Update pandas requirement from <2.1 to <2.3

[dependabot]

Updates the requirements on pandas to permit the latest version.

Release notes

Sourced from pandas's releases.

Pandas 2.2.3

We are pleased to announce the release of pandas 2.2.3. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.2.3 supports Python 3.9 and higher.

The release will be available on the defaults and conda-forge channels:

conda install pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• 0691c5c RLS: 2.2.3
• 658dfdd relax cython bound
• 6891e90 Backport PR #59847: BLD: Build wheels for Python 3.13 on aarch64 as well
• f108468 RLS: 2.2.3
• 6958738 Backport PR #59840: BLD: Final release prep for 2.2.3 (#59842)
• 0bd98fe Backport PR #59136 on branch 2.2.x (Upload 3.13 & free-threaded nightly wheel...
• 8d67e77 Backport PR #59836 on branch 2.2.x (BLD: Fix bad Cython annotation) (#59837)
• f7b6378 Assorted backports for 2.2.x (#59785)
• 2127b42 Backport #59144 on 2.2.x / 2.3.x (remove ops div class to solve #2137) (#59535)
• 4a20adb Backport PR #59813 on branch 2.2.x (CI: Debug failing ARM builds) (#59828)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[amotl]

That's a strange outcome on this CI run. Will need to be investigated later.

Failed to download and build `llvmlite==0.36.0`
RuntimeError: Cannot install on Python version {3.10.15,3.12.7}; only versions
>=3.6,<3.10 are supported.

-- https://github.com/crate/academy-fundamentals-course/actions/runs/11682753989/job/32530551814?pr=27#step:6:36

[amotl]

Failed to download and build llvmlite==0.36.0

I don't know why it is selecting such an old version of llvmlite-0.36.0, published on Mar 12, 2021.

Edit: Seems to be pulled in by pyod and numba, but it still does not make sense to select such an old version. Added 2f327f1 per GH-32 to evaluate it.

[amotl]

@dependabot rebase

[amotl]

CellTimeoutError raised on Python 3.12 is not related to uv selecting old dependency packages. So, GH-37 can be reverted.

-- https://github.com/crate/academy-fundamentals-course/actions/runs/12188668332/job/34002173577?pr=27#step:6:223

Still, why does it work on Python 3.10 but fails on Python 3.12? Apparently, it is happening on pip install?

[amotl]

to be able to see where time is spent, because updating pandas per #27 runs into a timeout

It is happening because it is building pandas from within the Jupyter Notebook, which does not fit into 60 seconds of runtime. Updating requirements.txt here does not help, because the Jupyter Notebook uses the version that is still on GitHub, because it uses an absolute URL. It has to use an absolute URL, because otherwise the Notebook would not work well on Google Colab.

So, this is a classic dead lock situation, and we will resolve it by force-merging.