The Wire · Showcase
DeepSeek V4 fuses shared experts, as vLLM ships a security guard
By RepoJournal · Filed · About Local LLMs
The biggest local-LLM repos are moving fast: DeepSeek V4's MoE kernel gets a massive fusion, while vLLM patches a security hole.
vLLM closes a code-execution risk by gating `_load_ov2_processor` behind `resolve_trust_remote_code` [1], and you should patch before your next deploy. Meanwhile, the DeepSeek V4 MegaMoE kernel now schedules shared experts in one pass instead of serial stages [2], which is the kind of latency win that makes an upgrade worth planning for. Ollama pulled the Claude desktop app into its menu bar [4], and the new npx fallback for DeepSeek Harness keeps installs resilient [5]. On the Metal backend, llama.cpp dequantizes quantized KV caches to F16 before flash attention, with the release notes calling it a "preprocessing pass" for better kernel efficiency [3]; it even skips redundant V dequant when V is a view of K, which matters for MLA models. SGLang is cutting scheduler IPC latency by making `mm_inputs` msgpack-native [6], and its TP/PP consensus checker [7] could end those silent-divergence headaches. The era of slow, serial MoE kernels is ending.
One email a day. Unsubscribe in one click.
Keep up with Local LLMs in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Patch vLLM to the fix guarding `_load_ov2_processor` with `resolve_trust_remote_code` before your next deploy vllm-project/vllm [immediate]
- → Track the MegaMoE fusion [ref:12] and the Metal KV dequant [ref:7]; plan to test them against your DeepSeek and Q8_0 workloads vllm-project/vllm [plan]
- → Watch the npx fallback for DeepSeek Harness [ref:1] on Windows npm shims ollama/ollama [monitor]
- → Monitor the TP/PP consensus checker [ref:19] if you run multi-node tensor or pipeline parallel deployments sgl-project/sglang [monitor]
References
- [1] [Bugfix][Security] Guard _load_ov2_processor with resolve_trust_remote_code (#52952) vllm-project/vllm
- [2] [DSV4][Kernel] Fuse shared experts into MegaMoE ↗ vllm-project/vllm
- [3] metal : dequantize quantized KV to F16 before flash attention (#27390) ggml-org/llama.cpp
- [4] app: add claude desktop app ↗ ollama/ollama
- [5] launch: fall back to npx for DeepSeek Harness ↗ ollama/ollama
- [6] feat: make mm_inputs msgpack-native ↗ sgl-project/sglang
- [7] TP/PP Consensus checker ↗ sgl-project/sglang