From 55e3e31e197634a6a9dd1368df92fe6fe546297c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 17:22:54 +0000 Subject: [PATCH 1/2] deps: bump mpmath from 1.3.0 to 1.4.1 Bumps [mpmath](https://github.com/mpmath/mpmath) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/mpmath/mpmath/releases) - [Changelog](https://github.com/mpmath/mpmath/blob/master/CHANGES) - [Commits](https://github.com/mpmath/mpmath/compare/1.3.0...1.4.1) --- updated-dependencies: - dependency-name: mpmath dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements/ci-postgresql.txt | 6 +++--- requirements/ci-sqlite-min.txt | 6 +++--- requirements/ci-sqlite.txt | 6 +++--- requirements/ci-typecheck.txt | 6 +++--- requirements/devcontainer.txt | 6 +++--- requirements/docker-runtime.txt | 6 +++--- requirements/release.txt | 6 +++--- requirements/runtime-postgresql.txt | 6 +++--- requirements/setup.txt | 6 +++--- 9 files changed, 27 insertions(+), 27 deletions(-) diff --git a/requirements/ci-postgresql.txt b/requirements/ci-postgresql.txt index d4a772d4..4f82a528 100644 --- a/requirements/ci-postgresql.txt +++ b/requirements/ci-postgresql.txt @@ -760,9 +760,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/ci-sqlite-min.txt b/requirements/ci-sqlite-min.txt index 59865ad6..c10e16ef 100644 --- a/requirements/ci-sqlite-min.txt +++ b/requirements/ci-sqlite-min.txt @@ -726,9 +726,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/ci-sqlite.txt b/requirements/ci-sqlite.txt index 464054f5..34c09f89 100644 --- a/requirements/ci-sqlite.txt +++ b/requirements/ci-sqlite.txt @@ -760,9 +760,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/ci-typecheck.txt b/requirements/ci-typecheck.txt index 73af2794..4c88ea9a 100644 --- a/requirements/ci-typecheck.txt +++ b/requirements/ci-typecheck.txt @@ -766,9 +766,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/devcontainer.txt b/requirements/devcontainer.txt index bb2efd25..6899b66c 100644 --- a/requirements/devcontainer.txt +++ b/requirements/devcontainer.txt @@ -657,9 +657,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/docker-runtime.txt b/requirements/docker-runtime.txt index 470feff3..467913fa 100644 --- a/requirements/docker-runtime.txt +++ b/requirements/docker-runtime.txt @@ -657,9 +657,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/release.txt b/requirements/release.txt index c73b9b40..ce511a3d 100644 --- a/requirements/release.txt +++ b/requirements/release.txt @@ -724,9 +724,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/runtime-postgresql.txt b/requirements/runtime-postgresql.txt index b2c84870..283c5566 100644 --- a/requirements/runtime-postgresql.txt +++ b/requirements/runtime-postgresql.txt @@ -623,9 +623,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy narwhals==2.24.0 ; python_full_version >= '3.11' \ --hash=sha256:42fdedf44e5b2ca7505630d45b4ac3058f38d8485cba9fe1652ca23152df7489 \ diff --git a/requirements/setup.txt b/requirements/setup.txt index e69ecc7d..5f2c2fd0 100644 --- a/requirements/setup.txt +++ b/requirements/setup.txt @@ -926,9 +926,9 @@ more-itertools==11.1.0 \ # via # jaraco-classes # jaraco-functools -mpmath==1.3.0 \ - --hash=sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f \ - --hash=sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c +mpmath==1.4.1 \ + --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \ + --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e # via sympy multidict==6.7.1 \ --hash=sha256:03ede2a6ffbe8ef936b92cb4529f27f42be7f56afcdab5ab739cd5f27fb1cbf9 \ From dc8cdadb1542a5f81a3b43387e6a3f8844ef932c Mon Sep 17 00:00:00 2001 From: cdeust Date: Sat, 1 Aug 2026 20:25:57 +0200 Subject: [PATCH 2/2] deps: override sympy's precautionary mpmath bound and resync the lock MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dependabot bumped mpmath to 1.4.1 in the generated requirements/*.txt exports but never ran `uv lock`, so the PR failed both Lint gates. The resync alone was not enough here: sympy 1.14.0 (latest) declares `mpmath>=1.1.0,<1.4`, which pinned the lock back to 1.3.0. That bound is precautionary rather than a known incompatibility — mpmath 1.4.1 imports under sympy 1.14.0 and evaluates correctly (`sympy.sqrt(8).evalf()` -> 2.82842712474619, verified 2026-08-01 in a clean venv). Nothing in this repo imports sympy or mpmath directly; both arrive transitively through torch. A [tool.uv] override-dependencies entry lets the package reach its latest published release instead of staying frozen behind an upstream bound that no longer reflects reality. Remove it once sympy widens the range. Resynced with uv 0.11.3, the version ci.yml pins; the lock diff touches mpmath and nothing else. Co-Authored-By: Claude Opus 5 --- pyproject.toml | 14 ++++++++++++++ uv.lock | 7 ++++--- 2 files changed, 18 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 39ba8b6a..641fd2c9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -203,6 +203,20 @@ constraint-dependencies = [ "onnxruntime<1.24 ; python_full_version < '3.11'", ] +# sympy 1.14.0 (latest, 2025-04-27) declares `mpmath>=1.1.0,<1.4`. That upper +# bound is precautionary, not a known incompatibility: mpmath 1.4.1 imports +# under sympy 1.14.0 and evaluates correctly — verified 2026-08-01 in a clean +# venv, `sympy.sqrt(8).evalf()` -> 2.82842712474619 (exact expected value). +# +# Nothing in this repo imports sympy or mpmath directly; both arrive +# transitively through torch. The override is what lets the dependency reach +# its latest published release instead of being frozen by an upstream bound +# that no longer reflects reality. Remove it once sympy widens the range. +# source: PyPI sympy 1.14.0 requires_dist; empirical check above. +override-dependencies = [ + "mpmath>=1.4.1", +] + # ── CPU-only torch, resolved through the lock ──────────────────────────── # # Every container in this repo installs torch from the PyTorch CPU index, diff --git a/uv.lock b/uv.lock index 8b4b7880..04a85c21 100644 --- a/uv.lock +++ b/uv.lock @@ -27,6 +27,7 @@ resolution-markers = [ [manifest] constraints = [{ name = "onnxruntime", marker = "python_full_version < '3.11'", specifier = "<1.24" }] +overrides = [{ name = "mpmath", specifier = ">=1.4.1" }] [[package]] name = "aiofile" @@ -1917,11 +1918,11 @@ wheels = [ [[package]] name = "mpmath" -version = "1.3.0" +version = "1.4.1" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/e0/47/dd32fa426cc72114383ac549964eecb20ecfd886d1e5ccf5340b55b02f57/mpmath-1.3.0.tar.gz", hash = "sha256:7a28eb2a9774d00c7bc92411c19a89209d5da7c4c9a9e227be8330a23a25b91f", size = 508106, upload-time = "2023-03-07T16:47:11.061Z" } +sdist = { url = "https://files.pythonhosted.org/packages/c5/b0/6de8e78014ff1842a90cc9a56da6ccfb598a5390ed0257fcdb7d9680c18b/mpmath-1.4.1.tar.gz", hash = "sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e", size = 2093211, upload-time = "2026-03-15T01:17:38.245Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/43/e3/7d92a15f894aa0c9c4b49b8ee9ac9850d6e63b03c9c32c0367a13ae62209/mpmath-1.3.0-py3-none-any.whl", hash = "sha256:a0b2b9fe80bbcd81a6647ff13108738cfb482d481d826cc0e02f5b35e5c88d2c", size = 536198, upload-time = "2023-03-07T16:47:09.197Z" }, + { url = "https://files.pythonhosted.org/packages/13/f2/abeec3db71d221ccd3cd89d206be1fabf5a3ee7178862f5fba23a59607e0/mpmath-1.4.1-py3-none-any.whl", hash = "sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f", size = 567787, upload-time = "2026-03-15T01:17:36.392Z" }, ] [[package]]