$ cat pytorch/month/2026-09-01.log
the month in review · September 2026
PyTorch 2.14.0 ships, TorchRL 0.14 lands
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
TensorDict 0.14.1 follows as a correctness patch, and SECURITY.md now extends the distributed trust model to checkpoints.
PyTorch 2.14.0 Release pytorch/pytorch
The stable release ships with documented backwards-incompatible changes and deprecations, so read the notes before bumping. It also becomes the version the release matrix advertises as stable.
[SECURITY.md] Clarify that checkpoints share the distributed-features trust model (#195600) pytorch/pytorch
SECURITY.md now states explicitly that torch.distributed.checkpoint, including its format-conversion utilities, carries the same trust model as the rest of the distributed features. If you load checkpoint files from outside your own training job, that is now a documented boundary rather than an assumption.
Update security guidelines in SECURITY.md (#195610) pytorch/pytorch
The same pass clarifies how to treat malformed de-serialized objects: PyTorch models should not be loaded from untrusted sources. Together with the checkpoint paragraph, this is the period's clearest statement of where deserialization risk sits.
TorchRL 0.14: DreamerV3, Async at Scale, and Composable Replay pytorch/rl
A major release spanning model-based RL, distributed training and inference, replay-buffer composition, checkpointing, and VLA workflows, with several contracts tightened. Anyone pinned to the pre-0.14 API surface should read those contract changes before upgrading.
TensorDict v0.14.1 pytorch/tensordict
A patch release fixing module metadata, lazy and non-tensor indexing, and frozen tensorclass deserialization. Despite the release's own breaking label, the notes state there are no breaking changes, new features, or deprecations.
Reject re-running `import torch` after a failed import (#194654) pytorch/pytorch
A failed import now stays failed instead of silently re-running on the next import, and reload(torch) is forbidden outright; the notes describe the old behavior as doing weird things on the first call and segfaulting from the second. Relevant to test harnesses and notebooks that retry imports after an error.
Give causal attention the mask PyTorch asks for (#22443) pytorch/executorch
Attention with is_causal=True was returning wrong values with nothing raised whenever the query was shorter than the keys, with errors against eager measured between 2.7 and 3.4 for a 1-query, 16-key shape. Silent numerical errors in causal attention are the kind that hide inside a training run.
[ROCm][BE] Remove outdated version conditions (#193927) pytorch/pytorch
ROCm 7.0 is now the minimum supported version, so guards for 6.3, 6.4, 6.5, and 7.0 were always-true and have been dropped. If your build scripts still branch on those versions, they are branching on dead code.
$ ls pytorch/month/ # the briefings behind this review
Keep up with PyTorch in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.