build: update torchvision requirement from <0.24.0,>=0.22.0 to >=0.22.0,<0.27.0#626
build: update torchvision requirement from <0.24.0,>=0.22.0 to >=0.22.0,<0.27.0#626dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Updates the requirements on [torchvision](https://github.com/pytorch/vision) to permit the latest version. - [Release notes](https://github.com/pytorch/vision/releases) - [Commits](pytorch/vision@v0.22.0...v0.26.0) --- updated-dependencies: - dependency-name: torchvision dependency-version: 0.26.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Comment @cursor review or bugbot run to trigger another review on this PR
Reviewed by Cursor Bugbot for commit fef9663. Configure here.
| "intel-extension-for-pytorch>=2.7.0", | ||
| "torch>=2.7.0,<2.9.0", | ||
| "torchvision>=0.22.0,<0.24.0", | ||
| "torchvision>=0.22.0,<0.27.0", |
There was a problem hiding this comment.
Torchvision upper bound misaligned with torch constraint
Medium Severity
The intel extra pins torch>=2.7.0,<2.9.0 but now allows torchvision>=0.22.0,<0.27.0. Torchvision is tightly coupled with torch (0.22→2.7, 0.23→2.8, 0.24→2.9, 0.25→2.10, 0.26→2.11), so torchvision versions 0.24–0.26 are incompatible with the torch<2.9.0 constraint. The previous upper bound of <0.24.0 was correctly aligned. This will cause dependency resolution failures or runtime incompatibilities for users of the intel extra.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit fef9663. Configure here.
Up to standards ✅🟢 Issues
|


Updates the requirements on torchvision to permit the latest version.
Release notes
Sourced from torchvision's releases.
Commits
336d36e[Cherry-pick for 0.26] Fix CPU decode_jpeg error-path leak on malformed JPEGs...4fe736f[Cherry-pick for 0.26] Remove rest of video decoder APIs (#9421)31d3aa3[Release 0.26] update test-infra refs and version (#9390)186879a[Release 0.26] remove CVCUDA stuff - not yet ready for release (#9389)b29ac89[Release 0.26] remove prototype (#9388)0f6d91dVectorize masks_to_boxes for performance (#9358)326a11dElasticTransform docs: fix issue#8879 (#9350)74d1285Fix CXCYWH to XYXY conversion for integer bounding boxes (#9322)6940e19add warning for CelebA bbox data (#9339)4b0a90cUpdate version to 0.26.0a0 (#9376)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)