Skip to content

Bump the rust group with 3 updates#224

Merged
Cadair merged 1 commit into
mainfrom
dependabot/cargo/rust-91db3a4c9a
Mar 23, 2026
Merged

Bump the rust group with 3 updates#224
Cadair merged 1 commit into
mainfrom
dependabot/cargo/rust-91db3a4c9a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026

Updates the requirements on pyo3, numpy and ndarray to permit the latest version.
Updates pyo3 to 0.25.1

Release notes

Sourced from pyo3's releases.

PyO3 0.25.1

This release adds testing for arm64 Windows, and fixes a bug with Python 3.14 support on 32-bit systems.

This release also adds a chrono-local feature to enable support for chrono::Local timezone (this was previously available in PyO3 0.24 but would convert the local timezone to a fixed offset, which did not round-trip well).

There are a few other fixes, mostly correcting FFI definitions and improving compiler errors when writing async code without the experimental-async feature enabled.

Thank you to the following contributors for the improvements:

@​bschoenmaeckers @​Cheukting @​davidhewitt @​decathorpe @​dependabot[bot] @​Icxolu @​jessekrubin @​musicinmybrain @​ngoldbaum @​timfel @​tonybaloney @​Tpt @​yogevm15

Changelog

Sourced from pyo3's changelog.

[0.25.1] - 2025-06-12

Packaging

  • Add support for Windows on ARM64. #5145
  • Add chrono-local feature for optional conversions for chrono's Local timezone & DateTime<Local> instances. #5174

Added

  • Add FFI definition PyBytes_AS_STRING. #5121
  • Add support for module associated consts introspection. #5150

Changed

  • Enable "vectorcall" FFI definitions on GraalPy. #5121
  • Use Py_Is function on GraalPy #5121

Fixed

  • Report a better compile error for async declarations when not using experimental-async feature. #5156
  • Fix implementation of FromPyObject for uuid::Uuid on big-endian architectures. #5161
  • Fix segmentation faults on 32-bit x86 with Python 3.14. #5180

[0.25.0] - 2025-05-14

Packaging

  • Support Python 3.14.0b1. #4811
  • Bump supported GraalPy version to 24.2. #5116
  • Add optional bigdecimal dependency to add conversions for bigdecimal::BigDecimal. #5011
  • Add optional time dependency to add conversions for time types. #5057
  • Remove cfg-if dependency. #5110
  • Add optional ordered_float dependency to add conversions for ordered_float::NotNan and ordered_float::OrderedFloat. #5114

Added

  • Add initial type stub generation to the experimental-inspect feature. #3977
  • Add #[pyclass(generic)] option to support runtime generic typing. #4926
  • Implement OnceExt & MutexExt for parking_lot & lock_api. Use the new extension traits by enabling the arc_lock, lock_api, or parking_lot cargo features. #5044
  • Implement From/Into for Borrowed<T> -> Py<T>. #5054
  • Add PyTzInfo constructors. #5055
  • Add FFI definition PY_INVALID_STACK_EFFECT. #5064
  • Implement AsRef<Py<PyAny>> for Py<T>, Bound<T> and Borrowed<T>. #5071
  • Add FFI definition PyModule_Add and compat::PyModule_Add. #5085
  • Add FFI definitions Py_HashBuffer, Py_HashPointer, and PyObject_GenericHash. #5086
  • Support #[pymodule_export] on const items in declarative modules. #5096
  • Add #[pyclass(immutable_type)] option (on Python 3.14+ with abi3, or 3.10+ otherwise) for immutable type objects. #5101
  • Support #[pyo3(rename_all)] support on #[derive(IntoPyObject)]. #5112
  • Add PyRange wrapper. #5117

Changed

... (truncated)

Commits

Updates numpy to 0.28.0

Release notes

Sourced from numpy's releases.

v0.28.0

What's Changed

New Contributors

Full Changelog: PyO3/rust-numpy@v0.27.1...v0.28.0

Changelog

Sourced from numpy's changelog.

Changelog

  • Unreleased

    • Fix PyArray_DTypeMeta definition when Py_LIMITED_API is disabled (#532)

  • v0.28.0

    • Fix mismatched behavior between PyArrayLike1 and PyArrayLike2 when used with floats (#520)
    • Add ownership-moving conversions into PyReadonlyArray and PyReadwriteArray (#524)
    • Fix UB when calling PyArray::as_slice and as_slice_mut on misaligned arrays (#525)
    • Bump PyO3 dependency to v0.28.0. (#530)

  • v0.27.1

    • Bump ndarray dependency to v0.17. (#516)

  • v0.27.0

    • Bump PyO3 dependency to v0.27.0. (#515)

  • v0.26.0

    • bump MSRV to 1.74, matching PyO3 (#504)
    • extend supported nalgebra version to 0.34 (#503)
    • Bump PyO3 dependency to v0.26.0. (#506)

  • v0.25.0,

    • Bump PyO3 dependency to v0.25.0. (#492)

  • v0.24.0

    • Bump PyO3 dependency to v0.24.0. (#483)
    • Support Python 3.13t "free-threaded" Python. (#471)

  • v0.23.0

    • Drop support for PyPy 3.7 and 3.8. (#470)
    • Require Element: Sync as part of the free-threading support in PyO3 0.23 (#469)
    • Bump PyO3 dependency to v0.23.0 ([#457])
      • removed the gil-refs feature
      • reintroduced function names without _bound suffix + deprecating the old names
      • switched to IntoPyObject as trait bound
    • Bump rustc-hash dependency to 2.0. ([#472])

  • v0.22.1

    • Fix building on 32-bit Windows. (#463)
    • Add PyReadwriteArray::make_nonwriteable. (#462)
    • Implement From<PyReadWriteArray> for PyReadonlyArray. (#462)

  • v0.22.0

    • Bump MSRV to 1.63. (#450)
    • Add permute and transpose methods for changing the order of axes of a PyArray. (#428)
    • Add support for NumPy v2 which had a number of changes to the C API. (#442)
    • Add support for ndarray 0.16. (#439)
    • Bumped pyo3 dependency to v0.22.0 which required the addition of several new methods to the Element trait. (#435)

... (truncated)

Commits

Updates ndarray to 0.17.2

Changelog

Sourced from ndarray's changelog.

Version 0.17.2 (2026-01-10)

Version 0.17.2 is mainly a patch fix to bugs related to the new ArrayRef implementation.

In addition, ndarray has reduced its packaging footprint to ease supply chain reviews (and shrink the binary size!). A special thanks to @​SwishSwushPow and @​weiznich for bringing this to our attention and making the necessary changes.

Added

Fixed

Documentation

Version 0.17.1 (2025-11-02)

Version 0.17.1 provides a patch to fix the originally-unsound implementation of the new array reference types.

The reference types are now all unsized. Practically speaking, this has one major implication: writing functions and traits that accept RawRef and LayoutRef will now need a + ?Sized bound to work ergonomically with ArrayRef. For example, the release notes for 0.17.0 said

Reading / Writing Shape: LayoutRef<A, D>

LayoutRef lets functions view or modify shape/stride information without touching data. This replaces verbose signatures like:

fn alter_view<S>(a: &mut ArrayBase<S, Ix1>)
where S: Data<Elem = f64>;

Use AsRef / AsMut for best compatibility:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>>;

However, these functions now need an additional bound to allow for callers to pass in &ArrayRef types:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>> + ?Sized; // Added bound here

A huge thank you to Sarah Quiñones (@​sarah-quinones) for catching the original unsound bug and helping to fix it. She does truly excellent work with faer-rs; check it out!

Version 0.17.0 (2025-10-14) [YANKED]

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the rust group with 3 updates
87eeb26 
Updates the requirements on [pyo3](https://github.com/pyo3/pyo3), [numpy](https://github.com/PyO3/rust-numpy) and [ndarray](https://github.com/rust-ndarray/ndarray) to permit the latest version.

Updates `pyo3` to 0.25.1
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.25.0...v0.25.1)

Updates `numpy` to 0.28.0
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.25.0...v0.28.0)

Updates `ndarray` to 0.17.2
- [Release notes](https://github.com/rust-ndarray/ndarray/releases)
- [Changelog](https://github.com/rust-ndarray/ndarray/blob/master/RELEASES.md)
- [Commits](rust-ndarray/ndarray@ndarray-rand-0.16.0...0.17.2)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-version: 0.25.1
  dependency-type: direct:production
  dependency-group: rust
- dependency-name: numpy
  dependency-version: 0.28.0
  dependency-type: direct:production
  dependency-group: rust
- dependency-name: ndarray
  dependency-version: 0.17.2
  dependency-type: direct:production
  dependency-group: rust
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 23, 2026
@Cadair Cadair merged commit 9acf85c into main Mar 23, 2026
21 checks passed
@Cadair Cadair deleted the dependabot/cargo/rust-91db3a4c9a branch March 23, 2026 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Cadair