numexpr 2.8.5 breaks CI

[anmyachev]

Pandas is not compatible with the release.

See pandas-dev/pandas#54449

Broken CI: https://github.com/modin-project/modin/actions/runs/5799349333/job/15721083501

Example of the error:

def test_eval_and_query_with_local_and_global_var(method, data, local_var):
        modin_df, pandas_df = pd.DataFrame(data), pandas.DataFrame(data)
        op = "+" if method == "eval" else "<"
        for expr in (f"col1 {op} @local_var", f"col1 {op} @TEST_VAR"):
>           df_equals(getattr(modin_df, method)(expr), getattr(pandas_df, method)(expr))

modin/pandas/test/dataframe/test_udf.py:351: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
modin/logging/logger_decorator.py:128: in run_and_log
    return obj(*args, **kwargs)
modin/pandas/dataframe.py:818: in eval
    new_query_compiler = self._query_compiler.eval(expr, **kwargs)
modin/logging/logger_decorator.py:128: in run_and_log
    return obj(*args, **kwargs)
modin/core/storage_formats/pandas/query_compiler.py:[228](https://github.com/modin-project/modin/actions/runs/5799349333/job/15721083501#step:7:229)0: in eval
    pandas.DataFrame(columns=self.columns)
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/pandas/core/frame.py:4566: in eval
    return _eval(expr, inplace=inplace, **kwargs)
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/pandas/core/computation/eval.py:357: in eval
    ret = eng_inst.evaluate()
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/pandas/core/computation/engines.py:81: in evaluate
    res = self._evaluate()
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/pandas/core/computation/engines.py:121: in _evaluate
    return ne.evaluate(s, local_dict=scope)
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/numexpr/necompiler.py:943: in evaluate
    raise e
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/numexpr/necompiler.py:851: in validate
    _names_cache[expr_key] = getExprNames(ex, context)
/usr/share/miniconda/envs/modin/lib/python3.8/site-packages/numexpr/necompiler.py:714: in getExprNames
    ex = stringToExpression(text, {}, context)
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

s = '(col1) + (__pd_eval_local_local_var)', types = {}
context = {'optimization': 'aggressive', 'truediv': False}

    def stringToExpression(s, types, context):
        """Given a string, convert it to a tree of ExpressionNode's.
        """
        # sanitize the string for obvious attack vectors that NumExpr cannot
        # parse into its homebrew AST. This is to protect the call to `eval` below.
        # We forbid `;`, `:`. `[` and `__`, and attribute access via '.'.
        # We cannot ban `.real` or `.imag` however...
        no_whitespace = re.sub(r'\s+', '', s)
        if _forbidden_re.search(no_whitespace) is not None:
>           raise ValueError(f'Expression {s} has forbidden control characters.')
E           ValueError: Expression (col1) + (__pd_eval_local_local_var) has forbidden control characters.