Skip to content

Resolve pip-audit failure by upgrading LiteLLM - #643

Closed
surajshetty3416 with Copilot wants to merge 2 commits into
developfrom
copilot/fix-vulnerable-dependency-check
Closed

Resolve pip-audit failure by upgrading LiteLLM#643
surajshetty3416 with Copilot wants to merge 2 commits into
developfrom
copilot/fix-vulnerable-dependency-check

Conversation

Copilot AI commented Jun 25, 2026

Copy link
Copy Markdown

The Vulnerable Dependency Check job was failing because pip-audit reported multiple advisories against the pinned litellm version and its resolved transitive dependencies. This change updates the Python dependency pin so the audit can resolve to patched packages without altering application code.

  • Dependency remediation

    • Bump litellm from 1.83.7 to 1.84.0 in pyproject.toml
    • This clears the LiteLLM advisories flagged by CI and pulls in patched transitive dependencies such as aiohttp
  • Scope

    • No workflow logic changes
    • No application code changes
    • Keeps the existing audit exceptions unchanged
dependencies = [
    "jsmin>=3.0.1",
    "csscompressor>=0.9.5",
    "pandas (>=2.3.2,<3.0.0)",
    "duckdb==1.4.3",
    "litellm==1.84.0",
]

Copilot AI changed the title [WIP] Fix the failing GitHub Actions job Vulnerable Dependency Check Resolve pip-audit failure by upgrading LiteLLM Jun 25, 2026
Copilot AI requested a review from surajshetty3416 June 25, 2026 15:36
@surajshetty3416

Copy link
Copy Markdown
Member

Can't upgrade till BerriAI/litellm#30687 is merged and released

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants