fix: secure pip tooling while preserving frozen v1 evidence

.github/workflows/ci.yml

@@ -35,7 +35,9 @@ jobs:
           cache: pip
           cache-dependency-path: pyproject.toml
       - name: Install package
-        run: python -m pip install -e .
+        run: |
+          python -m pip install --upgrade "pip>=26.2"
+          python -m pip install -e .
       - name: Compile source and tests
         run: python -m compileall -q src tests
       - name: Check installed requirements
@@ -73,10 +75,13 @@ jobs:
       - name: Validate runtime license audit policy
         run: python scripts/audit_runtime_licenses.py --validate-policy-only
       - name: Build wheel
-        run: python -m pip wheel . --no-deps --wheel-dir dist
+        run: |
+          python -m pip install --upgrade "pip>=26.2"
+          python -m pip wheel . --no-deps --wheel-dir dist
       - name: Install wheel in a fresh environment
         run: |
           python -m venv "$RUNNER_TEMP/wheel-venv"
+          "$RUNNER_TEMP/wheel-venv/bin/python" -m pip install --upgrade "pip>=26.2"
           "$RUNNER_TEMP/wheel-venv/bin/python" -m pip install --no-deps dist/*.whl
           "$RUNNER_TEMP/wheel-venv/bin/python" -m pip check
       - name: Smoke-test installed wheel outside checkout
@@ -106,7 +111,9 @@ jobs:
           cache: pip
           cache-dependency-path: pyproject.toml
       - name: Install Studio extra
-        run: python -m pip install -e ".[studio]"
+        run: |
+          python -m pip install --upgrade "pip>=26.2"
+          python -m pip install -e ".[studio]"
       - name: Check Studio dependencies
         run: python -m pip check
       - name: Build and test Studio

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project will be documented in this file.
 
+## Unreleased
+
+### Security
+
+- Require `pip>=26.2` before current package installations and in every CI
+  environment to address CVE-2026-13346. Preserve the immutable v1.0.0 package
+  inventory and verify that changes to its pip pin still fail the release gate.
+
 ## [1.1.2] - 2026-08-31
 
 ### Fixed

CONTRIBUTING.md

@@ -11,6 +11,7 @@ OpenMultimodalLab 已发布 `v1.0.0`。优先接受小型、可测试、能改
 ```powershell
 python -m venv .venv
 .\.venv\Scripts\Activate.ps1
+python -m pip install --upgrade "pip>=26.2"
 python -m pip install -e .
 python scripts/contributor_smoke.py
 python -m unittest discover -s tests -v

README.md

@@ -157,6 +157,7 @@ git clone --branch v1.1.2 --depth 1 https://github.com/AlbertXXuu/OpenMultimodal
 cd OpenMultimodalLab
 
 py -3.11 -m venv .venv
+.\.venv\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv\Scripts\python.exe -m pip install -e .
 
 .\.venv\Scripts\oml.exe doctor
@@ -172,6 +173,7 @@ Linux uses the same CLI arguments with POSIX environment paths:
 
 ```bash
 python3.11 -m venv .venv
+.venv/bin/python -m pip install --upgrade "pip>=26.2"
 .venv/bin/python -m pip install -e .
 .venv/bin/oml doctor
 .venv/bin/oml run \
@@ -197,6 +199,7 @@ installs the interface, not the selected model backend or a CUDA-enabled
 PyTorch build.
 
 ```powershell
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install -e ".[studio]"
 .\.venv-ml\Scripts\oml.exe doctor --backend qwen3-vl
 .\.venv-ml\Scripts\oml.exe studio

README.zh-CN.md

@@ -136,6 +136,7 @@ git clone --branch v1.1.2 --depth 1 https://github.com/AlbertXXuu/OpenMultimodal
 cd OpenMultimodalLab
 
 py -3.11 -m venv .venv
+.\.venv\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv\Scripts\python.exe -m pip install -e .
 
 .\.venv\Scripts\oml.exe doctor
@@ -162,6 +163,7 @@ Reports 和项目介绍后置，同时严格区分试玩结果与正式评测证
 界面，不会替你安装所选模型后端或支持 CUDA 的 PyTorch。
 
 ```powershell
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install -e ".[studio]"
 .\.venv-ml\Scripts\oml.exe doctor --backend qwen3-vl
 .\.venv-ml\Scripts\oml.exe studio

SECURITY.md

@@ -2,10 +2,36 @@
 
 ## Supported state
 
-OpenMultimodalLab `v1.0.0` is the current stable release. Security fixes land
+OpenMultimodalLab `v1.1.2` is the current maintained release; `v1.0.0` is the
+immutable research/evidence baseline. Security fixes land
 on `main`; backports and a patch release are decided case by case from impact
 and compatibility. No long-term-support branch is promised.
 
+## Installation tooling
+
+Before installing or updating the package in each environment, upgrade pip:
+
+```text
+python -m pip install --upgrade "pip>=26.2"
+python -m pip --version
+```
+
+pip versions below 26.2 are affected by
+[CVE-2026-13346](https://github.com/advisories/GHSA-qwm4-qh6w-59xr), which requires
+a malicious package index. Use a trusted index for the bootstrap as well as
+subsequent installations. The supported installation guides and CI apply this
+minimum separately to each environment, including newly created wheel-test venvs.
+
+The [Windows model constraints](requirements/model-windows-py311-constraints.txt)
+record the packages present during the frozen v1.0.0 license audit. The old pip
+entry is historical evidence, not a current installer requirement. Current
+installation commands do not consume this file. Preserve it together with its
+bound snapshot and report; see the [maintenance policy](docs/MAINTENANCE.md).
+Do not use the historical file as a `pip install -r` installation list. A `-c`
+constraint does not itself install packages, but its old pip pin conflicts with
+the current pip minimum if pip is also requested. Record new environment audits
+under new names rather than overwriting the released evidence.
+
 ## Report a vulnerability
 
 Do not open a public issue containing an exploit, credential, private media,

TASKS.md

@@ -6,6 +6,13 @@
 
 ## Now：发布后可靠性审查
 
+- [x] 针对 [Dependabot 安全告警 #1](https://github.com/AlbertXXuu/OpenMultimodalLab/security/dependabot/1)
+  与 [PR #58](https://github.com/AlbertXXuu/OpenMultimodalLab/pull/58)，为当前安装入口和
+  CI 每个环境补齐 `pip>=26.2`。两个活动环境已升级至 `26.2.1`，其余包版本未变；
+  Windows 全新 editable/wheel 安装、13 项相关测试与 19 项发布门禁通过，203 项完整
+  测试通过（1 项既有 Windows 跳过）。冻结审计三份文件本轮逐字节未变，新增回归
+  继续拒绝历史 pip pin 漂移。远端 Linux CI 验收与告警处置记录在替代维护 PR 中。
+
 - [x] 明确 v1 冻结维护政策与一页式作品证据，不改写发布标签或哈希证据。
 - [x] 从全新 `v1.0.0` 克隆审计公开 quick start，区分 Windows 正常路径、
   严格离线构建工具缺口与 Ubuntu 系统 venv 前置条件。

docs/alvenx-studio.md

@@ -12,6 +12,7 @@ Use the Python 3.11 or 3.12 model environment documented for the selected
 backend. If that environment already works, add only the Studio extra:
 
 ```powershell
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install -e ".[studio]"
 .\.venv-ml\Scripts\oml.exe studio
 ```
@@ -20,6 +21,7 @@ For a new Qwen3-VL environment, install the backend and Studio together after
 installing the appropriate CUDA-enabled PyTorch build:
 
 ```powershell
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install -e ".[qwen3-vl,studio]"
 .\.venv-ml\Scripts\oml.exe doctor --backend qwen3-vl
 .\.venv-ml\Scripts\oml.exe studio

docs/backends/qwen3-vl.md

@@ -34,7 +34,7 @@ The following configuration was selected for the initial Windows experiment:
 
 ```powershell
 py -3.11 -m venv .venv-ml
-.\.venv-ml\Scripts\python.exe -m pip install --upgrade pip
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install `
   torch==2.13.0 `
   torchvision==0.28.0 `

docs/backends/smolvlm2.md

@@ -45,7 +45,7 @@ Use a separate Python 3.11 or 3.12 environment for real models:
 
 ```powershell
 py -3.11 -m venv .venv-ml
-.\.venv-ml\Scripts\python.exe -m pip install --upgrade pip
+.\.venv-ml\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv-ml\Scripts\python.exe -m pip install -e ".[smolvlm2]"
 .\.venv-ml\Scripts\oml.exe doctor --backend smolvlm2
 ```

docs/guides/third-party-adapter.md

@@ -13,6 +13,7 @@ core package:
 
 ```powershell
 python -m venv .venv
+.\.venv\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv\Scripts\python.exe -m pip install -e .
 .\.venv\Scripts\python.exe -m examples.custom_adapter.run_example
 .\.venv\Scripts\python.exe -m unittest examples.custom_adapter.test_contract -v

docs/tutorials/first-reproducible-benchmark.md

@@ -26,6 +26,7 @@ Create an isolated environment:
 
 ```powershell
 py -3.11 -m venv .venv
+.\.venv\Scripts\python.exe -m pip install --upgrade "pip>=26.2"
 .\.venv\Scripts\python.exe -m pip install -e .
 ```
 

tests/test_release_readiness.py

@@ -174,6 +174,28 @@ def test_license_snapshot_requires_integrity_and_clean_evidence(self) -> None:
         self.assertIn("hash_match=True", detail)
         self.assertFalse(tampered)
 
+    def test_constraints_reject_pip_upgrade_without_matching_snapshot(self) -> None:
+        baseline = (
+            PROJECT_ROOT / "requirements/model-windows-py311-constraints.txt"
+        )
+        snapshot = (
+            PROJECT_ROOT / "docs/reports/results/final-runtime-license-audit.json"
+        )
+        original = baseline.read_bytes()
+        self.assertEqual(original.count(b"pip==26.1.2"), 1)
+        baseline_passed, _ = _constraints_status(baseline, snapshot)
+        self.assertTrue(baseline_passed)
+
+        with tempfile.TemporaryDirectory() as temp_dir:
+            constraints = Path(temp_dir) / "constraints.txt"
+            constraints.write_bytes(
+                original.replace(b"pip==26.1.2", b"pip==26.2")
+            )
+            passed, detail = _constraints_status(constraints, snapshot)
+
+        self.assertFalse(passed)
+        self.assertIn("match_snapshot=False", detail)
+
     def test_current_readiness_reports_proven_gates_and_real_blockers(self) -> None:
         checks = {
             check.id: check