Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the preset group across 1 directory with 2 updates #502

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the preset group across 1 directory with 2 updates #502

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 4, 2024 •
edited
Loading

Bumps the preset group with 2 updates in the /preset directory: evaluate and onnxruntime.

Updates evaluate from 0.4.2 to 0.4.3

Release notes

Sourced from evaluate's releases.

0.4.3

This release adds support for datasets>=3.0 by removing calls to deprecated code

What's Changed

Full Changelog: huggingface/evaluate@v0.4.2...v0.4.3

Commits

Updates onnxruntime from 1.19.0 to 1.20.0

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.20.0

Release Manager: @​apsonawane

Announcements

  • All ONNX Runtime Training packages have been deprecated. ORT 1.19.2 was the last release for which onnxruntime-training (PyPI), onnxruntime-training-cpu (PyPI), Microsoft.ML.OnnxRuntime.Training (Nuget), onnxruntime-training-c (CocoaPods), onnxruntime-training-objc (CocoaPods), and onnxruntime-training-android (Maven Central) were published.
  • ONNX Runtime packages will stop supporting Python 3.8 and Python 3.9. This decision aligns with NumPy Python version support. To continue using ORT with Python 3.8 and Python 3.9, you can use ORT 1.19.2 and earlier.
  • ONNX Runtime 1.20 CUDA packages will include new dependencies that were not required in 1.19 packages. The following dependencies are new: libcudnn_adv.so.9, libcudnn_cnn.so.9, libcudnn_engines_precompiled.so.9, libcudnn_engines_runtime_compiled.so.9, libcudnn_graph.so.9, libcudnn_heuristic.so.9, libcudnn_ops.so.9, libnvrtc.so.12, and libz.so.1.

Build System & Packages

  • Python 3.13 support is included in PyPI packages.
  • ONNX 1.17 support will be delayed until a future release, but the ONNX version used by ONNX Runtime has been patched to include a shape inference change to the Einsum op.
  • DLLs in the Maven build are now digitally signed (fix for issue reported here).
  • (Experimental) vcpkg support added for the CPU EP. The DML EP does not yet support vcpkg, and other EPs have not been tested.

Core

  • MultiLoRA support.
  • Reduced memory utilization.
    • Fixed alignment that was causing mmap to fail for external weights.
    • Eliminated double allocations when deserializing external weights.
    • Added ability to serialize pre-packed weights so that they don’t cause an increase in memory utilization when the model is loaded.
  • Support bfloat16 and float8 data types in python I/O binding API.

Performance

  • INT4 quantized embedding support on CPU and CUDA EPs.
  • Miscellaneous performance improvements and bug fixes.

EPs

CPU

  • FP16 support for MatMulNbits, Clip, and LayerNormalization ops.

CUDA

  • Added support of cuDNN Flash Attention and Lean Attention in MultiHeadAttention op.

TensorRT

QNN

  • QNN HTP support for weight sharing across multiple ORT inference sessions. (See ORT QNN EP documentation for more information.)
  • Support for QNN SDK 2.27.

OpenVINO

  • Added support up to OpenVINO 2024.4.1.
  • Compile-time memory optimizations.
  • Enhancement of ORT EPContext Session option for optimized first inference latency.
  • Added remote tensors to ensure direct memory access for inferencing on NPU.

DirectML

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from jafraustro as a code owner November 4, 2024 13:44
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 4, 2024
@dependabot dependabot bot mentioned this pull request Nov 4, 2024
Closed
@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 4, 2024 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/evaluate 0.4.3 🟢 6
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 109 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 5SAST tool is not run on all commits -- score normalized to 5
pip/evaluate 0.4.3 🟢 6
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 109 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 5SAST tool is not run on all commits -- score normalized to 5
pip/onnxruntime 1.20.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 10all last 30 commits are reviewed through GitHub
Maintained🟢 1030 commit(s) out of 30 and 8 issue activity out of 30 found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no badge detected
Vulnerabilities🟢 10no vulnerabilities detected
Signed-Releases⚠️ 00 out of 5 artifacts are signed or have provenance
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1no published package detected
License🟢 10license file detected
Token-Permissions⚠️ 0non read-only tokens detected in GitHub workflows
Dependency-Update-Tool🟢 10update tool detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0

Scanned Files

  • preset/deep-learning/requirements.txt
  • preset/inference-optimization/requirements.txt

@dependabot dependabot bot force-pushed the dependabot/pip/preset/preset-66afa27a2c branch from 7085b62 to 080af91 Compare November 11, 2024 13:39
@jitendra42
Copy link
Contributor

@dependabot rebase

@dependabot
Bump the preset group across 1 directory with 2 updates
6502cc9 
Bumps the preset group with 2 updates in the /preset directory: [evaluate](https://github.com/huggingface/evaluate) and [onnxruntime](https://github.com/microsoft/onnxruntime).


Updates `evaluate` from 0.4.2 to 0.4.3
- [Release notes](https://github.com/huggingface/evaluate/releases)
- [Commits](huggingface/evaluate@v0.4.2...v0.4.3)

Updates `onnxruntime` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.19.0...v1.20.0)

---
updated-dependencies:
- dependency-name: evaluate
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: preset
- dependency-name: onnxruntime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: preset
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/preset/preset-66afa27a2c branch from 080af91 to 6502cc9 Compare November 14, 2024 23:22
@github-actions GitHub Actions
Copy link

Integration Test Results

Groups Tested: preset/deep-learning, preset/inference-optimization

Results
Test-Group Test Status
preset/deep-learning deep-learning-ipex-3.9-cpu PASS
preset/deep-learning deep-learning-ipex-3.10-cpu PASS
preset/deep-learning deep-learning-ipex-3.9-gpu PASS
preset/deep-learning deep-learning-ipex-3.10-gpu PASS
preset/deep-learning deep-learning-ipex-notebook-3.9-cpu PASS
preset/deep-learning deep-learning-ipex-notebook-3.10-cpu PASS
preset/deep-learning deep-learning-ipex-notebook-3.9-gpu PASS
preset/deep-learning deep-learning-ipex-notebook-3.10-gpu PASS
preset/deep-learning deep-learning-ipex-quantization-notebook-3.9-cpu FAIL
preset/deep-learning deep-learning-ipex-quantization-notebook-3.10-cpu PASS
preset/deep-learning deep-learning-itex-3.9-cpu PASS
preset/deep-learning deep-learning-itex-3.10-cpu PASS
preset/deep-learning deep-learning-itex-3.9-gpu PASS
preset/deep-learning deep-learning-itex-3.10-gpu PASS
preset/deep-learning deep-learning-tensorflow-dataset-librarian-3.9-cpu PASS
preset/deep-learning deep-learning-tensorflow-dataset-librarian-3.10-cpu PASS
preset/deep-learning deep-learning-tensorflow-dataset-librarian-3.9-gpu PASS
preset/deep-learning deep-learning-tensorflow-dataset-librarian-3.10-gpu PASS
preset/deep-learning deep-learning-torch-dataset-librarian-3.9-cpu PASS
preset/deep-learning deep-learning-torch-dataset-librarian-3.10-cpu PASS
preset/deep-learning deep-learning-torch-dataset-librarian-3.9-gpu PASS
preset/deep-learning deep-learning-torch-dataset-librarian-3.10-gpu PASS
preset/inference-optimization inference-optimization-inc-ipex-quantization-notebook-3.9-cpu PASS
preset/inference-optimization inference-optimization-inc-ipex-quantization-notebook-3.10-cpu PASS
preset/inference-optimization inference-optimization-inc-ipex-quantization-notebook-3.9-gpu PASS
preset/inference-optimization inference-optimization-inc-ipex-quantization-notebook-3.10-gpu PASS
preset/inference-optimization inference-optimization-inc-itex-notebook-3.9-cpu PASS
preset/inference-optimization inference-optimization-inc-itex-notebook-3.10-cpu PASS
preset/inference-optimization inference-optimization-inc-tensorflow-3.9-cpu PASS
preset/inference-optimization inference-optimization-inc-tensorflow-3.10-cpu PASS
preset/inference-optimization inference-optimization-inc-tensorflow-3.9-gpu PASS
preset/inference-optimization inference-optimization-inc-tensorflow-3.10-gpu PASS
preset/inference-optimization inference-optimization-inc-torch-3.9-cpu PASS
preset/inference-optimization inference-optimization-inc-torch-3.10-cpu PASS
preset/inference-optimization inference-optimization-ipex-3.9-cpu PASS
preset/inference-optimization inference-optimization-ipex-3.10-cpu PASS
preset/inference-optimization inference-optimization-ipex-3.9-gpu PASS
preset/inference-optimization inference-optimization-ipex-3.10-gpu PASS
preset/inference-optimization inference-optimization-itex-3.9-cpu PASS
preset/inference-optimization inference-optimization-itex-3.10-cpu PASS
preset/inference-optimization inference-optimization-itex-3.9-gpu PASS
preset/inference-optimization inference-optimization-itex-3.10-gpu PASS
preset/inference-optimization inference-optimization-itex-inference-notebook-3.9-cpu PASS
preset/inference-optimization inference-optimization-itex-inference-notebook-3.10-cpu PASS
preset/inference-optimization inference-optimization-onnx-3.9-cpu PASS
preset/inference-optimization inference-optimization-onnx-3.10-cpu PASS
preset/inference-optimization inference-optimization-onnx-3.9-gpu PASS
preset/inference-optimization inference-optimization-onnx-3.10-gpu PASS
preset/inference-optimization inference-optimization-tensorflow-dataset-librarian-3.9-cpu PASS
preset/inference-optimization inference-optimization-tensorflow-dataset-librarian-3.10-cpu PASS
preset/inference-optimization inference-optimization-tensorflow-dataset-librarian-3.9-gpu PASS
preset/inference-optimization inference-optimization-tensorflow-dataset-librarian-3.10-gpu PASS
preset/inference-optimization inference-optimization-torch-dataset-librarian-3.9-cpu PASS
preset/inference-optimization inference-optimization-torch-dataset-librarian-3.10-cpu PASS
preset/inference-optimization inference-optimization-torch-dataset-librarian-3.9-gpu PASS
preset/inference-optimization inference-optimization-torch-dataset-librarian-3.10-gpu PASS

Overall Result: FAIL ❌

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jafraustro jafraustro Awaiting requested review from jafraustro jafraustro is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

@jafraustro jafraustro

Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jitendra42 @jafraustro