Update nanobind requirement from <2.7.0 to <2.8.0

[dependabot]

Updates the requirements on nanobind to permit the latest version.

Changelog

Sourced from nanobind's changelog.

Version 2.7.0 (Apr 18, 2025)

• nanobind now provides a zero-copy type caster for Eigen::Map<Eigen::SparseMatrix>. (PRs [#1003](https://github.com/wjakob/nanobind/issues/1003) <https://github.com/wjakob/nanobind/pull/1003>, [#782](https://github.com/wjakob/nanobind/issues/782) <https://github.com/wjakob/nanobind/pull/782>).

• Made handling of return value policies in Eigen type casters more consistent with the rest of nanobind. (Issue [#971](https://github.com/wjakob/nanobind/issues/971) <https://github.com/wjakob/nanobind/issues/971>, commit 5cdf59 <https://github.com/wjakob/nanobind/commit/5cdf58984e7a8b520935c3771029fe0e87edee73>).

• The Eigen sparse matrix caster now correctly handles scipy.sparse objects with unsorted indices. (PR [#981](https://github.com/wjakob/nanobind/issues/981) <https://github.com/wjakob/nanobind/pull/981>__).

• Nanobind's CMake stub generation command :cmake:command:nanobind_add_stub now detects when an extension uses sanitizers (TSAN, ASAN, UBSAN). It then injects the sanitizer library into the Python process ahead of time so that the extension can be loaded. Previously, stub generation failed in such cases. (PR [#1000](https://github.com/wjakob/nanobind/issues/1000) <https://github.com/wjakob/nanobind/pull/1000>__).

• The entries of stub files are now sorted in their original definition order. Previously, they were alphabetically sorted, which caused issues with external tooling. (PR [#938](https://github.com/wjakob/nanobind/issues/938) <https://github.com/wjakob/nanobind/pull/938>__).

• Fixed detection and handling of imports and types in external modules in stubgen that could lead to incorrect declarations in some cases. (PRs [#939](https://github.com/wjakob/nanobind/issues/939) <https://github.com/wjakob/nanobind/pull/939>, [#940](https://github.com/wjakob/nanobind/issues/940) <https://github.com/wjakob/nanobind/pull/940>).

• The stub generator now detects method aliases and preserves this information instead of duplicating the definition. (PR [#735](https://github.com/wjakob/nanobind/issues/735) <https://github.com/wjakob/nanobind/pull/735>__).

• Corrected a flaw in the recommended implementation of tp_traverse in garbage-collected bindings. (PRs [#1015](https://github.com/wjakob/nanobind/issues/1015) <https://github.com/wjakob/nanobind/pull/1015>__).

• Added support for binding functions that accept a std::variant<...> that is not default-constructible (because its first alternative isn't). (PR [#987](https://github.com/wjakob/nanobind/issues/987) <https://github.com/wjakob/nanobind/pull/987>__).

• Added support for casting const-qualified std::unique_ptr<T> values. (PR [#988](https://github.com/wjakob/nanobind/issues/988) <https://github.com/wjakob/nanobind/pull/988>__).

• nb::typed<T, ...> now supports construction from T, making it more ergonomic to return values with type annotations. (PR `#1012

... (truncated)

Commits

• 44ad9a9 v2.7.0 release
• 503f758 Add python script src/version.py (#1014)
• 4d62d9c test recent free-threaded builds
• a3bafe4 Python 3.13a7 fixes
• 4ccda1e changelog update
• e504eeb changelog update
• cd49f0a Support Eigen::Map\<Eigen::SparseMatrix> [updated] (#1003)
• 7e39580 Revive old compilers workflow (#1016)
• e40fa7d Fix bugs in tp_traverse examples and documentation. (#1015)
• 487f625 remove old-compilers workflow for now
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Test Results

8 tests  ±0   8 ✅ ±0   11s ⏱️ ±0s
1 suites ±0   0 💤 ±0 
1 files   ±0   0 ❌ ±0 

Results for commit 644989e. ± Comparison against base commit 49da35d.