Skip to content

Commit e97514f

Browse files
authored
chore(deps): upgrade protobuf to >=5.29.5 and setuptools for security (#1313)
1 parent 593d206 commit e97514f

File tree

2 files changed

+22
-17
lines changed

2 files changed

+22
-17
lines changed

poetry.lock

Lines changed: 17 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pyproject.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,11 @@ langchain-core = ">=0.2.14,<0.4.0"
5858
langchain-community = ">=0.2.5,<0.4.0"
5959
lark = ">=1.1.7"
6060
nest-asyncio = ">=1.5.6,"
61+
# NOTE:
62+
# security: ensure protobuf version is patched against CVE-2024-7254
63+
# must move this to google-cloud-language only once onnxruntime is dropped
64+
# and streamlit is using the vulnerable protobuf versions
65+
protobuf = ">=5.29.5"
6166
prompt-toolkit = ">=3.0"
6267
pydantic = ">=1.10"
6368
pyyaml = ">=6.0"

0 commit comments

Comments
 (0)