Skip to content

Commit e5e6346

Browse files
speedstorm1copybara-github
authored andcommitted
fix: Unpin litellm upper bound to allow CVE-2026-35030 remediation
PiperOrigin-RevId: 902982302
1 parent 3c55f26 commit e5e6346

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

setup.py

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -181,8 +181,9 @@
181181
"jsonschema",
182182
"ruamel.yaml",
183183
"pyyaml",
184-
"litellm>=1.75.5, <=1.82.6",
185-
# For LiteLLM tests. Upper bound pinned: versions 1.82.7+ compromised in supply chain attack.
184+
"litellm>=1.75.5, <1.83.7, !=1.82.7, !=1.82.8",
185+
# For LiteLLM tests. Upper bound pinned below latest version.
186+
# Exclude 1.82.7 and 1.82.8 due to supply chain attack.
186187
]
187188

188189
langchain_extra_require = [

0 commit comments

Comments
 (0)