From 7130b94795850b4e7df3c5a4614ba59dca9cc141 Mon Sep 17 00:00:00 2001 From: Pierre Raybaut <1311787+PierreRaybaut@users.noreply.github.com> Date: Wed, 21 Oct 2026 06:47:23 +0200 Subject: [PATCH 1/2] Widen NumPy and SciPy bounds and configure Dependabot Allow NumPy 2.5.4 and SciPy 1.18.1 without raising minimum versions. Keep requirements synchronized and schedule grouped scientific range updates. Assisted-by: GPT-6.1 Sol --- .github/dependabot.yml | 18 ++++++++++++++++++ pyproject.toml | 4 ++-- requirements.txt | 4 ++-- 3 files changed, 22 insertions(+), 4 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..10f44716a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +version: 2 +updates: + - package-ecosystem: pip + directory: / + target-branch: develop + schedule: + interval: weekly + # Preserve minimum versions and widen only the scientific compatibility bounds. + versioning-strategy: widen + allow: + - dependency-name: numpy + - dependency-name: scipy + - dependency-name: scikit-image + - dependency-name: pandas + - dependency-name: pywavelets + groups: + scientific-stack: + patterns: ["*"] diff --git a/pyproject.toml b/pyproject.toml index ee8703a10..0574b4059 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -46,8 +46,8 @@ dependencies = [ "Sigima >= 1.3.0", "SigimaX >= 1.1.0", "datalab-capsule >= 0.1.0, < 0.2", - "NumPy >= 1.22, < 2.5", - "SciPy >= 1.10.1, < 1.17", + "NumPy >= 1.22, < 2.6", + "SciPy >= 1.10.1, < 1.19", "scikit-image >= 0.19.2, < 0.27", "pandas >= 1.4, < 3.1", "PyWavelets >= 1.2, < 2.0", diff --git a/requirements.txt b/requirements.txt index b7bbf8679..576e858bf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,9 +1,9 @@ Coverage -NumPy >= 1.22, < 2.5 +NumPy >= 1.22, < 2.6 PlotPy >= 2.11.0 PyQt5 >= 5.15.6 PyWavelets >= 1.2, < 2.0 -SciPy >= 1.10.1, < 1.17 +SciPy >= 1.10.1, < 1.19 Sigima >= 1.3.0 SigimaX >= 1.1.0 babel From a8b6f7093325e7213092c2cef042d477b7e8de80 Mon Sep 17 00:00:00 2001 From: Pierre Raybaut <1311787+PierreRaybaut@users.noreply.github.com> Date: Wed, 21 Oct 2026 07:11:10 +0200 Subject: [PATCH 2/2] Keep compatibility updates independent of Dependabot Remove the proposed pip automation after verifying that Dependabot can select an older Python interpreter from the supported range and miss newer scientific releases. Keep this PR focused on the requested compatibility bounds. Assisted-by: GPT-6.1 Sol --- .github/dependabot.yml | 18 ------------------ 1 file changed, 18 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 10f44716a..000000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,18 +0,0 @@ -version: 2 -updates: - - package-ecosystem: pip - directory: / - target-branch: develop - schedule: - interval: weekly - # Preserve minimum versions and widen only the scientific compatibility bounds. - versioning-strategy: widen - allow: - - dependency-name: numpy - - dependency-name: scipy - - dependency-name: scikit-image - - dependency-name: pandas - - dependency-name: pywavelets - groups: - scientific-stack: - patterns: ["*"]