From d5d7c5169fb43ad9f15aaaa543baea549c4f7657 Mon Sep 17 00:00:00 2001
From: Teknium <teknium1@users.noreply.github.com>
Date: Wed, 16 Sep 2026 23:02:02 -0700
Subject: [PATCH] fix: relax openai/requests floors to what Hermes core pins

Hermes pins requests==2.33.0 (CVE-2026-25645 pin) and openai==2.24.0. Hermes is
adding automatic installation of plugin pyproject dependencies under those core
pins (NousResearch/hermes-agent#113851); with the previous floors the lancedb
plugin would be refused at install time as unresolvable. Both APIs the plugin
uses exist at the relaxed floors.
---
 pyproject.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index ee3ebfb..300c5af 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,8 +11,8 @@ authors = [
 dependencies = [
     "lancedb>=0.33.0",
     "pyyaml",
-    "openai>=2.38.0",
-    "requests>=2.34.2",
+    "openai>=2.24.0",
+    "requests>=2.31",
     "botocore>=1.43.16",
 ]