Soup

Fine-tune Llama-3.1-8B on a 4 GB laptop GPU, and align on the same card. Soup is at v0.75.1, tagged 21 September 2026, and it is a security and correctness backport rather than a feature release: the v0.75.0 tree plus 25 cherry-picks, written entirely by the maintainer, so unlike the three releases before it there is no contributor list. It carries security advisory GHSA-63h4-gvp4-r26g, eight issues rated high across 0.7.0 to 0.75.0, and three of them mean a credential should be rotated: the Hugging Face token was resolved for every hub and handed to ModelScope or Modelers, OPENAI_API_KEY was