Skip to content

Bump torch from 2.0.0 to 2.8.0#2

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/torch-2.8.0
Open

Bump torch from 2.0.0 to 2.8.0#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/torch-2.8.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps torch from 2.0.0 to 2.8.0.

Release notes

Sourced from torch's releases.

PyTorch 2.8.0 Release Notes

Highlights

... (truncated)

Commits
  • ba56102 Cherrypick: Add the RunLLM widget to the website (#159592)
  • c525a02 [dynamo, docs] cherry pick torch.compile programming model docs into 2.8 (#15...
  • a1cb3cc [Release Only] Remove nvshmem from list of preload libraries (#158925)
  • c76b235 Move out super large one off foreach_copy test (#158880)
  • 20a0e22 Revert "[Dynamo] Allow inlining into AO quantization modules (#152934)" (#158...
  • 9167ac8 [MPS] Switch Cholesky decomp to column wise (#158237)
  • 5534685 [MPS] Reimplement tri[ul] as Metal shaders (#158867)
  • d19e08d Cherry pick PR 158746 (#158801)
  • a6c044a [cherry-pick] Unify torch.tensor and torch.ops.aten.scalar_tensor behavior (#...
  • 620ebd0 [Dynamo] Use proper sources for constructing dataclass defaults (#158689)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [torch](https://github.com/pytorch/pytorch) from 2.0.0 to 2.8.0.
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.0.0...v2.8.0)

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 19, 2026
@dbmi-svc-checkmarx
Copy link

Logo
Checkmarx One – Scan Summary & Details904949e3-14ae-4119-998e-ccac96734aca

Fixed Issues (30)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
CRITICAL CVE-2025-32434 Python-torch-2.0.0
HIGH CVE-2019-9423 Python-opencv-python-headless-4.13.0.92
HIGH CVE-2024-31580 Python-torch-2.0.0
HIGH CVE-2024-31583 Python-torch-2.0.0
HIGH CVE-2025-55551 Python-torch-2.0.0
HIGH CVE-2025-55553 Python-torch-2.0.0
HIGH CVE-2025-55557 Python-torch-2.0.0
HIGH CVE-2025-55558 Python-torch-2.0.0
HIGH CVE-2025-55560 Python-torch-2.0.0
HIGH CVE-2026-24747 Python-torch-2.0.0
MEDIUM CVE-2024-31584 Python-torch-2.0.0
MEDIUM CVE-2024-34062 Python-tqdm-4.64.1
MEDIUM CVE-2024-5206 Python-scikit-learn-1.2.2
MEDIUM CVE-2025-2953 Python-torch-2.0.0
MEDIUM CVE-2025-2998 Python-torch-2.0.0
MEDIUM CVE-2025-2999 Python-torch-2.0.0
MEDIUM CVE-2025-3000 Python-torch-2.0.0
MEDIUM CVE-2025-3001 Python-torch-2.0.0
MEDIUM CVE-2025-3121 Python-torch-2.0.0
MEDIUM CVE-2025-3136 Python-torch-2.0.0
MEDIUM CVE-2025-3730 Python-torch-2.0.0
MEDIUM CVE-2025-4287 Python-torch-2.0.0
MEDIUM CVE-2025-46148 Python-torch-2.0.0
MEDIUM CVE-2025-46149 Python-torch-2.0.0
MEDIUM CVE-2025-46150 Python-torch-2.0.0
MEDIUM CVE-2025-46152 Python-torch-2.0.0
MEDIUM CVE-2025-55552 Python-torch-2.0.0
MEDIUM CVE-2025-55554 Python-torch-2.0.0
LOW CVE-2025-2148 Python-torch-2.0.0
LOW CVE-2025-63396 Python-torch-2.0.0

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant