Skip to content

Conversation

@pquentin
Copy link
Member

Following elastic/ml-cpp#2863, which was only applied to 9.x, not 8.x

@prodsecmachine
Copy link

prodsecmachine commented Oct 28, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Licenses 0 0 0 0 0 issues
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copy link
Contributor

@edsavage edsavage left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Note that this PyTorch version includes a fix for a CVE.

which resulted in Huggingface disabling the torch.load method for certain models in in version 4.51.

https://github.com/huggingface/transformers/blame/4884b6bf41f26eb4f894214dc3ae34f80dbed9dd/src/transformers/utils/import_utils.py#L1588

For this reason the Huggingface version was pinned to 4.50.3 in Eland (to ensure model upload still worked.) It should now be fine to upgrade Huggingface to a version later than 4.50.3

@pquentin
Copy link
Member Author

Somehow I pushed the PyTorch upgrade in #810, so this is only about the transformers ugprade.

@pquentin pquentin merged commit a07656c into elastic:main Oct 29, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants