Bump the ndarray-packages group across 1 directory with 2 updates

[dependabot]

Updates the requirements on ndarray and ndarray-stats to permit the latest version.
Updates ndarray to 0.17.1

Changelog

Sourced from ndarray's changelog.

Version 0.17.1 (2025-11-02)

Version 0.17.1 provides a patch to fix the originally-unsound implementation of the new array reference types.

The reference types are now all unsized. Practically speaking, this has one major implication: writing functions and traits that accept RawRef and LayoutRef will now need a + ?Sized bound to work ergonomically with ArrayRef. For example, the release notes for 0.17.0 said

Reading / Writing Shape: LayoutRef<A, D>

LayoutRef lets functions view or modify shape/stride information without touching data. This replaces verbose signatures like:

fn alter_view<S>(a: &mut ArrayBase<S, Ix1>)
where S: Data<Elem = f64>;

Use AsRef / AsMut for best compatibility:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>>;

However, these functions now need an additional bound to allow for callers to pass in &ArrayRef types:

fn alter_shape<T>(a: &mut T)
where T: AsMut<LayoutRef<f64>> + ?Sized; // Added bound here

A huge thank you to Sarah Quiñones (@​sarah-quinones) for catching the original unsound bug and helping to fix it. She does truly excellent work with faer-rs; check it out!

Version 0.17.0 (2025-10-14) [YANKED]

Version 0.17.0 introduces a new array reference type — the preferred way to write functions and extension traits in ndarray.
This release is fully backwards-compatible but represents a major usability improvement.
The first section of this changelog explains the change in detail.

It also includes numerous new methods, math functions, and internal improvements — all credited below.

A New Way to Write Functions

TL;DR

ndarray 0.17.0 adds new reference types for writing functions and traits that work seamlessly with owned arrays and views.

When writing functions that accept array arguments:

• Use &ArrayRef<A, D> to read elements from any array.
• Use &mut ArrayRef<A, D> to modify elements.
• Use &T where T: AsRef<LayoutRef<A, D>> to inspect shape/stride only.
• Use &mut T where T: AsMut<LayoutRef<A, D>> to modify shape/stride only.

All existing function signatures continue to work; these new types are fully opt-in.

... (truncated)

Commits

• 66dc0e1 chore: Release
• 85e712f Add a changelog for 0.17.1 (#1538)
• 1579da4 Document + ?Sized in a few more places (#1537)
• dc331a7 Fix clippy lint cast_slice_from_raw_parts (#1536)
• 7c56e84 Update the docs and examples for the new Sized implementation (#1535)
• a3b3537 Makes the reference types sound via a DST (#1532)
• e6bf804 Mention the used rand version 0.9 in ndarray-rand (#1533)
• 6cd209b Release ndarray 0.17.0 (#1529)
• b4e7658 Update configurations for cargo-release (#1528)
• 8a39cad Add a changelog for Version 0.17.0 (#1527)
• Additional commits viewable in compare view

Updates ndarray-stats to 0.7.0

Commits

• 67d0292 chore: Release ndarray-stats version 0.7.0
• 91da307 Bump version and dependency in README (#114)
• e417a44 Bump hashbrown from 0.15.0 to 0.16.0 (#111)
• e8fdec2 Bump the msrv to 1.65.0 to allow for upgrading hashbrown (#113)
• 25a84d0 Make the entire crate compatible with the array reference type (#109)
• 7997e20 Set and enforce an msrv of 1.64.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions