Skip to content

Conversation

@jpn--
Copy link
Member

@jpn-- jpn-- commented Aug 12, 2022

Dependabot is warning of a security issue with numpy < 1.22. To fix it we need to also upgrade to numba 0.56.

This PR is currently erroring because numba 0.56 is not on conda-forge yet, it is waiting on a llvmlite update.

We can try this again when the dependencies are available.

@jpn-- jpn-- marked this pull request as draft August 15, 2022 14:59
@jpn-- jpn-- changed the base branch from develop to main December 10, 2022 00:51
@jpn-- jpn-- changed the base branch from main to develop December 10, 2022 00:51
@jpn--
Copy link
Member Author

jpn-- commented Dec 12, 2022

On further review, the community has deemed that there is no actual security issue with numpy < 1.22.

@jpn-- jpn-- closed this Dec 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant