chore(deps-dev): bump black from 25.9.0 to 26.1.0 in the security-updates group by dependabot[bot] · Pull Request #12 · JobCollins/fairness_pipeline_dev_toolkit

dependabot · 2026-01-24T12:47:55Z

Bumps the security-updates group with 1 update: black.

Updates black from 25.9.0 to 26.1.0

Release notes

26.1.0

Highlights

Introduces the 2026 stable style (#4892), stabilizing the following changes:

always_one_newline_after_import: Always force one blank line after import statements, except when the line after the import is a comment or an import statement (#4489)

fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner declarations, such as def foo(): return "mock" # fmt: skip, where previously the declaration would have been incorrectly collapsed (#4800)

fix_module_docstring_detection: Fix module docstrings being treated as normal strings if preceded by comments (#4764)

fix_type_expansion_split: Fix type expansions split in generic functions (#4777)

multiline_string_handling: Make expressions involving multiline strings more compact (#1879)

normalize_cr_newlines: Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

remove_parens_around_except_types: Remove parentheses around multiple exception types in except and except* without as (#4720)

remove_parens_from_assignment_lhs: Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)

standardize_type_comments: Format type comments which have zero or more spaces between # and type: or between type: and value to # type: (value) (#4645)

The following change was not in any previous stable release:

Regenerated the _width_table.py and added tests for the Khmer language (#4253)

This release alo bumps pathspec to v1 and fixes inconsistencies with Git's .gitignore logic (#4958). Now, files will be ignored if a pattern matches them, even if the parent directory is directly unignored. For example, Black would previously format exclude/not_this/foo.py with this .gitignore:
exclude/
!exclude/not_this/
Now, exclude/not_this/foo.py will remain ignored. To ensure exclude/not_this/ and all of it's children are included in formatting (and in Git), use this .gitignore:
*/exclude/*
!*/exclude/not_this/
This new behavior matches Git. The leading */ are only necessary if you wish to ignore matching subdirectories (like the previous behavior did), and not just matching root

... (truncated)

Changelog

Sourced from black's changelog.

26.1.0

Highlights

Introduces the 2026 stable style (#4892), stabilizing the following changes:

always_one_newline_after_import: Always force one blank line after import statements, except when the line after the import is a comment or an import statement (#4489)

fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner declarations, such as def foo(): return "mock" # fmt: skip, where previously the declaration would have been incorrectly collapsed (#4800)

fix_module_docstring_detection: Fix module docstrings being treated as normal strings if preceded by comments (#4764)

fix_type_expansion_split: Fix type expansions split in generic functions (#4777)

multiline_string_handling: Make expressions involving multiline strings more compact (#1879)

normalize_cr_newlines: Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

remove_parens_around_except_types: Remove parentheses around multiple exception types in except and except* without as (#4720)

remove_parens_from_assignment_lhs: Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)

standardize_type_comments: Format type comments which have zero or more spaces between # and type: or between type: and value to # type: (value) (#4645)

The following change was not in any previous stable release:

Regenerated the _width_table.py and added tests for the Khmer language (#4253)

This release alo bumps pathspec to v1 and fixes inconsistencies with Git's .gitignore logic (#4958). Now, files will be ignored if a pattern matches them, even if the parent directory is directly unignored. For example, Black would previously format exclude/not_this/foo.py with this .gitignore:
exclude/
!exclude/not_this/
Now, exclude/not_this/foo.py will remain ignored. To ensure exclude/not_this/ and all of it's children are included in formatting (and in Git), use this .gitignore:
*/exclude/*
!*/exclude/not_this/
This new behavior matches Git. The leading */ are only necessary if you wish to ignore

... (truncated)

Commits

6305bf1 Prepare 2026.1.0 release (#4892)
e71305b Bump pypa/cibuildwheel from 3.3.0 to 3.3.1 (#4961)
21a2a8c Fix Shutdown multiprocessing Manager in schedule_formatting (#4952)
e3146ce Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#4919)
fe1fbc4 Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4923)
2b4b7fc Bump actions/download-artifact from 6.0.0 to 7.0.0 (#4922)
d745be6 docs: document --force-exclude for pre-commit workflows (#4957)
b41acd6 Various CI and doc refactors (#4928)
6f43612 Handle pathspec v1 changes (#4958)
200c550 Bump furo from 2025.9.25 to 2025.12.19 in /docs (#4933)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Added new files for adapter architecture: • metrics/base.py – defines MetricResult schema and MetricAdapter protocol • metrics/native_adapter.py – built-in fallback for fairness metrics Expanded fairlearn_adapter.py and aequitas_adapter.py with guarded imports Updated core.py to register adapters, enable auto-selection, and add caching Added unit tests for adapter selection and result schema Ensured backward compatibility with Phase 0 Result class These deliver: → FairnessAnalyzer wrapper with unified interface → Common result schema → Automatic backend selection and lightweight caching → Test coverage target ~80%

- Added metric implementations: • demographic_parity_difference (classification) • equalized_odds_difference (classification) • mae_parity_difference (regression) - Implemented intersectional metric support with min_group_size filter - Added intersectional utilities (build_intersectional_labels, min_group_mask, group_sizes) - Introduced metric_registry.json for easy extensibility - Fixed categorical comparison bug in min_group_mask (dtype coercion for unordered categoricals) - Added unit tests for small-group exclusion, missing values, and intersectional logic - Added benchmarking script (benchmark_metrics_100k.py) for runtime profiling (~100k rows) - Verified statistical and runtime correctness for classification and regression metrics These deliver: → Fully functional metric engine with classification, regression, and intersectional support → Safe handling of categorical data types → Benchmarks and tests confirming performance and reliability

Summary: -Implemented bootstrap confidence intervals (percentile & BCa) with improved two-sample resampling logic for correct coverage. -Added Bayesian credible interval (Beta–Binomial) for small-sample fairness evaluation. -Implemented multiple comparison corrections (Bonferroni & Benjamini–Hochberg FDR). -Added effect size computations (risk ratio, Cohen’s d placeholder). -Enhanced unit tests for all statistical components using synthetic datasets. Results: -All tests passed successfully. -Empirical coverage for the bootstrap percentile method verified within expected 0.85–0.95 range. -Current test coverage: ~53% total, with 90%+ coverage for native_adapter, fairlearn_adapter, and core metrics. -Phase 3 functionality validated—ready to proceed to Phase 4 integration.

…d statistical validation

- Added MLflow logging utility (log_fairness_metrics) - Integrated pytest plugin with assert_fairness() - Extended CLI with command for fairness checks - Implemented Markdown reporting function (to_markdown_report) - Enhanced CI with multi-OS testing and coverage - Configured pre-commit hooks for linting and sample-check placeholder All core workflows now operational and passing tests.

…prepare v0.1.0 release - Added full end-to-end (E2E) system tests validating metric computation, CI integration, and Markdown reporting - Introduced deterministic test fixture () for reproducibility - Created demo notebook () showcasing metric computation, CI confidence intervals, and MLflow tracking - Updated README with usage tutorial and CLI validation examples - Added CHANGELOG.md and version bump to v0.1.0 - Verified workflow integration and test coverage for release candidate

…correctness, reproducibility, and usability

- Added visualization of fairness metrics (DP, EO) with bootstrap confidence intervals. - Updated demo notebook and documentation for reproducibility. - Verified end-to-end CLI, reporting, and MLflow integration. - Finalized readiness for v0.1.0 release. - Added bootstrap confidence intervals and effect size computation to CLI fairness validation. - Created visualization scripts for demographic parity and equalized odds with 95% CIs. - Updated demo.ipynb for end-to-end workflow demonstration (metrics → CI → MLflow tracking). - Verified reproducibility and usability of fairness measurement module. - Generated report_with_ci.md artifact as validation output.

…e record, updated README and changelog for release readiness; validated full workflow integration and reporting.

…record, updated README and changelog for release readiness; validated full workflow integration and reporting.

