Bump the nuget-minor-patch group with 4 updates by dependabot[bot] · Pull Request #606 · TypeWhisper/typewhisper-win

dependabot · 2026-10-08T23:12:57Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated Microsoft.ML.OnnxRuntime from 1.24.1 to 1.30.0.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.30.0

ONNX Runtime 1.30.0 expands generative AI inference, improves CPU and GPU performance, adds Go bindings, and strengthens runtime reliability. These notes cover changes since ONNX Runtime 1.29.1.

Highlights

Expanded CUDA inference support with variable-length causal convolution for continuous batching, speculative decoding in paged XQA, and INT4 paged KV caches with per-channel scales (#32168, #32340, #32515).
Improved WebGPU PagedAttention, added GPT-OSS support and INT8 KV-cache block quantization, and extended convolution optimizations (#31727, #32277, #32284, #32420).
Added fused CPU LinearAttention kernels for AVX-512, Arm64 NEON, and SVE, plus AVX2 LayerNorm/RMSNorm acceleration (#31674, #31973, #32178, #32356).
Added Go bindings for the ONNX Runtime C API and DeepSeek Engram contrib operators (#29615, #32268).

Announcements & Compatibility

FP4 QMoE kernels are now enabled by default in CUDA builds, with Windows build support added in this release. Source builds can opt out with -Donnxruntime_USE_FP4_QMOE=OFF (#32096, #32163).
CUDA fpA-intB builds now default to a compact kernel set for FP16 activations, INT4/INT8 weights, scale-only quantization, and block_size=32. Set -Donnxruntime_USE_FPA_INTB_GEMM_FULL=ON when building from source to retain the full kernel set, including BF16, zero-point, bias, larger-block-size, and native Hopper variants (#32324).
CPU FP16 Gemm and MatMul execution is gated on hardware acceleration. CPU-assigned FP16 nodes without a matching kernel now fall back to FP32 (#32301, #32197).
WebGPU plugin EP packaging now supports Linux AArch64. Plugin versions were advanced to WebGPU 0.4.0 and CUDA 0.2 (#32287, #31960, #31970).

Security & Reliability

Model Loading, Memory, and Input Validation

Limited nested model-graph depth and canonicalized external-data locations to harden model loading (#32344, #32135).
Added checked rounding for BFC arena allocations and fixed prepacked-weight reference lifetimes (#32010, #32040).
Strengthened shape, rank, and parameter validation for Split, Scan, GatherND, ScatterND, SpaceToDepth/DepthToSpace, Crop, Conv, Normalizer, and pooling (#29461, #31668, #32034, #32039, #32076, #32157, #32160, #32161, #32345, #32349).
Hardened generation and attention input handling, including attention-attribute narrowing, BifurcationDetector inputs, generation subgraph shapes, and QEmbed segment inputs. BeamSearch buffer expansion now uses dynamic shape storage (#31648, #31701, #32009, #32078, #32144).
Validated TreeEnsemble node references and bounded subtree comparison, rejected non-finite CPU RoiAlign coordinates, and required ImageScaler bias to match the channel count (#32031, #32043, #32011, #32002).
Added an allowlist of safe LoRA adapter parameter data types, validated MatMulFpQ4 shape inputs, and checked MLAS blockwise quantization/dequantization index ranges (#31682, #32032, #32007).

GPU Bounds and Resource Lifetimes

Hardened CUDA indexing and buffer-size arithmetic in MatMulNBits, RemovePadding, RotaryEmbedding, SparseAttention, Whisper beam search, NMS, QDQ, and GatherElements (#31643, #31994, #31995, #31996, #31998, #32014, #32029, #32030).
Fixed overflow in CUDA reduction scans and Softmax offset arithmetic, and handled zero-sized outputs in CUDA random-generator kernels (#32137, #32330, #31997).
Fixed CUDA MultiHeadAttention shared-cache scratch lifetimes and kept CudaAsyncBuffer staging storage alive across CUDA graph replay (#31968, #32121).
Fixed WebGPU out-of-bounds subgroup-matrix loads for partial tiles, zero-initialized writable device-allocator buffers, and rejected foreign GPU handles in built-in data transfers (#32364, #32063, #32317).

Dependencies and Tooling

Upgraded Protobuf to 33.6 and refreshed Python documentation dependencies, including an ONNX security-related update (#29906, #32190, #32424).
Updated JavaScript dependencies including js-yaml, joi, fast-uri, and the Next.js end-to-end fixture (#32397, #32486, #32488, #32505, #32508).
Pinned GitHub Actions to full-length commit SHAs and strengthened packaging infrastructure with authenticated package feeds and NPM network isolation (#32176, #32005, #32440).

New Features

Core APIs & Runtime

Added Go bindings for the ONNX Runtime C API (#29615).
Extended memory importing with host-pointer support and added access to preallocated outputs through KernelContext::GetPreallocatedOutput (#29726, #32089).
Added packed-attention workspace recipes and estimates, and made workspace input-shape handling aware of optional inputs (#32283, #32321, #32312).
Added DeepSeek Engram contrib operators, EngramGate and NGramHashMapping, and expanded kernel coverage for Qwen-3.5 operators (#32268, #32106).

Plugin Execution Providers

... (truncated)

1.29.1

This is a patch release on top of v1.29.0, containing GroupQueryAttention capability and KV-cache layout improvements, plugin Execution Provider performance tooling updates, and targeted graph and optimizer fixes.

GroupQueryAttention

Added bidirectional GroupQueryAttention support on CPU and CUDA through a backward-compatible causal attribute, with explicit handling for unsupported execution paths (#31704)
Added a session option and Execution Provider metadata contract for using the BNHS Value KV-cache layout, with graph transformations that preserve compatibility with the existing BNSH operator schema (#32139)
Added CPU support for attention_bias with a sliding-window KV cache, including explicit position IDs and post-eviction bias indexing (#32302)

Runtime and Performance Tools

Fixed Compile API model serialization when output-model and custom initializer-location callbacks are used together, preventing duplicate graph fields in emitted models (#32303)
Updated onnxruntime_perf_test to use plugin Execution Provider device allocators for generated inputs, loaded test data, and pre-allocated outputs, avoiding unnecessary per-run host/device copies (#32244)

Bug Fixes and Documentation

Hardened FastGelu fusion to skip malformed Mul and Pow patterns (#32016)
Added validation for in-memory external initializer references, rejecting unregistered or mismatched data before graph transformation (#32042)
Restored the C API documentation workflow by switching the pinned Doxygen download to the official GitHub release asset (#32210)

Contributors

Thanks to our 7 contributors for this release!

@adrastogi, @apsonawane, @edgchen1, @javier-intel, @jnagi-intel, @tianleiwu, @Wayne-Ch

_{Release highlights were drafted with AI assistance and are subject to release-team review.}

Full Changelog: v1.29.0...v1.29.1

1.29.0 Announcements & Breaking Changes

onnxruntime-web has announced the deprecation of WebGL and JSEP. The native WebGPU EP is the recommended path going forward. See the deprecation and migration plans for details (#29716, #31683).
POSIX telemetry is now available on Linux, macOS, Android, and iOS when ONNX Runtime is built with telemetry enabled. It does not change the public ABI, WebAssembly remains telemetry-free, and setting ORT_DISABLE_TELEMETRY=1 before initialization disables non-Windows telemetry for the process (#27379, #29872).
The unused internal onnxruntime/python/tools/tensorrt dashboard tooling was removed. This does not affect the TensorRT Execution Provider APIs (#29395).

Security Fixes

Path, bounds, and input validation

Fixed a path traversal vulnerability in TensorRT and NvTensorRTRTX engine refitting by making external-data path validation unconditional (#29396).
Validated the CPU MoE k attribute against the number of experts and fixed a CPU TensorScatter security issue (#29907, #29916).
Added missing rank, shape, and parameter validation for pooling, LSTM and DynamicQuantizeLSTM, Sampling, FeatureVectorizer, SkipLayerNorm, QLinearConv, Whisper decoding, RNN activations, GridSample, contrib Range, and CropAndResize (#29254, #29255, #29265, #29579, #29595, #29605, #29871, #31636, #31671, #31675, #31676, #31684).
Hardened CUDA indexing and buffer handling in GridSample, transpose, GatherBlockQuantized, InstanceNormalization, LayerNorm/RMSNorm, BeamSearch, DeformConv, AveragePool, and MaxPool (#29581, #29631, #29638, #31640, #31642, #31644, #31645, #31647, #31650).
Fixed packed sub-byte tensor over-copying in OrtApi::GetValue and validated DML constant tensor byte sizes (#29157, #31665).

Supply chain and tooling

Updated npm lockfiles, refreshed the Next.js end-to-end fixture lockfile for security advisories, and upgraded adm-zip for onnxruntime-node (#29827, #29926, #31192).

New Features

Core APIs & Runtime

Default intra-op and inter-op thread-pool sizes can now be set with ORT_INTRA_OP_NUM_THREADS and ORT_INTER_OP_NUM_THREADS. Explicit thread settings still take precedence, and 0 preserves machine-sized defaults (#29688).
Added weightless-model support for all initializer types, allowed zero-input EpContext nodes, and wired maximum-shape inference into workspace estimation (#29607, #29799, #31613).
Added ONNX-domain support for rotary embedding and a fused MRotaryEmbedding contrib operator for Qwen mRoPE variants (#29261, #31728).
Added multi-shape profiling to onnxruntime_perf_test through --data_shape, plus verbose graph-transformer tracing and broader inference-session error-path coverage (#29555, #29558, #29569, #29571).

Execution Provider ABI & Plugin EPs

WebGPU now supports device-free compile-only sessions for offline graph transformation (#29681).
Expanded CUDA plugin EP packaging and testing, including Windows ARM64 package and size options, updated package outputs, and aligned architecture selections across Python, C API, TensorRT, Node.js, and plugin packages (#31635, #31722, #31992).
Improved plugin lifecycle handling by unloading failed EP library loads and fixing allocator-deleter lifetime (#29634, #29770).

Execution Provider Updates

NVIDIA CUDA EP

Attention and decoding

Added PagedAttention with quantized KV cache, XQA decode, MLA, QK-Norm, and head-sink support (#29912).
Extended quantized KV-cache support with attention sinks, independent and per-channel scales, sliding-window cache support, and a fused K/V dequantization launch (#29900, #29904, #31480).
Added a cuDNN SDPA decode tier to the standard ONNX Attention CUDA kernel and enabled cuDNN SDPA for contrib Attention (#29715, #29717).
Added attention_bias support to the GroupQueryAttention unfused path and state_window support to LinearAttention and CausalConvWithState for MTP (#29525, #31157).
Fixed LinearAttention on GPUs with limited shared memory (#31982).

MoE and quantized GEMM

Added NVFP4 QMoE, including native FP4xFP4 prefill on SM120, faster decode GEMV, fused routing/finalization paths, and reduced activation and weight-dequantization overhead (#29697, #29824, #29887, #29919, #31156, #31159, #31349, #31479).
... (truncated)

1.28.3

This is a patch release on top of v1.28.2, containing memory-safety and model-validation fixes, a plugin execution fix, and packaging infrastructure updates.

Highlights

Bug Fixes

Fixed an out-of-bounds read in EmbedLayerNormalization shape inference when beta is a scalar (#32610).
Fixed a heap buffer overflow when reusing a packed sub-byte buffer for a full-byte tensor (#32611).
Fixed an out-of-bounds read when a Loop or Scan body input is also an initializer (#32609).
Hardened shape inference for applicable contrib operators, including GroupQueryAttention, SparseAttention, and CausalConvWithState (#32607).
Fixed out-of-bounds reads in ConvTransposeWithDynamicPads and InferenceContextImpl::getInputData (#32679, #32681).
Rejected invalid graph structures: inputs to a zero-input operator schema and subgraphs on non-control-flow nodes (#32633, #32641).
Preserved streams during single-tensor data transfers in the plugin EP (#32666).

Build and Test Reliability

Unblocked packaging with Linux image prerequisites and an authenticated ARM64 pip index, mirrored Dawn checkouts, authenticated Android pip and Gradle feeds, and authenticated NuGet feeds for mobile workloads (#31724, #29743, #32400, #32005).
Installed uuid-dev for the Linux minimal CoreML build and removed the Hugging Face download dependency from a quantization test (#32491, #32443).

Contributors

Thanks to our 10 contributors for this release!

@wangw-1991, @bbernhar, @shiyi9801, @tianleiwu, @adrastogi, @eserscor, @jiafatom, @miaobin, @sanaa-hamel-microsoft, @xiaofeihan1

Full Changelog: v1.28.2...v1.28.3

These release notes were drafted with assistance from GitHub Copilot.

1.28.2

This is a patch release on top of v1.28.1, containing a targeted fix for Compile API model serialization.

Highlights

Bug Fixes

Fixed Compile API callback serialization to prevent duplicate graph nodes, inputs, outputs, and value information in emitted optimized models, including models with embedded or external initializers (#32303)

Contributors

Thanks to our contributor for this release!

@adrastogi

Full Changelog: v1.28.1...v1.28.2

These release notes were drafted with assistance from GitHub Copilot.

1.28.1

This is a patch release on top of v1.28.0, containing support for device-free WebGPU compilation, improved compatibility with sandboxed Windows processes, and targeted graph-validation fixes.

WebGPU EP

Added support for device-free compile-only sessions, enabling offline graph transformation and optimized-model serialization without access to GPU hardware (#29681)

Bug Fixes

Prevented an access violation in Windows processes under Win32k lockdown by skipping DXGI device discovery (#29755)
Allowed zero-input EPContext nodes, aligning their schema with support for compiling zero-input models (#29799)
Hardened FastGelu fusion to skip malformed Mul and Pow patterns (#32016)
Added validation for in-memory external initializer references, rejecting unregistered or mismatched data before graph transformation (#32042)

Contributors

Thanks to our 4 contributors for this release!

@apsonawane, @shiyi9801, @adrastogi, @mingmingtasd

Full Changelog: v1.28.0...v1.28.1

1.28.0 Announcements & Breaking Changes

Upgraded to ONNX 1.22.0 and protobuf 6.33.5 (#28754, #29606, #28967). Graph optimizer opset version checks were updated accordingly (#28966).
cuDNN and cuFFT are now optional at runtime for the CUDA EP, and nvrtc is no longer linked, which significantly reduces the required CUDA redistributable footprint (#29252, #29808, #29705, #29620).
An experimental C/C++ API surface was introduced. OrtModelPackageApi now lives in the experimental C API and may change in future releases (#28746, #29142, #28990).
Deprecated / removed:
- SkipLayerNorm strict mode is deprecated (#29388).
- The TensorRT fused causal attention kernels were removed from the CUDA EP (#29143).
- The dynamic WGSL generator (duktape/Node) path was removed in favor of the Python wgsl-gen implementation (#29141, #28355).
- CUDA_QUANT_PREPROCESS is off by default (#29687).
NPM packages are now published from the CUDA 13 pipeline (#28773).
The CUDA 12.8 package architecture list was refreshed for this release (#29711).

Security Fixes

Memory safety & input validation

Hardened the ORT FlatBuffer model loader against malformed buffers, and removed now-redundant table offset validation (#28186, #29068)
Fixed type confusion in raw-pointer bind_input causing an out-of-bounds write (#28839)
Fixed out-of-bounds pointer in TensorAt for sub-byte packed types (#28973)
Fixed arbitrary memory read, out-of-bounds dereference, and other OOB accesses in kernels (#28991, #29011, #29012, #29014)
Validated Col2Im inputs to prevent heap over-read (#28706)
Hardened CropAndResize against malformed crop_size tensors (#28766)
Validated BeamSearch vocab_size against logits width (#28774)
Fixed bounds in WhisperDecoderSubgraph::CreateInitialFeeds (#29239)
Validated SparseAttention CSR indices/key lengths and rejected zero-dimension block_row_indices (#29015, #29242)
Clamped derived sequence lengths and KV-cache index in CUDA GroupQueryAttention, and fixed a CPU GQA out-of-bounds read in the past-KV buffer (#29240, #29447)
Clamped 1D attention mask_index to valid bounds (#29449)
Validated MaxpoolWithMask kernel rank against input spatial rank (#29253)
Rejected CUDA BERT EmbedLayerNorm/SkipLayerNorm shapes exceeding 32-bit output indexing (#29264)
Fixed the optional-output guard in DecoderAttention/MultiHeadAttention shape inference and negative-axis handling in ExpandDims shape inference (#29268, #29448)
Fixed TreeEnsemble target id validation and added input validation to LinearClassifier (#29293, #29060)
Fixed DynamicQuantizeLSTM zero-point/scale validation typos (#29462)
Handled non-trivially-copyable types in Loop/Scan output concatenation (#29397)
Normalized bool tensor raw_data to {0, 1} on unpack (#29238)
Addressed hardening gaps in Resize, PadFusion, and LoRA handling (#28779, #28780, #28801)
Fixed unbounded lifetime on WithOutputTensor in the Rust bindings (#29251)

Integer overflow & allocation size

Guarded MlasConvPrepare working-buffer products and ConvTranspose pad computation with SafeInt (#29444, #29446)
Fixed signed-int overflow in SamplingState::Init that could cause a heap buffer overflow (#29443)
Hardened QMoE against integer overflow and partial K tiles (#29067)
Validated B/scales/zero-points shape in MatMulNBits::PrePack (#29445)
Pre-checked ConstantOfShape output size against the input initializer before constant folding (#28751)
Fixed integer overflow in RKNPU implicit bias allocation (#29249)
Fixed WebGPU out-of-bounds reads in Pad (int64/int32 truncation), Slice, and GatherBlockQuantized (#28721, #28704, #28718)

Supply chain & tooling

... (truncated)

1.27.1

This is a patch release on top of v1.27.0, containing targeted bug fixes, a CUDA QMoE decode-path optimization, and CI/build infrastructure fixes.

Bug Fixes

[MLAS] Fixed an igemm regression in the KleidiAI path (#28571)
Fixed a QMoE CPU livelock by eliminating nested intra-op parallelism (#29081)
Fixed a regression in graph-capture session initialization that rejected an empty graph (#29457)
Fixed CustomOp forward compatibility by capping the version instead of rejecting it (#29574)

Performance

NVIDIA CUDA EP

Added a QMoE GEMV fast path for batch-1 decode (#29038)

CI & Build Infrastructure

Fixed an incorrect identity for azcopy (#29274)
Fixed a brew install applesimutils failure by trusting the wix/brew tap (#29450)
Upgraded to Xcode 26 (#29468)
Stopped echoing the command when setting a VSO variable in mac-cpu-packing-jobs.yml (#29575)
Fixed the web e2e (npm/vite) and Python DML CI pipelines (#29609)

Contributors

Thanks to our 8 contributors for this release!

@tianleiwu, @chilo-ms, @edgchen1, @adrastogi, @damdoo01-arm, @JonathanC-ARM, @martin-klacer-arm, @sanaa-hamel-microsoft

Full Changelog: v1.27.0...v1.27.1

1.27.0

n.b. This release is targeting ONNX 1.21. ONNX 1.22 will be supported in ORT 1.28.
n.b. This changelog was generated via LLM. Only the contributor list has been verified. As always, only trust the commit history.

Announcements & Breaking Changes

CUDA 12 package files are now explicitly named as such.
CUDA 12 packages are deprecated, please move to CUDA 13 ASAP.

Security Fixes

Fixed out-of-bounds read in SoftmaxCrossEntropyLoss via label bounds validation (#28004)
Hardened OneHot input validation and output-size computation (#28014)
Added SafeInt overflow protection in Expand and capped constant-folding output sizes (#28055)
Bounded total output allocation size in Tile kernel (#28070)
Added mask/input shape consistency checks in MaxpoolWithMask::Compute (#28223)
Fixed BitShift UB for shift amounts greater than or equal to bit width (#28272)
Validated sequence bounds in GQA (seqlens_k vs cos_cache) (#28277)
Validated conv bias shape in WordConvEmbedding to prevent OOB reads (#28279)
Fixed int32 overflow in CUDA Cast and UnaryElementWise kernels for very large tensors (#28386)
Fixed out-of-bounds read in CropBase scale handling (#28399)
Fixed rank-underflow bug in Inverse kernel trailing-dimension indexing (#28400)
Added sparse tensor external file path validation and additional external-path hardening (#28408, #28709, #28725)
Switched remaining torch.load() calls to weights_only=True (#28421)
Added CPU cache-indirection beam-index validation (#28486)
Added additional overflow/bounds checks and test coverage in runtime buffers (#28713, #28747)

New Features

Execution Provider Plugin API

Added zero-copy I/O for plugin EPs with HOST_ACCESSIBLE memory (#28037)
Added OrtEp::OnSessionInitializationEnd() callback (#28319)
Added plugin EP session-options getters (#28377)
Added CUDA Plugin EP provider options for streams and external allocators (#28603)

Core APIs & Runtime

Added support for ONNX overloaded functions (IR v10+) (#28275)
Added FLOAT8E8M0 datatype support in ONNX Runtime (#28381)
Added CPU Cast support for FLOAT8E8M0 (#28435)
Added kOrtEpDevice_EpMetadataKey_OSDriverVersion example and docs (#28282)

Quantization & Training Tooling

Added calibration cache support to quantize_static (#28221)
Added ActivationRestrictedAsymmetric quantization option (#28237)
... (truncated)

1.26.0

n.b. The following was generated via LLM from Git history. Only the contributor list has been verified.

Announcement - Breaking Changes

Support for CUDA 12 will be removed in 1.27.0.
- CUDA 13 will continue to be published as onnxruntime-<os>-<arch>-gpu_cuda13-<version>.<ext>
CUDA runtime will be moving soon to a dedicated Execution Provider (EP) instead of a published package from ORT core.

Highlights

Added optional memory mapping for .ort model loads (#28164).
Added RISC-V Vector (RVV) support for CPU EP (#28261).
OpenVINO EP upgraded for 1.26.0 development release (#28297).
WebGPU gained GridSample support (#28264) and Split-K improvements (#28151).
CUDA plugin EP gained graph support (#28002), profiling API (#28216).

Security and Reliability Hardening

Replaced unrestricted Python setattr configuration with an allowlist (#28083).
Hardened multiple OOB and overflow scenarios across ML and core ops:
- Attention mask index OOB write (#27789).
- MaxPoolGrad indices bounds validation (#27903).
- SVM and TreeEnsemble bounds/security fixes (#27950, #27951, #27952, #27989).
- RNN sequence_lens OOB read and integer overflow handling (#28052, #28003).
- GroupQueryAttention seqlens_k bounds validation and compatibility follow-up (#28031, #28259).
- MatMulBnb4 and ML coefficient SafeInt checks (#27995, #28001).
- CUDA Gather int32 overflow fix (#28108).
- GridSample float->int64 cast hardening for NaN/Inf/out-of-range coords (#28302).
Fixed session logger use-after-free during EP teardown under verbose logging (#28274).

CUDA, Attention, and MLAS

Filled CUDA opset/operator gaps and extended support:
- Transpose opset 23 -> 25 (#27740).
- QuantizeLinear/DequantizeLinear opset 25 (#28046).
- CUDA TopK INT8/INT16/UINT8 support (#27862).
- LabelEncoder CUDA support for numeric types (#28045).
Attention/GQA improvements:
- Fixed ONNX Attention min-bias alignment crash on SM<80 and masked-batch NaN behavior (#27831).
- Added FP32 QK accumulation path for unfused GQA attention (#28198).
- Added CUDART_VERSION reduction compatibility in GQA attention (#28296).
- Fixed CUDA 13 build error in GQA unfused attention (#28309).
- PagedAttention fallback for SM<80 fp16 (#28200).
MLAS updates:
- FP16 Gelu enablement (#26815).
- Arm64 BF16 fast-math conv kernels for NCHW/NCHWc paths (#27878).

WebGPU, WebNN, and JavaScript

WebGPU feature and correctness updates:
... (truncated)

1.25.1

n.b. This changelog is LLM generated. Only the contributor listing has been verified.

ONNX Runtime Release 1.25.1

📢 Announcements & Breaking Changes

ONNX Op Updates

Enhanced ONNX operator support with new opset versions: Reshape (opset 25), Transpose (opset 24) (#27752)

✨ New Features

📊 New ONNX Ops & Model Support

LinearAttention and CausalConvState operators for Qwen3.5 model support (#27907)
RotaryEmbedding (RotEMB) and RMSNorm operators added (#27752)
Linear Attention signature support (#27842)

🌐 Web & JavaScript

WebGPU EP

Qwen3.5 model support on WebGPU execution provider (#27996)
QMoE 1-token decode path optimization — fused operations to reduce GPU dispatches for improved performance (#27998)

🐛 Bug Fixes

Core Runtime Fixes

Improved filesystem error messages during Linux device discovery for better debugging experience (#27289)
Fixed missing include for SetRawDataInTensorProto in NVIDIA TensorRT RTX tests (#28065)

🙏 Contributors

Thanks to our 7 contributors for this release:
@guschmue, @sanaa-hamel-microsoft, @apsonawane, @eserscor, @ishwar-raut1, @qjia7, @theHamsta

Full Changelog: microsoft/onnxruntime@v1.25.0...v1.25.1

1.25.0 📢 Announcements & Breaking Changes

Build & Platform

C++20 is now required to build ONNX Runtime from source. Minimum toolchains: MSVC 19.29+, GCC 10+, Clang 10+. Users of prebuilt packages are unaffected. (#27178)
CUDA minimum version raised to 12.0 — CUDA 11.x is no longer supported. Users pinned to CUDA 11.x should stay on ORT 1.24.x or upgrade their CUDA toolkit/driver. (#27570)
ONNX upgraded to 1.21.0 (#27601)
sympy is now an optional dependency for Python builds. (#27200)

Execution Provider Changes

ArmNN EP has been removed. Users should remove any --use_armnn build flags and migrate to the MLAS/KleidiAI-backed CPU EP or QNN EP for Qualcomm hardware. (#27447)

API Version

ORT_API_VERSION updated to 25. (#27280)

🔒 Security Fixes

Fixed potential integer truncation leading to heap out-of-bounds read/write (#27544)
Addressed Pad Reflect vulnerability (#27652)
Security fix for transpose optimizer (#27555)
Upgraded minimatch 3.1.2 → 3.1.4 for CVE-2026-27904 (#27667)
Hardened shell command handling for constant strings (#27840)
Added validation of onnx::TensorProto data size before allocation (#27547)
Cleaned up external data path validation (#27539)
Fixed misaligned address reads for tensor attributes from raw data buffers (#27312)
Fixed CPU Attention overflow issue (#27822)
Fixed CPU LRN integer overflow issues (#27886)
Additional input validation hardening:
- Tile kernel dim overflow (#27566)
- Out-of-bounds read in cross entropy (#27568)
- TreeEnsembleClassifier attributes (#27571)
- AffineGrid (#27572)
- EmbedLayerNorm position_ids (#27573)
- RotaryEmbedding position_ids (#27597)
- RoiAlign batch_indices (#27603)
- MaxUnpool indices (#27432)
- QMoECPU swiglu OOB (#27748)
- SVMClassifier initializer (#27699)
- Col2Im SafeInt (#27625)

✨ New Features

🔌 Execution Provider Plugin API & CUDA Plugin EP

... (truncated)

1.24.4

This is a patch release for ONNX Runtime 1.24, containing bug fixes and execution provider updates.

Bug Fixes

Core: Added PCI bus fallback for Linux GPU device discovery in containerized environments (e.g., AKS/Kubernetes) where nvidia-drm is not loaded but GPU PCI devices are still exposed via sysfs. (#27591)
Plugin EP: Fixed null pointer dereference when iterating output spans in GetOutputIndex. (#27644)
Plugin EP: Fixed bug that incorrectly assigned duplicate MetaDef IDs to fused nodes in different GraphViews (e.g., then/else branches of an If node), causing session creation to fail with a conflicting kernel error. (#27666)

Execution Provider Updates

QNN EP: Enabled offline x64 compilation with memhandle IO type by deferring rpcmem library loading to inference time. (#27479)
QNN EP: Reverted QNN SDK logging verbosity changes that caused segmentation faults on backend destruction. (#27650)

Build and Infrastructure

Python: Updated python_requires from >=3.10 to >=3.11 to reflect dropped Python 3.10 support. (#27354)
Build: Replaced __builtin_ia32_tpause with the compiler-portable _tpause intrinsic to fix cross-compiler portability issues between GCC and LLVM. (#27607)

Full Changelog: v1.24.3...v1.24.4

Contributors

@derdeljan-msft, @adrianlizarraga, @apwojcik, @baijumeswani, @edgchen1, @mocknen, @tianleiwu, @XXXXRT666

1.24.3

This is a patch release for ONNX Runtime 1.24, containing bug fixes, security improvements, performance enhancements, and execution provider updates.

Security Fixes

Core: Fixed GatherCopyData integer truncation leading to heap out-of-bounds read/write. (#27444)
Core: Fixed RoiAlign heap out-of-bounds read via unchecked batch_indices. (#27543)
Core: Prevent heap OOB from maliciously crafted Lora Adapters. (#27518)
Core: Fixed out-of-bounds access for Resize operation. (#27419)

Bug Fixes

Core: Fixed GatherND division by zero when batch dimensions mismatch. (#27090)
Core: Fixed validation for external data paths for models loaded from bytes. (#27430)
Core: Fixed SkipLayerNorm fusion incorrectly applied when gamma/beta are not 1D. (#27459)
Core: Fixed double-free in TRT EP custom op domain Release functions. (#27471)
Core: Fixed QMoE CPU Operator. (#27360)
Core: Fixed MatmulNBits prepacking scales. (#27412)
Python: Fixed refcount bug in map input conversion that caused shutdown segfault. (#27413)
NuGet: Fixed DllImportResolver. (#27397)
NuGet: Added OrtEnv.DisableDllImportResolver to prevent fatal error on resolver conflict. (#27535)

Performance Improvements

Core: QMoE CPU performance update (up to 4x on 4-bit). (#27364)
Core: Fixed O(n²) model load time for TreeEnsemble with categorical feature chains. (#27391)

Execution Provider Updates

NvTensorRtRtx EP:
- Avoid repetitive creation of fp4/fp8 native-custom-op domains. (#27192)
- Added missing override specifiers to suppress warnings. (#27288)
- DQ→MatMulNBits fusion transformer. (#27466)
WebGPU:
- Used embedded WASM module in Blob URL workers when wasmBinary is provided. (#27318)
- Fixed usage of wasmBinary together with a blob URL for .mjs. (#27411)
- Removed the unhelpful "Unknown CPU vendor" warning. (#27399)
- Allows new memory info name for WebGPU. (#27475)
MLAS:
- Added DynamicQGemm function pointers and ukernel interface. (#27403)
- Fixed error where bytes is not assigned for dynamic qgemm pack b size. (#27421)
VitisAI EP: Removed s_kernel_registry_vitisaiep.reset() in deinitialize_vitisai_ep(). (#27295)
Plugin EPs: Added "library_path" metadata entry to OrtEpDevice instances for plugin and provider bridge EPs. (#27522)

Build and Infrastructure

Pipelines:
- Build Windows ARM64X binaries as part of packaging pipeline. (#27316)
- Moved JAR testing pipelines to canonical pipeline template. (#27480)
Python: Enabled Python 3.14 CI and upgraded dependencies. (#27401)
Build: Suppressed spurious Array Out of Bounds warnings produced by GCC 14.2 compiler on Linux builds. (#27454)
Build: Fixed -Warray-bounds build error in MLAS on clang 17+. (#27499)
Telemetry: Added/Updated telemetry events. (#27356)
Config: Increased kMaxValueLength to 8192. (#27521)

... (truncated)

1.24.2

This is a patch release for ONNX Runtime 1.24, containing several bug fixes, security improvements, and execution provider updates.

Bug Fixes

NuGet: Fixed native library loading issues in the ONNX Runtime NuGet package on Linux and macOS. (#27266)
macOS: Fixed Java support and Jar testing on macOS ARM64. (#27271)
Core: Enable Robust Symlink Support for External Data for Huggingface Hub Cache. (#27374)
Core: Added boundary checks for SparseTensorProtoToDenseTensorProto to improve robustness. (#27323)
Security: Fixed an out-of-bounds read vulnerability in ArrayFeatureExtractor. (#27275)

Execution Provider Updates

MLAS: Fixed flakiness and accuracy issues in Lut GEMM (MatMulNBitsLutGemm). (#27216)
QNN: Enabled 64-bit UDMA mode for HTP target v81 or above. (#26677)
WebGPU:
- Used LazyRelease for prepack allocator. (#27077)
- Fixed ConvTranspose bias validation in both TypeScript and C++ implementations. (#27213)
OpenVINO (OVEP): Patch to reduce resident memory by reusing weight files across shared contexts. (#27238)
DNNL: Fixed DNNL build error by including missing files. (#27334)

Build and Infrastructure

CUDA:
- Added support for CUDA architecture family codes (suffix 'f') introduced in CUDA 12.9. (#27278)
- Fixed build errors and warnings for various CUDA versions (12.8, 13.0, 13.1.1). (#27276)
- Applied patches for Abseil CUDA warnings. (#27096, #27126)
Pipelines:
- Fixed Python packaging pipeline for Windows ARM64 and release. (#27339, #27350, #27299)
- Fixed DirectML NuGet pipeline to correctly bundle x64 and ARM64 binaries for release. (#27349)
- Updated Microsoft.ML.OnnxRuntime.Foundry package for Windows ARM64 support and NuGet signing. (#27294)
Testing: Updated BaseTester to support plugin EPs with both compiled nodes and registered kernels. (#27176)
Telemetry: Added service name and framework name to telemetry events for better usage understanding on Windows. (#27252, #27256)

Full Changelog: v1.24.1...v1.24.2

Contributors

@tianleiwu, @hariharans29, @edgchen1, @xiaofeihan1, @adrianlizarraga, @angelser, @angelserMS, @ankitm3k, @baijumeswani, @bmehta001, @ericcraw, @eserscor, @fs-eire, @guschmue, @mc-nv, @qjia7, @qti-monumeen, @titaiwangms, @yuslepukhin

Commits viewable in compare view.

Updated NAudio from 2.2.1 to 2.4.0.

Release notes

Sourced from NAudio's releases.

2.4.0

Added DeviceCount and GetCapabilities static methods to WaveOutEvent so output
devices can be enumerated without referencing NAudio.WinForms (#1331, #777)
Fixed WASAPI and Media Foundation interop under Unity's Mono runtime, which marshalled
formatted class parameters as COM interfaces; they are now explicitly marked
[MarshalAs(UnmanagedType.LPStruct)] (#1414)

2.3.0

Performance improvements for PropertyStore and Core Audio property access (#1206)
Improved multi-channel playback compatibility in WASAPI exclusive mode (#1234)
Fixed a bug that prevented WasapiCapture from using exclusive mode (#1122)
Fixed RF64 header parsing in WaveFileChunkReader.ReadWaveHeader (#1231)
PropVariant now supports VT_EMPTY by returning null (#1071)
Better exception when calling disposed AcmStream.Convert (#1108)
Fixed AcmStreamHeader finalizer crash with corrupted data (#1199)
Added net6.0 targets for NAudio.Asio and NAudio.WinMM to remove registry dependency (#1139)
Updating TFMs, modernizing the UAP project to WinUI

Commits viewable in compare view.

Updated org.k2fsa.sherpa.onnx from 1.13.0 to 1.13.8.

Release notes

Sourced from org.k2fsa.sherpa.onnx's releases.

1.13.8 What's Changed

Fix releasing by @csukuangfj in Fix releasing k2-fsa/sherpa-onnx#3911
Fix data race on shared PRNG in FunASR-Nano and Qwen3-ASR offline recognizers by @fra-shipper in Fix data race on shared PRNG in FunASR-Nano and Qwen3-ASR offline recognizers k2-fsa/sherpa-onnx#3912
Support building within a termux terminal on Android devices by @csukuangfj in Support building within a termux terminal on Android devices k2-fsa/sherpa-onnx#3916
Support sherpa-onnx with Python in Termux on Android by @csukuangfj in Support sherpa-onnx with Python in Termux on Android k2-fsa/sherpa-onnx#3922
Fix Go API tests in CI for Windows by @csukuangfj in Fix Go API tests in CI for Windows k2-fsa/sherpa-onnx#3932
Add Kokoro v1.0 em_santa voice by @kroryan in Add Kokoro v1.0 em_santa voice k2-fsa/sherpa-onnx#3928
Add Nabra-82M Arabic TTS conversion scripts for Kokoro runtime by @marwanelamami in Add Nabra-82M Arabic TTS conversion scripts for Kokoro runtime k2-fsa/sherpa-onnx#3898
Fix Cohere Transcribe hallucinating sentences on silent audio by @kyo-zzz in Fix Cohere Transcribe hallucinating sentences on silent audio k2-fsa/sherpa-onnx#3924
Fix Moonshine v2 hallucinating text on silent audio by @kyo-zzz in Fix Moonshine v2 hallucinating text on silent audio k2-fsa/sherpa-onnx#3923
Fix FunASR-Nano hallucinating text on silent audio by @kyo-zzz in Fix FunASR-Nano hallucinating text on silent audio k2-fsa/sherpa-onnx#3921
Fix Canary empty transcript when the first decoded token is eos by @kyo-zzz in Fix Canary empty transcript when the first decoded token is eos k2-fsa/sherpa-onnx#3920
Add Intel NPU support through OpenVINO by @jacob-vincent-mink in Add Intel NPU support through OpenVINO k2-fsa/sherpa-onnx#3910
Add per-segment confidence computation for OfflineSpeakerDiarization by @matiaslin in Add per-segment confidence computation for OfflineSpeakerDiarization k2-fsa/sherpa-onnx#3881
Upload the nabra 82M Arabic TTS int8 model by @csukuangfj in Upload the nabra 82M Arabic TTS int8 model k2-fsa/sherpa-onnx#3933
Add Go API for Windows arm64 by @csukuangfj in Add Go API for Windows arm64 k2-fsa/sherpa-onnx#3934
Add Go bindings for OfflineSpeakerDiarization confidence computation by @matiaslin in Add Go bindings for OfflineSpeakerDiarization confidence computation k2-fsa/sherpa-onnx#3936
fix(nemo/qnn/parakeet-ctc): wrapper.py raises NameError on undefined feat_dim by @Anai-Guo in fix(nemo/qnn/parakeet-ctc): wrapper.py raises NameError on undefined feat_dim k2-fsa/sherpa-onnx#3937
Fix CI tests by @csukuangfj in Fix CI tests k2-fsa/sherpa-onnx#3940
Update onnxruntime to v1.28.2 by @csukuangfj in Update onnxruntime to v1.28.2 k2-fsa/sherpa-onnx#3935
Add robust download retry logic to all test scripts by @csukuangfj in Add robust download retry logic to all test scripts k2-fsa/sherpa-onnx#3941
Support running Rust API examples on termux within Android by @csukuangfj in Support running Rust API examples on termux within Android k2-fsa/sherpa-onnx#3942
Add confidence computation support for speaker diarization to JNI. by @csukuangfj in Add confidence computation support for speaker diarization to JNI. k2-fsa/sherpa-onnx#3943
fix(python-tests): UnboundLocalError instead of the intended ValueError in test_fast_clustering by @Anai-Guo in fix(python-tests): UnboundLocalError instead of the intended ValueError in test_fast_clustering k2-fsa/sherpa-onnx#3944
Test using uv to install sherpa-onnx by @csukuangfj in Test using uv to install sherpa-onnx k2-fsa/sherpa-onnx#3946
Release v1.13.8 by @csukuangfj in Release v1.13.8 k2-fsa/sherpa-onnx#3945

New Contributors

@kroryan made their first contribution ...

_De...

Description has been truncated

Bumps Microsoft.ML.OnnxRuntime from 1.24.1 to 1.30.0 Bumps NAudio from 2.2.1 to 2.4.0 Bumps org.k2fsa.sherpa.onnx from 1.13.0 to 1.13.8 Bumps SharpCompress from 0.48.0 to 0.50.4 --- updated-dependencies: - dependency-name: Microsoft.ML.OnnxRuntime dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: NAudio dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch - dependency-name: org.k2fsa.sherpa.onnx dependency-version: 1.13.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-patch - dependency-name: SharpCompress dependency-version: 0.50.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-08T23:13:10Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: f1565986-ea6f-4cd6-a5dd-d06d8c24b295

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

SeoFood · 2026-10-09T08:38:26Z

@dependabot rebase

SeoFood · 2026-10-09T08:52:49Z

Superseded by #612 (NAudio was aligned on 2.4.0 in #611; the remaining updates moved to the new group PR).

dependabot · 2026-10-09T08:52:54Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 8, 2026

SeoFood mentioned this pull request Oct 9, 2026

Reference NAudio.Wasapi directly and align NAudio packages on 2.4.0 #611

Merged

6 tasks done

SeoFood closed this Oct 9, 2026

dependabot Bot deleted the dependabot/nuget/nuget-minor-patch-47bae30156 branch October 9, 2026 08:53

Navigation Menu

Repository navigation

Bump the nuget-minor-patch group with 4 updates - #606

Bump the nuget-minor-patch group with 4 updates#606
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-minor-patch-47bae30156

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 8, 2026

Review skipped

Uh oh!

SeoFood commented Oct 9, 2026

Uh oh!

SeoFood commented Oct 9, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.30.0

Highlights

Announcements & Compatibility

Security & Reliability

Model Loading, Memory, and Input Validation

GPU Bounds and Resource Lifetimes

Dependencies and Tooling

New Features

Core APIs & Runtime

Plugin Execution Providers

1.29.1

GroupQueryAttention

Runtime and Performance Tools

Bug Fixes and Documentation

Contributors

1.29.0

Announcements & Breaking Changes

Security Fixes

Path, bounds, and input validation

Supply chain and tooling

New Features

Core APIs & Runtime

Execution Provider ABI & Plugin EPs

Execution Provider Updates

NVIDIA CUDA EP

Attention and decoding

MoE and quantized GEMM

1.28.3

Highlights

Bug Fixes

Build and Test Reliability

Contributors

1.28.2

Highlights

Bug Fixes

Contributors

1.28.1

WebGPU EP

Bug Fixes

Contributors

1.28.0

Announcements & Breaking Changes

Security Fixes

Memory safety & input validation

Integer overflow & allocation size

Supply chain & tooling

1.27.1

Bug Fixes

Performance

NVIDIA CUDA EP

CI & Build Infrastructure

Contributors

1.27.0

Announcements & Breaking Changes

Security Fixes

New Features

Execution Provider Plugin API

Core APIs & Runtime

Quantization & Training Tooling

1.26.0

Announcement - Breaking Changes

Highlights

Security and Reliability Hardening

CUDA, Attention, and MLAS

WebGPU, WebNN, and JavaScript

1.25.1

ONNX Runtime Release 1.25.1

📢 Announcements & Breaking Changes

ONNX Op Updates

✨ New Features

📊 New ONNX Ops & Model Support

🌐 Web & JavaScript

WebGPU EP

🐛 Bug Fixes

Core Runtime Fixes

🙏 Contributors

1.25.0

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading