Skip to content

SEC-32: updating python dependencies #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions examples/research_projects/codeparrot/requirements.txt
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
transformers==4.38.0
transformers==4.50.0
datasets==1.16.0
wandb==0.12.0
wandb>=0.17.0
tensorboard==2.6.0
torch==1.13.1
huggingface-hub==0.1.0
torch==2.6.0
huggingface-hub==0.24.7
git+https://github.com/huggingface/accelerate.git@3c45b6f760ad8745be9ebc9bbb26f5b04dea4abe
datasketch==1.5.7
dpu_utils
dpu_utils
Original file line number Diff line number Diff line change
Expand Up @@ -117,7 +117,7 @@ multiprocess==0.70.12.2
mypy-extensions==0.4.3
nltk==3.7
numba==0.55.1
numpy==1.22.3
numpy==1.26.4
oauthlib==3.2.2
onnx>=1.15.0
onnxconverter-common==1.9.0
Expand All @@ -144,7 +144,7 @@ portalocker==2.0.0
poyo==0.5.0
prettytable==3.2.0
prompt-toolkit==3.0.28
protobuf==3.19.5
protobuf==4.25.8
psutil==5.9.0
ptyprocess==0.7.0
pure-eval==0.2.2
Expand Down Expand Up @@ -217,7 +217,7 @@ timm==0.5.4
tokenizers==0.11.6
tomli==2.0.1
toolz==0.11.2
torch==1.13.1
torch==2.6.0
torchaudio==0.11.0
torchvision==0.12.0
tqdm==4.66.3
Expand All @@ -237,4 +237,4 @@ Werkzeug==3.0.3
wrapt==1.14.0
xxhash==3.0.0
yarl==1.7.2
zipp==3.19.1
zipp==3.19.1
2 changes: 1 addition & 1 deletion examples/research_projects/deebert/requirements.txt
Original file line number Diff line number Diff line change
@@ -1 +1 @@
transformers == 4.38.0
transformers == 4.50.0
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@ jaxlib>=0.1.59
flax>=0.3.5
optax>=0.0.8
-f https://download.pytorch.org/whl/torch_stable.html
torch==1.13.1
torch==2.6.0
-f https://download.pytorch.org/whl/torch_stable.html
torchvision==0.10.0+cpu
torchvision==0.10.0+cpu
8 changes: 4 additions & 4 deletions examples/research_projects/lxmert/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -39,16 +39,16 @@ jupyterlab-pygments==0.1.1
kiwisolver==1.2.0
lockfile==0.12.2
MarkupSafe==1.1.1
matplotlib==3.3.1
matplotlib>=3.9.0
mistune==2.0.3
msgpack==0.6.2
nbclient==0.5.0
nbconvert==6.5.1
nbformat==5.0.7
nest-asyncio==1.4.0
notebook==6.4.12
numpy==1.22.0
opencv-python==4.4.0.42
numpy==1.26.4
opencv-python==4.8.1

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Risk: [email protected] has 1 vulnerability

Severity: High 🚨
Status: Open 🔴

Suggested reviewers 🧐: @Shasheen8

Take action by replying with an [arnica] command 💬

Actions

Use [arnica] or [a] to interact with the Arnica bot to acknowledge or dismiss code risks.

To acknowledge the finding as a valid code risk:

[arnica] ack <acknowledge additional details>

To dismiss the risk with a reason:

[arnica] dismiss <fp|accept|capacity> <dismissal reason>

Examples

  • [arnica] ack This is a valid risk and im looking into it

  • [arnica] dismiss fp Dismissed - Risk Not Accurate: (i.e. False Positive)

  • [arnica] dismiss accept Dismiss - Risk Accepted: Allow the risk to exist in the system

  • [arnica] dismiss capacity Dismiss - No Capacity: This will need to wait for a future sprint

Arnica Notion documentation:
https://www.notion.so/together-docs/Arnica-1e5b878aad1a80318f00ce58a061a463

packaging==20.3
pandas==1.1.2
pandocfilters==1.4.2
Expand Down Expand Up @@ -84,7 +84,7 @@ six==1.14.0
terminado==0.8.3
testpath==0.4.4
tokenizers==0.8.1rc2
torch==1.13.1
torch==2.6.0
torchvision==0.7.0
tornado==6.4.1
tqdm==4.66.3
Expand Down
2 changes: 1 addition & 1 deletion examples/research_projects/pplm/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -19,4 +19,4 @@ pytest
conllu
sentencepiece != 0.1.92
protobuf
transformers==4.38.0
transformers==4.50.0
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@ faiss-cpu >= 1.7.2
datasets
psutil >= 5.9.1
torch >= 1.11.0
pytorch-lightning == 1.6.4
pytorch-lightning == 2.4.0
nvidia-ml-py3 == 7.352.0
ray >= 1.13.0
ray >= 1.13.0
6 changes: 3 additions & 3 deletions examples/research_projects/visual_bert/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -47,8 +47,8 @@ nbconvert==6.5.1
nbformat==5.0.7
nest-asyncio==1.4.0
notebook==6.4.12
numpy==1.22.0
opencv-python==4.4.0.42
numpy==1.26.4
opencv-python==4.8.1

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Risk: [email protected] has 1 vulnerability

Severity: High 🚨
Status: Open 🔴

Suggested reviewers 🧐: @Shasheen8

Take action by replying with an [arnica] command 💬

Actions

Use [arnica] or [a] to interact with the Arnica bot to acknowledge or dismiss code risks.

To acknowledge the finding as a valid code risk:

[arnica] ack <acknowledge additional details>

To dismiss the risk with a reason:

[arnica] dismiss <fp|accept|capacity> <dismissal reason>

Examples

  • [arnica] ack This is a valid risk and im looking into it

  • [arnica] dismiss fp Dismissed - Risk Not Accurate: (i.e. False Positive)

  • [arnica] dismiss accept Dismiss - Risk Accepted: Allow the risk to exist in the system

  • [arnica] dismiss capacity Dismiss - No Capacity: This will need to wait for a future sprint

Arnica Notion documentation:
https://www.notion.so/together-docs/Arnica-1e5b878aad1a80318f00ce58a061a463

packaging==20.3
pandas==1.1.2
pandocfilters==1.4.2
Expand Down Expand Up @@ -84,7 +84,7 @@ six==1.14.0
terminado==0.8.3
testpath==0.4.4
tokenizers==0.8.1rc2
torch==1.13.1
torch==2.6.0
torchvision==0.7.0
tornado==6.4.1
tqdm==4.66.3
Expand Down
2 changes: 1 addition & 1 deletion examples/tensorflow/language-modeling-tpu/requirements.txt
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
transformers==4.38.0
transformers==4.50.0
datasets==2.9.0
tokenizers==0.13.2
Loading