Bump nanobind from 2.9.2 to 2.10.2

[dependabot]

Bumps nanobind from 2.9.2 to 2.10.2.

Changelog

Sourced from nanobind's changelog.

Version 2.10.2 (Dec 10, 2025)

• Fixes a regression that broke compilation on 32-bit architectures. (PR [#1239](https://github.com/wjakob/nanobind/issues/1239) <https://github.com/wjakob/nanobind/pull/1239>__).

Version 2.10.1 (Dec 8, 2025)

• ABI version 17.

• Nanobind now officially supports the MinGW-w64 and Intel ICX compilers. (PR [#1188](https://github.com/wjakob/nanobind/issues/1188) <https://github.com/wjakob/nanobind/pull/1188>__).

• Version 2.10 drops support for Python 3.8, which reached End-Of-Life in October 2025. (PR [#1236](https://github.com/wjakob/nanobind/issues/1236) <https://github.com/wjakob/nanobind/pull/1236>__).

• The new :cpp:class:nb::array_api <array_api> framework tag can be used to create an nd-array wrapper object that supports both the Python buffer protocol and the DLPack methods __dlpack__ and __dlpack_device__.

  Furthermore, nanobind now supports importing/exporting tensors via the legacy (unversioned) DLPack interface, as well a new versioned interface. The latter provides a flag indicating whether an nd-array is read-only. (PR [#1175](https://github.com/wjakob/nanobind/issues/1175) <https://github.com/wjakob/nanobind/pull/1175>__).

• Added bfloat to the nd-array import conversion code, fixing imports of bfloat16 tensors. (PR [#1228](https://github.com/wjakob/nanobind/issues/1228) <https://github.com/wjakob/nanobind/pull/1228>__).

• nanobind now uses per-module precomputed constants, particularly strings, to avoid costs from creating these repeatedly. This improves the performance of nd-array and enumeration casts. (PR [#1184](https://github.com/wjakob/nanobind/issues/1184) <https://github.com/wjakob/nanobind/pull/1184>__).

• Fixed a segfault in garbage collection traversal of Python subclasses of class bindings with :cpp:class:nb::is_weak_referenceable <is_weak_referenceable>. (PR [#1206](https://github.com/wjakob/nanobind/issues/1206) <https://github.com/wjakob/nanobind/pull/1206>__).

• Fixed a potential reference leak in the std::array type caster. (commit bfacaf7 <https://github.com/wjakob/nanobind/commit/bfacaf75525c8a5e5f0a80fd69a985c4ae03d3d1>__).

• STL type casters now directly reject incorrectly sized inputs, which avoids performance pitfalls when passing large arrays. (commit edf5753 <https://github.com/wjakob/nanobind/commit/edf5753a13f98132b8da3d56fe94c31c678b2273>, dc35d69 <https://github.com/wjakob/nanobind/commit/dc35d69f65936280b2521941b2ce9d5ad16141d1>).

... (truncated)

Commits

• c5a3a37 v2.10.2 release
• c1eeb3c Bugfix NB_MOD_STATE_SIZE for 32-bit pointers
• c244bda Version 2.10.0 was yanked
• f3f93ff begin working on the next version
• da365b5 v2.10.1 release
• 06aaa39 CMake: fix regression in NB_USE_SUBMODULE_DEPS handling
• cf289bb very minor fixes
• 31ca1a6 begin working on the next version
• 11087dd v2.10.0 release
• 75f7046 Update changelog
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[grzanka]

@dependabot rebase

[grzanka]

@dependabot rebase