chore(deps): bump the production group across 1 directory with 9 updates

[dependabot]

Bumps the production group with 9 updates in the / directory:

Package	From	To
beautifulsoup4	4.13.5	4.14.2
selenium	4.35.0	4.36.0
numpy	2.0.2	2.3.3
pandas	2.3.2	2.3.3
pandas-stubs	2.2.2.240909	2.3.2.250926
nltk	3.9.1	3.9.2
pyfakefs	5.9.3	5.10.0
pytest	8.4.1	8.4.2
pytest-mock	3.14.1	3.15.1

Updates beautifulsoup4 from 4.13.5 to 4.14.2

Updates selenium from 4.35.0 to 4.36.0

Release notes

Sourced from selenium's releases.

Selenium 4.36.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

• [py]: close ipv6 port in case of error by @​navin772 in SeleniumHQ/selenium#16165
• [docs] Update issue label in CONTRIBUTING.md by @​pallavigitwork in SeleniumHQ/selenium#16169
• [py][docs]: update dead API docs link to API reference in index.rst by @​navin772 in SeleniumHQ/selenium#16170
• [grid] close the HttpClient after the session is gone by @​joerg1985 in SeleniumHQ/selenium#16182
• [py] Update docstring and comments in keys.py by @​Aidoni0797 in SeleniumHQ/selenium#16187
• [dotnet] [bidi] Simplify type naming of internal command parameters by @​nvborisenko in SeleniumHQ/selenium#16188
• [py] Fix formatting by @​cgoldberg in SeleniumHQ/selenium#16189
• [dotnet] [bidi] Support WebExtension module by @​nvborisenko in SeleniumHQ/selenium#15850
• [rb][BiDi] Create browser module, added user context related methods by @​aguspe in SeleniumHQ/selenium#15371
• [docs] Update bug report section in CONTRIBUTING.md by @​pallavigitwork in SeleniumHQ/selenium#16191
• [dotnet] Adding flag to enable SafariDriver logging. by @​diemol in SeleniumHQ/selenium#16196
• [java] extend the scope of the properties of the HttpCommandExecutor class by @​iampopovich in SeleniumHQ/selenium#16186
• [dotnet] [bidi] Serialize base64 encoded string directly to bytes by @​nvborisenko in SeleniumHQ/selenium#16203
• [dotnet] [bidi] Make cookie expiry as TimeSpan by @​nvborisenko in SeleniumHQ/selenium#16204
• [grid] Improve readTimeout in handle session between Router and Node by @​VietND96 in SeleniumHQ/selenium#16163
• [py] Fix type annotation error and raise clearer error message by @​Paresh-0007 in SeleniumHQ/selenium#16174
• [java] Unifying select class by @​vicky-iv in SeleniumHQ/selenium#16220
• [rust] Update dependency rules_cc to v0.2.0 by @​renovate[bot] in SeleniumHQ/selenium#16198
• [js] Update testing-library monorepo by @​renovate[bot] in SeleniumHQ/selenium#16173
• [js] Update dependency tmp to ^0.2.5 by @​renovate[bot] in SeleniumHQ/selenium#16172
• [dotnet] Update dependency System.Text.Json to 8.0.6 by @​renovate[bot] in SeleniumHQ/selenium#16171
• [js] Update dependency react-router-dom to v6.30.1 by @​renovate[bot] in SeleniumHQ/selenium#16076
• [js] Update material-ui monorepo to v5.18.0 by @​renovate[bot] in SeleniumHQ/selenium#16062
• [js] Update dependency ws to ^8.18.3 by @​renovate[bot] in SeleniumHQ/selenium#16009
• [js] Update react monorepo by @​renovate[bot] in SeleniumHQ/selenium#15949
• [java] Update dependency net.bytebuddy:byte-buddy to v1.17.7 by @​renovate[bot] in SeleniumHQ/selenium#16237
• [py] Update dependency charset-normalizer to v3.4.3 by @​renovate[bot] in SeleniumHQ/selenium#16239
• [py] Update dependency cryptography to v45.0.6 by @​renovate[bot] in SeleniumHQ/selenium#16240
• Revert "[py] Update dependency charset-normalizer to v3.4.3" by @​cgoldberg in SeleniumHQ/selenium#16242
• Revert "[py] Update dependency cryptography to v45.0.6" by @​cgoldberg in SeleniumHQ/selenium#16243
• [py] Bump dependencies for dev and fix script by @​cgoldberg in SeleniumHQ/selenium#16244
• [dotnet] Help old .net framework copy selenium manager to output by @​nvborisenko in SeleniumHQ/selenium#16228
• [java] Add hooks around getScreenshotAs in WebDriverListener #16232 by @​giulong in SeleniumHQ/selenium#16233
• [py][bidi]: enable history_updated event test by @​navin772 in SeleniumHQ/selenium#16236
• [py] Bump ruff version for linting/formatting by @​cgoldberg in SeleniumHQ/selenium#16254
• [py][bidi]: use bidi navigate command in network tests by @​navin772 in SeleniumHQ/selenium#16251
• [dotnet] Fix find port for IPv4 only environments by @​nvborisenko in SeleniumHQ/selenium#16216

... (truncated)

Commits

• 6d115cf [build] Prepare for release of Selenium 4.36.0 (#16332)
• 2eeadab [rust] Log browser path also in offline mode (#16215)
• 8e84f0d [rust] Set Rust version to 1.89.0 in WORKSPACE (#16368)
• 6061c87 [grid] UI Light/Dark Mode Toggle (#16364)
• a578a47 [rust] Bump Rust edition to 2024, rulest_rust to 0.65.0, and crates to latest...
• 93fdf57 [dotnet] [bidi] Give only one chance to receive from remote end (#16360)
• b3b66a0 [dotnet] [bidi] Introduce BaseNavigationInfo type as interface (#16348)
• 9a4bbcc [py] Add --enable-chrome-logs to chrome service args to inherit browser i/o s...
• 4c603ec [rb] fix unit tests (#16357)
• 8a72168 [dotnet] Begin reading of driver service output to fix Firefox disposing
• Additional commits viewable in compare view

Updates numpy from 2.0.2 to 2.3.3

Release notes

Sourced from numpy's releases.

2.3.3 (Sep 9, 2025)

NumPy 2.3.3 Release Notes

The NumPy 2.3.3 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. Note that the 3.14.0 final is currently expected in Oct, 2025. This release is based on 3.14.0rc2.

Contributors

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Aleksandr A. Voyt +
• Bernard Roesler +
• Charles Harris
• Hunter Hogan +
• Joren Hammudoglu
• Maanas Arora
• Matti Picus
• Nathan Goldbaum
• Raghuveer Devulapalli
• Sanjay Kumar Sakamuri Kamalakar +
• Tobias Markus +
• Warren Weckesser
• Zebreus +

Pull requests merged

A total of 23 pull requests were merged for this release.

• #29440: MAINT: Prepare 2.3.x for further development.
• #29446: BUG: Fix test_configtool_pkgconfigdir to resolve PKG_CONFIG_DIR...
• #29447: BLD: allow targeting webassembly without emscripten
• #29460: MAINT: Backport write_release.py
• #29473: MAINT: Bump pypa/cibuildwheel from 3.1.0 to 3.1.2
• #29500: BUG: Always return a real dtype from linalg.cond (gh-18304) (#29333)
• #29501: MAINT: Add .file entry to all .s SVML files
• #29556: BUG: Casting from one timedelta64 to another didn't handle NAT.
• #29562: BLD: update vendored Meson to 1.8.3 [wheel build]
• #29563: BUG: Fix metadata not roundtripping when pickling datetime (#29555)
• #29587: TST: update link and version for Intel SDE download
• #29593: TYP: add sorted kwarg to unique
• #29672: MAINT: Update pythoncapi-compat from main.
• #29673: MAINT: Update cibuildwheel.
• #29674: MAINT: Fix typo in wheels.yml
• #29683: BUG, BLD: Correct regex for ppc64 VSX3/VSX4 feature detection
• #29684: TYP: ndarray.fill() takes no keyword arguments
• #29685: BUG: avoid thread-unsafe refcount check in temp elision
• #29687: CI: replace comment-hider action in mypy_primer workflow

... (truncated)

Commits

• f2a77a7 Merge pull request #29702 from charris/prepare-2.3.3
• 8641006 REL: Prepare for the NumPy 2.3.3 release [wheel build]
• f024265 Merge pull request #29701 from charris/backport-29697
• 84f2eed Merge pull request #29700 from charris/backport-29695
• 7cacdbf Update VXE and VXE2 detection regex patterns
• 028c469 TYP: appease ruff
• 4b80666 TYP: fix np.bool method declarations
• f2a6b75 Merge pull request #29691 from charris/backport-29665
• a707cbf Merge pull request #29689 from charris/backport-29662
• 3d66056 BUG: use correct input dtype in flatiter assignment
• Additional commits viewable in compare view

Updates pandas from 2.3.2 to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• 9c8bc3e RLS: 2.3.3
• 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
• b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
• 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
• 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
• 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
• e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
• e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
• 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
• 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
• Additional commits viewable in compare view

Updates pandas-stubs from 2.2.2.240909 to 2.3.2.250926

Commits

• fc5ab16 Version 2.3.2.250926
• 7ac98f2 refactor(series)!: ⏱️ drop TimedeltaSeries (#1273)
• 2f63354 Fix #849: Update converters type in read_excel for better Pyright compatibili...
• 8e5c754 fix(series): #1372 🧱✖️ cumprod (#1374)
• c98adb3 GH1358 Relax index type from DataFrame.from_records (#1375)
• d413f0e FIX: DatetimeIndex.array should return DatetimeArray instead of ExtensionArra...
• 5768214 refactor(series)!: 🕰️ drop TimestampSeries (#1274)
• c38b6a3 fix(pyright): microsoft/pyright#10924 ignore (#1370)
• 5099a1a Type NAType (#1348)
• 2106e8b Minor test cleanup to adopt check assert_type framework (#1369)
• Additional commits viewable in compare view

Updates nltk from 3.9.1 to 3.9.2

Changelog

Sourced from nltk's changelog.

Version 3.9.2 2025-10-01

• Update download checksums to use SHA256 in built index
• Fix percentage escape in new-style string formatting
• replace shortened URLs using goo.gl
• Make Wordnet interoperable with various taggers and tagged corpora
• Fix saving PerceptronTagger
• Document how to reproduce old Wordnet studies
• properly initialize Portuguese corpus reader
• support for mixed rules conversion into Chomsky Normal Form
• only import tkinter if a GUI is needed
• issue #2112 with Corenlp
• new environment variable NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL
• Lesk defaults to most frequent sense in case of ties

Thanks to the following contributors to 3.9.2: Jose Cols, Peter de Blanc, GeneralPoxter, Eric Kafe, William LaCroix, Jason Liu, Samer Masterson, Mike014, purificant, Andrew Ernest Ritz, samertm, Ikram Ul Haq, Christopher Smith, Ryan Mannion

Version 3.9.1 2024-08-19

• Fixed bug that prevented wordnet from loading

Version 3.9 2024-08-18

• Fix security vulnerability CVE-2024-39705 (breaking change)
• Replace pickled models (punkt, chunker, taggers) by new pickle-free "_tab" packages
• No longer sort Wordnet synsets and relations (sort in calling function when required)
• Only strip the last suffix in Wordnet Morphy, thus restricting synsets() results
• Add Python 3.12 support
• Many other minor fixes

Thanks to the following contributors to 3.8.2: Tom Aarsen, Cat Lee Ball, Veralara Bernhard, Carlos Brandt, Konstantin Chernyshev, Michael Higgins, Eric Kafe, Vivek Kalyan, David Lukes, Rob Malouf, purificant, Alex Rudnick, Liling Tan, Akihiro Yamazaki.

Version 3.8.1 2023-01-02

• Resolve RCE vulnerability in localhost WordNet Browser (#3100)
• Remove unused tool scripts (#3099)
• Resolve XSS vulnerability in localhost WordNet Browser (#3096)
• Add Python 3.11 support (#3090)

Thanks to the following contributors to 3.8.1: Francis Bond, John Vandenberg, Tom Aarsen

Version 3.8 2022-12-12

• Refactor dispersion plot (#3082)
• Provide type hints for LazyCorpusLoader variables (#3081)
• Throw warning when LanguageModel is initialized with incorrect vocabulary (#3080)

... (truncated)

Commits

• 4e17ea3 Updates for 3.9.2
• 77ed66b Merge pull request #3425 from ekaf/ci-blank-data
• 13d6791 Update .github/workflows/ci.yml
• d2cf5d4 Ensure nltk_data path is in the environment
• 4473fde Test CI with no data
• 1f1614b Merge pull request #3349 from ShadokDuBas/fix/bug_ccg_logic_side_effect_on_le...
• 7e9779e Merge pull request #3419 from ekaf/hotfix-3416
• 83bd737 Merge pull request #3423 from purificant/_dependabot
• e96cce0 Merge pull request #3422 from purificant/_pre_commit
• bcf6ea6 Merge pull request #3421 from purificant/_py_versions
• Additional commits viewable in compare view

Updates pyfakefs from 5.9.3 to 5.10.0

Release notes

Sourced from pyfakefs's releases.

pyfakefs release version 5.10.0

• adds official support for Python 3.14
• last minor release before 6.0, which will support Python >= 3.10

Changelog

Sourced from pyfakefs's changelog.

Version 5.10.0 (2025-10-11)

Adds official support for Python 3.14. Last minor version before the 6.0 release.

Changes

• the errno codes set in OSError have changed for some specific error conditions in Windows 11/Windows Server 2025; pyfakefs now matches this behavior instead of the previous behavior under Windows 10
• added official support for Python 3.14

Enhancements

• added support for os.readinto in Python 3.14
• added support for pathlib.copy and pathlib.copy_into in Python 3.14

Fixes

• fixes patching of Debian-specific tempfile in Python 3.13 (see #1214)

Commits

• 52fae28 Release 5.10.0
• 2e32b76 Add official support for Python 3.14
• 1249ae6 Add support for Python 3.14 pathlib copy methods
• 0ee3516 [pre-commit.ci] pre-commit autoupdate
• dddb653 Update pandas from 2.3.2 to 2.3.3
• 21dd1c3 [pre-commit.ci] pre-commit autoupdate
• 5776d3e [pre-commit.ci] pre-commit autoupdate
• 3dd62f0 [pre-commit.ci] pre-commit autoupdate
• 398f899 [pre-commit.ci] pre-commit autoupdate
• 2adc401 Bump actions/setup-python from 5 to 6
• Additional commits viewable in compare view

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

• #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

• #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

• #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

  This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

• #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

• #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

• #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

• #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
• #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
• #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.

Commits

• bfae422 Prepare release version 8.4.2
• 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
• ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
• 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
• 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
• b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
• 2c94c4a add missing colon (#13640) (#13641)
• c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
• dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
• f87289c Fix crash with times output style and skipped module (#13573) (#13579)
• Additional commits viewable in compare view

Updates pytest-mock from 3.14.1 to 3.15.1

Release notes

Sourced from pytest-mock's releases.

v3.15.1

2025-09-16

• #529: Fixed itertools._tee object has no attribute error -- now duplicate_iterators=True must be passed to mocker.spy to duplicate iterators.

v3.15.0

2025-09-04

• Python 3.8 (EOL) is no longer supported.
• #524: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.

Changelog

Sourced from pytest-mock's changelog.

3.15.1

2025-09-16

• [#529](https://github.com/pytest-dev/pytest-mock/issues/529) <https://github.com/pytest-dev/pytest-mock/issues/529>_: Fixed itertools._tee object has no attribute error -- now duplicate_iterators=True must be passed to mocker.spy to duplicate iterators.

3.15.0

2025-09-04

• Python 3.8 (EOL) is no longer supported.
• [#524](https://github.com/pytest-dev/pytest-mock/issues/524) <https://github.com/pytest-dev/pytest-mock/pull/524>_: Added spy_return_iter to mocker.spy, which contains a duplicate of the return value of the spied method if it is an Iterator.

Commits

• e1b5c62 Release 3.15.1
• 184eb19 Set spy_return_iter only when explicitly requested (#537)
• 4fa0088 [pre-commit.ci] pre-commit autoupdate (#536)
• f5aff33 Fix test failure with pytest 8+ and verbose mode (#535)
• adc4187 Bump actions/setup-python from 5 to 6 in the github-actions group (#533)
• 95ad570 [pre-commit.ci] pre-commit autoupdate (#532)
• e696bf0 Fix standalone mock support (#531)
• 5b29b03 Fix gen-release-notes script
• 7d22ef4 Merge pull request #528 from pytest-dev/release-3.15.0
• 90b29f8 Update CHANGELOG for 3.15.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[G-Rath]

@dependabot ignore numpy minor version

[dependabot]

OK, I won't notify you about version 2.3.x of numpy again, unless you unignore it.