deps: Bump the python-deps group with 3 updates

[dependabot]

Updates the requirements on numpy, tree-sitter-language-pack and setuptools to permit the latest version.
Updates numpy from 1.26.4 to 2.4.6

Release notes

Sourced from numpy's releases.

v2.4.6 (May 18, 2026)

NumPy 2.4.6 Release Notes

NumPy 2.4.6 is a quick release that fixes a regression discovered in the 2.4.5 release.

This release supports Python versions 3.11-3.14

Contributors

A total of 4 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• !EarlMilktea
• Charles Harris
• Sebastian Berg
• Warren Weckesser

Pull requests merged

A total of 4 pull requests were merged for this release.

• #31444: MAINT: Prepare 2.4.x for further development
• #31453: BUG: Fix regression in arr.conj()
• #31459: BUG: np.linalg.svd(..., hermitian=True) returns non-unitary...
• #31460: BUG: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator...

v2.4.5 (May 15, 2026)

NumPy 2.4.5 Release Notes

NumPy 2.4.5 is a patch release that fixes bugs discovered after the 2.4.4 release, has some typing improvements, and maintains infrastructure.

This release supports Python versions 3.11-3.14

Contributors

A total of 17 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Aleksei Nikiforov
• Anarion Zuo +
• Ankit Ahlawat
• Breno Favaretto +
• Charles Harris
• Igor Krivenko +
• Ijtihed Kilani +
• Joren Hammudoglu
• Maarten Baert +

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• b832a09 Merge pull request #31462 from charris/prepare-2.4.6
• 57cc147 REL: Prepare for the NumPy 2.4.6 release
• 0c72b0b Merge pull request #31459 from charris/backport-31347
• 9778d26 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
• e0e3876 BUG: core: Don't call INCREF/DECREF on descr in NpyStringAcquireAllocator. (#...
• d1bffeb BUG: np.linalg.svd(..., hermitian=True) returns non-unitary vh (#31347)
• 8d8d7e5 Merge pull request #31453 from seberg/issue-31452
• bddaab7 BUG: Fix regression in arr.conj()
• 37a1ecc Merge pull request #31444 from charris/begin-2.4.6
• 3c0e043 MAINT: Prepare 2.4.x for further development
• Additional commits viewable in compare view

Updates tree-sitter-language-pack from 1.11.0 to 1.12.0

Release notes

Sourced from tree-sitter-language-pack's releases.

v1.12.0

Added

• prefetch: prefetch(&[&str]) downloads (if needed) and loads every requested grammar in one pass, so a parallel workload only parses. Probes real on-disk loadability instead of has_language, fixing a short-circuit where known-but-not-downloaded grammars were skipped.
• query cache (Rust): get_query(language, QueryKind) -> Result<Option<Arc<Query>>> compiles a bundled .scm query once and caches the Arc<Query> process-wide. Rust-only; bindings keep the raw query-string accessors.
• indents & folds queries: get_indents_query / get_folds_query expose the bundled indents.scm / folds.scm; QueryKind gains Indents and Folds.

Changed

• performance: get_language now takes a lock-free fast path for static and already-loaded dynamic grammars; the global load mutex guards only the not-yet-loaded dynamic path.

v1.11.1

Fixed

• python: get_language() and other download failures now surface the public exception type in tracebacks — tree_sitter_language_pack.DownloadError instead of _native.DownloadError (#147).
• java: generate ByteArraySerializer.java so the generated ObjectMapper compiles for every package.
• docs: correct stale "300+" language counts to "306".

Regenerated against alef 0.30.1.

Changelog

Sourced from tree-sitter-language-pack's changelog.

[1.12.0] - 2026-06-29

Added

• prefetch: prefetch(&[&str]) downloads (if needed) and loads every requested grammar in one pass, so a subsequent parallel workload only parses. It probes real on-disk loadability rather than has_language, fixing a short-circuit where known-but-not-downloaded grammars were skipped.
• query cache (Rust): get_query(language, QueryKind) -> Result<Option<Arc<Query>>> compiles a bundled .scm query once and caches the Arc<Query> process-wide (negative results cached too). Rust-only — bindings continue to expose the raw query-string accessors.
• indents & folds queries: get_indents_query / get_folds_query now expose the bundled indents.scm / folds.scm (harvested from the grammar bundle alongside the existing kinds); QueryKind gains Indents and Folds.

Changed

• performance: get_language now takes a lock-free fast path for statically-compiled and already-loaded dynamic grammars; the global load mutex guards only the not-yet-loaded dynamic library path. Removes per-call mutex contention on the hot parse path.

[1.11.1] - 2026-06-29

Fixed

• python: get_language() (and other download failures) now surface the public exception type in tracebacks — tree_sitter_language_pack.DownloadError instead of _native.DownloadError (#147). Regenerated against alef 0.30.1.
• java: generate ByteArraySerializer.java so the generated ObjectMapper compiles for every package (alef 0.30.1).
• docs: correct stale "300+" language counts to "306".

Commits

• 319b035 chore(swift): update Package.swift with checksum for v1.12.0
• 1dc5730 chore(release): 1.12.0 [ci skip]
• dc6d4e0 feat(core): query cache, prefetch, lock-free get_language, indents/folds
• 1de070c chore(release): 1.11.1 [ci skip]
• 39b789c style: apply post-generation formatting to regenerated bindings
• 2b3884f fix(bindings): regenerate with alef 0.30.1
• 1a461b0 chore: regenerate bindings with alef 0.30.0
• c4b36ae feat(intel): extract Elixir structure and imports (#150)
• 08f5fc1 test(e2e/java): regression for kind() and toSexp() raw-string returns (#154)
• 952fbb6 chore(docs): add xberg favicon set and webmanifest (#155)
• Additional commits viewable in compare view

Updates setuptools to 82.0.1

Changelog

Sourced from setuptools's changelog.

v82.0.1

Bugfixes

• Fix the loading of launcher manifest.xml file. (#5047)
• Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

• Add advice about how to improve predictability when installing sdists. (#5168)

Misc

• #4941, #5157, #5169, #5175

v82.0.0

Deprecations and Removals

• pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

• Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

• Update vendored dependencies. (#5159)

Misc

... (truncated)

Commits

• 5a13876 Bump version: 82.0.0 → 82.0.1
• 51ab8f1 Avoid using (deprecated) 'json.version' in tests (#5194)
• f9c37b2 Docs/CI: Fix intersphinx references (#5195)
• 8173db2 Docs: Fix intersphinx references
• 09bafbc Fix past tense on newsfragment
• 461ea56 Add news fragment
• c4ffe53 Avoid using (deprecated) 'json.version' in tests
• 749258b Cleanup pkg_resources dependencies and configuration (#5175)
• 2019c16 Parse ext-module.define-macros from pyproject.toml as list of tuples (#5169)
• b809c86 Sync setuptools schema with validate-pyproject (#5157)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[nathansutton]

Closing for now: numpy 1.26 -> 2.x is a major bump and the pyproject <2 cap was deliberate. The fast unit gate passes on numpy 2, but CI cannot load the model, so the inference/eval paths are unverified. Please validate against the local eval suite (run_tests.py --evals) before adopting numpy 2; happy to do the bump once that's green.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml