Skip to content

fix[notask]: align SDK @qvac/inference range to the 0.18 line - #4021

Merged
opaninakuffo merged 2 commits into
mainfrom
fix/sdk-inference-dep-range
Aug 24, 2026
Merged

fix[notask]: align SDK @qvac/inference range to the 0.18 line#4021
opaninakuffo merged 2 commits into
mainfrom
fix/sdk-inference-dep-range

Conversation

@lauripiisang

@lauripiisang lauripiisang commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

🎯 What problem does this PR solve?

Installing @qvac/sdk fails with ERESOLVE (the SDK Pod Checks consumer-install gate goes red).

  • @qvac/sdk pins @qvac/inference to ^0.17.0, which resolves to 0.17.1 — whose peerOptional @qvac/asr-ggml@^0.1.0 conflicts with the SDK's @qvac/asr-ggml@^0.3.0.
  • The published @qvac/sdk@0.18.1 predates the inference split and carries no @qvac/inference dep, so consumers today are unaffected — the break is latent and would ship on the next publish. The SDK Pod gate already catches it.

📝 How does it solve it?

  • Bump @qvac/inference ^0.17.0^0.18.0 in packages/sdk. 0.18.x aligns its addon peer ranges with the SDK's (@qvac/asr-ggml@^0.3.0, etc.), so the resolved inference and the addon versions agree.

🧪 How was it tested?

  • Reproduced the exact ERESOLVE with @qvac/asr-ggml@^0.3.0 + @qvac/inference@^0.17.0; confirmed + ^0.18.0 resolves cleanly (148 packages, no peer conflict).

Scope note — this does NOT fully green main

This PR fixes only the peer-resolution (ERESOLVE). The SDK build is separately red because main's SDK consumes engine API (VideoClientParams.reference_images) that exists in no installable @qvac/inference — the published 0.18.1 lacks it. That cannot be fixed by a CI/dependency change without shipping a build whose declared inference dependency can't satisfy its code. This will be fixed separately.

@lauripiisang
lauripiisang requested review from a team as code owners August 24, 2026 12:27
@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Review Status

Current Status: ✅ APPROVED
Approvals so far: Team Lead: 1, Member: 1

@github-actions

Copy link
Copy Markdown
Contributor

License compliance — clean

No new dependency license findings in this PR.

Warn-only (shadow) mode — this check does not block merges yet.

Updated automatically by the canonical license compliance workflow.

NOTICE presence (advisory)

Missing NOTICE (advisory, does not block):

  • ./.github/actions/release-merge-guard
  • ./docs/website
  • ./packages/ggml-coload-smoke
  • ./packages/fabric/test/integration
  • ./packages/inference-addon-cpp/mobile
  • ./packages/sdk/e2e
  • ./packages/llm-llamacpp/benchmarks/performance
  • ./packages/llm-llamacpp/benchmarks/server
  • ./packages/vla-ggml/sim/server
  • ./packages/embed-llamacpp/benchmarks/performance
  • ./packages/embed-llamacpp/benchmarks/server
  • ./packages/asr-ggml/benchmarks/server

@socket-security

socket-security Bot commented Aug 24, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​qvac/​inference@​0.18.1791001009270

View full report

- sdk pinned @qvac/inference to ^0.17.0, which resolves to 0.17.1 (<0.18.0)
- inference@0.17.1 declares peerOptional @qvac/asr-ggml@^0.1.0, but the SDK
  depends on @qvac/asr-ggml@^0.3.0, so a consumer install fails with ERESOLVE
- inference@0.18.x aligns its addon peers with the SDK's ranges
- bump to ^0.18.0 so the resolved inference matches the addon versions
@lauripiisang lauripiisang changed the title fix[notask]: align SDK/bare-sdk @qvac/inference range to the 0.18 line fix[notask]: align SDK @qvac/inference range to the 0.18 line Aug 24, 2026
@lauripiisang
lauripiisang force-pushed the fix/sdk-inference-dep-range branch from d5d7aa2 to 1e16660 Compare August 24, 2026 12:32
@lauripiisang lauripiisang changed the title fix[notask]: align SDK @qvac/inference range to the 0.18 line fix[notask]: unbreak SDK install and build CI on main after the inference split Aug 24, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Workflow security (shadow mode)

zizmor found 1096 finding(s) in .github/ (highest severity: high). This check is warn-only and does not block the merge.

Findings are annotated inline on the changed files and listed in the job summary.

Reproduce locally:

pipx run zizmor==1.27.0 --offline .github/

@lauripiisang
lauripiisang force-pushed the fix/sdk-inference-dep-range branch from 2832149 to 1e16660 Compare August 24, 2026 13:06
@lauripiisang lauripiisang changed the title fix[notask]: unbreak SDK install and build CI on main after the inference split fix[notask]: align SDK @qvac/inference range to the 0.18 line Aug 24, 2026
@opaninakuffo
opaninakuffo merged commit 277836d into main Aug 24, 2026
53 of 54 checks passed
@opaninakuffo
opaninakuffo deleted the fix/sdk-inference-dep-range branch August 24, 2026 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants