build(deps): bump the github-dependencies group in /docker with 3 updates

[dependabot]

Bumps the github-dependencies group in /docker with 3 updates: jupyterlab, pandas and rasterio.

Updates jupyterlab from 4.5.1 to 4.5.3

Release notes

Sourced from jupyterlab's releases.

v4.5.3

4.5.3

(Full Changelog)

Bugs fixed

• Fix error in console when the debugger switch from a module to another #18352 (@​brichet)
• Fix focus of replace buttons in the document search box #18362 (@​IsabelParedes)
• Update CodeMirror to latest versions #18344 (@​krassowski)
• Fix deferred cell loading in defer and contentVisibility windowing mode #18359 (@​krassowski)
• Backport PR #18349: Fix "Open With > Editor" for .py files, update @lumino packages to v2026.1.15 #18351 (@​krassowski, @​aaron-seq)

Maintenance and upkeep improvements

• Fix UI tests: config useSystemClipboardForCells=true for notebook toolbar test #18335 (@​brichet)
• Remove generated docs files from the repo #18340 (@​jtpio)

Documentation improvements

• Add installation instructions for JupyterLab with uv #18363 (@​jimangel)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​aaron-seq (activity) | @​brichet (activity) | @​IsabelParedes (activity) | @​jimangel (activity) | @​jtpio (activity) | @​krassowski (activity)

v4.5.2

4.5.2

(Full Changelog)

Bugs fixed

• Backport PR #18250: Make system clipboard opt-in #18319 (@​Darshan808, @​krassowski)
• Fix empty math block throws codemirror's error #18308 (@​i-aki-y)
• Fix cell footer width for smaller screens #18276 (@​MUFFANUJ)
• Fix scrolling to anchor from ToC/links in Markdown and HTML with data attributes #18208 (@​pranshugupta01)
• Fix merge breaking rendering cell order in defer mode #18220 (@​krassowski)
• Fix inverted Unicode surrogate checks #18209 (@​JamesWrigley)

Maintenance and upkeep improvements

... (truncated)

Commits

• 2677660 [ci skip] Publish 4.5.3
• a3c7cc6 Backport PR #18344 on branch 4.5.x (Update CodeMirror to latest versions) (#1...
• 6859ddd Backport PR #18352: Fix error in console when the debugger switch from a modu...
• 1dff9c6 Backport PR #18362: Fix focus of replace buttons in the document search box (...
• 7e49682 Backport PR #18363: Add installation instructions for JupyterLab with uv (#18...
• 06736b5 Backport PR #18359: Fix deferred cell loading in defer and `contentVisibili...
• 3688544 Fix "Open With > Editor" for .py files, update @lumino packages to `v2026...
• ec399e0 Backport PR #18335: Fix UI tests: config useSystemClipboardForCells=true for ...
• bb5cb96 Backport PR #18340: Remove generated docs files from the repo (#18341)
• cdf2746 [ci skip] Publish 4.5.2
• Additional commits viewable in compare view

Updates pandas from 2.3.3 to 3.0.0

Release notes

Sourced from pandas's releases.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

• Dedicated string data type by default
• Consistent copy/view behaviour with Copy-on-Write (CoW) (a.k.a. getting rid of the SettingWithCopyWarning)
• New default resolution for datetime-like data
• Initial support for the new pd.col syntax

See the announcement blog post and the detailed release notes for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 3.0.0rc2

No release notes provided.

Pandas 3.0.0rc1

No release notes provided.

Pandas 3.0.0rc0

We are pleased to announce a first release candidate for pandas 3.0.0. If all goes well, we'll release pandas 3.0.0 in a few weeks.

See the [whatsnew][0] for a list of all the changes.

The release is available on conda-forge and PyPI.

The release can be installed from PyPI

python -m pip install --upgrade --pre pandas==3.0.0rc0

Or from conda-forge

conda install -c conda-forge/label/pandas_rc pandas==3.0.0rc0

Please report any issues with the release candidate on the pandas issue tracker.

... (truncated)

Commits

• 366ccdf RLS: 3.0.0
• 139f4d0 DOC: split/reorder other enhancements section in 3.0.0 whatsnew notes (#63762)
• fd2a4f4 TST: assert reading of legacy pickles against current data (#61792)
• cc0bcaa DOC: update whatsnew section on datetimelike resolution (#63780)
• 3ddbb49 DOC: remove 2.3.4 whatsnew file from released 3.0 docs (#63779)
• ee63532 CLN: Create temporary HDF5 file path and HDFStore for pytables tests (#63492)
• 9512e99 CoW: better chained assignment warning message for update() method (#63500)
• 1db90d5 API: rename read_iceberg selected_fields keyword to columns (#63748)
• c9b51fa BUG: .str methods failing on PyArrow using regex with \Z (#63705)
• 7cff0f4 API: Period.to_timestamp default to microsecond unit (#63760)
• Additional commits viewable in compare view

Updates rasterio from 1.4.4 to 1.5.0

Release notes

Sourced from rasterio's releases.

1.5.0

Dependencies:

• Minimum supported versions: Python 3.12+, GDAL 3.8+, & numpy 2+ (#3465, #3467, #3468)
• Vendor click-plugins (#3367)

Enhancements:

• Add float16 dtype (#3469)
• rasterio.cache: Add invalidate() and invalidate_all() for invalidation of responses in Rasterio's HTTP cache (#3276).
• rasterio.crs: The CRS class has a new, lazily computed, geodetic_crs property (#3218)
• rasterio.enum: Add Interleaving.tile (#3479)
• rasterio.features.shapes: float64 fully supported GDAL 3.12.1 (#3477)
• rasterio.features.shapes: Add uint32,uint64,int64 dtypes & warn for possible truncation (#3456)
• rasterio.plot.show: Add indexes & percent_range parameters to handle rgb image missing color interpretation & enable histogram stretching (#3171)
• rasterio.warp.reproject: Modify tolerance to be an argument in (#3325)
• Move project metadata to pyproject.toml (PEP 621) (#3430)
• Use Lapack solve to more accurately compute affine reverse transforms (#3315)
• rasterio.open: Add thread_safe parameter (#3496)
• rasterio.session: Add support for additional Azure credentials (#3482)

Bug fixes:

• Ensure dataset can be closed multiple times (#3480)
• Remove duplicate dataset cleanup (#3473, #3366)
• Use rasterio & numpy dtypes internally instead of strings (#3472)
• Use context manager for MemoryDataset (#3461)
• rasterio.warp: Don't fill masked output when reprojecting (#3471)
• rasterio.warp: Filter GDALCreateGenImgProjTransformer2 options (#3460)
• rasterio.show_versions: Use importlib.metadata.version (#3488)
• Static GDAL runtime version check (#3487)
• Use GDAL open flag constants (#3494)
• Documentation (#3459, #3458, #3455, #3346)
• Tests (#3429, #3502, #3501, #3498)
• Code linting (#3457)

Deprecations:

• rasterio.warp.transform_geom: Deprecate antimeridian_cutting & antimeridian_offset (#3474)

Packaging notes:

• Wheel: GDAL 3.12.1 (#3491, #3493, #3497)
• Search for GDAL installation path on Windows (#3498)

Full list of software versions

Contributors

• @​a-gn

... (truncated)

Changelog

Sourced from rasterio's changelog.

1.5.0 (2026-01-05)

Dependencies:

• Minimum supported versions: Python 3.12+, GDAL 3.8+, & numpy 2+ (#3465, #3467, #3468)
• Vendor click-plugins (#3367)

Enhancements:

• Add float16 dtype (#3469)
• rasterio.cache: Add invalidate() and invalidate_all() for invalidation of responses in Rasterio's HTTP cache (#3276).
• rasterio.crs: The CRS class has a new, lazily computed, geodetic_crs property (#3218)
• rasterio.enum: Add Interleaving.tile (#3479)
• rasterio.features.shapes: float64 fully supported GDAL 3.12.1 (#3477)
• rasterio.features.shapes: Add uint32,uint64,int64 dtypes & warn for possible truncation (#3456)
• rasterio.plot.show: Add indexes & percent_range parameters to handle rgb image missing color interpretation & enable histogram stretching (#3171)
• rasterio.warp.reproject: Modify tolerance to be an argument in (#3325)
• Move project metadata to pyproject.toml (PEP 621) (#3430)
• Use Lapack solve to more accurately compute affine reverse transforms (#3315)
• rasterio.open: Add thread_safe parameter (#3496)
• rasterio.session: Add support for additional Azure credentials (#3482)

Bug fixes:

• Ensure dataset can be closed multiple times (#3480)
• Remove duplicate dataset cleanup (#3473, #3366)
• Use rasterio & numpy dtypes internally instead of strings (#3472)
• Use context manager for MemoryDataset (#3461)
• rasterio.warp: Don't fill masked output when reprojecting (#3471)
• rasterio.warp: Filter GDALCreateGenImgProjTransformer2 options (#3460)
• rasterio.show_versions: Use importlib.metadata.version (#3488)
• Static GDAL runtime version check (#3487)
• Use GDAL open flag constants (#3494)
• Documentation (#3459, 3458, #3455, #3346)
• Tests (#3429, #3502, #3501, #3498)
• Code linting (#3457)

Deprecations:

• rasterio.warp.transform_geom: Deprecate antimeridian_cutting & antimeridian_offset (#3474)

Packaging notes:

• Wheel: GDAL 3.12.1 (#3491, #3493, #3497)
• Search for GDAL installation path on Windows (#3498)

Full list of software versions: https://github.com/rasterio/rasterio/blob/1.5.0/ci/config.sh#L1-L25

Full Changelog: rasterio/rasterio@1.4.4...1.5.0

Commits

• 8286da3 MNT: Version 1.5.0
• 6bcb46b MNT: version 1.5rc1
• af426f9 CLN: Use -_GDAL_AT_LEAST_3_11 from rasterio.env (#3503)
• 52c9c86 Drop click-plugins dependency from pyproject.toml & update doc link. (#3504)
• cb961c8 MNT: version 1.5rc0
• cefcb7e DOC: Update changelog
• 92be526 Merge pull request #3498
• b22bd66 CI: Remove unsupported pip option (#3030)
• 3241ae3 TST: Also skip memfile thread_safe test on macOS (#3030, #3499)
• cbd7eb0 TST: Remove red overview before moving green one to it (#3030)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

👋 Welcome to Apache Sedona!

Thank you for opening your first pull request 🙌
We appreciate your effort to make Sedona even better.

💬 Join our Sedona Discord Server
to connect with other contributors, get feedback, and share ideas.

Great work — we're glad you're here!