fix(deps): update dependency xgboost to >=3.3,<3.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
xgboost	>=3.2,<3.3 → >=3.3,<3.4

---

Release Notes

dmlc/xgboost (xgboost)

v3.3.0: Release 3.3.0 stable

Compare Source

Release notes

https://xgboost.readthedocs.io/en/latest/changes/v3.3.0.html

Additional artifacts:

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check

22d4fba822fba5cd02299bf0c63ec68ff72606bc1b1bd910423d4b83c2f108ff  xgboost-src-3.3.0.tar.gz
df276bf14ebda98319da70fa88874746d9275ffbcde77e18e171d809cdbda86a  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

• xgboost_r_gpu_linux.tar.gz: Download

Source tarball

• xgboost-src-3.3.0.tar.gz: Download

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package xgboost --upgrade-package xgboost --upgrade-package xgboost
Using CPython 3.13.14 interpreter at: /opt/containerbase/tools/python/3.13.14/bin/python3
   Building tensorrt-cu13-libs==10.16.1.11
      Built tensorrt-cu13-libs==10.16.1.11
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.11.*' and platform_machine != 's390x'):
  ╰─▶ Because the requested Python version (>=3.10, <3.14) does not satisfy
      Python>=3.12 and xgboost==3.3.0 depends on Python>=3.12, we can conclude
      that xgboost==3.3.0 cannot be used.
      And because only xgboost<=3.3.0 is available, we can conclude that
      xgboost>=3.3.0 cannot be used.
      And because modelaudit[all] depends on xgboost>=3.3 and your project
      requires modelaudit[all], we can conclude that your project's
      requirements are unsatisfiable.

hint: While the active Python version is 3.13, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.
hint: The `requires-python` value (>=3.10, <3.14) includes Python versions that are not supported by your dependencies (e.g., xgboost==3.3.0 only supports >=3.12). Consider using a more restrictive `requires-python` value (like >=3.12).

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5073b2abd5

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Add a Python marker to the XGBoost 3.3 pin

When this extra is resolved on Python 3.10 or 3.11, there is no compatible xgboost>=3.3,<3.4 candidate because the 3.3.0 PyPI metadata declares requires_python: >=3.12 (unlike 3.2.0, which was >=3.10). That breaks installs such as modelaudit[xgboost] on supported Python versions and also the Fast Tests matrix in .github/workflows/test.yml, which pins Python 3.10/3.11 and runs uv sync --extra all-ci; please either keep a 3.2 fallback for <3.12 or guard this dependency with a Python-version marker.

Useful? React with 👍 / 👎.