Skip to content
This repository has been archived by the owner on Feb 15, 2024. It is now read-only.

Update numpy requirement from 0.7.0 to 0.17.1 #86

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 29, 2022

Updates the requirements on numpy to permit the latest version.

Release notes

Sourced from numpy's releases.

rust-numpy version 0.17.1

This release fixes a use-after-free bug in how the methods PyArray::resize, PyArray::reshape and PyArray::reshape_with_order call into the NumPy C-API.

Due to this breaking memory safety and being easy to hit in release builds, the previous release 0.17.0 was yanked from crates.io.

Changelog

Sourced from numpy's changelog.

Changelog

  • Unreleased

    • Drop our wrapper for NumPy iterators which were deprecated in v0.16.0 as ndarray's iteration facilities are almost always preferable. (#324)
  • v0.17.1

    • Fix use-after-free in PyArray::resize, PyArray::reshape and PyArray::reshape_with_order. (#341)
    • Fix UB in ToNpyDims::as_dims_ptr with dimensions of dynamic size (-1). (#344)
  • v0.17.0

    • Add dynamic borrow checking to safely construct references into the interior of NumPy arrays. (#274)
      • The deprecated iterator builders NpySingleIterBuilder::{readonly,readwrite} and NpyMultiIterBuilder::add_{readonly,readwrite} now take referencces to PyReadonlyArray and PyReadwriteArray instead of consuming them.
      • The destructive PyArray::resize method is now unsafe if used without an instance of PyReadwriteArray. (#302)
    • Add support for datetime64 and timedelta64 element types via the datetime module. (#308)
    • Add support for IEEE 754-2008 16-bit floating point numbers via an optional dependency on the half crate. (#314)
    • The inner, dot and einsum functions can also return a scalar instead of a zero-dimensional array to match NumPy's types (#285)
    • The PyArray::resize function supports n-dimensional contiguous arrays. (#312)
    • Deprecate PyArray::from_exact_iter after optimizing PyArray::from_iter. (#292)
    • Remove DimensionalityError and TypeError from the public API as they never used directly. (#315)
    • Remove the deprecated PyArrayDescr::get_type which was replaced by PyArrayDescr::typeobj in the last cycle. (#308)
    • Fix returning invalid slices from PyArray::{strides,shape} for rank zero arrays. (#303)
  • v0.16.2

    • Fix build on platforms where c_char is u8 like Linux/AArch64. (#296)
  • v0.16.1

    • Fix build when PyO3's multiple-pymethods feature is used. (#288)
  • v0.16.0

    • Bump PyO3 version to 0.16 (#259)
    • Support object arrays (#216)
    • Support borrowing arrays that are part of other Python objects via PyArray::borrow_from_array (#230)
    • Fixed downcasting ignoring element type and dimensionality (#265)
    • PyArray::new is now unsafe, as it produces uninitialized arrays (#220)
    • PyArray::iter, NpySingleIterBuilder::readwrite and NpyMultiIterBuilder::add_readwrite are now unsafe, as they allow aliasing mutable references to be created (#278/)
    • The npyiter module is deprecated as rust-ndarray's facilities for iteration are more flexible and performant (#280)
    • PyArray::from_exact_iter does not unsoundly trust ExactSizeIterator::len any more (#262)
    • PyArray::as_cell_slice was removed as it unsoundly interacts with PyReadonlyArray allowing safe code to violate aliasing rules (#260)
    • rayon feature is now removed, and directly specifying the feature via ndarray dependency is recommended (#250)
    • Element trait and PyArrayDescr changes (#256):
      • Element trait has been simplified to get_dtype() and IS_COPY
      • New PyArrayDescr methods: of, into_dtype_ptr, is_equiv_to
      • Added numpy::dtype function
      • Element is now implemented for isize
      • c32 / c64 have been renamed with Complex32 / Complex64
      • ShapeError has been split into TypeError and DimensionalityError
      • i32, i64, u32, u64 are now guaranteed to map to np.u?int{32,64}.
      • Removed cfg_if dependency
      • Removed DataType enum
    • Added PyArrayDescr::new constructor (#266)

... (truncated)

Commits
  • 95e3bb5 Merge pull request #344 from PyO3/dimensions-slice-mut
  • 1e1f1f4 fix UB in to_npy_dims
  • a7fa4c8 Merge pull request #345 from davidhewitt/asan-0.17-backport
  • 5f1dc2f Add a CI job running test in release mode and under address sanitizer.
  • fb3ff8c Merge pull request #341 from PyO3/fix-use-after-free-to-npy-dims
  • c433442 Fix use-after-free when calling to_npy_dims helper method.
  • 52d70ca Bump our version to 0.17.0 in parallel to PyO3's 0.17.0 release.
  • 251bfde Add simple example for PyArray<PyObject>. (#339)
  • a445411 Merge pull request #338 from PyO3/bump-maturin
  • 9eb95a5 Work around PyO3 issue 2555.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [numpy](https://github.com/PyO3/rust-numpy) to permit the latest version.
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.7.0...v0.17.1)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 29, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 19, 2022

Superseded by #88.

@dependabot dependabot bot closed this Sep 19, 2022
@dependabot dependabot bot deleted the dependabot/cargo/numpy-0.17.1 branch September 19, 2022 07:13
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants