From 987813b697de4b93a52f11e75167b4b93a9cc574 Mon Sep 17 00:00:00 2001
From: Henk Muller <henk@xmos.com>
Date: Wed, 12 Mar 2025 09:33:42 +0000
Subject: [PATCH 1/2] Update of numpy because of security issues

---
 python/setup.py  | 2 +-
 requirements.txt | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/python/setup.py b/python/setup.py
index 6fffe59..1b3092f 100644
--- a/python/setup.py
+++ b/python/setup.py
@@ -15,7 +15,7 @@
     install_requires=[
         "flake8~=3.8",
         "matplotlib~=3.3",
-        "numpy~=1.18",
+        "numpy~=1.19",
         "pylint~=2.5",
         "pytest~=6.0",
         "pytest-xdist~=1.34",
diff --git a/requirements.txt b/requirements.txt
index 474b475..90976b5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -23,7 +23,9 @@ importlib-metadata==4.13.0
 matplotlib==3.3.1
 
 # Pin numpy to 1.18.5 due to tensorflow v2.1.1 hard pinning it to that version.
-numpy==1.18.5
+# Pin to 1.19 at least as security issues with 1.18.5; I don't think we use
+# tensorflow here
+numpy==1.19
 pylint==2.5.3
 pytest==6.0.0
 pytest-xdist==1.34.0

From b6edf41110628f4772ee39b49ee44e2e6277cfb1 Mon Sep 17 00:00:00 2001
From: Henk Muller <henk@xmos.com>
Date: Wed, 12 Mar 2025 09:35:16 +0000
Subject: [PATCH 2/2] Further bump of numpy because of security issues

---
 python/setup.py  | 2 +-
 requirements.txt | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/python/setup.py b/python/setup.py
index 1b3092f..e853565 100644
--- a/python/setup.py
+++ b/python/setup.py
@@ -15,7 +15,7 @@
     install_requires=[
         "flake8~=3.8",
         "matplotlib~=3.3",
-        "numpy~=1.19",
+        "numpy~=1.22",
         "pylint~=2.5",
         "pytest~=6.0",
         "pytest-xdist~=1.34",
diff --git a/requirements.txt b/requirements.txt
index 90976b5..cc283f9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -23,9 +23,9 @@ importlib-metadata==4.13.0
 matplotlib==3.3.1
 
 # Pin numpy to 1.18.5 due to tensorflow v2.1.1 hard pinning it to that version.
-# Pin to 1.19 at least as security issues with 1.18.5; I don't think we use
+# Pin to 1.22 at least as security issues with 1.18.5; I don't think we use
 # tensorflow here
-numpy==1.19
+numpy==1.22
 pylint==2.5.3
 pytest==6.0.0
 pytest-xdist==1.34.0