Merge pull request #41104 from BerriAI/litellm_osv_mlflow_resuppress_main

build(deps): re-suppress GHSA-h7x2-h6g9-p789 in osv-scan on main, mlflow still has no fixed release
This commit is contained in:
Mateo Wang 2026-09-14 11:53:45 -07:00 committed by GitHub
commit 329ab62c05
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -5,5 +5,5 @@ reason = "diskcache has no fixed release published; remove this entry once one e
[[IgnoredVulns]]
id = "GHSA-h7x2-h6g9-p789"
ignoreUntil = 2026-09-14
reason = "mlflow has no fixed release published; remove this entry once one exists"
ignoreUntil = 2026-10-14
reason = "mlflow has no fixed release published (3.16.0, 2026-09-04, and master still store gateway secret api_base unvalidated); remove this entry once one exists"