Skip to content

Upgrade: Bump github.com/ollama/ollama from 0.3.0 to 0.6.2#290

Closed
dependabot[bot] wants to merge 1 commit intopre-mainfrom
dependabot/go_modules/pre-main/github.com/ollama/ollama-0.6.2
Closed

Upgrade: Bump github.com/ollama/ollama from 0.3.0 to 0.6.2#290
dependabot[bot] wants to merge 1 commit intopre-mainfrom
dependabot/go_modules/pre-main/github.com/ollama/ollama-0.6.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 24, 2025

Bumps github.com/ollama/ollama from 0.3.0 to 0.6.2.

Release notes

Sourced from github.com/ollama/ollama's releases.

v0.6.2

What's Changed

  • Multiple images are now supported in Gemma 3
  • Fixed issue where running Gemma 3 would consume a large amount of system memory
  • ollama create --quantize now works when converting Gemma 3 from safetensors
  • Fixed issue where /save would not work if running a model with / in the name
  • Add support for AMD Strix Halo GPUs

New Contributors

Full Changelog: ollama/ollama@v0.6.1...v0.6.2

v0.6.1

New models

  • Command A: 111 billion parameter model optimized for demanding enterprises that require fast, secure, and high-quality AI.

What's Changed

  • Fixed issues where gemma3 would crash with "out of memory (OOM)" errors by improving memory estimation
  • Loading an invalid model with /load will no longer exit ollama run
  • Added Ctrl+P and Ctrl+N hotkeys for ollama run
  • New ollama show -v or ollama show --verbose that will print additional model data
  • Improved sampling parameters such as temperature and top_k to behave similar to other implementations

New Contributors

Full Changelog: ollama/ollama@v0.6.0...v0.6.1

v0.6.0

Gemma 3 with Ollama

New Model

  • Gemma 3: Google Gemma 3 model is now available in 1B, 4B, 12B, and 27B parameter sizes.

What's Changed

  • Fixed error that would occur when running snowflake-arctic-embed and snowflake-arctic-embed2 models

New Contributors

Full Changelog: ollama/ollama@v0.5.13...v0.6.0

v0.5.13

New models

... (truncated)

Commits
  • 021dcf0 Merge pull request #9824 from ollama/mxyng/sched
  • bf24498 ollamarunner: Check for minBatch of context space when shifting
  • 95e271d runner: remove cache prompt flag from ollama runner (#9826)
  • 364629b ml/backend/ggml: allocate memory with malloc when loading model (#9822)
  • 108fe02 sample: make mutations in transforms explicit (#9743)
  • 4561fff conditionally enable parallel pipelines
  • 50b5962 Add support for ROCm gfx1151 (#9773)
  • e27e4a3 readme: add screenpipe to community integrations (#9786)
  • 088514b readme: add Ellama to list of community integrations (#9800)
  • 2c8b484 fix: correctly save in interactive mode (#9788)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/ollama/ollama](https://github.com/ollama/ollama) from 0.3.0 to 0.6.2.
- [Release notes](https://github.com/ollama/ollama/releases)
- [Commits](ollama/ollama@v0.3.0...v0.6.2)

---
updated-dependencies:
- dependency-name: github.com/ollama/ollama
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 24, 2025
@dryrunsecurity
Copy link
Copy Markdown

DryRun Security Summary

Go module dependency update for genval involving toolchain upgrade to 1.24.1, Ollama library version bump, and multiple package updates with potential security improvements.

Expand for full summary
  1. Summary: Go module dependency update for github.com/intelops/genval, upgrading Go toolchain to 1.24.1 and updating multiple dependencies, including Ollama library from v0.3.0 to v0.6.2.

  2. Security Findings:

  • Potential security implications from dependency version increases
  • Ollama library version jump (v0.3.0 to v0.6.2) may include security improvements
  • Go toolchain update to 1.24.1 could include security-related compiler and runtime improvements
  • Multiple golang.org/x/* package version updates that may contain security patches

Note: While no explicit vulnerabilities were found, the security implications of version upgrades should be carefully reviewed and tested.

View PR in the DryRun Dashboard.

@santoshkal santoshkal closed this Mar 25, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 25, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/go_modules/pre-main/github.com/ollama/ollama-0.6.2 branch March 25, 2025 07:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant