Skip to content

v0.9.7 2026-10-21

Latest

Choose a tag to compare

@nabinchha nabinchha released this 22 Oct 02:03
124e7b5

NeMo Data Designer 0.9.7 updates CA trust following the eMudhra compromise and improves process and dependency compatibility.

Security

  • Require certifi>=2026.10.19 in the published data-designer-config dependencies. Normal installs and upgrades of config, engine, and interface packages enforce this minimum. Workspace and E2E constraints and the lockfile use the same minimum. #1072
  • Require uv 0.13.4 or newer for workspace tooling, E2E tests, and CLI plugin package commands, and update pinned docs/notebook workflow versions. Automatic plugin installation falls back to pip when uv is unavailable or too old. Update pip separately as described below. #1072

Fixes and compatibility

  • Reset inherited engine and MCP background event loops in forked child processes so generation can start fresh loops after the parent has already run Data Designer. #1069
  • Allow Pillow 13 while preserving Python 3.10 support. Resolution selects Pillow 13 for Python 3.11 and later; Python 3.10 remains on Pillow 12.x. Existing environments and application lockfiles need a dependency update to move to Pillow 13. #1067
  • Defer the NumPy NDArray import used for constraint type annotations. #1064

Upgrade guidance

Update your installer and the Data Designer package you use:

python -m pip install --upgrade "pip>=26.2.2"
python -m pip install --upgrade "data-designer==0.9.7"

For standalone package installations, upgrade data-designer-config or data-designer-engine to 0.9.7 instead. Refresh application lockfiles so the new certifi requirement is included, and synchronize or reinstall existing environments. Existing environments are not updated merely by publishing this release.

Upgrade uv to 0.13.4 or newer using the installation method you originally used. uv self-managed installations can run uv self update. Refresh operating-system and custom CA bundles separately; upgrading Data Designer does not replace them or pip's vendored CA bundle.

Endpoints whose certificate chains rely on the removed emSign ECC Root CA - G3 root may require updated chains. See the upstream advisory and pip 26.2.2 release notes.

Known limitations

  • Python 3.10 cannot use Pillow 13 and retains the Pillow 12.x advisories noted in #1067. Use Python 3.11 or later to take advantage of Pillow 13's fixes.
  • The fork fix covers engine and MCP event loops. Resetting inherited OpenTelemetry metrics state when otel_metrics_port is configured is tracked separately in #1070 and is not included in this release.

Full changelog: v0.9.6...v0.9.7