[PR #264] [CLOSED] chore(deps): Update dependencies #440

New Issue

2026-02-15T16:30:25-05:00

yindo commented

2026-02-15 16:30:25 -05:00

📋 Pull Request Information

Original PR: https://github.com/ollama/ollama-python/pull/264
Author: @reneleonhardt
Created: 8/25/2024
Status: ❌ Closed

Base: main ← Head: updates

📝 Commits (2)

534c552 chore(deps): Update dependencies
87cd349 Make GitHub Actions more readable

📊 Changes

6 files changed (+156 additions, -119 deletions)

View changed files

📝 .github/dependabot.yml (+5 -1)
📝 .github/workflows/publish.yaml (+10 -5)
📝 .github/workflows/test.yaml (+15 -8)
📝 examples/pull-progress/requirements.txt (+1 -1)
📝 poetry.lock (+104 -83)
📝 requirements.txt (+21 -21)

📄 Description

📦 Chores

Update dependencies manually
Make GitHub Actions more readable

🔒 Security fixes

Library	Vulnerability	Severity
certifi	CVE-2024-39689	LOW
idna	CVE-2024-3651	MEDIUM
werkzeug	CVE-2024-34069	HIGH
tqdm	CVE-2024-34062	LOW

Notes

It seems Dependabot does not update requirements.txt, can you add a poetry export and commit workflow step?
Python 3.13 will be available soon, can you add it to your test matrix?
Can you enable security scanning, i.e. https://github.com/aquasecurity/trivy-action? So vulnerabilities don't go unnoticed.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/ollama/ollama-python/pull/264 **Author:** [@reneleonhardt](https://github.com/reneleonhardt) **Created:** 8/25/2024 **Status:** ❌ Closed **Base:** `main` ← **Head:** `updates` --- ### 📝 Commits (2) - [`534c552`](https://github.com/ollama/ollama-python/commit/534c5522a4d861520ebbda9ca8d1496548076a75) chore(deps): Update dependencies - [`87cd349`](https://github.com/ollama/ollama-python/commit/87cd349973b4657b384bfff89b67c1b64ecbebc7) Make GitHub Actions more readable ### 📊 Changes **6 files changed** (+156 additions, -119 deletions) <details> <summary>View changed files</summary> 📝 `.github/dependabot.yml` (+5 -1) 📝 `.github/workflows/publish.yaml` (+10 -5) 📝 `.github/workflows/test.yaml` (+15 -8) 📝 `examples/pull-progress/requirements.txt` (+1 -1) 📝 `poetry.lock` (+104 -83) 📝 `requirements.txt` (+21 -21) </details> ### 📄 Description ### 📦 Chores * Update dependencies manually * Make GitHub Actions more readable ### 🔒 Security fixes | Library | Vulnerability | Severity | |-|-|-| | certifi | CVE-2024-39689 | LOW | | idna | CVE-2024-3651 | MEDIUM | | werkzeug | CVE-2024-34069 | HIGH | | tqdm | CVE-2024-34062 | LOW | ### Notes * It seems Dependabot does not update requirements.txt, can you add a `poetry export` and commit workflow step? * Python 3.13 will be available soon, can you add it to your test matrix? * Can you enable security scanning, i.e. https://github.com/aquasecurity/trivy-action? So vulnerabilities don't go unnoticed. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

yindo added the pull-request label 2026-02-15 16:30:25 -05:00

yindo closed this issue

2026-02-15 16:30:25 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: ollama/ollama-python#440