chore(deps)(deps): bump the python-versions group across 1 directory with 20 updates

[dependabot]

Bumps the python-versions group with 19 updates in the / directory:

Package	From	To
huggingface-hub	1.20.1	1.24.0
poethepoet	0.46.0	0.48.0
sigstore	4.3.0	4.4.0
jupytext	1.19.4	1.19.5
scipy-stubs	1.17.1.5	1.18.0.1
ipython	9.14.1	9.15.0
matplotlib	3.11.0	3.11.1
pydata-sphinx-theme	0.19.0	0.20.0
sphinx-autodoc-typehints	3.11.0	3.12.1
sphinxcontrib-mermaid	2.0.2	2.1.0
apache-airflow	3.2.2	3.3.0
dagster	1.13.10	1.13.14
plotly	6.8.0	6.9.0
tqdm	4.68.3	4.69.0
numpy	2.4.6	2.5.1
nvidia-cudnn-cu12	9.23.2.1	9.24.0.43
holidays	0.99	0.100
scipy	1.17.1	1.18.0
lightgbm	4.6.0	4.7.0

Updates huggingface-hub from 1.20.1 to 1.24.0

Release notes

Sourced from huggingface-hub's releases.

[v1.24.0] Name your Jobs! (and download fixes)

📊 Name your Jobs!

Jobs on the Hub now support an optional --name flag on the CLI and a name parameter on the Python API (run_job, run_uv_job, create_scheduled_job, create_scheduled_uv_job). Names are stored as the name label and make Jobs easier to find and identify in the UI. You can also name an existing Job using hf jobs labels <job_id> --name my-job. Names are optional and do not need to be unique.

# Create a named Job
hf jobs run --name training-v2 python:3.12 python train.py
Name an existing Job
hf jobs labels <job_id> --name training-v2
Named scheduled Job
hf jobs scheduled run @​hourly --name hourly-task python:3.12 python -c 'print("This runs every hour!")'

📚 Documentation: CLI guide, Jobs guide

• [Jobs] Add optional names to Jobs CLI and API by @​Wauplin in #4532

📖 Documentation

• [Docs] Fix HTTP client name in download docs by @​cupkk in #4523

The README has been completely refreshed to put the hf CLI first. The standalone installer (curl/PowerShell) and a terminal quick start — covering auth login, models ls, download, upload, and jobs run — now appear before the Python library section. A new For AI agents section introduces hf skills add for Codex, Cursor, OpenCode, Claude Code, and other AI tools. The Python content remains intact under the renamed Use the Python library heading, with refreshed example models and a corrected tagline ("The official CLI and Python client for the Hugging Face Hub").

• CLI-first README: standalone installer and terminal quick start up top by @​davanstrien in #4527
• Mention the hf CLI in the README quick start by @​davanstrien in #4514

🐛 Bug and typo fixes

• [Download] Fix xet download rate: show summed, not per-file speed by @​rajatarya in #4530

🏗️ Internal

• Bump the actions group with 4 updates by @​dependabot[bot] in #4503
• Post-release: bump version to 1.24.0.dev0 by @​huggingface-hub-bot[bot] in #4516

[v1.23.0] Space templates, CLI extension updates & smoother Xet downloads

🚀 Create Spaces from templates

You can now seed a new Space from one of the official Hub templates (JupyterLab, a Gradio chatbot, a Streamlit app, etc.) instead of starting from an empty repo. List what's available with the new list_space_templates() API or the hf spaces templates CLI command, then pass a template's repo_id (or its short name) to create_repo(..., space_template=...) or hf repos create --type space --template. The Space SDK is inferred from the template, and templates recommended as private (like JupyterLab) are created privately by default unless you explicitly choose a visibility.

# List available templates
$ hf spaces templates
NAME        REPO_ID                             SDK     PREFERRED_PRIVATE
----------- ----------------------------------- ------- -----------------
Streamlit   streamlit/streamlit-template-space  docker
JupyterLab  SpacesExamples/jupyterlab           docker  ✔
</tr></table> 

... (truncated)

Commits

• 36fd32c Release: v1.24.0
• 240dcf4 Release: v1.24.0.rc3
• d43b771 Release: v1.24.0.rc2
• 16e19c2 Release: v1.24.0.rc1
• 2917e60 Release: v1.24.0.rc0
• b2ae5b6 [Jobs] Add optional names to Jobs CLI and API (#4532)
• dc5c540 CLI-first README: standalone installer and terminal quick start up top (#4527)
• 74082b7 [Download] Fix xet download rate showing per-file speed instead of summed tot...
• 91dc59a Bump the actions group with 4 updates (#4503)
• 8a3189e [Docs] Fix HTTP client name in download docs (#4523)
• Additional commits viewable in compare view

Updates poethepoet from 0.46.0 to 0.48.0

Release notes

Sourced from poethepoet's releases.

0.48.0

Enhancements

• Add uses_env task option for loading variables from another task's output like an env file by @​nat-n in nat-n/poethepoet#407

Full Changelog: nat-n/poethepoet@v0.47.1...v0.48.0

0.47.1

Fixes

• Restore default value propagation for absent multiple positional args by @​nat-n in nat-n/poethepoet#409

Full Changelog: nat-n/poethepoet@v0.47.0...v0.47.1

0.47.0

Enhancements

• Add buffer output_mode for parallel tasks by @​nat-n in nat-n/poethepoet#400
• Generate official JSON Schema for poe section in pyproject based on PoeOptions and improve some validation edge cases by @​nat-n in nat-n/poethepoet#392 nat-n/poethepoet#389 nat-n/poethepoet#398
• Support declared args on script tasks targeting modules by @​nat-n in nat-n/poethepoet#396
• Respect the FORCE_COLOR environment variable by @​nat-n in nat-n/poethepoet#403

Fixes

• Executor config validation now rejects unknown keys by @​nat-n in nat-n/poethepoet#391
• Support src-layout python path resolution for script, expr, and include_script by @​nat-n in nat-n/poethepoet#397
• Fully support all three CLI styles for multi-value args by @​nat-n in nat-n/poethepoet#402

AI Agent Skill 🤖

• The poethepoet skill is now documented and ready for use @​nat-n in nat-n/poethepoet#404
• Improve coverage of expr/switch config semantics and edge cases by @​nat-n in nat-n/poethepoet#401

Install the skill via one of the following methods:

1. Via a built in poe task (similar to how shell completions are installed):

poe _install_skill                          # auto-detects .claude/.codex/.pi/.agents and prompts
poe _install_skill ~/.claude/skills         # explicit path (substitute your agent's dir)
poe _install_skill <skills-dir> --upgrade   # non-interactive upgrade (skips if same/newer)

2. From github via npx skills

npx skills add https://github.com/nat-n/poethepoet/tree/v0.46.0/poethepoet/skills/poethepoet

Full Changelog: nat-n/poethepoet@v0.46.0...v0.47.0

Commits

• e4d032c Bump version to 0.48.0
• e7a31be feat: Add uses_env task option for loading variables from a task's output (...
• 1fb4f8d Bump version to 0.47.1
• 88efc0a chore: regenerate JSON Schema
• b151b09 fix(args): restore default for absent multiple positional args (#409)
• d2f9c11 fix: schema generation for strict validation
• 9231083 Bump version to 0.47.0
• 994d8ed docs(skill): improve and document SKILL.md based on feedback (#404)
• 0478c10 fix(args): support all three CLI styles for multi-value args (#402)
• 8dc4399 feat: respect the FORCE_COLOR environment variable (#403)
• Additional commits viewable in compare view

Updates sigstore from 4.3.0 to 4.4.0

Release notes

Sourced from sigstore's releases.

v4.4.0

What's Changed

Changed

• sigstore no longer limits the upper-bound of cryptography in order to be less disruptive to downstream integrators. (#1811)

Fixed

• Fixed generation of invalid CSRs when the identity is not ASCII (for example a GitHub Actions sub claim containing a non-ASCII environment name). The CSR subject is unused by Fulcio, so it is now omitted entirely (#1507)

New Contributors

• @​arpitjain099 made their first contribution in sigstore/sigstore-python#1796

Full Changelog: sigstore/sigstore-python@v4.3.0...v4.4.0

Changelog

Sourced from sigstore's changelog.

[4.4.0]

Changed

• sigstore no longer limits the upper-bound of cryptography in order to be less disruptive to downstream integrators. (#1811)

Fixed

• Fixed generation of invalid CSRs when the identity is not ASCII (for example a GitHub Actions sub claim containing a non-ASCII environment name). The CSR subject is unused by Fulcio, so it is now omitted entirely (#1507)

Commits

• d4c83ab Prepare 4.4 release (#1813)
• 7734e1f build(deps): bump actions/attest-build-provenance in the actions group (#1825)
• 452c8e2 build(deps-dev): bump ruff from 0.15.19 to 0.15.20 (#1824)
• 8d870a3 build(deps-dev): bump ruff from 0.15.18 to 0.15.19 (#1823)
• 2c74d8f build(deps-dev): bump ruff from 0.15.17 to 0.15.18 (#1817)
• 24efa99 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 in the acti...
• 1f2ce57 build(deps-dev): bump pytest from 9.1.0 to 9.1.1 (#1818)
• fdd163e build(deps-dev): bump mkdocstrings-python from 2.0.4 to 2.0.5 (#1819)
• 94b8968 build(deps): bump actions/checkout in the actions group (#1815)
• d407494 build(deps-dev): bump pytest from 9.0.3 to 9.1.0 (#1812)
• Additional commits viewable in compare view

Updates jupytext from 1.19.4 to 1.19.5

Release notes

Sourced from jupytext's releases.

Version 1.19.5

Changed

• Harden the github action (#1569). Thanks to Peyton Murray for this PR
• The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
• zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
• Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

• Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
• Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

• marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!

Changelog

Sourced from jupytext's changelog.

1.19.5 (2026-07-21)

Changed

• Harden the github action (#1569). Thanks to Peyton Murray for this PR
• The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
• zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
• Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

• Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
• Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

• marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!

Commits

• 3132c6c Version 1.19.5
• d8d4d14 build(deps): bump axios from 1.16.0 to 1.18.1 in /jupyterlab in the jupytext-...
• 1a6fde9 build(deps): bump the actions-dependencies group with 3 updates
• 0068463 build(deps): bump astro
• 58c1eb9 build(deps): bump the jupytext-extension-dependencies group across 2 director...
• af6134e Migrate to jupyter-builder for building frontend extension (#1590)
• bb0de16 build(deps): bump the actions-dependencies group across 1 directory with 8 up...
• 555b4c2 avoid quadratic backtracking in help/bash magic regex
• f24a3b7 reuse secure temp files in marimo_py_to_notebook
• d53e2f1 Require zizmor and precommit on ci (#1594)
• Additional commits viewable in compare view

Updates scipy-stubs from 1.17.1.5 to 1.18.0.1

Release notes

Sourced from scipy-stubs's releases.

v1.18.0.1

This scipy-stubs release fixes many bugs and comes with several improvements. It targets SciPy 1.18.0 and supports Python 3.12-3.14, NumPy 2.0-2.7, and optype 0.15-0.19.

What's Changed

⏬ SciPy 1.18 Changes

• linalg.[cumulative_]simpson: update dtype promotion behavior (changed in 1.18) by @​jorenham in scipy/scipy-stubs#1956
• stats.mannwhitneyu: fix dtype promotion and .pvalue dtype propagation by @​jorenham in scipy/scipy-stubs#1976

✨ Improvements

• preliminary Zuban support by @​jorenham in scipy/scipy-stubs#1524
• sparse.linalg.svds: narrow dtype of the returned singular values array by @​jorenham in scipy/scipy-stubs#1879
• signal: improve shape-typing for peak-finding functions by @​jorenham in scipy/scipy-stubs#1891
• stats: emulate property overloading on the new distribution parameters by @​jorenham in scipy/scipy-stubs#1920
• ndimage: fourier_* should reject float16 intput by @​Aniketsy in scipy/scipy-stubs#1929
• interpolate: shape-typed generic polynomial interpolation classes by @​jorenham in scipy/scipy-stubs#1966
• stats.directional_stats: fix and improve shape-typing and dtype propagation by @​jorenham in scipy/scipy-stubs#1969
• sparse: fix & improve sparse array/matrix division / addition by @​jorenham in scipy/scipy-stubs#1970
• optimize.NonlinearConstraint: parametrized lb/ub and keep_feasible by @​jorenham in scipy/scipy-stubs#1971

🐛 Fixes

• linalg.eig: fix output dtypes and output sizes by @​jorenham in scipy/scipy-stubs#1874
• io.loadmat: fix incorrect value type of the returned dict by @​jorenham in scipy/scipy-stubs#1875
• stats: fix discrete distribution .rvs() output dtype by @​jorenham in scipy/scipy-stubs#1876
• stats: fix axis default for {skew,kurtosis,normal}test by @​jorenham in scipy/scipy-stubs#1877
• stats: fix axis default for tmean by @​jorenham in scipy/scipy-stubs#1878
• sparse.linalg.svds: add missing overloads for return_singular_vectors by @​jorenham in scipy/scipy-stubs#1879
• spatial.distance.jaccard: accept floating weights by @​jorenham in scipy/scipy-stubs#1880
• interpolate.NdPPoly.integrate: accept any-length tuple for ranges by @​jorenham in scipy/scipy-stubs#1883
• signal.{c,q}spline2d: fix output shape-types (1d -> 2d) by @​jorenham in scipy/scipy-stubs#1884
• optimize.{basinhopping,dual_annealing}: fix result .message type (str -> list[str]) by @​jorenham in scipy/scipy-stubs#1887
• optimize.shgo: fix result xl and funl types by @​jorenham in scipy/scipy-stubs#1888
• interpolate.RegularGridInterpolator: fix dtype of grid arrays (always float64) by @​jorenham in scipy/scipy-stubs#1889
• signal.peak_widths: fix dtype of 2nd output array by @​jorenham in scipy/scipy-stubs#1890
• special: fix h{1,2}vp return type for Nd input by @​jorenham in scipy/scipy-stubs#1892
• cluster.hierarchy.dendogram: fix result dict {i,d}coord list element types (int -> float) by @​jorenham in scipy/scipy-stubs#1893
• linalg.solve: fix output shape-type for 1d b by @​jorenham in scipy/scipy-stubs#1894
• stats.expectile: add missing overloads for axis and keepdims by @​jorenham in scipy/scipy-stubs#1895
• stats.quantile: fix axis / keepdims overloads by @​jorenham in scipy/scipy-stubs#1896
• optimize.lsq_linear: fix result attr typo (const -> cost) by @​jorenham in scipy/scipy-stubs#1898
• interpolate.interp1d: accept complex y by @​jorenham in scipy/scipy-stubs#1900
• odr: add missing iwork attribute to Output by @​Aniketsy in scipy/scipy-stubs#1899
• interpolate.[bi]splev: accept scalars by @​jorenham in scipy/scipy-stubs#1901
• stats.{cum,rel}freq: fix type of result binsize and extrapoints by @​jorenham in scipy/scipy-stubs#1902

... (truncated)

Commits

• 2dc1cf2 🔖 scipy-stubs 1.18.0.1
• 5739cd0 Merge pull request #1982 from scipy:update-project-metadata-description
• bb96f4c 💬 update project metadata description
• 54b75cf Merge pull request #1981 from scipy:bump-optype
• a3b7d6e ⬆️ increase optype lower bound from 0.14 to 0.15
• c35220e Merge pull request #1980 from scipy:bump-dev-deps
• dcc2983 🙈 add # ty: ignore for an inevitable LSP error
• 0f12f90 🩹 work around new ty false positives for the optype JustFloat types.
• f560300 ⬆️ upgrade development dependencies
• 108f737 Merge pull request #1979 from scipy:gh-1829
• Additional commits viewable in compare view

Updates ipython from 9.14.1 to 9.15.0

Commits

• 2273f39 release 9.15.0
• 4774918 fix
• 4bec98b update whatsnew
• 42fcfe4 [3.11] Skip stup for Numpy that is not using > 3.11 syntax
• b5da9ac fix: clarify tk simple-prompt gui message
• 00bcdee fix: don't let kitty graphics detection crash IPython startup
• 60f2e26 Fix #12726: %run honors quotes when expanding glob args
• 3ea7aa6 Strip ANSI escape sequences from Sphinx directive output
• 9b7d419 Add %xmode Doctest mode for doctest friendly tracebacks
• fdbdf1c Increase codecov threshold to 0.2% to avoid false PR failures
• Additional commits viewable in compare view

Updates matplotlib from 3.11.0 to 3.11.1

Release notes

Sourced from matplotlib's releases.

REL: v3.11.1

This is the first bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

• Fix tight layout of multiple subplots with sharey=True
• Fix NoNorm cursor formatting for uint8 images
• Fix occasional misalignment in reported mouse position (also fix a bug with canvas height)
• Fix clipped Axis labels on 3D plots with tight layout
• Fix inverted Axis on 3D plots
• Fix restoring 'auto' aspect in 3D axes after switching from 'equal'
• Fix missing glyphs when subsetting Type 1 fonts in PDF
• Fix oversized embedding of Type 42 fonts in PDF/PostScript files

As well as several documentation and typing improvements and corrections.

Commits

• 3c1757a REL: v3.11.1
• 792c6b5 DOC: Prepare for 3.11.1
• aaff9f6 Merge branch 'v3.11.0-doc' into v3.11.x
• d4f4527 Merge pull request #32052 from meeseeksmachine/auto-backport-of-pr-32038-on-v...
• 6ad4bcf Merge pull request #32050 from meeseeksmachine/auto-backport-of-pr-31304-on-v...
• 7fb74d3 Merge pull request #32051 from meeseeksmachine/auto-backport-of-pr-32037-on-v...
• c624aec Backport PR #32038: Fix occasional misalignment in reported mouse position (a...
• 8eda2b7 Backport PR #32037: Bump the actions group with 3 updates
• a0e7ae5 Backport PR #31304: Fix restoring 'auto' aspect in 3D axes after switching fr...
• 9001323 Merge pull request #32047 from meeseeksmachine/auto-backport-of-pr-32025-on-v...
• Additional commits viewable in compare view

Updates pydata-sphinx-theme from 0.19.0 to 0.20.0

Release notes

Sourced from pydata-sphinx-theme's releases.

v0.20.0

What's Changed

🔴 Breaking

• Drop Sphinx <= 8.1, Python <= 3.10 by @​Yann-P in pydata/pydata-sphinx-theme#2412

Fixes

• Fix relative json_url on home page when using dirhtml builder by @​Yann-P in pydata/pydata-sphinx-theme#2436
• Fix content of sidebar shifting vertically on page load by @​Yann-P in pydata/pydata-sphinx-theme#2415
• Fix broken link in our example gallery and replace it with another one by @​Yann-P in pydata/pydata-sphinx-theme#2430

Internal tooling

• Unpin internal actions by @​Yann-P in pydata/pydata-sphinx-theme#2427
• Fix incorrect tox env name in prerelease docs build step by @​yyccPhil in pydata/pydata-sphinx-theme#2421

Dependencies

• Bump internal actions ; Bump pyupgrade options to 3.7+ -> 3.11+ by @​Yann-P in pydata/pydata-sphinx-theme#2416
• Update deps (was incorrect) by @​Carreau in pydata/pydata-sphinx-theme#2417
• Bump ws from 7.5.10 to 7.5.11 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2419
• Bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2420
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2423
• Bump internal actions by @​Yann-P in pydata/pydata-sphinx-theme#2426
• fix: stabilize Read the Docs Ubuntu image by @​sanmaxdev in pydata/pydata-sphinx-theme#2429
• Bump actions/setup-python from 6.2.0 to 6.3.0 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2431
• Bump actions/cache from 5.0.5 to 6.1.0 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2433
• Bump py-cov-action/python-coverage-comment-action from 3.41 to 4.1 by @​dependabot[bot] in pydata/pydata-sphinx-theme#2432
• [pre-commit.ci] pre-commit autoupdate hooks by @​pre-commit-ci[bot] in pydata/pydata-sphinx-theme#2435

New Contributors

• @​yyccPhil made their first contribution in pydata/pydata-sphinx-theme#2421
• @​sanmaxdev made their first contribution in pydata/pydata-sphinx-theme#2429

Full Changelog: pydata/pydata-sphinx-theme@v0.19.0...v0.20.0

Commits

• 3cffc43 Bump 0.19.0 -> 0.20.0 (#2437)
• 53488b7 Fix relative json_url on home page when using dirhtml builder (#2436)
• db2d3ab [pre-commit.ci] pre-commit autoupdate hooks (#2435)
• 266c201 Fix broken link in our example gallery and replace it with another one (#2430)
• fd586dc Bump py-cov-action/python-coverage-comment-action from 3.41 to 4.1 (#2432)
• 6ac6322 Bump actions/cache from 5.0.5 to 6.1.0 (#2433)
• 6f2c50c Bump actions/setup-python from 6.2.0 to 6.3.0 (#2431)
• 7d2dc8c Unpin internal actions (#2427)
• 6dde1c3 fix: stabilize Read the Docs Ubuntu image (#2429)
• d001992 Bump internal actions (#2426)
• Additional commits viewable in compare view

Updates sphinx-autodoc-typehints from 3.11.0 to 3.12.1

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.11.1

What's Changed

• 🐛 fix(annotations): use py:class for types on 3.13+ by @​gaborbernat in tox-dev/sphinx-autodoc-typehints#732
• 🐛 fix(overloads): keep summary above overloads by @​gaborbernat in tox-dev/sphinx-autodoc-typehints#731

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.12.1...3.11.1

Commits

• f5734ac 🐛 fix(annotations): resolve cross-module recursive alias (#724)
• 684cba5 [pre-commit.ci] pre-commit autoupdate (#722)
• 5a1ae66 🐛 fix(annotations): render recursive type aliases (#721)
• ae073b6 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#719)
• cee55dd [pre-commit.ci] pre-commit autoupdate (#718)
• 882b9e7 [pre-commit.ci] pre-commit autoupdate (#717)
• See full diff in compare view

Updates sphinxcontrib-mermaid from 2.0.2 to 2.1.0

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.0 (July 18, 2026)

• Add mermaid_config option for passing a global Mermaid configuration (#215)
• Load the ZenUML plugin lazily, only on pages that contain a ZenUML diagram, and confine its injected stylesheet to the diagram subtree so it no longer restyles the host theme (#252)
• Skip injecting the Mermaid JavaScript when the output format does not support it (#253)
• Fix d3 zoom on nested SVGs (#179)
• Fix fullscreen button positioning inconsistency (#225)
• Fix interactions between the fullscreen, zoom, and lazy-render features (#254)

2.0.3 (July 7, 2026)

• Capture mmdc error message as string for nicer error display
• Fix local JS module imports on root-level pages by ensuring a valid relative ES module specifier (#246)
• Defer rendering of Mermaid diagrams hidden by a parent (e.g. Reveal.js slides, unopened tabs) until they become visible, fixing broken SVGs

Commits

• 6d7611b Merge pull request #257 from mgaitan/tkp/210
• c53952b Bump version to 2.1.0
• c5bfe4a Merge pull request #256 from timkpaine/tkp/escape-generated-javascript
• 7244a8c Escape generated JavaScript values
• f4cf3e6 Merge pull request #254 from timkpaine/tkp/recent-integration-fixes
• e96f80c fix(html): Correct Mermaid feature interactions
• 2395a38 Merge pull request #225 from yarikoptic/bf-fullscreen
• e0178bd Merge pull request #253 from timkpaine/tkp/pr-132-skip-static-js
• c5bafdb test(fullscreen): Cover button positioning
• c09d852 Fix fullscreen button positioning inconsistency
• Additional commits viewable in compare view

Updates apache-airflow from 3.2.2 to 3.3.0

Release notes

Sourced from apache-airflow's releases.

Apache Airflow 3.3.0

📦 PyPI: https://pypi.org/project/apache-airflow/3.3.0/ 📚 Docs: https://airflow.apache.org/docs/apache-airflow/3.3.0/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.3.0/release_notes.html 🐳 Docker Image: "docker pull apache/airflow:3.3.0" 🚏 Constraints: https://github.com/apache/airflow/tree/constraints-3.3.0

Significant Changes

Asset Partitioning (#64571, #65447, #66030, #66848, #67184, #67475, #67716, #68978)

Building on the asset partitioning introduced in 3.2.0, Airflow 3.3.0 substantially expands how a single upstream asset event fans out to partitioned downstream Dag runs. New partition mappers — RollupMapper (many-to-one), FanOutMapper (one-to-many), and FixedKeyMapper + SegmentWindow (categorical rollup) — compose with time windows (day/week/month/quarter/year) and a wait_policy (WaitForAll or MinimumCount(n)) to control when partitioned runs fire. Windows can fan out forward or backward in time, and total fan-out per upstream event is bounded by the new [scheduler] partition_mapper_max_downstream_keys config (configurable per mapper). Airflow 3.3.0 also adds the PartitionedAtRuntime timetable, which lets a Dag declare that its partition key(s) are assigned when the run starts rather than mapped from an upstream event.

For detailed usage instructions, see :doc:/authoring-and-scheduling/assets.

Task and Asset State Store (#65759, #66073, #66160, #66463, #66586, #66859, #67041, #67292, #67319)

Airflow 3.3.0 introduces a first-class state store for tasks and assets (AIP-103). Tasks can persist arbitrary key-value state that survives across retries and runs via a new task_state_store accessor, and assets can carry their own state via asset_state_store — both available from the Task SDK. State is kept in the metadata database by default, or in a custom worker-side backend ([workers] state_store_backend), supports per-key retention with periodic garbage collection and an optional clear_on_success, and is fully manageable through the Core API and Execution API.

For detailed usage instructions, see :doc:/core-concepts/task-and-asset-state-store.

Pluggable Retry Policies (#65474)

Task retry behaviour is now pluggable (AIP-105). In addition to a fixed retries count, you can attach a custom retry policy that decides whether and when a task is retried,...

Description has been truncated

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.