[kendrickb-nvidia]

Summary

Require pandas>=2.1.3,<3 in both the base dependencies and engine extra. Remove the redundant pandas constraint from uv configuration and generated constraints.txt, and refresh lockfile metadata without changing resolved package versions.

Human review

• ⚪ No human review; automated review only
• 🟡 Partially reviewed or spot-checked by a human
• 🔵 Complete diff reviewed by a human
• 🟢 Complete diff reviewed and verified by a human

Pre-Review Checklist

• mise run format leaves only intended formatting changes.
• mise run check ::: test passes locally.
• mise run test:e2e passes locally
• mise run test:ci-container passes locally (recommended)
• GPU CI status check passes

Pre-Merge Checklist

• New or updated tests for any fix or new behavior
• Updated documentation for new features and behaviors, including docstrings for API docs.

Other Notes

Summary by CodeRabbit

• Chores
  • The project and engine extra now specify pandas versions below 3.
  • The separate constraints file no longer sets a pandas version limit.

[coderabbitai]

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

⛔ Files ignored due to path filters: 1

• uv.lock is excluded by !**/*.lock, !uv.lock

⚙️ Run configuration

• Source mode: Auto
• Repository: NVIDIA-NeMo/Safe-Synthesizer
• Branch: codex/align-pandas-bounds
• File: .coderabbit.yaml
• Commit: fbeb76b
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 038f3874-37de-47ba-be9c-5063c63e4080

📥 Commits

Reviewing files that changed from the base of the PR and between c06a31b and fbeb76b.

⛔ Files ignored due to path filters: 1

• uv.lock is excluded by !**/*.lock, !uv.lock

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Source mode: Auto
• Repository: NVIDIA-NeMo/Safe-Synthesizer
• Branch: codex/align-pandas-bounds
• File: .coderabbit.yaml
• Commit: c06a31b
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 010f43bb-564c-4195-ab9e-5ab6f2331c91

📥 Commits

Reviewing files that changed from the base of the PR and between bce5b7d and c06a31b.

⛔ Files ignored due to path filters: 1

• uv.lock is excluded by !**/*.lock, !uv.lock

📒 Files selected for processing: 2

• constraints.txt
• pyproject.toml

💤 Files with no reviewable changes: 1

• constraints.txt

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout: 6

• GitHub Check: Unit Tests (3.12)
• GitHub Check: End-user Wheel Install
• GitHub Check: Unit Tests (3.11)
• GitHub Check: Unit Tests (3.14)
• GitHub Check: Unit Tests (3.13)
• GitHub Check: Greptile Review

🧰 Additional context used

📚 Code guidelines: 2

AGENTS.md — configured
STYLE_GUIDE.md — configured

📓 Path-based instructions: 5

Treat pyproject.toml as high-risk.

⚙️ CodeRabbit configuration file

Files:

• pyproject.toml

Review as a senior maintainer for NeMo Safe Synthesizer.

⚙️ CodeRabbit configuration file

Files:

• pyproject.toml

Source excerpt: The CPU/CUDA optional-dependency and `[tool.uv.sources]`/`[[tool.uv.index]]` sections of `pyproject.toml` are generated from `cuda_deps.toml` by `tools/gen_cuda_deps.py` -- never hand-edit the `# >>> BEGIN GENERATED ...

📄 CodeRabbit inference engine (AGENTS.md)

Files:

• pyproject.toml

Applicability reference: AGENTS.md: # AGENTS.md See [STYLE_GUIDE.md](STYLE_GUIDE.md) for detailed code style conventions (Python, markdown, Dockerfiles, shell scripts, testing, config files, docstrings).

📄 CodeRabbit inference engine (STYLE_GUIDE.md)

Files:

• pyproject.toml

Applicability reference: AGENTS.md: # AGENTS.md See [STYLE_GUIDE.md](STYLE_GUIDE.md) for detailed code style conventions (Python, markdown, Dockerfiles, shell scripts, testing, config files, docstrings).

📄 CodeRabbit inference engine (STYLE_GUIDE.md)

Files:

• pyproject.toml

🔇 Additional comments: 1

pyproject.toml: 1

29-29: 🗄️ Data Integrity & Integration

The standalone pandas constraint is redundant.

install_nss.sh defaults to the nemo-safe-synthesizer distribution and passes its metadata to uv pip install. The project metadata declares pandas>=2.1.3,<3, so removing the duplicate pandas<3 constraint does not allow pandas 3 through the supported installer path.

Walkthrough

The project dependency now caps pandas below version 3. The engine extra declares the same range. The pandas cap was removed from constraints.txt and constraint-dependencies.

Changes

Pandas version constraints

Layer / File(s)	Summary
Pandas dependency declarations pyproject.toml, constraints.txt	The project dependency specifies pandas>=2.1.3,<3. The engine extra declares the same range. The pandas cap was removed from constraints.txt and constraint-dependencies.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested labels: chore

Suggested reviewers: binaryaaron

Merge Risk: ⚪ Minimal · up to c06a3

The supported installer path retains the pandas version cap through the project dependency. No actionable merge-blocking risk is established.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: aligning pandas version bounds across dependency sections.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Confidence Score: 5/5

[Low impact] This PR appears safe to merge.

Summary

This PR puts the pandas bound in the package’s dependency declarations.

• Base and engine installs agree on the pandas versions they allow.

_{Reviews (2) · Last reviewed commit: "fix(deps): align pandas bounds across de..." · Reviewed by Greptile}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!