mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-09-20 10:03:37 +00:00
* fix: bump pypdf to 6.16.2 for GHSA-jp53-mhqp-8xcg pypdf 6.15.0 fails pip-audit on three moderate DoS advisories; 6.16.1+ patches them. * chore: keep existing uv.lock environment markers A full uv lock refresh rewrote unrelated dependency markers; restore them so the pypdf bump stays isolated. * chore: drop unused pypdf exclude-newer-package in crewai-files ~=6.16.1 plus the global 3-day cutoff already admits 6.16.2. * chore: drop pypdf from exclude-newer-package 6.16.2 is already older than the global 3-day cutoff; the version floor is enough.