Update ipython requirement from >=9.16.0 to >=9.16.1

[dependabot]

Updates the requirements on ipython to permit the latest version.

Commits

• 3b83e1b release 9.16.1
• cc8334e Convert IFrame sources to strings before HTML escaping (#15348)
• 82a902e back to dev
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Reviewed this Dependabot PR — it's a minimal, low-risk patch bump.

Summary of changes:

• ipython>=9.16.0 → >=9.16.1 in requirements/base.txt, requirements/local.txt, and requirements/production.txt
• No code changes; version constraint update only

Assessment:

• The upstream release (ipython 9.16.1) is a patch release; per the linked changelog, the notable fix is escaping IFrame sources before HTML rendering (an XSS-hardening fix in IPython.display.IFrame), plus routine dev-cycle housekeeping. Taking the patch is a straightforward net positive from a security standpoint.
• The change is consistent across all three requirements files and preserves the existing # not directly required, pinned by Snyk to avoid a vulnerability annotation, so the Snyk-pin bookkeeping stays intact.
• No test coverage concerns — this is a transitive dependency version floor bump with no application code touched, so no new tests are warranted.
• No performance or breaking-change concerns for a patch-level bump on a dev/notebook tooling dependency.

No issues found. LGTM to merge.