Skip to content

Dynamo v1.6.1

Latest
Latest

Choose a tag to compare

View all tags
@dagil-nvidia dagil-nvidia released this 27 Oct 20:24
v1.6.1
0d9c24a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Dynamo v1.6.1 - Release Notes

Summary

Dynamo v1.6.1 is a patch release on top of v1.6.0. It refreshes every trust store Dynamo ships, in the container images and in the ai-dynamo-runtime and kvbm wheels, so the updated bundles no longer include the emSign ECC Root CA - G3 root. It moves every image to Pillow 13, refreshes the image toolchain, and fixes crates.io publishing for the KVBM crates.

One change can affect existing deployments. See Security.

Base Branch: release/1.6.1

Security

  • emSign ECC Root Removal: Updated the system CA bundles in every container image and the Rust TLS roots compiled into the ai-dynamo-runtime and kvbm wheels, which now use rustls-webpki 0.103.16 and webpki-roots 1.0.10 (#17108). gRPC clients in the images now verify against the refreshed system CA bundle instead of the roots bundled with grpcio.

Breaking: The updated bundles drop the emSign ECC Root CA - G3 root, so a TLS connection to an endpoint whose certificate chains to that root now fails verification.

Dependency Changes

  • Pillow 13 Upgrade: Upgraded Pillow to the 13.0 line (pillow>=13.0.0,<14) in every runtime image (#17160). The Frontend and Planner images apply a uv override to stay on Pillow 13, because AIPerf v0.13.0 pins pillow~=12.3.0.
  • Image Toolchain Refresh: Upgraded uv to 0.13.5, pip to 26.2.2, and certifi to 2026.10.19 in the images, and rebuilt the bundled NATS and etcd v3.5.35 with Go 1.27.3 (#17108). The Operator image moved to Go 1.27.3 on the distroless Go v4.1.7 base, and the Planner image moved to the distroless Python 3.13 v4.1.9 base.

Bug Fixes

  • KVBM Crate Publishing: Restored the package description that kvbm-kernels, kvbm-logical, and kvbm-physical lost in v1.6.0 (#17141). crates.io rejects a crate without one, so these three crates and kvbm-engine, which depends on them, were not published for v1.6.0. All four are on crates.io at 1.6.1.

Documentation

  • Kubernetes Image Tag Commands: Fixed the sed commands in the Intel XPU quickstart and the Dynamo Snapshot guide so they replace any image tag instead of only the literal 1.6.1 (#17220). Before the fix, a manifest that carried another tag, such as the my-tag placeholder in v1.6.0, kept it, and the deployment pointed at an image that could not be pulled.

Build and Test

  • Release Version Update: Set the package versions, Helm charts, and image references across the repository to 1.6.1 (#17152).
  • Test Dependency Pin: Pinned pandas below 3 in the test requirements, matching main, so the Profiler integration tests pass with AISimulate v0.13.0 (#17171).

Key Dependencies

Backend runtime versions are unchanged from v1.6.0:

Dynamo SGLang TensorRT-LLM vLLM NIXL UCX
v1.6.1 v0.5.21 v1.3.0rc29 v0.31.0 v1.5.0 (Frontend, SGLang) / v1.3.1 (TensorRT-LLM) / v1.4.1 (vLLM) v1.21.0

CUDA Variants

SGLang TensorRT-LLM vLLM
13.0 13.1 13.0

Dynamo Ecosystem

AIPerf AISimulate Grove ModelExpress
v0.13.0 v0.13.0 v0.1.0-alpha.14 v0.7.0

Known Issues

Full Changelog: v1.6.0...v1.6.1

Assets 2
Loading