chore(deps): bump onnxruntime-web from 1.23.0-dev.20250917-21fbad8a65 to 1.27.0 by dependabot[bot] · Pull Request #2718 · software-mansion/TypeGPU

dependabot · 2026-07-13T19:25:02Z

Bumps onnxruntime-web from 1.23.0-dev.20250917-21fbad8a65 to 1.27.0.

Release notes

Sourced from onnxruntime-web's releases.

ONNX Runtime v1.27.0

n.b. This release is targeting ONNX 1.21. ONNX 1.22 will be supported in ORT 1.28. n.b. This changelog was generated via LLM. Only the contributor list has been verified. As always, only trust the commit history.

Announcements & Breaking Changes

CUDA 12 package files are now explicitly named as such.

CUDA 12 packages are deprecated, please move to CUDA 13 ASAP.

Security Fixes

Fixed out-of-bounds read in SoftmaxCrossEntropyLoss via label bounds validation (#28004)

Hardened OneHot input validation and output-size computation (#28014)

Added SafeInt overflow protection in Expand and capped constant-folding output sizes (#28055)

Bounded total output allocation size in Tile kernel (#28070)

Added mask/input shape consistency checks in MaxpoolWithMask::Compute (#28223)

Fixed BitShift UB for shift amounts greater than or equal to bit width (#28272)

Validated sequence bounds in GQA (seqlens_k vs cos_cache) (#28277)

Validated conv bias shape in WordConvEmbedding to prevent OOB reads (#28279)

Fixed int32 overflow in CUDA Cast and UnaryElementWise kernels for very large tensors (#28386)

Fixed out-of-bounds read in CropBase scale handling (#28399)

Fixed rank-underflow bug in Inverse kernel trailing-dimension indexing (#28400)

Added sparse tensor external file path validation and additional external-path hardening (#28408, #28709, #28725)

Switched remaining torch.load() calls to weights_only=True (#28421)

Added CPU cache-indirection beam-index validation (#28486)

Added additional overflow/bounds checks and test coverage in runtime buffers (#28713, #28747)

New Features

Execution Provider Plugin API

Added zero-copy I/O for plugin EPs with HOST_ACCESSIBLE memory (#28037)

Added OrtEp::OnSessionInitializationEnd() callback (#28319)

Added plugin EP session-options getters (#28377)

Added CUDA Plugin EP provider options for streams and external allocators (#28603)

Core APIs & Runtime

Added support for ONNX overloaded functions (IR v10+) (#28275)

Added FLOAT8E8M0 datatype support in ONNX Runtime (#28381)

Added CPU Cast support for FLOAT8E8M0 (#28435)

Added kOrtEpDevice_EpMetadataKey_OSDriverVersion example and docs (#28282)

Quantization & Training Tooling

Added calibration cache support to quantize_static (#28221)

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by erscor_msft, a new releaser for onnxruntime-web since your current version.

Copilot

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

github-actions · 2026-07-13T19:26:34Z

pkg.pr.new

packages
Ready to be installed by your favorite package manager ⬇️

https://pkg.pr.new/software-mansion/TypeGPU/eslint-plugin-typegpu@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/tgpu-gen@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/tinyest-for-wgsl@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/typegpu@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/cli@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/color@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/gl@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/noise@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/radiance-cascades@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/react@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/sdf@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/@typegpu/three@3dfb76e97506f692589539b99687cdf91c9049ee

https://pkg.pr.new/software-mansion/TypeGPU/unplugin-typegpu@3dfb76e97506f692589539b99687cdf91c9049ee

benchmark
view benchmark

commit
view commit

github-actions · 2026-07-13T19:27:45Z

Bundle size comparison (`import * as ...` in PR vs `import * as ...` in target):

🟢 Decreased	➖ Unchanged	🔴 Increased	❔ Unknown
0	322	0	0

`import { ... }` in PR vs `import * as ...` in PR (is the library tree-Shakeable?):

Test	tsdown
tgpu_init.ts	258.90 kB ($${\color{green}-3.2\%}$$)
tgpu_initFromDevice.ts	258.39 kB ($${\color{green}-3.4\%}$$)
tgpu_resolve.ts	164.59 kB ($${\color{green}-38.5\%}$$)
tgpu_resolveWithContext.ts	164.53 kB ($${\color{green}-38.5\%}$$)
tgpu_bindGroupLayout.ts	68.97 kB ($${\color{green}-74.2\%}$$)
tgpu_mutableAccessor.ts	65.97 kB ($${\color{green}-75.3\%}$$)
tgpu_accessor.ts	65.96 kB ($${\color{green}-75.3\%}$$)
tgpu_privateVar.ts	65.31 kB ($${\color{green}-75.6\%}$$)
tgpu_workgroupVar.ts	65.30 kB ($${\color{green}-75.6\%}$$)
tgpu_const.ts	64.55 kB ($${\color{green}-75.9\%}$$)
tgpu_fn.ts	38.14 kB ($${\color{green}-85.7\%}$$)
tgpu_fragmentFn.ts	38.14 kB ($${\color{green}-85.7\%}$$)
tgpu_vertexFn.ts	37.96 kB ($${\color{green}-85.8\%}$$)
tgpu_computeFn.ts	37.66 kB ($${\color{green}-85.9\%}$$)
tgpu_vertexLayout.ts	26.79 kB ($${\color{green}-90.0\%}$$)
tgpu_comptime.ts	14.48 kB ($${\color{green}-94.6\%}$$)
tgpu_unroll.ts	1.66 kB ($${\color{green}-99.4\%}$$)
tgpu_slot.ts	1.54 kB ($${\color{green}-99.4\%}$$)
tgpu_lazy.ts	1.19 kB ($${\color{green}-99.6\%}$$)

If you wish to run a comparison for other, slower bundlers, run the 'Tree-shake test' from the GitHub Actions menu.

github-actions · 2026-07-13T19:27:56Z

Resolution Time Benchmark

---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Random Branching (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.94, 1.88, 4.39, 6.48, 6.75, 12.37, 21.10, 21.35]
  line [0.90, 1.88, 4.03, 5.78, 7.42, 11.70, 21.45, 22.80]
  line [0.90, 2.02, 4.57, 5.95, 7.14, 10.57, 22.09, 23.45]

---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Linear Recursion (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.34, 0.51, 0.65, 0.84, 1.06, 1.14, 1.34, 1.54]
  line [0.35, 0.52, 0.71, 0.77, 1.10, 1.14, 1.33, 1.52]
  line [0.32, 0.51, 0.66, 0.80, 1.11, 1.18, 1.42, 1.54]

---
config:
  themeVariables:
    xyChart:
      plotColorPalette: "#E63946, #3B82F6, #059669"
---
xychart
  title "Full Tree (🔴 PR | 🔵 main | 🟢 release)"
  x-axis "max depth" [1, 2, 3, 4, 5, 6, 7, 8]
  y-axis "time (ms)"
  line [0.88, 2.19, 3.54, 6.54, 12.36, 25.46, 53.08, 106.17]
  line [0.90, 2.26, 4.59, 7.27, 12.54, 23.96, 52.03, 106.02]
  line [0.78, 2.12, 4.56, 7.17, 13.16, 25.80, 53.56, 109.75]

Bumps [onnxruntime-web](https://github.com/Microsoft/onnxruntime) from 1.23.0-dev.20250917-21fbad8a65 to 1.27.0. - [Release notes](https://github.com/Microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](https://github.com/Microsoft/onnxruntime/commits/v1.27.0) --- updated-dependencies: - dependency-name: onnxruntime-web dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026

Copilot AI review requested due to automatic review settings July 13, 2026 19:25

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026

Copilot AI reviewed Jul 13, 2026

dependabot Bot mentioned this pull request Jul 13, 2026

build(deps): bump onnxruntime-web from 1.23.0-dev.20250917-21fbad8a65 to 1.23.2 #2134

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/onnxruntime-web-1.27.0 branch from 5cdeaca to a317573 Compare July 21, 2026 14:24

dependabot Bot force-pushed the dependabot/npm_and_yarn/onnxruntime-web-1.27.0 branch from a317573 to 3dfb76e Compare July 26, 2026 10:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump onnxruntime-web from 1.23.0-dev.20250917-21fbad8a65 to 1.27.0#2718

chore(deps): bump onnxruntime-web from 1.23.0-dev.20250917-21fbad8a65 to 1.27.0#2718
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/onnxruntime-web-1.27.0

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

github-actions Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ONNX Runtime v1.27.0

Announcements & Breaking Changes

Security Fixes

New Features

Execution Provider Plugin API

Core APIs & Runtime

Quantization & Training Tooling

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle size comparison (import * as ... in PR vs import * as ... in target):

import { ... } in PR vs import * as ... in PR (is the library tree-Shakeable?):

Uh oh!

github-actions Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Resolution Time Benchmark

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

github-actions Bot commented Jul 13, 2026 •

edited

Loading

github-actions Bot commented Jul 13, 2026 •

edited

Loading

Bundle size comparison (`import * as ...` in PR vs `import * as ...` in target):

`import { ... }` in PR vs `import * as ...` in PR (is the library tree-Shakeable?):

github-actions Bot commented Jul 13, 2026 •

edited

Loading