Skip to content

deps(quantum-ml): bump the quantum-ml-deps group across 1 directory with 20 updates - #1214

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ai-projects/quantum-ml/quantum-ml-deps-08e39e4629
Closed

deps(quantum-ml): bump the quantum-ml-deps group across 1 directory with 20 updates#1214
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ai-projects/quantum-ml/quantum-ml-deps-08e39e4629

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on numpy, pandas, scikit-learn, mcp, azure-quantum, qiskit, torch, scipy, qiskit-machine-learning, azure-identity, matplotlib, ipykernel, pydantic, anyio, joblib, gunicorn, gevent, python-json-logger, prometheus-client and mypy to permit the latest version.
Updates numpy from 2.5.1 to 2.5.3

Release notes

Sourced from numpy's releases.

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

The NumPy 2.5.3 is a patch release that fixes bugs discovered after the 2.5.2 release. Apart from the usual bug and maintenance work, there are a number of StringDType related fixes for problems discovered during the ongoing string work in the main branch.

This release supports Python versions 3.12-3.15

Changes

  • Casting a fixed-width byte string array (np.bytes_) to StringDType now raises TypeError when the bytes are not valid UTF-8. Previously the invalid bytes were stored as-is and later caused undefined behavior in string operations.

    (gh-32296)

  • MaskedArray._fill_value would become stale when ufuncs that change dtype left the result holding a fill_value typed for the old dtype. The mismatch was silent until something later called _check_fill_value, such as .view(), and then a TypeError would be raised. Now, when the copied fill_value is no longer valid for the new dtype, fall back to the default fill_value for that dtype instead of propagating the stale value. This may raise a ComplexWarning if the fill_value is complex and the new dtype is real.

    (gh-32423)

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Iason Krommydas
  • James Davies +
  • Joren Hammudoglu
  • Maanas Arora
  • Matti Picus
  • Nathan Goldbaum
  • Shikhar Goel +
  • Yeonho Kim +

Pull requests merged

A total of 27 pull requests were merged for this release.

  • #32235: MAINT: Prepare 2.5.x for further development

... (truncated)

Commits
  • dd88c0c Merge pull request #32511 from charris/prepare-2.5.3
  • edcac6a REL: Prepare for the NumPy 2.5.3 release
  • fd4d908 Merge pull request #32509 from charris/backport-32496
  • 65bb1da BUG: fix crash in ufunc.resolve_dtypes with a Python scalar type (#32496)
  • 294956e Merge pull request #32506 from charris/backport-32503
  • 26428d9 DOC: fix scipy docs links in intersphinx mapping (#32507)
  • 5fab1cb DOC: use static scipy doc site for intershpinx (#32503)
  • 7beed2f Merge pull request #32481 from ngoldbaum/stringdtype-backport
  • 8972f70 Merge pull request #32478 from charris/backport-32466
  • ab1b589 Merge pull request #32477 from charris/backport-32423
  • Additional commits viewable in compare view

Updates pandas to 3.0.6

Release notes

Sourced from pandas's releases.

pandas 3.0.6

We are pleased to announce the release of pandas 3.0.6. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version. This is also the first release to support Python 3.15.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 2905718 RLS: 3.0.6
  • 3188ced [backport 3.0.x] BUG: read_csv(sep=None) raised TypeError instead of falling...
  • f097905 DOC: cleanup 3.0.6 whatsnew + mention Python 3.15 support (#68965) (#68969)
  • 4f68223 [backport 3.0.x] BUG: fix setting with bool column mask into 1-column DataFra...
  • e3df0e8 [backport 3.0.x] BUG: full-slice setitem into a pyarrow-backed array shared m...
  • b7735f6 Backport PR #66117 on branch 3.0.x (BUG: interpolate leaving NAs unfilled for...
  • bca0b77 [backport 3.0.x] BUG: read_csv leaked the string-intern table when a column f...
  • bca1e5d [backport 3.0.x] BUG: prevent external mutation of RangeIndex._data (CoW) (#6...
  • c95b42c [3.0.x] CI: skip cython-lint on pre-commit.ci (#68910)
  • 9cbd884 [backport 3.0.x] Backport of some already merged regression fixes (#68447)
  • Additional commits viewable in compare view

Updates scikit-learn from 1.9.0 to 1.9.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.9.1

We're happy to announce the 1.9.1 release.

This release contains a few bug fixes and is the first version supporting Python 3.15.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.9.html#version-1-9-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • 866c0f5 generate changelog
  • 12f135f update upper bounds
  • 43ff2f2 bump version
  • b851524 DOC Mark dev index as orphan (#34916)
  • 01d56d4 DOC Fix wikipedia principal eigenvector example references (#34915)
  • b86a1e2 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
  • d282698 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#34897)
  • eb34279 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
  • 7581303 FIX: Fix QuantileTransformer(ignore_implicit_zeros=True) sub-sampling behav...
  • ac47f4d FIX: avoid EfficiencyWarning in OPTICS with metric='precomputed' (#34692)
  • Additional commits viewable in compare view

Updates mcp to 2.2.0

Release notes

Sourced from mcp's releases.

v2.2.0

pip install -U mcp. Docs: https://py.sdk.modelcontextprotocol.io/

A few defaults changed in this release. If you run a server or client on 2.x, skim these first:

Behaviour changes

HTTP client redirects are only followed within the endpoint's origin (#3397)

  • Client("https://..."), streamable_http_client and sse_client follow a redirect only if it stays on the same scheme, host and port (or upgrades http to https on the same host).
  • A redirect anywhere else is not followed: the call fails with MCPError and the session stays usable (an SSE connect fails with httpx2.HTTPStatusError). If that other URL is the server you meant, use it as the endpoint URL.
  • The follow_redirects setting on an httpx2.AsyncClient you pass in is no longer used for MCP requests, so you don't need it for the trailing-slash redirect any more.
  • The OAuth providers apply the same rule to their own requests.

Idle Streamable HTTP sessions now expire (legacy <=2025-11-25 spec( (#3395)

  • A stateful session with nothing in flight for 30 minutes is closed. The client's next request gets a 404 and it has to initialize again.
  • Clients that keep the GET stream open (the SDK's Client does) are not affected. Neither are stateless servers or 2026-07-28 connections.
  • A server also holds at most 10 000 sessions at once; beyond that, new sessions get a 503.
  • To turn either off: mcp.run(transport="streamable-http", session_idle_timeout=None, max_sessions=None) (also on streamable_http_app() and run_streamable_http_async()).

The OAuth client checks the authorization server's issuer on the legacy path too (#3398)

  • For servers without protected resource metadata, authorization server metadata whose issuer isn't the server's own origin is now rejected with OAuthFlowError: Authorization server metadata issuer mismatch. The protected-resource-metadata path has done this since 2.0.
  • A 403 that isn't an insufficient_scope challenge is returned to the caller instead of retried.
  • If protected resource metadata can't be fetched because of a 5xx/429, the flow now stops instead of falling back to the legacy endpoints.

Two new MCPDeprecationWarnings (#3435, #3447)

  • ClientCredentialsOAuthProvider / PrivateKeyJWTOAuthProvider without issuer=. Pass your authorization server's issuer URL; 3.0 will require it.
  • AuthSettings with resource_server_url set but validate_token_resource unset. Set it to True or False; 3.0 defaults it to True.
  • Both keep working as before in 2.x; this mostly matters if your tests turn warnings into errors.

New

  • AuthSettings.validate_token_resource: only accept tokens your TokenVerifier reports as issued for this server (#3447).
  • issuer= on ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider (#3398).
  • session_idle_timeout= and max_sessions= on the Streamable HTTP server entry points (#3395).

Fixes

  • A client DELETE frees its session immediately, and a refused opening request no longer leaves a session behind (#2455, #3228, #3300).
  • $refs in a tool's outputSchema resolve within that schema only; an unresolvable one surfaces as RuntimeError: Invalid schema for tool ... (#3394).

Known gaps

The tasks extension (SEP-2663), DPoP (SEP-1932) and the jwt-bearer grant are not implemented yet; https://github.com/modelcontextprotocol/python-sdk/blob/main/ROADMAP.md tracks them.

What's Changed

... (truncated)

Commits
  • 9972c21 Replace RootModel wrappers with type aliases and TypeAdapter validation (#3470)
  • fd66270 docs: refresh translations, and translate pages in parallel (#3458)
  • 08a3bc8 docs: ask for AI disclosure on comments too (#3459)
  • 7bb486a docs: stop presenting the in-memory client as the way to connect (#3443)
  • 0c91368 Add AuthSettings.validate_token_resource to check a bearer token's resource (...
  • 9771e6b Keep following a relative redirect when the endpoint URL carries userinfo (#3...
  • a925e55 Bump the locked versions of eight dev and test dependencies (#3449)
  • e8b9486 Bump pymdown-extensions from 11.0 to 11.0.1 (#3285)
  • c6762e8 Follow redirects only within the MCP endpoint's origin (#3397)
  • 5fd3abc Skip automatic docs previews for fork PRs and drop the setup-uv retry steps (...
  • Additional commits viewable in compare view

Updates azure-quantum to 3.13.0

Release notes

Sourced from azure-quantum's releases.

azure-quantum_v3.13.0

What's Changed

New Contributors

Full Changelog: microsoft/azure-quantum-python@azure-quantum_v3.12.0...azure-quantum_v3.13.0

Commits
  • 39fde17 Pin cryptography to 46.0.3 (#775)
  • 959eee6 Fix job attachment 401s for submitted jobs (#773)
  • 91d124f Regenerate client from rest api (#772)
  • e7c9490 Update network isolation policy (#770)
  • 4640862 Add Job.list_attachments() to enumerate a job's output container blobs (#768)
  • 82cced9 Fix typo in signal-processing.ipynb (#769)
  • 713004b Allow version to optionally be manually set during release (#767)
  • b25df2c Add update job operation to support updating name, priority and tags (#764)
  • e1689fd Support full-result format in Pasqal Result (#762)
  • cae08e6 Query Azure Artifacts Feed for Existing Version when Determining Built Versio...
  • Additional commits viewable in compare view

Updates qiskit from 2.5.0 to 2.5.2

Release notes

Sourced from qiskit's releases.

Qiskit 2.5.2

Changelog

Fixed

  • Sum VF2Layout average errors in a deterministic order (#16732) (#16761)
  • Fix add/sub optimizations including the same symbols (backport #16752) (#16759)
  • Reimplement SymbolExpr::eval to be iterative (backport #16756) (#16758)
  • dagcircuit: transfer DAG-level variables in substitute_node_with_dag (#15542) (#16744)
  • Fix memory leak in Suzuki-Trotter synthesis (#16687) (#16739)
  • Fix OptimizeCliffordT producing non-unitarily-equivalent output when basis excludes sx/sxdg (#16729) (#16735)
  • Parameter expression bugfixes (backport #16283) (#16714)
  • Update to rsgridsynth 0.2.2 (backport #16685) (#16711)
  • Fix potential panic in DAGCircuit.depth by bumping rustworkx-core to 0.18.1 (#16686) (#16715)
  • Preserve StatePreparation width in inverse (#16431) (#16681)
  • Fix circuit drawing layer overlaps inside of ControlFlowOps (#16639) (#16659)
  • Fix non-determinism in DAGCircuit::remove_qubits (#16656) (#16658)

Qiskit 2.5.1

Changelog

Fixed

  • Fix serial_layers global phase copying (#16362) (#16647)
  • Fix transpiler error message with routing_pass when layout_trials or swap_trials is set (#16637) (#16644)
  • Fix deadlock in Optimize1qGatesDecomposition (#16592) (#16645)
  • Clarify error message about gate missing from WrapAngleRegistry (#16633) (#16635)
  • Fix sx resynthesis of negative angles in CommutativeCancellation (#16599) (#16615)
  • Fix tautological boolean oracle synthesis (#16530) (#16543)
Commits

Updates torch from 2.13.0 to 2.14.1

Release notes

Sourced from torch's releases.

PyTorch 2.14.1 Release

This release is meant to fix the following regressions and silent correctness issues:

Silent correctness fixes

  • Fix incorrect torch.linalg.lstsq solutions on MPS for complex batched underdetermined systems (#196113), fixed by #196128
  • Fix non-orthogonal U and inaccurate small singular values from torch.linalg.svd on MPS for rank-deficient and ill-conditioned inputs (#196112), fixed by #196139 and #199063
  • Update the CUDA 13.2 Linux binaries to CUDA 13.2.2 (#196351). This NVIDIA update resolves two critical issues that could produce incorrect results (CUDA 13.2.2 release notes):
    • cuBLAS: cublasLtMatmul() could ignore tensor-wide scaling for NVFP4 matrix multiplications (introduced in CUDA 13.2 Update 1)
    • Compiler: failed thread reconvergence could leave stale or corrupted register values in kernels with nested thread divergence (present since CUDA 12.8)

Regression fixes

  • Fix torch.linalg.svd, torch.linalg.svdvals and torch.linalg.lstsq failing on MPS with a Metal pipeline-state error for inputs above 8192 elements (#195937), fixed by #195949 and #195950
  • Fix internal assert in torch.svd(out=) on MPS for complex inputs (#195822), fixed by #195872

PyTorch 2.14.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

torch.nn

  • torch.nn.LinearCrossEntropyOptions no longer accepts acc_policy="balanced"; use "compact" instead (#188283)

    The "balanced" policy was removed because "compact" provides the same weight-gradient accumulation precision with lower memory use on CUDA, already uses the equivalent scratch layout for mixed-precision inputs on other devices, and was never selected by "auto". Constructing the options with acc_policy="balanced" now raises ValueError: invalid acc_policy: 'balanced'; expected one of 'auto', 'accurate', 'compact'.

... (truncated)

Commits
  • 5c48869 [MPS] Fix Jacobi SVD convergence for small columns (#199086)
  • 35223a2 [release/2.14] Run the release runner-group reconcile in pytorch/pytorch (#19...
  • 41ffbc4 [release-only] Update version to 2.14.1 (#198661)
  • e8f0c01 [release/2.14] [CD] Update to CUDA 13.2.2 for Linux binaries (#198644)
  • 911665d [MPS] Cherry-pick native SVD fixes into release/2.14 (#198394)
  • 2b3ec34 [release/2.14] Import SDPAParams in test_transformers to fix lint (#194970)
  • 08187d9 [cuDNN] Add guards for cuDNN SDPA decode (#194963)
  • 8ceea97 Pin cython < 3.3.0 for the Windows Triton wheel build (#194931)
  • 99ecebc [Cherry-pick][release/2.14] [inductor] Fix loop-local load CSE lifetime (#194...
  • ec283a7 Bump the Python 3.15 numpy pin to 2.5.2 (#194821)
  • Additional commits viewable in compare view

Updates scipy to 1.18.1

Release notes

Sourced from scipy's releases.

SciPy 1.18.1 Release Notes

SciPy 1.18.1 is a bug-fix release with no new features compared to 1.18.0. This release includes binaries on PyPI for Python 3.15, and the minimum required version of the GCC toolchain has been increased to 10.3.0.

Authors

  • Name (commits)
  • Wasim Akram (2) +
  • Jake Bowhay (1)
  • Michael Bratsch (1)
  • Dietrich Brunn (1)
  • Evgeni Burovski (1)
  • Aadya Chinubhai (1)
  • Lucas Colley (3)
  • Tekin Ertekin (1) +
  • Fuyugithub (2) +
  • Ralf Gommers (11)
  • Joren Hammudoglu (1)
  • Ijtihed Kilani (1) +
  • Andrew Nelson (2)
  • Ilhan Polat (1)
  • Tyler Reddy (39)
  • romao05 (1) +
  • Michael Simacek (1) +
  • Jacob Vanderplas (2)

A total of 18 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Note that the source and binary assets associated with this release were published to PyPI using trusted publishing, and so the trusted assets and their hashes are made available more securely at https://pypi.org/project/scipy/1.18.1/ rather than providing them here in a less secure manner.

A complete list of issues and pull requests associated with this release is available in the associated README.txt.

Commits
  • e4e854e REL: SciPy 1.18.1 rel commit
  • 3c8e5f8 BLD, MAINT: pythran bounds for 1.18.1 (#25978)
  • 54c0f95 BLD, MAINT: pythran bounds for 1.18.1
  • 45a355d Merge pull request #25884 from tylerjereddy/treddy_backports_1.18.1
  • a717e28 DOC: PR 25884 revisions
  • bb489c0 DOC: PR 25884 revisions
  • 09bca24 BLD: package: pin meson on win-64 to avoid clang-cl bug (#25913)
  • 095fe56 DOC, BLD: PR 25884 revisions
  • e66ea64 DOC: update minimum GCC version in toolchain roadmap
  • c021653 TST: tolerance bumps and skips on 32-bit platforms
  • Additional commits viewable in compare view

Updates qiskit-machine-learning from 0.9.0 to 0.9.1

Release notes

Sourced from qiskit-machine-learning's releases.

v0.9.1

Qiskit Machine Learning 0.9.1

Qiskit Machine Learning 0.9.1 includes new regression-oriented kernel loss functions, improvements to QNN behavior and numerical robustness, a new quantum dataset generator, compatibility fixes, and updates to development and CI infrastructure.

Highlights

  • Added regression-based kernel loss functions, including SVRLoss and MSRLoss, together with convenient string aliases.
  • Added a Phase of Matter quantum dataset generator.
  • Fixed SamplerQNN._postprocess handling for transpiled circuit layouts.
  • Fixed numerical issues in EffectiveDimension Fisher information calculations for non-positive outputs.
  • Improved support for multidimensional sparse COO data.
  • Deprecated automatic qubit alignment.
  • Updated typing, linting, formatting, security, and CI tooling.

What's Changed

New Contributors

... (truncated)

Commits
  • c97b5ed Set version to 0.9.1
  • 3bdcce7 Fix: Types errors with new version of mypy (#1063)
  • 8609b0d Bump actions/setup-python from 6 to 7 (#1052)
  • c6ae27d Removed unnecessary warnings to make QNNs consistent with other algorithms. (...
  • b651c7d Added AI policy and instructions for agents. (Issue #1057) (#1058)
  • cfcdb65 Bump coverallsapp/github-action from 2.3.7 to 2.3.8 (#1053)
  • 5b5a221 Fix CI by adding explicit casts to scalars coming from multidimensional COO (...
  • 94c12da Bump actions/checkout from 6 to 7 (#1049)
  • 725c7c8 Add Phase of Matter quantum dataset generator (#1044)
  • f683284 Fix SamplerQNN._postprocess to handle transpiled circuit layouts (#1041)
  • Additional commits viewable in compare view

Updates azure-identity to 1.26.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.26.0

1.26.0 (2026-09-30)

Features Added

  • ManagedIdentityCredential now supports user-assigned managed identities on Azure Arc-enabled servers. An identity can be selected by client ID, object ID, or resource ID. Token responses that do not confirm the requested identity are rejected. (#48967)

Bugs Fixed

  • Fixed synchronous Service Fabric managed identity authentication with MSAL 1.39.0 and later. Service Fabric now uses the session from an Azure Core RequestsTransport. (#48967)
  • Fixed an issue where AuthorizationCodeCredential and the asynchronous OnBehalfOfCredential could return a cached token for another account when multiple credentials shared a token cache. (#49001)

Other Changes

  • Added RequestIdPolicy to the default pipeline policies to ensure a unique x-ms-client-request-id header is sent with each request. (#46070)
  • CertificateCredential now passes the PEM private key to MSAL as a str rather than bytes, matching MSAL's documented client_credential contract. (#46801)
  • Bumped the minimum dependency on msal to >=1.39.0.
Commits
  • 30d8bb9 [identity] prepare azure-identity 1.26.0 release (#49290)
  • c7148b7 [identity] Enable user-assigned managed identity for AzureArcCredential (#48967)
  • c5b1f4f [Identity] Fix identity cache issue (#49001)
  • 9d085c1 [AutoPR azure-mgmt-compute-bulkaction]-generated-from-SDK Generation - Python...
  • efc412d [TA] fix release error (#49261)
  • 3d9b8b3 Prepare Responses 2.3.0b2 release (#49281)
  • 8e49d15 [AutoPR azure-mgmt-resiliencemanagement]-generated-from-SDK Generation - Pyth...
  • ef68c78 Preserve canonical agent reference in response snapshots (#49256)
  • 3754db9 Configurations: 'specification/applink/AppLink.Management/tspconfig.yaml', a...
  • 0929352 [Mgmt] Make review drafts and incomplete outcomes reliable (#49275)
  • Additional commits viewable in compare view

Updates matplotlib to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries
Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch...

    Description has been truncated

@dependabot
deps(quantum-ml): bump the quantum-ml-deps group across 1 directory w…
ba88f9a 
…ith 20 updates

Updates the requirements on [numpy](https://github.com/numpy/numpy), [pandas](https://github.com/pandas-dev/pandas), [scikit-learn](https://github.com/scikit-learn/scikit-learn), [mcp](https://github.com/modelcontextprotocol/python-sdk), [azure-quantum](https://github.com/microsoft/azure-quantum-python), [qiskit](https://github.com/Qiskit/qiskit), [torch](https://github.com/pytorch/pytorch), [scipy](https://github.com/scipy/scipy), [qiskit-machine-learning](https://github.com/qiskit-community/qiskit-machine-learning), [azure-identity](https://github.com/Azure/azure-sdk-for-python), [matplotlib](https://github.com/matplotlib/matplotlib), [ipykernel](https://github.com/ipython/ipykernel), [pydantic](https://github.com/pydantic/pydantic), [anyio](https://github.com/agronholm/anyio), [joblib](https://github.com/joblib/joblib), [gunicorn](https://github.com/benoitc/gunicorn), [gevent](https://github.com/gevent/gevent), [python-json-logger](https://github.com/nhairs/python-json-logger), [prometheus-client](https://github.com/prometheus/client_python) and [mypy](https://github.com/python/mypy) to permit the latest version.

Updates `numpy` from 2.5.1 to 2.5.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.1...v2.5.3)

Updates `pandas` to 3.0.6
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.4...v3.0.6)

Updates `scikit-learn` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.9.0...1.9.1)

Updates `mcp` to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v2.2.0)

Updates `azure-quantum` to 3.13.0
- [Release notes](https://github.com/microsoft/azure-quantum-python/releases)
- [Commits](microsoft/azure-quantum-python@azure-quantum_v3.10.0...azure-quantum_v3.13.0)

Updates `qiskit` from 2.5.0 to 2.5.2
- [Release notes](https://github.com/Qiskit/qiskit/releases)
- [Changelog](https://github.com/Qiskit/qiskit/blob/main/docs/release_notes.rst)
- [Commits](Qiskit/qiskit@2.5.0...2.5.2)

Updates `torch` from 2.13.0 to 2.14.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.13.0...v2.14.1)

Updates `scipy` to 1.18.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.18.0...v1.18.1)

Updates `qiskit-machine-learning` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/qiskit-community/qiskit-machine-learning/releases)
- [Commits](qiskit-community/qiskit-machine-learning@0.9.0...0.9.1)

Updates `azure-identity` to 1.26.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.3...azure-identity_1.26.0)

Updates `matplotlib` to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.0...v3.11.2)

Updates `ipykernel` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/ipython/ipykernel/releases)
- [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md)
- [Commits](ipython/ipykernel@v7.3.0...v7.4.0)

Updates `pydantic` to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `anyio` to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.14.1...4.15.1)

Updates `joblib` from 1.5.3 to 1.6.0
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.5.3...1.6.0)

Updates `gunicorn` from 26.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@26.0.0...26.2.0)

Updates `gevent` from 26.5.0 to 26.9.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@26.5.0...26.9.0)

Updates `python-json-logger` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/nhairs/python-json-logger/releases)
- [Changelog](https://github.com/nhairs/python-json-logger/blob/main/docs/changelog.md)
- [Commits](nhairs/python-json-logger@v4.1.0...v4.2.0)

Updates `prometheus-client` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.25.0...v0.26.0)

Updates `mypy` from 2.2.0 to 2.4.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.2.0...v2.4.0)

---
updated-dependencies:
- dependency-name: numpy
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quantum-ml-deps
- dependency-name: pandas
  dependency-version: 3.0.6
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: scikit-learn
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quantum-ml-deps
- dependency-name: mcp
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: azure-quantum
  dependency-version: 3.13.0
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: qiskit
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quantum-ml-deps
- dependency-name: torch
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: scipy
  dependency-version: 1.18.1
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: qiskit-machine-learning
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: quantum-ml-deps
- dependency-name: azure-identity
  dependency-version: 1.26.0
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: ipykernel
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: quantum-ml-deps
- dependency-name: joblib
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: gevent
  dependency-version: 26.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: python-json-logger
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: prometheus-client
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
- dependency-name: mypy
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: quantum-ml-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Bryan-Roe as a code owner October 5, 2026 04:16
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 8, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/ai-projects/quantum-ml/quantum-ml-deps-08e39e4629 branch October 8, 2026 04:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Bryan-Roe Bryan-Roe Awaiting requested review from Bryan-Roe Bryan-Roe is a code owner

Assignees

@Bryan-Roe Bryan-Roe

Labels

autofix dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Bryan-Roe