Skip to content

[Auto-Update] sglang 0.5.12 #6103

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Eren-Jeager123 merged 3 commits into from
May 18, 2026
Merged

[Auto-Update] sglang 0.5.12 #6103

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b38bd04
[Auto-Update] sglang 0.5.12
github-actions[bot] May 16, 2026
e982ac3
[agent-fix] Add CVE allowlist entries for go/stdlib in mooncake and d…
May 16, 2026
c005cd2
fix: workaround sglang v0.5.12 invalid suite name in upstream tests
Eren-Jeager123 May 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/config/image/sglang-ec2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ image:
# Build configuration
common:
framework: "sglang"
framework_version: "0.5.11"
framework_version: "0.5.12"
job_type: "general"
python_version: "py312"
cuda_version: "cu130"
Expand Down
2 changes: 1 addition & 1 deletion .github/config/image/sglang-sagemaker.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ image:
# Build configuration
common:
framework: "sglang"
framework_version: "0.5.11"
framework_version: "0.5.12"
job_type: "general"
python_version: "py312"
cuda_version: "cu130"
Expand Down
7 changes: 7 additions & 0 deletions .github/workflows/reusable-sglang-upstream-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,6 +140,13 @@ jobs:
# (sglang.test.ci) from this version are used.
export PYTHONPATH=/workdir/python:${PYTHONPATH:-}

# Workaround: sglang v0.5.12 has an incomplete suite rename
# (stage-* -> base-*) causing validate_all_suites() to fail.
# See: https://github.com/sgl-project/sglang/issues/25450
if [ "${{ inputs.framework-version }}" = "0.5.12" ]; then
rm -f /workdir/test/registered/radix_cache/test_unified_radix_cache_kl_hicache.py
fi

# SRT backend Test with increased timeout
cd /workdir/test
export SGLANG_TIMEOUT=600
Expand Down
2 changes: 1 addition & 1 deletion docker/sglang/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Declare the argument as default to use as input
# base image: https://hub.docker.com/r/lmsysorg/sglang/tags
ARG BASE_IMAGE=lmsysorg/sglang:v0.5.11
ARG BASE_IMAGE=lmsysorg/sglang:v0.5.12

# Use input argument as base image
FROM $BASE_IMAGE AS base
Expand Down
24 changes: 24 additions & 0 deletions test/security/data/ecr_scan_allowlist/sglang/framework_allowlist.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,5 +42,29 @@
{
"vulnerability_id": "CVE-2026-25679",
"reason": "go/stdlib 1.24.12 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild with Go 1.26+"
},
{
"vulnerability_id": "CVE-2026-44513",
"reason": "diffusers 0.37.0 trust_remote_code bypass - transitive dependency not directly used by sglang serving, upgrade requires broader compatibility testing"
},
{
"vulnerability_id": "CVE-2026-39820",
"reason": "go/stdlib 1.25.9 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild with Go 1.26.3+"
},
{
"vulnerability_id": "CVE-2026-33811",
"reason": "go/stdlib 1.25.9 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild with Go 1.26.3+"
},
{
"vulnerability_id": "CVE-2026-33814",
"reason": "go/stdlib 1.25.9 and golang.org/x/net v0.48.0 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild"
},
{
"vulnerability_id": "CVE-2026-42499",
"reason": "go/stdlib 1.25.9 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild with Go 1.26.3+"
},
{
"vulnerability_id": "CVE-2026-39836",
"reason": "go/stdlib 1.25.9 embedded in mooncake libetcd_wrapper.so, cannot patch without upstream mooncake rebuild with Go 1.26.3+"
}
]
Loading