From 526b069f206f28ff2d80bc542795c704b0b21987 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 17 Jul 2026 21:42:51 +0000
Subject: [PATCH] chore(deps): Update dependency torch to v2.13.0 [SECURITY]

---
 ai/pyproject.toml                          | 2 +-
 mcp-server/vmaf-mcp/pyproject.toml         | 2 +-
 tools/ensemble-training-kit/pyproject.toml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/ai/pyproject.toml b/ai/pyproject.toml
index 21db6cb41..cb63c0d9f 100644
--- a/ai/pyproject.toml
+++ b/ai/pyproject.toml
@@ -9,7 +9,7 @@ authors = [
   { name = "Lusoris", email = "lusoris@pm.me" },
 ]
 dependencies = [
-  "torch>=2.12.1,<3.0",
+  "torch>=2.13.0,<3.0",
   # torchvision must be pinned as a direct dep to enforce ABI compatibility with
   # the torch floor declared above.  pytorch-lightning → torchmetrics 1.9+
   # eagerly imports `torchvision.transforms` for its arniqa metric; an older
diff --git a/mcp-server/vmaf-mcp/pyproject.toml b/mcp-server/vmaf-mcp/pyproject.toml
index 53b0dfc0c..192afca54 100644
--- a/mcp-server/vmaf-mcp/pyproject.toml
+++ b/mcp-server/vmaf-mcp/pyproject.toml
@@ -32,7 +32,7 @@ eval = [
 # (ADR-0172 / T6-6).
 vlm = [
   "transformers>=5.12.1",
-  "torch>=2.12.1",
+  "torch>=2.13.0",
   "Pillow>=12.2.0",
   "accelerate>=1.14.0",
 ]
diff --git a/tools/ensemble-training-kit/pyproject.toml b/tools/ensemble-training-kit/pyproject.toml
index e546513d0..fad5c1995 100644
--- a/tools/ensemble-training-kit/pyproject.toml
+++ b/tools/ensemble-training-kit/pyproject.toml
@@ -13,7 +13,7 @@ authors = [
 # NOT pull in the full ai/ optional-dependency tree (no optuna / ray /
 # matplotlib / lightning) — those are not on the Phase-A retrain path.
 dependencies = [
-  "torch>=2.12.1,<3.0",
+  "torch>=2.13.0,<3.0",
   "onnx>=1.21.0,<2.0",
   "onnxruntime>=1.27.0,<2.0",
   "onnx>=1.22.0,<2.0",