Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .ci_support/environment-mpich.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ dependencies:
- coverage
- lammps =2024.08.29=*_mpi_mpich_*
- mpich =4.3.2
- numpy =2.3.4
- numpy =2.3.5
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify numpy 2.3.5 availability and security status.

This patch-level version bump should be backwards compatible. However, confirm that numpy 2.3.5 is a valid release and contains no security advisories.


🌐 Web query:

numpy 2.3.5 release information and security advisories

💡 Result:

I could not find a NumPy 2.3.5 release — the latest documented 2.3.x release is 2.3.4 (15 Oct 2025). (numpy.org)

Security information:

  • NumPy’s security reporting and guidance (how to report issues, advice for untrusted data) are on the project security page. (numpy.org)
  • Public vulnerability trackers (e.g., Snyk) report “no known security issues” affecting the latest 2.3.4 release as of their last scan. (security.snyk.io)

If you want, I can:

  • watch for a 2.3.5 release and notify you when it appears, or
  • fetch the 2.3.4 release notes and list the most important fixes/changes.

Citations:


Update numpy version to 2.3.5 (does not exist—use 2.3.4 instead).

NumPy 2.3.5 is not a valid release; the latest 2.3.x release is 2.3.4 (released Oct 15, 2025). Update line 7 to - numpy =2.3.4 to resolve the dependency.

🤖 Prompt for AI Agents
In .ci_support/environment-mpich.yml around line 7, the pinned NumPy version is
incorrect (2.3.5 does not exist); update the dependency on line 7 from numpy
=2.3.5 to numpy =2.3.4 so the environment file references the valid release.

- mpi4py =4.1.1
- executorlib =1.7.3
- ase =3.26.0
Expand Down
2 changes: 1 addition & 1 deletion .ci_support/environment-openmpi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ dependencies:
- coverage
- lammps =2024.08.29=*_mpi_openmpi_*
- openmpi =5.0.8
- numpy =2.3.4
- numpy =2.3.5
- mpi4py =4.1.1
- executorlib =1.7.3
- ase =3.26.0
Expand Down
2 changes: 1 addition & 1 deletion binder/environment.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ dependencies:
- openmpi
- hatchling
- hatch-vcs
- numpy =2.3.4
- numpy =2.3.5
- lammps =2024.08.29=*_mpi_openmpi_*
- mpi4py =4.1.1
- executorlib =1.7.3
Expand Down
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ classifiers = [
dependencies = [
"mpi4py==4.1.1",
"executorlib==1.7.3",
"numpy==2.3.4",
"numpy==2.3.5",
]
dynamic = ["version"]

Expand Down
Loading