Skip to content

Bump the classical-ml group across 1 directory with 7 updates #906

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the classical-ml group across 1 directory with 7 updates #906

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the classical-ml group with 7 updates in the /classical-ml directory:

Package From To
matplotlib 3.10.1 3.10.7
scikit-learn-intelex 2025.8.0 2025.9.0
xgboost 2.1.4 3.1.1
pandas 2.3.2 2.3.3
jupyterlab 4.4.7 4.4.10
jupyterhub 5.3.0 5.4.2
notebook 7.4.5 7.4.7

Updates matplotlib from 3.10.1 to 3.10.7

Release notes

Sourced from matplotlib's releases.

REL: v3.10.7

This is the latest bugfix release in the 3.10.x series.

The most important update in this release is that the minimum version of pyparsing has been updated to version 3.0.

REL: v3.10.6

This is a bugfix release in the 3.10.x series.

Highlights from this release include:

- Fix regression of hi-dpi support for Qt
- Fix race condition in TexManager.make_dvi & make_png
- Various documentation and other bugfixes

REL: v3.10.5

This is the fourth bugfix release of the 3.10.x series.

Included in this release is distributed wheels for Python 3.14 (including freethreaded) and Windows ARM.

There are also several smaller bugfixes.

REL: v3.10.3

This is the third bugfix release of the 3.10.x series

Commits
  • 4aeb773 REL: v3.10.7
  • 080add3 Merge branch 'v3.10.6-doc' into v3.10.x
  • a604a8b Github Stats v3.10.7
  • f550261 Zenodo v3.10.6
  • 9a5e3e4 Merge pull request #30628 from meeseeksmachine/auto-backport-of-pr-30626-on-v...
  • eb8cb0c Backport PR #30626: MNT: Fix new F401 unused imports warnings
  • 8fadc71 Backport PR #29745: Use PEP8 style method and function names from (#30589)
  • 098876e Merge pull request #30614 from meeseeksmachine/auto-backport-of-pr-30612-on-v...
  • eb42d86 Backport PR #30612: MNT: update black pin
  • 4a9c187 Merge pull request #30572 from QuLogic/auto-backport-of-pr-30571-on-v3.10.x
  • Additional commits viewable in compare view

Updates scikit-learn-intelex from 2025.8.0 to 2025.9.0

Release notes

Sourced from scikit-learn-intelex's releases.

Extension for Scikit-learn* 2025.9.0

Extension for Scikit-learn* is happy to introduce 2025.9.0 release!

🚨 What's New

  • Introduced new Extension for Scikit-learn* functionality:
    • Enabled SPMD API support in kNN search
    • Enabled array API support in the PCA, EmpiricialCovariance and their incremental variants

🪲 Bug Fixes

  • Fixed error on decision function with GPU arrays
  • Fixed re-usage of non-reusable daal4py objects
  • Prevented Logistic Regression from turning to inf in predictions

Acknowledgements

Thanks to everyone who helped us make 2025.9.0 release possible!

@​Alexsandruss, @​Alexandr-Solovev, @​Vika-F, @​david-cortes-intel, @​icfaust, @​napetrov, @​maria-Petrova, @​homksei, @​ahuber21, @​ethanglaser, @​razdoburdin, @​avolkov-intel, @​KateBlueSky, @​yuejiaointel, @​DDJHB, @​kjackiew, @​richardnorth3

Full Changelog: uxlfoundation/scikit-learn-intelex@2025.8.0...2025.9.0

Commits

Updates xgboost from 2.1.4 to 3.1.1

Release notes

Sourced from xgboost's releases.

3.1.1 Patch Release

What's Changed

  • Emit correct error when performing inplace-predict using a CPU-only version of XGBoost, but with a GPU input. (#11761)
  • Enhance the error message for loading the removed binary model format. (#11760)
  • Use the correct group ID for SHAP when the intercept is a vector. (#11764)

Full Changelog: dmlc/xgboost@v3.1.0...v3.1.1

Additional artifacts:

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check
b2bb9c93f28fe7e401dbe592eb7990f5382baa712b02301eb8fd4cdb6c676731  xgboost-src-3.1.1.tar.gz
ae6f2f2397aea02c77e77435cd9f617b5990756d5800218ff44f4ff5eba9104a  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

  • xgboost_r_gpu_linux_3.1.1.tar.gz: Download

Source tarball

Release 3.1.0 stable

Release note

https://xgboost.readthedocs.io/en/latest/changes/v3.1.0.html

Additional artifacts:

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check
4c42d35976067270a9255bf9ee290a706917bb3929a60cdd74d4dd3f1a9c86cc  xgboost-src-3.1.0.tar.gz
79b3407f19ccfa7344ee1a7ae9afb845cff9472c5a736fbdbdf95d98950c8290  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

  • xgboost_r_gpu_linux_3.1.0.tar.gz: Download

Source tarball

... (truncated)

Commits

Updates pandas from 2.3.2 to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 9c8bc3e RLS: 2.3.3
  • 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
  • b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
  • 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
  • 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
  • 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
  • e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
  • e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
  • 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
  • 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
  • Additional commits viewable in compare view

Updates jupyterlab from 4.4.7 to 4.4.10

Release notes

Sourced from jupyterlab's releases.

v4.4.10

4.4.10

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​andrii-i | @​arjxn-py | @​Darshan808 | @​github-actions | @​hxrshxz | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​martinRenou | @​meeseeksmachine

v4.4.9

4.4.9

(Full Changelog)

Bugs fixed

Contributors to this release

(GitHub contributors page for this release)

@​jupyterlab-probot | @​krassowski | @​martinRenou | @​meeseeksmachine

... (truncated)

Commits
  • a4e885c [ci skip] Publish 4.4.10
  • 58c8b82 Backport PR #18019: Fix ObservableList.removeValue behaviour: if item isn't...
  • fef0b41 Backport PR #17797: Fix highlighting search on output cells and previous matc...
  • 0a22bdf Backport PR #17981: Fix spurious scrollbar in output area due to prompt overl...
  • e5034ac Backport PR #17982: Fix race condition renaming unnamed files on first save (...
  • 28d76c0 Backport PR #17992: Bandaid: pin ipykernel on CI to pre-7.0 (#17995)
  • 21e0f10 Backport PR #17983: Update JupyterCon 2025 announcement links (#17989)
  • 55f0f1d Backport PR #17949: Fix empty whitespace after large cell rendering (#17968)
  • 86a9e8d Backport PR #17953: Add cross-references to API reference, fix missing packag...
  • 07ae5fe Fix examples on 4.4.x (#17963)
  • Additional commits viewable in compare view

Updates jupyterhub from 5.3.0 to 5.4.2

Commits

Updates notebook from 7.4.5 to 7.4.7

Release notes

Sourced from notebook's releases.

v7.4.7

7.4.7

(Full Changelog)

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​jtpio

v7.4.6

7.4.6

(Full Changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​github-actions | @​jtpio | @​meeseeksmachine | @​nkn2022

Changelog

Sourced from notebook's changelog.

7.4.7

(Full Changelog)

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​jtpio

7.4.6

(Full Changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​github-actions | @​jtpio | @​meeseeksmachine | @​nkn2022

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the classical-ml group across 1 directory with 7 updates
48d24e1 
Bumps the classical-ml group with 7 updates in the /classical-ml directory:

| Package | From | To |
| --- | --- | --- |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.1` | `3.10.7` |
| [scikit-learn-intelex](https://github.com/intel/scikit-learn-intelex) | `2025.8.0` | `2025.9.0` |
| [xgboost](https://github.com/dmlc/xgboost) | `2.1.4` | `3.1.1` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.2` | `2.3.3` |
| [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.4.7` | `4.4.10` |
| [jupyterhub](https://github.com/jupyterhub/jupyterhub) | `5.3.0` | `5.4.2` |
| [notebook](https://github.com/jupyter/notebook) | `7.4.5` | `7.4.7` |



Updates `matplotlib` from 3.10.1 to 3.10.7
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.10.1...v3.10.7)

Updates `scikit-learn-intelex` from 2025.8.0 to 2025.9.0
- [Release notes](https://github.com/intel/scikit-learn-intelex/releases)
- [Commits](uxlfoundation/scikit-learn-intelex@2025.8.0...2025.9.0)

Updates `xgboost` from 2.1.4 to 3.1.1
- [Release notes](https://github.com/dmlc/xgboost/releases)
- [Changelog](https://github.com/dmlc/xgboost/blob/master/NEWS.md)
- [Commits](dmlc/xgboost@v2.1.4...v3.1.1)

Updates `pandas` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.2...v2.3.3)

Updates `jupyterlab` from 4.4.7 to 4.4.10
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/[email protected]...@jupyterlab/[email protected])

Updates `jupyterhub` from 5.3.0 to 5.4.2
- [Changelog](https://github.com/jupyterhub/jupyterhub/blob/main/RELEASE.md)
- [Commits](jupyterhub/jupyterhub@5.3.0...5.4.2)

Updates `notebook` from 7.4.5 to 7.4.7
- [Release notes](https://github.com/jupyter/notebook/releases)
- [Changelog](https://github.com/jupyter/notebook/blob/@jupyter-notebook/[email protected]/CHANGELOG.md)
- [Commits](https://github.com/jupyter/notebook/compare/@jupyter-notebook/[email protected]...@jupyter-notebook/[email protected])

---
updated-dependencies:
- dependency-name: matplotlib
  dependency-version: 3.10.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: classical-ml
- dependency-name: scikit-learn-intelex
  dependency-version: 2025.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: classical-ml
- dependency-name: xgboost
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: classical-ml
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: classical-ml
- dependency-name: jupyterlab
  dependency-version: 4.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: classical-ml
- dependency-name: jupyterhub
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: classical-ml
- dependency-name: notebook
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: classical-ml
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 27, 2025
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 27, 2025
@dependabot dependabot bot requested a review from sramakintel as a code owner October 27, 2025 14:01
@dependabot dependabot bot added the python Pull requests that update Python code label Oct 27, 2025
@github-actions
Copy link

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

classical-ml/jupyter-requirements.txt

PackageVersionLicenseIssue Type
jupyterlab4.4.10NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/jupyterhub 5.4.2 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 5Found 6/12 approved changesets -- score normalized to 5
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 033 existing vulnerabilities detected
pip/jupyterlab 4.4.10 🟢 5.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 9Found 28/30 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 9license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 10SAST tool is run on all commits
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during GetBranch(4.4.x): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Vulnerabilities⚠️ 017 existing vulnerabilities detected
pip/notebook 7.4.7 🟢 4.2
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 2Found 6/26 approved changesets -- score normalized to 2
Maintained🟢 1023 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during GetBranch(7.4.x): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 024 existing vulnerabilities detected
pip/matplotlib 3.10.7 🟢 7.5
Details
CheckScoreReason
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing🟢 10project is fuzzed
Vulnerabilities⚠️ 019 existing vulnerabilities detected
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
pip/pandas 2.3.3 🟢 6.4
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no badge detected
Code-Review🟢 825 out of last 30 changesets reviewed before merge -- score normalized to 8
Contributors🟢 1047 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool⚠️ 0no update tool detected
Fuzzing🟢 10project is fuzzed with [OSSFuzz]
License🟢 10license file detected
Maintained🟢 1030 commit(s) out of 30 and 21 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 7SAST tool detected but not run on all commmits
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 00 out of 5 artifacts are signed or have provenance
Token-Permissions⚠️ 0non read-only tokens detected in GitHub workflows
Vulnerabilities🟢 10no vulnerabilities detected
pip/scikit-learn-intelex 2025.9.0 🟢 7.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 64 existing vulnerabilities detected
SAST🟢 4SAST tool is not run on all commits -- score normalized to 4
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
CI-Tests🟢 929 out of 30 merged PRs checked by a CI test -- score normalized to 9
Contributors🟢 10project has 4 contributing companies or organizations
pip/xgboost 3.1.1 🟢 5.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 7Found 21/30 approved changesets -- score normalized to 7
Contributors🟢 10project has 56 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 032 existing vulnerabilities detected

Scanned Files

  • classical-ml/jupyter-requirements.txt
  • classical-ml/requirements.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jitendra42 jitendra42 Awaiting requested review from jitendra42 jitendra42 is a code owner

@sharvil10 sharvil10 Awaiting requested review from sharvil10 sharvil10 is a code owner

@sramakintel sramakintel Awaiting requested review from sramakintel sramakintel is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant