Skip to content

Upgrade dependencies - #5665

Closed
Jacobh2 wants to merge 3 commits into
BerriAI:mainfrom
Jacobh2:jh/upgrade-dependencies
Closed

Jacobh2 wants to merge 3 commits into
BerriAI:mainfrom
Jacobh2:jh/upgrade-dependencies

Conversation

@Jacobh2

@Jacobh2 Jacobh2 commented Sep 12, 2024 •

Copy link
Copy Markdown
Contributor

Update dependencies & ignore unnecessary files for docker.

Tried to follow the readme on how to contribute, but doesn't seem to be up-to-date with the current setup.

Ran the Trivy security scan which went from:

Before After
Critical 9 5
High 37 17
Medium 65 41
Low 193 154

Some of the critical that are left are for issues found just the last week, so still pending stable release of their respective updates of the packages.

Relevant issues

#5630

Type

🐛 Bug Fix
🧹 Refactoring

Changes

  • Updated poetry.lock using poetry update
  • Updated requirements.txt by installing pip-tools to let it upgrade dependencies and then format back to existing format of the file.
  • Lock dependency of PyJWT in Dockerfile.database
  • Upgrading debian deps in Dockerfile.database

@vercel

vercel Bot commented Sep 12, 2024 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
litellm ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 24, 2024 6:29am

@Jacobh2

Jacobh2 commented Sep 12, 2024

Copy link
Copy Markdown
Contributor Author

@krrishdholakia WDYT, anything particular I can test to verify that the docker builds are working as expected? Tried to follow the steps from the readme, but seems like I'm missing some dot-env file which I'm not sure what it should contain.

Happy to run some test if I could get some guidance on how to run them 🎉

@ishaan-jaff ishaan-jaff left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @Jacobh2 ! left a review

Comment thread requirements.txt Outdated
Comment thread Dockerfile Outdated
@Jacobh2

Jacobh2 commented Sep 24, 2024

Copy link
Copy Markdown
Contributor Author

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


Jacob Hagstedt seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

@github-actions github-actions Bot added the stale label Jul 22, 2025
@github-actions github-actions Bot closed this Jul 30, 2025

This branch was successfully deployed

1 active deployment
Preview — ed9c6f7f Deployed Sep 24, 2024 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants