[dependabot]

Bumps the python group with 4 updates in the / directory: pandas, pydantic, beartype and qc-core.

Updates pandas from 3.0.6 to 3.1.0

Release notes

Sourced from pandas's releases.

pandas 3.1.0

We are pleased to announce the release of pandas 3.1.0. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

Highlights include:

• New DataFrame.select() and updated DataFrame.filter() method
• Faster pd.read_csv(), with parallel reads of large files

See the detailed release notes for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade pandas

Or from conda-forge

conda install -c conda-forge pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.1.0rc0

We are pleased to announce a release candidate for pandas 3.1.0.

See the whatsnew for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade --pre pandas==3.1.0rc0

Or from conda-forge

conda install -c conda-forge/label/pandas_rc pandas==3.1.0rc0

Please report any issues with the release candidate on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• c6f4676 RLS: 3.1.0
• dd69475 Backport PR #71468 on branch 3.1.x (DOC: 3.1 whatsnew: add some structure to ...
• 4ccc19a Backport PR #71465 on branch 3.1.x (DOC: update announce (contributor listing...
• 24dae63 [backport 3.1.x] DOC: cleanup 3.1.0 whatsnew (#71408) (#71466)
• 8519ca6 [backport 3.1.x] CI: temporary pin dateutil to <3 (#71461) (#71464)
• 2126193 Backport PR #71387 on branch 3.1.x (BUG: fix string regex operations with $ e...
• 4700f5d Backport PR #71442 on branch 3.1.x (BUG: parallel read_csv raising released m...
• 08efb14 Backport PR #71456 on branch 3.1.x (TST: Fix test_reduce_array until reduct...
• ee8dcb7 Backport PR #71429 on branch 3.1.x (DOC: add dedicated 3.1 whatsnew section f...
• d93e32c Backport PR #71383 on branch 3.1.x (BUG: fix string regex operations with Pyt...
• Additional commits viewable in compare view

Updates pydantic from 2.14.0 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

• Fix arguments-v3 schema with variadic keywords by @​Viicos in #13954
• Fix TypeError on ForwardRef on Python 3.10.0 by @​Viicos in #13964
• Support closed and extra_items via inheritance in TypedDict by @​Viicos in #13967
• Enforce the max_digits whole-digits limit in the Python Decimal validator by @​Viicos in #13972
• Reject out-of-range int inputs for timedelta by @​Viicos in #13973
• Support named tuples in Sequence validation by @​Viicos in #13978

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

Changelog

Sourced from pydantic's changelog.

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• See full diff in compare view

Updates beartype from 0.22.9 to 0.23.1

Release notes

Sourced from beartype's releases.

Beartype 0.23.1: The Ultimate QA Suplex

@​beartype 0.23.1 is the minor release that wishes it was the ultimate QA suplex. Instead, it just resolves a single regression at the intersection between @​beartype 0.23.1, Python ≤ 3.13, and PEP 557-compliant @dataclasses.dataclass-decorated dataclasses defining one or more methods annotated by one or more PEP 484-compliant forward self-references (i.e., stringified forward references referring to the dataclass currently being defined). Ordinarily, @​leycec would've uselessly sat on this issue resolution for nine months. Fortunately, he's done with ordinary – and so are you. The dog days are QA are over. The @​beartype 0.23.0 release cycle changed the nature of @​leycec. He now releases things so you don't have to:

# Via "pip", the once-great venerable master packager now fallen on hard times:
$ pip install --upgrade beartype      # <-- you go, pipe-smoking pip
Via "uv", the plucky upstart spiky-haired kid wielding a sword larger than its body:
$ uv pip install --upgrade beartype   # <-- when you no longer have the strength to care about lock files
Via "conda", the corporate scientist in casual lab attire who wants to be your buddy, pal:
$ conda config --add channels conda-forge  # <-- where did python packaging go wrong?
$ conda install conda-forge::beartype      # <-- it all seemed so simple, once.

Right: @​beartype 0.23.1. Left: Your codebase. Middle: Your CTO stares dumbfounded.

@​beartype 0.23.1 is helping @​leycec and his beautiful science wife to eat food. Thanks entirely to...

GitHub Sponsors: Befriend the Bear and Get a Bear for Life

This release comes courtesy these proud GitHub Sponsors, without whom everyone in the @​leycec family would currently be eating grasshoppers in the abandoned back lot again:

• @​mirailabs (Mirai Labs) — On-device AI for Apple Silicon, powered by bears. the future: it's powered by bears https://trymirai.com
• @​sesco-llc (SESCO Enterprises) — The Power of Innovation in Trading this inspires me to get out of the house https://sescollc.com
• @​DylanModesitt (Dylan Modesitt) — quantitative strategies energy trading associate ...wikipedia, don't fail me now! https://dylanmodesitt.com
• [Tidelift][], paying out recurring income to security-sensitive open-source projects like @​beartype money hype https://www.sonarsource.com/products/sonarqube/advanced-security

If you represent a security-conscious corporate, government, or non-profit, the best way bar none for you to support @​beartype and secure your own workflow is by subscribing to [Tidelift][] through [SonarQube Advanced Security][]. Security giant [Sonar][] recently acquired [Tidelift][], guaranteeing the economic viability of the Tidelift model for billions of future open-source projects that have yet to be born. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.

Thanks so much, masters of fintech and lifted tides.

The Masters of Fintech and Lifted Tides. That's who.

Lastly but Beastly (but not Leastly)...

...to financially feed @​leycec and his friendly @​beartype through either:

• For @​beartype's security-conscious corporate and government userbase, [Tidelift][] vis-a-vis a [SonarQube Advanced Security][] subscription. Security giant [Sonar][] recently acquired [Tidelift][], which very graciously pays out recurring income to security-sensitive open-source projects like @​beartype, NumPy, and other stuff you care about. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.
• For @​beartype's lovely open-source userbase, our ancient GitHub Sponsors profile that predates the existence of dinosaur-like AI chatbots. Come for the candid insider photos of a sordid and disreputable life in the Canadian interior. Stay for the GitHub badge and warm feelings of conviviality, friendship, and cozy Danish-Norwegian hygge hype. Feed @​beartype that @​beartype may feed you.

Cue hypnagogic rave music that encourages fiscal irresponsibility. 🎵 🎹 🎶

... (truncated)

Commits

• f85b67d Beartype 0.23.1: The Ultimate QA Suplex
• 9fe5727 PEP 557 dataclass annotated by forward self-reference.
• f37deb0 Beartype 0.23.1 started.
• ee36089 Beartype 0.23.0: The Year of the QA Fire Ho(r)se
• 3c6fa37 @​beartype 0.23.0 pre-flight.
• 348a8e0 PEP 484 type variable type-checking plan x 2.
• c81d5ef Zensical header.
• d253988 Issue template configuration file.
• 729cee8 PEP 484 forward reference resolution in unnamed namespaces.
• 109b277 PEP 484 stringified "None" forward references.
• Additional commits viewable in compare view

Updates qc-core from 0.0.4 to 0.0.5

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!