crewAI

mirror of https://github.com/crewAIInc/crewAI.git synced 2026-09-19 17:46:14 +00:00

Files

Vidit Ostwal 3d72c707d5 chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp (#7215 )

* chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp

No patched PyPI release exists beyond 3.10.3. nltk is transitive via
crewai-tools[xml] -> unstructured; CrewAI does not call the vulnerable
model-artifact APIs.

Co-authored-by: Vidit Ostwal <Vidit-Ostwal@users.noreply.github.com>

* chore(ci): note dropping nltk GHSA ignore on the next bump

Leave an explicit TODO beside the ignore so GHSA-8mgp-746c-j5xp is
removed when nltk moves past the unpatched 3.10.3 floor.

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Vidit Ostwal <Vidit-Ostwal@users.noreply.github.com>

2026-09-02 10:04:20 -07:00

codeql

Include all lib packages in CodeQL analysis paths (#6815 )

2026-08-05 17:08:23 +08:00

ISSUE_TEMPLATE

restrict python version compatibility (#1731 )

2024-12-09 14:00:18 -05:00

workflows

chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp (#7215 )

2026-09-02 10:04:20 -07:00

CONTRIBUTING.md

ci: require an open issue for first-time contributor PRs (#7169 )