[dependabot]

Bumps scalene from 2.3.0 to 2.4.0.

Release notes

Sourced from scalene's releases.

Free-threaded wheels, M4 fix, safer API keys, and formal verification

What's Changed

Headlines

• Free-threaded Python wheels on PyPI: cp313t and cp314t wheels for macOS and Windows, and cp314t for Linux. Release builds now check that every wheel's native modules import, and that on free-threaded builds they don't re-enable the GIL.
• Apple Silicon M4+ fix: on chips with SME, profiling numpy/Accelerate code could silently corrupt numerical results (#1056). CPU sampling on those chips no longer uses signals.
• Safer AI-provider keys: API keys are never embedded in generated HTML. The new opt-in scalene view --api-keys-from-env serves them from memory over localhost instead. The GUI is now served from a private directory rather than the whole temp dir.
• Correctness: fixes found by new formal models (TLA+ and Lean) of Scalene's sampling and attribution, including several divide-by-zero and unbounded-sampling bugs.

New feature work

• Publish free-threaded (cp313t/cp314t) wheels by @​emeryberger in plasma-umass/scalene#1104
• Signal-free CPU sampling on Apple Silicon with SME (M4+) (#1056) by @​emeryberger in plasma-umass/scalene#1058
• Add opt-in scalene view --api-keys-from-env by @​emeryberger in plasma-umass/scalene#1097
• Bound --stacks CPU cost on processes with many Python threads (#1056) by @​emeryberger in plasma-umass/scalene#1057
• Declare free-threaded safety for the _scalene_unwind module by @​emeryberger in plasma-umass/scalene#1065

Bug fixes

• Build on Windows for free-threaded Python by @​rbo-corematic in plasma-umass/scalene#1102
• Fix free-threaded builds: limited-API module name, pydantic-core pin, mypy 2.4 by @​emeryberger in plasma-umass/scalene#1103
• Preserve ReplacementSemLock identity across spawned processes by @​HassanRady in plasma-umass/scalene#1099
• Prevent API credentials from being embedded in generated HTML by @​HassanRady in plasma-umass/scalene#1095
• Serve the GUI from a private directory, not the whole temp dir by @​emeryberger in plasma-umass/scalene#1100
• Fix profiling scripts with a UTF-8 BOM by @​mameikagou in plasma-umass/scalene#1092
• Fix UnicodeEncodeError for non-ASCII file paths by @​emeryberger in plasma-umass/scalene#1087
• Fix #1063: non-ASCII --profile-only no longer crashes with SIGSEGV by @​emeryberger in plasma-umass/scalene#1064
• Retry EINTR on poll/select so profiling signals don't break native blocking calls (#1060) by @​emeryberger in plasma-umass/scalene#1062
• Fix "dictionary changed size during iteration" race in stack output by @​emeryberger in plasma-umass/scalene#1067
• Fix divide-by-zero and unbounded-sampling bugs found by formalization by @​emeryberger in plasma-umass/scalene#1077 and plasma-umass/scalene#1078
• Sync requirements.txt with pyproject.toml runtime dependencies by @​emeryberger in plasma-umass/scalene#1085
• Lowercase scalene view option help to match the rest of the CLI by @​emeryberger in plasma-umass/scalene#1101

Formal verification

• Add formal models (TLA+ and Lean) of Scalene's concurrency and correctness, and prove the profiler-correctness desideratum (unbiased, consistent attribution), the Poisson sampler, memory-sampler correctness and the Python/native classifier, in plasma-umass/scalene#1068, #1070, #1072, #1075, #1076, #1080, #1082, #1083 and #1084

Testing and CI

• CI fails when native modules don't import or tests don't collect by @​emeryberger in plasma-umass/scalene#1105
• Free-threaded CI jobs run their tests again (#1089, #1103), and a test-suite sys.executable leak no longer skips the free-threaded memory tests (#1066)
• Deflaking: #1069, #1071, #1074, #1096

Note for free-threaded Python 3.13 users

pydantic-core no longer ships cp313t wheels and its newest releases can't be built from source there. Until that changes, install with:

pip install scalene "pydantic-core<=2.46.5"
</tr></table> 

... (truncated)

Commits

• 6d0081b Bump version to 2.4.0
• 0357c25 CI: fail when native modules don't import or tests don't collect (#1105)
• bb19605 Publish free-threaded (cp313t/cp314t) wheels (#1104)
• c8bb168 Fix free-threaded CI: limited-API module name, pydantic-core pin, mypy 2.4 (#...
• 051034f fix: build on Windows for free-threaded Python (cp313t / cp314t) (#1102)
• 0862cac fix: preserve ReplacementSemLock identity across spawn (#1099)
• f0910a6 Lowercase scalene view option help to match the rest of the CLI (#1101)
• caa948a Serve the GUI from a private directory, not the whole temp dir (#1100)
• b7883cf Add opt-in scalene view --api-keys-from-env (#1097)
• e62a500 fix: prevent API keys from being embedded in HTML (#1095)
• Additional commits viewable in compare view

[github-actions]

Test Results

    5 files  ±0      5 suites  ±0   4m 23s ⏱️ +11s
  440 tests ±0    430 ✅ ±0  10 💤 ±0  0 ❌ ±0 
2 102 runs  ±0  2 081 ✅ ±0  21 💤 ±0  0 ❌ ±0 

Results for commit 57d6ad8. ± Comparison against base commit e9a2f62.

♻️ This comment has been updated with latest results.