Skip to content

Update matplotlib requirement from >=3.7.0 to >=3.10.9#11

Open
dependabot[bot] wants to merge 19 commits into
mainfrom
dependabot/pip/matplotlib-gte-3.10.9
Open

Update matplotlib requirement from >=3.7.0 to >=3.10.9#11
dependabot[bot] wants to merge 19 commits into
mainfrom
dependabot/pip/matplotlib-gte-3.10.9

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Updates the requirements on matplotlib to permit the latest version.

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

  • Various minor bug and doc fixes
  • Security hardening validation of cyclers - Removing eval usage
  • Security hardening in Latex and PS calls - Removing shell escapes
Commits
  • dd8d78b REL: v3.10.9
  • 2fb1891 REL: Release prep v3.10.9
  • d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
  • 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
  • a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
  • a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
  • 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
  • b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
  • acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
  • e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
  • Additional commits viewable in compare view

Eugen Goebel and others added 16 commits March 26, 2026 21:07
- Add GitHub Actions workflow for automated testing on Python 3.10-3.12
- Add shields.io badges for Python version, test count, tech stack, and license
Moved scaling from preprocessor to model trainer so the scaler is fitted
only on training data and then applied to test data, preventing data leakage.
Define parameter grids for all candidate models (classification and
regression). Add _tune_candidates() method that runs GridSearchCV on
each model before the cross-validation comparison. Best parameters are
stored in TrainingResult for reporting.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Pass tune parameter from CLI to orchestrator to model trainer. Shows
tuning status in pipeline output.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
7 new tests: tuned classification/regression, best_params returned,
four models compared after tuning, best score matches, param grids
exist, default not tuned.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add hyperparameter tuning with GridSearchCV
Data analysis pipeline, model comparison, and evaluation results
captured with the bundled Customer Churn sample dataset.
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 6, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

eugen-goebel and others added 3 commits May 7, 2026 01:12
- Pin pandas<3 and numpy<3 to avoid breaking-API surprises on hosted
  resolves where pip pulls the latest major
- Add openpyxl so Excel uploads (xlsx) work out of the box without
  relying on a transitive dep
- Reserve a live-demo placeholder in the README
Updates the requirements on [matplotlib](https://github.com/matplotlib/matplotlib) to permit the latest version.
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.7.0...v3.10.9)

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/matplotlib-gte-3.10.9 branch from c07ea32 to 747efdc Compare May 6, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant