Skip to content

chore(deps): bump the runtime group with 8 updates - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/runtime-ed37746c0b
Open

chore(deps): bump the runtime group with 8 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/runtime-ed37746c0b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on polars, tdigest, pyo3, numpy, wgpu, pollster, cudarc and forust-ml to permit the latest version.
Updates polars to 0.55.2

Release notes

Sourced from polars's releases.

Rust Polars 0.55.2

✨ Enhancements

  • Add adaptive HTTP rate-limiter for cloud IO (#28591)

🐞 Bug fixes

  • Unsoundness in rayon block_on (#28709)
  • Check for (shallow) IR node equality on top of hashing in CSPE (#28506)

📖 Documentation

  • Document that arg_extremum functions return any index on ties (#28691)

Thank you to all our contributors for making this release possible! @​dancsi, @​dsprenkels, @​kdn36, @​orlp and @​ritchie46

Commits

Updates tdigest to 1.0.1

Changelog

Sourced from tdigest's changelog.

[1.0.1] - 2026-09-07

Fixed

  • Preserve the requested compression size and sort centroids in TDigest::new; reject zero compression sizes.
  • Keep compression within max_size even when fractional centroid weights and the stored count differ by roundoff.
  • Make quantile interpolation monotonic across uneven centroid gaps, with finite results for extreme values and subnormal weights.
  • Interpolate ranks for single-centroid digests that represent varying values and avoid overflow across extreme endpoints.
  • Keep centroid means and trimmed means finite when weighted sums overflow; compute mean() from retained data if its sum overflows.
  • Preserve centroids when adding zero sum and zero weight, including empty accumulators.
  • Make centroid equality consistent with its total ordering, including weights and signed zeros.
  • Reject invalid serde states before they can cause query or merge panics, preserving the existing field layout for valid digests.
  • Restrict debug-assertion tests to debug builds so the release test suite can run.

Performance

  • Allocate the ingestion buffer on first use and reuse it across flushes.
  • Bound compression-vector reservations by the available input size.
  • Avoid building cumulative weights for empty or single-element bulk quantile queries.

Documentation and validation

  • Clarify memory usage, flush requirements, serialization limits, query semantics, and distribution-dependent accuracy.
  • Add constructor, numeric, and serde regression tests; extend fuzzing to buffered ingestion and interior quantiles.
  • Cover optimized tests and Rust 1.62 no_std configurations in CI.

[1.0.0] - 2026-07-12

Added

  • Deterministic Criterion benchmarks and an accuracy harness covering six distributions.
  • Buffered mutable ingestion with push, extend_values, flush, Extend, and FromIterator.
  • estimate_rank, trimmed_mean, and bulk quantiles queries.
  • Property tests, a cargo-fuzz target, and a manual fuzzing workflow.
  • no_std + alloc support behind a default std feature.
  • Clippy, rustdoc-warning, no-std, and semver CI gates.

Changed

  • merge_digests now uses the largest input max_size.
  • Finite-input checks cover public ingestion boundaries in debug builds.
  • Unsorted ingestion and buffered flushes use unstable sorting.
  • Documentation warnings are denied for public API items.

Fixed

  • Stable centroid averaging prevents intermediate overflow from breaking quantile monotonicity for large finite values.

Deprecated

... (truncated)

Commits

Updates pyo3 to 0.28.3

Release notes

Sourced from pyo3's releases.

PyO3 0.28.3

This patch contains several fixes for stability of the PyO3 0.28.x series:

  • Python::attach and Python::try_attach will no longer return before the thread initializing the interpreter has finished runnning site.py when using the auto-initialize feature.
  • Fix unsoundness in PyBytesWriter::write_vectored when targeting the Python 3.15 prerelease interpreter.
  • Fix possible deadlock in .into_pyobject() implementation for C-like #[pyclass] enums.

A couple of edge cases causing compile failures were also fixed.

Thank you to the following contributors for the improvements:

@​alex @​bschoenmaeckers @​chirizxc @​davidhewitt @​Embers-of-the-Fire @​Icxolu @​maurosilber @​ngoldbaum

Changelog

Sourced from pyo3's changelog.

[0.28.3] - 2026-04-02

Fixed

  • Fix compile error with #[pyclass(get_all)] on a type named Probe. #5837
  • Fix compile error in debug builds related to _Py_NegativeRefcount with Python < 3.12. #5847
  • Fix a race condition where Python::attach or try_attach could return before site.py had finished running. #5903
  • Fix unsoundness in PyBytesWriter::write_vectored with Python 3.15 prerelease versions. #5907
  • Fix deadlock in .into_pyobject() implementation for C-like #[pyclass] enums. #5928

[0.28.2] - 2026-02-18

Fixed

  • Fix complex enum __qualname__ not using python name #5815
  • Fix FFI definition PyType_GetTypeDataSize (was incorrectly named PyObject_GetTypeDataSize). #5819
  • Fix memory corruption when subclassing native types with abi3 feature on Python 3.12+ (newly enabled in PyO3 0.28.0). #5823

[0.28.1] - 2026-02-14

Fixed

  • Fix *args / **kwargs support in experimental-async feature (regressed in 0.28.0). #5771
  • Fix clippy::declare_interior_mutable_const warning inside #[pyclass] generated code on enums. #5772
  • Fix ambiguous_associated_items compilation error when deriving FromPyObject or using #[pyclass(from_py_object)] macro on enums with Error variant. #5784
  • Fix __qualname__ for complex #[pyclass] enum variants to include the enum name. #5796
  • Fix missing std::sync::atomic::Ordering import for targets without atomic64. #5808

[0.28.0] - 2026-02-01

Packaging

  • Bump MSRV to Rust 1.83. #5531
  • Bump minimum supported quote version to 1.0.37. #5531
  • Bump supported GraalPy version to 25.0. #5542
  • Drop memoffset dependency. #5545
  • Support for free-threaded Python is now opt-out rather than opt-in. #5564
  • Bump target-lexicon dependency to 0.13.3. #5571
  • Drop indoc and unindent dependencies. #5608

Added

  • Add __init__ support in #[pymethods]. #4951
  • Expose PySuper on PyPy, GraalPy and ABI3 #4951
  • Add PyString::from_fmt and py_format! macro. #5199
  • Add #[pyclass(new = "from_fields")] option. #5421
  • Add pyo3::buffer::PyUntypedBuffer, a type-erased form of PyBuffer<T>. #5458
  • Add PyBytes::new_with_writer #5517
  • Add PyClass::NAME. #5579
  • Add pyo3_build_config::add_libpython_rpath_link_args. #5624

... (truncated)

Commits
  • 743af64 release: 0.28.3
  • 2042b4c fix deadlock when initializing enum via into_pyobject() (#5928)
  • 0157247 ci: update UI tests for Rust 1.94 (#5859)
  • e234f8a Update getting-started.md (#5899)
  • c06848d fix ffi-check in 3.15.0a7 (#5873)
  • 83f4283 remove unused try_trait_v2 feature when enabling the nightly feature (#5868)
  • 0de57ed Fix unsoundness in PyBytesWriter::write_vectored (#5907)
  • 49cd13f fixes #5900 -- address race condition with initialization and site.py loading...
  • c90d163 [fix] Fix std::ffi import for _Py_NegativeRefcount (#5847)
  • b79d725 fix(pyo3-macros): allow pyclass named Probe (#5837)
  • Additional commits viewable in compare view

Updates numpy to 0.30.0

Release notes

Sourced from numpy's releases.

v0.30.0

What's Changed

New Contributors

Full Changelog: PyO3/rust-numpy@v0.29.0...v0.30.0

Changelog

Sourced from numpy's changelog.

Changelog

  • Unreleased

  • v0.30.0

    • PyReadonlyArray/PyReadwriteArray extraction now returns a PyErr which reports the actual dtype/dimensionality mismatch instead of nonsensical CastError messages like “'ndarray' is not an instance of 'ndarray'” (#562)
    • Add support for free-threaded stable abi (abi3t) from Python 3.15t+ (#556)
    • fixed free-threaded builds for 32 bit platforms from Python 3.15+ (#556)
    • Drop support for Python 3.8 (#567)
    • fix accidental removal of singleton dimensions when extracting PyArrayLikeDyn<'_, T, AllowTypeChange> (#496)
    • add support for numpy BitGenerators (#499)
    • raise MSRV to 1.85 (following PyO3) (#570)
    • upgrade to 2024 edition (#570)
    • bump PyO3 dependency to 0.30 (#572)

  • v0.29.0

    • Fix PyArray_DTypeMeta definition when Py_LIMITED_API is disabled (#532)
    • The NumPy C API binding has been updated to target the ABI v2, while maintaining runtime compatibility with NumPy v1 targeting the API v1.15. The higher interface is unchanged. (#537)
    • Fix is_exact_type_of / cast_exact to use PyArray_CheckExact instead of PyArray_Check, correctly rejecting subclasses of ndarray. (#550)
    • Bump PyO3 dependency to v0.29.0 (#553)
      • Fix PyCapsule::new_with_destructor to use PyCapsule::new_with_value_and_destructor.
      • Open nalgebra range to include 0.35.

  • v0.28.0

    • Fix mismatched behavior between PyArrayLike1 and PyArrayLike2 when used with floats (#520)
    • Add ownership-moving conversions into PyReadonlyArray and PyReadwriteArray (#524)
    • Fix UB when calling PyArray::as_slice and as_slice_mut on misaligned arrays (#525)
    • Bump PyO3 dependency to v0.28.0. (#530)

  • v0.27.1

    • Bump ndarray dependency to v0.17. (#516)

  • v0.27.0

    • Bump PyO3 dependency to v0.27.0. (#515)

  • v0.26.0

    • bump MSRV to 1.74, matching PyO3 (#504)
    • extend supported nalgebra version to 0.34 (#503)
    • Bump PyO3 dependency to v0.26.0. (#506)

  • v0.25.0,

    • Bump PyO3 dependency to v0.25.0. (#492)

  • v0.24.0

    • Bump PyO3 dependency to v0.24.0. (#483)
    • Support Python 3.13t "free-threaded" Python. (#471)

  • v0.23.0

    • Drop support for PyPy 3.7 and 3.8. (#470)
    • Require Element: Sync as part of the free-threading support in PyO3 0.23 (#469)

... (truncated)

Commits

Updates wgpu to 30.0.1

Changelog

Sourced from wgpu's changelog.

v30.0.1 (2026-08-21)

Bug Fixes

Vulkan

  • Stop passing an un-waited fence to vkAcquireNextImageKHR on non-Windows platforms, which triggered VUID-vkAcquireNextImageKHR-fence-10066 validation errors every frame since v30.0.0. By @​ErichDonGubler in #9855.

Metal

WebGPU

  • Upgrade vendored WebGPU bindings and wasm-bindgen to 0.2.127. This fixes a panic “can't access property "info", arg0 is null” when using the WebGPU backend and requestAdapter() fails. By @​beicause in #10034, backported in #10105.

v30.0.0 (2026-07-01)

Major changes

Optional vertex buffer slots

This allows gaps in VertexState's buffers and adds support for unbinding vertex buffers, bringing us in compliance with the WebGPU spec. As a result of this, VertexState's buffers field now has type of &[Option<VertexBufferLayout>]. To migrate, wrap vertex buffer layouts in Some:

  let vertex_state = wgpu::VertexState {
      module: &vs_module,
      entry_point: Some("vs_main"),
      compilation_options: wgpu::PipelineCompilationOptions::default(),
      buffers: &[
-         &vertex_buffer_layout
+         Some(&vertex_buffer_layout)
      ],
  };

By @​teoxoy in #9351.

Integer shader I/O no longer defaults to @interpolate(flat)

To align with the shading language specifications, naga no longer assumes that integer-typed shader I/O should have flat interpolation, i.e., should not be interpolated. Even though flat interpolation is the only choice for integer I/O, it must be still specified explicitly.

WGSL:

 struct FragmentInput {
     @location(0) tex_coord: vec2<f32>,
-    @location(1) index: i32,
+    @location(1) @interpolate(flat) index: i32,
 }
</tr></table>

... (truncated)

Commits
  • 40f4a34 Release v30.0.1
  • 5e1084c fix(metal): Resolve some color space constants dynamically (#9819)
  • 8bc5e2b Backport "Re-vendor WebGPU bindings (#10034)" to v30. (#10105)
  • 42738aa backport: fix: use vk::Fence::null on non-Windows swapchain (#9918)
  • 1464540 Remove example warning
  • 8bf3e5f Update to v30 (#9790)
  • aa2b790 [core] filter native-only features and limits if
  • 2ea3a1d [vulkan] advertise DownlevelFlags::SURFACE_VIEW_FORMATS if `VK_KHR_swapchai...
  • 69e66d8 add DENO_WEBGPU_STRICT_COMPLIANCE and set it for the CTS job
  • 995ee7b add Limits::max_buffers_and_acceleration_structures_per_shader_stage
  • Additional commits viewable in compare view

Updates pollster to 1.0.1

Changelog

Sourced from pollster's changelog.

[1.0.1] - 2026-07-10

Fixed

  • Use doc_cfg instead of doc_auto_cfg for docsrs builds

[1.0.0] - 2026-07-09

Changed

  • FutureExt is now implemented for IntoFuture, not just Future

[0.4.0] - 2024-10-26

Added

  • MSRV policy

Removed

  • All unsafe code

Changed

  • Updated MSRV to 1.69
  • block_on now accepts IntoFuture instead of Future (this is a backward-compatible change)

[0.3.0] - 2023-02-07

Added

  • pollster::main and pollster::test procedural macros, akin to tokio::main and tokio::test

Changed

  • Improved performance by removing unnecessary allocation
Commits

Updates cudarc to 0.19.10

Release notes

Sourced from cudarc's releases.

v0.19.10 - Cuda 13.4 & quality of life

What's Changed

New Contributors

Full Changelog: chelsea0x3b/cudarc@v0.19.9...v0.19.10

Commits

Updates forust-ml to 0.8.0

Release notes

Sourced from forust-ml's releases.

v0.8.0

What's Changed

Full Changelog: jinlow/forust@v0.7.0...v0.8.0

Commits
  • b0e16d3 Merge pull request #126 from jinlow/prep-release-0.8.0
  • cbedc59 Generalize prerelease tagging examples
  • 472bfc9 Finalize 0.8.0 release version
  • 48ad1dd Fix docs
  • 92f7f1b Prepare 0.8.0rc1 release
  • ceee47b Merge pull request #124 from jinlow/exp/tiled-hist-mip
  • 2bfc671 PROTOTYPE: column-wise fill when a tree uses few of a tile's columns
  • 152539d PROTOTYPE: opt-in tiled, row-wise histograms (tiled_histograms)
  • d07bc08 Merge pull request #123 from jinlow/feat/model-identical-perf
  • ec350b2 Predict from values when bins could reach the reserved bins
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the runtime group with 8 updates
488c58d 
Updates the requirements on [polars](https://github.com/pola-rs/polars), [tdigest](https://github.com/MnO2/t-digest), [pyo3](https://github.com/pyo3/pyo3), [numpy](https://github.com/PyO3/rust-numpy), [wgpu](https://github.com/gfx-rs/wgpu), [pollster](https://github.com/zesterer/pollster), [cudarc](https://github.com/chelsea0x3b/cudarc) and [forust-ml](https://github.com/jinlow/forust) to permit the latest version.

Updates `polars` to 0.55.2
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@rs-0.54.4...rs-0.55.2)

Updates `tdigest` to 1.0.1
- [Changelog](https://github.com/MnO2/t-digest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/MnO2/t-digest/commits/v1.0.1)

Updates `pyo3` to 0.28.3
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.28.0...v0.28.3)

Updates `numpy` to 0.30.0
- [Release notes](https://github.com/PyO3/rust-numpy/releases)
- [Changelog](https://github.com/PyO3/rust-numpy/blob/main/CHANGELOG.md)
- [Commits](PyO3/rust-numpy@v0.28.0...v0.30.0)

Updates `wgpu` to 30.0.1
- [Release notes](https://github.com/gfx-rs/wgpu/releases)
- [Changelog](https://github.com/gfx-rs/wgpu/blob/trunk/CHANGELOG.md)
- [Commits](gfx-rs/wgpu@wgpu-v29.0.1...v30.0.1)

Updates `pollster` to 1.0.1
- [Changelog](https://github.com/zesterer/pollster/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zesterer/pollster/commits)

Updates `cudarc` to 0.19.10
- [Release notes](https://github.com/chelsea0x3b/cudarc/releases)
- [Commits](chelsea0x3b/cudarc@v0.19.7...v0.19.10)

Updates `forust-ml` to 0.8.0
- [Release notes](https://github.com/jinlow/forust/releases)
- [Commits](jinlow/forust@v0.5.0...v0.8.0)

---
updated-dependencies:
- dependency-name: polars
  dependency-version: 0.55.2
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: tdigest
  dependency-version: 1.0.1
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: pyo3
  dependency-version: 0.28.3
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: numpy
  dependency-version: 0.30.0
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: wgpu
  dependency-version: 30.0.1
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: pollster
  dependency-version: 1.0.1
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: cudarc
  dependency-version: 0.19.10
  dependency-type: direct:production
  dependency-group: runtime
- dependency-name: forust-ml
  dependency-version: 0.8.0
  dependency-type: direct:production
  dependency-group: runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 6, 2026
@farhan-syah

farhan-syah commented Nov 6, 2026

Copy link
Copy Markdown
Member

@dependabot rebase.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@farhan-syah