Bump nanobind from 2.9.2 to 2.10.2

[dependabot]

Bumps nanobind from 2.9.2 to 2.10.2.

Changelog

Sourced from nanobind's changelog.

Version 2.10.2 (Dec 10, 2025)

• Fixes a regression that broke compilation on 32-bit architectures. (PR [#1239](https://github.com/wjakob/nanobind/issues/1239) <https://github.com/wjakob/nanobind/pull/1239>__).

Version 2.10.1 (Dec 8, 2025)

• ABI version 17.

• Nanobind now officially supports the MinGW-w64 and Intel ICX compilers. (PR [#1188](https://github.com/wjakob/nanobind/issues/1188) <https://github.com/wjakob/nanobind/pull/1188>__).

• Version 2.10 drops support for Python 3.8, which reached End-Of-Life in October 2025. (PR [#1236](https://github.com/wjakob/nanobind/issues/1236) <https://github.com/wjakob/nanobind/pull/1236>__).

• The new :cpp:class:nb::array_api <array_api> framework tag can be used to create an nd-array wrapper object that supports both the Python buffer protocol and the DLPack methods __dlpack__ and __dlpack_device__.

  Furthermore, nanobind now supports importing/exporting tensors via the legacy (unversioned) DLPack interface, as well a new versioned interface. The latter provides a flag indicating whether an nd-array is read-only. (PR [#1175](https://github.com/wjakob/nanobind/issues/1175) <https://github.com/wjakob/nanobind/pull/1175>__).

• Added bfloat to the nd-array import conversion code, fixing imports of bfloat16 tensors. (PR [#1228](https://github.com/wjakob/nanobind/issues/1228) <https://github.com/wjakob/nanobind/pull/1228>__).

• nanobind now uses per-module precomputed constants, particularly strings, to avoid costs from creating these repeatedly. This improves the performance of nd-array and enumeration casts. (PR [#1184](https://github.com/wjakob/nanobind/issues/1184) <https://github.com/wjakob/nanobind/pull/1184>__).

• Fixed a segfault in garbage collection traversal of Python subclasses of class bindings with :cpp:class:nb::is_weak_referenceable <is_weak_referenceable>. (PR [#1206](https://github.com/wjakob/nanobind/issues/1206) <https://github.com/wjakob/nanobind/pull/1206>__).

• Fixed a potential reference leak in the std::array type caster. (commit bfacaf7 <https://github.com/wjakob/nanobind/commit/bfacaf75525c8a5e5f0a80fd69a985c4ae03d3d1>__).

• STL type casters now directly reject incorrectly sized inputs, which avoids performance pitfalls when passing large arrays. (commit edf5753 <https://github.com/wjakob/nanobind/commit/edf5753a13f98132b8da3d56fe94c31c678b2273>, dc35d69 <https://github.com/wjakob/nanobind/commit/dc35d69f65936280b2521941b2ce9d5ad16141d1>).

... (truncated)

Commits

• c5a3a37 v2.10.2 release
• c1eeb3c Bugfix NB_MOD_STATE_SIZE for 32-bit pointers
• c244bda Version 2.10.0 was yanked
• f3f93ff begin working on the next version
• da365b5 v2.10.1 release
• 06aaa39 CMake: fix regression in NB_USE_SUBMODULE_DEPS handling
• cf289bb very minor fixes
• 31ca1a6 begin working on the next version
• 11087dd v2.10.0 release
• 75f7046 Update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[grzanka]

@dependabot rebase