Skip to content

Commit d3829f7

Browse files
flyersworderclaude
andcommitted
fix(deps): override python-dotenv to >=1.2.2 to resolve GHSA-mf9w-mj56-hr94
litellm (transitive via ai-agent-contracts) pins python-dotenv to ~=1.0.1; add a uv override to force the patched version across all extras. Also upgrades python-multipart 0.0.24 -> 0.0.26 (GHSA-mj87-hwqh-73pj). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 08a7fbe commit d3829f7

2 files changed

Lines changed: 92 additions & 84 deletions

File tree

pyproject.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,11 @@ select = ["E", "F", "I", "UP"]
8383
# demo-query strings; readability outweighs E501 line-length here.
8484
"examples/**" = ["E501"]
8585

86+
[tool.uv]
87+
override-dependencies = [
88+
"python-dotenv>=1.2.2",
89+
]
90+
8691
[tool.ty.environment]
8792
python-version = "3.12"
8893

0 commit comments

Comments
 (0)