Repository navigation
Commit 25d265b
authored
fix: Exclude litellm==1.107.0 from extras (#8104)
### Description
That version [is
vulnerable](https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/#payload-2-the-backdoor-in-sitecustomizepy)
so it would be great to exclude it from extras. To be honest, we don't
use that extra but since we use poetry, the litellm version range shows
up in our poetry.lock and it doesn't look good for our security team.
Thanks!
#### Issues
* resolves: #8103
* resolves: PY-3035
#### Reminders
- Please add tests to validate your changes, and lint your code using
`uv run ruff`.
- Add GH Issue ID _&_ Linear ID (if applicable)
- PR title should use [conventional
commit](https://develop.sentry.dev/engineering-practices/commit-messages/#type)
style (`feat:`, `fix:`, `ref:`, `meta:`)
- For external contributors:
[CONTRIBUTING.md](https://github.com/getsentry/sentry-python/blob/master/CONTRIBUTING.md),
[Sentry SDK development docs](https://develop.sentry.dev/sdk/), [Discord
community](https://discord.gg/Ww9hbqr)
Co-authored-by: Jonny <jonny-norwine@users.noreply.github.com>1 parent 60116ac commit 25d265b
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
70 | | - | |
| 70 | + | |
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
| |||
0 commit comments