fix: upgrade openai from 4.10.0 to 4.104.0#1079
Conversation
Snyk has created this PR to upgrade openai from 4.10.0 to 4.104.0. See this package in npm: openai See this project in Snyk: https://app.snyk.io/org/cheelohamududu/project/4025b2cb-75cf-4941-a4a9-2ddb67da6652?utm_source=github&utm_medium=referral&page=upgrade-pr
|
👋 Thanks for contributing @CheeloHamududu! We will review the pull request and get back to you soon. |
|
@microsoft-github-policy-service agree |
There was a problem hiding this comment.
Pull request overview
This PR upgrades the Node.js openai package from version 4.10.0 to 4.104.0, addressing security or compatibility concerns identified by Snyk. This is a significant version jump (94 minor versions) that includes substantial changes to the package's dependency tree.
Changes:
- Updated openai package version from ^4.10.0 to ^4.104.0 in package.json and package-lock.json
- Removed obsolete dependencies: digest-fetch, base-64, charenc, crypt, md5, and is-buffer
- Added optional peer dependencies: ws (^8.18.0) and zod (^3.23.8)
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updated openai dependency version to 4.104.0 |
| package-lock.json | Updated dependency tree with new openai version, removed obsolete transitive dependencies, and added optional peer dependencies for ws and zod |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| }, | ||
| "dependencies": { | ||
| "openai": "^4.10.0" | ||
| "openai": "^4.104.0" |
There was a problem hiding this comment.
The Node.js openai package does not appear to be used anywhere in the codebase. The repository contains only Python code that uses the openai package (specified in requirements.txt). The only JavaScript file in the repository is docsifytopdf.js, which does not import or require the openai package. Consider removing this unused dependency to reduce the project's dependency footprint and potential security surface.
Snyk has created this PR to upgrade openai from 4.10.0 to 4.104.0.
See this package in npm:
openai
See this project in Snyk:
https://app.snyk.io/org/cheelohamududu/project/4025b2cb-75cf-4941-a4a9-2ddb67da6652?utm_source=github&utm_medium=referral&page=upgrade-pr