Skip to content

Commit

Permalink
Pre-release actions for 2.8.6
Browse files Browse the repository at this point in the history
  • Loading branch information
robbmcleod committed Sep 10, 2023
1 parent 71e4f75 commit 9c70b43
Show file tree
Hide file tree
Showing 3 changed files with 25 additions and 8 deletions.
25 changes: 19 additions & 6 deletions ANNOUNCE.rst
Original file line number Diff line number Diff line change
@@ -1,13 +1,21 @@
========================
Announcing NumExpr 2.8.5
Announcing NumExpr 2.8.6
========================

Hi everyone,

In 2.8.5 we have added a new function, `validate` which checks an expression `ex`
for validity, for usage where the program is parsing a user input. There are also
consequences for this sort of usage, since `eval(ex)` is called, and as such we
do some string sanitization as described below.
NumExpr 2.8.6 is a release to deal with issues related to downstream `pandas`
where the sanitization blacklist was hitting private variables used in their
evaluate. In addition the sanitization was hitting on scientific notation.

For those who do not wish to have sanitization on by default, it can be changed
by setting an environment variable, `NUMEXPR_SANITIZE=0`.

If you use `pandas` in your packages it is advisable you pin

`numexpr >= 2.8.6`

in your requirements.

Project documentation is available at:

Expand All @@ -16,8 +24,13 @@ http://numexpr.readthedocs.io/
Changes from 2.8.5 to 2.8.6
---------------------------

** Under Construction **
* The sanitization can be turned off by default by setting an environment variable,

`set NUMEXPR_SANITIZE=0`

* Improved behavior of the blacklist to avoid triggering on private variables
and scientific notation numbers.


What's Numexpr?
---------------
Expand Down
6 changes: 5 additions & 1 deletion RELEASE_NOTES.rst
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,12 @@ Release notes for NumExpr 2.8 series
Changes from 2.8.5 to 2.8.6
---------------------------

** Under Construction **
* The sanitization can be turned off by default by setting an environment variable,

`set NUMEXPR_SANITIZE=0`

* Improved behavior of the blacklist to avoid triggering on private variables
and scientific notation numbers.

Changes from 2.8.4 to 2.8.5
---------------------------
Expand Down
2 changes: 1 addition & 1 deletion setup.cfg
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[metadata]
name = numexpr
version = 2.8.6.dev1
version = 2.8.6
description = Fast numerical expression evaluator for NumPy
author = David M. Cooke, Francesc Alted, and others
maintainer = Robert A. McLeod
Expand Down

0 comments on commit 9c70b43

Please sign in to comment.