Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion docker/ray-llm/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ COPY python/deplocks/llm/rayllm_*.lock ./

# vLLM version tag to use for EP kernel and DeepGEMM install scripts
# Keep in sync with vllm version in python/requirements/llm/llm-requirements.txt
ARG VLLM_SCRIPTS_REF="v0.16.0"
ARG VLLM_SCRIPTS_REF="v0.17.0"

RUN <<EOF
#!/bin/bash
Expand All @@ -30,8 +30,13 @@ else
exit 1
fi

# Hash verification is disabled because uv pip compile generates hashes from
# PyPI, but unsafe-best-match may download from the CUDA index which serves
# different builds of some packages (e.g. triton). The lock file still pins
# exact versions, so integrity is maintained through version pinning.
uv pip install --system --no-cache-dir --no-deps \
--index-strategy unsafe-best-match \
--no-verify-hashes \
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disabling hash verification weakens supply chain security

Medium Severity

Adding --no-verify-hashes disables integrity checking for all packages installed from the lock file. The lock files still contain hashes, but they are completely ignored during installation. This means a compromised or tampered package on the CUDA index (or any alternate index used via unsafe-best-match) could be installed without detection. While version pinning provides some defense, hash verification is the primary protection against supply chain attacks where an index serves a modified binary for a pinned version. A more targeted fix — such as regenerating hashes from the actual CUDA index, or excluding only the mismatched packages — would preserve integrity checking for the majority of dependencies.

Fix in Cursor Fix in Web

-r "rayllm_${PYTHON_CODE}_${CUDA_CODE}.lock"

# Export installed packages
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2250,9 +2250,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is this downgraded?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is compiled from https://github.com/ray-project/ray/blob/15a473454084a739264ce66290d7d4fc1b3926b4/python/requirements/serve/tracing-reqs.txt + all opentelemetry libraries should have the same version.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hmm... that does not really make sense to me.

  1. how is the tracing-reqs.txt get pulled in with this change?
  2. should that be upgraded to 1.39.0 for consistency?

I think it is that some additional dependency of vllm 0.17 is pulling the version down

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@elliot-barn could you help investigate? like what will happen if we enforce opentelemetry-proto>=1.39.0 as a constraint?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

 opentelemetry-proto 1.40.0 depends on protobuf<7.0 and >=5.0
  opentelemetry-proto 1.39.1 depends on protobuf<7.0 and >=5.0
  opentelemetry-proto 1.39.0 depends on protobuf<7.0 and >=5.0

we are still on 4.25.8 and py313 dependency upgrade initiative will bring us to 5.29.6

--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unintended opentelemetry-proto downgrade across non-LLM lock files

Medium Severity

opentelemetry-proto is downgraded from 1.39.0 to 1.34.1 not only in LLM lock files but also in unrelated base, slim, and serve lock files that have no dependency on vLLM. As the PR reviewers noted, a vLLM upgrade should not pull down opentelemetry-proto in non-LLM environments. This broad, unexplained regression may indicate a dependency resolution issue — possibly a transitive constraint leaking through shared constraint files — and risks incompatibilities with components expecting the newer proto version.

Additional Locations (2)
Fix in Cursor Fix in Web

# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
Expand Down
3,596 changes: 1,833 additions & 1,763 deletions python/deplocks/base_extra_testdeps/ray-llm-base_extra_testdeps_py3.11.lock

Large diffs are not rendered by default.

1,913 changes: 961 additions & 952 deletions python/deplocks/base_extra_testdeps/ray-llm-base_extra_testdeps_py3.12.lock

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions python/deplocks/base_slim/ray_base_slim_py3.13.lock
Original file line number Diff line number Diff line change
Expand Up @@ -2046,9 +2046,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
Expand Down
6 changes: 3 additions & 3 deletions python/deplocks/ci/serve_base_depset_py3.10.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1881,9 +1881,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
Expand Down
6 changes: 3 additions & 3 deletions python/deplocks/ci/serve_base_depset_py3.12.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1868,9 +1868,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
Expand Down
6 changes: 3 additions & 3 deletions python/deplocks/ci/serve_tracing_depset_py3.10.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1938,9 +1938,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ray
Expand Down
7 changes: 4 additions & 3 deletions python/deplocks/llm/ray_py311_cpu.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1290,9 +1290,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c python/deplocks/llm/ray_test_py311_cpu.lock
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c python/deplocks/llm/ray_test_py311_cpu.lock
# -r python/requirements.txt
Expand Down Expand Up @@ -2107,6 +2107,7 @@ typer==0.15.1 \
# -c python/deplocks/llm/ray_test_py311_cpu.lock
# -r python/requirements.txt
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c python/deplocks/llm/ray_test_py311_cpu.lock
Expand Down
7 changes: 4 additions & 3 deletions python/deplocks/llm/ray_py311_cu128.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1290,9 +1290,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c python/deplocks/llm/ray_test_py311_cu128.lock
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c python/deplocks/llm/ray_test_py311_cu128.lock
# -r python/requirements.txt
Expand Down Expand Up @@ -2107,6 +2107,7 @@ typer==0.15.1 \
# -c python/deplocks/llm/ray_test_py311_cu128.lock
# -r python/requirements.txt
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c python/deplocks/llm/ray_test_py311_cu128.lock
Expand Down
9 changes: 6 additions & 3 deletions python/deplocks/llm/ray_py312_cpu.lock
Original file line number Diff line number Diff line change
Expand Up @@ -809,6 +809,7 @@ izulu==0.50.0 \
# -c python/deplocks/llm/ray_test_py312_cpu.lock
# taskiq
jinja2==3.1.6 ; sys_platform != 'win32' \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c python/deplocks/llm/ray_test_py312_cpu.lock
Expand Down Expand Up @@ -1289,9 +1290,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c python/deplocks/llm/ray_test_py312_cpu.lock
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c python/deplocks/llm/ray_test_py312_cpu.lock
# -r python/requirements.txt
Expand Down Expand Up @@ -2106,6 +2107,7 @@ typer==0.15.1 \
# -c python/deplocks/llm/ray_test_py312_cpu.lock
# -r python/requirements.txt
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c python/deplocks/llm/ray_test_py312_cpu.lock
Expand Down Expand Up @@ -2366,6 +2368,7 @@ yarl==1.18.3 \
# -c python/deplocks/llm/ray_test_py312_cpu.lock
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c python/deplocks/llm/ray_test_py312_cpu.lock
Expand Down
9 changes: 6 additions & 3 deletions python/deplocks/llm/ray_py312_cu130.lock
Original file line number Diff line number Diff line change
Expand Up @@ -809,6 +809,7 @@ izulu==0.50.0 \
# -c python/deplocks/llm/ray_test_py312_cu130.lock
# taskiq
jinja2==3.1.6 ; sys_platform != 'win32' \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c python/deplocks/llm/ray_test_py312_cu130.lock
Expand Down Expand Up @@ -1289,9 +1290,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c python/deplocks/llm/ray_test_py312_cu130.lock
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c python/deplocks/llm/ray_test_py312_cu130.lock
# -r python/requirements.txt
Expand Down Expand Up @@ -2106,6 +2107,7 @@ typer==0.15.1 \
# -c python/deplocks/llm/ray_test_py312_cu130.lock
# -r python/requirements.txt
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c python/deplocks/llm/ray_test_py312_cu130.lock
Expand Down Expand Up @@ -2366,6 +2368,7 @@ yarl==1.18.3 \
# -c python/deplocks/llm/ray_test_py312_cu130.lock
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c python/deplocks/llm/ray_test_py312_cu130.lock
Expand Down
10 changes: 7 additions & 3 deletions python/deplocks/llm/ray_test_py311_cpu.lock
Original file line number Diff line number Diff line change
Expand Up @@ -565,6 +565,7 @@ cloudpickle==3.1.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# gymnasium
colorama==0.4.6 \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -1278,6 +1279,7 @@ jedi==0.19.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ipython
jinja2==3.1.6 \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -2084,9 +2086,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
Expand Down Expand Up @@ -3324,6 +3326,7 @@ types-python-dateutil==2.9.0.20240316 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# arrow
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -3627,6 +3630,7 @@ yarl==1.18.3 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down
10 changes: 7 additions & 3 deletions python/deplocks/llm/ray_test_py311_cu128.lock
Original file line number Diff line number Diff line change
Expand Up @@ -565,6 +565,7 @@ cloudpickle==3.1.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# gymnasium
colorama==0.4.6 \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -1278,6 +1279,7 @@ jedi==0.19.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ipython
jinja2==3.1.6 \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -2084,9 +2086,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
Expand Down Expand Up @@ -3324,6 +3326,7 @@ types-python-dateutil==2.9.0.20240316 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# arrow
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -3627,6 +3630,7 @@ yarl==1.18.3 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down
10 changes: 7 additions & 3 deletions python/deplocks/llm/ray_test_py312_cpu.lock
Original file line number Diff line number Diff line change
Expand Up @@ -565,6 +565,7 @@ cloudpickle==3.1.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# gymnasium
colorama==0.4.6 \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -1278,6 +1279,7 @@ jedi==0.19.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ipython
jinja2==3.1.6 \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -2084,9 +2086,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
Expand Down Expand Up @@ -3322,6 +3324,7 @@ types-python-dateutil==2.9.0.20240316 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# arrow
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -3625,6 +3628,7 @@ yarl==1.18.3 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down
10 changes: 7 additions & 3 deletions python/deplocks/llm/ray_test_py312_cu130.lock
Original file line number Diff line number Diff line change
Expand Up @@ -565,6 +565,7 @@ cloudpickle==3.1.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# gymnasium
colorama==0.4.6 \
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -1278,6 +1279,7 @@ jedi==0.19.1 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# ipython
jinja2==3.1.6 \
--hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
--hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -2084,9 +2086,9 @@ opentelemetry-exporter-prometheus==0.55b1 \
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
opentelemetry-proto==1.39.0 \
--hash=sha256:1e086552ac79acb501485ff0ce75533f70f3382d43d0a30728eeee594f7bf818 \
--hash=sha256:c1fa48678ad1a1624258698e59be73f990b7fc1f39e73e16a9d08eef65dd838c
opentelemetry-proto==1.34.1 \
--hash=sha256:16286214e405c211fc774187f3e4bbb1351290b8dfb88e8948af209ce85b719e \
--hash=sha256:eb4bb5ac27f2562df2d6857fc557b3a481b5e298bc04f94cc68041f00cebcbd2
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# -r python/requirements.txt
Expand Down Expand Up @@ -3322,6 +3324,7 @@ types-python-dateutil==2.9.0.20240316 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# arrow
typing-extensions==4.15.0 \
--hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
--hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down Expand Up @@ -3625,6 +3628,7 @@ yarl==1.18.3 \
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
# aiohttp
zipp==3.19.2 \
--hash=sha256:bf1dcf6450f873a13e952a29504887c89e6de7506209e5b1bcc3460135d4de19 \
--hash=sha256:f091755f667055f2d02b32c53771a7a6c8b47e1fdbc4b72a8b9072b3eef8015c
# via
# -c /tmp/ray-deps/requirements_compiled_py3.13.txt
Expand Down
Loading
Loading