Skip to content

build(deps): bump joblib from 1.5.1 to 1.5.3 in /search-api#105

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/search-api/joblib-1.5.3
Open

build(deps): bump joblib from 1.5.1 to 1.5.3 in /search-api#105
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/search-api/joblib-1.5.3

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps joblib from 1.5.1 to 1.5.3.

Changelog

Sourced from joblib's changelog.

Release 1.5.3 - 2025/12/15

  • The Memory object won't overwrite an already existing .gitignore file in its cache directory anymore. joblib/joblib#1742

  • Harden the safety checks in eval_expr(pre_dispatch) to prevent excessive memory allocation and potential crashes by limiting the allowed length of the expression and the maximum numeric value of sub-expressions and not evaluating expressions with non-numeric literals. joblib/joblib#1744

  • Vendor cloudpickle 3.1.2 to fix a pickling problem with interactively defined abstract base classes and type annotations in Python 3.14+.

Release 1.5.2 - 2025/08/27

Memory:


- Ensure that temporary files managed by the ``Memory`` object do not collide
  when using the same cache directory when the cache directory is accessed
  concurrently from different nodes on a cluster with a shared filesystem.
  https://github.com/joblib/joblib/pull/1656
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file security labels Apr 27, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: intake. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file security labels Apr 27, 2026
Bumps [joblib](https://github.com/joblib/joblib) from 1.5.1 to 1.5.3.
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.5.1...1.5.3)

---
updated-dependencies:
- dependency-name: joblib
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/search-api/joblib-1.5.3 branch from 9675e3f to 143f00e Compare May 10, 2026 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants