Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Bump Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1 - #978

#978
Merged
shanselman merged 1 commit into
mainopenclaw/openclaw-windows-node:mainfrom
dependabot/nuget/src/OpenClaw.Shared/Microsoft.ML.OnnxRuntime-1.27.1openclaw/openclaw-windows-node:dependabot/nuget/src/OpenClaw.Shared/Microsoft.ML.OnnxRuntime-1.27.1Copy head branch name to clipboard
Jul 13, 2026
Merged

Bump Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1#978
shanselman merged 1 commit into
mainopenclaw/openclaw-windows-node:mainfrom
dependabot/nuget/src/OpenClaw.Shared/Microsoft.ML.OnnxRuntime-1.27.1openclaw/openclaw-windows-node:dependabot/nuget/src/OpenClaw.Shared/Microsoft.ML.OnnxRuntime-1.27.1Copy head branch name to clipboard

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.27.1

This is a patch release on top of v1.27.0, containing targeted bug fixes, a CUDA QMoE decode-path optimization, and CI/build infrastructure fixes.

Bug Fixes

  • [MLAS] Fixed an igemm regression in the KleidiAI path (#​28571)
  • Fixed a QMoE CPU livelock by eliminating nested intra-op parallelism (#​29081)
  • Fixed a regression in graph-capture session initialization that rejected an empty graph (#​29457)
  • Fixed CustomOp forward compatibility by capping the version instead of rejecting it (#​29574)

Performance

NVIDIA CUDA EP

  • Added a QMoE GEMV fast path for batch-1 decode (#​29038)

CI & Build Infrastructure

  • Fixed an incorrect identity for azcopy (#​29274)
  • Fixed a brew install applesimutils failure by trusting the wix/brew tap (#​29450)
  • Upgraded to Xcode 26 (#​29468)
  • Stopped echoing the command when setting a VSO variable in mac-cpu-packing-jobs.yml (#​29575)
  • Fixed the web e2e (npm/vite) and Python DML CI pipelines (#​29609)

Contributors

Thanks to our 8 contributors for this release!

@​tianleiwu, @​chilo-ms, @​edgchen1, @​adrastogi, @​damdoo01-arm, @​JonathanC-ARM, @​martin-klacer-arm, @​sanaa-hamel-microsoft

Full Changelog: v1.27.0...v1.27.1

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1
8342f11 
---
updated-dependencies:
- dependency-name: Microsoft.ML.OnnxRuntime
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 13, 2026
@clawsweeper clawsweeper Bot added rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. labels Jul 13, 2026
@clawsweeper

clawsweeper Bot commented Jul 13, 2026

Copy link
Copy Markdown

Codex review: needs maintainer review before merge. Reviewed July 13, 2026, 2:26 AM ET / 06:26 UTC.

Summary
Updates the direct Microsoft.ML.OnnxRuntime dependency in OpenClaw.Shared from 1.27.0 to 1.27.1.

Reproducibility: not applicable. This PR is a direct dependency-maintenance update rather than a report of broken repository behavior.

Review metrics: 2 noteworthy metrics.

  • Dependency Surface: 1 direct production dependency changed. The patch changes only the ONNX Runtime version used by the shared project.
  • Diff Size: 1 file, 1 addition, 1 deletion. The narrow diff limits review complexity and leaves compatibility validation as the primary merge gate.

Merge readiness
Overall: 🐚 platinum hermit
Proof: 🌊 off-meta tidepool
Patch quality: 🐚 platinum hermit
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Rank-up moves:

  • none.

Risk before merge

  • [P1] Microsoft.ML.OnnxRuntime includes native runtime assets, and Windows packaging and audio-runtime compatibility were not yet fully proven because relevant checks remained in progress.

Maintainer options:

  1. Decide the mitigation before merge
    Merge the one-line patch update after the full build, shared tests, tray tests, and applicable native packaging or audio-runtime checks pass on the exact PR head.
  2. Pause or close
    Do not merge this PR until maintainers decide whether the risk is worth taking.

Next step before merge

  • [P2] No repair job is warranted; maintainers should wait for the running exact-head checks and merge if validation is green.

Security
Cleared: The diff updates an existing NuGet package version without adding a feed, script, permission, secret path, lifecycle hook, or unrelated executable source.

Review details

Best possible solution:

Merge the one-line patch update after the full build, shared tests, tray tests, and applicable native packaging or audio-runtime checks pass on the exact PR head.

Do we have a high-confidence way to reproduce the issue?

Not applicable; this PR is a direct dependency-maintenance update rather than a report of broken repository behavior.

Is this the best way to solve the issue?

Yes; updating the existing direct PackageReference in place is the narrowest maintainable approach, provided the repository's Windows build, test, and packaging gates pass.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning high; reviewed against 06b4f6362594.

Label changes

Label changes:

  • add P3: This is routine patch-level dependency maintenance with no reported urgent user regression.
  • add rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Not applicable: The external-contributor proof gate does not apply to this Dependabot-authored dependency PR; exact-head CI and native package validation are the appropriate evidence.

Label justifications:

  • P3: This is routine patch-level dependency maintenance with no reported urgent user regression.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Not applicable: The external-contributor proof gate does not apply to this Dependabot-authored dependency PR; exact-head CI and native package validation are the appropriate evidence.
Evidence reviewed

What I checked:

Likely related people:

  • RBrid: Repository history associates this contributor with the Whisper and Piper audio capability that uses the relevant native inference dependencies. (role: feature owner; confidence: medium; files: src/OpenClaw.Shared/OpenClaw.Shared.csproj, src/OpenClaw.Shared/Audio/PiperVoiceManager.cs, src/OpenClaw.Tray.WinUI/Services/TextToSpeech/PiperTextToSpeechClient.cs)
  • shanselman: Recent repository work on native runtime packaging and dependency auditing makes this contributor a useful routing candidate for package compatibility review. (role: recent adjacent contributor; confidence: medium; files: src/Directory.Build.targets, scripts/Test-ReleaseNativeDependencies.ps1, tests/OpenClaw.Tray.Tests/ReleaseSigningWorkflowTests.cs)
What the crustacean ranks mean
  • 🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
  • 🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
  • 🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
  • 🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
  • 🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
  • 🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
  • 🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works
  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

@arturict

arturict commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Minor update. For dependency bumps, please confirm whether any CI or lockfile regeneration side-effects were expected and if any runtime compatibility checks changed.

@arturict arturict mentioned this pull request Jul 13, 2026
Closed
@arturict

arturict commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Thanks. For dependency bumps, could you list any runtime/manual validation done for the desktop + tray paths?

@arturict

arturict commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Dependency bump looks straightforward. For traceability maybe confirm if package signature/source policy accepts this patch without additional changelog update in this repo?

@shanselman
shanselman merged commit 77c4244 into main Jul 13, 2026
16 checks passed
@shanselman
shanselman deleted the dependabot/nuget/src/OpenClaw.Shared/Microsoft.ML.OnnxRuntime-1.27.1 branch July 13, 2026 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@arturict @shanselman
Morty Proxy This is a proxified and sanitized view of the page, visit original site.