Repository navigation
Bump urllib3 from 2.6.0 to 2.6.3 in /projects/miopen/docs/sphinx - #3769
Merged
BradPepersAMD merged 1 commit intoFeb 10, 2026
Merged
BradPepersAMD merged 1 commit into
BradPepersAMD merged 1 commit into
Conversation
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.0 to 2.6.3. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.0...2.6.3) --- updated-dependencies: - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
assistant-librarian
Bot
added
the
external contribution
github-actions
Bot
added
documentation
ci:docs-only
BradPepersAMD
approved these changes
Feb 10, 2026
BradPepersAMD
deleted the
dependabot/pip/projects/miopen/docs/sphinx/urllib3-2.6.3
branch
February 10, 2026 14:56
assistant-librarian Bot
pushed a commit
to ROCm/MIOpen
that referenced
this pull request
Feb 10, 2026
Bump urllib3 from 2.6.0 to 2.6.3 in /projects/miopen/docs/sphinx (#3769) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.0 to 2.6.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.6.3</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h2>Changes</h2> <ul> <li>Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by <a href="https://github.com/D47A"><code>@D47A</code></a>, 8.9 High, GHSA-38jv-5279-wg99)</li> <li>Started treating <code>Retry-After</code> times greater than 6 hours as 6 hours by default. (<a href="https://github.com/urllib3/urllib3/issues/3743">urllib3/urllib3#3743</a>)</li> <li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on Emscripten. (<a href="https://github.com/urllib3/urllib3/issues/3752">urllib3/urllib3#3752</a>)</li> </ul> <h2>2.6.2</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h2>Changes</h2> <ul> <li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (<a href="https://github.com/urllib3/urllib3/issues/3734">urllib3/urllib3#3734</a>)</li> </ul> <h2>2.6.1</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h2>Changes</h2> <ul> <li>Restore previously removed <code>HTTPResponse.getheaders()</code> and <code>HTTPResponse.getheader()</code> methods. (<a href="https://github.com/urllib3/urllib3/issues/3731">#3731</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.6.3 (2026-01-07)</h1> <ul> <li>Fixed a high-severity security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (<code>GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99></code>__)</li> <li>Started treating <code>Retry-After</code> times greater than 6 hours as 6 hours by default. (<code>[#3743](urllib3/urllib3#3743) <https://github.com/urllib3/urllib3/issues/3743></code>__)</li> <li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on Emscripten. (<code>[#3752](urllib3/urllib3#3752) <https://github.com/urllib3/urllib3/issues/3752></code>__)</li> </ul> <h1>2.6.2 (2025-12-11)</h1> <ul> <li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (<code>[#3734](urllib3/urllib3#3734) <https://github.com/urllib3/urllib3/issues/3734></code>__)</li> </ul> <h1>2.6.1 (2025-12-08)</h1> <ul> <li>Restore previously removed <code>HTTPResponse.getheaders()</code> and <code>HTTPResponse.getheader()</code> methods. (<code>[#3731](urllib3/urllib3#3731) <https://github.com/urllib3/urllib3/issues/3731></code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/0248277dd7ac0239204889ca991353ad3e3a1ddc"><code>0248277</code></a> Release 2.6.3</li> <li><a href="https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"><code>8864ac4</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/70cecb27ca99d56aaaeb63ac27ee270ef2b24c5c"><code>70cecb2</code></a> Fix Scorecard issues related to vulnerable dev dependencies (<a href="https://github.com/urllib3/urllib3/issues/3755">#3755</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/41f249abe1ef3e20768588969c4035aba060a359"><code>41f249a</code></a> Move "v2.0 Migration Guide" to the end of the table of contents (<a href="https://github.com/urllib3/urllib3/issues/3747">#3747</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/fd4dffd2fc544166b76151a2fa3d7b7c0eab540c"><code>fd4dffd</code></a> Patch <code>VerifiedHTTPSConnection</code> for Emscripten (<a href="https://github.com/urllib3/urllib3/issues/3752">#3752</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/13f0bfd55e4468fe1ea9c6f809d3a87b0f93ebab"><code>13f0bfd</code></a> Handle massive values in Retry-After when calculating time to sleep for (<a href="https://github.com/urllib3/urllib3/issues/3743">#3743</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8c480bf87bcefd321b3a1ae47f04e908b6b2ed7b"><code>8c480bf</code></a> Bump actions/upload-artifact from 5.0.0 to 6.0.0 (<a href="https://github.com/urllib3/urllib3/issues/3748">#3748</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/4b40616e959c0a2c466e8075f2a785a9f99bb0c1"><code>4b40616</code></a> Bump actions/cache from 4.3.0 to 5.0.1 (<a href="https://github.com/urllib3/urllib3/issues/3750">#3750</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/82b8479663d037d220c883f1584dd01a43bb273b"><code>82b8479</code></a> Bump actions/download-artifact from 6.0.0 to 7.0.0 (<a href="https://github.com/urllib3/urllib3/issues/3749">#3749</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/34284cb01700bb7d4fdd472f909e22393e9174e2"><code>34284cb</code></a> Mention experimental features in the security policy (<a href="https://github.com/urllib3/urllib3/issues/3746">#3746</a>)</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end)
tony-davis
added a commit
that referenced
this pull request
Mar 20, 2026
Implements AIROCBLAS-45. Adds rocBLAS to the same CTest test-filter setup as **#3513 (Test Filter Standardization – MIOpen)**, following that pattern and coordinating with the #3513 authors. ## What this PR does - Wires rocBLAS into the shared CTest flow from #3513: `shared/ctest` (TestCategories.cmake, parse_test_categories.py) and YAML-driven categories. - Sets `ROCM_LIBRARIES_ROOT` in rocBLAS and includes the shared module in `clients/gtest/CMakeLists.txt`. - Adds `projects/rocblas/clients/gtest/test_categories.yaml` with categories **quick**, **standard**, **comprehensive**, **full** and execution settings (timeouts, env). - Installs an install-time CTestTestfile to `bin/rocblas/` so TheRock (and other consumers) can run CTest from the install tree. - Documents rocBLAS in `shared/ctest/README.md` under Integrations. ## Test categories | Category | Purpose | Timeout | |----------------|----------------|---------| | quick | Smoke | 10 min | | standard | Precheckin | 2 hours | | comprehensive | Extended/nightly | 8 hours | | full | Stress/weekly | 24 hours | ## Context (#3513) Test filtering is being standardized across ROCm: time-based categories, human-readable YAML in tree, CTest labels for CI, and optional GPU/OS exclusions. MIOpen adopted this first; rocBLAS is the next project on the same path. ## Testing - **TheRock CI:** rocBLAS test job runs and passes (e.g. Linux gfx94X-dcgpu, Windows gfx1151). - **Local:** From a rocBLAS build, `ctest -L quick`, `ctest -L standard`, etc., run the corresponding suites with the configured timeouts. **Note:** TheRock CI will run rocBLAS tests only after [TheRock PR #3769](ROCm/TheRock#3769) is merged (that PR adds rocBLAS to the test matrix and artifact descriptor). --------- Co-authored-by: Dileep Ravindranathan <dileep@dell-rack-13.amd.com> Co-authored-by: root <root@dell-rack-13.amd.com> Co-authored-by: Joseph Macaranas <145489236+jayhawk-commits@users.noreply.github.com> Co-authored-by: Cursor <cursoragent@cursor.com>
illsilin
pushed a commit
that referenced
this pull request
Sep 25, 2026
…n × per-channel) scales (#11721) ISSUE ID : ROCm/composable_kernel#3766 Replaces my #3770, which I withdrew because its evidence was vacuous — the `-preshuffleb` flag was not part of the rowcol LUT key, so both arms of that "before/after" ran the same non-preshuffle kernel. This PR fixes that (among other things) and the test now genuinely toggles. Two commits: the first is #3769 (the rowcol BQ-extent fix), included because the enablement cannot be evaluated without it — rowcol fails its own verification until `BQN = N`. If #3769 merges first this rebases cleanly. ## The defect `WeightPreshufflePipelineAGmemBGmemCRegV2` never announced `PreshuffleB`. `QuantGemmKernel` detects a preshuffled B by SFINAE on `GemmPipeline::PreshuffleB` (`gemm_quant_kernel.hpp:104-106`) and **defaults to false when the member is absent** — so pairing the quant kernel with the weight-preshuffle pipeline made it read preshuffled weights as a plain B. No error, just wrong numbers. Measured by removing the announcement again on an otherwise-identical build (gfx950): | | result | |---|---| | rowcol + preshuffleb, **without** the announcement | **fail — 39.47% wrong, max err 386.78** | | rowcol + preshuffleb, **with** it | correct | | rowcol, preshuffleb=0 (control) | correct in both builds | ## Making the combination reachable - rowcol routes to the weight-preshuffle pipeline when `PreshuffleB` is set (it was pinned to `GemmPipelineAgBgCrCompV3` unconditionally); - new `GemmConfigPreshuffleB_RowCol_Prefill`; - `-preshuffleb` joins the rowcol LUT key — without it the flag selected the same kernel either way, so the configuration could not be tested at all; - `RowColQuant` leaves the `PreshuffleB` rejection list. ## Results in this example (gfx950 / MI350X, fp8, verification on) | shape | preshuffleb=0 | preshuffleb=1 | |---|---|---| | 512³ | correct | correct | | 1024×2688×6144 | 0.1014 ms, 333 TF | **0.0471 ms, 718 TF** | | 2048×6144×12288 | 0.7211 ms, 429 TF | **0.2102 ms, 1471 TF** | **Caveat**: the two arms differ in tile shape as well (the existing rowcol config is decode-shaped 16×64, the new one prefill-shaped 128×128), so read these as *the new preshuffled config vs the only rowcol config the example had at these shapes*, not as preshuffle in isolation. ## Independent measurement, stated carefully Driving this same composition through AITER's tuner on MI350X — 1754 measurements across 6 GLM-shaped GEMMs, full candidate space (259 flatmm tiles + 44 rowcol tiles), **errRatio 0.0000 on every one**: | shape (M,N,K) | best rowcol | best flatmm | winner | |---|---|---|---| | 1, 2688, 6144 | — (no divisible tile) | 11.008 µs | flatmm | | 64, 2688, 6144 | 12.640 µs (rank 5) | 11.325 µs | flatmm, −11.6% | | 256, 2688, 6144 | 19.190 µs (rank 10) | 17.590 µs | flatmm, −9.1% | | 1024, 2688, 6144 | 41.226 µs (rank 35) | 35.491 µs | flatmm, −16.2% | | **2048, 6144, 12288** | **158.661 µs (rank 1)** | 175.943 µs | **rowcol, +9.8%** | | **16384, 6144, 12288** | **1165.842 µs (rank 1)** | 1258.569 µs | **rowcol, +7.4%** | So it is a genuine per-shape winner on large-M / prefill-shaped GEMMs and **not** a global replacement; across 184 matched (tile, BlockPerCu) pairs the median is −0.9%, with the advantage concentrated in wide-N tiles and growing with M. Also note **M=1 cannot dispatch to this route** — no MTile divides 1 and it is instantiated unpadded; that needs `kPadM` wired through separately. (Earlier revisions of this description quoted "+8-11% over flatmm" from a restricted candidate set; the table above supersedes it. See the comments for the full correction history.) Per-token × per-channel scales on preshuffled weights is the standard shape for FP8 LLM inference with online activation quantization, so having it reachable — and not silently mis-typed as plain B — matters beyond this example. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- *Migrated from ROCm/composable_kernel#3772 — that repository is now a read-only mirror. All measurements quoted above were taken on the CK tree at the time of that PR and are unchanged; the diff applies cleanly to `develop` here.* --------- Co-authored-by: ThomasNing <thomas.ning@amd.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps urllib3 from 2.6.0 to 2.6.3.
Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
0248277Release 2.6.38864ac4Merge commit from fork70cecb2Fix Scorecard issues related to vulnerable dev dependencies (#3755)41f249aMove "v2.0 Migration Guide" to the end of the table of contents (#3747)fd4dffdPatchVerifiedHTTPSConnectionfor Emscripten (#3752)13f0bfdHandle massive values in Retry-After when calculating time to sleep for (#3743)8c480bfBump actions/upload-artifact from 5.0.0 to 6.0.0 (#3748)4b40616Bump actions/cache from 4.3.0 to 5.0.1 (#3750)82b8479Bump actions/download-artifact from 6.0.0 to 7.0.0 (#3749)34284cbMention experimental features in the security policy (#3746)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.