mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-05-06 09:42:39 +00:00
d6f161969a
Issue #5520 reported that crewai 1.13.0 pinned uv 0.9.30, which is
affected by GHSA-pjjw-68hj-v9mw (wheel RECORD path traversal on
uninstall). The pin was bumped to uv>=0.11.6 in 62484934c, and the
workspace already declares a matching override-dependency. Add a
regression test that parses both pyproject.toml files and fails if
either allows a uv version below 0.11.6, so this advisory cannot
re-enter the supply chain silently.