build(deps): extend the diskcache osv suppression to 2026-10-09 and drop the vitest entry now that staging carries 4.1.11
Some checks failed
LiteLLM Rust / rust-lint (push) Has been cancelled
LiteLLM Rust / rust-test (push) Has been cancelled

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
mateo 2026-09-09 00:20:21 +00:00
parent 8d3380f297
commit 8aa8fbca9f
2 changed files with 2 additions and 10 deletions

View file

@ -1,14 +1,9 @@
[[IgnoredVulns]]
id = "GHSA-w8v5-vhqr-4h9v"
ignoreUntil = 2026-09-09
reason = "diskcache has no fixed release published; remove this entry once one exists"
ignoreUntil = 2026-10-09
reason = "diskcache unsafe pickle deserialization (CVSS 5.2); latest release is still 5.6.3 (2023-08-31) and no fixed release exists on PyPI as of 2026-09-09; remove this entry once one exists"
[[IgnoredVulns]]
id = "GHSA-h7x2-h6g9-p789"
ignoreUntil = 2026-09-14
reason = "mlflow has no fixed release published; remove this entry once one exists"
[[IgnoredVulns]]
id = "GHSA-82fw-gwwq-j7x9"
ignoreUntil = 2026-10-08
reason = "vitest/@vitest/mocker path traversal (CVSS 5.9, dev-only test runner). The only fix is vitest 4.1.11 (published 2026-08-18), a major upgrade off 3.2.6 that breaks the ui-unit-tests --poolOptions CLI flags and ~1800 test-file type errors in build-ui; needs a dedicated vitest 3->4 migration PR, bump possible as soon as that lands"

View file

@ -21,9 +21,6 @@ const nextConfig = {
basePath: "",
assetPrefix: "/litellm-asset-prefix",
trailingSlash: true,
experimental: {
useTypeScriptCli: false,
},
turbopack: {
// Must be absolute; "." is no longer allowed
root: __dirname,