Skip to content

chore(deps): drop unused numpy and pandas dependencies#125

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rahlk merged 1 commit into from
Aug 18, 2026
+14 −10
Merged

chore(deps): drop unused numpy and pandas dependencies #125

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,6 +20,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
actually ran at the default level 1, producing a partial graph). Passing
`--graphs` below `-a 3` is also now consistently rejected even when the
value equals the default.
- **`numpy` and `pandas` are no longer dependencies** (#124): neither was ever
imported by the analyzer, but both were declared in `[project].dependencies`
with tight upper caps (`numpy<1.24` below Python 3.11, `numpy<2.0` above it).
The caps forced resolution onto numpy releases with no prebuilt wheel for some
targets — Red Hat UBI images in particular — so installation fell back to
building numpy from source and failed. On Python 3.11+ numpy is now absent
from the resolved tree entirely (`ray` 2.55 does not require it). On Python
3.9/3.10 `ray==2.0.0` still requires numpy transitively — that pin is
untouched — but with the cap gone it resolves to numpy 2.0.2, which ships
cp39 manylinux wheels for x86_64 and aarch64, so the source build stops
happening there too.

## [1.1.1] - 2026-07-27

Expand Down
6 changes: 3 additions & 3 deletions packaging/homebrew/generate_formula.sh
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -4,7 +4,7 @@
#
# Unlike the codeanalyzer-typescript sibling -- which ships a single self-contained
# binary that the formula just downloads -- codeanalyzer-python is a pure-Python
# package published to PyPI with heavy native dependencies (ray, pandas, numpy).
# package published to PyPI with a heavy native dependency (ray).
# Vendoring every transitive dependency as a Homebrew `resource` is impractical
# (ray is not buildable from an sdist), and pip-installing at build time is blocked
# by Homebrew's network sandbox.
Expand DownExpand Up@@ -41,8 +41,8 @@ class CodeanalyzerPython < Formula
version "${VERSION}"
license "Apache-2.0"

# codeanalyzer-python is a pure-Python PyPI package with heavy native deps
# (ray, pandas, numpy). Rather than vendor every transitive dependency as a
# codeanalyzer-python is a pure-Python PyPI package with a heavy native dep
# (ray). Rather than vendor every transitive dependency as a
# Homebrew resource, install the pinned PyPI release as an isolated uv tool;
# uv resolves and caches the environment on first run.
depends_on "uv"
Expand Down
7 changes: 0 additions & 7 deletions pyproject.toml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,13 +18,6 @@ dependencies = [
# networkx
"networkx>=2.6.0,<3.2.0; python_version < '3.11'",
"networkx>=3.0.0,<4.0.0; python_version >= '3.11'",
# pandas
"pandas>=1.3.0,<2.0.0; python_version < '3.11'",
"pandas>=2.0.0,<3.0.0; python_version >= '3.11'",
# numpy
"numpy>=1.21.0,<1.24.0; python_version < '3.11'",
"numpy>=1.24.0,<2.0.0; python_version >= '3.11' and python_version < '3.12'",
"numpy>=1.26.0,<2.0.0; python_version >= '3.12'",
# pydantic
"pydantic>=1.8.0,<2.0.0; python_version < '3.11'",
"pydantic>=2.0.0,<3.0.0; python_version >= '3.11'",
Expand Down