Add torch to core packages (#4741)

Yadan-Wei · Yadan Wei · web-flow · commit c4aec8de7bed · 2025-04-24T18:21:24.000-07:00
* add torch to core packages

* add quote

* add torch to inference code packages

* fix typo in toml

* fix typo in inference

* remove skip:True

* remove comma

* remove all skip and add vuls to common allowlist

* rebuild

* revert toml

---------

Co-authored-by: Yadan Wei &lt;yadanwei@amazon.com&gt;
diff --git a/data/common-safety-ignorelist.json b/data/common-safety-ignorelist.json
@@ -1,3 +1,4 @@
 {
-    "51358": "Safety is not packaged with container, it is the result of security scanning process"
+    "51358": "Safety is not packaged with container, it is the result of security scanning process",
+    "76769" : "A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Which was built with container and cannot be patched."
 }
diff --git a/pytorch/inference/docker/2.4/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/inference/docker/2.4/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/Dockerfile.ec2.graviton.cpu.core_packages.json b/pytorch/inference/docker/2.4/py3/Dockerfile.ec2.graviton.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/inference/docker/2.4/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/Dockerfile.sagemaker.graviton.cpu.core_packages.json b/pytorch/inference/docker/2.4/py3/Dockerfile.sagemaker.graviton.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.ec2.gpu.core_packages.json b/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.ec2.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.ec2.graviton.gpu.core_packages.json b/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.ec2.graviton.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/inference/docker/2.4/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/Dockerfile.ec2.arm64.cpu.core_packages.json b/pytorch/inference/docker/2.5/py3/Dockerfile.ec2.arm64.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/inference/docker/2.5/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/Dockerfile.sagemaker.arm64.cpu.core_packages.json b/pytorch/inference/docker/2.5/py3/Dockerfile.sagemaker.arm64.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/inference/docker/2.5/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.ec2.arm64.gpu.core_packages.json b/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.ec2.arm64.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.ec2.gpu.core_packages.json b/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.ec2.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/inference/docker/2.5/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/Dockerfile.ec2.arm64.cpu.core_packages.json b/pytorch/inference/docker/2.6/py3/Dockerfile.ec2.arm64.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/inference/docker/2.6/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/Dockerfile.sagemaker.arm64.cpu.core_packages.json b/pytorch/inference/docker/2.6/py3/Dockerfile.sagemaker.arm64.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/inference/docker/2.6/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.ec2.arm64.gpu.core_packages.json b/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.ec2.arm64.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.ec2.gpu.core_packages.json b/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.ec2.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cu124",
     "skip": "True"
diff --git a/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/inference/docker/2.6/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json
@@ -3,6 +3,9 @@
     "version_specifier": "==0.6.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cu124",
     "skip": "True"
diff --git a/pytorch/training/docker/2.4/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/training/docker/2.4/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -11,6 +11,9 @@
     "version_specifier": "==1.2.6",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.4/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/training/docker/2.4/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -11,6 +11,9 @@
     "version_specifier": "==1.3.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.4/py3/cu124/Dockerfile.ec2.gpu.core_packages.json b/pytorch/training/docker/2.4/py3/cu124/Dockerfile.ec2.gpu.core_packages.json
@@ -19,6 +19,9 @@
     "version_specifier": "==2.4.0+cu124",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cu124"
+  },
   "torchtext": {
     "version_specifier": "==0.18.0+cu124",
     "skip": "True"
diff --git a/pytorch/training/docker/2.4/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/training/docker/2.4/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json
@@ -15,6 +15,9 @@
     "version_specifier": "==1.3.0",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.4.0+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.4.0+cu124",
     "skip": "True"
diff --git a/pytorch/training/docker/2.5/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/training/docker/2.5/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -11,6 +11,9 @@
     "version_specifier": "==1.2.6",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.5/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/training/docker/2.5/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -11,6 +11,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.5/py3/cu124/Dockerfile.ec2.gpu.core_packages.json b/pytorch/training/docker/2.5/py3/cu124/Dockerfile.ec2.gpu.core_packages.json
@@ -19,6 +19,9 @@
     "version_specifier": "==1.2.6",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cu124",
     "skip": "True"
diff --git a/pytorch/training/docker/2.5/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/training/docker/2.5/py3/cu124/Dockerfile.sagemaker.gpu.core_packages.json
@@ -19,6 +19,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.5.1+cu124"
+  },
   "torchaudio": {
     "version_specifier": "==2.5.1+cu124",
     "skip": "True"
diff --git a/pytorch/training/docker/2.6/py3/Dockerfile.ec2.cpu.core_packages.json b/pytorch/training/docker/2.6/py3/Dockerfile.ec2.cpu.core_packages.json
@@ -7,6 +7,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.6/py3/Dockerfile.sagemaker.cpu.core_packages.json b/pytorch/training/docker/2.6/py3/Dockerfile.sagemaker.cpu.core_packages.json
@@ -7,6 +7,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cpu"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cpu",
     "skip": "True"
diff --git a/pytorch/training/docker/2.6/py3/cu126/Dockerfile.ec2.gpu.core_packages.json b/pytorch/training/docker/2.6/py3/cu126/Dockerfile.ec2.gpu.core_packages.json
@@ -15,6 +15,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cu126"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cu126",
     "skip": "True"
diff --git a/pytorch/training/docker/2.6/py3/cu126/Dockerfile.sagemaker.gpu.core_packages.json b/pytorch/training/docker/2.6/py3/cu126/Dockerfile.sagemaker.gpu.core_packages.json
@@ -15,6 +15,9 @@
     "version_specifier": "==1.3.2",
     "skip": "True"
   },
+  "torch": {
+    "version_specifier": "==2.6.0+cu126"
+  },
   "torchaudio": {
     "version_specifier": "==2.6.0+cu126",
     "skip": "True"

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`{`
`2`		`- "51358": "Safety is not packaged with container, it is the result of security scanning process"`
	`2`	`+ "51358": "Safety is not packaged with container, it is the result of security scanning process",`
	`3`	`+ "76769" : "A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Which was built with container and cannot be patched."`
`3`	`4`	`}`