Merge branch 'main' into dependabot/pip/EdgeCraftRAG/edgecraftrag/llama-index-0.13.0

Author: ZePan110

ChatQnA/ui/svelte/package.json

@@ -18,7 +18,7 @@
     "@fortawesome/free-solid-svg-icons": "6.2.0",
     "@playwright/test": "^1.45.2",
     "@sveltejs/adapter-auto": "^3.0.0",
-    "@sveltejs/kit": "2.0.0",
+    "@sveltejs/kit": "2.20.6",
     "@sveltejs/vite-plugin-svelte": "^3.0.0",
     "@tailwindcss/typography": "0.5.7",
     "@types/debug": "4.1.7",

CodeTrans/ui/svelte/package.json

@@ -16,7 +16,7 @@
   "devDependencies": {
     "@playwright/test": "^1.44.1",
     "@sveltejs/adapter-auto": "^3.0.0",
-    "@sveltejs/kit": "2.0.0",
+    "@sveltejs/kit": "2.20.6",
     "@sveltejs/package": "^2.0.0",
     "@sveltejs/vite-plugin-svelte": "^3.0.0",
     "@types/prismjs": "^1.26.3",

EdgeCraftRAG/edgecraftrag/requirements.txt

@@ -3,7 +3,7 @@ EbookLib>=0.18
 faiss-cpu>=1.8.0.post1
 html2text>=2025.4.15
 json-repair==0.52.0
-langchain-core==0.3.79
+langchain-core==0.3.80
 langchain-milvus
 langchain-openai
 langgraph==0.6.10

EdgeCraftRAG/edgecraftrag/utils.py

@@ -45,7 +45,14 @@ def get_prompt_template(model_path, prompt_content=None, template_path=None, ena
     if prompt_content is not None:
         template = prompt_content
     elif template_path is not None:
-        template = Path(template_path).read_text(encoding=None)
+        # Safely load the template only if it is inside /templates (or other safe root)
+        safe_root = "/templates"
+        normalized_path = os.path.normpath(os.path.join(safe_root, template_path))
+        if not normalized_path.startswith(safe_root):
+            raise ValueError("Template path is outside of the allowed directory.")
+        if not os.path.exists(normalized_path):
+            raise FileNotFoundError("Template file does not exist.")
+        template = Path(normalized_path).read_text(encoding=None)
     else:
         template = DEFAULT_TEMPLATE
     tokenizer = AutoTokenizer.from_pretrained(model_path)

PolyLingua/ui/package.json

@@ -11,7 +11,7 @@
   "dependencies": {
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "next": "14.2.32",
+    "next": "14.2.35",
     "@radix-ui/react-label": "^2.0.2",
     "@radix-ui/react-select": "^2.0.0",
     "@radix-ui/react-slot": "^1.0.2",