Update cargo dependencies (livekit-wakeword)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
ort (source)	dependencies	patch	2.0.0-rc.11 → 2.0.0-rc.12	2.0.0-rc.13
ort-tract (source)	dependencies	minor	0.2.0+0.22 → 0.3.0	0.4.0
resampler	dependencies	minor	0.4 → 0.5

---

Release Notes

pykeio/ort (ort)

v2.0.0-rc.12

Compare Source

2.0.0-rc.12

💖 If you find ort useful, please consider sponsoring us on Open Collective 💖

🤔 Need help upgrading? Ask questions in GitHub Discussions or in the pyke.io Discord server!

---

This release was made possible by Rime.ai!

_{Authentic AI voice models for enterprise.}

---

📍 Multiversioning

🚨 If you used ort with default-features = false, enable the api-24 feature to use the latest features.

The big highlight of this release is multiversioning: ort can now use any minor version of ONNX Runtime from v1.17 to v1.24. New features are gated behind api-* feature flags, like api-20 or api-24. These flags will set the minimum version of ONNX Runtime required by ort.

More info 👉 https://ort.pyke.io/setup/multiversion

🪄 Automatic device selection

With ONNX Runtime 1.22 or later, ort will now automatically use an NPU if one is available for maximum efficiency & power savings! Setting your own execution providers will override this.

This is thanks to the super cool new SessionBuilder::with_auto_device API! There's also SessionBuilder::with_devices for finer control.

👁️ CUDA 13

ort now ships builds for both CUDA 12 & CUDA 13! It should automatically detect which CUDA you're using, but if it gets it wrong, you can override it by setting the ORT_CUDA_VERSION environment variable to 12 or 13.

🩹 SessionBuilder error recovery

You can now recover from errors when building a session by calling .recover() on the error type to get the SessionBuilder back.

🛡️ Build attestations

Prebuilt binaries are now attested via GitHub Actions, so you can verify that they are untampered builds of ONNX Runtime coming straight from pyke.io.

To verify, download your binary package of choice and use the gh CLI to verify:

➜  gh attestation verify --owner pykeio ./x86_64-pc-windows-msvc+cu13.tar.lzma2
Loaded digest sha256:e96616510082108be228ad6ea026246a31650b7d446b330c6b9671fcb9ae6267 for file://./x86_64-pc-windows-msvc+cu13.tar.lzma2
Loaded 1 attestation from GitHub API

The following policy criteria will be enforced:
- OIDC Issuer must match:................... https://token.actions.githubusercontent.com
- Source Repository Owner URI must match:... https://github.com/pykeio
- Predicate type must match:................ https://slsa.dev/provenance/v1
- Subject Alternative Name must match regex: (?i)^https://github.com/pykeio/

✓ Verification succeeded!

sha256:e96616510082108be228ad6ea026246a31650b7d446b330c6b9671fcb9ae6267 was attested by:
REPO                  PREDICATE_TYPE                  WORKFLOW
pykeio/ort-artifacts  https://slsa.dev/provenance/v1  .github/workflows/build-runner.yml@refs/heads/main

(Also note that the SHA-256 hash lines up with the one defined in dist.txt.)

---

Moving stuff around

• The ORT_LIB_LOCATION environment variable has been renamed to ORT_LIB_PATH.
  • Same with all other env vars ending in _LOCATION.
  • The old names will continue to work, but they won't make it into v2.0.0, so it's a good idea to change them now!
• Everything that used to be in ort::tensor is now in ort::value, because why have a tensor module if the Tensor<T> type actually comes from the value module?
• IoBinding and Adapter were moved from their own modules into ort::session. All sub-modules of ort::session besides builder were collapsed into ort::session.
• All sub-modules of ort::operator were collapsed into ort::operator.
• Session option changes:
  • with_denormal_as_zero -> with_flush_to_zero
  • with_device_allocator_for_initializers -> with_device_allocated_initializers

Fixes

• c52bd2a Fix MIGraphX registration.
  • #​512 missed a spot, thank you IntQuant =)
• 374a9d1 Fix global environment thread pools
• ff08428 Fix a segfault in Tensor::clone.
• 3d6c2a9 Use new API to load the DirectML EP.
• 5913ae0 Make vcpkg builds work again.
• 079ecb4 Fix issues with multiple environment registration.

---

❤️🧡💛💚💙💜

hasenbanck/resampler (resampler)

v0.5.1

Compare Source

Fixed

• Fix overflow in ResamplerFir with high resample ratios (#​36)

v0.5.0

Compare Source

Added

• Support arbitrary sample rates in ResamplerFir (#​34)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

No changeset found

This PR modifies versioned packages but doesn't include a changeset. The following packages require a version bump:

• livekit-wakeword

A package must be bumped when its own files change, and whenever a package it depends on is bumped (so downstream consumers get a matching release).

Click here to create a changeset for the missing packages

The link pre-populates a changeset file with patch bumps for the missing packages. You can also add them to your existing changeset. Edit the bump types as needed before committing.

If this change doesn't require a version bump, add the internal label to this PR.

[devin-ai-integration]

Devin Review found 1 potential issue.

View 2 additional findings in Devin Review.

[devin-ai-integration]

🟡 Dependency update ships without the required change note

The dependency version bump for the wake-word package (resampler = "0.5" at livekit-wakeword/Cargo.toml:12) is submitted without adding the change note file the project requires for every pull request, so the release tooling will not know this package needs a version bump.
Impact: The published package can be released without its dependency change being recorded or its version bumped.

Missing knope changeset entry for livekit-wakeword

AGENTS.md ("Documenting changes") states: "Every PR needs a changeset" and "Changeset must list any crates which need to be bumped stemming from the change". The repository uses knope (knope.toml) with change notes stored in /.changeset (currently fix-publisher-renegotiation-deadlock.md, fix_nvenc_dynamic_bitrate_updates.md, fix_uniffi_android_package_build.md). This commit only touches Cargo.lock and livekit-wakeword/Cargo.toml (bumping resampler 0.4→0.5 and ort-tract 0.2→0.3, plus lockfile ort rc.11→rc.12) and adds no changeset for livekit-wakeword.

Prompt for agents

AGENTS.md requires every PR to include a knope changeset in /.changeset listing crates that need a version bump. This PR bumps livekit-wakeword's dependencies (resampler 0.4->0.5, ort-tract 0.2->0.3, and ort rc.11->rc.12 in Cargo.lock) but adds no changeset. Add a changeset file (e.g. via `knope document-change`) noting a patch bump for the livekit-wakeword crate describing the dependency updates.

---

Was this helpful? React with 👍 or 👎 to provide feedback.