diff --git a/ANNOUNCE.rst b/ANNOUNCE.rst index f7b0bae..bbb5842 100644 --- a/ANNOUNCE.rst +++ b/ANNOUNCE.rst @@ -1,13 +1,21 @@ ======================== -Announcing NumExpr 2.8.5 +Announcing NumExpr 2.8.6 ======================== Hi everyone, -In 2.8.5 we have added a new function, `validate` which checks an expression `ex` -for validity, for usage where the program is parsing a user input. There are also -consequences for this sort of usage, since `eval(ex)` is called, and as such we -do some string sanitization as described below. +NumExpr 2.8.6 is a release to deal with issues related to downstream `pandas` +where the sanitization blacklist was hitting private variables used in their +evaluate. In addition the sanitization was hitting on scientific notation. + +For those who do not wish to have sanitization on by default, it can be changed +by setting an environment variable, `NUMEXPR_SANITIZE=0`. + +If you use `pandas` in your packages it is advisable you pin + +`numexpr >= 2.8.6` + +in your requirements. Project documentation is available at: @@ -16,8 +24,13 @@ http://numexpr.readthedocs.io/ Changes from 2.8.5 to 2.8.6 --------------------------- -** Under Construction ** +* The sanitization can be turned off by default by setting an environment variable, + + `set NUMEXPR_SANITIZE=0` +* Improved behavior of the blacklist to avoid triggering on private variables + and scientific notation numbers. + What's Numexpr? --------------- diff --git a/RELEASE_NOTES.rst b/RELEASE_NOTES.rst index c2c16a7..21de32e 100644 --- a/RELEASE_NOTES.rst +++ b/RELEASE_NOTES.rst @@ -5,8 +5,12 @@ Release notes for NumExpr 2.8 series Changes from 2.8.5 to 2.8.6 --------------------------- -** Under Construction ** +* The sanitization can be turned off by default by setting an environment variable, + `set NUMEXPR_SANITIZE=0` + +* Improved behavior of the blacklist to avoid triggering on private variables + and scientific notation numbers. Changes from 2.8.4 to 2.8.5 --------------------------- diff --git a/setup.cfg b/setup.cfg index b3d1dcd..fc0ac29 100644 --- a/setup.cfg +++ b/setup.cfg @@ -1,6 +1,6 @@ [metadata] name = numexpr -version = 2.8.6.dev1 +version = 2.8.6 description = Fast numerical expression evaluator for NumPy author = David M. Cooke, Francesc Alted, and others maintainer = Robert A. McLeod