Skip to content
This repository has been archived by the owner on Mar 1, 2023. It is now read-only.

Bump onnxruntime from 1.12.1 to 1.13.1 #55

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 25, 2022

Bumps onnxruntime from 1.12.1 to 1.13.1.

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.13.1

Announcements

  • Security issues addressed by this release
    1. A protobuf security issue CVE-2022-1941 that impact users who load ONNX models from untrusted sources, for example, a deep learning inference service which allows users to upload their models then runs the inferences in a shared environment.
    2. An ONNX security vulnerability that allows reading of tensor_data outside the model directory, which allows attackers to read or write arbitrary files on an affected system that loads ONNX models from untrusted sources. (#12915)
  • Deprecations
    • CUDA 10.x support at source code level
    • Windows 8.x support in Nuget/C API prebuilt binaries. Support for Windows 7+ Desktop versions (including Windows servers) will be retained by building ONNX Runtime from source.
    • NUPHAR EP code is removed
  • Dependency versioning updates
    • C++ 17 compiler is now required to build ORT from source. On Linux, GCC version >=7.0 is required.
    • Minimal numpy version bumped to 1.21.6 (from 1.21.0) for ONNX Runtime Python packages
    • Official ONNX Runtime GPU packages now require CUDA version >=11.6 instead of 11.4.

General

  • Expose all arena configs in Python API in an extensible way
  • Fix ARM64 NuGet packaging
  • Fix EP allocator setup issue affecting TVM EP

Performance

  • Transformers CUDA improvements
    • Quantization on GPU for BERT - notebook, documentation on QAT, transformer optimization toolchain and quantized kernels.
    • Add fused attention CUDA kernels for BERT.
    • Fuse Add (bias) and Transpose of Q/K/V into one kernel for Attention and LongformerAttention.
    • Reduce GEMM computation in LongformerAttention with a new weight format.
  • General quantization (tool and kernel)
    • Quantization debugging tool - identify sensitive node/layer from accuracy drop discrepancies
    • QDQ support for dynamic quantization to consolidate quantization formats
    • New quantize API based on QuantConfig
    • New quantized operators: SoftMax, Split, Where

Execution Providers

  • CUDA EP
    • Official ONNX Runtime GPU packages now require CUDA version >=11.6 instead of 11.4.
  • TensorRT EP
    • Build option to link against pre-built onnx-tensorrt parser; this enables potential "no-code" TensorRT minor version upgrades and can be used to build against TensorRT 8.5 EA
    • Improved nested control flow support
    • Improve HashId generation used for uniquely identifying TRT engines. Addresses issues such as TRT Engine Cache Regeneration Issue
    • TensorRT uint8 support
  • OpenVINO EP
    • OpenVINO version upgraded to 2022.2.0
    • Support for INT8 QDQ models from NNCF
    • Support for Intel 13th Gen Core Process (Raptor Lake)
    • Preview support for Intel discrete graphics cards Intel Data Center GPU Flex Series and Intel Arc GPU
    • Increased test coverage for GPU Plugin
  • SNPE EP
  • DirectML EP

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 25, 2022
@dependabot dependabot bot force-pushed the dependabot/gradle/com.microsoft.onnxruntime-onnxruntime-1.13.1 branch from 337e40b to 66faa70 Compare December 5, 2022 12:45
Bumps [onnxruntime](https://github.com/microsoft/onnxruntime) from 1.12.1 to 1.13.1.
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.12.1...v1.13.1)

---
updated-dependencies:
- dependency-name: com.microsoft.onnxruntime:onnxruntime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/com.microsoft.onnxruntime-onnxruntime-1.13.1 branch from 66faa70 to 7fc4c3b Compare January 23, 2023 15:03
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 13, 2023

Superseded by #58.

@dependabot dependabot bot closed this Feb 13, 2023
@dependabot dependabot bot deleted the dependabot/gradle/com.microsoft.onnxruntime-onnxruntime-1.13.1 branch February 13, 2023 09:57
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants