Upgrade accelerate to 1.12.0 to mitigate CVE-2025-14925#436
Upgrade accelerate to 1.12.0 to mitigate CVE-2025-14925#436rpancham wants to merge 2 commits intoopendatahub-io:stable-2.xfrom
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: rpancham The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
This PR mitigates CVE-2025-14925 by upgrading the transitive dependency Hugging Face Accelerate to version 1.12.0 in the container image. The change ensures the runtime uses a non-vulnerable version of accelerate and has been verified inside the built image.