fix: patch authlib, langchain-text-splitters, and pypdf vulnerabilities
- authlib 1.6.9 -> 1.6.11 (GHSA-jj8c-mmj3-mmgv) - langchain-text-splitters 1.1.1 -> 1.1.2 (GHSA-fv5p-p927-qmxr) - langchain-core 1.2.28 -> 1.2.31 (required by text-splitters 1.1.2) - pypdf 6.10.1 -> 6.10.2 (GHSA-4pxv-j86v-mhcw, GHSA-7gw9-cf7v-778f, GHSA-x284-j5p8-9c5p) Pinned tool.uv.exclude-newer to 2026-04-17 so the 2026-04-16 patch releases fall inside the resolution window.
G
Greyson LaLonde committed
19ac7d2f64e199931fe77bdb763473cf825aed7e
Parent: 2f48937
Committed by GitHub <noreply@github.com>
on 4/17/2026, 1:25:47 PM