MAINT: Bump actions/dependency-review-action from 4.6.0 to 4.7.1 #233
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Multiple spaces after comma Do not apply this rule to tabular data, tables must remain aligned.
Unexpected spaces around keyword / parameter equals For now, do not modify large and consistent code blocks that use spaces on purpose, mostly when the default values are arrays.
Block comment should start with `# ` For now, keep commented out code as is.
Too many leading `#` before block comment For now, do not modify titles.
Co-authored-by: Joren Hammudoglu <[email protected]>
Unwrap the array arbitrarily split over two lines, as it fits the new default line-length limit of 88 characters. Co-authored-by: Joren Hammudoglu <[email protected]>
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 2.23.2 to 2.23.3. - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@d04cacb...faf86a6) --- updated-dependencies: - dependency-name: pypa/cibuildwheel dependency-version: 2.23.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
These are PRs 18 and 19 from https://github.com/numpy/meson
* WIP,Prototype: Use Neon SIMD to improve half->float cast performance [ci skip] [skip ci] * Support Neon SIMD float32->float16 cast and update scalar path to use hardware cast * Add missing header * Relax VECTOR_ARITHMETIC check and add comment on need for SIMD routines * Enable hardware cast on x86 when F16C is available * Relax fp exceptions in Clang to enable vectorization for cast * Ignore fp exceptions only for float casts * Fix build * Attempt to fix test failure on ARM64 native * Work around gcc bug for double->half casts * Add release note
…eat``, ``generic.repeat``, and ``np.repeat`` (numpy#28849)
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@c7f87aa...6b9c606) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Back in 2009, this script was used to determine active SVN committers of NumPy, SciPy, and SciKits.
* Add an empty line to LICENSE_osx.txt for consistency. * Change URLs from http:// to https://, now verbatim copy of latest GPLv3: https://www.gnu.org/licenses/gpl-3.0.txt
The script would detect deprecated invalid escape sequences, just like ruff rule W605 which is now enabled: https://docs.astral.sh/ruff/rules/invalid-escape-sequence/
Prefer absolute imports over relative imports from parent modules
Array2.cxx:163:25: warning: ‘*’ in boolean context, suggest ‘&&’ instead [-Wint-in-bool-context]
163 | if (_ownData && _nrows*_ncols && _buffer)
| ~~~~~~^~~~~~~
Replace `hex` call with f-string
Use `itertools.starmap` instead of the generator
This reverts commit a53b45f.
This reverts commit f1b77fa.
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.17. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@28deaed...60168ef) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.28.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…dmask,unshare_mask,sharedmask,shrink_mask}`` (numpy#28867)
This is PR 21 from https://github.com/numpy/meson
…ecessary annotations
…sts in `npy_math.h` for C++ runs (numpy#28892) * MAINT: Avoid type-punning complex casts in npy_math.h * MAINT: Add missing typecast in npy_cimagl
…umpy#28898) When running the scipy 1.15 test suite test signal/tests/test_signaltools.py::test_lfilter_bad_object, with Python built in debug mode, we see the following error: ``` Fatal Python error: _Py_CheckSlotResult: Slot * of type float succeeded with an exception set ``` `None` ends up as the first argument to `dot`, and this triggers an error from PyFloat_Multiply. Once an error has occurred, we must avoid calling multiply again, since it asserts that PyErr_Occurred() is false if the output is a non-error, which will fail if an error was set at entry.
This is mostly adapting and duplicating how the 32-bit no-OpenBLAS
wheels are built, to make ARM64 wheels.
The mamba-org/setup-micromamba github action reports "win_arm64" as
unsupported for installation of anaconda-client at the moment.
Beyond that, a number of tests need to be skipped. They are in
three categories:
- Meson outside of the msdevshell github action does not seems
to be able to find the MSVC linker. (Possibly missing some PATH env)
- No "checks" modules in win-arm64 (yet)
- Mingw GNU objdump does not understand arm64 dll format (yet) to
to generate import libraries.
closes numpy#22530
…8821) * BUG: Fix numpy#27881 inconsistent behavior between numpy.roots and numpy.polynomial.polynomial.polyroots Both functions use numpy.linalg.eigvals, but while roots gives in argument the polynomial's companion matrix unchanged, polyroots rotates it. Though in theory this rotation shouldn't change anything, in terms of numerical calcuations, eigvals gives significantly different results. This commit removes the rotation as an easy fix to the inconsistency. This strange behavior by eigvals is however a bug. I did some research on it, which you can find on the issue. * BUG: Fix numpy#27881 Adding tests for numpy.roots and numpy.polynomial.polynomial.polyroots The following tests provide a minimum precision expected by the functions. In the case of my change, they allow my change but not the previous version. You'll find that the difference of precision between the two versions vary according to the root values but in all cases, this change either increases precision or maintains the previous result. * BUG: Fix numpy#27881 Adding tests for numpy.roots and numpy.polynomial.polynomial.polyroots Fixing tests * BUG: Fix numpy#27881 Adding tests for numpy.roots and numpy.polynomial.polynomial.polyroots Fixing tests. It seems that the way numpy.roots creates it's matrice companion augments the numerical error compared to the polycompanion function, which is why I had to reduce the expected precision. * Reverting change from commit 6703b91 in matlib.pyi
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.6.0 to 4.7.1. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@ce3cf95...da24556) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-version: 4.7.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
|
A newer version of actions/dependency-review-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps actions/dependency-review-action from 4.6.0 to 4.7.1.
Release notes
Sourced from actions/dependency-review-action's releases.
Commits
da24556Merge pull request #933 from actions/dangoor/471-release9af0cafBump version number for 4.7.1d8f2df2Merge pull request #932 from actions/907-disallow-expression6e9307aDiscard allow list entries that are not SPDX IDs8805179Merge pull request #930 from actions/889-allow-no-license014300bUpdate build34486f3Check namespaces when excluding license checks9b155d6Update buildf199659Allowing dependencies works with no licenses38ecb5bMerge pull request #929 from actions/dangoor/4.7-releaseYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)