- Added new package under with initial submodules: - detectors/: representation, disparity, proxy, and report stubs - transformers/: reweighting, disparate impact remover, and utils stubs - config/: YAML loader (Phase 0 version) - orchestration/: builder and registry for dynamic pipeline construction - Expanded CLI to include command for running stub detectors via config and CSV input - Added example , fixture CSV, and smoke test for pipeline import wiring - Updated to include PyYAML dependency - Establishes foundation for Phase 1 (functional bias detection and config validation)

Implements the foundational architecture for the Fairness Pipeline Module, covering Phase 1 (scaffolding and configuration) and Phase 2 (detection and execution logic). Details: - Added pipeline package structure with submodules: • config – typed YAML loader (PipelineConfig, PipelineStep) • detectors – bias detection primitives • transformers – InstanceReweighting, DisparateImpactRemover • orchestration – pipeline builder, execution engine - Implemented run_detectors, build_pipeline, and apply_pipeline in orchestration/engine.py. - Added BiasReport container for consistent access (.meta) and JSON-safe serialization. - Integrated CLI compatibility with Mapping interface and to_dict() handling. - Added smoke test (tests/pipeline/test_smoke_pipeline.py) and config validation. - Fixed CLI artifact serialization and test assertions for Phase 2. Testing: - Verified pytest smoke test passes end-to-end. - Confirmed cmd_pipeline_run writes valid JSON artifacts.

Merge: Pipeline module

…n, and reweighing support ### Summary - Implemented Phase 3 (configuration + detector orchestration refinement) - Enhanced to return typed objects. - Added JSON serialization () for detector reports. - Expanded logic for safer transformer instantiation with injected defaults. - Implemented Phase 4 (CLI + end-to-end integration) - Integrated in CLI to execute full pipeline runs from config and CSV input. - Added artifact outputs (, , ) and improved error handling. - Updated to include , , and aliases. - Added fallback import handling for spelling variants (e.g., reweighting / reweighing). - Ensured smart default injection for and when omitted in YAML. ### Improvements - Unified bias detection output into a consistent schema. - Enabled reproducible runs via YAML-driven configuration. - Improved pipeline usability through flexible transformer naming and automatic default handling. - Simplified CLI experience with full artifact generation and path validation.

- Implemented ReductionsWrapper for scikit-learn with DemographicParity constraint - Added FairnessRegularizer and LagrangianFairnessTrainer for PyTorch - Introduced GroupFairnessCalibrator and ParetoFrontier visualization tools - Integrated module tests for sklearn_, torch_, postproc, and viz subpackages - Updated CLI to include training operations and maintained compatibility with Python 3.12.5

refactor(pipeline,cli,monitoring): unify builder, add config validation, refactor validate; packaging + docs; tests Pipeline/orchestration Consolidate builder into pipeline/orchestration/engine.py; remove builder.py Centralize transformer registry; keep single build_pipeline/apply_pipeline/run_detectors API Config Add minimal schema validation in pipeline/config/loader.py (profiles supported) Export PipelineConfig/PipelineStep/load_config via pipeline/config/__init__.py CLI Refactor validate into small helpers (CSV parsing, sensitive normalization, evaluation) Parameterize CI/effect sizes via FairnessAnalyzer (adds ci_samples) and flags Lazy-load heavy deps inside subcommands (fairlearn, torch, etc.) Add return type hints for public CLI functions Monitoring Introduce monitoring/config.py with MonitoringSettings, DriftConfig, ReportConfig Update drift engine and dashboard to use shared settings; persist config alongside artifacts Packaging Move runtime deps to [project.dependencies] in pyproject.toml Add extras: training, monitoring, adapters; add requirements.in/requirements-dev.in Simplify requirements.txt to pip-tools workflow Documentation & DX Rename CHANEGELOG.md → CHANGELOG.md Enrich README: minimal pipeline YAML + config schema; extras + pip-compile instructions Add .pre-commit-config.yaml (ruff/black/isort/nbstripout) Typing/Naming Normalize “sensitive” terminology; add explicit return types in CLI and orchestration Tests Add tests/pipeline/test_config_loader.py (schema/profiles) Extend pipeline smoke to assert sample weights from YAML Add CLI validation test for --with-ci and --with-effects Add monitoring tests for dashboard stubs and drift engine (with optional deps auto-skip)

Corrected percentile CI scaling so bootstrap intervals now use percent units expected by NumPy and covered the regression with a direct unit test of _percentile_ci behavior. Reworked the MLflow logging helper to emit string payloads (preferring mlflow.log_dict, falling back safely) and added a stubbed unit test to ensure structured artifacts log without runtime errors. Enabled confidence intervals and effect sizes by default across the analyzer APIs and verified the richer outputs with targeted tests covering classification and regression metrics.

Release v0.5.1: Test coverage improvements, security fixes, and CI enhancements - Update version to 0.5.1 in pyproject.toml and __init__.py - Update CHANGELOG.md with 645 tests and 87% coverage improvements - Update README.md with current metrics and version - Add coverage gate to CI (fail if < 85%, upload artifacts) - Create ROADMAP.md with planned features for 0.6.0-1.0.0 - Critical security fixes: filelock>=3.20.3, urllib3>=2.6.3, pip>=25.3 - Fix test_installation.py to expect version 0.5.1

- Fix: Make training module imports lazy to allow core package import without optional deps - Add: Structured exception types (DataValidationError, DependencyError) with context and suggestions - Add: Performance documentation (PERFORMANCE.md) and automated release workflow - Improve: Error messages with actionable suggestions and installation commands - Enhance: CI/CD with performance benchmarking and automated releases All tests passing. No breaking changes to public APIs.

… logging, and feedback collection - Security: Update dependencies, add security workflow and policy - Performance: Add performance test suite and profiling tools - Logging: Implement structured logging infrastructure - Feedback: Add GitHub issue templates and feedback process - Update CHANGELOG.md for v0.5.3 - Update release workflow to use modern action

CI/CD error ERROR: Could not find a version that satisfies the requirement virtualenv>=20.36.2 fix removing non-runtime dependency

Add property-based testing with Hypothesis - Expand integration tests with comprehensive edge case coverage - Set up Sphinx documentation site with GitHub Pages deployment - Configure Dependabot for automated dependency security updates - Add security review process and monthly automated reviews - Update documentation (CHANGELOG, README) for v0.5.4

Remove invalid update-types field from groups section. Dependabot automatically groups security updates, so explicit update-types configuration is not needed.

- Fix pip-audit command in security.yml: Replace invalid --fail-on syntax with Python script that properly checks for high/critical vulnerabilities - Fix all 6 failing property-based tests: * test_risk_ratio_identity: Handle edge cases with very small floating-point values using relative tolerance * test_dp_difference_bounds, test_dp_difference_zero_when_equal, test_eo_difference_bounds, test_dp_difference_ci_contains_value: Add proper group size validation and suppress Hypothesis health checks * test_eo_difference_bounds: Ensure groups have both positive and negative examples for TPR/FPR calculation * test_dp_difference_ci_contains_value: Account for bootstrap CI statistical variability * test_extreme_values: Fix Hypothesis argument error by using st.one_of() for NaN/infinity handling All 689 tests now pass with 86% coverage.

Resolve GitHub Actions validation error by giving unique IDs to TestPyPI and Production PyPI publish steps. Updated release notes to reference the correct step IDs based on repository selection. - Change TestPyPI step ID from 'pypi_publish' to 'testpypi_publish' - Change Production PyPI step ID from 'pypi_publish' to 'production_pypi_publish' - Update GitHub Release body to check correct step outcome based on repository

…o fairpipe - Update package name in pyproject.toml to 'fairpipe' - Bump version to 0.6.0 (breaking change for installation) - Update all documentation with new package name - Update GitHub Actions workflow PyPI URLs - Add migration notes to CHANGELOG.md - Python imports remain unchanged (backward compatible) BREAKING CHANGE: Installation command changed from 'pip install fairness-pipeline-dev-toolkit' to 'pip install fairpipe'

- Add linkify-it-py to docs/requirements.txt (required for myst-parser linkify extension) - Update GitHub Actions workflow to install from docs/requirements.txt - Fix html_static_path warning by commenting out non-existent _static directory

Add internal documentation files to .gitignore

…apter Fixes issue where mae_parity_difference was only available in NativeAdapter, causing failures when using fairlearn or aequitas backends for regression metrics. Both adapters now implement the method following the same pattern as NativeAdapter, with comprehensive test coverage. All tests pass (707/707).

Populated demo_training.ipynb with working examples for all 5 Training Module components: ReductionsWrapper, FairnessRegularizerLoss, LagrangianFairnessTrainer, GroupFairnessCalibrator, and Pareto Frontier Visualization. Includes synthetic data generation, visualizations, and comprehensive usage examples.

Add mae_parity_difference to adapters

baseline in Step 1, CLI output, property test fix

Bumps the security-updates group with 1 update: [black](https://github.com/psf/black). Updates `black` from 25.9.0 to 26.1.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@25.9.0...26.1.0) --- updated-dependencies: - dependency-name: black dependency-version: 26.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

JobCollins added 30 commits October 24, 2025 17:27

Chore: Initial repository skeleton for the measurement module

d1abe2e

Chore: Skeleton (repo, CI, lint, tests)

59d663d

Merge: Merge branch 'metric_engine' implementing the metric engine an…

9db340c

…d statistical validation

Chore: Running the Demo.ipynb notebook

c11e545

Merge: Merge branch 'workflow_integration implementing validation of …

aff4ac9

…correctness, reproducibility, and usability

Chore: Finalize Measurement Module v0.1.0 — added ADR-001 architectur…

8eed298

…e record, updated README and changelog for release readiness; validated full workflow integration and reporting.

Merge: Merge branch 'workflow_integration added ADR-001 architecture …

3c2aea8

…record, updated README and changelog for release readiness; validated full workflow integration and reporting.

Chore: Add file to ignore

21ce56f

Chore: Add file to ignore

31936cc

Docs: update README and CHANGELOG for v0.2.0 (Pipeline Module Phase 1–2)

6138040

Merge pull request #1 from JobCollins/pipeline_module

11d86f3

Merge: Pipeline module

Docs: updated the CHANGELOG and README files

e13fae7

Feature: add CLI end-to-end system test and programmatic demo notebook

96049b2

Docs: Updated CHANGELOG and README

f5a180b

Merge: Merge Pipeline Module branch into main (Phases 0–5 complete)

d43e126

Docs: Updated README and CHANGELOG docs with latest changes

fde3daf

Chore: Re-run to check tests

7a3f5b6

Merge: integrate training_module branch into main

d194aa6

JobCollins added 6 commits January 22, 2026 18:23

Chore: Removing Install Dependencies Error

fa49964

CI/CD error ERROR: Could not find a version that satisfies the requirement virtualenv>=20.36.2 fix removing non-runtime dependency

Bugfix: correct dependabot.yml configuration

f97f959

Remove invalid update-types field from groups section. Dependabot automatically groups security updates, so explicit update-types configuration is not needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 24, 2026

JobCollins added 6 commits January 24, 2026 16:04

Fix test coverage and security workflow issues

aac7005

Chore: Docs & gitignore updates

152b3ca

Add internal documentation files to .gitignore

JobCollins force-pushed the dependabot/pip/security-updates-65ea79b78d branch from 7eede51 to e4e868f Compare January 26, 2026 18:31

JobCollins added 3 commits January 27, 2026 08:18

Release: Bump version to 0.6.1

c4223b7

Add mae_parity_difference to adapters

dependabot Bot force-pushed the dependabot/pip/security-updates-65ea79b78d branch from e4e868f to b80e4b4 Compare January 31, 2026 05:38

JobCollins and others added 7 commits February 3, 2026 12:40

Release: v0.6.2

a56eb34

baseline in Step 1, CLI output, property test fix

Chore: Publish to PyPI

82f278a

Bump version to 0.6.3

b0a6662

Bump version to 0.6.5; update changelog

d36b370

Fix: Documentation Page

172fd90

Docs: Deploy docs configuration

d96f18b

dependabot Bot force-pushed the dependabot/pip/security-updates-65ea79b78d branch from b80e4b4 to f84c4c5 Compare February 7, 2026 05:39

JobCollins force-pushed the main branch from b7489a6 to 1b7c2aa Compare May 19, 2026 16:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump black from 25.9.0 to 26.1.0 in the security-updates group#12

chore(deps-dev): bump black from 25.9.0 to 26.1.0 in the security-updates group#12
dependabot[bot] wants to merge 86 commits into
mainfrom
dependabot/pip/security-updates-65ea79b78d

dependabot Bot commented on behalf of github Jan 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.1.0

Highlights

26.1.0

Highlights

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jan 24, 2026 •

edited

Loading