From 6d48c72f409f778b6d9c8e743f513c25f8f25c7d Mon Sep 17 00:00:00 2001 From: Jens Scheffler Date: Mon, 6 Apr 2026 20:01:17 +0200 Subject: [PATCH] Remove transitive vulerability to LiteLLM via upgrade of google-cloud-aiplatform --- providers/google/docs/index.rst | 2 +- providers/google/pyproject.toml | 2 +- uv.lock | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/providers/google/docs/index.rst b/providers/google/docs/index.rst index 5fd22a1e448b4..a6d431ba20226 100644 --- a/providers/google/docs/index.rst +++ b/providers/google/docs/index.rst @@ -128,7 +128,7 @@ PIP package Version required ``google-api-python-client`` ``>=2.0.2`` ``google-auth`` ``>=2.29.0`` ``google-auth-httplib2`` ``>=0.0.1`` -``google-cloud-aiplatform[evaluation]`` ``>=1.98.0`` +``google-cloud-aiplatform[evaluation]`` ``>=1.145.0`` ``ray[default]`` ``>=2.42.0; python_version < "3.13"`` ``ray[default]`` ``>=2.49.0; python_version >= "3.13" and python_version < "3.14"`` ``google-cloud-bigquery-storage`` ``>=2.31.0; python_version < "3.13"`` diff --git a/providers/google/pyproject.toml b/providers/google/pyproject.toml index 25013e9f7f5a7..6e02dd8e32880 100644 --- a/providers/google/pyproject.toml +++ b/providers/google/pyproject.toml @@ -81,7 +81,7 @@ dependencies = [ # google-cloud-aiplatform doesn't install ray for python 3.12 (issue: https://github.com/googleapis/python-aiplatform/issues/5252). # Temporarily lock in ray 2.42.0 which is compatible with python 3.12 until linked issue is solved. # Remove the ray dependency as well as google-cloud-bigquery-storage once linked issue is fixed - "google-cloud-aiplatform[evaluation]>=1.98.0", + "google-cloud-aiplatform[evaluation]>=1.145.0", "ray[default]>=2.42.0;python_version<'3.13'", "ray[default]>=2.49.0;python_version>='3.13' and python_version <'3.14'", "google-cloud-bigquery-storage>=2.31.0;python_version<'3.13'", diff --git a/uv.lock b/uv.lock index 00e18b4525cd0..b251e5cba90f5 100644 --- a/uv.lock +++ b/uv.lock @@ -4998,7 +4998,7 @@ requires-dist = [ { name = "google-api-python-client", specifier = ">=2.0.2" }, { name = "google-auth", specifier = ">=2.29.0" }, { name = "google-auth-httplib2", specifier = ">=0.0.1" }, - { name = "google-cloud-aiplatform", extras = ["evaluation"], specifier = ">=1.98.0" }, + { name = "google-cloud-aiplatform", extras = ["evaluation"], specifier = ">=1.145.0" }, { name = "google-cloud-alloydb", specifier = ">=0.4.0" }, { name = "google-cloud-automl", specifier = ">=2.12.0" }, { name = "google-cloud-batch", specifier = ">=0.13.0" }, @@ -19699,8 +19699,8 @@ name = "secretstorage" version = "3.5.0" source = { registry = "https://pypi.org/simple" } dependencies = [ - { name = "cryptography" }, - { name = "jeepney" }, + { name = "cryptography", marker = "(python_full_version < '3.14' and sys_platform == 'emscripten') or (python_full_version < '3.14' and sys_platform == 'win32') or (sys_platform != 'emscripten' and sys_platform != 'win32')" }, + { name = "jeepney", marker = "(python_full_version < '3.14' and sys_platform == 'emscripten') or (python_full_version < '3.14' and sys_platform == 'win32') or (sys_platform != 'emscripten' and sys_platform != 'win32')" }, ] sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" } wheels = [