From ecb91a14c7941f88d0ac5b7570568eeb9b261492 Mon Sep 17 00:00:00 2001
From: Ronald Tse <ronald.tse@ribose.com>
Date: Thu, 3 Sep 2026 00:17:42 +0200
Subject: [PATCH] =?UTF-8?q?chore(deps):=20raise=20security=20floors=20?=
 =?UTF-8?q?=E2=80=94=20torch>=3D2.6,=20onnx>=3D1.22,=20tqdm>=3D4.66.3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Owner decision C (TODO.publish/06): clears the critical torch
advisory (<2.6.0) and all onnx/tqdm alerts against the root floors.
The legacy python/{arabic,hebrew}/requirements.txt pins stay frozen
(decision A path for those files); torch advisories patched only in
>=2.9.1/2.13.0 remain open against both.
---
 pyproject.toml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index a517a82..284d221 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -20,12 +20,12 @@ license = { text = "BSD-2-Clause" }
 authors = [{ name = "Ribose Inc.", email = "open.source@ribose.com" }]
 
 dependencies = [
-  "torch>=2.4,<3",
+  "torch>=2.6,<3",
   "numpy>=1.26,<3",
   "omegaconf>=2.3,<3",
-  "onnx>=1.17",
+  "onnx>=1.22",
   "onnxruntime>=1.20",
-  "tqdm>=4.66",
+  "tqdm>=4.66.3",
   "pyyaml>=6.0",
 ]