This is an automated email from the ASF dual-hosted git repository.
Yicong-Huang pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.2 by this push:
new b90c70a5a5 fix(deps, pyamber, v1.2): update dependency torch to
v2.13.0 [security] (#6956)
b90c70a5a5 is described below
commit b90c70a5a55942d83e3ace184185e6ea45a8fbc5
Author: Yicong Huang <[email protected]>
AuthorDate: Mon Jul 27 20:50:32 2026 -0700
fix(deps, pyamber, v1.2): update dependency torch to v2.13.0 [security]
(#6956)
### What changes were proposed in this PR?
Automated backport of #6910 to `release/v1.2`.
Source: 589f601d48025ada64836bbeb3adfc183282bb5c ยท [automation
run](https://github.com/apache/texera/actions/runs/30315421786)
### Any related issues, documentation, discussions?
Backport of #6910, which fixes CVE-2025-3000 / GHSA-rrmf-rvhw-rf47
(torch `torch.jit.script` memory corruption).
### How was this PR tested?
Release-branch CI runs on this branch once the build is fixed and this
PR is marked ready for review.
### Was this PR authored or co-authored using generative AI tooling?
No.
Co-authored-by: Mend Renovate <[email protected]>
Co-authored-by: Xinyuan Lin <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>
---
amber/LICENSE-binary-python | 2 +-
amber/operator-requirements.txt | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python
index b9efdb205d..0751e4f76c 100644
--- a/amber/LICENSE-binary-python
+++ b/amber/LICENSE-binary-python
@@ -326,7 +326,7 @@ Python packages:
- sympy==1.14.0
- threadpoolctl==3.6.0
- tifffile==2026.6.1
- - torch==2.12.1
+ - torch==2.13.0
- zstandard==0.25.0
--------------------------------------------------------------------------------
diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt
index 8eb1e5e24d..5caa56921a 100644
--- a/amber/operator-requirements.txt
+++ b/amber/operator-requirements.txt
@@ -23,8 +23,8 @@ pybase64==1.3.2
# Pin torch to the CPU wheel on Linux x86_64 to avoid the NVIDIA CUDA deps.
--extra-index-url https://download.pytorch.org/whl/cpu
-torch==2.12.1+cpu ; platform_system == "Linux" and platform_machine == "x86_64"
-torch==2.12.1 ; platform_system != "Linux" or platform_machine != "x86_64"
+torch==2.13.0+cpu ; platform_system == "Linux" and platform_machine == "x86_64"
+torch==2.13.0 ; platform_system != "Linux" or platform_machine != "x86_64"
scikit-learn==1.5.0
transformers==5.3.0
