Update dependency matplotlib to v3.11.0#307
Conversation
There was a problem hiding this comment.
LGTM — routine Renovate lockfile update, no code changes.
What was reviewed: the poetry.lock diff for chart_data_extractor, confirming the split into two matplotlib entries (3.10.9 for python<3.13, 3.11.0 for python>=3.13) is consistent with matplotlib 3.11's raised minimum Python requirement, and that hashes/dependency metadata are internally consistent.
Extended reasoning...
Overview
Single-file change to chart_data_extractor/poetry.lock, adding a new matplotlib 3.11.0 lock entry (for python_version >= 3.13) alongside the existing 3.10.9 entry (now marked python_version < 3.13). This is an automated Renovate dependency bump; no application source code is touched.
Security risks
None. This only updates a plotting library's lockfile metadata (hashes, wheel URLs, markers, dependency version constraints). Matplotlib is used for chart generation in a sandboxed code interpreter context, not for auth, crypto, or handling sensitive data.
Level of scrutiny
Low. This is a mechanical, bot-generated lockfile update with no logic changes. The added entry's dependency list (contourpy, cycler, fonttools, kiwisolver, numpy, packaging, pillow, pyparsing, python-dateutil) matches the existing entry's shape, and the version-marker split correctly reflects matplotlib 3.11 raising its minimum supported Python to 3.11.
Other factors
No prior review comments or discussion on this PR. No outstanding concerns to address.
This PR contains the following updates:
3.10.9→3.11.0Release Notes
matplotlib/matplotlib (matplotlib)
v3.11.0Compare Source
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.