Joao Moura a5321aae92 fix: bump litellm to ~=1.83.7 for GHSA-xqmj-j6mv-4862 + update exclude-newer ...

litellm 1.83.0 has MCP stdio command injection vuln (CVE-2026-30623).
Fixed in 1.83.7-stable. Also bumps exclude-newer to 2026-04-26 so
the resolver can find the newer version.

Note: GHSA-58qw-9mgm-455v (pip) requires a workflow file change to
add --ignore-vuln, which needs the workflow OAuth scope.

2026-04-25 17:24:58 -07:00

..

crewai

fix: bump litellm to ~=1.83.7 for GHSA-xqmj-j6mv-4862 + update exclude-newer

2026-04-25 17:24:58 -07:00

crewai-files

feat: bump versions to 1.14.3

2026-04-25 00:04:46 +08:00

crewai-tools

fix: auto-fix pre-existing ruff errors in mcp/__init__.py and daytona __init__.py

2026-04-25 16:05:36 -07:00

devtools

feat: bump versions to 1.14.3

2026-04-25 00:04:46 +08:00