Skip to content

[Auto-Update] sglang 0.5.12 - #6103

Merged
Eren-Jeager123 merged 3 commits into
mainfrom
auto-update/sglang-0.5.12
May 18, 2026
Merged

Eren-Jeager123 merged 3 commits into
mainfrom
auto-update/sglang-0.5.12

Conversation

@aws-deep-learning-containers-ci

@aws-deep-learning-containers-ci aws-deep-learning-containers-ci Bot commented May 16, 2026 •

Copy link
Copy Markdown
Contributor

Auto-Update: sglang 0.5.12

Upstream Release: sgl-project/sglang v0.5.12
Previous Version: 0.5.11
New Version: 0.5.12

Agent-fix: CVE allowlisting (attempt 1 — applied)

The currency fix agent allowlisted 6 CVEs:

  • CVE-2026-44513 (diffusers) — fix requires pre-release safetensors>=0.8.0rc0, can't pin
  • 5 go/stdlib CVEs in mooncake's vendored libetcd_wrapper.so — can't patch without upstream rebuild

Agent-fix: upstream test failure (attempt 2 — failed)

The agent attempted to fix upstream-tests / srt-backend-test but couldn't — the issue is in the upstream sglang v0.5.12 source, not our code.

What failed: run_suite.py validates that ALL registered test files reference valid suite names before running any tests. One test file (test_unified_radix_cache_kl_hicache.py) registers itself to base-c-test-8-gpu-h200, which doesn't exist in v0.5.12's valid suite list.

Root cause: Shortly before the v0.5.12 release, sglang renamed their CI suites from stage-* to base-* (sgl-project/sglang#25420). The rename was incomplete — some test files got the new base-* names but run_suite.py still only recognizes the old stage-* names. This is a known upstream issue (sgl-project/sglang#25450), already fixed on sglang main but after the v0.5.12 tag.

Impact: Our workflow runs --suite stage-a-test-1 which is valid, but the global validation check fails on the unrelated test file before any tests execute.

Fix: Remove the offending test file before running run_suite.py (it's for 8-GPU H200 testing, unrelated to our suite).

What to Review

  • Verify the upstream base image exists on Docker Hub
  • Review auto-detected CUDA/Python/OS version updates if present
  • Confirm no breaking changes in the upstream release notes

@aws-deep-learning-containers-ci aws-deep-learning-containers-ci Bot added auto-update Automated PR created by the upstream release tracker. Triggers version detection workflow. authorized labels May 16, 2026
@aws-deep-learning-containers-ci

Copy link
Copy Markdown
Contributor Author

🤖 Currency Fix Agent running (attempt 1/3).

Agent run: https://github.com/aws/deep-learning-containers/actions/runs/25971100965

…iffusers vulnerabilities in sglang security scan
@aws-deep-learning-containers-ci

Copy link
Copy Markdown
Contributor Author

🤖 Currency Fix Agent running (attempt 2/3).

Agent run: https://github.com/aws/deep-learning-containers/actions/runs/25971368187

sglang v0.5.12 has an incomplete suite rename (stage-* -> base-*)
causing validate_all_suites() to fail before any tests run. Remove
the offending test file for v0.5.12 only.

See: sgl-project/sglang#25450
@Eren-Jeager123
Eren-Jeager123 merged commit b2f4a33 into main May 18, 2026
33 checks passed
@Eren-Jeager123
Eren-Jeager123 deleted the auto-update/sglang-0.5.12 branch May 18, 2026 02:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

authorized auto-update Automated PR created by the upstream release tracker. Triggers version detection workflow.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant