From e63ff786dda6a6859e9f4f369466ad12c45cc042 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 9 Jul 2026 04:17:18 +0000 Subject: [PATCH 1/2] deps(lora): bump the lora-deps group across 1 directory with 4 updates Updates the requirements on [nltk](https://github.com/nltk/nltk), [uvicorn](https://github.com/Kludex/uvicorn), [tqdm](https://github.com/tqdm/tqdm) and [torch](https://github.com/pytorch/pytorch) to permit the latest version. Updates `nltk` to 3.10.0 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](https://github.com/nltk/nltk/compare/v3.10.0-rc1...v3.10.0) Updates `uvicorn` to 0.51.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0) Updates `tqdm` to 4.68.4 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](https://github.com/tqdm/tqdm/compare/v4.68.3...v4.68.4) Updates `torch` to 2.13.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](https://github.com/pytorch/pytorch/compare/ciflow/torchtitan/157149...v2.13.0) --- updated-dependencies: - dependency-name: nltk dependency-version: 3.10.0 dependency-type: direct:production dependency-group: lora-deps - dependency-name: uvicorn dependency-version: 0.51.0 dependency-type: direct:production dependency-group: lora-deps - dependency-name: tqdm dependency-version: 4.68.4 dependency-type: direct:production dependency-group: lora-deps - dependency-name: torch dependency-version: 2.13.0 dependency-type: direct:production dependency-group: lora-deps ... Signed-off-by: dependabot[bot] --- .../microsoft_phi-silica-3.6_v1/local_train/requirements.txt | 4 ++-- .../microsoft_phi-silica-3.6_v1/requirements-advanced.txt | 4 ++-- .../microsoft_phi-silica-3.6_v1/requirements.txt | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/local_train/requirements.txt b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/local_train/requirements.txt index 5ee844960..90d72660a 100644 --- a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/local_train/requirements.txt +++ b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/local_train/requirements.txt @@ -2,7 +2,7 @@ # No Azure dependencies - just core ML libraries # Core ML frameworks -torch>=2.12.1 +torch>=2.13.0 transformers>=5.13.0 peft>=0.19.1 datasets>=5.0.0 @@ -10,7 +10,7 @@ accelerate>=1.14.0 # Utilities pyyaml>=6.0.3 -tqdm>=4.68.3 +tqdm>=4.68.4 # Optional: Quantization support (for 4bit/8bit training) # Uncomment if using use_4bit or use_8bit in config: diff --git a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements-advanced.txt b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements-advanced.txt index 7b6ed7a5f..924522ce4 100644 --- a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements-advanced.txt +++ b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements-advanced.txt @@ -8,7 +8,7 @@ sentence-transformers>=5.6.0 rouge-score>=0.1.2 sacrebleu>=2.6.0 # Security pin: avoid vulnerable NLTK 3.9.4 (path traversal); keep within current major. -nltk>=3.9.5,<4 +nltk>=3.10.0,<4 # Memory optimization bitsandbytes>=0.49.2 @@ -23,7 +23,7 @@ scipy>=1.18.0 # Model serving & deployment fastapi>=0.139.0 -uvicorn[standard]>=0.50.2 +uvicorn[standard]>=0.51.0 pydantic>=2.13.4 # Model export diff --git a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements.txt b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements.txt index 701a2254b..95bbd5352 100644 --- a/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements.txt +++ b/ai-projects/lora-training/microsoft_phi-silica-3.6_v1/requirements.txt @@ -4,7 +4,7 @@ datasets>=5.0.0 transformers>=5.13.0 peft>=0.19.1 accelerate>=1.14.0 -tqdm>=4.68.3 +tqdm>=4.68.4 einops>=0.8.2 numpy>=2.5.1 # Install torch appropriate to your CUDA; example: From f78f9e3a64e020c287204b76f944b423e48e06f1 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 9 Jul 2026 04:33:22 +0000 Subject: [PATCH 2/2] style: apply automated autofixes (ruff / prettier / clang-format) [CodeQL Advanced] --- .github/CodeQL Analysis.yml | 1 - .github/agent.md | 1 - 2 files changed, 2 deletions(-) diff --git a/.github/CodeQL Analysis.yml b/.github/CodeQL Analysis.yml index 8b1378917..e69de29bb 100644 --- a/.github/CodeQL Analysis.yml +++ b/.github/CodeQL Analysis.yml @@ -1 +0,0 @@ - diff --git a/.github/agent.md b/.github/agent.md index 8b1378917..e69de29bb 100644 --- a/.github/agent.md +++ b/.github/agent.md @@ -1 +0,0 @@ -