Skip to content

chore(deps): update numpy requirement from >=1.20 to >=2.0.2 in /ordvec-python - #48

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ordvec-python/numpy-gte-2.0.2
Closed

chore(deps): update numpy requirement from >=1.20 to >=2.0.2 in /ordvec-python#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ordvec-python/numpy-gte-2.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Updates the requirements on numpy to permit the latest version.

Release notes

Sourced from numpy's releases.

NumPy 2.0.2 release (Aug 26, 2024)

NumPy 2.0.2 Release Notes

NumPy 2.0.2 is a maintenance release that fixes bugs and regressions discovered after the 2.0.1 release.

The Python versions supported by this release are 3.9-3.12.

Contributors

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Bruno Oliveira +
  • Charles Harris
  • Chris Sidebottom
  • Christian Heimes +
  • Christopher Sidebottom
  • Mateusz Sokół
  • Matti Picus
  • Nathan Goldbaum
  • Pieter Eendebak
  • Raghuveer Devulapalli
  • Ralf Gommers
  • Sebastian Berg
  • Yair Chuchem +

Pull requests merged

A total of 19 pull requests were merged for this release.

  • #27000: REL: Prepare for the NumPy 2.0.1 release [wheel build]
  • #27001: MAINT: prepare 2.0.x for further development
  • #27021: BUG: cfuncs.py: fix crash when sys.stderr is not available
  • #27022: DOC: Fix migration note for alltrue and sometrue
  • #27061: BUG: use proper input and output descriptor in array_assign_subscript...
  • #27073: BUG: Mirror VQSORT_ENABLED logic in Quicksort
  • #27074: BUG: Bump Highway to latest master
  • #27077: BUG: Off by one in memory overlap check
  • #27122: BUG: Use the new npyv_loadable_stride_ functions for ldexp and...
  • #27126: BUG: Bump Highway to latest
  • #27128: BUG: add missing error handling in public_dtype_api.c
  • #27129: BUG: fix another cast setup in array_assign_subscript
  • #27130: BUG: Fix building NumPy in FIPS mode
  • #27131: BLD: update vendored Meson for cross-compilation patches
  • #27146: MAINT: Scipy openblas 0.3.27.44.4
  • #27151: BUG: Do not accidentally store dtype metadata in np.save
  • #27195: REV: Revert undef I and document it
  • #27213: BUG: Fix NPY_RAVEL_AXIS on backwards compatible NumPy 2 builds
  • #27279: BUG: Fix array_equal for numeric and non-numeric scalar types

... (truncated)

Commits
  • 854252d Merge pull request #27280 from charris/prepare-2.0.2
  • cffa071 REL: Prepare for the NumPy 2.0.2 release [wheel build]
  • 1693029 Merge pull request #27279 from charris/backport-27275
  • da9f9c3 BUG: Fix array_equal for numeric and non-numeric scalar types
  • ee1cf96 Merge pull request #27213 from charris/backport-27202
  • 49dec35 BUG: Fix NPY_RAVEL_AXIS on backwards compatible NumPy 2 builds
  • be56ae2 Merge pull request #27195 from charris/backport-27182
  • 75b039c REV: Revert undef I and document it
  • 428e2ba Merge pull request #27151 from charris/backport-27143
  • 451516d BUG: Do not accidentally store dtype metadata in np.save
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [numpy](https://github.com/numpy/numpy) to permit the latest version.
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.20.0...v2.0.2)

---
updated-dependencies:
- dependency-name: numpy
  dependency-version: 2.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python ordvec-python bindings labels May 25, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python ordvec-python bindings labels May 25, 2026
@Fieldnote-Echo

Copy link
Copy Markdown
Member

Declining this floor bump — keeping numpy >=1.20 for broad/legacy accessibility. ordvec is dep-light + abi3-py39; rust-numpy 0.27 supports numpy 1.x AND 2.x at runtime, and numpy 2.1+ dropped Python 3.9, so raising the floor to >=2.0.2 would drop the 3.9 + numpy-1.x long-tail for zero gain (ordvec's speed is its Rust kernels; numpy is just the zero-copy array container). Added an ignore for numpy in dependabot.yml (unknown flag: --json

Usage: gh pr create [flags]

Flags:
-a, --assignee login Assign people by their login. Use "Ivan (@me)" to self-assign.
-B, --base branch The branch into which you want your code merged
-b, --body string Body for the pull request
-F, --body-file file Read body text from file (use "-" to read from standard input)
-d, --draft Mark pull request as a draft
--dry-run Print details instead of creating the PR. May still push git changes.
-e, --editor Skip prompts and open the text editor to write the title and body in. The first line is the title and the remaining text is the body.
-f, --fill Use commit info for title and body
--fill-first Use first commit info for title and body
--fill-verbose Use commits msg+body for description
-H, --head branch The branch that contains commits for your pull request (default [current branch])
-l, --label name Add labels by name
-m, --milestone name Add the pull request to a milestone by name
--no-maintainer-edit Disable maintainer's ability to modify pull request
-p, --project title Add the pull request to projects by title
--recover string Recover input from a failed run of create
-r, --reviewer handle Request reviews from people or teams by their handle
-T, --template file Template file to use as starting body text
-t, --title string Title for the pull request
-w, --web Open the web browser to create a pull request
) so this won't re-open.

@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/ordvec-python/numpy-gte-2.0.2 branch May 25, 2026 16:17
@Fieldnote-Echo

Copy link
Copy Markdown
Member

(Correction — my close note above garbled the link.) The deliberate-floor ignore lives in: #51

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python ordvec-python bindings

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants