build(deps): bump shap from 0.49.1 to 0.52.0

[dependabot]

Bumps shap from 0.49.1 to 0.52.0.

Release notes

Sourced from shap's releases.

v0.52.0

What's Changed

Highlights

• Native bindings rewritten with nanobind, and the build system migrated from setup.py to scikit-build-core + CMake. The Cython _kernel_lib.pyx and the existing _cext / _cext_gpu modules are now built as nanobind extensions, and MANIFEST.in / setup.py have been removed in favor of a pyproject.toml-driven build. (#4366, by @​CloseChoice and @​daidahao and @​claude)
• Minimum dependency versions raised to follow SPEC 0. (#4310, by @​CloseChoice)

Enhancements

• Log an INFO message when background data is sub-sampled (closes #3461). (#4294, by @​Ebube22)
• Add cross-links between the API Reference and API Examples pages. (#4329, by @​Abhishek9639)
• Drop the unused typing-extensions dependency. (#4629, by @​samudraneel05)

Bug Fixes

• Improve GPU TreeExplainer parity: preserve XGBoost default/missing child routing so NaN values follow the same branch as the source model, preserve vector-valued XGBoost base_score values (fixing multiclass additivity offsets), and tighten categorical handling so sklearn models with enable_categorical=True raise the existing unsupported-categorical error even when the booster does not expose feature_types. (#4997, by @​RAMitchell)
• TreeExplainer no longer crashes with pandas nullable dtypes. (#4298, by @​tudstudent)
• Fix NameError when with_binary=False and with_cuda=True by initializing compile_args. (#4322, by @​mohityadav8)
• Text plot colors render correctly by converting NumPy types to float. (#4332, by @​Saloni-0465)
• Assign the result of np.flipud so it is no longer a no-op in AdditiveForceArrayVisualizer. (#4343, by @​Mahaveerjain-18)
• Use isinstance() instead of is for type checks. (#4373, by @​divyam-jha123)
• Record 'sample' in Explanation.op_history instead of '__getitem__'. (#4376, by @​tarun-227)
• Move the unreachable large-dataset warning into the interventional branch. (#4392, by @​Mahaveerjain-18)
• Fix "structure of inputs doesn't match the expected structure". (#4410, by @​shaivimalik)
• Fix the return value from is_color_map() in plots/_beeswarm.py. (#4421, by @​maniktyagi04)
• Suppress the UserWarning when LGBMRegressor was fitted with feature names. (#4422, by @​shaivimalik)

... (truncated)

Commits

• 8461059 FIX: Improve GPU TreeExplainer parity (#4997)
• 8549e6b fix: use isinstance() instead of type() is tuple checks (#4508)
• 3be7001 remove webpack dependency for sickness scores (#5018)
• 6e9f9b8 build(deps): bump qs and express in /javascript (#5015)
• 9be5435 build(deps): bump idna from 3.11 to 3.15 in /docs (#5007)
• 52dd763 pin torch to <=2.11.0 in pyproject.toml (#5017)
• d8f2e76 build(deps-dev): bump webpack-dev-server in /javascript (#5009)
• ac6e677 build(deps-dev): bump @​babel/plugin-transform-modules-systemjs (#4991)
• 679b2ee FIX: warn when covariance matrix is singular in LinearExplainer (#4471)
• ce4abd7 build(deps): bump mistune from 3.2.0 to 3.2.1 (#4990)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[fmind]

Superseded by the v5.0.0 canonical-stack migration: all dependencies were bumped to current (Python 3.14, MLflow 3, ruff 0.15, etc.) and Dependabot now tracks the uv ecosystem instead of the removed requirements.txt. Closing as obsolete.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.