fix(deps): bump litellm for SSTI fix; ignore unfixable pip CVE

This commit is contained in:
Greyson LaLonde
2026-04-28 04:34:17 +08:00
committed by GitHub
parent cb46a1c4ba
commit de0b2a4fe0
8 changed files with 223 additions and 212 deletions

View File

@@ -28,7 +28,7 @@ repos:
hooks:
- id: pip-audit
name: pip-audit
entry: bash -c 'source .venv/bin/activate && uv run pip-audit --skip-editable --ignore-vuln CVE-2025-69872 --ignore-vuln CVE-2026-25645 --ignore-vuln CVE-2026-27448 --ignore-vuln CVE-2026-27459 --ignore-vuln PYSEC-2023-235' --
entry: bash -c 'source .venv/bin/activate && uv run pip-audit --skip-editable --ignore-vuln CVE-2026-3219' --
language: system
pass_filenames: false
stages: [pre-push, manual]