microsoft / hummingbird

Hummingbird compiles trained ML models into tensor computation for faster inference.
MIT License
3.32k stars 274 forks source link

Protobuf vulnerability #636

Closed ksaur closed 1 year ago

ksaur commented 1 year ago

From the new microsoft/hummingbird/security/dependabot/1, we need to update protobuf>=3.20.2 in setup.py.

However, this version doesn't work yet with onnx (See PR #635) :

× Encountered error while trying to install package.
╰─> onnx

We can try to update this later when onnx supports this

mshr-h commented 1 year ago

Related issue and PR https://github.com/onnx/onnx/issues/4545 https://github.com/onnx/onnx/pull/4535 https://github.com/onnx/onnx/pull/4629

ksaur commented 1 year ago

All 3 of those have merged and we still have fails sigh, I need to investigate