You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@texera.apache.org by gi...@apache.org on 2026/07/06 07:07:18 UTC

(texera) 01/01: fix(deps, pyamber): bump scikit-learn from 1.5.0 to 1.7.2 in /amber (#6184)

This is an automated email from the ASF dual-hosted git repository.

github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-6184-28ec7d64c5a053b170ce2c7cd332c1f1352f7523
in repository https://gitbox.apache.org/repos/asf/texera.git

commit 851b0a8bce79f68ed76b2b95c877afd4b5dad775
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jul 6 00:06:58 2026 -0700

    fix(deps, pyamber): bump scikit-learn from 1.5.0 to 1.7.2 in /amber (#6184)
    
    ### What changes were proposed in this PR?
    
    Bumps `scikit-learn` in `amber/operator-requirements.txt`, **capped at
    `1.7.2`** rather than Dependabot's proposed `1.9.0`.
    
    scikit-learn `1.8.0`+ requires Python `>=3.11`, but Texera still
    supports Python **3.10** — the `pyamber` CI matrix runs 3.10, ruff is
    set to `target-version = "py310"`, and `bin/pylsp/Dockerfile` builds on
    `python:3.10-slim`. Taking `1.9.0` therefore broke the 3.10 leg
    (dependency could not resolve) and fail-fast cancelled the
    3.11/3.12/3.13 legs. `1.7.2` is the newest release that still supports
    Python 3.10 (`requires-python >=3.10`).
    
    | | before | after |
    |---|---|---|
    | `amber/operator-requirements.txt` | `scikit-learn==1.5.0` |
    `scikit-learn==1.7.2` |
    | `amber/LICENSE-binary-python` | `scikit-learn==1.5.0` |
    `scikit-learn==1.7.2` |
    
    `amber/LICENSE-binary-python` is synced in the same PR — Dependabot left
    it at `1.5.0`, and the binary-license drift check (3.12 leg) blocks on
    direct-dep version mismatch. `1.7.2` has the same runtime dependency
    closure as `1.5.0` (`joblib`, `numpy`, `scipy`, `threadpoolctl`);
    `narwhals` only becomes a dependency in `1.9.0`, so no packages are
    added or removed.
    
    ### Any related issues, documentation, discussions?
    
    Supersedes Dependabot's `1.5.0 → 1.9.0` proposal. The full `1.9.0` bump
    can go through once Python 3.10 is dropped as a supported runtime.
    
    ### How was this PR tested?
    
    - **CI**: the previously-failing `pyamber` legs now pass on all of 3.10
    / 3.11 / 3.12 / 3.13, and both `amber-integration` legs (ubuntu + macos,
    which install the operator requirements) pass. The 3.12 leg passing
    confirms the `LICENSE-binary-python` sync — `check_binary_deps.py`
    reports no direct-dep drift and no added/removed packages.
    - **Local** (fresh venv, Python 3.12, `pip install
    scikit-learn==1.7.2`):
    - Dependency closure resolved to exactly `joblib, numpy, scipy,
    threadpoolctl` — the four already claimed in `LICENSE-binary-python`, no
    new transitive dep.
    - Instantiated all 25 classifier + 3 regressor estimators the `sklearn`
    operators emit, using the bare default constructor the generated
    template relies on (`<Model>()`).
    - Ran the generated `make_pipeline(...).fit/predict` flow, including
    `AdaBoostClassifier()` — the one real API risk, since 1.6 removed
    `algorithm='SAMME.R'`; the operators use the default so they are
    unaffected.
    - Verified the text pipeline (`CountVectorizer -> TfidfTransformer ->
    classifier`) and the regression metrics (`root_mean_squared_error`,
    `mean_absolute_error`, `r2_score`) still import and run.
    
    ### Was this PR authored or co-authored using generative AI tooling?
    
    Generated-by: Claude Code (Opus 4.8 [1M context])
    
    ---------
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    Co-authored-by: Xinyuan Lin <li...@gmail.com>
    Co-authored-by: Xinyuan Lin <xi...@uci.edu>
---
 amber/LICENSE-binary-python     | 2 +-
 amber/operator-requirements.txt | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python
index d754289a2c..d2704c3a20 100644
--- a/amber/LICENSE-binary-python
+++ b/amber/LICENSE-binary-python
@@ -313,7 +313,7 @@ Python packages:
   - psutil==5.9.0
   - s3fs==2025.9.0
   - scikit-image==0.25.2
-  - scikit-learn==1.5.0
+  - scikit-learn==1.7.2
   - scipy==1.18.0
   - sympy==1.14.0
   - threadpoolctl==3.6.0
diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt
index 228b26149a..6cda4ee893 100644
--- a/amber/operator-requirements.txt
+++ b/amber/operator-requirements.txt
@@ -25,7 +25,7 @@ pillow==12.2.0
 torch==2.12.1+cpu ; platform_system == "Linux" and platform_machine == "x86_64"
 torch==2.12.0 ; platform_system != "Linux" or platform_machine != "x86_64"
 
-scikit-learn==1.5.0
+scikit-learn==1.7.2
 transformers==5.3.0
 # Not imported by any operator template: plotly's create_ternary_contour
 # (ternary contour operator, #4193) requires scikit-image at runtime.