Skip to content

Commit 95525ad

Browse files
authored
chore(deps): bump tornado from 6.4.2 to 6.5.1 (#1206)
to resolve https://github.com/NVIDIA/NeMo-Guardrails/security/dependabot/99 high vuln
1 parent 07422c1 commit 95525ad

File tree

2 files changed

+21
-19
lines changed

2 files changed

+21
-19
lines changed

poetry.lock

Lines changed: 18 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pyproject.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,8 @@ langchain-openai = { version = ">=0.0.5", optional = true }
7878

7979
# eval
8080
tqdm = { version = ">=4.65,<5.0", optional = true }
81-
streamlit = { version = "^1.37.0", optional = true, python = ">=3.9,!=3.9.7,<3.12" }
81+
streamlit = { version = "^1.37.0", optional = true, python = ">=3.9,!=3.9.7,<3.14" }
82+
tornado = { version = ">=6.5.0", optional = true, python = ">=3.9,!=3.9.7,<3.14" }
8283
pandas = { version = ">=1.4.0,<3", optional = true }
8384
numpy = [
8485
{ version = ">=1.21", python = ">=3.10,<3.12" },
@@ -103,7 +104,7 @@ yara-python = { version = "^4.5.1", optional = true }
103104

104105
[tool.poetry.extras]
105106
sdd = ["presidio-analyzer", "presidio-anonymizer"]
106-
eval = ["tqdm", "numpy", "streamlit"]
107+
eval = ["tqdm", "numpy", "streamlit", "tornado"]
107108
openai = ["langchain-openai"]
108109
gcp = ["google-cloud-language"]
109110
tracing = ["opentelemetry-api", "opentelemetry-sdk", "aiofiles"]

0 commit comments

Comments
 (0)