infra: Update package version to apply CVE-related patch (langchain-a…

…i#19490) - **Description:** [CVE 2024-21503](https://www.cve.org/CVERecord?id=CVE-2024-21503) was recently identified. The python linter "black" suffers from a potential Regex-related denial of service attack. Updated version from the vulnerable 24.2.0 to the patched 24.3.0. - **Issue:** N/A - **Dependencies:** The 'black' package in both `langchain` (top-level) and `templates/python-lint`. Co-authored-by: Bagatur <[email protected]>
manukychen · Mar 25, 2024 · 64e1df3 · 64e1df3
1 parent 96dc180
commit 64e1df3
Show file tree

Hide file tree

Showing 4 changed files with 50 additions and 49 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -10,6 +10,7 @@ repository = "https://www.github.com/langchain-ai/langchain"
 
 [tool.poetry.dependencies]
 python = ">=3.8.1,<4.0"
+black = "^24.2.0"
 
 [tool.poetry.group.docs.dependencies]
 langchain = { path = "libs/langchain/", develop = true }

diff --git a/templates/python-lint/poetry.lock b/templates/python-lint/poetry.lock
diff --git a/templates/python-lint/pyproject.toml b/templates/python-lint/pyproject.toml
@@ -7,7 +7,7 @@ readme = "README.md"
 
 [tool.poetry.dependencies]
 ruff = ">=0.1.8"
-black = ">=23.12.0"
+black = "^24.2.0"
 mypy = ">=1.7.1"
 python = ">=3.8.1,<4.0"
 langchain = "^0.1"