Keep NumPy type-check cap out of runtime metadata

[cdeil]

Summary

• remove the NumPy <2.4 cap from runtime requirements
• retain the cap in the dev extra, where it protects the Python 3.10 mypy target

Motivation

setup.py uses requirements.txt as install_requires, so the current type-check workaround is also published as runtime metadata. It prevents SDK users from resolving newer NumPy releases even though the incompatibility is in mypy parsing NumPy's newer stubs, not in the SDK runtime.

This follows the original dev-only intent discussed in #498 and #499. Moving the cap to the dev extra keeps the Python 3.10 type-check environment stable without constraining users of the SDK.

Test plan

• Python 3.14.6 with NumPy 2.5.2: python -m unittest — 970 passed, 1 skipped
• Python 3.10 with NumPy 2.2.6: Ruff format/lint and mypy over 72 source files pass
• built runtime metadata requires numpy>=1.18.5; installing the dev extra applies numpy<2.4
• git diff --check origin/main...HEAD

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​numpy@​2.3.5 ⏵ 2.5.2	+1
	pypi/​matplotlib@​2.2.5 ⏵ 3.11.1	-5				-9

View full report