Skip to content

Fix starlette vulnerability #487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Feb 4, 2025
Merged
Show file tree
Hide file tree
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,7 @@
## 0.0.83

* Fix Starlette vulnerability

## 0.0.82

* Patch various python CVEs
Expand Down
2 changes: 1 addition & 1 deletion prepline_general/api/app.py
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
app = FastAPI(
title="Unstructured Pipeline API",
summary="Partition documents with the Unstructured library",
version="0.0.82",
version="0.0.83",
docs_url="/general/docs",
openapi_url="/general/openapi.json",
servers=[
Expand Down
4 changes: 2 additions & 2 deletions prepline_general/api/general.py
Original file line number Diff line number Diff line change
Expand Up @@ -602,7 +602,7 @@ def return_content_type(filename: str):


@router.get("/general/v0/general", include_in_schema=False)
@router.get("/general/v0.0.82/general", include_in_schema=False)
@router.get("/general/v0.0.83/general", include_in_schema=False)
async def handle_invalid_get_request():
raise HTTPException(
status_code=status.HTTP_405_METHOD_NOT_ALLOWED, detail="Only POST requests are supported."
Expand All @@ -617,7 +617,7 @@ async def handle_invalid_get_request():
description="Description",
operation_id="partition_parameters",
)
@router.post("/general/v0.0.82/general", include_in_schema=False)
@router.post("/general/v0.0.83/general", include_in_schema=False)
def general_partition(
request: Request,
# cannot use annotated type here because of a bug described here:
Expand Down
2 changes: 1 addition & 1 deletion preprocessing-pipeline-family.yaml
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
name: general
version: 0.0.82
version: 0.0.83
6 changes: 1 addition & 5 deletions requirements/base.in
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,7 @@ unstructured[all-docs]
# can remove after black drops support for Python 3.6
# ref: https://github.com/psf/black/issues/2964
click==8.1.3
# NOTE(robinson) - fastapi>=0.114.0 causes the test listed below to fail, though it
# works if data if chunking strategy and new_after_n_chars are explicitly set. Pinning
# for now to preserve behavior
# test_parallel_mode_preserves_uniqueness_of_hashes_when_assembling_page_splits
fastapi<0.114.0
fastapi
uvicorn
ratelimit
requests
Expand Down
Loading
Loading