RepoJournal
PyTorch @pytorch
90 wires and counting

$ follow PyTorch

Keep up with PyTorch in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-25
stories 66
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

CRITICAL OIDC INJECTION IN DOCS PREVIEW WORKFLOW PATCHED

By RepoJournal · Filed · About PyTorch · Composed from the cited sources · methodology

atalman Cynthia Yang Michael Lazos acisseJZhong jinsooihm izaitsevfb Akshay Madavalappil Ramesh
9 people shipped this
atalman @atalman 2 cited Cynthia Yang @ZixinYang 1 cited Michael Lazos @mlazos 1 cited acisseJZhong @acisseJZhong 1 cited jinsooihm @jinsooihm 1 cited izaitsevfb @izaitsevfb 1 cited Akshay Madavalappil Ramesh @AMR5210 Benjamin Glass @benjaminglass1 github-actions[bot] @github-actions[bot]

PyTorch's docs-preview CI trusted fork-controlled artifacts in a context with token-write permissions, exposing the entire build pipeline to code injection.

The `upload-docs-preview.yml` workflow ran with `id-token: write` and directly sourced an artifact produced by a fork-triggerable job, meaning untrusted PR code could inject shell commands and forge OIDC tokens [1]. Fix landed. Separately, the compiler team unified unbacked symbol handling in FX to stop crashing on re-exports of already-lowered programs [2], while Inductor unblocked scaled-GEMM subprocess precompile by fixing two RecursionErrors in quantization constraints [3]. On the infra side, test-infra added per-trunk-commit workflow-duration KPI tracking to HUD [6], then reverted and re-applied numpy preview-build support for Python 3.15 wheels [7]. TorchTitan shipped window FIFO scheduling for RL training to prevent head-of-line blocking in rollout buffers [4], and lifted PTRR load balancer restrictions so flex-attention models with multiple named masks can now run [5]. Activity this period: 56 commits, 9 PRs, 1 release across pytorch, torchtitan, and test-infra.

Action items

References

  1. [1] [docs-preview] Stop sourcing untrusted artifact metadata (OIDC/shell injection) (#191017) pytorch/pytorch ↗
  2. [2] [fx] _rename_unbacked_to: unify instead of assert on unbacked dest (#190083) (#190083) ↗ pytorch/pytorch
  3. [3] [inductor][NVGEMM] Enable scaled-GEMM subprocess precompile (#189841) pytorch/pytorch ↗
  4. [4] [rl] add window FIFO scheduling ↗ pytorch/torchtitan
  5. [5] [cp] Allow PTRR load balancer to select a mask from a dict (#3972) ↗ pytorch/torchtitan
  6. [6] Add "pull workflow duration per trunk commit" KPI to HUD ↗ pytorch/test-infra
  7. [7] Build numpy for preview Python (3.15/3.15t) and host on download.pytorch.org ↗ pytorch/test-infra

$ ls pytorch/reviews/ # the step-back reads

the week in review Helion autotunes Metal, ending default 16x16x16 tiles the month in review ExecuTorch MoE quantization, Helion runtime splits, and a broader cleanup wave
Topics: Python AI / ML Full archive → Weekly reviews →

Quick answers

What shipped in PyTorch on July 25, 2026?
PyTorch's docs-preview CI trusted fork-controlled artifacts in a context with token-write permissions, exposing the entire build pipeline to code injection. In total, 56 commits, 9 pull requests, and 1 releases landed.
Who contributed to PyTorch on July 25, 2026?
9 developers shipped this update, including atalman, Cynthia Yang, Michael Lazos, Akshay Madavalappil Ramesh, Benjamin Glass, acisseJZhong, jinsooihm, and github-actions[bot], and 1 more.
What were the notable PyTorch updates?
[docs-preview] Stop sourcing untrusted artifact metadata (OIDC/shell injection) (#191017), [fx] _rename_unbacked_to: unify instead of assert on unbacked dest (#190083) (#190083), and [inductor][NVGEMM] Enable scaled-GEMM subprocess precompile (#189841).
♥

$ log @pytorch --recent

torchtitan fixes multi-node HF export, torch._native opens to non-aten namespaces 57 shipped Fake-tensor hardening, ROCm graph fixes, and an XNNPACK use-after-free 180 shipped CPU caching allocator teardown race fixed, torchtitan shares one training engine 67 shipped ROCm test timeouts traced to duplicated runs, and distributed/test_store drops 15 minutes 100 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.