This commit is contained in:
francialisomlimoeiro 2026-08-12 22:22:03 +07:00 committed by GitHub
commit 40e077e568
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -14,12 +14,12 @@ authors = [
]
dependencies = [
"litellm>=1.70.0,<1.82.7", # pinned to avoid PYSEC-2026-2 supply-chain compromise (1.82.7/1.82.8 were malicious)
"litellm>=1.83.7,<2.0.0", # CVE-2026-42271 fixed in 1.83.7; also excludes PYSEC-2026-2 malicious 1.82.7/1.82.8
"python-dotenv>=1.0.0",
"openai>=1.0.0",
"jsonschema>=4.25.0",
"bashlex>=0.18",
"mcp>=1.0.0",
"mcp>=1.0.0,<2.0.0", # 2.0 removed mcp.server.fastmcp which server.py imports
"anthropic>=0.71.0",
"pillow>=12.0.0",
"numpy>=1.24.0",