve None values in st.data_editor with pandas 3.0+ by @lukasmasuch in streamlit/streamlit#14694

[Fix] Add CSS Color Level 4 support by @mayagbarnes in streamlit/streamlit#14674

[fix] Evict namespace children when watched sources reload by @sfc-gh-lwilby in streamlit/streamlit#14708

[fix] Downcast large Arrow types in custom component v1 serialization by @sfc-gh-nbellante in streamlit/streamlit#14617

[fix] Retain st.radio selection for format_func and custom options by @sfc-gh-lwilby in streamlit/streamlit#14815

Fix bar_chart axis labels not swapping when horizontal=True by @kmcgrady in streamlit/streamlit#14866

[fix] st.text_area height='content' sizing on initial load by @lukasmasuch in streamlit/streamlit#14884

Other Changes

[chore] Update emojis/material icons by @github-actions[bot] in streamlit/streamlit#14576

[chore] Release v1.56.0 by @github-actions[bot] in streamlit/streamlit#14598

Docs for dataframe programmatic selections by @MathCatsAnd in streamlit/streamlit#14616

[chore] Update emojis/material icons by @github-actions[bot] in streamlit/streamlit#14649

[chore] Update emojis/material icons by @github-actions[bot] in streamlit/streamlit#14752

[chore] Update emojis/material icons by @github-actions[bot] in streamlit/streamlit#14869

Docs for audio and video columns by @MathCatsAnd in streamlit/streamlit#14628

New Contributors

@dagecko made their first contribution in streamlit/streamlit#14554

@mango766 made their first contribution in streamlit/streamlit#14655

@sfc-gh-wschmitt made their first contribution in streamlit/streamlit#14922

Full Changelog: streamlit/streamlit@1.56.0...1.57.0

Commits

62ec5f3 Up version to 1.57.0
543575f feat(host-comm): add PRINT_APP host-to-guest postMessage type (#14922)
fa67e32 [feature] Expose st.bottom container (#14726)
e463b41 [feature] Add installed_skills (and agents) telemetry to page profile (#14916)
985fa7b Add app and theme templates to bundled skills (#14746)
bea9013 [feature] Add secrets parameter to st.App (#14861)
b13f0fa [skill] Set minimum height for embedded apps (#14498)
1f7abf9 [feature] Direct polars to arrow conversion bypassing pandas (#14885)
dbacaad [fix] Add border radius to video and map elements (#14781)
5cb5545 Bump ruff from 0.15.10 to 0.15.11 (#14908)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [streamlit](https://github.com/streamlit/streamlit) from 1.56.0 to 1.57.0. - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.56.0...1.57.0) --- updated-dependencies: - dependency-name: streamlit dependency-version: 1.57.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-05-02T01:42:32Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	streamlit@1.56.0 ⏵ 1.57.0	⁺¹

View full report

socket-security · 2026-05-02T01:42:33Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Block		Embedded URLs or IPs: pypi `streamlit` URLs: https://altair-viz.github.io/case_studies/exploring-weather.html, https://docs.streamlit.io, https://docs.streamlit.io/develop/api-reference/media/st.logo, https://docs.streamlit.io/develop/api-reference/configuration/config.toml, https://fonts.google.com/icons?icon.set=Material+Symbols&icon.style=Rounded, https://docs.streamlit.io/develop/api-reference/media/st.image, https://streamlit.io/gallery, https://doc-logo.streamlit.app/, https://docs.python.org/3/library/logging.html#formatter-objects, https://share.streamlit.io, https://share-demo.streamlit.io, https://share-head.streamlit.io, https://share-staging.streamlit.io, https://docs.streamlit.io/develop/concepts/design/custom-classes#enums, http://example.com, https://streamlit.io, https://docs.streamlit.io/replication, https://example.com/theme.toml, https://fonts.googleapis.com/css2?family=Nunito&display=swap, https://fonts.googleapis.com/css2?family=Space+Mono&display=swap, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-example#using-qmark-or-numeric-binding, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-api#object-cursor, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-example, https://docs.snowflake.com/en/developer-guide/snowpark/python/working-with-dataframes, https://docs.snowflake.com/en/developer-guide/snowpark/reference/python/latest/snowpark/session, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-api#label-snowflake-connector-methods-connect, https://pypi.org/project/snowflake-snowpark-python/, https://docs.snowflake.com/en/user-guide/admin-account-identifier, https://docs.streamlit.io/develop/concepts/connections/secrets-management, https://docs.snowflake.com/en/user-guide/key-pair-auth, https://docs.snowflake.com/en/user-guide/admin-security-fed-auth-use#how-browser-based-sso-works, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-connect#connecting-using-the-connections-toml-file, https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-connect#setting-a-default-connection, https://docs.streamlit.io/st.connections.snowflakeconnection-configuration, https://peps.python.org/pep-0249/, https://github.com/python/typeshed/blob/main/stdlib/_typeshed/dbapi.pyi, https://data-apis.org/dataframe-protocol/latest/index.html, https://arrow.apache.org/docs/format/CDataInterface/PyCapsuleInterface.html, https://duckdb.org/docs/api/python/relational_api, https://github.github.com/gfm, https://docs.streamlit.io/develop/api-reference/text/st.markdown, https://github.com/streamlit/streamlit/issues/13063, https://bokeh.pydata.org, https://github.com/streamlit/streamlit-bokeh, https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/AVAILABLE_LANGUAGES_PRISM.MD, https://doc-code.streamlit.app/, https://doc-code-ascii.streamlit.app/, https://github.com/visgl/deck.gl/issues/9986, https://doc-status-exception.streamlit.app/, https://doc-form1.streamlit.app/, https://doc-form2.streamlit.app/, https://docs.streamlit.io/develop/concepts/architecture/forms, https://docs.streamlit.io/develop/concepts/architecture/widget-behavior, https://docs.streamlit.io/develop/api-reference/widgets/st.button, https://doc-header.streamlit.app/, https://doc-subheader.streamlit.app/, https://doc-title.streamlit.app/, https://doc-string.streamlit.app/, https://doc-string1.streamlit.app/, https://doc-string2.streamlit.app/, https://github.com/cure53/DOMPurify, https://doc-html.streamlit.app/, https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/tabindex, https://example.com, https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe, https://docs.streamlit.io/develop/concepts/configuration/serving-static-files, https://doc-image.streamlit.app/, https://static.streamlit.io/examples/cat.jpg, https://static.streamlit.io/examples/dog.jpg, https://static.streamlit.io/examples/owl.jpg, https://doc-columns1.streamlit.app/, https://doc-columns2.streamlit.app/, https://doc-columns-bottom-widgets.streamlit.app/, https://doc-columns-vertical-alignment.streamlit.app/, https://doc-columns-borders.streamlit.app/, https://doc-popover.streamlit.app/, https://doc-popover2.streamlit.app/, https://doc-popover-callback.streamlit.app/, https://doc-status.streamlit.app/, https://doc-status-update.streamlit.app/, http://www.w3.org/2000/svg, https://doc-tabs-lazy-load.streamlit.app/, https://doc-tabs-conditional-outside.streamlit.app/, https://wiki.openstreetmap.org/wiki/Zoom_levels, https://doc-badge.streamlit.app/, https://pandas.pydata.org/docs/reference/api/pandas.Timedelta.html, http://msdn.microsoft.com/en-us/library/windows/hardware/dn653308, https://www.iana.org/assignments/media-types/media-types.xhtml, https://docs.python.org/3/library/datetime.html#timedelta-objects, https://doc-audio-purr.streamlit.app/, https://doc-audio.streamlit.app/, https://youtu.be/_T8LGqJtuGc, https://www.youtube.com/embed/_T8LGqJtuGc, https://www.youtube.com/embed/, https://github.com/ipython/ipython/blob/1015c392f3d50cf4ff3e9f29beede8c1abfdcb2a/IPython/lib/display.py#L146, https://tools.ietf.org/html/rfc4281, https://doc-metric-example1.streamlit.app/, https://doc-metric-example2.streamlit.app/, https://doc-metric-example3.streamlit.app/, https://doc-metric-example4.streamlit.app/, https://doc-metric-example5.streamlit.app/, https://github.com/streamlit/streamlit-pdf, https://example.com/sample.pdf, https://docs.streamlit.io/develop/api-reference/media/st.pdf, https://doc-chart-events-plotly-state.streamlit.app, https://doc-status-progress.streamlit.app/, https://matplotlib.org/stable/gallery/index.html, https://doc-pyplot.streamlit.app/, https://matplotlib.org/faq/usage_faq.html, https://github.com/streamlit/streamlit/issues, https://doc-space-vertical.streamlit.app/, https://doc-space-horizontal.streamlit.app/, https://doc-spinner.streamlit.app/, https://docs.streamlit.io/develop/api-reference/text/st.code, https://doc-text.streamlit.app/, https://docs.streamlit.io/develop/concepts/architecture/caching, https://doc-status-toast.streamlit.app, https://doc-status-toast1.streamlit.app, https://doc-status-toast2.streamlit.app, https://altair-viz.github.io/user_guide/interactions.html#selections-capturing-chart-interactions, https://vega.github.io/vega-lite/docs/selection.html, https://github.com/vega/altair/blob/f345cd9368ae2bbc98628e9245c93fa9fb582621/altair/vegalite/v5/api.py#L196, https://github.com/vega/altair/blob/f345cd9368ae2bbc98628e9245c93fa9fb582621/altair/vegalite/v5/api.py#L2885, https://github.com/vega/altair/issues/3416, https://github.com/vega/altair/issues/3416#issuecomment-2098530464, https://docs.streamlit.io/develop/api-reference/charts/st.area_chart, https://docs.streamlit.io/develop/api-reference/charts/st.bar_chart, https://doc-scatter-chart.streamlit.app/, https://doc-scatter-chart1.streamlit.app/, https://doc-scatter-chart2.streamlit.app/, https://altair-viz.github.io/, https://altair-viz.github.io/gallery/, https://altair-viz.github.io/user_guide/interactions.html, https://doc-vega-lite-chart.streamlit.app/, https://github.com/streamlit/streamlit/issues/8516, https://doc-audio-input.streamlit.app/, https://doc-audio-input-high-rate.streamlit.app/, https://docs.streamlit.io/develop/api-reference/execution-flow/st.form, https://doc-buton.streamlit.app/, https://doc-button-icons.streamlit.app/, https://doc-button-shortcuts.streamlit.app/, https://docs.streamlit.io/develop/concepts/architecture/fragments, https://doc-download-button-csv.streamlit.app/, https://doc-download-button-text.streamlit.app/, https://doc-download-button-file.streamlit.app/, https://doc-download-button-deferred.streamlit.app/, https://doc-link-button.streamlit.app/, https://doc-camera-input.streamlit.app/, https://doc-chat-message-user.streamlit.app/, https://doc-chat-message-user1.streamlit.app/, https://doc-checkbox.streamlit.app/, https://doc-toggle.streamlit.app/, https://doc-color-picker.streamlit.app/, https://doc-file-uploader.streamlit.app/, https://doc-file-uploader-directory.streamlit.app/, https://doc-menu-button.streamlit.app/, https://doc-multiselect.streamlit.app/, https://doc-multiselect-accept-new-options.streamlit.app/, https://github.com/alexei/sprintf.js?tab=readme-ov-file#format-specification, https://doc-number-input.streamlit.app/, https://doc-number-input-empty.streamlit.app/, https://doc-radio.streamlit.app/, https://doc-radio-empty.streamlit.app/, https://doc-select-slider.streamlit.app/, https://doc-selectbox.streamlit.app/, https://doc-selectbox-empty.streamlit.app/, https://doc-selectbox-accept-new-options.streamlit.app/, https://momentjs.com/docs/#/displaying/format/, https://doc-slider.streamlit.app/, https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete, https://doc-text-input.streamlit.app/, https://doc-time-input.streamlit.app/, https://doc-time-input-empty.streamlit.app/, https://doc-datetime-input.streamlit.app/, https://doc-datetime-input-empty.streamlit.app/, https://doc-date-input.streamlit.app/, https://doc-date-input1.streamlit.app/, https://doc-date-input-empty.streamlit.app/, https://docs.streamlit.io/develop/tutorials/llms, https://doc-write-stream-data.streamlit.app/, https://docs.streamlit.io/develop/api-reference/layout/st.columns, https://bugs.python.org/issue24658, https://streamlit-demo-data.s3-us-west-2.amazonaws.com, http://data.un.org/Explorer.aspx, https://discuss.streamlit.io, https://github.com/streamlit/demo-self-driving, https://github.com/streamlit/demo-uber-nyc-pickups, https://raw.githubusercontent.com/streamlit/, https://docs.streamlit.io/st.page.automatic-page-labels, https://docs.streamlit.io/st.page.automatic-page-urls, http://checkip.amazonaws.com, https://checkip.amazonaws.com, https://docs.streamlit.io/, https://stackoverflow.com/a/28950776, https://docs.python.org/3/library/pickle.html, https://github.com/streamlit/streamlit/issues/new/choose, https://docs.streamlit.io/develop/api-reference/connections/st.connections.snowflakeconnection, https://docs.streamlit.io/develop/api-reference/connections/st.connections.snowparkconnection, https://docs.streamlit.io/develop/api-reference/connections/st.connections.sqlconnection, https://developer.mozilla.org/en-US/docs/Web/API/Navigator/language, https://data.streamlit.io/metrics.json, https://streamlit.io/privacy-policy, https://github.com/streamlit/streamlit/issues/14324, https://github.com/ipython/ipython/blob/master/IPython/utils/syspathcontext.py#L42, https://docs.streamlit.io/deploy/streamlit-community-cloud/deploy-your-app/secrets-management, https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#create-a-pod-that-has-access-to-the-secret-data-through-a-volume, https://docs.snowflake.com/en/developer-guide/snowpark-container-services/additional-considerations-services-jobs#passing-secrets-in-local-container-files, https://docs.streamlit.io/develop/concepts/architecture/session-state#initialization, https://docs.streamlit.io/knowledge-base/using-streamlit/serializable-session-state, https://fonts.googleapis.com/css2?family=Tagesschrift&display=swap, https://use.typekit.net/xxs7euo.css, http://www.Gossamer-Threads.com/lists/python/dev/1142178, http://forum.omz-software.com/user/mrjean1, https://github.com/streamlit/streamlit/issues/13954 Location: Package overview From: requirements.txt → `pypi/streamlit@1.57.0` ℹ Read more on: This package \| This alert \| What are URL strings? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/streamlit@1.57.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 2, 2026

Navigation Menu

Uh oh!

Bump streamlit from 1.56.0 to 1.57.0 - #61

Bump streamlit from 1.56.0 to 1.57.0#61
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/streamlit-1.57.0

dependabot Bot commented on behalf of github May 2, 2026

Uh oh!

socket-security Bot commented May 2, 2026

Uh oh!

socket-security Bot commented May 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 2, 2026

1.57.0

What's Changed

Breaking Changes 🛠

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

Uh oh!

socket-security Bot commented May 2, 2026

Uh oh!

socket-security Bot commented May 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants