build: exclude mistralai 2.4.6 from dependencies (#3305)

julian-risch · claude · web-flow · commit 519b92f22783 · 2026-05-15T09:05:34.000+02:00
Co-authored-by: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/integrations/mistral/pyproject.toml b/integrations/mistral/pyproject.toml
@@ -23,7 +23,8 @@ classifiers = [
   "Programming Language :: Python :: Implementation :: CPython",
   "Programming Language :: Python :: Implementation :: PyPy",
 ]
-dependencies = ["haystack-ai>=2.22.0", "mistralai>=2.0.0"]
+# mistralai 2.4.6 is excluded because of security issue https://github.com/mistralai/client-python/security/advisories/GHSA-wx9m-wx4f-4cmg
+dependencies = ["haystack-ai>=2.22.0", "mistralai>=2.0.0,!=2.4.6"]
 
 [project.urls]
 Documentation = "https://github.com/deepset-ai/haystack-core-integrations/tree/main/integrations/mistral#readme"

Original file line number	Diff line number	Diff line change
`@@ -23,7 +23,8 @@ classifiers = [`
`23`	`23`	`"Programming Language :: Python :: Implementation :: CPython",`
`24`	`24`	`"Programming Language :: Python :: Implementation :: PyPy",`
`25`	`25`	`]`
`26`		`-dependencies = ["haystack-ai>=2.22.0", "mistralai>=2.0.0"]`
	`26`	`+# mistralai 2.4.6 is excluded because of security issue https://github.com/mistralai/client-python/security/advisories/GHSA-wx9m-wx4f-4cmg`
	`27`	`+dependencies = ["haystack-ai>=2.22.0", "mistralai>=2.0.0,!=2.4.6"]`
`27`	`28`
`28`	`29`	`[project.urls]`
`29`	`30`	`Documentation = "https://github.com/deepset-ai/haystack-core-integrations/tree/main/integrations/mistral#readme"`