Release 2.7.0

Highlights

• Dependency Upgrades:
  • Upgraded PyTorch to 2.13.0 (with torchvision 0.28.0 and torchaudio 2.11.0).
  • Upgraded vLLM to 0.28.0.
  • Upgraded Transformers (>=5.5.3), PEFT (>=0.18.2), xgrammar (>=0.2.1), and Opacus (>=1.6.0).
• Security Fixes:
  • Resolved 80+ open Dependabot security alerts across dependencies (aiohttp, cryptography, pyjwt, pillow, starlette, tornado, python-multipart, mcp, etc.).
• Engine & Compatibility:
  • Added compatibility workaround for Triton 3.7.x JIT source extraction during vLLM kernel warmup.
  • Removed deprecated swap_space parameter on vLLM engine initialization.

What's Changed

• chore(deps): resolve Dependabot security alerts by @mplatzer in #283
• build: release 2.7.0 by @github-actions[bot] in #284

Full Changelog: 2.6.2...2.7.0