Sourced from captum's releases.

Captum v0.9.0 Release

The v0.9.0 release of Captum adds NumPy 2.x support, retires the long-deprecated Captum Insights, introduces new multimodal image-mask attribution primitives, adds remote LLM attribution via vLLM, and promotes cross-tensor attribution to a default-on feature for perturbation-based methods. This release also raises minimum supported Python and PyTorch versions to 3.10 and 1.13, respectively.

Upgrading from v0.8 should be drop-in for most users. The exceptions to watch for: any code that imports from captum.insights or installs the [insights] extra (removed — see below), environments on Python < 3.10 or PyTorch < 1.13 (no longer supported), and any code relying on the previous default behavior of FeatureAblation / FeaturePermutation treating input tensors independently (cross-tensor attribution is now default-on).

LLM Attribution & Multimodal Attribution:

Multimodal Image-Segment Attribution

This release adds a new interpretable input type for image-segment attribution, ImageMaskInput, useful for vision and vision-language models where features correspond to user-defined image regions is now exposed from captum.attr and is compatible with perturbation-based attribution methods and with LLMAttribution.

Key functionality:

• Support for mask_list to describe multiple segment sets with overlapped pixels (PR #1749)
• Mask-segmentation visualization utilities, with legends on the overlay plot_mask_overlay (PRs #1752, #1753, #1758, #1756)
• New plot helper plot_image_heatmap for rendering pixel-level attributions on an ImageMaskInput (PR #1739, #1684)

A new tutorial, Multimodal_Image_Segment_Attribution.ipynb, demonstrates end-to-end usage leveraging SAM (Meta Segment Anything Model) to interpret a multimodal LLM (Gemma-4) (PR #1811, #1812).

LLM Attribution Improvements

Building on the LLM attribution work from v0.7 and v0.8, this release substantially expands what LLMAttribution can attribute over and how attributions are consumed.

• New RemoteLLMAttribution wrapper and VLLMProvider allow perturbation-based attribution to be computed against a remotely hosted LLM serving endpoint, removing the requirement that the model fit in the client process (PR #1544). This enables attribution over much larger models than was previously feasible.
• New boolean forward_in_tokens argument to LLMAttribution.attribute, to choose between replicating token-by-token output decoding or directly forwarding the output sequence in one-shot (PRs #1740, #1741, #1742, #1744)
• Dict-like model_input support (PR #1698)
• skip_tokens is no longer accepted as a target argument, and target encoding no longer adds special tokens (PRs #1685, #1686)

Captum Attribution Enhancement

Cross-Tensor Attribution

Cross-tensor attribution — the ability to group, ablate, or permute features across multiple input tensors simultaneously — was introduced incrementally over the v0.8 cycle and is now default-on for perturbation-based methods (PR commit 38230a70). This release finalizes the feature surface:

• Feature grouping across input tensors for FeatureAblation (PR #1497)
• Cross-tensor permutation in FeaturePermutation (PR #1507)
• Support for multiple perturbations per eval when masking across tensors (PR #1530)

Perturbation-Based Method Improvements

• FeatureAblation and FeaturePermutation gained a min_examples_per_batch argument and now skip feature groups when permuting features if any group has batch size ≤ 1 (PRs #1533, #1539)
• Occlusion was migrated to the new ablated-batch construction path used by FeatureAblation (PR #1616)
• Shapley Value perturbation construction performance improved (PR #1635), with further micro-optimization when formatting total_attrib (PR #1648)
• Aggregate mode is now enabled whenever perturbations_per_eval == 1 (PR #1525)
• Avoided unnecessary tensor construction when creating input masks for permutation/ablation (PR #1527)
• Output validity for perturbations_per_eval > 1 is now checked via a dedicated method (PR #1666)
• Scalar and 1-D tensor model outputs are handled explicitly (PR #1521)

... (truncated)

• 255566a Updating version to 0.9.0 (#1813)
• 7ca0fe3 Include Outputs in Multimodal Image Segment Attribution tutorial (#1812)
• 253d9a8 Add Multimodal Image Segment Attribution tutorial (#1811)
• 6a81d1f Ensure mask tensor is on the same device as inputs (#1809)
• e788c16 Update qs to fix CVE-2025-15284 (#1807)
• 5e0dc56 Fix security vulnerability in got dependency (#1805)
• 21e03c9 Bump picomatch from 2.3.1 to 2.3.2 in /website (#1804)
• 1dec2b4 Fix security vulnerability in form-data dependency (#1803)
• 99aa09a Fix CUDA flaky tests for stochastic gates by using CPU-seeded RNG (#1802)
• 458e134 Fix security vulnerabilities in website dependencies (batch 2) (#1801)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)