Rip&Tear 505d52323f fix(deps): bump torch to 2.13.0 for GHSA-rrmf-rvhw-rf47 (#6957) ...

Force torch>=2.13.0 via override-dependencies so the transitive
docling/unstructured stack picks up the CVE-2025-3000 fix, and drop the
now-unnecessary pip-audit ignore. chromadb's CVE-2026-45829 remains
ignored: the upstream fix is merged but not released on PyPI.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Rip&Tear <theCyberTech@users.noreply.github.com>

2026-08-11 21:16:39 +05:30

..

codeql

Include all lib packages in CodeQL analysis paths (#6815)

2026-08-05 17:08:23 +08:00

ISSUE_TEMPLATE

restrict python version compatibility (#1731)

2024-12-09 14:00:18 -05:00

workflows

fix(deps): bump torch to 2.13.0 for GHSA-rrmf-rvhw-rf47 (#6957)

2026-08-11 21:16:39 +05:30

CONTRIBUTING.md

docs: add CONTRIBUTING.md

2026-03-25 16:13:55 +08:00

dependabot.yml

chore(ci): group uv patch/minor Dependabot updates (#6807)

2026-08-04 23:04:20 +05:30

security.md

Update security reporting guidelines (#6728)

2026-07-30 21:46:28 +08:00