Skip to content

Conversation

@yhtang
Copy link
Contributor

@yhtang yhtang commented Nov 21, 2025

No description provided.

@mjsML mjsML requested a review from Copilot November 21, 2025 21:08
@mjsML mjsML requested a review from jreiffers November 21, 2025 21:08
Copilot finished reviewing on behalf of mjsML November 21, 2025 21:09
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR reverts the entire JAX inference offloading bridge due to security vulnerabilities (CVEs) in dependencies. The changes remove all code, configuration, examples, documentation, and CI/CD workflows related to the jax-inference-offloading project. The revert is comprehensive, deleting the complete directory structure including Python packages, build configurations, Docker files, shell scripts, and GitHub Actions workflows.

Key Changes

  • Complete removal of the jax-inference-offloading Python package and all submodules
  • Deletion of all setup, build, and configuration files (setup.py, pyproject.toml, etc.)
  • Removal of all examples, documentation, and Docker configurations
  • Deletion of the GitHub Actions workflow for building and publishing JIO containers

Reviewed changes

Copilot reviewed 58 out of 58 changed files in this pull request and generated no comments.

Show a summary per file
File Description
setup.py Removed package setup with dependencies including grpcio 1.76., protobuf 6.33., vllm 0.10.2, and jax 0.8.0
pyproject.toml Removed build system configuration with grpcio-tools and protobuf dependencies
pep517_backend.py Removed custom PEP 517 build backend for protobuf compilation
All Python modules Removed complete implementation of JAX-vLLM bridge infrastructure
All examples Removed trainer, rollout, and GRPO training examples
All shell scripts Removed execution scripts for single-node and multi-node deployments
Dockerfile Removed container build configuration
.github/workflows/jio.yaml Removed CI/CD pipeline for building and publishing containers
README.md, LICENSE, etc. Removed all documentation and legal files
Comments suppressed due to low confidence (2)

jax-inference-offloading/setup.py:1

  • The protobuf version '6.33.*' does not exist. The latest protobuf versions are in the 4.x and 5.x series (e.g., 4.25.x, 5.27.x). Version 6.33 has never been released. This invalid version specification likely contributed to the CVE issues mentioned in the PR title.
    jax-inference-offloading/pyproject.toml:1
  • The protobuf version '6.33.*' specified in build requirements does not exist. Valid protobuf versions are in the 4.x and 5.x series. This invalid version specification would cause build failures.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants