Skip to content

[ITEP-83716] [Dependabot] Updates /autocalibration#733

Open
dmytroye wants to merge 50 commits intomainfrom
dependabot-updates-autocalib
Open

[ITEP-83716] [Dependabot] Updates /autocalibration#733
dmytroye wants to merge 50 commits intomainfrom
dependabot-updates-autocalib

Conversation

@dmytroye
Copy link
Member

📝 Description

Provide a clear summary of the changes and the context behind them. Describe what was changed, why it was needed, and how the changes address the issue or add value.

✨ Type of Change

Select the type of change your PR introduces:

  • 🐞 Bug fix – Non-breaking change which fixes an issue
  • 🚀 New feature – Non-breaking change which adds functionality
  • 🔨 Refactor – Non-breaking change which refactors the code base
  • 💥 Breaking change – Changes that break existing functionality
  • 📚 Documentation update
  • 🔒 Security update
  • 🧪 Tests
  • 🚂 CI

🧪 Testing Scenarios

Describe how the changes were tested and how reviewers can test them too:

  • ✅ Tested manually
  • 🤖 Ran automated end-to-end tests

✅ Checklist

Before submitting the PR, ensure the following:

  • 🔍 PR title is clear and descriptive
  • 📝 For internal contributors: If applicable, include the JIRA ticket number (e.g., ITEP-123456) in the PR title. Do not include full URLs
  • 💬 I have commented my code, especially in hard-to-understand areas
  • 📄 I have made corresponding changes to the documentation
  • ✅ I have added tests that prove my fix is effective or my feature works

dependabot bot and others added 2 commits December 16, 2025 11:41
…ibration (#722)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dmytro Yermolenko <dmytro.yermolenko@intel.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dmytro Yermolenko <dmytro.yermolenko@intel.com>
@dmytroye dmytroye requested a review from Copilot December 16, 2025 10:48
@dmytroye dmytroye marked this pull request as draft December 16, 2025 10:49
Copy link
Member Author

@dmytroye dmytroye left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Don't merge before autocalibration tests fix.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates dependency versions in the autocalibration module's runtime requirements, specifically upgrading intel_extension_for_pytorch from 2.7.0 to 2.8.0 and trimesh from 4.7.4 to 4.10.1 to keep dependencies current.

  • Updated intel_extension_for_pytorch to version 2.8.0
  • Updated trimesh to version 4.10.1

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@dmytroye dmytroye mentioned this pull request Dec 16, 2025
15 tasks
dependabot bot and others added 19 commits December 16, 2025 19:19
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Patryk Iracki <patryk.iracki@intel.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dmytro Yermolenko <dmytro.yermolenko@intel.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Patryk Iracki <patryk.iracki@intel.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dmytro Yermolenko <dmytro.yermolenko@intel.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Patryk Iracki <patryk.iracki@intel.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dmytro Yermolenko <dmytro.yermolenko@intel.com>
@dmytroye dmytroye marked this pull request as ready for review February 25, 2026 10:34
@dmytroye dmytroye requested a review from Copilot February 25, 2026 10:34
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

@dmytroye dmytroye changed the title [Dependabot] Updates /autocalibration [ITEP-83716] [Dependabot] Updates /autocalibration Feb 25, 2026
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

autocalibration/Dockerfile:93

  • The base image has been pinned to a specific SHA256 digest. This is not consistent with other services in the codebase (controller, manager, etc.) which use tag-based references like python:3.11-slim-bookworm.

While SHA256 pinning provides stronger immutability guarantees, it has several drawbacks:

  1. It's harder to review since the digest is opaque
  2. It makes updates more complex and doesn't benefit from security patches to the base image
  3. It's inconsistent with the rest of the codebase

Consider reverting to the tag-based reference python:3.11-slim-bookworm to maintain consistency with other services, unless there's a specific security or reproducibility requirement for this service.

FROM python:3.11-slim-bookworm@sha256:65a93d69fa75478d554f4ad27c85c1e69fa184956261b4301ebaf6dbb0a3543d AS autocalibration-runtime

@dmytroye
Copy link
Member Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants