Skip to content

Bump the python-packages group across 1 directory with 5 updates#30

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-packages-cb1c21588c
Open

Bump the python-packages group across 1 directory with 5 updates#30
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-packages-cb1c21588c

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 2, 2026 •
edited
Loading

Bumps the python-packages group with 5 updates in the / directory:

Package From To
cvxpy 1.5.3 1.8.1
eel 0.17.0 0.18.2
gspread 6.1.4 6.2.1
mip 1.15.0 1.17.1
pyinstaller 6.11.1 6.19.0

Updates cvxpy from 1.5.3 to 1.8.1

Release notes

Sourced from cvxpy's releases.

v1.8.1

PR Title Type
#3093 Fix IndexError with transformed parameters in parametric reshape Bug fix
#3094 Add KNITRO solver installation instructions to documentation Docs
#3099 Remove Google Analytics from documentation Docs
#3113 Use balanced tree for PowConeND to PowCone3D decomposition Bug fix
#3114 Add CVXPY Workshop 2026 website Docs
#3115 Add HiGHS and Moreau to related projects Docs
#3116 Fix cvxpy-base dependencies Bug fix

This new release totaled 7 PRs from 3 contributors.

v1.8.0

CVXPY 1.8

This release is consistent with our semantic versioning guarantee. It comes packed with many new features, bug fixes, and performance improvements.

This version of CVXPY supports Python 3.11 through 3.14. We will support CVXPY 1.8 with bugfixes while developing the 1.9 release. CVXPY 1.7 and older are no longer supported.

Adoption of SPEC 0

In this release we decided to adopt the minimum supported dependencies SPEC (Scientific Python Ecosystem Coordination). Notably, this means that we have dropped support for Python 3.10 and NumPy < 2.0.

New canonicalization backend

This release introduces a new backend which can handle a very large number of parameters. To use the backend, please specify the argument canon_backend="COO" when solving a DPP problem.

New default MILP solver

CVXPY adds the open source solver HiGHS as its default mixed-integer linear programming (MILP) solver. HiGHS is a high performance serial and parallel solver for large scale sparse linear optimization problems developed by a team from the University of Edinburgh.

Power cone canonicalization

Four atoms, power, geo_mean, pnorm, and inv_prod now take a parameter approx that determines whether CVXPY canonicalizes the atom using many SOCs or one power cone. Feel free to set approx=False and report on whether it improves performance or accuracy!

Logical boolean operations

CVXPY now supports logical boolean operations on boolean expressions via the cp.logic module. The new atoms are cp.logic.AND, cp.logic.OR, cp.logic.NOT, and cp.logic.XOR.

New features

  • DPP with complex expressions
  • Support for ND matmul
  • Support for ND cumsum

... (truncated)

Commits

Updates eel from 0.17.0 to 0.18.2

Release notes

Sourced from eel's releases.

v0.18.2

Remove pkg_resources; use importlib.resources

v0.18.1

Fixes v0.18.0, which was missing typing_extensions as a requirement.

v0.18.0

What's Changed

New Contributors

Full Changelog: python-eel/Eel@v0.17.0...v0.18.0

Changelog

Sourced from eel's changelog.

0.18.2

0.18.1

  • Fix: Include typing_extensions in install requirements.

0.18.0

  • Added support for MS Internet Explorer in #744.
  • Added supported for app_mode in the Edge browser in #744.
  • Improved type annotations in #683.
Commits

Updates gspread from 6.1.4 to 6.2.1

Release notes

Sourced from gspread's releases.

v6.2.1

What's Changed

New Contributors

Full Changelog: burnash/gspread@v6.2.0...v6.2.1

v6.2.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from gspread's changelog.

6.2.1 (2025-05-14)

6.2.0 (2025-02-27)

Commits
  • cc7a64f Release v6.2.1
  • 07cc03b Merge pull request #1548 from NickCrews/patch-1
  • 0b23bde Merge branch 'master' into patch-1
  • 67e03ca Merge pull request #1551 from burnash/fix/safety-pip-audit
  • 3c97bcd fixup: iterate over the right thing in get_dupes()
  • a64b3a3 Merge pull request #1525 from burnash/fix/creds-mentioned-before-assignment
  • ff9809d switch safety for pip-audit
  • fafb339 switch safety for pip-audit
  • 3cd4fe8 CI: update lintint action
  • e76a8d9 Include duplicate column names in error message
  • Additional commits viewable in compare view

Updates mip from 1.15.0 to 1.17.1

Changelog

Sourced from mip's changelog.

Changelog — python-mip 1.17

Changes since 1.15.0 (1.16 was an unreleased RC)

New Features

HiGHS Solver Support

python-mip now ships with full support for the HiGHS open-source solver as a first-class backend (alongside CBC and Gurobi). HiGHS is a high-performance solver for LP and MIP problems with a permissive MIT licence.

Key capabilities added:

  • Full LP and MIP solve via HiGHS C API (through highsbox)
  • Warm-start (basis handoff) for LP re-solves
  • relax=True support in optimize()
  • Variable and constraint inspection/modification
  • Correct handling of UNBOUNDED vs INFEASIBLE status
  • Reduced memory footprint and improved file read/write consistency

HiGHS is installed as an optional dependency: pip install mip[highs].

macOS Apple Silicon (M1/M2/M3) Native Support

CBC now runs natively on Apple Silicon via a pre-built ARM64 binary, replacing the previous Rosetta 2 x86_64 fallback.

Infrastructure & Distribution

CBC Binaries via cbcbox

The bundled CBC shared libraries (.so, .dylib, .dll) have been removed from the python-mip source tree. CBC binaries are now distributed through the cbcbox PyPI package, which provides pre-built wheels for:

  • Linux x86_64 and aarch64 (ARM64)
  • macOS x86_64 and arm64
  • Windows x64

cbcbox is a dedicated package whose sole job is to ship up-to-date CBC binaries for all major platforms. This decoupling means future CBC upgrades are released without touching python-mip itself. The minimum required version is cbcbox>=2.902.

Automated PyPI Publishing

A new GitHub Actions workflow (.github/workflows/publish.yml) automatically publishes to PyPI whenever a v* tag is pushed. It uses OIDC Trusted Publisher authentication — no API tokens to rotate.

Modernised CI Matrix

... (truncated)

Commits
  • 583802a chore: bump cbcbox requirement to >=2.910
  • 9df5492 chore: require cbcbox>=2.909
  • effba23 update CutType C enum in ffi.cdef to match cbcbox 2.908
  • d6096f4 bump cbcbox minimum requirement to 2.908
  • 4c96b55 docs: add CHANGELOG and release announcement for v1.17
  • 65ed45e ci: retrigger after cbcbox 2.902 PyPI propagation delay
  • 02f61a3 cbc: use libCbc-0.dll for Windows (cbcbox 2.902), bump requirement
  • 499b8ac cbc: fix isfile import and Cbc_reset before re-solve
  • 62a0ee6 cbc: add FileNotFoundError for missing libCbc.dll on Windows
  • 3f35f99 Exclude pypy3.11 on windows-2025 from CI matrix
  • Additional commits viewable in compare view

Updates pyinstaller from 6.11.1 to 6.19.0

Release notes

Sourced from pyinstaller's releases.

v6.19.0

Please see the v6.19.0 section of the changelog for a list of the changes since v6.18.0.

v6.18.0

Please see the v6.18.0 section of the changelog for a list of the changes since v6.17.0.

v6.17.0

Please see the v6.17.0 section of the changelog for a list of the changes since v6.16.0.

v6.16.0

Please see the v6.16.0 section of the changelog for a list of the changes since v6.15.0.

v6.15.0

Please see the v6.15.0 section of the changelog for a list of the changes since v6.14.2.

v6.14.2

Please see the v6.14.2 section of the changelog for a list of the changes since v6.14.1.

v6.14.1

Please see the v6.14.1 section of the changelog for a list of the changes since v6.14.0.

v6.14.0

Please see the v6.14.0 section of the changelog for a list of the changes since v6.13.0.

v6.13.0

Please see the v6.13.0 section of the changelog for a list of the changes since v6.12.0.

v6.12.0

Please see the v6.12.0 section of the changelog for a list of the changes since v6.11.1.

Changelog

Sourced from pyinstaller's changelog.

6.19.0 (2026-02-14)

Bugfix


* (Windows) Fix collection of ``numpy`` DLLs when ``numpy`` PyPI wheel is
  installed using ``uv`` instead of ``pip``. (:issue:`9360`)
* Extend suppression of missing ``api-ms-win-*.dll`` warnings to Windows Server
  (formerly Windows 10 and 11). (:issue:`9355`)
* (Conda) Fix error during initialization of the `conda` hook utility module in
  Anaconda environments where the metadata for packages with no dependencies
  omit their *dependencies* key. (:issue:`9345`)

Hooks



* (Windows) Fix installer check in ``numpy`` hook to enable explicit collection
  of DLLs from ``numpy.libs`` directory when ``numpy`` PyPI wheels are installed
  through an installer other than ``pip`` - for example, ``uv``. (:issue:`9365`)
* (Windows) Update the ``pandas`` hook to explicitly collect the DLLs
  from ``pandas.libs`` directory that has been used in Windows PyPI wheels
  since ``pandas`` 2.1.0. (:issue:`9365`)

6.18.0 (2026-01-13)


Features

</code></pre>

<ul>

<li>Implement support for Tcl/Tk 9 in splash screen. (:issue:<code>9313</code>)</li>

</ul>

<p>Bugfix</p>

<pre><code>


    

  • (macOS) Improve the .framework bundle fix-up code to remove file entries
    
that would be placed under restored symlinked directories. This fixes
    
file-already-exists errors at build time (onedir) or run-time (onefile)
    
when user or a hook tries to collect (all) files from a package that
    
ships a .framework bundle with symlinks mangled into hard-copies
    
(for example, due to lack of symlink support in PyPI wheels). (:issue:9335)
    • 

  • Have hook for stdlib platform module exclude the _ios_support
    
module when sys.platform != 'ios'. This prevents unnecessary
    
collection of ctypes-imported libobjc shared library if the
    
latter happens to be available on the build system. (:issue:9333)
    • 



&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/9ae6e2afa4e55c3a784ec88ac74a71688a2a37c8&quot;&gt;&lt;code&gt;9ae6e2a&lt;/code&gt;&lt;/a> Release v6.19.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/50eebf41d1b9309000b4ca6a74c0cc3c3f9b6a73&quot;&gt;&lt;code&gt;50eebf4&lt;/code&gt;&lt;/a> ci: cygwin: add the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a09778bb289fc24fb34dc675a9e71d3f09794a0a&quot;&gt;&lt;code&gt;a09778b&lt;/code&gt;&lt;/a> ci: extend the work-around for broken setuptools upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/a7f87e58c2023ff699610b6af47f4fe4b3a12313&quot;&gt;&lt;code&gt;a7f87e5&lt;/code&gt;&lt;/a> tests: port remaining metadata tests to importlib.metadata</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/2e751ba399ccf10f0aeb843cbb2f183c22509a6b&quot;&gt;&lt;code&gt;2e751ba&lt;/code&gt;&lt;/a> tests: add missing importorskip('pkg_resources') decorators</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/611f658dae8881eab3f2264bb90aac136a2152aa&quot;&gt;&lt;code&gt;611f658&lt;/code&gt;&lt;/a> tests: update setuptools to 82.0.0</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/38ae78854b07bd33359929c6d1a9df52c4544085&quot;&gt;&lt;code&gt;38ae788&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 06 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9369&quot;&gt;#9369&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/e937d76ea5e2177f295488bcaaa6d641adc328cf&quot;&gt;&lt;code&gt;e937d76&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 05 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9366&quot;&gt;#9366&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/ce6d02ce7ac3d19a6b5a4ef57775d589bc125b4d&quot;&gt;&lt;code&gt;ce6d02c&lt;/code&gt;&lt;/a> hooks: pandas: use delvewheel hook utility function to collect DLLs</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/f0ee7305a607969fee6c02b76e387669df0e0ad7&quot;&gt;&lt;code&gt;f0ee730&lt;/code&gt;&lt;/a> hooks: numpy: relax installer-type check for delvewheel codepath</li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.11.1...v6.19.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    •

@dependabot
Bump the python-packages group across 1 directory with 5 updates
2c31053 
Bumps the python-packages group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cvxpy](https://github.com/cvxpy/cvxpy) | `1.5.3` | `1.8.1` |
| [eel](https://github.com/python-eel/Eel) | `0.17.0` | `0.18.2` |
| [gspread](https://github.com/burnash/gspread) | `6.1.4` | `6.2.1` |
| [mip](https://github.com/coin-or/python-mip) | `1.15.0` | `1.17.1` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.11.1` | `6.19.0` |



Updates `cvxpy` from 1.5.3 to 1.8.1
- [Release notes](https://github.com/cvxpy/cvxpy/releases)
- [Commits](cvxpy/cvxpy@v1.5.3...v1.8.1)

Updates `eel` from 0.17.0 to 0.18.2
- [Release notes](https://github.com/python-eel/Eel/releases)
- [Changelog](https://github.com/python-eel/Eel/blob/main/CHANGELOG.md)
- [Commits](python-eel/Eel@v0.17.0...v0.18.2)

Updates `gspread` from 6.1.4 to 6.2.1
- [Release notes](https://github.com/burnash/gspread/releases)
- [Changelog](https://github.com/burnash/gspread/blob/master/HISTORY.rst)
- [Commits](burnash/gspread@v6.1.4...v6.2.1)

Updates `mip` from 1.15.0 to 1.17.1
- [Release notes](https://github.com/coin-or/python-mip/releases)
- [Changelog](https://github.com/coin-or/python-mip/blob/master/CHANGELOG.md)
- [Commits](coin-or/python-mip@1.15.0...v1.17.1)

Updates `pyinstaller` from 6.11.1 to 6.19.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.11.1...v6.19.0)

---
updated-dependencies:
- dependency-name: cvxpy
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: eel
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: gspread
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: mip
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pyinstaller
  dependency-version: 6.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants