chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
asgiref (changelog)	==3.7.2 -> ==3.8.1
contourpy (changelog)	==1.2.0 -> ==1.2.1
django (source, changelog)	==5.0.3 -> ==5.0.4
lxml (source, changelog)	==5.1.0 -> ==5.2.1
pillow (changelog)	==10.2.0 -> ==10.3.0
pycparser	==2.21 -> ==2.22
pyhanko (changelog)	==0.23.1 -> ==0.23.2
reportlab	==4.0.9 -> ==4.1.0
scipy (source)	==1.12.0 -> ==1.13.0
threadpoolctl	==3.3.0 -> ==3.4.0

---

Release Notes

django/asgiref (asgiref)

v3.8.1

Compare Source

• Fixes a regression in 3.8.0 affecting nested task cancellation inside
  sync_to_async.

v3.8.0

Compare Source

• Adds support for Python 3.12.

• Drops support for (end-of-life) Python 3.7.

• Fixes task cancellation propagation to subtasks when using synchronous Django
  middleware.

• Allows nesting sync_to_async via asyncio.wait_for.

• Corrects WSGI adapter handling of root path.

• Handles case where "client" is None in WsgiToAsgi adapter.

contourpy/contourpy (contourpy)

v1.2.1: Version 1.2.1

Compare Source

ContourPy 1.2.1 is a compatibility release to support NumPy 2.

This release supports Python 3.9 to 3.12.

Thanks to new contributor @​motoro and core maintainer @​ianthomas23.

Compatibility:

• Support NumPy 2 (#​331, #​371, #​372)

Code improvements:

• Fix a few f-strings (#​332)

Documentation improvements:

• Clarify use of quotes in pip install (#​349)

Build, testing and CI improvements:

• Improved linting (#​322, #​323, #​333, #​337)
• Update cppcheck to 2.11 (#​324)
• Support running tests on unicore hosts (#​327)
• Improved tests against nightly wheels (#​329, #​373)
• Update to chromium 118 for Bokeh renderer tests (#​325)
• Add CI run using earliest supported numpy (#​347)

lxml/lxml (lxml)

v5.2.1

Compare Source

==================

Bugs fixed

• LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to
  "core2", but with SSE 4.2 enabled.

• LP#2059977: Element.iterfind("//absolute_path") failed with a SyntaxError
  where it should have issued a warning.

• GH#416: The documentation build was using the non-standard which command.
  Patch by Michał Górny.

v5.2.0

Compare Source

==================

Other changes

• LP#1958539: The lxml.html.clean implementation suffered from several (only if used)
  security issues in the past and was now extracted into a separate library:

  https://github.com/fedora-python/lxml_html_clean

  Projects that use lxml without "lxml.html.clean" will not notice any difference,
  except that they won't have potentially vulnerable code installed.
  The module is available as an "extra" setuptools dependency "lxml[html_clean]",
  so that Projects that need "lxml.html.clean" will need to switch their requirements
  from "lxml" to "lxml[html_clean]", or install the new library themselves.

• The minimum CPU architecture for the Linux x86 binary wheels was upgraded to
  "sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux_2_28) wheels were added.

• Built with Cython 3.0.10.

v5.1.1

Compare Source

==================

Bugs fixed

• LP#2048920: iterlinks() in lxml.html rejected bytes input in 5.1.0.

• High source line numbers from the parser are no longer truncated
  (up to a C long) when using libxml2 2.11 or later.

Other changes

• GH#407: A compatibility test was adapted to recent expat versions.
  Patch by Miro Hrončok.

• Binary wheels use the library versions libxml2 2.12.6 and libxslt 1.1.39.

• Windows binary wheels use the library versions libxml2 2.11.7 and libxslt 1.1.39.

• Built with Cython 3.0.9.

python-pillow/Pillow (pillow)

v10.3.0

Compare Source

• CVE-2024-28219: Use strncpy to avoid buffer overflow #​7928
  [radarhere, hugovk]

• Deprecate eval(), replacing it with lambda_eval() and unsafe_eval() #​7927
  [radarhere, hugovk]

• Raise ValueError if seeking to greater than offset-sized integer in TIFF #​7883
  [radarhere]

• Add --report argument to main.py to omit supported formats #​7818
  [nulano, radarhere, hugovk]

• Added RGB to I;16, I;16L, I;16B and I;16N conversion #​7918, #​7920
  [radarhere]

• Fix editable installation with custom build backend and configuration options #​7658
  [nulano, radarhere]

• Fix putdata() for I;16N on big-endian #​7209
  [Yay295, hugovk, radarhere]

• Determine MPO size from markers, not EXIF data #​7884
  [radarhere]

• Improved conversion from RGB to RGBa, LA and La #​7888
  [radarhere]

• Support FITS images with GZIP_1 compression #​7894
  [radarhere]

• Use I;16 mode for 9-bit JPEG 2000 images #​7900
  [scaramallion, radarhere]

• Raise ValueError if kmeans is negative #​7891
  [radarhere]

• Remove TIFF tag OSUBFILETYPE when saving using libtiff #​7893
  [radarhere]

• Raise ValueError for negative values when loading P1-P3 PPM images #​7882
  [radarhere]

• Added reading of JPEG2000 palettes #​7870
  [radarhere]

• Added alpha_quality argument when saving WebP images #​7872
  [radarhere]

• Fixed joined corners for ImageDraw rounded_rectangle() non-integer dimensions #​7881
  [radarhere]

• Stop reading EPS image at EOF marker #​7753
  [radarhere]

• PSD layer co-ordinates may be negative #​7706
  [radarhere]

• Use subprocess with CREATE_NO_WINDOW flag in ImageShow WindowsViewer #​7791
  [radarhere]

• When saving GIF frame that restores to background color, do not fill identical pixels #​7788
  [radarhere]

• Fixed reading PNG iCCP compression method #​7823
  [radarhere]

• Allow writing IFDRational to UNDEFINED tag #​7840
  [radarhere]

• Fix logged tag name when loading Exif data #​7842
  [radarhere]

• Use maximum frame size in IHDR chunk when saving APNG images #​7821
  [radarhere]

• Prevent opening P TGA images without a palette #​7797
  [radarhere]

• Use palette when loading ICO images #​7798
  [radarhere]

• Use consistent arguments for load_read and load_seek #​7713
  [radarhere]

• Turn off nullability warnings for macOS SDK #​7827
  [radarhere]

• Fix shift-sign issue in Convert.c #​7838
  [r-barnes, radarhere]

• Open 16-bit grayscale PNGs as I;16 #​7849
  [radarhere]

• Handle truncated chunks at the end of PNG images #​7709
  [lajiyuan, radarhere]

• Match mask size to pasted image size in GifImagePlugin #​7779
  [radarhere]

• Release GIL while calling WebPAnimDecoderGetNext #​7782
  [evanmiller, radarhere]

• Fixed reading FLI/FLC images with a prefix chunk #​7804
  [twolife]

• Update wl-paste handling and return None for some errors in grabclipboard() on Linux #​7745
  [nik012003, radarhere]

• Remove execute bit from setup.py #​7760
  [hugovk]

• Do not support using test-image-results to upload images after test failures #​7739
  [radarhere]

• Changed ImageMath.ops to be static #​7721
  [radarhere]

• Fix APNG info after seeking backwards more than twice #​7701
  [esoma, radarhere]

• Deprecate ImageCms constants and versions() function #​7702
  [nulano, radarhere]

• Added PerspectiveTransform #​7699
  [radarhere]

• Add support for reading and writing grayscale PFM images #​7696
  [nulano, hugovk]

• Add LCMS2 flags to ImageCms #​7676
  [nulano, radarhere, hugovk]

• Rename x64 to AMD64 in winbuild #​7693
  [nulano]

MatthiasValvekens/pyHanko (pyhanko)

v0.23.2: pyHanko 0.23.2 beta

Compare Source

The release artifacts have been published to PyPI. Documentation is available on ReadTheDocs.

Change log

The release notes for the 0.23.2 release are available on the Release History page

scipy/scipy (scipy)

v1.13.0: SciPy 1.13.0

Compare Source

SciPy 1.13.0 Release Notes

SciPy 1.13.0 is the culmination of 3 months of hard work. This
out-of-band release aims to support NumPy 2.0.0, and is backwards
compatible to NumPy 1.22.4. The version of OpenBLAS used to build
the PyPI wheels has been increased to 0.3.26.dev.

This release requires Python 3.9+ and NumPy 1.22.4 or greater.

For running on PyPy, PyPy3 6.0+ is required.

Highlights of this release

• Support for NumPy 2.0.0.
• Interactive examples have been added to the documentation, allowing users
  to run the examples locally on embedded Jupyterlite notebooks in their
  browser.
• Preliminary 1D array support for the COO and DOK sparse formats.
• Several scipy.stats functions have gained support for additional
  axis, nan_policy, and keepdims arguments. scipy.stats also
  has several performance and accuracy improvements.

New features

scipy.integrate improvements

• The terminal attribute of scipy.integrate.solve_ivp events
  callables now additionally accepts integer values to specify a number
  of occurrences required for termination, rather than the previous restriction
  of only accepting a bool value to terminate on the first registered
  event.

scipy.io improvements

• scipy.io.wavfile.write has improved dtype input validation.

scipy.interpolate improvements

• The Modified Akima Interpolation has been added to
  interpolate.Akima1DInterpolator, available via the new method
  argument.
• New method BSpline.insert_knot inserts a knot into a BSpline instance.
  This routine is similar to the module-level scipy.interpolate.insert
  function, and works with the BSpline objects instead of tck tuples.
• RegularGridInterpolator gained the functionality to compute derivatives
  in place. For instance, RegularGridInterolator((x, y), values, method="cubic")(xi, nu=(1, 1)) evaluates the mixed second derivative,
  :math:\partial^2 / \partial x \partial y at xi.
• Performance characteristics of tensor-product spline methods of
  RegularGridInterpolator have been changed: evaluations should be
  significantly faster, while construction might be slower. If you experience
  issues with construction times, you may need to experiment with optional
  keyword arguments solver and solver_args. Previous behavior (fast
  construction, slow evaluations) can be obtained via "*_legacy" methods:
  method="cubic_legacy" is exactly equivalent to method="cubic" in
  previous releases. See gh-19633 for details.

scipy.signal improvements

• Many filter design functions now have improved input validation for the
  sampling frequency (fs).

scipy.sparse improvements

• coo_array now supports 1D shapes, and has additional 1D support for
  min, max, argmin, and argmax. The DOK format now has
  preliminary 1D support as well, though only supports simple integer indices
  at the time of writing.
• Experimental support has been added for pydata/sparse array inputs to
  scipy.sparse.csgraph.
• dok_array and dok_matrix now have proper implementations of
  fromkeys.
• csr and csc formats now have improved setdiag performance.

scipy.spatial improvements

• voronoi_plot_2d now draws Voronoi edges to infinity more clearly
  when the aspect ratio is skewed.

scipy.special improvements

• All Fortran code, namely, AMOS, specfun, and cdflib libraries
  that the majority of special functions depend on, is ported to Cython/C.
• The function factorialk now also supports faster, approximate
  calculation using exact=False.

scipy.stats improvements

• scipy.stats.rankdata and scipy.stats.wilcoxon have been vectorized,
  improving their performance and the performance of hypothesis tests that
  depend on them.
• stats.mannwhitneyu should now be faster due to a vectorized statistic
  calculation, improved caching, improved exploitation of symmetry, and a
  memory reduction. PermutationMethod support was also added.
• scipy.stats.mood now has nan_policy and keepdims support.
• scipy.stats.brunnermunzel now has axis and keepdims support.
• scipy.stats.friedmanchisquare, scipy.stats.shapiro,
  scipy.stats.normaltest, scipy.stats.skewtest,
  scipy.stats.kurtosistest, scipy.stats.f_oneway,
  scipy.stats.alexandergovern, scipy.stats.combine_pvalues, and
  scipy.stats.kstest have gained axis, nan_policy and
  keepdims support.
• scipy.stats.boxcox_normmax has gained a ymax parameter to allow user
  specification of the maximum value of the transformed data.
• scipy.stats.vonmises pdf method has been extended to support
  kappa=0. The fit method is also more performant due to the use of
  non-trivial bounds to solve for kappa.
• High order moment calculations for scipy.stats.powerlaw are now more
  accurate.
• The fit methods of scipy.stats.gamma (with method='mm') and
  scipy.stats.loglaplace are faster and more reliable.
• scipy.stats.goodness_of_fit now supports the use of a custom statistic
  provided by the user.
• scipy.stats.wilcoxon now supports PermutationMethod, enabling
  calculation of accurate p-values in the presence of ties and zeros.
• scipy.stats.monte_carlo_test now has improved robustness in the face of
  numerical noise.
• scipy.stats.wasserstein_distance_nd was introduced to compute the
  Wasserstein-1 distance between two N-D discrete distributions.

Deprecated features

• Complex dtypes in PchipInterpolator and Akima1DInterpolator have
  been deprecated and will raise an error in SciPy 1.15.0. If you are trying
  to use the real components of the passed array, use np.real on y.

Backwards incompatible changes

Other changes

• The second argument of scipy.stats.moment has been renamed to order
  while maintaining backward compatibility.

Authors

• Name (commits)
• h-vetinari (50)
• acceptacross (1) +
• Petteri Aimonen (1) +
• Francis Allanah (2) +
• Jonas Kock am Brink (1) +
• anupriyakkumari (12) +
• Aman Atman (2) +
• Aaditya Bansal (1) +
• Christoph Baumgarten (2)
• Sebastian Berg (4)
• Nicolas Bloyet (2) +
• Matt Borland (1)
• Jonas Bosse (1) +
• Jake Bowhay (25)
• Matthew Brett (1)
• Dietrich Brunn (7)
• Evgeni Burovski (65)
• Matthias Bussonnier (4)
• Tim Butters (1) +
• Cale (1) +
• CJ Carey (5)
• Thomas A Caswell (1)
• Sean Cheah (44) +
• Lucas Colley (97)
• com3dian (1)
• Gianluca Detommaso (1) +
• Thomas Duvernay (1)
• DWesl (2)
• f380cedric (1) +
• fancidev (13) +
• Daniel Garcia (1) +
• Lukas Geiger (3)
• Ralf Gommers (147)
• Matt Haberland (81)
• Tessa van der Heiden (2) +
• Shawn Hsu (1) +
• inky (3) +
• Jannes Münchmeyer (2) +
• Aditya Vidyadhar Kamath (2) +
• Agriya Khetarpal (1) +
• Andrew Landau (1) +
• Eric Larson (7)
• Zhen-Qi Liu (1) +
• Christian Lorentzen (2)
• Adam Lugowski (4)
• m-maggi (6) +
• Chethin Manage (1) +
• Ben Mares (1)
• Chris Markiewicz (1) +
• Mateusz Sokół (3)
• Daniel McCloy (1) +
• Melissa Weber Mendonça (6)
• Josue Melka (1)
• Michał Górny (4)
• Juan Montesinos (1) +
• Juan F. Montesinos (1) +
• Takumasa Nakamura (1)
• Andrew Nelson (27)
• Praveer Nidamaluri (1)
• Yagiz Olmez (5) +
• Dimitri Papadopoulos Orfanos (1)
• Drew Parsons (1) +
• Tirth Patel (7)
• Pearu Peterson (1)
• Matti Picus (3)
• Rambaud Pierrick (1) +
• Ilhan Polat (30)
• Quentin Barthélemy (1)
• Tyler Reddy (117)
• Pamphile Roy (10)
• Atsushi Sakai (8)
• Daniel Schmitz (10)
• Dan Schult (17)
• Eli Schwartz (4)
• Stefanie Senger (1) +
• Scott Shambaugh (2)
• Kevin Sheppard (2)
• sidsrinivasan (4) +
• Samuel St-Jean (1)
• Albert Steppi (31)
• Adam J. Stewart (4)
• Kai Striega (3)
• Ruikang Sun (1) +
• Mike Taves (1)
• Nicolas Tessore (3)
• Benedict T Thekkel (1) +
• Will Tirone (4)
• Jacob Vanderplas (2)
• Christian Veenhuis (1)
• Isaac Virshup (2)
• Ben Wallace (1) +
• Xuefeng Xu (3)
• Xiao Yuan (5)
• Irwin Zaid (8)
• Elmar Zander (1) +
• Mathias Zechmeister (1) +

A total of 96 people contributed to this release.
People with a "+" by their names contributed a patch for the first time.
This list of names is automatically generated, and may not be fully complete.

joblib/threadpoolctl (threadpoolctl)

v3.4.0

Compare Source

==================

• Added support for Python interpreters statically linked against libc or linked against
  alternative implementations of libc like musl (on Alpine Linux for instanchttps://github.com/joblib/threadpoolctl/pull/171pull/171

• Added support for Pyodide
  https://github.com/joblib/threadpoolctl/pull/169/169

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

---

Thanks for the PR!

Deployments, as required, will be available below:

• Frontend available

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow

[tobiasmllr]

Fails due to xhtml2pdf 0.2.15 depends on reportlab<4.1 and >=4.0.4. Got to wait for xhtml2pdf update