Skip to content

build(deps-dev): bump scalene from 2.3.0 to 2.4.0 - #79

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/scalene-2.4.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/scalene-2.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps scalene from 2.3.0 to 2.4.0.

Release notes

Sourced from scalene's releases.

Free-threaded wheels, M4 fix, safer API keys, and formal verification

What's Changed

Headlines

  • Free-threaded Python wheels on PyPI: cp313t and cp314t wheels for macOS and Windows, and cp314t for Linux. Release builds now check that every wheel's native modules import, and that on free-threaded builds they don't re-enable the GIL.
  • Apple Silicon M4+ fix: on chips with SME, profiling numpy/Accelerate code could silently corrupt numerical results (#1056). CPU sampling on those chips no longer uses signals.
  • Safer AI-provider keys: API keys are never embedded in generated HTML. The new opt-in scalene view --api-keys-from-env serves them from memory over localhost instead. The GUI is now served from a private directory rather than the whole temp dir.
  • Correctness: fixes found by new formal models (TLA+ and Lean) of Scalene's sampling and attribution, including several divide-by-zero and unbounded-sampling bugs.

New feature work

Bug fixes

Formal verification

  • Add formal models (TLA+ and Lean) of Scalene's concurrency and correctness, and prove the profiler-correctness desideratum (unbiased, consistent attribution), the Poisson sampler, memory-sampler correctness and the Python/native classifier, in plasma-umass/scalene#1068, #1070, #1072, #1075, #1076, #1080, #1082, #1083 and #1084

Testing and CI

Note for free-threaded Python 3.13 users

pydantic-core no longer ships cp313t wheels and its newest releases can't be built from source there. Until that changes, install with:

pip install scalene "pydantic-core<=2.46.5"
</tr></table> 

... (truncated)

Commits
  • 6d0081b Bump version to 2.4.0
  • 0357c25 CI: fail when native modules don't import or tests don't collect (#1105)
  • bb19605 Publish free-threaded (cp313t/cp314t) wheels (#1104)
  • c8bb168 Fix free-threaded CI: limited-API module name, pydantic-core pin, mypy 2.4 (#...
  • 051034f fix: build on Windows for free-threaded Python (cp313t / cp314t) (#1102)
  • 0862cac fix: preserve ReplacementSemLock identity across spawn (#1099)
  • f0910a6 Lowercase scalene view option help to match the rest of the CLI (#1101)
  • caa948a Serve the GUI from a private directory, not the whole temp dir (#1100)
  • b7883cf Add opt-in scalene view --api-keys-from-env (#1097)
  • e62a500 fix: prevent API keys from being embedded in HTML (#1095)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [scalene](https://github.com/plasma-umass/scalene) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/plasma-umass/scalene/releases)
- [Commits](plasma-umass/scalene@v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: scalene
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 1, 2026
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Test Results

    5 files  ±0      5 suites  ±0   4m 1s ⏱️ -28s
  397 tests ±0    389 ✅ ±0   8 💤 ±0  0 ❌ ±0 
1 899 runs  ±0  1 882 ✅ ±0  17 💤 ±0  0 ❌ ±0 

Results for commit 87259e1. ± Comparison against base commit 3f7114a.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants