Skip to content
This repository has been archived by the owner on Feb 15, 2024. It is now read-only.

Update numpy requirement from 0.7.0 to 0.17.2 #88

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 19, 2022

Updates the requirements on numpy to permit the latest version.

Release notes

Sourced from numpy's releases.

rust-numpy version 0.17.2

This release fixes unsound aliasing into Box<[T]> when converting these into PyArray<T, D> via the IntoPyArray trait.

Changelog

Sourced from numpy's changelog.

Changelog

  • Unreleased

    • Add conversions from and to datatypes provided by the nalgebra crate. (#347)
    • Drop our wrapper for NumPy iterators which were deprecated in v0.16.0 as ndarray's iteration facilities are almost always preferable. (#324)
  • v0.17.2

    • Fix unsound aliasing into Box<[T]> when converting them into NumPy arrays. (#351)
  • v0.17.1

    • Fix use-after-free in PyArray::resize, PyArray::reshape and PyArray::reshape_with_order. (#341)
    • Fix UB in ToNpyDims::as_dims_ptr with dimensions of dynamic size (-1). (#344)
  • v0.17.0

    • Add dynamic borrow checking to safely construct references into the interior of NumPy arrays. (#274)
      • The deprecated iterator builders NpySingleIterBuilder::{readonly,readwrite} and NpyMultiIterBuilder::add_{readonly,readwrite} now take referencces to PyReadonlyArray and PyReadwriteArray instead of consuming them.
      • The destructive PyArray::resize method is now unsafe if used without an instance of PyReadwriteArray. (#302)
    • Add support for datetime64 and timedelta64 element types via the datetime module. (#308)
    • Add support for IEEE 754-2008 16-bit floating point numbers via an optional dependency on the half crate. (#314)
    • The inner, dot and einsum functions can also return a scalar instead of a zero-dimensional array to match NumPy's types (#285)
    • The PyArray::resize function supports n-dimensional contiguous arrays. (#312)
    • Deprecate PyArray::from_exact_iter after optimizing PyArray::from_iter. (#292)
    • Remove DimensionalityError and TypeError from the public API as they never used directly. (#315)
    • Remove the deprecated PyArrayDescr::get_type which was replaced by PyArrayDescr::typeobj in the last cycle. (#308)
    • Fix returning invalid slices from PyArray::{strides,shape} for rank zero arrays. (#303)
  • v0.16.2

    • Fix build on platforms where c_char is u8 like Linux/AArch64. (#296)
  • v0.16.1

    • Fix build when PyO3's multiple-pymethods feature is used. (#288)
  • v0.16.0

    • Bump PyO3 version to 0.16 (#259)
    • Support object arrays (#216)
    • Support borrowing arrays that are part of other Python objects via PyArray::borrow_from_array (#230)
    • Fixed downcasting ignoring element type and dimensionality (#265)
    • PyArray::new is now unsafe, as it produces uninitialized arrays (#220)
    • PyArray::iter, NpySingleIterBuilder::readwrite and NpyMultiIterBuilder::add_readwrite are now unsafe, as they allow aliasing mutable references to be created (#278/)
    • The npyiter module is deprecated as rust-ndarray's facilities for iteration are more flexible and performant (#280)
    • PyArray::from_exact_iter does not unsoundly trust ExactSizeIterator::len any more (#262)
    • PyArray::as_cell_slice was removed as it unsoundly interacts with PyReadonlyArray allowing safe code to violate aliasing rules (#260)
    • rayon feature is now removed, and directly specifying the feature via ndarray dependency is recommended (#250)
    • Element trait and PyArrayDescr changes (#256):
      • Element trait has been simplified to get_dtype() and IS_COPY
      • New PyArrayDescr methods: of, into_dtype_ptr, is_equiv_to
      • Added numpy::dtype function
      • Element is now implemented for isize
      • c32 / c64 have been renamed with Complex32 / Complex64
      • ShapeError has been split into TypeError and DimensionalityError

... (truncated)

Commits
  • c6508b5 Update change log and bump crate version.
  • 81b807c Remove unnecessary generics from PyArray::from_raw_parts.
  • bf66005 Derive data pointer only after dissolving Box to avoid unsound aliasing.
  • 1bb9def Use slice:as_mut_ptr instead of slice::as_ptr to enable modifications via the...
  • 27d86c0 Make nightly Clippy happy.
  • 95e3bb5 Merge pull request #344 from PyO3/dimensions-slice-mut
  • 1e1f1f4 fix UB in to_npy_dims
  • a7fa4c8 Merge pull request #345 from davidhewitt/asan-0.17-backport
  • 5f1dc2f Add a CI job running test in release mode and under address sanitizer.
  • fb3ff8c Merge pull request #341 from PyO3/fix-use-after-free-to-npy-dims
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [numpy](https://github.com/PyO3/rust-numpy) to permit the latest version.
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.7.0...v0.17.2)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 19, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 19, 2023

Superseded by #92.

@dependabot dependabot bot closed this Jan 19, 2023
@dependabot dependabot bot deleted the dependabot/cargo/numpy-0.17.2 branch January 19, 2023 07:02
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants