Skip to content

Commit 11bd38b

Browse files
speedstorm1copybara-github
authored andcommitted
fix: Unpin litellm upper bound to allow CVE-2026-35030 remediation
FUTURE_COPYBARA_INTEGRATE_REVIEW=#6596 from googleapis:release-please--branches--main b82c8bd PiperOrigin-RevId: 902906101
1 parent 3c55f26 commit 11bd38b

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

setup.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -181,8 +181,8 @@
181181
"jsonschema",
182182
"ruamel.yaml",
183183
"pyyaml",
184-
"litellm>=1.75.5, <=1.82.6",
185-
# For LiteLLM tests. Upper bound pinned: versions 1.82.7+ compromised in supply chain attack.
184+
"litellm>=1.75.5, !=1.82.7, !=1.82.8",
185+
# For LiteLLM tests. Exclude compromised versions 1.82.7 and 1.82.8 (supply chain attack).
186186
]
187187

188188
langchain_extra_require = [

0 commit comments

Comments
 (0)