deps(nuget): Bump the nuget-all group with 12 updates - #92
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps coverlet.msbuild from 8.0.0 to 10.0.1 Bumps Markdig from 0.44.0 to 1.3.2 Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.102 to 10.0.400 Bumps Microsoft.Data.Sqlite from 10.0.2 to 10.0.11 Bumps Microsoft.Extensions.Hosting from 10.0.2 to 10.0.11 Bumps Microsoft.ML.OnnxRuntime from 1.23.2 to 1.29.0 Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.9.0 Bumps ModelContextProtocol from 0.8.0-preview.1 to 2.2.0 Bumps NUnit from 4.4.0 to 4.6.1 Bumps NUnit.Analyzers from 4.11.2 to 4.14.0 Bumps NUnit3TestAdapter from 6.1.0 to 6.3.0 Bumps YamlDotNet from 16.3.0 to 18.1.0 --- updated-dependencies: - dependency-name: coverlet.msbuild dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-all - dependency-name: Markdig dependency-version: 1.3.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-all - dependency-name: Microsoft.CodeAnalysis.NetAnalyzers dependency-version: 10.0.400 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.Data.Sqlite dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.ML.OnnxRuntime dependency-version: 1.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: ModelContextProtocol dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-all - dependency-name: NUnit dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: NUnit.Analyzers dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: NUnit3TestAdapter dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: YamlDotNet dependency-version: 18.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-all ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated coverlet.msbuild from 8.0.0 to 10.0.1.
Release notes
Sourced from coverlet.msbuild's releases.
10.0.1
Improvements
Fixed
Maintenance
Diff between 10.0.0 and 10.0.1
10.0.0
Improvements
--coverlet-file-prefixoption for unique report files #1869Fixed
Maintenance
Diff between 8.0.1 and 10.0.0
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
Commits viewable in compare view.
Updated Markdig from 0.44.0 to 1.3.2.
Release notes
Sourced from Markdig's releases.
1.3.2
Changes
🐛 Bug Fixes
Full Changelog: 1.3.1...1.3.2
Published with dotnet-releaser
1.3.1
Changes
🐛 Bug Fixes
Full Changelog: 1.3.0...1.3.1
Published with dotnet-releaser
1.3.0
Changes
🐛 Bug Fixes
📚 Documentation
🧰 Misc
Full Changelog: 1.2.0...1.3.0
Published with dotnet-releaser
1.2.0
Changes
🚀 Enhancements
🧰 Misc
Full Changelog: 1.1.3...1.2.0
Published with dotnet-releaser
1.1.3
Changes
🐛 Bug Fixes
🚀 Enhancements
Full Changelog: 1.1.2...1.1.3
Published with dotnet-releaser
1.1.2
Changes
🐛 Bug Fixes
Full Changelog: 1.1.1...1.1.2
Published with dotnet-releaser
1.1.1
Changes
🐛 Bug Fixes
Full Changelog: 1.1.0...1.1.1
Published with dotnet-releaser
1.1.0
Changes
🚀 Enhancements
🧰 Misc
Full Changelog: 1.0.1...1.1.0
Published with dotnet-releaser
1.0.1
Changes
✨ New Features
🧰 Maintenance
🧰 Misc
Full Changelog: 1.0.0...1.0.1
Published with dotnet-releaser
1.0.0
Changes
✨ New Features
🚀 Enhancements
🧰 Misc
Full Changelog: 1.0.0-preview.1...1.0.0
Published with dotnet-releaser
1.0.0-preview.1
Changes
✨ New Features
🐛 Bug Fixes
🧰 Misc
Full Changelog: 0.45.0...1.0.0-preview.1
Published with dotnet-releaser
0.45.0
Changes
🚀 Enhancements
Full Changelog: 0.44.0...0.45.0
Published with dotnet-releaser
Commits viewable in compare view.
Updated Microsoft.CodeAnalysis.NetAnalyzers from 10.0.102 to 10.0.400.
Release notes
Sourced from Microsoft.CodeAnalysis.NetAnalyzers's releases.
10.0.400
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.400and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.303
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.303and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.302
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.302and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.301
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.301and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.300
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.300and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.204
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.204and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.203
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.203and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.202
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.202and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.201
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.201and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.200
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.200and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.111
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.111and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.110
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.110and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.109
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.109and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.108
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.108and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.107
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.107and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.106
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.106and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.105
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.105and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.104
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.104and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.103
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.103and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached is the PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023
Commits viewable in compare view.
Updated Microsoft.Data.Sqlite from 10.0.2 to 10.0.11.
Release notes
Sourced from Microsoft.Data.Sqlite's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Hosting from 10.0.2 to 10.0.11.
Release notes
Sourced from Microsoft.Extensions.Hosting's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.ML.OnnxRuntime from 1.23.2 to 1.29.0.
Release notes
Sourced from Microsoft.ML.OnnxRuntime's releases.
1.29.0
Announcements & Breaking Changes
ORT_DISABLE_TELEMETRY=1before initialization disables non-Windows telemetry for the process (#27379, #29872).onnxruntime/python/tools/tensorrtdashboard tooling was removed. This does not affect the TensorRT Execution Provider APIs (#29395).Security Fixes
Path, bounds, and input validation
kattribute against the number of experts and fixed a CPUTensorScattersecurity issue (#29907, #29916).Range, andCropAndResize(#29254, #29255, #29265, #29579, #29595, #29605, #29871, #31636, #31671, #31675, #31676, #31684).OrtApi::GetValueand validated DML constant tensor byte sizes (#29157, #31665).Supply chain and tooling
adm-zipforonnxruntime-node(#29827, #29926, #31192).New Features
Core APIs & Runtime
ORT_INTRA_OP_NUM_THREADSandORT_INTER_OP_NUM_THREADS. Explicit thread settings still take precedence, and0preserves machine-sized defaults (#29688).EpContextnodes, and wired maximum-shape inference into workspace estimation (#29607, #29799, #31613).MRotaryEmbeddingcontrib operator for Qwen mRoPE variants (#29261, #31728).onnxruntime_perf_testthrough--data_shape, plus verbose graph-transformer tracing and broader inference-session error-path coverage (#29555, #29558, #29569, #29571).Execution Provider ABI & Plugin EPs
Execution Provider Updates
NVIDIA CUDA EP
Attention and decoding
PagedAttentionwith quantized KV cache, XQA decode, MLA, QK-Norm, and head-sink support (#29912).AttentionCUDA kernel and enabled cuDNN SDPA for contribAttention(#29715, #29717).attention_biassupport to the GroupQueryAttention unfused path andstate_windowsupport to LinearAttention and CausalConvWithState for MTP (#29525, #31157).MoE and quantized GEMM
... (truncated)
1.28.1
This is a patch release on top of v1.28.0, containing support for device-free WebGPU compilation, improved compatibility with sandboxed Windows processes, and targeted graph-validation fixes.
WebGPU EP
Bug Fixes
EPContextnodes, aligning their schema with support for compiling zero-input models (#29799)MulandPowpatterns (#32016)Contributors
Thanks to our 4 contributors for this release!
@apsonawane, @shiyi9801, @adrastogi, @mingmingtasd
Full Changelog: v1.28.0...v1.28.1
1.28.0
Announcements & Breaking Changes
nvrtcis no longer linked, which significantly reduces the required CUDA redistributable footprint (#29252, #29808, #29705, #29620).OrtModelPackageApinow lives in the experimental C API and may change in future releases (#28746, #29142, #28990).wgsl-genimplementation (#29141, #28355).CUDA_QUANT_PREPROCESSis off by default (#29687).Security Fixes
Memory safety & input validation
bind_inputcausing an out-of-bounds write (#28839)TensorAtfor sub-byte packed types (#28973)Col2Iminputs to prevent heap over-read (#28706)CropAndResizeagainst malformedcrop_sizetensors (#28766)BeamSearchvocab_sizeagainst logits width (#28774)WhisperDecoderSubgraph::CreateInitialFeeds(#29239)SparseAttentionCSR indices/key lengths and rejected zero-dimensionblock_row_indices(#29015, #29242)mask_indexto valid bounds (#29449)MaxpoolWithMaskkernel rank against input spatial rank (#29253)EmbedLayerNorm/SkipLayerNormshapes exceeding 32-bit output indexing (#29264)DecoderAttention/MultiHeadAttentionshape inference and negative-axis handling inExpandDimsshape inference (#29268, #29448)TreeEnsembletarget id validation and added input validation toLinearClassifier(#29293, #29060)DynamicQuantizeLSTMzero-point/scale validation typos (#29462)Loop/Scanoutput concatenation (#29397)raw_datato{0, 1}on unpack (#29238)Resize,PadFusion, and LoRA handling (#28779, #28780, #28801)WithOutputTensorin the Rust bindings (#29251)Integer overflow & allocation size
MlasConvPrepareworking-buffer products andConvTransposepad computation with SafeInt (#29444, #29446)SamplingState::Initthat could cause a heap buffer overflow (#29443)B/scales/zero-points shape inMatMulNBits::PrePack(#29445)ConstantOfShapeoutput size against the input initializer before constant folding (#28751)Pad(int64/int32 truncation),Slice, andGatherBlockQuantized(#28721, #28704, #28718)Supply chain & tooling
... (truncated)
1.27.1
This is a patch release on top of v1.27.0, containing targeted bug fixes, a CUDA QMoE decode-path optimization, and CI/build infrastructure fixes.
Bug Fixes
igemmregression in the KleidiAI path (#28571)Performance
NVIDIA CUDA EP
CI & Build Infrastructure
azcopy(#29274)brew install applesimutilsfailure by trusting the wix/brew tap (#29450)mac-cpu-packing-jobs.yml(#29575)Contributors
Thanks to our 8 contributors for this release!
@tianleiwu, @chilo-ms, @edgchen1, @adrastogi, @damdoo01-arm, @JonathanC-ARM, @martin-klacer-arm, @sanaa-hamel-microsoft
Full Changelog: v1.27.0...v1.27.1
1.27.0
n.b. This release is targeting ONNX 1.21. ONNX 1.22 will be supported in ORT 1.28.
n.b. This changelog was generated via LLM. Only the contributor list has been verified. As always, only trust the commit history.
Announcements & Breaking Changes
Security Fixes
SoftmaxCrossEntropyLossvia label bounds validation (#28004)OneHotinput validation and output-size computation (#28014)Expandand capped constant-folding output sizes (#28055)Tilekernel (#28070)MaxpoolWithMask::Compute(#28223)BitShiftUB for shift amounts greater than or equal to bit width (#28272)seqlens_kvscos_cache) (#28277)WordConvEmbeddingto prevent OOB reads (#28279)CropBasescale handling (#28399)torch.load()calls toweights_only=True(#28421)New Features
Execution Provider Plugin API
OrtEp::OnSessionInitializationEnd()callback (#28319)Core APIs & Runtime
kOrtEpDevice_EpMetadataKey_OSDriverVersionexample and docs (#28282)Quantization & Training Tooling
quantize_static(#28221)ActivationRestrictedAsymmetricquantization option (#28237)... (truncated)
1.26.0
n.b. The following was generated via LLM from Git history. Only the contributor list has been verified.
Announcement - Breaking Changes
onnxruntime-<os>-<arch>-gpu_cuda13-<version>.<ext>Highlights
.ortmodel loads (#28164).Security and Reliability Hardening
setattrconfiguration with an allowlist (#28083).CUDA, Attention, and MLAS
WebGPU, WebNN, and JavaScript
... (truncated)
1.25.1
n.b. This changelog is LLM generated. Only the contributor listing has been verified.
ONNX Runtime Release 1.25.1
📢 Announcements & Breaking Changes
ONNX Op Updates
✨ New Features
📊 New ONNX Ops & Model Support
🌐 Web & JavaScript
WebGPU EP
🐛 Bug Fixes
Core Runtime Fixes
SetRawDataInTensorProtoin NVIDIA TensorRT RTX tests (#28065)🙏 Contributors
Thanks to our 7 contributors for this release:
@guschmue, @sanaa-hamel-microsoft, @apsonawane, @eserscor, @ishwar-raut1, @qjia7, @theHamsta
Full Changelog: microsoft/onnxruntime@v1.25.0...v1.25.1
1.25.0
📢 Announcements & Breaking Changes
Build & Platform
Execution Provider Changes
--use_armnnbuild flags and migrate to the MLAS/KleidiAI-backed CPU EP or QNN EP for Qualcomm hardware. (#27447)API Version
🔒 Security Fixes
onnx::TensorProtodata size before allocation (#27547)✨ New Features
🔌 Execution Provider Plugin API & CUDA Plugin EP
... (truncated)
1.24.4
This is a patch release for ONNX Runtime 1.24, containing bug fixes and execution provider updates.
Bug Fixes
nvidia-drmis not loaded but GPU PCI devices are still exposed via sysfs. (#27591)GetOutputIndex. (#27644)Execution Provider Updates
Build and Infrastructure
python_requiresfrom>=3.10to>=3.11to reflect dropped Python 3.10 support. (#27354)__builtin_ia32_tpausewith the compiler-portable_tpauseintrinsic to fix cross-compiler portability issues between GCC and LLVM. (#27607)Full Changelog: v1.24.3...v1.24.4
Contributors
@derdeljan-msft, @adrianlizarraga, @apwojcik, @baijumeswani, @edgchen1, @mocknen, @tianleiwu, @XXXXRT666
1.24.3
This is a patch release for ONNX Runtime 1.24, containing bug fixes, security improvements, performance enhancements, and execution provider updates.
Security Fixes
Bug Fixes
OrtEnv.DisableDllImportResolverto prevent fatal error on resolver conflict. (#27535)Performance Improvements
Execution Provider Updates
wasmBinaryis provided. (#27318)wasmBinarytogether with a blob URL for.mjs. (#27411)s_kernel_registry_vitisaiep.reset()indeinitialize_vitisai_ep(). (#27295)OrtEpDeviceinstances for plugin and provider bridge EPs. (#27522)Build and Infrastructure
-Warray-boundsbuild error in MLAS on clang 17+. (#27499)kMaxValueLengthto 8192. (#27521)... (truncated)
1.24.2
This is a patch release for ONNX Runtime 1.24, containing several bug fixes, security improvements, and execution provider updates.
Bug Fixes
SparseTensorProtoToDenseTensorPrototo improve robustness. (#27323)ArrayFeatureExtractor. (#27275)Execution Provider Updates
LazyReleasefor prepack allocator. (#27077)ConvTransposebias validation in both TypeScript and C++ implementations. (#27213)Build and Infrastructure
_Description has been t...
Description has been truncated