security(deps): bump the inference-dependencies group across 1 directory with 10 updates#544
Conversation
… with 10 updates Bumps the inference-dependencies group with 10 updates in the /evaluation directory: | Package | From | To | | --- | --- | --- | | [numpy](https://github.com/numpy/numpy) | `2.2.6` | `2.4.4` | | [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.2` | `4.3.0` | | [packaging](https://github.com/pypa/packaging) | `25.0` | `26.1` | | [onnxscript](https://github.com/microsoft/onnxscript) | `0.6.2` | `0.7.0` | | [onnxruntime-gpu](https://github.com/microsoft/onnxruntime) | `1.24.4` | `1.25.0` | | [gymnasium](https://github.com/Farama-Foundation/Gymnasium) | `1.2.3` | `1.3.0` | | [torch](https://github.com/pytorch/pytorch) | `2.10.0` | `2.11.0` | | [tensordict](https://github.com/pytorch/tensordict) | `0.12.1` | `0.12.2` | | [lerobot](https://github.com/huggingface/lerobot) | `0.5.0` | `0.5.1` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.13` | `6.152.1` | Updates `numpy` from 2.2.6 to 2.4.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.2.6...v2.4.4) Updates `marshmallow` from 3.26.2 to 4.3.0 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@3.26.2...4.3.0) Updates `packaging` from 25.0 to 26.1 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@25.0...26.1) Updates `onnxscript` from 0.6.2 to 0.7.0 - [Release notes](https://github.com/microsoft/onnxscript/releases) - [Commits](microsoft/onnxscript@v0.6.2...v0.7.0) Updates `onnxruntime-gpu` from 1.24.4 to 1.25.0 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](microsoft/onnxruntime@v1.24.4...v1.25.0) Updates `gymnasium` from 1.2.3 to 1.3.0 - [Release notes](https://github.com/Farama-Foundation/Gymnasium/releases) - [Commits](Farama-Foundation/Gymnasium@v1.2.3...v1.3.0) Updates `torch` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.10.0...v2.11.0) Updates `tensordict` from 0.12.1 to 0.12.2 - [Release notes](https://github.com/pytorch/tensordict/releases) - [Commits](pytorch/tensordict@v0.12.1...v0.12.2) Updates `lerobot` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/huggingface/lerobot/releases) - [Commits](huggingface/lerobot@v0.5.0...v0.5.1) Updates `hypothesis` from 6.151.13 to 6.152.1 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.13...hypothesis-python-6.152.1) --- updated-dependencies: - dependency-name: numpy dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inference-dependencies - dependency-name: marshmallow dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: inference-dependencies - dependency-name: packaging dependency-version: '26.1' dependency-type: direct:production update-type: version-update:semver-major dependency-group: inference-dependencies - dependency-name: onnxscript dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inference-dependencies - dependency-name: onnxruntime-gpu dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inference-dependencies - dependency-name: gymnasium dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inference-dependencies - dependency-name: torch dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: inference-dependencies - dependency-name: tensordict dependency-version: 0.12.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: inference-dependencies - dependency-name: lerobot dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: inference-dependencies - dependency-name: hypothesis dependency-version: 6.152.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: inference-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
github-actions
Bot
changed the title
Dependency ReviewThe following issues were found:
Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. License Issuesevaluation/pyproject.toml
OpenSSF Scorecard
Scanned Files
|
|
✅ AW Dependabot PR Review completed successfully! |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Advisory Review Summary
Affected ecosystems and surfaces:
python-runtime—pip/uvunderevaluation/(ABI-sensitive packages: numpy, torch, tensordict, onnxruntime-gpu)
| Package | From | To | Severity | Surface |
|---|---|---|---|---|
| numpy | 2.2.6 | 2.4.4 | i️ None (bug-fix series) | python-runtime |
| marshmallow | 3.26.2 | 4.3.0 | python-runtime | |
| packaging | 25.0 | 26.1 | Low | python-runtime |
| onnxscript | 0.6.2 | 0.7.0 | Low | python-runtime |
| onnxruntime-gpu | 1.24.4 | 1.25.0 | python-runtime | |
| gymnasium | 1.2.3 | 1.3.0 | Low | python-runtime |
| torch | 2.10.0 | 2.11.0 | python-runtime | |
| tensordict | 0.12.1 | 0.12.2 | Low | python-runtime |
| lerobot | 0.5.0 | 0.5.1 | Low | python-runtime |
| hypothesis | 6.151.13 | 6.152.1 | Low (dev only) | python-runtime |
onnxruntime-gpu
CVE-2026-27904 — Fixed in onnxruntime-gpu 1.25.0 via upgrade of minimatch 3.1.2 → 3.1.4 (microsoft/onnxruntime#27667). This CVE affects the JavaScript/build toolchain component of ONNX Runtime; the Python runtime path in prebuilt wheels is not directly exposed. No GHSA record found for this CVE ID in GitHub Advisory Database at review time; the fix is documented in the onnxruntime v1.25.0 release notes.
Breaking changes in 1.25.0 (source: onnxruntime v1.25.0 release notes):
- CUDA minimum version raised to 12.0 — CUDA 11.x is no longer supported. Users pinned to CUDA 11.x should stay on ORT 1.24.x or upgrade their CUDA toolkit/driver. (#27570)
- C++20 is now required to build from source (prebuilt-wheel users unaffected).
- ArmNN EP has been removed.
🔴 Repo-specific risk: The evaluation surface targets GPU inference on Isaac Sim / NVIDIA nodes. Confirm all GPU compute environments run CUDA ≥ 12.0 before deploying. Any environment on CUDA 11.x will be broken by this upgrade.
marshmallow
Major version bump 3.26.2 → 4.3.0. marshmallow 4.0 removed APIs deprecated in the 3.x series. Notable breaking changes (source: marshmallow changelog):
- Deprecated
Schema.Meta.fields/additionalpatterns removed. @post_load(pass_many=True)removed.marshmallow.compatmodule removed.- Error handling behaviour in
Schema.load()/dump()changed.
marshmallow 4.3.0 itself adds field-level pre_load/post_load parameters and various typing improvements.
🔴 Repo-specific risk: training/rl/pyproject.toml still pins marshmallow==3.26.2. The two surfaces now diverge on incompatible major versions. Audit all marshmallow usage in evaluation/ for 3.x patterns before merging.
numpy
Bug-fix/maintenance series bump 2.2.6 → 2.4.4 within the 2.x major. numpy 2.4.4 fixes an OpenBLAS threading problem on ARM (numpy#30816) and a FNV-1a 64-bit hash selection bug. No CUDA ABI break expected within 2.x.
Cross-surface divergence: training/rl/pyproject.toml still pins numpy==1.26.4 (1.x series). numpy 2.x breaks the C ABI with 1.x, so any shared Cython/C extension that bridges evaluation and training environments must be validated against both.
Source: numpy releases
torch
Minor bump 2.10.0 → 2.11.0. The PyTorch 2.11.0 release notes list backwards-incompatible changes and a Security section. Full detail was truncated in the Dependabot body; review the upstream release notes for any changes affecting the evaluation/ inference pipeline.
tensordict 0.12.1 → 0.12.2 is a patch bump coordinated with this torch release; no breaking changes expected.
Remaining packages (low risk)
- packaging 25.0 → 26.1: Utility library, no ABI sensitivity.
- onnxscript 0.6.2 → 0.7.0: ONNX graph-building library; minor bump.
- gymnasium 1.2.3 → 1.3.0:
VectorEnvdestructor removed (was callingclose()unintentionally) — minor behavioural fix. - lerobot 0.5.0 → 0.5.1: Patch bump.
- hypothesis 6.151.13 → 6.152.1: Dev-only testing library, patch bump.
Lock file note
evaluation/uv.lock is not included in this PR diff — only evaluation/pyproject.toml is updated. After merge, run uv sync in evaluation/ and commit the regenerated lock file to ensure reproducible installs. CI that installs from the lock file will continue to use the old pinned versions until the lock is refreshed.
Advisory verdict: COMMENT — Two high-risk signals fire: (1) onnxruntime-gpu 1.25.0 raises the CUDA minimum to 12.0, breaking CUDA 11.x environments; (2) marshmallow 3 → 4 is a major API break that requires code-level audit before merging. Recommend validating GPU environment CUDA versions and running ruff check + pytest evaluation/ before merge.
Note
🔒 Integrity filter blocked 1 item
The following item was blocked because it doesn't meet the GitHub integrity level.
- #544
pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
To allow these resources, lower min-integrity in your GitHub frontmatter:
tools:
github:
min-integrity: approved # merged | approved | unapproved | noneGenerated by AW Dependabot PR Review for issue #544 · ● 1.2M
| "azure-identity==1.25.3", | ||
| "azure-ai-ml==1.32.0", | ||
| "marshmallow==3.26.2", | ||
| "marshmallow==4.3.0", |
There was a problem hiding this comment.
Schema.Meta.fields/additional unification, @post_load(pass_many=True), marshmallow.compat module, and behaviour changes in Schema.load()/dump() error handling). Any code in evaluation/ that uses marshmallow 3.x patterns will need to be audited against the [marshmallow 4.0 migration guide]((marshmallow.readthedocs.io/redacted)
Note: training/rl/pyproject.toml still pins marshmallow==3.26.2 — the two surfaces now use incompatible major versions. Ensure any shared serialisation helpers are tested with both.
| "onnxscript==0.6.2", | ||
| "onnxruntime-gpu==1.24.4", | ||
| "onnxscript==0.7.0", | ||
| "onnxruntime-gpu==1.25.0", |
There was a problem hiding this comment.
onnxruntime-gpu 1.25.0 drops support for CUDA 11.x. Any environment (CI, GPU nodes, Isaac Sim host) that is still pinned to a CUDA 11.x driver will fail at inference time. Verify that all GPU compute environments have been upgraded to CUDA ≥ 12.0 before merging.
Additionally, this release notes the fix for CVE-2026-27904 (via minimatch 3.1.2 → 3.1.4 upgrade in the ORT JS toolchain — see microsoft/onnxruntime#27667). This CVE affects the JavaScript/build toolchain component of ORT, not the Python runtime path; Python users of the prebuilt wheel are not exposed at runtime.
| requires-python = ">=3.12" | ||
| dependencies = [ | ||
| "numpy==2.2.6", | ||
| "numpy==2.4.4", |
There was a problem hiding this comment.
ABI note — numpy 2.2.6 → 2.4.4 (within 2.x series). The jump crosses numpy 2.3 and 2.4 minor releases. Both are bug-fix/maintenance series with no known CUDA ABI break, and 2.4.4 specifically resolves an OpenBLAS threading issue on ARM (numpy#30816).
Cross-surface divergence: training/rl/pyproject.toml still pins numpy==1.26.4 (1.x series). Any shared evaluation–training code that imports numpy needs to be compatible with both 1.26.x and 2.4.x. The 2.x C API breaks ABI with 1.x extension modules — confirm no shared Cython/C extension code bridges both environments.
Validation: ruff check evaluation/ plus pytest evaluation/.
| "tensordict==0.12.1", | ||
| "lerobot==0.5.0", | ||
| "gymnasium==1.3.0", | ||
| "torch==2.11.0", |
There was a problem hiding this comment.
torch 2.10.0 → 2.11.0 — minor version, but PyTorch minor releases routinely include backwards-incompatible changes. The PyTorch 2.11.0 release notes list a "Backwards Incompatible Changes" section (see release engineering and Security sub-sections). Verify evaluation/ GPU-accelerated inference paths (e.g. sil/, metrics/) against those changes before merging to a GPU fleet.
tensordict 0.12.1 → 0.12.2 is a patch bump aligned to this torch minor; no breaking changes expected.
| @@ -4,25 +4,25 @@ version = "0.1.0" | |||
| description = "Evaluation workflow runtime dependencies" | |||
| requires-python = ">=3.12" | |||
| dependencies = [ | |||
There was a problem hiding this comment.
Lock file not updated. This PR modifies evaluation/pyproject.toml but the corresponding evaluation/uv.lock is not included in the diff. After merge, running uv sync in the evaluation/ directory will regenerate the lock file. CI that relies on the lock file for reproducible installs should regenerate and commit it, or the environment may still install the old pinned versions until the lock is refreshed.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/pip/evaluation/inference-dependencies-79ae447bd1
branch
Bumps the inference-dependencies group with 10 updates in the /evaluation directory:
2.2.62.4.43.26.24.3.025.026.10.6.20.7.01.24.41.25.01.2.31.3.02.10.02.11.00.12.10.12.20.5.00.5.16.151.136.152.1Updates
numpyfrom 2.2.6 to 2.4.4Release notes
Sourced from numpy's releases.
... (truncated)
Changelog
Sourced from numpy's changelog.
... (truncated)
Commits
be93fe2Merge pull request #31090 from charris/prepare-2.4.4f5245dcREL: Prepare for the NumPy 2.4.4 release02e838bMerge pull request #31084 from charris/backport-31056fa74b2dMAINT: numpy.i: Replace deprecatedsprintfwithsnprintf(#31056)533a6dbMerge pull request #31079 from charris/backport-208019e496cbTST: fix POWER VSX feature mapping (#30801)8052c4bMerge pull request #31058 from charris/backport-310217f13b5aMAINT: Skip test on PyPy.4c5fdd6MAINT: Remove unused import of tracemalloc.a3ca5edUpdate numpy/_core/src/multiarray/shape.cUpdates
marshmallowfrom 3.26.2 to 4.3.0Changelog
Sourced from marshmallow's changelog.
... (truncated)
Commits
b596fdbBump version and update changelog256f0aaAdd pre/post_load parameters to Field (#2799)c847ad4Typing improvements to marshmallow.validate (#2940)eb86322Remove redundant docs job (#2939)a44ad62Avoid infinite recursion in nesting docs (#2938)3360e34Bump version and update changelog7b9ce45Fix changelog typos and update releasing docsf07eadcFix validate.Email to accept IDNs (#2937)4acb783Fix Unreachable Warning (#2935)3492faeRemove redundant python-version (#2932)Updates
packagingfrom 25.0 to 26.1Release notes
Sourced from packaging's releases.
... (truncated)
Changelog
Sourced from packaging's changelog.
... (truncated)
Commits
c1a88a3Bump for release702c25edocs: update changelog for 26.1 (#1156)3f4f5d4Implementis_unsatisfiableonSpecifierSetusing ranges (#1119)06c6555Propagate int-max-str-digits ValueError (#1155)905c90cfeat: option to validate compressed tag set sort order in `parse_wheel_filena...af0026cdocs(pylock): document select() method and PylockSelectError (#1153)668da86Rename format_full_version to _format_full_version to make it visibly private...f294d52tests: do not reload the tags module (#1152)2c6c7dffeat: add handling for Emscripten wheels tags per PEP 783 (#804)6762eeadocs(markers): document & and | operators for combining Marker objects (#1151)Updates
onnxscriptfrom 0.6.2 to 0.7.0Release notes
Sourced from onnxscript's releases.
... (truncated)
Commits
df97c94Add an option to not inline a function when building the graph (#2851)90f754achore(deps): bump actions/upload-pages-artifact from 4 to 5 (#2895)b068297Bumped version to 0.7.0 (#2894)c8f5f6aMake GraphBuilder.init use keyword-only args after graph (#2893)c6e8ec6Handling initializers in GraphBuilder (#2889)63ffecffix: normalize cache key dtype to prevent initializer name collisions (#2888)13f265cfix(fuse_batchnorm): support convtranpose + bn fusion with group != 1 (#2879)6c092e2Add fusion rule to remove Expand before broadcast-capable binary operators (#...c7d13fbAdd input() and add_output() methods to GraphBuilder (#2828)864b785Fix BatchNorm fusion producing invalid ONNX when Conv nodes share weight init...Updates
onnxruntime-gpufrom 1.24.4 to 1.25.0Release notes
Sourced from onnxruntime-gpu's releases.
... (truncated)
Commits
7a71bc5Cherry-pick CI/pipeline fixes for rel-1.25.0 (#28106)211edbcFF rel-1.25 to last merge prior to version bump & add first round of cherry p...57b265e[MLAS] Add depthwise with multiplier conv special kernel for NCHW data layout...bec2792Plugin EP event profiling APIs (#27649)a997c4f[VitisAI] external_ep_library typo fix (#27647)f2c28e2S390x test fixes (#27404)0f43e16[QNN-EP] Fix use-after-free of logger object (#27804)f22e3a9webgpu: Optimize DP4A SmallM MatMulNBits tiling (#27910)048e7dc[Plugin EP] Add plugin EP APIs to retrieve ONNX operator schemas (#27713)e43d306[CI] fix: missingbranchspecifier inscheduledirective (#27914)Updates
gymnasiumfrom 1.2.3 to 1.3.0Release notes
Sourced from gymnasium's releases.
Commits
eb5c00eUpdate to use Taxi-v44436f89fix incorrectTypeVaruse incoreforRenderFrame(#1560)877ba30Update to 1.3.0c3b809fUpdate Taxi to V4 and fixis_rainyimplementation (#1561)9e6f855AddRepeatActionwrapper (#1553)1532e66Add external environment Hill Climb Racing Env (#1554)df8704cAdd boltcrypt to third party environments (#1557)01c0d39Add external environment firecastrl (wildfire env) (#1551)9edc68eFix spelling intest_mujoco_v5.py(#1550)a31fa4bChange action seed forMuJoCo/test_verify_reward_survivetest, to be valid ...Updates
torchfrom 2.10.0 to 2.11.0Release notes
Sourced from torch's releases.
... (truncated)
Commits
70d99e9[release only] Increase timeout for rocm libtorch and manywheel builds (#178006)3e05c5a[MPS] Properly handle conjugated tensors in bmm (#178010)db741c7[MPS] fix compiling of SDPA producing nan results (#178009)483b55dUpdate pytorch_sphinx_theme2 version to 0.4.6 (#177616)7f2cdeb[windows][smoke test] Add an option to install cuda if required cuda/cudnn on...76fd078[release-only] Fix libtorch builds. Fix lint (#177299)fa384de[Inductor][MPS] Fix half-precision type mismatches in Metal shader codegen (#...036b25fLet stable::from_blob accept a lambda as deleter (cherry-pick) (#176440)41f8e3e[CI] Stop using G3 runners (#177161)e2fa295[CD] Unpin cuda-bindings dependencies (#177159)Updates
tensordictfrom 0.12.1 to 0.12.2Release notes
Sourced from tensordict's releases.
Commits
8ee33fa[Release] Bump version to 0.12.2dcb6ddd[BugFix] fix ragged_idx of consolidated tensor (#1675)85ea4e7[CI] Temporarily use vmoens/test-infra fork for macOS buildsUpdates
lerobotfrom 0.5.0 to 0.5.1Release notes
Sourced from lerobot's releases.