unstale

pypi / hydra-core

hydra-core

What changed in hydra-core 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-11-13.

2 breaking7 security1 deprecations4 new APIs and options4 behavior and defaults1 tooling6 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.3.0 on npm

hydra-core 125 changes

Breaking changes 2

Security 7

  • Hydra legacy target blacklist permits unsafe PyYAML loading

    1.3.8security advisory

  • Prevents arbitrary code execution through unsafe PyYAML loaders; safe YAML loading and dumping remain supported.

    1.3.8release notes

  • Strengthens checks for configured targets, Python runtime state, process-environment mutation, and logging formatters; these checks are not a complete security boundary.

    1.3.7release notes

  • Hydra: Mutable instantiate policy sets allow target blocklist bypass

    1.3.7security advisory

  • Hydra instantiate target blacklist bypasses permit code execution

    1.3.6security advisory

  • Authorization for instantiate is hardened against unsafe aliases and callable results.

    1.3.6release notes

  • Hydra's target blacklist is now applied to Python logging configuration.

    1.3.6release notessecurity advisory

Deprecations 1

  • Hydra 1.3 users relying on Hydra 1.1 behavior now receive a warning.

    1.3.5release notes

New APIs and options 4

  • Config packages let developers reduce nesting levels.

    1.0.0release notes

  • Intervals can now be cast to ints and floats.

    1.0.0release notes

  • Hydra 1.0 adds plugins enabling remote launching and hyper parameter optimization.

    1.0.0release notes

  • Hydra 1.0 adds config type safety via Structured Configs.

    1.0.0release notes

Behavior and default changes 4

  • Hydra 1.0 improves error reporting.

    1.0.0release notes

  • When HYDRA_FULL_ERROR=1, apps raise the underlying exception.

    1.0.0release notes

  • The signature allows input configs of Any type.

    1.0.0release notes

  • Interpolation accepts any character between ${ and }.

    1.0.0release notes

Tooling 1

  • Hydra 1.0 provides a more powerful command line.

    1.0.0release notes

Fixes and other changes 6

  • Command-line overrides of hydra.job.env_set now work correctly.

    1.0.0release notes

  • instantiate now works correctly when parameters are interpolations into a parent node.

    1.0.0release notes

  • Logging is flushed instead of shut down at job end.

    1.0.0release notes

  • Tab completion no longer outputs errors in some cases when using --multirun.

    1.0.0release notes

  • The Nevergrad plugin now handles integer/float choice from spec correctly.

    1.0.0release notes

  • OmegaConf custom resolvers are now propagated to Sweepers properly.

    1.0.0release notes