Skip to content

Bump modelscope from 1.25.0 to 1.27.0#2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/modelscope-1.27.0
Open

Bump modelscope from 1.25.0 to 1.27.0#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/modelscope-1.27.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Bumps modelscope from 1.25.0 to 1.27.0.

Release notes

Sourced from modelscope's releases.

v1.27.0

image

English Version

  • Added an ASCII logo to the ModelScope command-line interface 😄.
  • Increased the maximum number of supported files per repository to 50,000.
  • Added requirements.txt to legacy model repositories to ensure backward compatibility, automatically installing required older versions of dependencies (transformers, huggingface_hub, diffusers) for proper model execution.
  • Added ACoderPassBy/HifiSSR and ACoderPassBy/UnetVC model inference code with runnable README examples for voice cloning and speech enhancement tasks. #1208
  • Enabled CLI upload to create repository directly if non-exists, streamlining model publishing workflow. #1351
  • Fixed GPU memory leak issue in speaker_verification_res2net pipeline during multiple invocations. #1349
  • Introduced scan_cache_dir utility to visualize local model cache status and optimize storage management. #1348
  • Enhanced security framework with remote code execution verification mechanism to address vulnerability #1331, allowing explicit trust control for third-party model code via trust_remote_code parameter. #1333
  • Optimized intra-cloud acceleration for model downloading with adaptive network protocol selection. #1315
  • Implemented granular code security controls for importlib usage scenarios with precise file list filtering. #1323

中文版本

  • ModelScope 命令行运行环境添加ASCII logo 😄。
  • 放松单repo支持文件数到5w。
  • 为保障一批早期模型正常运行,在这些模型仓库中新增requirements.txt文件,运行时将自动安装适配的旧版依赖库(transformers、huggingface_hub、diffusers等)以解决兼容性问题。
  • 新增ACoderPassBy/HifiSSR和ACoderPassBy/UnetVC模型推理代码,提供可运行的README示例代码,支持语音克隆与语音增强任务 modelscope/modelscope#1208
  • 支持CLI命令行上传时自动创建目标仓库(若不存在),优化模型发布流程 modelscope/modelscope#1351
  • 修复speaker_verification_res2net流水线多次调用导致的显存泄露问题 modelscope/modelscope#1349
  • 新增本地缓存目录扫描功能(scan_cache_dir),可视化展示模型缓存状态并优化存储管理 modelscope/modelscope#1348
  • 修复安全漏洞(CVE-2023-1331),通过trust_remote_code参数实现第三方模型代码的分级信任控制 modelscope/modelscope#1333
  • 优化云上环境模型下载自适应全链路加速功能,支持智能网络协议选择 modelscope/modelscope#1315
  • 细化importlib使用场景的代码安全控制,实现模型下载过程的精准文件列表过滤 modelscope/modelscope#1323

What's Changed

New Contributors

Full Changelog: modelscope/modelscope@v1.26.0...v1.27.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [modelscope](https://github.com/modelscope/modelscope) from 1.25.0 to 1.27.0.
- [Release notes](https://github.com/modelscope/modelscope/releases)
- [Commits](modelscope/modelscope@v1.25.0...v1.27.0)

---
updated-dependencies:
- dependency-name: modelscope
  dependency-version: 1.27.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants