Code cleanup of XPU profiler for incoming scope profiler#1177
Conversation
|
@EikanWang, @gujinghui |
|
@sraikund16 Could you help review this PR? Thanks. |
|
@sraikund16, could you review or suggest who else could do it ? |
|
@malfet could you help review this PR? Thanks. |
|
@sraikund16 has imported this pull request. If you are a Meta employee, you can view this in D88693420. |
aaronenyeshi
left a comment
There was a problem hiding this comment.
Review automatically exported from Phabricator review in Meta.
|
@moksiuc Can you make these lint changes? aostrowski-hbn#4 |
|
@moksiuc has updated the pull request. You must reimport the pull request before landing. |
|
@sraikund16 done |
|
@sraikund16 how to run linter in this repo so I had correct format the next time ? |
Unfortunately we don't have a linter in Kineto externally. We plan on adding it in the coming half |
|
@sraikund16 merged this pull request in 2a430df. |
* fbcode//kineto/libkineto:activity_profiler
Reviewed By: sraikund16
Differential Revision: D85047782
fbshipit-source-id: 2a899ed97b727b86ee64fc3f42edf4e827e5bdb1
* Revert D85047782 (#1159)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1159
This diff reverts D85047782
breaking OSS tests
Depends on D85047782
Reviewed By: sraikund16
Differential Revision: D85474796
fbshipit-source-id: e810930cff39a671c718dd69146dfd88ef96d3fd
* clang-format | Format fbsource with clang-format 21.
Reviewed By: ChristianK275
Differential Revision: D85317706
fbshipit-source-id: b399c5c4b75252999442b7d7d2778e7a241b0025
* Add rocprofiler-sdk support 2 (#1128)
Summary:
Supersedes https://github.com/pytorch/kineto/pull/1050
Convert to using rocprofiler-sdk instead of roctracer for collecting hip api calls and AMD gpu activity.
Reuses most existing roctracer infrastructure with a name for name replacement. Simultaneous support for both roctracer and rocprofiler-sdk was deemed impractical. This would require a whole new set of #ifdefs, a major refactor of the roctracer code, and additional build support. Even then, only one could be active at a time (and you wouldn't want both active).
In homage to the abandoned refactor, RocLogger.cpp/h were created to contain the rocprofbase classes and the api filter.
Roctracer has no established end date.
Rocprofiler-sdk is in rocm_3.1 forward.
This will create a dependency where (newest kineto on old rocm) and (old kineto on newest rocm) could fail to build with AMD gpu support. That window is already over 1 year wide.
Pull Request resolved: https://github.com/pytorch/kineto/pull/1128
Reviewed By: aaronenyeshi
Differential Revision: D82773951
Pulled By: sraikund16
fbshipit-source-id: 56db042d067ca1ea45c90f99d32d46574e36746e
* Add Roctracer Fallback to Device Utils (#1160)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1160
We accidentally forgot to add the fallback here which might prevent PyTorch from building roctracer if the version is below 6.4. Let's add the case directly in the util file
Reviewed By: aaronenyeshi
Differential Revision: D85574902
fbshipit-source-id: 745f31a3e21c60687efd5988f978b7759d47cd17
* Add Safe Accesses to Rocproflogger (#1161)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1161
Saw vector access issues in OSS CI: https://github.com/pytorch/pytorch/actions/runs/18849910562/job/53786425781
It is likely this comes from the usage of .at() in this PR. Lets fix it by just having default values for these unexepected values
Reviewed By: aaronenyeshi
Differential Revision: D85609875
fbshipit-source-id: 18fc141066ea9b0e97234f82a4bf7e6c04bba1a4
* Create PerfettoTraceBuilder to generate protobuf format trace
Summary: The JSON format perfetto trace has render issue for overlapping events. The protobuf format could solve it
Reviewed By: sraikund16
Differential Revision: D85178547
fbshipit-source-id: 720992d01669c679d67d8db8d0f254ef5a9569d9
* Back out "Add rocprofiler-sdk support 2" (#1162)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1162
Original commit changeset: 56db042d067c
Original Phabricator Diff: D82773951
Reviewed By: haoyuz
Differential Revision: D85735557
fbshipit-source-id: 3736c3d3df76953b1ba68fa41c33ad31995d4605
* Add Cuda Event to Kineto Trace (#1164)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1164
Adds event for CUDA 13.0+.
For 12.8 they add the event but there is no way of turning on timestamps.
Reviewed By: aaronenyeshi, haibchen
Differential Revision: D84963573
fbshipit-source-id: 3177df34b93bd46e49246f100da920c27e49ac59
* Backout D85735557 (#1168)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1168
Lets try implementing rocprofiler-sdk again!
Reviewed By: aaronenyeshi
Differential Revision: D86455336
fbshipit-source-id: ac036d01eb32dd97e189db700d517464adf7aab2
* Fix minor windows build errors in libkineto
Summary: Fixes some minor windows build issues I ran into when switching codec avatars to use the xplat version of caffe2
Reviewed By: joesus
Differential Revision: D86335678
fbshipit-source-id: f540a1154be38cf245276ee15cc32388121a44b2
* increate timeouts for daemon registration with Kineto (#1158)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1158
I wanted to share an update regarding recent GPU timeout issues we've been experiencing, particularly affecting the last three GPUs in our 8-worker setups. We've identified the root cause as a "Thundering Herd + Timeout" problem within Dynolog's IPCMonitor, and I'm happy to report that a solution has been drafted.
Previously, when all eight processes simultaneously sent IPC requests to Dynolog, the single-threaded IPCMonitor would process these requests serially. Each request took approximately 10ms, causing later processes to exceed the original 50ms timeout. For instance, the Dynolog logs showed:
```
20:24:45.391549 - Process 2202 registered
20:24:45.401608 - Process 2201 registered (+10ms)
...
20:24:45.441941 - Process 2204 registered (+10ms)
20:24:45.452018 - Process 2206 registered (+10ms)
20:24:45.462101 - Process 2205 registered (+10ms)
```
This serial processing meant that the 6th, 7th, and 8th processes (2204, 2206, and 2205 respectively) were significantly delayed. As a result, they failed with errors like:
```
ERROR:2025-10-13 20:24:45 2204:2265 IpcFabricConfigClient.cpp:188] Failed to receive ondemand config type=3 from dyno: IPC recv fail
ERROR:2025-10-13 20:24:45 2206:2266 IpcFabricConfigClient.cpp:188] Failed to receive ondemand config type=3 from dyno: IPC recv fail
ERROR:2025-10-13 20:24:45 2205:2267 IpcFabricConfigClient.cpp:188] Failed to receive ondemand config type=3 from dyno: IPC recv fail
```
To resolve this, I've increased the IPC timeout to 90ms. This value was chosen because we observed approximately 10ms of processing time per rank, so for 8 ranks, plus a buffer, 90ms provides sufficient time for all processes to register successfully, even under simultaneous load, ensuring that all GPUs can initialize without encountering these timeout errors. This change should significantly improve the stability and reliability of our GPU-accelerated workloads.
Reviewed By: sraikund16
Differential Revision: D84573484
fbshipit-source-id: b89b29d182e4566100ca742c30de695715a70cfa
* Back out "Backout D85735557" (#1173)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1173
Original commit changeset: ac036d01eb32
Original Phabricator Diff: D86455336
Reviewed By: yuguo68
Differential Revision: D86892111
fbshipit-source-id: d08e9b55aacffd9a8b78ebc935bb6e7adb258773
* Remove superfluous logging (#1176)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1176
Added logging for Event Record events in a previous PR but this clogs logging and can cause traces to not open.
Reviewed By: yaoyj11
Differential Revision: D87020156
fbshipit-source-id: 60065de716942f39f56a0e909b84c679cffc9e78
* Roctracer: enable logging of hipEventRecord (#1181)
Summary:
HipEventRecord events were being intentionally suppressed. These are useful for looking at cross stream interactions.
This better matches the cupti supressions here: https://github.com/pytorch/kineto/blob/main/libkineto/src/CuptiActivityProfiler.cpp#L570
Pull Request resolved: https://github.com/pytorch/kineto/pull/1181
Reviewed By: sanrise
Differential Revision: D87481888
Pulled By: sraikund16
fbshipit-source-id: a6f45d89eacd7ff4dd72fbe8cfb9254ee87b59fc
* fbcode/kineto/libkineto/src/EventProfilerController.h
Differential Revision: D87423984
fbshipit-source-id: 7b8152deadec689e6fcb1ee744180a6bef6089c2
* fbcode/kineto/libkineto/src/EventProfilerController.cpp
Differential Revision: D87208739
fbshipit-source-id: 31e95cfbeca92329aad87f0456e68ab85ab56e76
* Silence XPU build warnings (#1183)
Summary:
Mark SYCL headers as system to reduce warnings
Pull Request resolved: https://github.com/pytorch/kineto/pull/1183
Reviewed By: aaronenyeshi
Differential Revision: D88098216
Pulled By: malfet
fbshipit-source-id: 087956ebf45e9b75fa7fc6f6a2a1c4b83da32039
* Add PyTorch integration test to Kineto CI workflow (#1190)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1190
Enhance the libkineto CI workflow to build PyTorch from source with the PR's Kineto changes and run test/test_profiler.py. This ensures Kineto changes are validated in the full PyTorch context before merging, catching integration issues early. The workflow clones PyTorch, replaces its bundled Kineto submodule with the PR version via symlink, compiles PyTorch with CUDA support, and runs the profiler tests on the same A10G GPU instance.
Reviewed By: aaronenyeshi
Differential Revision: D88682098
fbshipit-source-id: 6abdee015955adcd19db652b685b1c91607b04a8
* Use viable/strict branch for PyTorch in libkineto CUDA workflow (#1194)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1194
Changed the PyTorch clone step in the GitHub Actions workflow to use the viable/strict branch instead of main. This ensures testing against a more stable, vetted version of PyTorch rather than the potentially unstable main branch, reducing test flakiness and unexpected breakages.
Reviewed By: sanrise
Differential Revision: D88903924
fbshipit-source-id: ccdfab6f67295482ab2805dd031bbab2fb9c9039
* Move PerfettoTraceBuilder to fb internal
Summary: AT
Reviewed By: sraikund16
Differential Revision: D89007383
fbshipit-source-id: 4ee188ea7e36db7dcd7afaeca23ba7e4f3284833
* Add FBConfig to set PERFETTO_BUILDER_ENABLED from JK as feature toggle (#1196)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1196
AT, config the ENV variable based on JustKnob as feature toggle.
Reviewed By: sraikund16
Differential Revision: D89007517
fbshipit-source-id: 847c5315d88c14926be4344180b17ba3fac3bae6
* Fixed the issue where device duration was always 0 on TensorBoard. (#1166)
Summary:
Although https://github.com/pytorch/kineto/pull/873 has been applied, the device duration is still 0. This was verified by using PyTorch 2.8 and PyTorch nightly 20251103. Debugging revealed that `cuda_runtime` was missing.
Pull Request resolved: https://github.com/pytorch/kineto/pull/1166
Reviewed By: aaronenyeshi
Differential Revision: D89236411
Pulled By: sraikund16
fbshipit-source-id: ced8a7dff44d0b4529610c76c064f005fd3fc493
* Code cleanup of XPU profiler for incoming scope profiler (#1177)
Summary:
**Summary:**
Code cleanup of XPU profiler plugin to prepare it for incoming PR with implementation of XPU scope profiler.
**Changes:**
- removed unused code
- clean up lists of included headers
- added missing copyright headers
- simplified algorithms
- run clang-format
Pull Request resolved: https://github.com/pytorch/kineto/pull/1177
Reviewed By: aaronenyeshi
Differential Revision: D88693420
Pulled By: sraikund16
fbshipit-source-id: b49e4812adfd98f6c761302669f00a8eefd6e19a
* update HTA in README (#1199)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1199
HTA is not a part of the Kineto repo. Update the text to make it clear that we're recommending it as an outside tool.
Reviewed By: sraikund16
Differential Revision: D89284379
fbshipit-source-id: 748bf078d0bacebf03b5ed67cad438ee68b66b27
* Fix repeated thread creation in CuptiActivityApi::teardownContext (#1169)
Summary:
Running the following code causes a core dump:
```python
import os
os.environ["TEARDOWN_CUPTI"] = "1"
import torch
x = torch.randn(1024, 1024).cuda()
for i in range(5):
with torch.profiler.profile() as p:
y = x @ x
for i in range(5):
y = x @ x
```
The issue occurs when we try to perform consecutive profiling sessions. In CuptiActivityApi::teardownContext, the next thread might be created before the previous thread finishes its work, so we need to prevent thread duplication.
Pull Request resolved: https://github.com/pytorch/kineto/pull/1169
Reviewed By: aaronenyeshi
Differential Revision: D89198748
Pulled By: sraikund16
fbshipit-source-id: a96aaf6b6cb3f8bb962ebc3c11f57f4b59126a97
* Add Lintrunner to Kineto (#1206)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1206
Adds implementation for lintrunner in kineto. Now OSS users can run lintrunner instead of internal changes being needed.
Reviewed By: aaronenyeshi
Differential Revision: D89324115
fbshipit-source-id: 48d7425ffdf3357228ce553144f0d43c1b03d9ea
* fbcode/kineto/libkineto/src/ActivityProfilerProxy.h
Reviewed By: sraikund16
Differential Revision: D89168418
fbshipit-source-id: 3a5da08b2e7c4a74759e24c8e2b723ab529f6aa5
* Add config for incoming XPU scope profiler (#1180)
Summary:
**Summary:**
Added new class XpuptiScopeProfilerConfig derived from AbstractConfig for configuration of the new scope profiler.
Added gtest
Pull Request resolved: https://github.com/pytorch/kineto/pull/1180
Reviewed By: aaronenyeshi
Differential Revision: D88098676
Pulled By: sraikund16
fbshipit-source-id: 1e58bfd6ff9f655aa90018bcdf787e1f3de366a9
* Fix CQS signal readability-isolate-declaration in fbcode/kineto/libkineto
Differential Revision: D89530864
fbshipit-source-id: 7c948c97d4db03e766600aca6a715154c18dba50
* Fix CQS signal readability-container-size-empty in fbcode/kineto/libkineto
Differential Revision: D89531299
fbshipit-source-id: e09773f077142fbb7c701512cf1f3f7ea9e4a3c6
* Rename variable in disablePtiActivities (#1209)
Summary:
In `disablePtiActivities`, we should have `activityDisabled` instead of `activityEnabled` to track activity status.
Pull Request resolved: https://github.com/pytorch/kineto/pull/1209
Reviewed By: aaronenyeshi
Differential Revision: D89735444
Pulled By: divyanshk
fbshipit-source-id: 27ec6383455f7417d4128b84eb65ed9fdcff9d1b
* Fix CQS signal readability-redundant-inline-specifier in fbcode/kineto/libkineto
Reviewed By: aaronenyeshi
Differential Revision: D90098245
fbshipit-source-id: 7b8da13cc9cf1a087bc2c2a6f8fa9887fb379195
* Fix CQS signal modernize-use-override in fbcode/kineto/libkineto
Differential Revision: D90095395
fbshipit-source-id: d4e98f7787b09cd0bf6f9738713e4bec9fd52c83
* Fix Broken Process Description (#1213)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1213
The process description can sometimes be white space or some invalid string that is causing JSON to fail. Add this patch to potentially fix that by checking it starts and ends with /"
Reviewed By: divyanshk
Differential Revision: D90121337
fbshipit-source-id: 8b3d8f3981c1eab555b0c4f99e6535cdac69037a
* Add PT_PROFILER env vars to trace metadata (#1207)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1207
This diffs adds a way to add env variables to the trace metadata if they're available.
Reviewed By: sraikund16
Differential Revision: D89235949
fbshipit-source-id: 33b71dda346339d7a62b96dae167b6dd829f86ab
* Fix CQS signal modernize-avoid-bind in fbcode/kineto/libkineto
Reviewed By: aaronenyeshi
Differential Revision: D90011635
fbshipit-source-id: 3b4c651ae678b889c67bcb18eecf3c2eb4450d9c
* apply Black 25.11.0 style in fbcode (74/92)
Summary:
Formats the covered files with pyfmt.
