Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 19, 2023

Bumps numpy from 0.12.2 to 0.18.0.

Release notes

Sourced from numpy's releases.

rust-numpy version 0.18.0

This release matches PyO3 version 0.18.0, adds basic conversions to and from the types provided by the nalgebra crate, drops the deprecated wrappers around NumPy's iterators and makes the dynamic borrow checking work across multiple extensions and potentially language boundaries.

rust-numpy version 0.17.2

This release fixes unsound aliasing into Box<[T]> when converting these into PyArray<T, D> via the IntoPyArray trait.

rust-numpy version 0.17.1

This release fixes a use-after-free bug in how the methods PyArray::resize, PyArray::reshape and PyArray::reshape_with_order call into the NumPy C-API.

Due to this breaking memory safety and being easy to hit in release builds, the previous release 0.17.0 was yanked from crates.io.

rust-numpy version 0.17.0

This release matches PyO3 version 0.17.0. It introduces dynamic borrow checking for PyArray and adds support for NumPy's float16, datetime64 and timedelta64 data types. The complete changelog lists further fixes and enhancements.

rust-numpy version 0.16.2

This release fixes builds on platforms where c_char is unsigned, for example Linux/AArch64.

rust-numpy version 0.16.1

This release contains a bugfix to make this crate compatible again with PyO3's multiple-pymethods feature.

rust-numpy version 0.16.0

This release matches PyO3 version 0.16.0, adds support for object arrays, i.e. PyArray<PyObject, D>, contains a large overhaul of the dtype-related API, i.e. PyArrayDescr, by @​aldanor and deprecates the npyiter module in favour of ndarray's iteration facilities. Smaller fixes and improvements are listed in the complete changelog.

rust-numpy version 0.15.1

Mainly consisting of security fixes by @​adamreichold. Thanks!

  • Make arrays produced via IntoPyArray, i.e. those owning Rust data, writeable (#235)
  • Fix thread-safety in internal API globals (#222)

rust-numpy version 0.15.0

Also, this version includes some documentation fixes: #206, #210, and #214. Thanks!

rust-numpy version 0.14.1

rust-numpy version 0.14.0

rust-numpy version 0.13.2

  • Support ndarray 0.15

rust-numpy version 0.13.1

  • Allow ndarray >=0.13, < 0.15 to work with Rust 1.41.1.
  • Add inner, dot, and einsum

... (truncated)

Changelog

Sourced from numpy's changelog.

Changelog

  • Unreleased

  • v0.18.0

    • Add conversions from and to datatypes provided by the nalgebra crate. (#347)
    • Drop our wrapper for NumPy iterators which were deprecated in v0.16.0 as ndarray's iteration facilities are almost always preferable. (#324)
    • Dynamic borrow checking now uses a capsule-based API and therefore works across multiple extensions using PyO3 and potentially other bindings or languages. (#361)
  • v0.17.2

    • Fix unsound aliasing into Box<[T]> when converting them into NumPy arrays. (#351)
  • v0.17.1

    • Fix use-after-free in PyArray::resize, PyArray::reshape and PyArray::reshape_with_order. (#341)
    • Fix UB in ToNpyDims::as_dims_ptr with dimensions of dynamic size (-1). (#344)
  • v0.17.0

    • Add dynamic borrow checking to safely construct references into the interior of NumPy arrays. (#274)
      • The deprecated iterator builders NpySingleIterBuilder::{readonly,readwrite} and NpyMultiIterBuilder::add_{readonly,readwrite} now take referencces to PyReadonlyArray and PyReadwriteArray instead of consuming them.
      • The destructive PyArray::resize method is now unsafe if used without an instance of PyReadwriteArray. (#302)
    • Add support for datetime64 and timedelta64 element types via the datetime module. (#308)
    • Add support for IEEE 754-2008 16-bit floating point numbers via an optional dependency on the half crate. (#314)
    • The inner, dot and einsum functions can also return a scalar instead of a zero-dimensional array to match NumPy's types (#285)
    • The PyArray::resize function supports n-dimensional contiguous arrays. (#312)
    • Deprecate PyArray::from_exact_iter after optimizing PyArray::from_iter. (#292)
    • Remove DimensionalityError and TypeError from the public API as they never used directly. (#315)
    • Remove the deprecated PyArrayDescr::get_type which was replaced by PyArrayDescr::typeobj in the last cycle. (#308)
    • Fix returning invalid slices from PyArray::{strides,shape} for rank zero arrays. (#303)
  • v0.16.2

    • Fix build on platforms where c_char is u8 like Linux/AArch64. (#296)
  • v0.16.1

    • Fix build when PyO3's multiple-pymethods feature is used. (#288)
  • v0.16.0

    • Bump PyO3 version to 0.16 (#259)
    • Support object arrays (#216)
    • Support borrowing arrays that are part of other Python objects via PyArray::borrow_from_array (#230)
    • Fixed downcasting ignoring element type and dimensionality (#265)
    • PyArray::new is now unsafe, as it produces uninitialized arrays (#220)
    • PyArray::iter, NpySingleIterBuilder::readwrite and NpyMultiIterBuilder::add_readwrite are now unsafe, as they allow aliasing mutable references to be created (#278/)
    • The npyiter module is deprecated as rust-ndarray's facilities for iteration are more flexible and performant (#280)
    • PyArray::from_exact_iter does not unsoundly trust ExactSizeIterator::len any more (#262)
    • PyArray::as_cell_slice was removed as it unsoundly interacts with PyReadonlyArray allowing safe code to violate aliasing rules (#260)
    • rayon feature is now removed, and directly specifying the feature via ndarray dependency is recommended (#250)
    • Element trait and PyArrayDescr changes (#256):
      • Element trait has been simplified to get_dtype() and IS_COPY
      • New PyArrayDescr methods: of, into_dtype_ptr, is_equiv_to
      • Added numpy::dtype function

... (truncated)

Commits
  • 1bbbad0 Bump version to 0.18 following PyO3's current release.
  • bf93c9d Update to nalgebra 0.32
  • 65b6693 Extend changelog w.r.t. capsule-based dynamic borrow checking.
  • cc7b1c9 Make the shared borrow checking API much narrower
  • 869d198 Use a less grandiose name of the borrow checking API capsule to avoid misunde...
  • f6e8192 Perform borrow checking through a capsule-based API
  • 324b634 Split off the parts of borrow checking module which should be shared by all e...
  • 2f18619 Replace AHash (DoS-resistant) by FxHash (simpler dependency)
  • 347888d Fix unintended usage of global where self was intended.
  • 3d00ad7 Remove obsolete Clippy workaround.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [numpy](https://github.com/PyO3/rust-numpy) from 0.12.2 to 0.18.0.
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.12.2...v0.18.0)

---
updated-dependencies:
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant