deps: bump mpmath from 1.3.0 to 1.4.1 - #332
Open
dependabot[bot] wants to merge 2 commits into
Open
Conversation
Bumps [mpmath](https://github.com/mpmath/mpmath) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/mpmath/mpmath/releases) - [Changelog](https://github.com/mpmath/mpmath/blob/master/CHANGES) - [Commits](mpmath/mpmath@1.3.0...1.4.1) --- updated-dependencies: - dependency-name: mpmath dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Dependabot bumped mpmath to 1.4.1 in the generated requirements/*.txt exports but never ran `uv lock`, so the PR failed both Lint gates. The resync alone was not enough here: sympy 1.14.0 (latest) declares `mpmath>=1.1.0,<1.4`, which pinned the lock back to 1.3.0. That bound is precautionary rather than a known incompatibility — mpmath 1.4.1 imports under sympy 1.14.0 and evaluates correctly (`sympy.sqrt(8).evalf()` -> 2.82842712474619, verified 2026-08-01 in a clean venv). Nothing in this repo imports sympy or mpmath directly; both arrive transitively through torch. A [tool.uv] override-dependencies entry lets the package reach its latest published release instead of staying frozen behind an upstream bound that no longer reflects reality. Remove it once sympy widens the range. Resynced with uv 0.11.3, the version ci.yml pins; the lock diff touches mpmath and nothing else. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps mpmath from 1.3.0 to 1.4.1.
Release notes
Sourced from mpmath's releases.
... (truncated)
Changelog
Sourced from mpmath's changelog.
... (truncated)
Commits
c1131e2Merge pull request #1053 from skirpichev/release-1.4.1d3d3eb9Update CHANGES629daffAdd a workaround for test on s390x96272f3Revert "Add backport action"e129480Test frozen package version (#1055)1ef88b4Amend docstring for round_digits()650520bUse version_file option of setuptools-scm to keep version info501af4aKeep forever deprecated aliases for mpc/mpf_log()6887127Set argtypes for sprintf from ctypesf3e9cf0Update CHANGES (free-threading support)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)