Bump tract-onnx from 0.22.1 to 0.22.3

[dependabot]

Bumps tract-onnx from 0.22.1 to 0.22.3.

Changelog

Sourced from tract-onnx's changelog.

0.22.x → 0.23 in a nutshell

• tract facade is now the recommended public API. Renamed from tract-rs; sole crate under semver, one curated surface (Model/Runnable/State/Tensor/TDim + nnef()/onnx()/runtime_for_name). ndarray removed from public types in favour of opt-in impl_ndarray_interop!(). Most other API renames in this release fall out of this consolidation (Value→Tensor, concretize_symbols→set_symbols, default runtime → cpu, …).
• GPU is first-class. cuda + metal Runtime impls with f16 conv + cuDNN, CUDA 13 (CUDA 12 dropped), automatic per-node CPU fallback when GPU rejects a shape; virtual gpu / gpu-or-cpu names for portable downstream code.
• Supply-chain hardening. Cargo.lock tracked; CDX + SPDX SBOMs on release binaries plus PEP 770 SBOMs in wheels (cargo-auditable + GitHub attestations);

Migrating from 0.22.x to 0.23

For normal usage we recommend adopting the tract facade crate (the public API at api/rs) instead of wiring tract-core, tract-nnef, tract-onnx, tract-pulse, tract-cuda, tract-metal, etc. directly. The facade exposes one stable surface — nnef(), onnx(), runtime_for_name("cpu" | "gpu" | "gpu-or-cpu" | "cuda" | "metal" | ...), plus Model, Runnable, State, Tensor, TDim, and a SetSymbols transform builder — with all the backends curated behind it. impl_ndarray_interop!() (0.23.0-dev.5) keeps ndarray interop opt-in without leaking an ndarray version into the public API. Downstream code that pinned tract-core + tract-onnx directly can usually drop those deps in favour of tract = "0.23" and use tract::prelude::*;. Examples are now organised around this facade — see examples/onnx-mobilenet-v2, examples/nnef-mobilenet-v2, and examples/causal_llm.

0.23.3 - 2026-06-19

GPU

• Native STFT / FFT on GPU. Backend-agnostic GpuStft (CUDA + Metal) backed by a 512-point Stockham FFT kernel, generalized to power-of-two frames (256/512/1024/2048), plus inverse FFT and lowering of the standalone Fft op.

CPU / linalg

• SVE2 RmsNorm. VLA SVE2 rms_norm_f32 kernel for aarch64 SVE2 hosts.

Transformers / LLM

• KV-cache quantization (KIVI-style). QuantizedKvSdpa op with packed u8 storage and configurable bit-width, an auto-wiring transform, and NNEF de/serialization round-trip.

Core / NNEF / ONNX

• Resize / GridSample in core. A clean Resize subset and GridSample moved into tract-core: f16 resize, a sizes input on tract_core_resize, a clamped resize floor for negative source coordinates, and a retained grid_sample alias.

0.23.2 - 2026-06-16

Security

• fix for CVE-2026-55832 in tract-onnx (moderate): lack of sanitation in ONNX split tensor file paths.

0.23.1 - 2026-06-10

Security

• fix for CVE-2026-55093 in tract-nnef (moderate): validation of tensor shapes in NNEF .dat files to prevent of multiplication overflow in buffer size computation.

CPU / linalg

• int8 GEMM kernels across backends. aarch64 SDOT (FEAT_DotProd), x86_64 AVX-512-VNNI (avx512vnni_mmm_i32_8x8), and ARM SME2 SMOPA (sme_qmmm_i32_32x32) int8→i32 matmul micro-kernels.

... (truncated)

Commits

• 1541d40 release 0.22.3
• 5f994bc Sanitize ONNX external_data location and bound offset/length
• df98b34 release.sh: push the release commit and only its version tag. The script push...
• 5fcd0c0 post-release 0.22.3-pre
• 19a2c2a release 0.22.2
• 4773e92 fix(nnef): reject overflowing block-quant tensor dims
• ee5f019 fix(nnef): reject overflowing tensor dims
• a213cbc Support value_ints, value_floats, value_string(s) in ONNX Constant op
• 0eb5ced backport wheels build from amin
• c92b8a1 post-release 0.22.2-pre
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

🚀 PR Preview

Your preview is ready! View the changes at:

https://jthemphill.github.io/htmf/pr-preview/pr-63/

This preview will be updated automatically when you push new commits to this PR.

---

_{Built with commit bda7514}

[dependabot]

Looks like tract-onnx is up-to-date now, so this is no longer needed.