Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@tensorflow/tfjs	4.8.0 -> 4.12.0
@tensorflow/tfjs-backend-webgl	4.8.0 -> 4.12.0
@tensorflow/tfjs-backend-webgpu	4.8.0 -> 4.12.0
Markdown (changelog)	==3.5 -> ==3.5.1
charset-normalizer	==3.3.1 -> ==3.3.2
contourpy (changelog)	==1.1.1 -> ==1.2.0
fonttools	==4.43.1 -> ==4.44.0
google-auth	==2.23.3 -> ==2.23.4
grpcio (source)	==1.59.0 -> ==1.59.2
jax	==0.4.19 -> ==0.4.20
jaxlib	==0.4.19 -> ==0.4.20
matplotlib (source)	==3.8.0 -> ==3.8.1
pnpm (source)	8.10.0 -> 8.10.2
protobuf	==4.24.4 -> ==4.25.0
tensorboard	==2.15.0 -> ==2.15.1
tensorstore	==0.1.46 -> ==0.1.47
typedoc (source)	0.25.2 -> 0.25.3

---

Release Notes

tensorflow/tfjs (@​tensorflow/tfjs)

v4.12.0

Compare Source

v4.11.0

Compare Source

v4.10.0

Compare Source

v4.9.0

Compare Source

tensorflow/tfjs (@​tensorflow/tfjs-backend-webgpu)

v4.12.0

Compare Source

v4.11.0

Compare Source

v4.10.0

Compare Source

v4.9.0

Compare Source

Python-Markdown/markdown (Markdown)

v3.5.1

Compare Source

Fixed

• Fix a performance problem with HTML extraction where large HTML input could
  trigger quadratic line counting behavior (#​1392).
• Improve and expand type annotations in the code base (#​1394).

Ousret/charset_normalizer (charset-normalizer)

v3.3.2

Compare Source

Fixed

• Unintentional memory usage regression when using large payload that match several encoding (#​376)
• Regression on some detection case showcased in the documentation (#​371)

Added

• Noise (md) probe that identify malformed arabic representation due to the presence of letters in isolated form (credit to my wife)

contourpy/contourpy (contourpy)

v1.2.0: Version 1.2.0

Compare Source

ContourPy 1.2.0 is a significant release with a number of new features. There is a new format for contour lines called LineType.ChunkCombinedNan that is designed to work directly with Bokeh and HoloViews. There are also new functions for manipulating contour lines and filled contours (convert_filled, convert_lines, dechunk_filled and dechunk_lines).

Calling ContourGenerator.filled() with two identical levels now raises a ValueError whereas previously it gave different results depending on algorithm name.

This release supports Python 3.9 to 3.12, and is the first release to ship musllinux aarch64 wheels.

Enhancements:

• Support strings as well as enums in renderer functions (#​284)
• Add new functions dechunk_filled and dechunk_lines (#​290)
• Add new functions convert_filled and convert_lines (#​291, #​293, #​294, #​312, #​313)
• Add new LineType.ChunkCombinedNan (#​296, #​301, #​308)
• Raise if call filled() with lower_level==upper_level (#​317)

Code improvements:

• Code quality improvements (#​282, #​310)
• Improvements to array checking functions (#​298)
• Better use of dtypes and casting when calling numpy functions (#​300, #​306, #​308, #​314)
• Update type annotations for Matplotlib 3.8 (#​303)
• Extra validation when dechunking and converting contour lines and filled contours (#​316)

Documentation improvements:

• Use versionadded sphinx directive (#​285)
• Remove threaded experimental warnings (#​297)
• Extract benchmark ratios when generating benchmark plots (#​302)
• Document new functions and conversion to Shapely geometries (#​318)

Build, testing and CI improvements:

• Add new CI run using NumPy nightly wheels (#​280)
• Test contour levels that are +/-np.inf (#​283)
• Improved PyPy CI (#​287, #​307)
• Use better names for enums when reporting parametrised tests (#​292)
• Improved mpl debug renderer tests (#​295)
• Support musllinux aarch64 (#​305)
• Run test suite in parallel (#​311)
• Miscellaneous build and CI improvements (#​279, #​281, #​288, #​315, #​319)

fonttools/fonttools (fonttools)

v4.44.0

Compare Source

• [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#​3317).
• [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#​3321, #​3324).
• [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#​3322, #​3323).
• [instancer] When running --update-name-table ignore axes that have no STAT axis values (#​3318, #​3319).
• [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee).
• [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#​3310).
• [subset] Handle null-offsets in MarkLigPos subtables.
• [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#​3305).
• [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#​3304).
• [glyf] Speed up compilation, mostly around recalcBounds (#​3301).
• [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#​3300).
• Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.

googleapis/google-auth-library-python (google-auth)

v2.23.4

Compare Source

Bug Fixes

• Export detect_gce_residency_linux function (#​1403) (809da13)

grpc/grpc (grpcio)

v1.59.2

Compare Source

This is release 1.59.2 (generative) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [chttp2] Rollup of fixes for CVE-2023-44487. (#​34763)

google/jax (jax)

v0.4.20

Compare Source

matplotlib/matplotlib (matplotlib)

v3.8.1: REL: v3.8.1

Compare Source

This is the first bugfix release of the 3.8.x series.

This release contains several bug fixes and adjustments:

• Bump setuptools required version because of setuptools_scm v8
• Update find_nearest_contour and revert contour deprecations
• allsegs and allkinds return individual segments
• Restore default behavior of hexbin mincnt with C provided
• Try/except import of Axes3D
• Ensure valid path mangling for ContourLabeler
• BLD: Remove development dependencies from sdists
• FIX 2-tuple of colors in to_rgba_array
• Fix issue with non-string labels and legend
• Fix issue with locale comma when not using math text
• Various type hinting improvements
• Various documentation improvements
• Improvements to the MacOS backend

pnpm/pnpm (pnpm)

v8.10.2

Compare Source

Patch Changes

• Fixed a regression that was shipped with pnpm v8.10.0. Dependencies that were already built should not be rebuilt on repeat install. This issue was introduced via the changes related to supportedArchitectures. Related issue #​7268.

Our Gold Sponsors

Our Silver Sponsors

v8.10.1

Compare Source

Patch Changes

• (Important) Tarball resolutions in pnpm-lock.yaml will no longer contain a registry field. This field has been unused for a long time. This change should not cause any issues besides backward compatible modifications to the lockfile #​7262.
• Fix issue when trying to use pnpm dlx in the root of a Windows Drive #​7263.
• Optional dependencies that do not have to be built will be reflinked (or hardlinked) to the store instead of copied #​7046.
• If a package's tarball cannot be fetched, print the dependency chain that leads to the failed package #​7265.
• After upgrading one of our dependencies, we started to sometimes have an error on publish. We have forked @npmcli/arborist to patch it with a fix #​7269.

Our Gold Sponsors

Our Silver Sponsors

tensorflow/tensorboard (tensorboard)

v2.15.1: TensorBoard 2.15.1

Compare Source

Breaking Changes

• TensorBoard.dev is shutting down. See the FAQ at https://tensorboard.dev.
  • No longer able to upload new data to TensorBoard.dev. The tensorboard dev upload command will fail. (#​6638)
  • The experimental dataframe api has been deleted. (#​6644)

Bug Fixes

• Time Series dashboard:
  • Sort run names with leading numbers differently. (#​6664)
  • Show scrollbar in runs table only when needed. (#​6656)
  • Fix 'Prev' and 'Next' buttons in dark mode. (#​6663)
  • Better loading/reloading behavior for runs table. (#​6658)

google/tensorstore (tensorstore)

v0.1.47

Compare Source

TypeStrong/TypeDoc (typedoc)

v0.25.3

Compare Source

Features

• Added --sourceLinkExternal option to render source code links as external, #​2415.
• TypeDoc no longer requires the declarationMap option to be set to true to handle cross-package links in packages mode, #​2416.
• Added external-last option for the --sort option, #​2418.

Bug Fixes

• TypeDoc now attempts to correct local anchor links in readme files which are broken by its deconfliction logic, #​2413.
• TypeDoc now finds comments on index signatures again, #​2414.
• TypeDoc now does a better job of detecting properties when destructured function arguments are used.
• Quotes will now be properly escaped in HTML attribute values.

Thanks!

• @​mogelbrod
• @​rsanchez

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.