Bump the pip group across 12 directories with 4 updates by dependabot[bot] · Pull Request #2 · mawazawa/docs

dependabot · 2026-01-06T18:05:11Z

Bumps the pip group with 3 updates in the /python/api-examples-source/hello directory: bokeh, requests and streamlit.
Bumps the pip group with 4 updates in the /python/api-examples-source directory: bokeh, requests, streamlit and opencv-python-headless.
Bumps the pip group with 1 update in the /python/tutorial-source/llm-18-lines-of-code directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/widget.page_link directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/utilities.switch_page directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/tutorials directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/tutorials/custom-navigation directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/theming directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/st-experimental-connection/1.22/st-experimental-connection directory: streamlit.
Bumps the pip group with 2 updates in the /python/api-examples-source/mpa-hello directory: streamlit and opencv-python-headless.
Bumps the pip group with 1 update in the /python/api-examples-source/guides directory: streamlit.
Bumps the pip group with 1 update in the /python/api-examples-source/charts.video3 directory: streamlit.

Updates bokeh from 2.4.3 to 3.8.2

Changelog

Sourced from bokeh's changelog.

2026-01-06 3.8.2:

bugfixes:

#14768 [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications

tasks:

#14767 Backports for 3.8.2

2025-11-07 3.8.1:

bugfixes:

#14618 [component: docs] Local documentation build fails with Extension error (sphinxext.opengraph)

#14626 [component: docs] Local documentation fails on Windows because of missing svg icons

#14651 [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0

tasks:

#14704 Backports for 3.8.1

2025-08-29 3.8:

bugfixes:

#12430 [component: bokehjs] [BUG] Step glyphs do not support linked brushing

#12994 [component: bokehjs] [BUG] Patch does not output under certain conditions

#13616 [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted

#14334 js_on_change not firing when range is updated in range tool

#14352 [component: bokehjs] Log Axis and Range1d < 1 failing

#14383 [component: bokehjs] SerializationError: circular reference When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.

#14396 [component: examples] Remove context from time of day in span example

#14399 Bad typings for list_attr_splat (e.g. Plot.axis)

#14413 [component: bokehjs] ValueRef formatter does not handle datetime nullable well

#14420 [component: bokehjs] Enhance performance of WebGL multi_marker

#14422 [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool

#14424 [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+

#14458 [component: bokehjs] Removing and re-adding DOM nodes causes React problems

#14461 [component: tests] The regression test for issue #14207 is unreliable

#14468 [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html

#14469 [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true

#14476 Improve handling of pd.NA in Property.matches

#14497 mypy 1.15.0 fails in CI but not locally

#14499 [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot

#14520 [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget

#14536 Flex layouts need to apply min_width and min_height selectively

#14540 [component: tests] Tests are failing on Windows and Python 3.10 after PR #14531

#14541 New SVG icons have inconsistent line widths

#14554 Add support for scalar uint32 color input.

#14565 [component: bokehjs] DataTable source update broken

#14574 [component: build] grammar build script failing with whitespace in path

#14597 [component: bokehjs] document_ready even trigger twice with Bokeh 3.4.0.dev4

#14602 [component: bokehjs] Layoutable components in side panels don't appear in exported images

#14620 Re-connect race condition on page reload

... (truncated)

Commits

e5ce879 Deployment updates for release 3.8.2
2b3ee10 Don't validate npm credentials due to OICD limitations in npm (#14769)
756e3ae Migrate from NPM tokens to trusted providers for publishing in CI (#14766)
2f225a1 Update dependencies in build environment (#14758)
69d197c update switcher.json
d915c8b update to latest ruff (#14661)
5f9f7b6 update release notes
cedd113 handle wildcard host with port correctly
a961ab7 small CI fixes for advisory fork merge
d62939a Merge commit from fork
Additional commits viewable in compare view

Updates requests from 2.31.0 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS. (#6926)

Dropped support for pypy 3.9 following its end of support. (#6926)

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

v2.32.2

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS.

Dropped support for pypy 3.9 following its end of support.

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

... (truncated)

Commits

021dc72 Polish up release tooling for last manual release
821770e Bump version and add release notes for v2.32.4
59f8aa2 Add netrc file search information to authentication documentation (#6876)
5b4b64c Add more tests to prevent regression of CVE 2024 47081
7bc4587 Add new test to check netrc auth leak (#6962)
96ba401 Only use hostname to do netrc lookup instead of netloc
7341690 Merge pull request #6951 from tswast/patch-1
6716d7c remove links
a7e1c74 Update docs/conf.py
c799b81 docs: fix dead links to kenreitz.org
Additional commits viewable in compare view

Updates streamlit from 1.33.0 to 1.37.0

Release notes

Sourced from streamlit's releases.

1.37.0

What's Changed

New Features 🎉

Stacking options - st.bar_chart by @mayagbarnes in streamlit/streamlit#8945

Support graphviz.sources.Source object for st.graphviz_chart by @sfc-gh-kbregula in streamlit/streamlit#8993

Add support for material icons in markdown by @LukasMasuch in streamlit/streamlit#8889

Fix lag when closing dialog by @raethlein in streamlit/streamlit#9023

Stacking options - st.area_chart by @mayagbarnes in streamlit/streamlit#8992

Add feedback widget by @raethlein in streamlit/streamlit#8915

READ only headers and cookies by @kajarenc in streamlit/streamlit#8976

De-experimentalize st.fragment by @vdonato in streamlit/streamlit#9019

De-experimentalize st.dialog by @raethlein in streamlit/streamlit#9020

Bug Fixes 🐛

Show fragment errors in fragment-path for main app runs by @raethlein in streamlit/streamlit#8868

Fix st.rerun fragment thread reuse issue by @raethlein in streamlit/streamlit#8798

Support non-unix style paths for MPA loading by @kmcgrady in streamlit/streamlit#8988

Set theme hash properly on load if a custom theme is active to start by @kmcgrady in streamlit/streamlit#8989

Don't remove session refs on fragment runs by @vdonato in streamlit/streamlit#9010

Improvements to NumberInput formatting by @sfc-gh-nbellante in streamlit/streamlit#9035

Hide all Particles upon printing by @sfc-gh-nbellante in streamlit/streamlit#9053

Fix: MPA support of custom themes by @mayagbarnes in streamlit/streamlit#8994

st.switch_page clears non-embed query params by @mayagbarnes in streamlit/streamlit#9059

Fix secrets.toml Windows Path Bug by @sfc-gh-nbellante in streamlit/streamlit#9061

Bugfix: Fixes two st.map width bugs by @sfc-gh-nbellante in streamlit/streamlit#9070

Validate the path using Tornado before performing checks by @kmcgrady in streamlit/streamlit#8990

Reset ctx.current_fragment_id to last ID instead of None by @vdonato in streamlit/streamlit#9114

Other Changes

Update emojis used for validation by @LukasMasuch in streamlit/streamlit#8923

Add support for numpy 2.x by @LukasMasuch in streamlit/streamlit#8940

Remove a bunch of deprecated experimental features by @vdonato in streamlit/streamlit#8943

Migrate custom icons from material outlined to rounded by @LukasMasuch in streamlit/streamlit#8998

Remove old config options - part 1 by @mayagbarnes in streamlit/streamlit#9005

Remove old config options - part 2 by @mayagbarnes in streamlit/streamlit#9013

Remove deprecation.showPyplotGlobalUse config option by @LukasMasuch in streamlit/streamlit#9018

Fix broken st.navigation docstring by @mahotd in streamlit/streamlit#9027

Update the feedback widget design by @raethlein in streamlit/streamlit#9094

New Contributors

@Dev-iL made their first contribution in streamlit/streamlit#8947

@quant12345 made their first contribution in streamlit/streamlit#8968

@mahotd made their first contribution in streamlit/streamlit#9027

Full Changelog: streamlit/streamlit@1.36.0...1.37.0

1.36.0

What's Changed

... (truncated)

Commits

e2c3c93 Up version to 1.37.0
88389e3 Docstrings for 1.37.0 (#9115)
898fd80 Temp solution to fix invalid material icon error rendering (#9113)
b2c88c6 Reset ctx.current_fragment_id to last ID instead of None (#9114)
3a63985 Validate the path using Tornado before performing checks (#8990)
40303e1 Move the filled star icon for feedback widget from python code to web app (#9...
6296baf Update the feedback widget design (#9094)
b9c3521 Fixes two st.map width bugs (#9070)
a2ae47a Only expose selected objects in components module (#8873)
340f3f7 De-experimentalize st.dialog (#9020)
Additional commits viewable in compare view

Updates bokeh from 2.4.3 to 3.8.2

Changelog

Sourced from bokeh's changelog.

2026-01-06 3.8.2:

bugfixes:

#14768 [component: server] Incomplete Origin Validation in WebSockets in Bokeh server applications

tasks:

#14767 Backports for 3.8.2

2025-11-07 3.8.1:

bugfixes:

#14618 [component: docs] Local documentation build fails with Extension error (sphinxext.opengraph)

#14626 [component: docs] Local documentation fails on Windows because of missing svg icons

#14651 [component: bokehjs] HoverTool parameter @$name for stacked bar chart not working in version 3.8.0

tasks:

#14704 Backports for 3.8.1

2025-08-29 3.8:

bugfixes:

#12430 [component: bokehjs] [BUG] Step glyphs do not support linked brushing

#12994 [component: bokehjs] [BUG] Patch does not output under certain conditions

#13616 [component: bokehjs] [BUG] DateRangePicker value does not reflect value in browser when selection is aborted

#14334 js_on_change not firing when range is updated in range tool

#14352 [component: bokehjs] Log Axis and Range1d < 1 failing

#14383 [component: bokehjs] SerializationError: circular reference When Passing List of Renderers to CustomJS Callbacks, but not when passing renderers sperately.

#14396 [component: examples] Remove context from time of day in span example

#14399 Bad typings for list_attr_splat (e.g. Plot.axis)

#14413 [component: bokehjs] ValueRef formatter does not handle datetime nullable well

#14420 [component: bokehjs] Enhance performance of WebGL multi_marker

#14422 [component: bokehjs] Legend renderer not correctly positioned when saved with SaveTool

#14424 [component: bokehjs] Patches with no data does not show plot with Bokeh 3.7+

#14458 [component: bokehjs] Removing and re-adding DOM nodes causes React problems

#14461 [component: tests] The regression test for issue #14207 is unreliable

#14468 [component: docs] Try on CodePen link does not work in documentation /docs/user_guide/advanced/bokehjs.html

#14469 [component: bokehjs] Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true

#14476 Improve handling of pd.NA in Property.matches

#14497 mypy 1.15.0 fails in CI but not locally

#14499 [component: docs] IndexError on importing bokeh.sphinxext.bokeh_plot

#14520 [component: bokehjs] BokehJS complains about categorical factors for the BoxAnnotation widget

#14536 Flex layouts need to apply min_width and min_height selectively

#14540 [component: tests] Tests are failing on Windows and Python 3.10 after PR #14531

#14541 New SVG icons have inconsistent line widths

#14554 Add support for scalar uint32 color input.

#14565 [component: bokehjs] DataTable source update broken

#14574 [component: build] grammar build script failing with whitespace in path

#14597 [component: bokehjs] document_ready even trigger twice with Bokeh 3.4.0.dev4

#14602 [component: bokehjs] Layoutable components in side panels don't appear in exported images

#14620 Re-connect race condition on page reload

... (truncated)

Commits

e5ce879 Deployment updates for release 3.8.2
2b3ee10 Don't validate npm credentials due to OICD limitations in npm (#14769)
756e3ae Migrate from NPM tokens to trusted providers for publishing in CI (#14766)
2f225a1 Update dependencies in build environment (#14758)
69d197c update switcher.json
d915c8b update to latest ruff (#14661)
5f9f7b6 update release notes
cedd113 handle wildcard host with port correctly
a961ab7 small CI fixes for advisory fork merge
d62939a Merge commit from fork
Additional commits viewable in compare view

Updates requests from 2.31.0 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS. (#6926)

Dropped support for pypy 3.9 following its end of support. (#6926)

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

v2.32.2

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS.

Dropped support for pypy 3.9 following its end of support.

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

... (truncated)

Commits

021dc72 Polish up release tooling for last manual release
821770e Bump version and add release notes for v2.32.4
59f8aa2 Add netrc file search information to authentication documentation (#6876)
5b4b64c Add more tests to prevent regression of CVE 2024 47081
7bc4587 Add new test to check netrc auth leak (#6962)
96ba401 Only use hostname to do netrc lookup instead of netloc
7341690 Merge pull request #6951 from tswast/patch-1
6716d7c remove links
a7e1c74 Update docs/conf.py
c799b81 docs: fix dead links to kenreitz.org
Additional commits viewable in compare view

Updates streamlit from 1.33.0 to 1.37.0

Release notes

Sourced from streamlit's releases.

1.37.0

What's Changed

New Features 🎉

Stacking options - st.bar_chart by @mayagbarnes in streamlit/streamlit#8945

Support graphviz.sources.Source object for st.graphviz_chart by @sfc-gh-kbregula in streamlit/streamlit#8993

Add support for material icons in markdown by @LukasMasuch in streamlit/streamlit#8889

Fix lag when closing dialog by @raethlein in streamlit/streamlit#9023

Stacking options - st.area_chart by @mayagbarnes in streamlit/streamlit#8992

Add feedback widget by @raethlein in streamlit/streamlit#8915

READ only headers and cookies by @kajarenc in streamlit/streamlit#8976

De-experimentalize st.fragment by @vdonato in streamlit/streamlit#9019

De-experimentalize st.dialog by @raethlein in streamlit/streamlit#9020

Bug Fixes 🐛

Show fragment errors in fragment-path for main app runs by @raethlein in streamlit/streamlit#8868

Fix st.rerun fragment thread reuse issue by @raethlein in streamlit/streamlit#8798

Support non-unix style paths for MPA loading by @kmcgrady in streamlit/streamlit#8988

Set theme hash properly on load if a custom theme is active to start by @kmcgrady in streamlit/streamlit#8989

Don't remove session refs on fragment runs by @vdonato in streamlit/streamlit#9010

Improvements to NumberInput formatting by @sfc-gh-nbellante in streamlit/streamlit#9035

Hide all Particles upon printing by @sfc-gh-nbellante in streamlit/streamlit#9053

Fix: MPA support of custom themes by @mayagbarnes in streamlit/streamlit#8994

st.switch_page clears non-embed query params by @mayagbarnes in streamlit/streamlit#9059

Fix secrets.toml Windows Path Bug by @sfc-gh-nbellante in streamlit/streamlit#9061

Bugfix: Fixes two st.map width bugs by @sfc-gh-nbellante in streamlit/streamlit#9070

Validate the path using Tornado before performing checks by @kmcgrady in streamlit/streamlit#8990

Reset ctx.current_fragment_id to last ID instead of None by @vdonato in streamlit/streamlit#9114

Other Changes

Update emojis used for validation by @LukasMasuch in streamlit/streamlit#8923

Add support for numpy 2.x by @LukasMasuch in streamlit/streamlit#8940

Remove a bunch of deprecated experimental features by @vdonato in streamlit/streamlit#8943

Migrate custom icons from material outlined to rounded by @LukasMasuch in streamlit/streamlit#8998

Remove old config options - part 1 by @mayagbarnes in streamlit/streamlit#9005

Remove old config options - part 2 by @mayagbarnes in streamlit/streamlit#9013

Remove deprecation.showPyplotGlobalUse config option by @LukasMasuch in streamlit/streamlit#9018

Fix broken st.navigation docstring by @mahotd in streamlit/streamlit#9027

Update the feedback widget design by @raethlein in streamlit/streamlit#9094

New Contributors

@Dev-iL made their first contribution in streamlit/streamlit#8947

@quant12345 made their first contribution in streamlit/streamlit#8968

@mahotd made their first contribution in streamlit/streamlit#9027

Full Changelog: streamlit/streamlit@1.36.0...1.37.0

1.36.0

What's Changed

... (truncated)

Commits

e2c3c93 Up version to 1.37.0
88389e3 Docstrings for 1.37.0 (#9115)
898fd80 Temp solution to fix invalid material icon error rendering (#9113)
b2c88c6 Reset ctx.current_fragment_id to last ID instead of None (#9114)
3a63985 Validate the path using Tornado before performing checks (#8990)
40303e1 Move the filled star icon for feedback widget from python code to web app (#9...
6296baf Update the feedback widget design (#9094)
b9c3521 Fixes two st.map width bugs (#9070)
a2ae47a Only expose selected objects in components module (#8873)
340f3f7 De-experimentalize st.dialog (#9020)
Additional commits viewable in compare view

Updates opencv-python-headless from 4.6.0.66 to 4.8.1.78

Release notes

Sourced from opencv-python-headless's releases.

4.8.1.78

OpenCV 4.8.1 release.

Important changes:

WebP security update for CVE-2023-4863

4.8.0.76

Adds cv2.typing to package. Close #869

4.8.0.74

Important changes:

#20370 Python typing stubs.

#23350 Fix reference counting errors in registerNewType.

#23399, #23436, #23138 Fixed ChAruco and diamond boards detector bindings.

#23371 Added bindings to allow GpuMat and Stream objects to be initialized from memory initialized in other libraries

#23691 np.float16 support.

Python bindings for RotatedRect, CV_MAKETYPE, CV_8UC(n).

Several build fixes for OpenCV-Python package

4.7.0.72

OpenCV 4.7.0 with various distribution bug fixes.

Mac OS 11 support.

Old Linux support with zlib version older than 1.9.

Package build fixes for Python 11 on Musl C based system (Alpine).

4.7.0.70

OpenCV 4.7.0 with various distribution bug fixes.

Mac OS 11 support.

Old Linux support with zlib version older than 1.9.

Package build fixes for Python 11 on Musl C based system (Alpine).

4.7.0.68

opencv-python: https://pypi.org/project/opencv-python/ opencv-contrib-python: https://pypi.org/project/opencv-contrib-python/ opencv-python-headless: https://pypi.org/project/opencv-python-headless/ opencv-contrib-python-headless: https://pypi.org/project/opencv-contrib-python-headless/

OpenCV 4.7.0

Changes:

Updated third-party libraries to fix potential vulnerabilities.

Dropped Python 3.6 support.

Added Python 3.11 support.

Commits

See full diff in compare view

Updates streamlit from 1.33.0 to 1.37.0

Release notes

Sourced from streamlit's releases.

1.37.0

What's Changed

New Features 🎉

Stacking options - st.bar_chart by @mayagbarnes in streamlit/streamlit#8945

Support graphviz.sources.Source object for st.graphviz_chart by @sfc-gh-kbregula in streamlit/streamlit#8993

Add support for material icons in markdown by @LukasMasuch in streamlit/streamlit#8889

Fix lag when closing dialog by @raethlein in streamlit/streamlit#9023

Stacking options - st.area_chart by @mayagbarnes in streamlit/streamlit#8992

Add feedback widget by @raethlein in streamlit/streamlit#8915

READ only headers and cookies by @kajarenc in streamlit/streamlit#8976

De-experimentalize st.fragment by @vdonato in streamlit/streamlit#9019

De-experimentalize st.dialog by @raethlein in streamlit/streamlit#9020

Bug Fixes 🐛

Show fragment errors in fragment-path for main app runs by @raethlein in streamlit/streamlit#8868

Fix st.rerun fragment thread reuse issue by @raethlein in streamlit/streamlit#8798

Support non-unix style paths for MPA loading by @kmcgrady in streamlit/streamlit#8988

Set theme hash properly on load if a custom theme is active to start by @kmcgrady in streamlit/streamlit#8989

Don't remove session refs on fragment runs by @vdonato in streamlit/streamlit#9010

Improvements to NumberInput formatting by @sfc-gh-nbellante in streamlit/streamlit#9035

Hide all Particles upon printing by @sfc-gh-nbellante in streamlit/streamlit#9053

Fix: MPA support of custom themes by @mayagbarnes in streamlit/streamlit#8994

st.switch_page clears non-embed query params by @mayagbarnes in streamlit/streamlit#9059

Fix secrets.toml Windows Path Bug by @sfc-gh-nbellante in streamlit/streamlit#9061

Bugfix: Fixes two st.map width bugs by @sfc-gh-nbellante in streamlit/streamlit#9070

Validate the path using Tornado before performing checks by @kmcgrady in streamlit/streamlit#8990

Reset ctx.current_fragment_id to last ID instead of None by @vdonato in streamlit/streamlit#9114

Other Changes

Update emojis used for validation by @LukasMasuch in streamlit/streamlit#8923

Add support for numpy 2.x by @LukasMasuch in streamlit/streamlit#8940

Remove a bunch of deprecated experimental features by @vdonato in streamlit/streamlit#8943

Migrate custom icons from material outlined to rounded by @LukasMasuch in streamlit/streamlit#8998

Remove old config options - part 1 by @mayagbarnes in streamlit/streamlit#9005

Remove old config options - part 2 by @mayagbarnes in streamlit/streamlit#9013

Remove deprecation.showPyplotGlobalUse config option by @LukasMasuch in streamlit/streamlit#9018

Fix broken st.navigation docstring by @mahotd in streamlit/streamlit#9027

Update the feedback widget design by @raethlein in streamlit/streamlit#9094

New Contributors

@Dev-iL made their first contribution in streamlit/streamlit#8947

@quant12345 made their first contribution in streamlit/streamlit#8968

@mahotd made their first contribution in ...
Description has been truncated

Bumps the pip group with 3 updates in the /python/api-examples-source/hello directory: [bokeh](https://github.com/bokeh/bokeh), [requests](https://github.com/psf/requests) and [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 4 updates in the /python/api-examples-source directory: [bokeh](https://github.com/bokeh/bokeh), [requests](https://github.com/psf/requests), [streamlit](https://github.com/streamlit/streamlit) and [opencv-python-headless](https://github.com/opencv/opencv-python). Bumps the pip group with 1 update in the /python/tutorial-source/llm-18-lines-of-code directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/widget.page_link directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/utilities.switch_page directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/tutorials directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/tutorials/custom-navigation directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/theming directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/st-experimental-connection/1.22/st-experimental-connection directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 2 updates in the /python/api-examples-source/mpa-hello directory: [streamlit](https://github.com/streamlit/streamlit) and [opencv-python-headless](https://github.com/opencv/opencv-python). Bumps the pip group with 1 update in the /python/api-examples-source/guides directory: [streamlit](https://github.com/streamlit/streamlit). Bumps the pip group with 1 update in the /python/api-examples-source/charts.video3 directory: [streamlit](https://github.com/streamlit/streamlit). Updates `bokeh` from 2.4.3 to 3.8.2 - [Changelog](https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG) - [Commits](bokeh/bokeh@2.4.3...3.8.2) Updates `requests` from 2.31.0 to 2.32.4 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.4) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `bokeh` from 2.4.3 to 3.8.2 - [Changelog](https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG) - [Commits](bokeh/bokeh@2.4.3...3.8.2) Updates `requests` from 2.31.0 to 2.32.4 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.4) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `opencv-python-headless` from 4.6.0.66 to 4.8.1.78 - [Release notes](https://github.com/opencv/opencv-python/releases) - [Commits](https://github.com/opencv/opencv-python/commits) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `opencv-python-headless` from 4.6.0.66 to 4.8.1.78 - [Release notes](https://github.com/opencv/opencv-python/releases) - [Commits](https://github.com/opencv/opencv-python/commits) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) Updates `streamlit` from 1.33.0 to 1.37.0 - [Release notes](https://github.com/streamlit/streamlit/releases) - [Commits](streamlit/streamlit@1.33.0...1.37.0) --- updated-dependencies: - dependency-name: bokeh dependency-version: 3.8.2 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.32.4 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: bokeh dependency-version: 3.8.2 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.32.4 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: opencv-python-headless dependency-version: 4.8.1.78 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: opencv-python-headless dependency-version: 4.8.1.78 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip - dependency-name: streamlit dependency-version: 1.37.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-01-06T18:05:22Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 12 directories with 4 updates#2

Bump the pip group across 12 directories with 4 updates#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python/api-examples-source/hello/pip-f5e0c455bb

dependabot Bot commented on behalf of github Jan 6, 2026

Uh oh!

coderabbitai Bot commented Jan 6, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jan 6, 2026

2026-01-06 3.8.2:

2025-11-07 3.8.1:

2025-08-29 3.8:

v2.32.4

2.32.4 (2025-06-10)

v2.32.3

2.32.3 (2024-05-29)

v2.32.2

2.32.2 (2024-05-21)

v2.32.1

2.32.1 (2024-05-20)

v2.32.0

2.32.4 (2025-06-10)

2.32.3 (2024-05-29)

2.32.2 (2024-05-21)

2.32.1 (2024-05-20)

2.32.0 (2024-05-20)

1.37.0

What's Changed

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

1.36.0

What's Changed

2026-01-06 3.8.2:

2025-11-07 3.8.1:

2025-08-29 3.8:

v2.32.4

2.32.4 (2025-06-10)

v2.32.3

2.32.3 (2024-05-29)

v2.32.2

2.32.2 (2024-05-21)

v2.32.1

2.32.1 (2024-05-20)

v2.32.0

2.32.4 (2025-06-10)

2.32.3 (2024-05-29)

2.32.2 (2024-05-21)

2.32.1 (2024-05-20)

2.32.0 (2024-05-20)

1.37.0

What's Changed

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

1.36.0

What's Changed

4.8.1.78

4.8.0.76

4.8.0.74

4.7.0.72

4.7.0.70

4.7.0.68

1.37.0

What's Changed

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

Uh oh!

coderabbitai Bot commented Jan 6, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants