chore(deps): update dependency scikit-learn to v1 [security] #28
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.22.2.post1
->==1.5.0
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2024-5206
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the
stop_words_
attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as thestop_words_
attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer.Release Notes
scikit-learn/scikit-learn (scikit-learn)
v1.5.0
: Scikit-learn 1.5.0Compare Source
We're happy to announce the 1.5.0 release.
You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_5\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.5.html
This version supports Python versions 3.9 to 3.12.
You can upgrade with pip as usual:
The conda-forge builds can be installed using:
v1.4.2
: Scikit-learn 1.4.2Compare Source
We're happy to announce the 1.4.2 release.
This release only includes support for numpy 2.
This version supports Python versions 3.9 to 3.12.
You can upgrade with pip as usual:
v1.4.1.post1
: Scikit-learn 1.4.1.post1Compare Source
We're happy to announce the 1.4.1.post1 release.
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.4.html#version-1-4-1-post1
This version supports Python versions 3.9 to 3.12.
You can upgrade with pip as usual:
The conda-forge builds can be installed using:
v1.4.0
Compare Source
v1.3.2
: Scikit-learn 1.3.2Compare Source
We're happy to announce the 1.3.2 release.
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.3.html#version-1-3-2
This version supports Python versions 3.8 to 3.12.
You can upgrade with pip as usual:
The conda-forge builds can be installed using:
v1.3.1
: Scikit-learn 1.3.1Compare Source
We're happy to announce the 1.3.1 release.
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.3.html#version-1-3-1
This version supports Python versions 3.8 to 3.12.
You can upgrade with pip as usual:
The conda-forge builds can be installed using:
v1.3.0
: Scikit-learn 1.3.0Compare Source
We're happy to announce the 1.3.0 release.
You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_3\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.3.html
This version supports Python versions 3.8 to 3.11.
You can upgrade with pip as usual:
The conda-forge builds can be installed using:
v1.2.2
: Scikit-learn 1.2.2Compare Source
We're happy to announce the 1.2.2 release.
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.2.html#version-1-2-2
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.2.1
: scikit-learn 1.2.1Compare Source
We're happy to announce the 1.2.1 release.
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.2.html#version-1-2-1
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.2.0
: Scikit-learn 1.2.0Compare Source
We're happy to announce the 1.2.0 release.
You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_2\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.2.html
This version supports Python versions 3.8 to 3.11.
v1.1.3
: scikit-learn 1.1.3Compare Source
We're happy to announce the 1.1.3 release.
This bugfix release only includes fixes for compatibility with the latest SciPy release >= 1.9.2 and wheels for Python 3.11. Note that support for 32-bit Python on Windows has been dropped in this release. This is due to the fact that SciPy 1.9.2 also dropped the support for that platform. Windows users are advised to install the 64-bit version of Python instead.
You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-3
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.1.2
: scikit-learn 1.1.2Compare Source
We're happy to announce the 1.1.2 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-2
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.1.1
: scikit-learn 1.1.1Compare Source
We're happy to announce the 1.1.1 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.1.html#version-1-1-1
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.1.0
: scikit-learn 1.1.0Compare Source
We're happy to announce the 1.1.0 release.
You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_1\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.1.html#changes-1-1
This version supports Python versions 3.8 to 3.10.
v1.0.2
: scikit-learn 1.0.2Compare Source
We're happy to announce the 1.0.2 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.0.html#version-1-0-2
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.0.1
: scikit-learn 1.0.1Compare Source
We're happy to announce the 1.0.1 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/dev/whats_new/v1.0.html#version-1-0-1
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v1.0
: scikit-learn 1.0Compare Source
We're happy to announce the 1.0 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_1\_0\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.0.html#changes-1-0
This version supports Python versions 3.7 to 3.9.
v0.24.2
: scikit-learn 0.24.2Compare Source
We're happy to announce the 0.24.2 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-2
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v0.24.1
: scikit-learn 0.24.1Compare Source
We're happy to announce the 0.24.1 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-1
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v0.24.0
: scikit-learn 0.24.0Compare Source
We're happy to announce the 0.24 release. You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_0\_24\_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v0.24.html#version-0-24-0
This version supports Python versions 3.6 to 3.9.
v0.23.2
: scikit-learn 0.23.2Compare Source
We're happy to announce the 0.23.2 release with several bugfixes:
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-2
You can upgrade with pip as usual:
The conda-forge builds will be available shortly, which you can then install using:
v0.23.1
: scikit-learn 0.23.1Compare Source
We're happy to announce the 0.23.1 release which fixes a few issues affecting many users, namely: K-Means should be faster for small sample sizes, and the representation of third-party estimators was fixed.
You can check this version out using:
pip install -U scikit-learn
You can see the changelog here: https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-1
The conda-forge builds will be available shortly, which you can then install using:
conda install -c conda-forge scikit-learn
v0.23.0
: scikit-learn 0.23.0Compare Source
We're happy to announce the 0.23 release. You can read
the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights\_0\_23\_0.html
and the long version of the change log under https://scikit-learn.org/stable/whats_new/v0.23.html#version-0-23-0
This version supports Python versions 3.6 to 3.8.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
Thanks for the PR!
Deployments, as required, will be available below:
Please create PRs in draft mode. Mark as ready to enable:
After merge, new images are deployed in: