Skip to content

Commit c1921a4

Browse files
authored
fix: Work around compromised transitive dependency (#6257)
- `mistralai` [might have been compromised](mistralai/client-python#524). It's been quarantined by PyPI, so it can't be installed at all. - The base Pydantic AI package `pydantic-ai` [installs](pydantic/pydantic-ai#5382) `pydantic-ai-slim` with a bunch of extras for all sort of AI providers, including `mistralai`. - Our test suite fails because we attempt to install `pydantic-ai`, which then tries to pull in `mistralai` transitively. The fix: don't install `pydantic-ai`, but instead install `pydantic-ai-slim` directly, at least for now until `mistralai` is restored.
1 parent c718728 commit c1921a4

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

scripts/populate_tox/config.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -310,7 +310,7 @@
310310
"num_versions": 2,
311311
},
312312
"pydantic_ai": {
313-
"package": "pydantic-ai",
313+
"package": "pydantic-ai-slim",
314314
"deps": {
315315
"*": ["pytest-asyncio"],
316316
},

tox.ini

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -477,11 +477,11 @@ deps =
477477
openai_agents-latest: openai-agents==0.17.0
478478
openai_agents: pytest-asyncio
479479

480-
pydantic_ai-v1.0.18: pydantic-ai==1.0.18
481-
pydantic_ai-v1.31.0: pydantic-ai==1.31.0
482-
pydantic_ai-v1.63.0: pydantic-ai==1.63.0
483-
pydantic_ai-v1.93.0: pydantic-ai==1.93.0
484-
pydantic_ai-latest: pydantic-ai==1.93.0
480+
pydantic_ai-v1.0.18: pydantic-ai-slim==1.0.18
481+
pydantic_ai-v1.31.0: pydantic-ai-slim==1.31.0
482+
pydantic_ai-v1.63.0: pydantic-ai-slim==1.63.0
483+
pydantic_ai-v1.93.0: pydantic-ai-slim==1.93.0
484+
pydantic_ai-latest: pydantic-ai-slim==1.93.0
485485
pydantic_ai: pytest-asyncio
486486

487487

0 commit comments

Comments
 (0)