deps: bump the all-pip group across 1 directory with 6 updates

[dependabot]

Bumps the all-pip group with 6 updates in the /data/src directory:

Package	From	To
shapely	2.0.5	2.0.6
matplotlib	3.9.1	3.9.2
mapclassify	2.7.0	2.8.0
black	24.4.2	24.8.0
sqlalchemy	2.0.31	2.0.32
google-cloud-storage	2.18.0	2.18.2

Updates shapely from 2.0.5 to 2.0.6

Release notes

Sourced from shapely's releases.

2.0.6

Wheels are available for Python 3.13 (and still include GEOS 3.11.4).

Bug fixes:

• Fix compatibility with NumPy 2.1.0 (#2099).

For a full changelog, see https://shapely.readthedocs.io/en/latest/release/2.x.html#version-2-0-6

Changelog

Sourced from shapely's changelog.

2.0.6 (2024-08-19)

Bug fixes:

• Fix compatibility with NumPy 2.1.0 (#2099).

Wheels are available for Python 3.13 (and still include GEOS 3.11.4).

Commits

• 5a4207d RLS: 2.0.6
• c65fa42 Bump pypa/cibuildwheel from 2.19.2 to 2.20.0 (build Python 3.13 wheels) (#2103)
• 2f411ee DOC/RLS: starts changelog for 2.0.6 (#2113)
• 225445c BLD: suppress 'incompatible-function-pointer-types' error for clang>=16 (#2114)
• 3ab8fbc TST/CI: enable testing Python 3.13, NumPy 2.1, GEOS 3.13 (#2105)
• 2a83905 Fix compatibility with numpy 2.1 dev to cast GeometryType to int as ufunc inp...
• See full diff in compare view

Updates matplotlib from 3.9.1 to 3.9.2

Release notes

Sourced from matplotlib's releases.

REL: 3.9.2

This is the second bugfix release of the 3.9.x series.

This release contains several bug-fixes and adjustments:

• Be more resilient to I/O failures when writing font cache
• Fix nondeterministic behavior with subplot spacing and constrained layout
• Fix sticky edge tolerance relative to data range
• Improve formatting of image values in cases of singular norms

Windows wheels now bundle the MSVC runtime DLL statically to avoid inconsistencies with other wheels and random crashes depending on import order.

Commits

• a254b68 REL: 3.9.2
• 056f307 DOC: Create release notes for 3.9.2
• 8d867ce Merge branch 'v3.9.1-doc' into v3.9.x
• 7be8675 Merge pull request #28687 from QuLogic/static-msvc
• 3ed3d7b Merge pull request #28695 from meeseeksmachine/auto-backport-of-pr-27797-on-v...
• 8a62afa BLD: Include MSVCP140 runtime statically
• 81be26f Merge pull request #28688 from QuLogic/auto-backport-of-pr-28668-on-v3.9.x
• d88a582 Backport PR #27797: DOC: Use video files for saving animations
• e3159ba Merge pull request #28692 from meeseeksmachine/auto-backport-of-pr-28632-on-v...
• 465401e Backport PR #28632: DOC: Tell sphinx-gallery to link mpl_toolkits from our build
• Additional commits viewable in compare view

Updates mapclassify from 2.7.0 to 2.8.0

Release notes

Sourced from mapclassify's releases.

v2.8.0

What's Changed

Enhancements

• reimplement rgbas by @​knaaptime in pysal/mapclassify#228

Other Changes

• infra update - CI, names, linting, format, etc. by @​jGaboardi in pysal/mapclassify#224
• Update README.md -- remove mention of geoplot by @​jGaboardi in pysal/mapclassify#227

Full Changelog: pysal/mapclassify@v2.7.0...v2.8.0

Commits

• 666accc Merge pull request #228 from knaaptime/colors
• 3f53485 actually pass alpha
• c88b345 use a different color
• 60101a9 show inside array
• 453b303 add notebook
• 386803c suggestions
• 54e8e97 cant pass scheme twice
• 8074354 tests
• 4d605b4 renam in docstring
• bea9b18 reimplement rgbas
• Additional commits viewable in compare view

Updates black from 24.4.2 to 24.8.0

Release notes

Sourced from black's releases.

24.8.0

Stable style

• Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

• Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

• Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
• Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
• Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
• Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
• Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

• Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

• Fix blackd (and all extras installs) for docker container (#4357)

Changelog

Sourced from black's changelog.

24.8.0

Stable style

• Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

• Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

• Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
• Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
• Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
• Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
• Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

• Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

• Fix blackd (and all extras installs) for docker container (#4357)

Commits

• b965c2a Prepare release 24.8.0 (#4426)
• 9ccf279 Document find_project_root ignoring pyproject.toml without [tool.black]...
• 14b6e61 fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)
• b1c4dd9 fix: respect braces better in f-string parsing (#4422)
• 4b4ae43 Fix incorrect linenos on fstring tokens with escaped newlines (#4423)
• 7fa1faf docs: fix the installation command of extra for blackd (#4413)
• 8827acc Bump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)
• b0da11d Bump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)
• 721dff5 fix: avoid formatting backslash strings inside f-strings (#4401)
• 7e2afc9 Update actions/checkout to v4 to stop node deprecation warnings (#4379)
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.31 to 2.0.32

Release notes

Sourced from sqlalchemy's releases.

2.0.32

Released: August 5, 2024

general

• [general] [bug] [regression] Restored legacy class names removed from sqlalalchemy.orm.collections.*, including _orm.MappedCollection, _orm.mapped_collection(), _orm.column_mapped_collection(), _orm.attribute_mapped_collection(). Pull request courtesy Takashi Kajinami.

  References: #11435

orm

• [orm] [usecase] The _orm.aliased.name parameter to _orm.aliased() may now be combined with the _orm.aliased.flat parameter, producing per-table names based on a name-prefixed naming convention. Pull request courtesy Eric Atkin.

  References: #11575

• [orm] [bug] [regression] Fixed regression going back to 1.4 where accessing a collection using the "dynamic" strategy on a transient object and attempting to query would raise an internal error rather than the expected NoResultFound that occurred in 1.3.

  This change is also backported to: 1.4.53

  References: #11562

• [orm] [bug] Fixed issue where using the _orm.Query.enable_eagerloads() and _orm.Query.yield_per() methods at the same time, in order to disable eager loading that's configured on the mapper directly, would be silently ignored, leading to errors or unexpected eager population of attributes.

  References: #10834

• [orm] [bug] [regression] Fixed regression appearing in 2.0.21 caused by #10279 where using a _sql.delete() or _sql.update() against an ORM class that is the base of an inheritance hierarchy, while also specifying that subclasses should be loaded polymorphically, would leak the polymorphic joins into the UPDATE or DELETE statement as well creating incorrect SQL.

  References: #11625

• [orm] [bug] [regression] Fixed regression from version 1.4 in

... (truncated)

Commits

• See full diff in compare view

Updates google-cloud-storage from 2.18.0 to 2.18.2

Release notes

Sourced from google-cloud-storage's releases.

v2.18.2

2.18.2 (2024-08-08)

Bug Fixes

• Add regression test for range read retry issue and bump dependency to fix (#1338) (0323647)

v2.18.1

2.18.1 (2024-08-05)

Bug Fixes

• Properly escape URL construction for XML MPU API (#1333) (bf4d0e0)

Changelog

Sourced from google-cloud-storage's changelog.

2.18.2 (2024-08-08)

Bug Fixes

• Add regression test for range read retry issue and bump dependency to fix (#1338) (0323647)

2.18.1 (2024-08-05)

Bug Fixes

• Properly escape URL construction for XML MPU API (#1333) (bf4d0e0)

Commits

• 85aa02f chore(main): release 2.18.2 (#1339)
• 0323647 Fix: Add regression test for range read retry issue and bump dependency to fi...
• 5c93503 chore(main): release 2.18.1 (#1334)
• bf4d0e0 Fix: Properly escape URL construction for XML MPU API (#1333)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
vacant-lots-proj	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 26, 2024 5:38am

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.