chore(deps): weekly safe pypi updates · 5 packages

[mendral-app]

Packages bumped

Package	Old	New	File
tornado	6.5.1	6.5.7	hub/jupyter-server/requirements.txt
urllib3	2.5.0	2.7.0	hub/jupyter-server/requirements.txt
imageio	2.37.0	2.37.3	hub/jupyter-server/requirements.txt
scikit-image	0.25.2	0.26.0	hub/jupyter-server/requirements.txt
xarray	2025.4.0	2026.4.0	hub/jupyter-server/requirements.txt

Per-package detail

tornado 6.5.1 → 6.5.7

• Patch releases within the 6.5.x series with bug fixes and stability improvements
• Impact: Used as the Jupyter/IPython async I/O backend. Patch-only, no behavioral changes. No breaking API changes within the 6.5.x line.

urllib3 2.5.0 → 2.7.0

• Minor releases within the 2.x series with connection handling improvements and internal optimizations
• Impact: HTTP connection pooling library used by requests. Extremely stable backward-compatible API within 2.x. No v3.x exists yet.

imageio 2.37.0 → 2.37.3

• Patch releases with minor bug fixes
• Impact: Image I/O library for data science workloads. Patch-only within 2.37.x series, no API changes.

scikit-image 0.25.2 → 0.26.0

• Minor release with new image processing algorithms and deprecation removals from 0.23/0.24 cycle
• Impact: Image processing library in Jupyter template. New features are additive. API stable for common operations (filters, transforms, morphology).

xarray 2025.4.0 → 2026.4.0

• Calendar-versioned release with new features for labeled multi-dimensional arrays
• Impact: Data analysis library in Jupyter template. Calendar versioning means incremental improvements; no epoch-style breaking changes. API is stable.

Files modified

• hub/jupyter-server/requirements.txt

Skipped this ecosystem

Package	Current	Reason
joblib	1.5.0	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
nltk	3.9.1	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
spacy	3.8.2	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
xlrd	2.0.1	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
pytz	2025.2	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
requests	2.32.4	Covered by open PR mendral/deps/weekly-safe-pypi-20260615
pandas	2.2.3	Major bump to 3.0.3 — requires migration
ipykernel	6.29.5	Major bump to 7.3.0 — requires validation
ipython	9.2.0	Large minor bump to 9.14.1 — needs review
websockets	12.0	Major bump to 16.0 — breaking changes
uvicorn	0.30.1	Large bump to 0.49.0 — needs review
pydantic	2.9.1	Large minor bump to 2.13.4 — needs review
httpx	0.27.0	Minor bump to 0.28.1 — possible breaking changes
fastapi	0.111.0	Latest 0.138.0 published after cooldown (2026-06-20)
jupyter-server	2.16.0	Latest 2.20.0 published after cooldown (2026-06-17)
pytest	8.3.5	Latest 9.1.1 published after cooldown (2026-06-19)
numba	0.61.2	Large jump to 0.65.1 — JIT compiler, needs validation
matplotlib	3.10.3	Minor bump to 3.11.0 — needs review
aiohttp	3.12.14	Minor bump to 3.14.1 — needs review
beautifulsoup4	4.13.4	Minor bump to 4.15.0 — needs review
bokeh	3.7.3	Minor bump to 3.9.1 — needs review
plotly	6.0.1	Minor bump to 6.8.0 — needs review
scikit-learn	1.6.1	Minor bump to 1.9.0 — needs review
orjson	3.10.18	Minor bump to 3.11.9 — needs review
numpy	1.26.4	Blocked by gensim compatibility
scipy	1.13.1	Blocked by gensim compatibility
openpyxl	3.1.5	Already at latest version
pillow	12.2.0	Already at latest version
seaborn	0.13.2	Already at latest version
sympy	1.14.0	Already at latest version

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session