Skip to content

Commit cffe0d4

Browse files
build: Bump cryptography and urllib3 (#455) (#457)
Signed-off-by: Charlie Truong <chtruong@nvidia.com> Signed-off-by: NeMo Bot <nemo-bot@nvidia.com> Co-authored-by: Charlie Truong <chtruong@nvidia.com>
1 parent 78c8264 commit cffe0d4

2 files changed

Lines changed: 282 additions & 146 deletions

File tree

pyproject.toml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,6 @@ dependencies = [
2727
"typer>=0.12.3",
2828
"rich>=13.7.1",
2929
"jinja2>=3.1.4",
30-
"cryptography < 43.0.0",
3130
"networkx >= 3.3",
3231
"omegaconf>=2.3.0",
3332
"leptonai>=0.26.6",
@@ -106,6 +105,10 @@ conflicts = [
106105
{ extra = "skypilot-all" }
107106
]
108107
]
108+
override-dependencies = [
109+
"cryptography>=46.0.0,<47", # To address GHSA-r6ph-v2qm-q3c2
110+
"urllib3>=2.6.3", # To address GHSA-38jv-5279-wg99
111+
]
109112

110113
[tool.pytest.ini_options]
111114
markers = [

0 commit comments

Comments
 (0)