SAP / credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:
Apache License 2.0
317 stars 49 forks source link

Bump tensorflow from 2.15.0 to 2.15.0.post1 #287

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 11 months ago

Bumps tensorflow from 2.15.0 to 2.15.0.post1.

Changelog

Sourced from tensorflow's changelog.

Release 2.15.0.post1

TensorFlow

Bug Fixes and Other Changes

  • Hot-fix was needed for an issue affecting the TensorFlow installation process.
    • TensorFlow 2.15.0 Python package was requesting tensorrt-related packages that cannot be found unless the user installs them beforehand or provides additional installation flags.
    • This dependency affected anyone installing TensorFlow 2.15 alongside NVIDIA CUDA dependencies via pip install tensorflow[and-cuda].
    • Depending on the installation method, TensorFlow 2.14 would be installed instead of 2.15, or users could receive an installation error due to those missing dependencies.
  • TensorFlow 2.15.0.post1 is being released for Linux x86_64 to resolve this issue as quickly as possible.
    • This version removes the tensorrt Python package dependencies from the tensorflow[and-cuda] installation method to ensure pip install tensorflow[and-cuda] works as originally intended for TensorFlow 2.15.
    • Support for TensorRT is otherwise unaffected as long as TensorRT is already installed on the system.
  • Using .post1 instead of a full minor release allowed us to push this release out quickly. However, please note the following caveat:
    • For users wishing to pin their Python dependency in a requirements file or other situation, under Python's version specification rules, tensorflow[and-cuda]==2.15.0 will not install this fixed version. Please use ==2.15.0.post1 to specify this exact version on Linux platforms, or a fuzzy version specification, such as ==2.15.*, to specify the most recent compatible version of TensorFlow 2.15 on all platforms.
Commits


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot[bot] commented 7 months ago

Superseded by #299.