Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Upgrade LeapfrogAI stack to Python >= 3.12.0 #930

Open
justinthelaw opened this issue Aug 19, 2024 · 0 comments
Open

chore: Upgrade LeapfrogAI stack to Python >= 3.12.0 #930

justinthelaw opened this issue Aug 19, 2024 · 0 comments
Labels
dependencies Pull requests that update a dependency file tech-debt Not a feature, but still necessary
Milestone

Comments

@justinthelaw
Copy link
Contributor

Describe what should be investigated or refactored

TLDR: we need to find time to upgrade the entire LFAI stack to Python >= 3.12.0.

IronBank's renovate bot picked and pushed 0.11.0 through the IronBank pipeline! No new CVEs, but our current base image, Python 3.11.8, (which I already had to bump up from 3.11.6), is pushing us into non-compliance. It is not necessarily an immediate alarm, but it is something we eventually need to look deeper into.

PyTorch did release a new update to support 3.12 as of early last month, but it still contains some issues (e.g., cross-platform support) and our downstream deps have: a) not yet migrated to the new PyTorch yet and/or, b) will need some investigation for upgrading to Python 3.12.x in general.

Links to any relevant code

Search for all pyproject.toml files: https://github.com/search?q=repo%3Adefenseunicorns%2Fleapfrogai+pyproject.toml&type=code

Additional context

This may require more upgrades than just Python and PyTorch. We need to list out all dependencies that rely on PyTorch, and whether they have upgraded to PyTorch 2.4.0. We also need to wait for PyTorch to create a new release targeting cross-platform support for Python >= 3.12.0.

@justinthelaw justinthelaw added dependencies Pull requests that update a dependency file tech-debt Not a feature, but still necessary labels Aug 19, 2024
@justinthelaw justinthelaw added this to the EVERGREEN milestone Aug 19, 2024
@justinthelaw justinthelaw changed the title Upgrade LeapfrogAI stack to Python >= 3.12.0 chore: Upgrade LeapfrogAI stack to Python >= 3.12.0 Sep 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file tech-debt Not a feature, but still necessary
Projects
None yet
Development

No branches or pull requests

1 participant