Skip to content

deps: bump torch from 2.10.0 to 2.12.0+cpu in the pip group across 1 directory#625

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-1dd2fe199f
Closed

deps: bump torch from 2.10.0 to 2.12.0+cpu in the pip group across 1 directory#625
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-1dd2fe199f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip group with 1 update in the / directory: torch.

Updates torch from 2.10.0 to 2.12.0+cpu

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the pip group with 1 update in the / directory: torch.


Updates `torch` from 2.10.0 to 2.12.0+cpu

---
updated-dependencies:
- dependency-name: torch
  dependency-version: 2.12.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: bump torch from 2.10.0 to 2.12.1 in the pip group across 1 directory deps: bump torch from 2.10.0 to 2.12.0+cpu in the pip group across 1 directory Jul 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-1dd2fe199f branch from a644ad9 to 49e96ca Compare July 9, 2026 14:57
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

LS multi-model PR review

  • Exact head: 49e96ca939e3ee25d6050eceecd8dbfd66c4aeba
  • Base: 50bc8e4d09e30e8cc0242a0544b6f7cf4ca1103e
  • Provider: openrouter
  • Status: PARTIAL
  • Aggregate verdict: COMMENT
  • Mode: advisory
  • High-risk route: false
  • Diff truncated: false
  • Files represented in bounded evidence: 2/2
  • Policy would block: true

Model executions

Role Model Status Verdict
- - NOT_RUN -

Confirmed findings

No finding reached independent two-model confirmation.

Candidate findings

No structured candidate finding was produced.

Incomplete lanes

  • provider: {'key': 'provider', 'reason': 'provider credential is not configured'}

Authority boundary

This output is evidence for human review. It cannot approve or merge the PR, and a single-model finding remains a candidate rather than a gate decision.

Copy link
Copy Markdown
Owner

Closing as superseded by newer Dependabot PR #881, which advances the same torch dependency line to 2.13.0+cpu. Keeping both PRs open creates duplicate dependency WIP and no additional product value.

@safal207 safal207 closed this Jul 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/pip-1dd2fe199f branch July 12, 2026 14:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant