validator-staging-2026-11-11-43092055737-629-1: fix: upgrade vulnerable dependencies across subprojects (#864)
About SN12 Compute Horde
Apply targeted uv lock upgrades and move Django to the 5.2 LTS line. Upgrade constance, pytest-django and django-pydantic-field for Django/DRF compatibility. Raise the SDK minimum Python to 3.11 and align its CI matrix. Update executor mocks for pytest-httpx and declare validator tests' threaded database alias access. Address PyJWT GHSA-ffc3-869f-jxw9, GHSA-r6x4-923q-g947, GHSA-42vr-xj54-vc7v and GHSA-x33g-cr3x-6449, among other advisories. Deferred targets retain known vulnerabilities: Bittensor 9 pins setuptools 70 and FastAPI/Starlette 0.37; upgrading them requires a separate blockchain API migration (all except SDK). Validator's shield client pins cryptography 43, pydantic-settings 2.7 and python-dotenv 1.0, also blocking pyOpenSSL 26 and Twisted 26. Client 0.4 removes the existing ShieldedBittensor integration. Validator's turbobt revision pins HTTPX 0.26, incompatible with the pytest-httpx versions required for pytest 9. SDK/local_stack SkyPilot 0.8 pins wheel<0.46; its replacement changes the fallback adapter's synchronous cloud APIs. Facilitator CPU torch>=2.13 conflicts with Bittensor's setuptools pin. Transformers 5 needs huggingface-hub>=1.5; the shared SDK downloader still uses the pre-1.0 hf_transfer retry API. Unfixed upstream: torch GHSA-c678-jfcj-6jmf, GHSA-f4hp-rmr7-r7v8, GHSA-x3gm-94wq-g975; transformers GHSA-x9r9-c232-4q39; twisted GHSA-8pqf-f4m5-798g. Validation: ran application tests and type checks. Five type checks pass; facilitator retains 44 baseline errors. All nine locks validate. Both requested nox commands were attempted in the three utility projects, which have no noxfile. Impacts: lib, sdk, validator, miner, executor, facilitator
Read the release notes on GitHub ↗
SN12 Compute Horde at a glance
SN12, Compute Horde (α token μ), is one of the independent markets on the Bittensor network, each with its own α token and its own price. Its α currently trades at 0.004683 τ (≈ $1.03), against 12,531 τ of pool liquidity. On-chain, the best-delegated validator on it yields about 56.94% APR (simple) and 76.71% APY (compounded), emissions add 0.000000 τ to the pool each block, epochs run every 360 blocks. It was registered at block #2,256,433.
Taosis newsletters
Taosis News: the week’s articles from the subnet teams, the press and community newsletters, every Friday. Taosis Weekly: the week’s movers, best yields and chain events, with dollar values, every Monday. Past issues
More from SN12 Compute Horde
Taosis indexes announcements, articles, posts and releases about Bittensor subnets from their own channels and keeps a record of each. The text above is the source’s; the figures are read from the chain by Taosis.