-
Notifications
You must be signed in to change notification settings - Fork 21
Upgrade Struct2Tensor to TensorFlow 2.21.0 #59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
2b698b3
702570c
5fdc9b8
1994d8a
6e5587e
8eac153
bb9f981
2c2bff2
3a9bae5
d3f3188
feab8d9
4f11c33
ac38f7d
efec268
8238e9d
3673f16
3d4acde
801b36b
235d30b
3337585
fad6751
2826028
bf3cb99
77ff03e
d65f52f
fa31c0d
1e4be82
f19f0f9
1001044
10bb8a9
9c30a0e
4972994
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| 7.7.0 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| name: pre-commit | ||
|
|
||
| on: | ||
| pull_request: | ||
| push: | ||
| branches: [master] | ||
|
|
||
| jobs: | ||
| pre-commit: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4.1.7 | ||
| with: | ||
| # Ensure the full history is fetched | ||
| # This is required to run pre-commit on a specific set of commits | ||
| # TODO: Remove this when all the pre-commit issues are fixed | ||
| fetch-depth: 0 | ||
| - uses: actions/setup-python@v5.1.1 | ||
| with: | ||
| python-version: 3.13 | ||
| - uses: pre-commit/action@v3.0.1 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| repos: | ||
| - repo: https://github.com/pre-commit/pre-commit-hooks | ||
| rev: v4.6.0 | ||
| hooks: | ||
| - id: trailing-whitespace | ||
| - id: end-of-file-fixer | ||
| - id: check-yaml | ||
| - id: check-added-large-files |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,10 +1,12 @@ | ||
| name: s2t-env-py311 | ||
| name: s2t-env-py312 | ||
| channels: | ||
| - conda-forge | ||
| dependencies: | ||
| - python=3.11 | ||
| - python>=3.10,<3.14 | ||
|
|
||
| - pip | ||
| - pip: | ||
| - --index-url https://pypi.org/simple | ||
| - absl-py==2.4.0 | ||
| - altgraph==0.17.5 | ||
| - astunparse==1.6.3 | ||
|
|
@@ -16,30 +18,31 @@ dependencies: | |
| - google-pasta==0.2.0 | ||
| - googleapis-common-protos==1.72.0 | ||
| - grpcio==1.78.0 | ||
| - h5py==3.16.0 | ||
| - h5py==3.14.0 | ||
| - idna==3.11 | ||
| - keras==3.13.2 | ||
| - keras>=3.0.0 | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Why is this lowered? The vulnerabilities ask for this to be 3.12.1+.
Collaborator
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Keras is lowered because 3.13.2 dosn't support python 3.10 version, since we have python 3.10 workflows, Instead of removing it, I loosen the dependency to satisfy the requirement. |
||
|
|
||
| - libclang==18.1.1 | ||
| - macholib==1.16.4 | ||
| - markdown==3.10.2 | ||
| - markdown-it-py==4.0.0 | ||
| - markupsafe==3.0.3 | ||
| - mdurl==0.1.2 | ||
| - ml-dtypes==0.4.1 | ||
| - ml-dtypes==0.5.1 | ||
| - namex==0.1.0 | ||
| - numpy==1.26.4 | ||
| - numpy>=1.26.4 | ||
| - opt-einsum==3.4.0 | ||
| - optree==0.19.0 | ||
| - protobuf==4.25.8 | ||
| - pyarrow==10.0.1 | ||
| - pygments==2.19.2 | ||
| - requests==2.32.5 | ||
| - protobuf==6.31.1 | ||
| - pyarrow==23.0.1 | ||
| - pygments==2.20 | ||
| - requests==2.33 | ||
|
|
||
| - rich==14.3.3 | ||
| - six==1.17.0 | ||
| - tensorboard==2.17.1 | ||
| - tensorboard-data-server==0.7.2 | ||
| - tensorflow==2.17.1 | ||
| - tensorflow-io-gcs-filesystem==0.37.1 | ||
| - tensorflow>=2.21.0 | ||
| - tensorflow-metadata==1.17.3 | ||
| - termcolor==3.3.0 | ||
| - typing-extensions==4.15.0 | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should this file include explicit specifications of component versions needed to address vulnerabilities? I don't see components like cryptography, jaraco-context, ipython, pyopenssl.
Also, I see some that have values that don't meet the "fix" level for the vulnerabilities
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've also updated the below dependencies to fix vulnerabilities, meanwhile these are transitive dependency's
[cryptography, jaraco-context, ipython, pyopenssl.]that might be coming from diff components, I think we can't include them here..!There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Noted.