Skip to content

Update nanobind requirement from >=2.9 to >=2.12.0 in /python#7

Open
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/pip/python/nanobind-gte-2.12.0
Open

Update nanobind requirement from >=2.9 to >=2.12.0 in /python#7
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/pip/python/nanobind-gte-2.12.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Updates the requirements on nanobind to permit the latest version.

Changelog

Sourced from nanobind's changelog.

Version 2.12.0 (Feb 25, 2025)

  • Added :cpp:class:nb::memoryview that wraps the Python memoryview type. (PR [#1291](https://github.com/wjakob/nanobind/issues/1291) <https://github.com/wjakob/nanobind/pull/1291>__).

  • Made stub generation compatible with the Realtime Sanitizer (RTSan) from Clang 20. (PR [#1285](https://github.com/wjakob/nanobind/issues/1285) <https://github.com/wjakob/nanobind/pull/1285>__).

  • Fixed a use-after-free when calling functions after their module has been deleted. The internals state is now reference-counted with references held by modules, functions, and types. This also fixes memory leaks reported in issue [#957](https://github.com/wjakob/nanobind/issues/957) <https://github.com/wjakob/nanobind/issues/957>. (PR [#1287](https://github.com/wjakob/nanobind/issues/1287) <https://github.com/wjakob/nanobind/pull/1287>).

  • Fixed two regressions from v2.11.0 related to the implicit std::optional :cpp:func:.none() <arg::none> annotation: an off-by-one error that applied the annotation to the wrong argument for methods, and a missing convert flag that silently disabled implicit type conversions. (issues [#1281](https://github.com/wjakob/nanobind/issues/1281) <https://github.com/wjakob/nanobind/issues/1281>, [#1293](https://github.com/wjakob/nanobind/issues/1293) <https://github.com/wjakob/nanobind/issues/1293>, commits ed7ab31 <https://github.com/wjakob/nanobind/commit/ed7ab31f5ffe313b2ca945573e29112ea5e475b2>, 1f96278 <https://github.com/wjakob/nanobind/commit/1f96278c09ec1f7110105f5e2e3dbd2f08dc66a4>).

  • ABI version 19.

Version 2.11.0 (Jan 29, 2026)

  • This release improves binding performance using CPython's adaptive specializing interpreter (PEP 659 <https://peps.python.org/pep-0659/>__). The speedups are automatic and require no changes to binding code:

    .. list-table:: :header-rows: 1

      • Operation
      • Speedup
      • Requirements
      • Method calls
      • 1.22x faster
      • Python 3.11+
      • Static attribute lookups
      • 1.63x faster
      • Python 3.14+

    This was achieved by making a number of nanobind-internal classes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

hunhoffe and others added 4 commits May 13, 2026 08:53
@hunhoffe @claude
Add Dependabot config and OSSF Scorecard workflow
9f5f3dc 
Enables weekly Dependabot updates for GitHub Actions and the four
Python manifest directories (python/, utils/mlir_aie_wheels/,
utils/mlir_wheels/), with grouped minor/patch PRs to keep noise down.

Adds an OSSF Scorecard workflow that publishes results to the
GitHub Security tab and the public Scorecard registry, giving us a
running grade on supply-chain posture (token permissions, pinned
dependencies, branch protection, etc.).

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>
@hunhoffe @claude
Add SECURITY.md pointing to private vulnerability reporting
3833853 
Provides a private channel for vulnerability disclosure (GitHub's
private advisory flow), removing the need for reporters to choose
between filing a public issue and emailing maintainers directly.

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>
@hunhoffe @claude
scorecard: allow workflow_dispatch for ad-hoc runs
8767905 
Lets the workflow be triggered manually from the Actions tab in
addition to the weekly cron and push-to-main triggers, useful for
on-demand reruns and for validating the workflow on forks before
merging.

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>
@dependabot
Update nanobind requirement from >=2.9 to >=2.12.0 in /python
a77768a 
Updates the requirements on [nanobind](https://github.com/wjakob/nanobind) to permit the latest version.
- [Changelog](https://github.com/wjakob/nanobind/blob/master/docs/changelog.rst)
- [Commits](wjakob/nanobind@v2.9.0...v2.12.0)

---
updated-dependencies:
- dependency-name: nanobind
  dependency-version: 2.12.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 13, 2026
@dependabot dependabot Bot requested a review from hunhoffe as a code owner May 13, 2026 15:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hunhoffe hunhoffe Awaiting requested review from hunhoffe hunhoffe is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hunhoffe