Skip to content

🚨 [LightGlue] Remove remote code execution#45122

Merged
vasqu merged 3 commits intomainfrom
fix-lightglue
Mar 31, 2026
Merged

🚨 [LightGlue] Remove remote code execution#45122
vasqu merged 3 commits intomainfrom
fix-lightglue

Conversation

@vasqu
Copy link
Copy Markdown
Contributor

@vasqu vasqu commented Mar 30, 2026

Native model integration should never have anything related to remote code execution: That just means that we would need to add that model natively, not via remote - it can and will not be maintained by us.

Additionally added a new linter rule to check for simple usage of this via trust_remote_code=...

NOTE: The breaking part that we effectively deprecate a subset of the lightglue models (which should not have been added this way); see lightglue_disk and this hub PR

@HuggingFaceDocBuilderDev
Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@vasqu vasqu marked this pull request as ready for review March 31, 2026 11:05
@vasqu
Copy link
Copy Markdown
Contributor Author

vasqu commented Mar 31, 2026

run-slow: lightglue

@github-actions
Copy link
Copy Markdown
Contributor

[For maintainers] Suggested jobs to run (before merge)

run-slow: lightglue

@github-actions
Copy link
Copy Markdown
Contributor

Workflow Run ⚙️

This comment contains run-slow, running the specified jobs:

models: ["models/lightglue"]
quantizations: []

@github-actions
Copy link
Copy Markdown
Contributor

CI Results

Workflow Run ⚙️

Commit Info

Context Commit Description
RUN 796254fa workflow commit (merge commit)
PR fd7d1f56 branch commit (from PR)
main 4f287193 base commit (on main)

✅ No failing test specific to this PR 🎉 👏 !

@vasqu vasqu added the for patch Tag issues / labels that should be included in the next patch label Mar 31, 2026
Copy link
Copy Markdown
Collaborator

@tarekziade tarekziade left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For the linter part LGTM. I think dynamic kwargs can evade the static checker but it cannot be fully solved but that's fine imho

@vasqu vasqu added this pull request to the merge queue Mar 31, 2026
Merged via the queue into main with commit 676559d Mar 31, 2026
28 checks passed
@vasqu vasqu deleted the fix-lightglue branch March 31, 2026 12:11
sirzechs66 pushed a commit to sirzechs66/transformers that referenced this pull request Mar 31, 2026
SangbumChoi pushed a commit to SangbumChoi/transformers that referenced this pull request Apr 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

for patch Tag issues / labels that should be included in the next patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants