Skip to content

Update dependency pandas to v3 #839

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update dependency pandas to v3 #839

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 21, 2026

This PR contains the following updates:

Package Change Age Confidence
pandas >=2.3.3,<3.0 → >=3,<3.1 age confidence
pandas ==2.3.3 → ==3.0.0 age confidence

Release Notes

pandas-dev/pandas (pandas)

v3.0.0: pandas 3.0.0

Compare Source

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes some new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher.
The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Jan 21, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...


The current project's supported Python range (>=3.10,<3.14) is not compatible with some of the required packages Python requirement:
  - pandas requires Python >=3.11, so it will not be installable for Python >=3.10,<3.11

Because no versions of pandas match >3,<3.1
 and pandas (3.0.0) requires Python >=3.11, pandas is forbidden.
So, because github-dependents-info depends on pandas (>=3,<3.1), version solving failed.

  * Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties

    For pandas, a possible solution would be to set the `python` property to ">=3.11,<3.14"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

@github-actions
Copy link
Contributor

github-actions bot commented Jan 21, 2026

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
⚠️ ACTION actionlint 4 3 0 0.08s
✅ COPYPASTE jscpd yes no no 1.73s
⚠️ DOCKERFILE hadolint 2 1 0 0.06s
✅ JSON jsonlint 3 0 0 0.32s
✅ JSON prettier 3 0 0 0 0.51s
✅ JSON v8r 3 0 0 2.4s
⚠️ MARKDOWN markdownlint 12 0 17 0 1.18s
✅ MARKDOWN markdown-table-formatter 12 0 0 0 0.31s
✅ PYTHON bandit 7 0 0 1.42s
✅ PYTHON black 7 0 0 0 1.99s
✅ PYTHON flake8 7 0 0 1.01s
✅ PYTHON isort 7 0 0 0 0.26s
⚠️ PYTHON mypy 7 5 0 4.7s
✅ PYTHON pylint 7 0 0 9.24s
⚠️ PYTHON pyright 7 4 0 5.98s
✅ PYTHON ruff 7 0 0 0 0.04s
✅ REPOSITORY checkov yes no no 18.49s
✅ REPOSITORY gitleaks yes no no 16.88s
✅ REPOSITORY git_diff yes no no 0.02s
⚠️ REPOSITORY grype yes 11 no 36.71s
✅ REPOSITORY secretlint yes no no 0.77s
✅ REPOSITORY syft yes no no 1.94s
❌ REPOSITORY trivy yes 1 no 9.23s
✅ REPOSITORY trivy-sbom yes no no 5.28s
✅ REPOSITORY trufflehog yes no no 3.55s
✅ SPELL cspell 49 0 0 4.19s
⚠️ SPELL lychee 30 2 0 3.61s
✅ YAML prettier 15 0 0 0 0.88s
✅ YAML v8r 15 0 0 7.29s
✅ YAML yamllint 15 0 0 0.58s

Detailed Issues

❌ REPOSITORY / trivy - 1 error 
2026-01-21T18:13:55Z	INFO	[vulndb] Need to update DB
2026-01-21T18:13:55Z	INFO	[vulndb] Downloading vulnerability DB...
2026-01-21T18:13:55Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
5.25 MiB / 82.99 MiB [--->___________________________________________________________] 6.32% ? p/s ?30.34 MiB / 82.99 MiB [---------------------->______________________________________] 36.56% ? p/s ?55.39 MiB / 82.99 MiB [---------------------------------------->____________________] 66.74% ? p/s ?82.56 MiB / 82.99 MiB [---------------------------------------------->] 99.48% 128.58 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 128.58 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 128.58 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 120.33 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 120.33 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 120.33 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 112.57 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 112.57 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 112.57 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 105.30 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 105.30 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [--------------------------------------------->] 100.00% 105.30 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 98.51 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 98.51 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 98.51 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 92.15 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 92.15 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 92.15 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 86.21 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 86.21 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 86.21 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [---------------------------------------------->] 100.00% 80.65 MiB p/s ETA 0s82.99 MiB / 82.99 MiB [-------------------------------------------------] 100.00% 16.85 MiB p/s 5.1s2026-01-21T18:14:01Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-01-21T18:14:01Z	INFO	[vuln] Vulnerability scanning is enabled
2026-01-21T18:14:01Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-01-21T18:14:01Z	INFO	[misconfig] Need to update the checks bundle
2026-01-21T18:14:01Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-01-21T18:14:03Z	INFO	[python] Licenses acquired from one or more METADATA files may be subject to additional terms. Use `--debug` flag to see all affected packages.
2026-01-21T18:14:03Z	INFO	Suppressing dependencies for development and testing. To display them, try the '--include-dev-deps' flag.
2026-01-21T18:14:03Z	INFO	Number of language-specific files	num=2
2026-01-21T18:14:03Z	INFO	[pip] Detecting vulnerabilities...
2026-01-21T18:14:03Z	INFO	[poetry] Detecting vulnerabilities...
2026-01-21T18:14:03Z	INFO	Detected config files	num=2

Report Summary

┌───────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target       │    Type    │ Vulnerabilities │ Misconfigurations │
├───────────────────┼────────────┼─────────────────┼───────────────────┤
│ poetry.lock       │   poetry   │       10        │         -         │
├───────────────────┼────────────┼─────────────────┼───────────────────┤
│ requirements.txt  │    pip     │       10        │         -         │
├───────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile        │ dockerfile │        -        │         0         │
├───────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/Dockerfile │ dockerfile │        -        │         0         │
└───────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability 

(Truncated to 5000 characters out of 18410)
⚠️ ACTION / actionlint - 3 errors 
.github/workflows/github-dependents-info.yml:53:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
   |
53 |         run: sudo chown -R $USER:$USER .
   |         ^~~~
.github/workflows/github-dependents-info.yml:53:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
   |
53 |         run: sudo chown -R $USER:$USER .
   |         ^~~~
.github/workflows/release.yml:63:9: shellcheck reported issue in this script: SC2086:info:1:55: Double quote to prevent globbing and word splitting [shellcheck]
   |
63 |         run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> ${GITHUB_ENV}
   |         ^~~~
⚠️ REPOSITORY / grype - 11 errors 
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME        INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS           RISK   
aiohttp     3.13.2     3.13.3    python  GHSA-6mq8-rvhq-8wgg  High      < 0.1% (17th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-6jhg-hg63-jvvf  Medium    < 0.1% (17th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-jj3x-wxrx-4x23  Medium    < 0.1% (17th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-g84x-mcqj-x9qq  Medium    < 0.1% (14th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-54jq-c3m8-4m76  Low       < 0.1% (17th)  < 0.1  
urllib3     2.6.2      2.6.3     python  GHSA-38jv-5279-wg99  High      < 0.1% (3rd)   < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-mqqc-3gqh-h2x8  Low       < 0.1% (11th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-69f9-5gxw-wvc2  Low       < 0.1% (11th)  < 0.1  
aiohttp     3.13.2     3.13.3    python  GHSA-fh55-r93g-j68g  Low       < 0.1% (11th)  < 0.1  
filelock    3.20.1     3.20.3    python  GHSA-qmgc-5h2g-mvrw  Medium    < 0.1% (2nd)   < 0.1  
virtualenv  20.35.4    20.36.1   python  GHSA-597g-3phw-6986  Medium    < 0.1% (2nd)   < 0.1
[0036] ERROR discovered vulnerabilities at or above the severity threshold
⚠️ DOCKERFILE / hadolint - 1 error 
Dockerfile:5 DL3013 warning: Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
docker/Dockerfile:7 DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
docker/Dockerfile:12 DL3045 warning: `COPY` to a relative destination without `WORKDIR` set.
docker/Dockerfile:15 DL3003 warning: Use WORKDIR to switch to a directory
docker/Dockerfile:15 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/Dockerfile:15 SC2226 warning: This ln has no destination. Check the arguments, or specify '.' explicitly.
docker/Dockerfile:24 DL3025 warning: Use arguments JSON notation for CMD and ENTRYPOINT arguments
⚠️ SPELL / lychee - 2 errors 
[IGNORED] docker://nvuillam/github-dependents-info:v3.0.0 | Unsupported: Error creating request client: builder error for url (docker://nvuillam/github-dependents-info:v3.0.0)
[404] https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically | Network error: Not Found
[404] https://github.com/actions-marketplace-validations/AkhileshNS_heroku-deploy | Network error: Not Found
📝 Summary
---------------------
🔍 Total..........177
✅ Successful.....138
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded........36
❓ Unknown..........0
🚫 Errors...........2

Errors in .github/dependabot.yml
[404] https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically | Network error: Not Found

Errors in docs/github-dependents-info.md
[404] https://github.com/actions-marketplace-validations/AkhileshNS_heroku-deploy | Network error: Not Found
⚠️ MARKDOWN / markdownlint - 17 errors 
.github/PULL_REQUEST_TEMPLATE.md:1 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "## Description"]
docs/github-dependents-info.md:8:401 error MD013/line-length Line length [Expected: 400; Actual: 1092]
README.md:47:2 error MD045/no-alt-text Images should have alternate text (alt text)
README.md:48:2 error MD045/no-alt-text Images should have alternate text (alt text)
README.md:49:2 error MD045/no-alt-text Images should have alternate text (alt text)
README.md:50:2 error MD045/no-alt-text Images should have alternate text (alt text)
README.md:216:3 error MD051/link-fragments Link fragments should be valid [Context: "[Installation](#⚙️-installation)"]
README.md:217:3 error MD051/link-fragments Link fragments should be valid [Context: "[Usage](#🛠️-usage)"]
README.md:218:3 error MD051/link-fragments Link fragments should be valid [Context: "[Examples](#🧪-examples)"]
README.md:276 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:280 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:285 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:289 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:293 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:297 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:301 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
README.md:328:1 error MD045/no-alt-text Images should have alternate text (alt text)
⚠️ PYTHON / mypy - 5 errors 
github_dependents_info/gh_dependents_info.py:50: error: Need type annotation for "packages" (hint: "packages: list[<type>] = ...")  [var-annotated]
github_dependents_info/gh_dependents_info.py:51: error: Need type annotation for "all_public_dependent_repos" (hint: "all_public_dependent_repos: list[<type>] = ...")  [var-annotated]
github_dependents_info/gh_dependents_info.py:52: error: Need type annotation for "badges" (hint: "badges: dict[<type>, <type>] = ...")  [var-annotated]
github_dependents_info/gh_dependents_info.py:53: error: Need type annotation for "result" (hint: "result: dict[<type>, <type>] = ...")  [var-annotated]
github_dependents_info/gh_dependents_info.py:240: error: Item "None" of "Path | None" has no attribute "mkdir"  [union-attr]
Found 5 errors in 1 file (checked 7 source files)
⚠️ PYTHON / pyright - 4 errors 
github_dependents_info/__main__.py
  github_dependents_info/__main__.py:7:6 - error: Import "rich.console" could not be resolved (reportMissingImports)
github_dependents_info/gh_dependents_info.py
  github_dependents_info/gh_dependents_info.py:13:8 - error: Import "pandas" could not be resolved (reportMissingImports)
  github_dependents_info/gh_dependents_info.py:14:6 - error: Import "bs4" could not be resolved (reportMissingImports)
  github_dependents_info/gh_dependents_info.py:240:32 - error: "mkdir" is not a known attribute of "None" (reportOptionalMemberAccess)
4 errors, 0 warnings, 0 informations

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@beta --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants