chore(deps): bump the python group in /infra/containers/sandbox with 4 updates

[dependabot]

Bumps the python group in /infra/containers/sandbox with 4 updates: ipython, markitdown, matplotlib and pypdfium2.

Updates ipython from 9.15.0 to 9.16.0

Commits

• 2ae7863 release 9.16.0
• 6334b8f Update whats new for version 9.16 (#15342)
• dbbfa7b escape urls and file names interpolated into display html attributes (#15334)
• 59986e7 fix: correct typos
• 0e9d34d Fix missing space
• 1a753ba Resolve attribute annotations under the policy in eval_node (#15337)
• 876b5aa resolve attribute annotations under the policy in eval_node
• 6056996 Make %lsmagic return plain text by default
• 7ee15dc [pre-commit.ci] pre-commit autoupdate
• 7c7198c Add yakuake to list of Kitty-compatible terminals
• Additional commits viewable in compare view

Updates markitdown from 0.1.6 to 0.1.7

Release notes

Sourced from markitdown's releases.

Version 0.1.7

What's Changed

• fix: avoid O(n^2) value lookups in PPTX chart conversion by @​kz-000 in microsoft/markitdown#2227
• Fix invalid LaTeX macros for mu, nu, tau, and down-arrow in equation conversion by @​ksprajapatii in microsoft/markitdown#2228
• Fix typos and formatting in comments, docstrings, and markdown by @​chienyuanchang in microsoft/markitdown#2223
• fix: handle PPTX SVG images without a rasterized fallback by @​guoyu-wang in microsoft/markitdown#2233
• Fix omml template bugs. by @​afourney in microsoft/markitdown#2257

New Contributors

• @​kz-000 made their first contribution in microsoft/markitdown#2227
• @​ksprajapatii made their first contribution in microsoft/markitdown#2228
• @​guoyu-wang made their first contribution in microsoft/markitdown#2233

Full Changelog: microsoft/markitdown@v0.1.6...v0.1.7

Commits

• fd239d5 Bump version to 0.1.7 (#2258)
• 007ea02 Fix omml template bugs. (#2257)
• 2e42a01 fix: handle PPTX SVG images without a rasterized fallback (#2233)
• 24c14c6 Fix typos and formatting in comments, docstrings, and markdown (#2223)
• db144c4 Fix invalid LaTeX macros for mu, nu, tau, and down-arrow in equation conversi...
• 9247794 fix: avoid O(n^2) value lookups in PPTX chart conversion (#2227)
• See full diff in compare view

Updates matplotlib from 3.10.7 to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

• Various minor bug and doc fixes
• Security hardening validation of cyclers - Removing eval usage
• Security hardening in Latex and PS calls - Removing shell escapes

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

Commits

• dd8d78b REL: v3.10.9
• 2fb1891 REL: Release prep v3.10.9
• d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
• 1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
• a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
• a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
• 063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
• b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
• acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
• e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
• Additional commits viewable in compare view

Updates pypdfium2 from 5.11.0 to 5.12.1

Release notes

Sourced from pypdfium2's releases.

5.12.1

Release 5.12.1

Summary

• Fix missing mkdir call in bindings build (blunder). This particularly matters for PDFIUM_PLATFORM=system-search / fallback setup.

Build info

This release was made with the following build strategies:

• PBIN: [macosx_arm64, macosx_x86_64, win_amd64, win_arm64, win32, manylinux_x86_64, manylinux_i686, manylinux_aarch64, manylinux_armv7l, manylinux_ppc64le, manylinux_mips64le, android_arm64_v8a, android_armeabi_v7a]
• SBLD: [manylinux_mipsle]
• CIBW: [manylinux_riscv64, manylinux_loongarch64, manylinux_s390x, musllinux_x86_64, musllinux_aarch64, musllinux_armv7l, musllinux_i686, musllinux_ppc64le, musllinux_s390x, musllinux_riscv64, musllinux_loongarch64]

Commit logs

Commits between 5.12.0 and 5.12.1 (latest commit first):

• b3e7e67a [autorelease main] update 5.12.1
• 4a263605 Prepare for minor version increment
• c9c4ec36 Update changelog
• 9c704343 Fix missing mkdir call in bindings build (blunder)
• 5a28bfed REUSE.toml(bigendian.patch): credit hjanuschka
• 9b77635a Changelog style fix

5.12.0

Release 5.12.0

[!IMPORTANT] This release has been yanked from PyPI. 5.12.1 is a drop-in replacement and fixes a setup blunder. Wheels are valid and effectively identical to 5.12.1, but the sdist in this release is faulty & may fail depending on which target is chosen.

Summary

Requirements

• macOS 13.0+ is now required for current PDFium (declared in upstream config and confirmed with dylib header inspection). Updated wheel tags accordingly.
• Setup: Increased tool dependency requirements
  • build_native.py now expects git >= 2.49.0 so we can use modern git clone --revision features.
  • If gh is installed, gh >= 2.47.0 will be required, as we now assume availability of the gh attestation subcommand without consulting gh --version.

Packaging / CI

Largest CI/workflows rework yet ("Strategic builds"). Many testing gaps filled (see the updated platform support table).

• Dynamic selection of targets and Python versions across 3 build strategies (pdfium-binaries, build_toolchained.py, cibuildwheel/build_native.py). This means releases can now be made using any selection of targets/strategies, configurable through workflow inputs on a per-run basis.
• In principle, this would allow us to make releases just using our own builds, without external binaries. We plan to explore this from time to time. That said, pypdfium2's conda packages continue to be tied to the pdfium-binaries, and setup will continue to provide you with pdfium-binaries by default.

... (truncated)

Commits

• b3e7e67 [autorelease main] update 5.12.1
• 4a26360 Prepare for minor version increment
• c9c4ec3 Update changelog
• 9c70434 Fix missing mkdir call in bindings build (blunder)
• 5a28bfe REUSE.toml(bigendian.patch): credit hjanuschka
• 9b77635 Changelog style fix
• 38fa93b [autorelease main] update 5.12.0
• d60dbb6 fix: reactivate release environment
• 0be3571 Take out --fail-on-no-commits
• 8b94bcc main.yaml: fix loss of $NEW_VERSION
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions