diff --git a/a2a/git_issue_agent/pyproject.toml b/a2a/git_issue_agent/pyproject.toml index ccbafdf0..4790a578 100644 --- a/a2a/git_issue_agent/pyproject.toml +++ b/a2a/git_issue_agent/pyproject.toml @@ -10,12 +10,12 @@ dependencies = [ # crewai requires openai>=2.30.0 # but litellm requires openai==2.24.0 "crewai[litellm]>=1.6.1", - "litellm>=1.90.2", # Indirect, prevents CVE-2026-42271 + "litellm>=1.91.1", # Indirect, prevents CVE-2026-42271 "crewai-tools[mcp]>=1.6.1", "urllib3>=2.7.0", # Indirect; prevents CVE-2025-66418 "python-multipart>=0.0.32", # Indirect; prevents CVE-2026-24486 "cryptography>=48.0.0,<49", # Indirect; prevents CVE-2026-26007 - "pyasn1>=0.6.3", # Indirect; prevents CVE-2026-30922 + "pyasn1>=0.6.4", # Indirect; prevents CVE-2026-30922 "starlette>=1.3.1", # Indirect; prevents CVE-2025-62727 "pillow>=12.3.0", # Indirect; prevents CVE-2026-40192 "lxml>=6.1.1", # Indirect; prevents CVE-2026-41066 diff --git a/a2a/git_issue_agent/uv.lock b/a2a/git_issue_agent/uv.lock index 0a48acac..65354241 100644 --- a/a2a/git_issue_agent/uv.lock +++ b/a2a/git_issue_agent/uv.lock @@ -711,11 +711,11 @@ requires-dist = [ { name = "crewai", extras = ["litellm"], specifier = ">=1.6.1" }, { name = "crewai-tools", extras = ["mcp"], specifier = ">=1.6.1" }, { name = "cryptography", specifier = ">=48.0.0,<49" }, - { name = "litellm", specifier = ">=1.90.2" }, + { name = "litellm", specifier = ">=1.91.1" }, { name = "lxml", specifier = ">=6.1.1" }, { name = "orjson", specifier = ">=3.11.6" }, { name = "pillow", specifier = ">=12.3.0" }, - { name = "pyasn1", specifier = ">=0.6.3" }, + { name = "pyasn1", specifier = ">=0.6.4" }, { name = "python-dotenv", specifier = ">=1.2.2" }, { name = "python-multipart", specifier = ">=0.0.32" }, { name = "starlette", specifier = ">=1.3.1" }, @@ -1128,7 +1128,7 @@ wheels = [ [[package]] name = "litellm" -version = "1.90.2" +version = "1.91.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "aiohttp" }, @@ -1144,9 +1144,9 @@ dependencies = [ { name = "tiktoken" }, { name = "tokenizers" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/88/00/4187e33818d0de19fd602214ce15a6e1cfa5bf04fb50a6e59606214a92df/litellm-1.90.2.tar.gz", hash = "sha256:b536603894ba2a0ccd14a6f1ebeb5f46cc35b19d4537e8fda7bfdfc7757f19d3", size = 14819154, upload-time = "2026-07-01T02:29:58.397Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a7/70/1b419158085e0cc1615642dd62c7a5d4c3254db3de77df65dade3b25165b/litellm-1.91.1.tar.gz", hash = "sha256:49a24593df7e37262c52243a8e07572d451d37c100aa1b1f347d80d501d2e386", size = 14872532, upload-time = "2026-07-08T23:07:04.559Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/24/30/3afa7b212ce1f9bb8b6fa5f58c631f437c1d7b3a025e4e4ed6b01b3d28ad/litellm-1.90.2-py3-none-any.whl", hash = "sha256:6fb46f485150cc861be62a62d670f94d33adbd26991091befeb51bcdfdad34f6", size = 16612720, upload-time = "2026-07-01T02:29:55.215Z" }, + { url = "https://files.pythonhosted.org/packages/3d/52/166a934d194afcff2a7ec4e1928f1865504ade2e26f62e24d49aaec400d1/litellm-1.91.1-py3-none-any.whl", hash = "sha256:bf8e3d23cddf0eb4c05714dffcaafd8a944adf0f9c9b01c6c863b2637309de2e", size = 16670790, upload-time = "2026-07-08T23:07:01.151Z" }, ] [[package]] @@ -1832,11 +1832,11 @@ wheels = [ [[package]] name = "pyasn1" -version = "0.6.3" +version = "0.6.4" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" }, + { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" }, ] [[package]]