paintitblack
Reviewed By: itamaro
Differential Revision: D90476320
fbshipit-source-id: ccd49f02a100ca92611e3500dfa8a3e3a99eb5c3
* Fix CQS signal readability-use-std-min-max in fbcode/kineto/libkineto
Differential Revision: D90369453
fbshipit-source-id: 5aa8fb63187ebe8e5458c2df3c9c067f9407ee3b
* Fix CQS signal readability-redundant-member-init in fbcode/kineto/libkineto
Differential Revision: D90372898
fbshipit-source-id: 4d80759ef16afe6e8d6a5eb464e99efbee252094
* Fix CQS signal readability-math-missing-parentheses in fbcode/kineto/libkineto
Reviewed By: aaronenyeshi
Differential Revision: D90307278
fbshipit-source-id: 4c85e2dbb4040cb43012349f64f1cddaa8123dca
* Bump nanoid from 3.3.4 to 3.3.8 in /tb_plugin/fe (#1201)
Summary:
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.4 to 3.3.8.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md">nanoid's changelog</a>.</em></p>
<blockquote>
<h2>3.3.8</h2>
<ul>
<li>Fixed a way to break Nano ID by passing non-integer size (by <a href="https://github.com/myndzi"><code>@myndzi</code></a>).</li>
</ul>
<h2>3.3.7</h2>
<ul>
<li>Fixed <code>node16</code> TypeScript support (by Saadi Myftija).</li>
</ul>
<h2>3.3.6</h2>
<ul>
<li>Fixed package.</li>
</ul>
<h2>3.3.5</h2>
<ul>
<li>Backport funding information.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744"><code>3044cd5</code></a> Release 3.3.8 version</li>
<li><a href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231"><code>4fe3495</code></a> Update size limit</li>
<li><a href="https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c"><code>d643045</code></a> Fix pool pollution, infinite loop (<a href="https://redirect.github.com/ai/nanoid/issues/510">https://github.com/pytorch/kineto/issues/510</a>)</li>
<li><a href="https://github.com/ai/nanoid/commit/89d82d2ce4b0411e73ac7ccfe57bc03e932416e2"><code>89d82d2</code></a> Release 3.3.7 version</li>
<li><a href="https://github.com/ai/nanoid/commit/5022c35acaaedd9da4b56cad37b02bbcb87635e1"><code>5022c35</code></a> Update dual-publish</li>
<li><a href="https://github.com/ai/nanoid/commit/3e7a8e557b9d93a582ef2c3bb9f7306fc339ef35"><code>3e7a8e5</code></a> Remove benchmark from CI for v3</li>
<li><a href="https://github.com/ai/nanoid/commit/d3561446aee52fdf38325e1d30c905d989a8ccd2"><code>d356144</code></a> Fix CI for v3</li>
<li><a href="https://github.com/ai/nanoid/commit/37b25dfac2edfd73d7bbc88886e4c6067fac8619"><code>37b25df</code></a> Move to pnpm 8</li>
<li><a href="https://github.com/ai/nanoid/commit/d96f39222a800ea9a6a156db139992b64d4b0dca"><code>d96f392</code></a> Release 3.3.6 version</li>
<li><a href="https://github.com/ai/nanoid/commit/8210dfb9fc01efcf354c00a1b7e1948f1bebb32f"><code>8210dfb</code></a> Release 3.3.5 version</li>
<li>Additional commits viewable in <a href="https://github.com/ai/nanoid/compare/3.3.4...3.3.8">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pytorch/kineto/network/alerts).
</details>
Pull Request resolved: https://github.com/pytorch/kineto/pull/1201
Reviewed By: aaronenyeshi
Differential Revision: D90541347
Pulled By: sraikund16
fbshipit-source-id: a8048780006f8bcbd4e212e7983dedf29bf9a8dd
* Bump http-proxy-middleware from 2.0.7 to 2.0.9 in /tb_plugin/fe (#1205)
Summary:
Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.7 to 2.0.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/releases">http-proxy-middleware's releases</a>.</em></p>
<blockquote>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(fixRequestBody): check readableLength by <a href="https://github.com/chimurai"><code>@chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1097">chimurai/http-proxy-middleware#1097</a></li>
<li>chore(package): v2.0.9 by <a href="https://github.com/chimurai"><code>@chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1099">chimurai/http-proxy-middleware#1099</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.8...v2.0.9">https://github.com/chimurai/http-proxy-middleware/compare/v2.0.8...v2.0.9</a></p>
<h2>v2.0.8</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(fixRequestBody): prevent multiple .write() calls by <a href="https://github.com/chimurai"><code>@chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1090">chimurai/http-proxy-middleware#1090</a></li>
<li>fix(fixRequestBody): handle invalid request by <a href="https://github.com/chimurai"><code>@chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1091">chimurai/http-proxy-middleware#1091</a></li>
<li>chore(package): v2.0.8 by <a href="https://github.com/chimurai"><code>@chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1094">chimurai/http-proxy-middleware#1094</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8">https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md">http-proxy-middleware's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.9">v2.0.9</a></h2>
<ul>
<li>fix(fixRequestBody): check readableLength</li>
</ul>
<h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.8">v2.0.8</a></h2>
<ul>
<li>fix(fixRequestBody): prevent multiple .write() calls</li>
<li>fix(fixRequestBody): handle invalid request</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/chimurai/http-proxy-middleware/commit/617a7c9da9cc90ecc00b0c8b1c2f6a385c879cb1"><code>617a7c9</code></a> chore(package): v2.0.9 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1099">https://github.com/pytorch/kineto/issues/1099</a>)</li>
<li><a href="https://github.com/chimurai/http-proxy-middleware/commit/d22d58764832fea429d60109a19e1a23136d4425"><code>d22d587</code></a> fix(fixRequestBody): check readableLength (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1097">https://github.com/pytorch/kineto/issues/1097</a>)</li>
<li><a href="https://github.com/chimurai/http-proxy-middleware/commit/d03d51b54ac8d40db8438a8b216cf1ea92bb7849"><code>d03d51b</code></a> chore(package): v2.0.8 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1094">https://github.com/pytorch/kineto/issues/1094</a>)</li>
<li><a href="https://github.com/chimurai/http-proxy-middleware/commit/c50dd06d9102fbb81dd4cbad7a295dddee5f6e1e"><code>c50dd06</code></a> fix(fixRequestBody): handle invalid request (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1091">https://github.com/pytorch/kineto/issues/1091</a>)</li>
<li><a href="https://github.com/chimurai/http-proxy-middleware/commit/76a9d8d6dc2b971f63df19d805c7ab656540525b"><code>76a9d8d</code></a> fix(fixRequestBody): prevent multiple .write() calls (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1090">https://github.com/pytorch/kineto/issues/1090</a>)</li>
<li>See full diff in <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.9">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pytorch/kineto/network/alerts).
</details>
Pull Request resolved: https://github.com/pytorch/kineto/pull/1205
Reviewed By: aaronenyeshi
Differential Revision: D90541180
Pulled By: sraikund16
fbshipit-source-id: 83d71725f5dd2873d283c202e85f9148ef58e58c
* Bump @babel/runtime from 7.18.9 to 7.26.10 in /tb_plugin/fe (#1204)
Summary:
Bumps [babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) from 7.18.9 to 7.26.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/babel/babel/releases"><code>@babel/runtime</code>'s releases</a>.</em></p>
<blockquote>
<h2>v7.26.10 (2025-03-11)</h2>
<p>Thanks <a href="https://github.com/jordan-choi"><code>@jordan-choi</code></a> and <a href="https://github.com/mmmsssttt404"><code>@mmmsssttt404</code></a> for your first PRs!</p>
<p>This release includes a fix for <a href="https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8">https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8</a>, a security vulnerability which affects the <code>.replace</code> method of transpiled regular expressions that use named capturing groups.</p>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17159">#17159</a> Disallow decorator in array pattern (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>, <code>babel-template</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17164">#17164</a> Fix: always initialize ExportDeclaration attributes (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17142">#17142</a> fix: "Map maximum size exceeded" in deepClone (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>, <code>babel-plugin-transform-typescript</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17154">#17154</a> Update typescript parser tests (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17151">#17151</a> fix: Should not evaluate vars in child scope (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17153">#17153</a> fix: Correctly generate <code>abstract override</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17107">#17107</a> Fix source type detection when parsing TypeScript (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-helpers</code>, <code>babel-runtime</code>, <code>babel-runtime-corejs2</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17173">#17173</a> Fix processing of replacement pattern with named capture groups (<a href="https://github.com/%5Bmmmsssttt404%5D(https://github.com/mmmsssttt404)"><code>@mmmsssttt404</code></a>)</li>
</ul>
</li>
</ul>
<h4>:nail_care: Polish</h4>
<ul>
<li><code>babel-standalone</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17158">#17158</a> Avoid warnings when re-bundling <code>@babel/standalone</code> with webpack (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17160">#17160</a> Left-value parsing cleanup (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 6</h4>
<ul>
<li>Babel Bot (<a href="https://github.com/babel-bot"><code>@babel-bot</code></a>)</li>
<li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
<li>Yunyoung Jordan Choi (<a href="https://github.com/jordan-choi"><code>@jordan-choi</code></a>)</li>
<li><a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a></li>
<li><a href="https://github.com/mmmsssttt404"><code>@mmmsssttt404</code></a></li>
</ul>
<h2>v7.26.9 (2025-02-14)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17103">#17103</a> fix: Definition for <code>TSPropertySignature.kind</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17062">#17062</a> Print TypeScript optional/definite in ClassPrivateProperty (<a href="https://github.com/jamiebuilds-signal"><code>@jamiebuilds-signal</code></a>)</li>
</ul>
</li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@babel/runtime</code>'s changelog</a>.</em></p>
<blockquote>
<h2>v7.26.10 (2025-03-11)</h2>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17159">#17159</a> Disallow decorator in array pattern (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>, <code>babel-template</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17164">#17164</a> Fix: always initialize ExportDeclaration attributes (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17142">#17142</a> fix: "Map maximum size exceeded" in deepClone (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>, <code>babel-plugin-transform-typescript</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17154">#17154</a> Update typescript parser tests (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17151">#17151</a> fix: Should not evaluate vars in child scope (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17153">#17153</a> fix: Correctly generate <code>abstract override</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17107">#17107</a> Fix source type detection when parsing TypeScript (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-helpers</code>, <code>babel-runtime</code>, <code>babel-runtime-corejs2</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17173">#17173</a> Fix processing of replacement pattern with named capture groups (<a href="https://github.com/%5Bmmmsssttt404%5D(https://github.com/mmmsssttt404)"><code>@mmmsssttt404</code></a>)</li>
</ul>
</li>
</ul>
<h4>:nail_care: Polish</h4>
<ul>
<li><code>babel-standalone</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17158">#17158</a> Avoid warnings when re-bundling <code>@babel/standalone</code> with webpack (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17160">#17160</a> Left-value parsing cleanup (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.9 (2025-02-14)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17103">#17103</a> fix: Definition for <code>TSPropertySignature.kind</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17062">#17062</a> Print TypeScript optional/definite in ClassPrivateProperty (<a href="https://github.com/jamiebuilds-signal"><code>@jamiebuilds-signal</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17130">#17130</a> Use <code>.ts</code> files with explicit reexports to solve name conflicts (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17127">#17127</a> Do not depend on <code>types/gensync</code> in Babel 7 (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.7 (2025-01-24)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-helpers</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17086">#17086</a> Make "object without properties" helpers ES6-compatible (<a href="https://github.com/tquetano-netflix"><code>@tquetano-netflix</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-typeof-symbol</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17085">#17085</a> fix: Correctly handle <code>typeof</code> in arrow functions (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/babel/babel/commit/e1ce99df422971175249509e7bbc2b327b8f7957"><code>e1ce99d</code></a> v7.26.10</li>
<li><a href="https://github.com/babel/babel/commit/d5952e80c0faa5ec20e35085531b6e572d31dad4"><code>d5952e8</code></a> Fix processing of replacement pattern with named capture groups (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-runtime/issues/17173">#17173</a>)</li>
<li><a href="https://github.com/babel/babel/commit/64bca7b5f308cd52c192a5c821a57f6d1b0475f4"><code>64bca7b</code></a> v7.26.9</li>
<li><a href="https://github.com/babel/babel/commit/2d9514066e3b135835ed93246ebbcdb7ca0263ca"><code>2d95140</code></a> v7.26.7</li>
<li><a href="https://github.com/babel/babel/commit/63d30381c169780460e01bdb6669c5e01af1dfbe"><code>63d3038</code></a> v7.26.0</li>
<li><a href="https://github.com/babel/babel/commit/b07957ebb316a1e2fc67454fc7423508bb942e63"><code>b07957e</code></a> v7.25.9</li>
<li><a href="https://github.com/babel/babel/commit/af917594e4df3decdde2ce0b1614d607b27367a5"><code>af91759</code></a> fix: Accidentally publishing useless files (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-runtime/issues/16917">#16917</a>)</li>
<li><a href="https://github.com/babel/babel/commit/2533cfb0c1d90140f320f1e03d41e20407ca30bf"><code>2533cfb</code></a> v7.25.7</li>
<li><a href="https://github.com/babel/babel/commit/69d65f1aef74de135a8b262bb9770a41e97b7476"><code>69d65f1</code></a> [babel 8] Require Node.js <code>^18.20.0 || ^20.17.0 || >=22.8.0</code> (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-runtime/issues/16800">#16800</a>)</li>
<li><a href="https://github.com/babel/babel/commit/2f72b978f9acc68d065e7da10c8e270d6f96b7c4"><code>2f72b97</code></a> v7.25.6</li>
<li>Additional commits viewable in <a href="https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pytorch/kineto/network/alerts).
</details>
Pull Request resolved: https://github.com/pytorch/kineto/pull/1204
Reviewed By: aaronenyeshi
Differential Revision: D90541208
Pulled By: sraikund16
fbshipit-source-id: 253766ef8e82c881a4ae29ced62bacff7be48f79
* add json benchmark (#1215)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1215
Simple benchmark to time how long it takes for JSON output. It has three scenarios:
1. small: about 1 KB
2. medium: about 1 MB
3. large: about 1 GB
All of the profiles are generated on-the-fly, based on some hardcoded options that are chosen from a uniformly random distributed. Example usage:
```
$ buck run //kineto/benchmarks:json_output_benchmark -- --scenario=medium --output_dir=/tmp
...
=== medium Scenario ===
Activities: 6000
File size: 1454520 bytes (1.39 MB)
Iterations: 20
Mean time: 264.511 ms
Std dev: 4.834 ms
Min time: 258.007 ms
Max time: 280.068 ms
Throughput: 5.24 MB/s
Reviewed By: sraikund16
Differential Revision: D90404673
fbshipit-source-id: db2118aba6a5663b7136704f9c00da9fda07a495
* Bump serialize-javascript from 6.0.0 to 6.0.2 in /tb_plugin/fe (#1200)
Summary:
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 6.0.0 to 6.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/yahoo/serialize-javascript/releases">serialize-javascript's releases</a>.</em></p>
<blockquote>
<h2>v6.0.2</h2>
<ul>
<li>fix: serialize URL string contents to prevent XSS (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">https://github.com/pytorch/kineto/issues/173</a>) f27d65d</li>
<li>Bump <code>@babel/traverse</code> from 7.10.1 to 7.23.7 (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">https://github.com/pytorch/kineto/issues/171</a>) 02499c0</li>
<li>docs: update readme with URL support (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">https://github.com/pytorch/kineto/issues/146</a>) 0d88527</li>
<li>chore: update node version and lock file e2a3a91</li>
<li>fix typo (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">https://github.com/pytorch/kineto/issues/164</a>) 5a1fa64</li>
</ul>
<p><a href="https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2">https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2</a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump mocha from 9.0.1 to 9.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/126">yahoo/serialize-javascript#126</a></li>
<li>Bump mocha from 9.0.2 to 9.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/127">yahoo/serialize-javascript#127</a></li>
<li>Bump path-parse from 1.0.6 to 1.0.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/129">yahoo/serialize-javascript#129</a></li>
<li>Bump mocha from 9.0.3 to 9.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/130">yahoo/serialize-javascript#130</a></li>
<li>Bump mocha from 9.1.0 to 9.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/131">yahoo/serialize-javascript#131</a></li>
<li>Bump mocha from 9.1.1 to 9.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/132">yahoo/serialize-javascript#132</a></li>
<li>Bump mocha from 9.1.2 to 9.1.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/133">yahoo/serialize-javascript#133</a></li>
<li>Bump mocha from 9.1.3 to 9.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/137">yahoo/serialize-javascript#137</a></li>
<li>Bump mocha from 9.1.4 to 9.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/138">yahoo/serialize-javascript#138</a></li>
<li>Bump chai from 4.3.4 to 4.3.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/140">yahoo/serialize-javascript#140</a></li>
<li>Bump ansi-regex from 5.0.0 to 5.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/141">yahoo/serialize-javascript#141</a></li>
<li>Bump mocha from 9.2.0 to 9.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/143">yahoo/serialize-javascript#143</a></li>
<li>Bump minimist from 1.2.5 to 1.2.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/144">yahoo/serialize-javascript#144</a></li>
<li>Bump mocha from 9.2.2 to 10.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/145">yahoo/serialize-javascript#145</a></li>
<li>Bump mocha from 10.0.0 to 10.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/149">yahoo/serialize-javascript#149</a></li>
<li>Bump chai from 4.3.6 to 4.3.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/150">yahoo/serialize-javascript#150</a></li>
<li>ci: test.yml - actions bump by <a href="https://github.com/piwysocki"><code>@piwysocki</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li>Bump minimatch from 3.0.4 to 3.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/152">yahoo/serialize-javascript#152</a></li>
<li>Bump mocha from 10.1.0 to 10.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/153">yahoo/serialize-javascript#153</a></li>
<li>Bump json5 from 2.1.3 to 2.2.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/155">yahoo/serialize-javascript#155</a></li>
<li>Fix serialization issue for 0n. by <a href="https://github.com/momocow"><code>@momocow</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
<li>Release v6.0.1 by <a href="https://github.com/okuryu"><code>@okuryu</code></a> in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/157">yahoo/serialize-javascript#157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/piwysocki"><code>@piwysocki</code></a> made their first contribution in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/151">yahoo/serialize-javascript#151</a></li>
<li><a href="https://github.com/momocow"><code>@momocow</code></a> made their first contribution in <a href="https://redirect.github.com/yahoo/serialize-javascript/pull/156">yahoo/serialize-javascript#156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1">https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/b71ec23841d7cf30847d3071d9da38ee0b397fc8"><code>b71ec23</code></a> 6.0.2</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"><code>f27d65d</code></a> fix: serialize URL string contents to prevent XSS (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/173">https://github.com/pytorch/kineto/issues/173</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/02499c0adfb40f48e1ebdcbe6fffc83b162b95e9"><code>02499c0</code></a> Bump <code>@babel/traverse</code> from 7.10.1 to 7.23.7 (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/171">https://github.com/pytorch/kineto/issues/171</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/0d885272f45069b1207189ae18a6f2726b4abaa9"><code>0d88527</code></a> docs: update readme with URL support (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/146">https://github.com/pytorch/kineto/issues/146</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/e2a3a9173e6770ee92e02d95d6a8e7958dfb419d"><code>e2a3a91</code></a> chore: update node version and lock file</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/5a1fa646d9cbbe0b4f13c07f01c249fb2493e20f"><code>5a1fa64</code></a> fix typo (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/164">https://github.com/pytorch/kineto/issues/164</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/7139f9251b4cad52136513cf3360869e1e645d6c"><code>7139f92</code></a> Release v6.0.1 (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/157">https://github.com/pytorch/kineto/issues/157</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/7e23ae89e4b65ebf8836fcbaab637d49fb32ecb2"><code>7e23ae8</code></a> Fix serialization issue for 0n. (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/156">https://github.com/pytorch/kineto/issues/156</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/343abd98ff0a3f88f61fca35100762fdd6cb1963"><code>343abd9</code></a> Bump json5 from 2.1.3 to 2.2.3 (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/155">https://github.com/pytorch/kineto/issues/155</a>)</li>
<li><a href="https://github.com/yahoo/serialize-javascript/commit/38d0e70e2d82662b2ec4fa2f7f3e1289db745db1"><code>38d0e70</code></a> Bump mocha from 10.1.0 to 10.2.0 (<a href="https://redirect.github.com/yahoo/serialize-javascript/issues/153">https://github.com/pytorch/kineto/issues/153</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.2">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pytorch/kineto/network/alerts).
</details>
Pull Request resolved: https://github.com/pytorch/kineto/pull/1200
Reviewed By: aaronenyeshi
Differential Revision: D90541416
Pulled By: sraikund16
fbshipit-source-id: 9a7c1c2f587d459f6612ecb69b51eb2646115487
* Bump node-forge from 1.3.1 to 1.3.3 in /tb_plugin/fe (#1202)
Summary:
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md">node-forge's changelog</a>.</em></p>
<blockquote>
<h2>1.3.3 - 2025-12-02</h2>
<h3>Fixed</h3>
<ul>
<li>[pkcs12] Make digestAlgorithm parameters optional to fix PKCS#12/PFX issues
introduced in 1.3.2.</li>
</ul>
<h2>1.3.2 - 2025-11-25</h2>
<h3>Security</h3>
<ul>
<li><strong>HIGH</strong>: ASN.1 Validator Desynchronization
<ul>
<li>An Interpretation Conflict (CWE-436) vulnerability in node-forge versions
1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1
structures to desynchronize schema validations, yielding a semantic
divergence that may bypass downstream cryptographic verifications and
security decisions.</li>
<li>Reported by Hunter Wodzenski.</li>
<li>CVE ID: <a href="https://www.cve.org/CVERecord?id=CVE-2025-12816">CVE-2025-12816</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq">GHSA-5gfm-wpxj-wjgq</a></li>
</ul>
</li>
<li><strong>HIGH</strong>: ASN.1 Unbounded Recursion
<ul>
<li>An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions
1.3.1 and below enables remote, unauthenticated attackers to craft deep
ASN.1 structures that trigger unbounded recursive parsing. This leads to a
Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER
inputs.</li>
<li>Reported by Hunter Wodzenski.</li>
<li>CVE ID: <a href="https://www.cve.org/CVERecord?id=CVE-2025-66031">CVE-2025-66031</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27">GHSA-554w-wpv2-vw27</a></li>
</ul>
</li>
<li><strong>MODERATE</strong>: ASN.1 OID Integer Truncation
<ul>
<li>An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1
and below enables remote, unauthenticated attackers to craft ASN.1
structures containing OIDs with oversized arcs. These arcs may be decoded
as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the
bypass of downstream OID-based security decisions.</li>
<li>Reported by Hunter Wodzenski.</li>
<li>CVE ID: <a href="https://www.cve.org/CVERecord?id=CVE-2025-66030">CVE-2025-66030</a></li>
<li>GHSA ID: <a href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-65ch-62r8-g69g">GHSA-65ch-62r8-g69g</a></li>
</ul>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>[asn1] Fix for vulnerability identified by CVE-2025-12816 PKCS#12 MAC
verification bypass due to missing macData enforcement and improper
asn1.validate routine.</li>
<li>[asn1] Add <code>fromDer()</code> max recursion depth check.
<ul>
<li>Add a <code>asn1.maxDepth</code> global configurable maximum depth of 256.</li>
<li>Add a <code>asn1.fromDer()</code> per-call <code>maxDepth</code> option.</li>
<li><strong>NOTE</strong>: The default maximum is assumed to be higher than needed for valid
data. If this assumption is false then this could be a breaking change.
Please file an issue if there are use cases that need a higher maximum.</li>
<li><strong>NOTE</strong>: The per-call <code>maxDepth</code> parameter has not been exposed up through
all of the API stack due to the complexities involved. Please file an issue
if there are use cases that require this instead of changing the default</li>
</ul>
</li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/digitalbazaar/forge/commit/1cea0aff4901589ae86e314f25782bbe312f9f69"><code>1cea0af</code></a> Release 1.3.3.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/5265989cf5e54cfe1e27a10d71523007ce0507b1"><code>5265989</code></a> Update changelog.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/e4f3961406395dd8e985dcf841852ceca73ac3a9"><code>e4f3961</code></a> Fix changelog for release.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/503979b0295cf633a30199d6bd937f4a222481a0"><code>503979b</code></a> Update changelog.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/c3b3b32a8c157ac57752934d3af63b5f798b58b8"><code>c3b3b32</code></a> Make digestAlgorithm parameters optional</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/6f70043a6db1abb9f3304f3d432efed3ba50fcca"><code>6f70043</code></a> Update CVE details.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/f547b0d292745094190ecb250429d21e8804a375"><code>f547b0d</code></a> Start 1.3.3-0.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/235ad3e70e4fdfdca4fdeb662dfba6588e2c38bd"><code>235ad3e</code></a> Release 1.3.2.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/25982441171dc9815c87d3d886c5c8a1d092b334"><code>2598244</code></a> Update changelog.</li>
<li><a href="https://github.com/digitalbazaar/forge/commit/0032dd0be8b6fb1b1092ef754d1dde91c10a95ad"><code>0032dd0</code></a> Fix typos.</li>
<li>Additional commits viewable in <a href="https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.3.3">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pytorch/kineto/network/alerts).
</details>
Pull Request resolved: https://github.com/pytorch/kineto/pull/1202
Reviewed By: aaronenyeshi
Differential Revision: D90541318
Pulled By: sraikund16
fbshipit-source-id: 5c657f1af7cc9250476e0b1e993bd8c766c67d8e
* Fix CQS signal modernize-deprecated-headers in fbcode/kineto/libkineto
Reviewed By: aaronenyeshi
Differential Revision: D90568380
fbshipit-source-id: f911937b776f216e62b6aabfef73415106f8233f
* Fix CQS signal readability-named-parameter in fbcode/kineto/libkineto [B] [A]
Reviewed By: aaronenyeshi
Differential Revision: D90831243
fbshipit-source-id: eb9d99060a0dc3eecffc198471993d31488aebff
* Fix CQS signal readability-const-return-type in fbcode/kineto/libkineto [A]
Reviewed By: aaronenyeshi
Differential Revision: D90809633
fbshipit-source-id: 205db8354ef60fc5c758adec9cb9f08955236bec
* refactor constant char* to string_view (#1216)
Summary:
Pull Request resolved: https://github.com/pytorch/kineto/pull/1216
Best practice is to prefer `constexpr std::string_view` over `constexpr char*`. In principle, `string_view`s are more efficient to convert to `std::string` because they include their size in the object and can use a more efficient `string` constructor. Our benchmark shows the change to be performance neutral, but I still think it's a code improvement.
Reviewed By: divyanshk
Differential Revision: D90590675
fbshipit-source-id: 46ea38c194389fb3d2952b2baac6557e440a71d6
* update cmake to make it mutually exclusive for backends (#1214)
Summary:
Right now `cmakelists.txt` treats each backend independently. I think if someone has multiple SDK installed it will try to include multiple backends.
Note: right now we still try to detect AIUPTI unconditionally. Not updating that logic in this PR.
Pull Request resolved: https://github.com/pytorch/kineto/pull/1214
Reviewed By: scotts
Differential Revision: D90783563
Pulled By: divyanshk
fbshipit-source-id: f78278562859f78a97b2c651e3933de94a156737
* Fix CQS signal modernize-use-equals-default in fbcode/kineto/libkineto [A]
Reviewed By: aaronenyeshi
Differential Revision: D90846524
fbshipit-source-id: ae6aedbc5265b483bfcecf089c8e2c36e6a0d6c1
* Fix CQS signal modernize-use-equals-default in fbcode/kineto/libkineto [B]
Reviewed By: aaronenyeshi
Differential Revision: D90847419
fbshipit-source-id: c779db67b7189b5f818745c70a9c4568dd71c93b
* Fix CQS signal readability-named-parameter in fbcode/kineto/libkineto [B] [B]
Reviewed By: aaronenyeshi
Differential Revision: D90831324
fbshipit-source-id: 35e1b53c2bcb3f3581dddaa65ade18f6958e0ef2
* Fix CQS signal readability-const-return-type in fbcode/kineto/libkineto [B]
Reviewed By: aaronenyeshi
Differential Revision: D90810182
fbshipit-source-id: beaeaa5044cfcb9d90dde73bfa41f8837468555b
* Bump webpack-dev-server from 4.9.3 to 5.2.1 in /tb_plugin/fe (#1203)
Summary:
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 4.9.3 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases">webpa…
Summary:
Code cleanup of XPU profiler plugin to prepare it for incoming PR with implementation of XPU scope profiler.
Changes: