Skip to content

Bump PyTorch to >=2.6 (security hotfix)#5

Merged
gomezzz merged 1 commit intomainfrom
hotfix/bump-pytorch-2.6-cve
Feb 5, 2026
Merged

Bump PyTorch to >=2.6 (security hotfix)#5
gomezzz merged 1 commit intomainfrom
hotfix/bump-pytorch-2.6-cve

Conversation

@gomezzz
Copy link
Collaborator

@gomezzz gomezzz commented Feb 5, 2026

Summary

  • Bumps minimum PyTorch version to >=2.6 in environment.yml, environment_CI.yml, and pyproject.toml
  • Addresses security vulnerability GHSA-53q9-r3pm-6pq6

Test plan

  • CI pipeline passes with the new version constraint

Addresses CVE in GHSA-53q9-r3pm-6pq6 by requiring PyTorch >=2.6
in environment.yml, environment_CI.yml, and pyproject.toml.
@github-actions
Copy link

github-actions bot commented Feb 5, 2026

Overall Coverage

Coverage Report
FileStmtsMissCoverMissing
__init__.py80100% 
data_io
   SessionIOHandler.py3504686%112, 129–130, 174–175, 185–186, 253–254, 318–319, 322, 362–364, 415–417, 439, 441–442, 446–448, 513, 588, 609, 623–624, 626–627, 629–631, 764–769, 783, 787–788, 792–794
   find_images_in_folder.py210100% 
   load_images.py28485%29, 76, 135, 143
   metadata_handler.py80890%70–71, 117, 122–123, 170–172
   save_config.py33390%92–94
datasets
   AnomalyDetectionDataset.py2383983%104–105, 335, 341–342, 344, 348, 350–351, 353, 374–375, 377, 383–384, 388, 401–402, 461–462, 468–473, 475–476, 480–483, 485–487, 489–491, 502
   BasicDataset.py46491%59, 61, 81, 96
   Label.py50100% 
   SSL_Dataset.py68395%134, 137, 205
   __init__.py00100% 
   data_utils.py551180%78, 81–83, 137–138, 153, 157, 197, 201, 207
datasets/augmentation
   randaugment.py923265%27, 40–41, 54–55, 68–69, 82, 95, 108–110, 123, 136–137, 176–177, 190–191, 204–205, 222, 225–226, 245, 328–330, 332–335
image_processing
   display_transforms.py34973%23, 32, 36, 88, 91, 94–96, 99
   transforms.py80100% 
models
   FixMatch.py2112886%197–198, 213, 218, 250, 277–278, 281, 284–286, 289, 297, 302–303, 362, 400, 426–430, 491, 493–494, 498, 515–516
pipeline
   SessionTracker.py122397%126, 218–219
   session.py55411279%135–138, 191, 194, 209, 396–399, 444, 457, 601, 603–606, 608–609, 621, 678, 680–681, 689, 692, 703, 711, 732, 742, 746, 750–753, 757, 762–765, 772, 776–779, 791, 801–802, 804, 808, 822–823, 825–827, 829, 832–833, 878, 881–882, 887, 892–893, 895–898, 900–904, 907–908, 910, 916, 921–925, 927, 935, 938–939, 955, 996–997, 1003–1004, 1008–1010, 1012, 1016, 1018, 1032, 1058, 1089–1090, 1098, 1111–1112, 1114, 1122, 1126, 1130, 1135, 1138, 1182, 1185
ui
   Widget.py37810073%156–157, 161–163, 171–172, 175, 183–185, 188–189, 191, 232–238, 246–247, 251, 261, 265, 269, 286, 290, 335–340, 352, 402–404, 470–472, 474–475, 477–478, 480–492, 494–506, 508–510, 517–522, 524–527, 530, 534, 626, 633, 637, 662, 664, 699–701, 706, 710, 714, 725–726
   memory_monitor.py621379%68, 80–82, 90–92, 95, 106–108, 122–123
   preview_widget.py1223769%113–115, 146–147, 149–150, 162, 190, 195–201, 203–204, 228–234, 238–240, 245–246, 250–254, 256–257
   ui_elements.py97495%524–525, 528–529
utils
   accuracy.py130100% 
   consistency_loss.py18288%40–41
   create_model_string.py40100% 
   cross_entropy_loss.py90100% 
   cutana_stream_utils.py753553%40, 54, 70–71, 73–76, 78–88, 90, 95, 111, 113, 115–116, 118, 120–123, 126–130
   get_cosine_schedule_with_warmup.py11190%39
   get_default_cfg.py580100% 
   get_net_builder.py241154%47, 50, 61–64, 69–70, 74, 78–79
   get_optimizer.py21290%55, 59
   numpy_to_byte_stream.py150100% 
   print_cfg.py45491%89, 95, 117, 119
   set_log_level.py150100% 
   set_seeds.py13284%24–25
   validate_config.py1083666%104–105, 155–157, 159, 170–177, 182, 187, 191, 199, 205, 209, 213, 217, 221, 225, 229, 233, 237, 241, 245, 251, 258, 265, 267, 307–309
TOTAL304154981% 

Tests Skipped Failures Errors Time
217 0 💤 0 ❌ 0 🔥 2m 25s ⏱️

@gomezzz gomezzz merged commit ce957ff into main Feb 5, 2026
6 checks passed
@gomezzz gomezzz deleted the hotfix/bump-pytorch-2.6-cve branch February 5, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant