Skip to content

chore(deps): Bump numexpr from 2.11.0 to 2.14.1 in /python/geobrix - #138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/geobrix/numexpr-2.14.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python/geobrix/numexpr-2.14.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps numexpr from 2.11.0 to 2.14.1.

Changelog

Sourced from numexpr's changelog.

Changes from 2.14.1 to 2.14.2

  • Added a disable_cache parameter to evaluate() to bypass the internal expression cache. Thanks to 27rabbitlt.
  • Added Windows ARM64 wheel builds.
  • Dropped support for Python 3.10.
  • No longer build free-threaded Python 3.13 wheels, matching NumPy's own support.
  • Avoid keeping arrays passed as out= alive in the re_evaluate cache (#558).
  • Guarded out-of-range shift counts (shift amount >= bit width) in the integer <</>> opcodes, which was undefined behavior in C and could return garbage results. Thanks to uwezkhan (#559).
  • Fixed run_interpreter() unconditionally returning success even when the VM engine failed, so execution errors are now correctly raised instead of silently discarded (#557).
  • Fixed a reference leak of constsig on the allocation-failure path in NumExpr_init() (#561).

Changes from 2.14.0 to 2.14.1

  • Rolled back static typing support to ensure compatibiity with NumPy 1.26.
  • Added CI tests for NumPy 1.26

Changes from 2.13.1 to 2.14.0

  • Numerical stability for overflow has been improved for tan / tanh to handle possible overflows for complex numbers.

  • Static typing support has been added, making NumExpr compatible with static type checkers like mypy and pyright. Thanks to Joren Hammudoglu (@​jorenham) for the work.

Changes from 2.13.0 to 2.13.1

  • Patch to maximum/minimum functions in order to match NumPy NaN handling
  • Patch to convert '+'->'|' and '*'->'&' for booleans

Changes from 2.12.1 to 2.13.0

  • New functionality has been added:
  • Bitwise operators (and, or, not, xor): &, |, ~, ^
  • New binary arithmetic operator for floor division: //

... (truncated)

Commits
  • 048a5c4 Getting ready for release 2.14.1
  • d9cf0f0 Getting ready for release 2.14.1
  • 1fcb012 Merge pull request #542 from pydata/test-numpy-1.26
  • 898b4d9 Update tests to pass for numpy 1.26
  • 7cadd0f Revert "Merge pull request #534 from jorenham/static-typing"
  • eb2f999 Revert "Merge pull request #534 from jorenham/static-typing"
  • e27646b Force local build and test with numpy 1.26
  • acd7eb0 Force tests with numpy 1.26
  • 0e827b1 Force tests with numpy 1.26
  • ed43557 Force local build with numpy 1.26
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [numexpr](https://github.com/pydata/numexpr) from 2.11.0 to 2.14.1.
- [Release notes](https://github.com/pydata/numexpr/releases)
- [Changelog](https://github.com/pydata/numexpr/blob/master/RELEASE_NOTES.rst)
- [Commits](pydata/numexpr@v2.11.0...v2.14.1)

---
updated-dependencies:
- dependency-name: numexpr
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 22, 2026 03:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 22, 2026
mjohns-databricks added a commit that referenced this pull request Oct 27, 2026
Applies the vetted Dependabot Python bumps on the dev line. The PRs edit
pyproject.toml and the lock .in files but never regenerate the
hash-pinned .txt locks, so their green CI still ran the old versions;
here the env5 and env6 CI locks are recompiled and the tests run against
them.

- #138 numexpr floor >=2.14.1 (the 2.13.1+ NaN and boolean semantics);
  CI pins 2.11.0 -> 2.14.2, what users already get. Not preinstalled on
  any supported runtime, so nothing moves.
- #135 tippecanoe floor >=2.72.0, CI pin 2.45.0 -> 2.72.0. Not
  preinstalled anywhere; manylinux wheels exist for x86_64 and aarch64.
- #140 overturemaps floor >=1.0.2 to fence out 1.0.0 and 1.0.1, which
  predate the absolute STAC href fix on the --stac path. The extra's
  comments now say click>=8.3.0 and tqdm>=4.67.3 (the old text said
  click>=8.4 and never mentioned the tqdm move on DBR 18/19, env 5/6).
- The two -all locks already resolved numexpr 2.14.2 and tippecanoe
  2.72.0 and are unchanged on recompile.
- #141 imageio and #142 typing_extensions floors are not applied: they
  would force runtime package moves for no gain.

Co-authored-by: Isaac <no-reply@databricks.com>

This branch was previously deployed

1 inactive deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants