Skip to content

Conversation

ColeMurray
Copy link
Contributor

@ColeMurray ColeMurray commented Oct 16, 2025

Summary

  • Updates selenium from 4.8.3 to >=4.15.1,<5 in the imdb-review reader integration
  • Addresses known vulnerabilities in the pinned selenium version CVE-2023-5590
  • Updates related dependencies (certifi, typing-extensions, urllib3) to compatible versions

Changes

  • Modified pyproject.toml and requirements.txt to use selenium >=4.15.1,<5
  • Updated uv.lock with resolved dependency versions

Test plan

  • Pre-commit hooks passed successfully
  • Dependency version constraints validated

Updates selenium from 4.8.3 to >=4.15.1,<5 to address known vulnerabilities in older versions. Also updates related dependencies (certifi, typing-extensions, urllib3) to compatible versions.
@dosubot dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Oct 16, 2025
Copy link
Collaborator

@logan-markewich logan-markewich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@dosubot dosubot bot added the lgtm This PR has been approved by a maintainer label Oct 17, 2025
@logan-markewich logan-markewich enabled auto-merge (squash) October 17, 2025 02:33
@logan-markewich logan-markewich merged commit 0b2773a into run-llama:main Oct 17, 2025
11 checks passed
@ColeMurray ColeMurray deleted the fix/update-selenium-imdb-reader branch October 17, 2025 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lgtm This PR has been approved by a maintainer size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants