Re: [PR] fix(deps, pyamber): bump scikit-learn from 1.5.0 to 1.7.2 in /amber [texera]

["aglinxinyuan (via GitHub)" <gi...@apache.org>]

aglinxinyuan commented on PR #6184:
URL: https://github.com/apache/texera/pull/6184#issuecomment-4888188566

   Capped this at `1.7.2` rather than taking Dependabot's `1.9.0`. `scikit-learn` 1.8.0+ requires Python `>=3.11`, but we still support 3.10 (the `pyamber` CI matrix, ruff `target-version = "py310"`, and `bin/pylsp/Dockerfile` on `python:3.10-slim`), so the 1.9.0 bump broke the 3.10 leg and fail-fast cancelled the other legs. `1.7.2` is the newest release that still supports 3.10 (`requires-python >=3.10`).
   
   Also synced `amber/LICENSE-binary-python`, which Dependabot left at 1.5.0 — the 3.12 binary-license drift check blocks on direct-dep version drift.
   
   Retitled to match. Whenever we drop 3.10 as a supported runtime, the full `1.9.0` bump can go through.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org