Skip to content

Bump the uv group across 1 directory with 4 updates - #133

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-ed2b84141b
Open

Bump the uv group across 1 directory with 4 updates#133
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-ed2b84141b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv group with 4 updates in the / directory: torch, onnx, monai and pydantic-settings.

Updates torch from 2.12.0 to 2.13.0

Release notes

Sourced from torch's releases.

PyTorch 2.13.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Tracked Regressions

ROCm wheels break torch.compile on CPU in environments without a GPU

Running a torch==2.13.0+rocm7.2 wheel in an environment where no GPU is available (torch.cuda.is_available() is False) breaks torch.compile on the CPU path: the first compile raises RuntimeError: Can't detect vectorized ISA for CPU (#189194). This is a regression from torch==2.12.1+rocm7.2, which compiles CPU code fine (detecting e.g. VecAVX2) in the same setup. The 2.13 ROCm wheel appears to rely on something present in the ROCm builder image to detect the CPU vectorized ISA, so it works when run on a ROCm image but fails on a plain CPU-only image.

Workaround: run the +rocm wheel on a ROCm image, or install a standard CPU/CUDA build for GPU-less environments.

Backwards Incompatible Changes

  • Stop building CPython 3.13t (free-threaded) binaries (#182951)

    Upstream pypa/manylinux removed CPython 3.13t (free-threaded) on 2026-05-07, because 3.13t was experimental and has been superseded by the now-non-experimental CPython 3.14t. As a result, PyTorch 2.13 no longer ships cp313t wheels (Linux, Triton, and related artifacts). Users on the free-threaded interpreter should move to Python 3.14t.

    PyTorch 2.12:

    # cp313t (free-threaded 3.13) wheels were available
python3.13t -m pip install torch

    PyTorch 2.13:

... (truncated)

Commits
  • cf30153 [release/2.13] Strip +PTX from CUDA arch list on release/RC builds (#188914) ...
  • 3e3e24b [release/2.13] Restrict cuda-bindings to Python < 3.15 for CUDA 12.9 builds (...
  • 7986b06 [release/2.13] Bump binary build timeout 280 -> 400 minutes (#188551)
  • 0bdbc26 [release/2.13] Add CUDA 12.9 to TORCH_CUDA_ARCH_LIST tables (#188443)
  • 9cabb45 [release/2.13] Update manywheel docker image pin to 78e737ad (#188409)
  • 78e737a [release/2.13] Revert "Tighten generalized scatter graph target (#184075)" (#...
  • 0bb9b5b [release/2.13] Revert "dynamo: round-trip torch.cuda.stream ctx mgr across gr...
  • aaac2bf [release/2.13] Revert "[Reland] Port D104346887/PR 182675 for index_add fast ...
  • 9330813 Fix build_with_debinfo.py broken by CONFIGURE_DEPENDS globbing (#188192)
  • 4e077a7 Remove setuptools upper bound (#188190)
  • Additional commits viewable in compare view

Updates onnx from 1.21.0 to 1.22.0

Release notes

Sourced from onnx's releases.

v1.22.0

ONNX v1.22.0 is now available with exciting new features! We would like to thank everyone who contributed to this release! Please visit onnx.ai to learn more about ONNX and associated projects.

What's Changed

Breaking Changes and Deprecations

Spec and Operator

Two new operators LinearAttention-27 and CausalConvWithState-27 were introduced.

Reference Implementation

Utilities and Tools

Build, CI and Tests

... (truncated)

Commits

Updates monai from 1.5.2 to 1.6.0

Release notes

Sourced from monai's releases.

1.6.0

What's Changed

... (truncated)

Changelog

Sourced from monai's changelog.

[1.6.0] - 2026-06-12

What's Changed

Added

  • Add MAPEMetric for regression evaluation (#8686)
  • Add CalibrationErrorMetric and CalibrationError handler (#8707)
  • Add AUC-Margin Loss for AUROC optimization (#8719)
  • Add MCCLoss (Matthews Correlation Coefficient loss) (#8785)
  • Add EmbeddingCollapseMetric for detecting representational collapse (#8815)
  • Add 3D support and confusion matrix output to PanopticQualityMetric (#8684)
  • Add GradientAccumulation utility for SupervisedTrainer (#8763)
  • Add nested dot-notation access to ConfigParser (#8858)
  • Add allow_pickle argument to relevant loaders (#8875)
  • Add configurable GD-enhancing tumor label in ConvertToMultiChannelBasedOnBratsClasses (#8779)
  • Enable global coordinates in spatial crop transforms (#8794)
  • Generalize TestTimeAugmentation to non-spatial predictions (#8715)
  • Add parameter to DiceMetric and DiceHelper classes (#8774)
  • Support additional dtypes in pad_nd (#8672)

Fixed

  • Fix Invertd transform (#8651)
  • Fix PerceptualLoss errors out after hitting maximum number of downloads (#8652)
  • Prevent implicit conversion of MetaTensor to numpy array (#8654)
  • Fix weights in alpha for FocalLoss (#8665)
  • Fix align_corners mismatch in AffineTransform (#8690)
  • Fix multi-axis shear transform to compose individual shear matrices (#8778)
  • Fix incorrect truncated parameter in make_gaussian_kernel causing corrupted LocalNormalizedCrossCorrelationLoss (#8781, #8783)
  • Fix batch size broadcasting bug in GeneralizedWassersteinDiceLoss (#8744)
  • Fix AutoencoderKLMaisi forcing CUDA transfer on CPU inputs (#8736)
  • Fix TrainableBilateralFilter 3D input validation (#8729)
  • Fix GPU memory leak by checking both image and label tensors for CUDA device (#8708)
  • Fix compute_shape_offset non-tuple indexing for PyTorch >=2.9 (#8776, #8812)
  • Fix memory leak in optional_import traceback handling (#8782)
  • Fix nested Compose map_items in forward and inverse paths (#8787)
  • Fix JukeboxLoss.forward swapped input_amplitude and target_amplitude (#8821)
  • Fix EnsureChannelFirst to pass meta_data when track_meta is False (#8835)
  • Fix RandSimulateLowResolution to not alter track_meta state (#8837)
  • Fix incomplete activation validation in HausdorffDTLoss (#8841)
  • Fix CrossAttentionBlock instantiated unconditionally (#8848)
  • Fix GlobalMutualInformationLoss bin_centers registered as buffer (#8869)
  • Fix SoftclDiceLoss and SoftDiceclDiceLoss with DiceLoss-compatible API (#8703)
  • Fix execution order of activation and masking in MaskedDiceLoss (#8704)
  • Fix load_old_state_dict key mapping in AutoencoderKL (#8786)
  • Fix missing channel_wise parameter in RandScaleIntensityFixedMean (#8741)
  • Fix NibabelReader eager C-order copy (#8825)
  • Fix nnUNetV2Runner to support MIG UUID and respect CUDA_VISIBLE_DEVICES (#8716)
  • Fix Auto3DSeg device handling and safe no-grad cleanup (#8801, #8803)
  • Replace deprecated cuda.cudart with cuda.bindings.runtime (#8790)
  • Replace Tensor | None with Optional[Tensor] for TorchScript compatibility (#8879)
  • Fix for GHSA-rghg-q7wp-9767 (#8885)

... (truncated)

Commits

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the uv group across 1 directory with 4 updates
88f8c8b 
Bumps the uv group with 4 updates in the / directory: [torch](https://github.com/pytorch/pytorch), [onnx](https://github.com/onnx/onnx), [monai](https://github.com/Project-MONAI/MONAI) and [pydantic-settings](https://github.com/pydantic/pydantic-settings).


Updates `torch` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.12.0...v2.13.0)

Updates `onnx` from 1.21.0 to 1.22.0
- [Release notes](https://github.com/onnx/onnx/releases)
- [Changelog](https://github.com/onnx/onnx/blob/main/docs/Changelog-ml.md)
- [Commits](onnx/onnx@v1.21.0...v1.22.0)

Updates `monai` from 1.5.2 to 1.6.0
- [Release notes](https://github.com/Project-MONAI/MONAI/releases)
- [Changelog](https://github.com/Project-MONAI/MONAI/blob/dev/CHANGELOG.md)
- [Commits](Project-MONAI/MONAI@1.5.2...1.6.0)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.13.0
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: onnx
  dependency-version: 1.22.0
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: monai
  dependency-version: 1.6.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 26, 2026
@C-Achard C-Achard self-assigned this Oct 27, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@C-Achard C-Achard C-Achard approved these changes

Assignees

@C-Achard C-Achard

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@C-Achard