Skip to content

Update transformers package due to vulnerability #313

@pakerimus

Description

@pakerimus

Is your feature request related to a problem? Please describe.
According to uv-secure:

┏━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━┓
┃ Package         ┃ Version       ┃ Vulnerability ID          ┃ Fix Versions   ┃
┡━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━┩
│ transformers    │ 4.51.3        │ GHSA-phhr-52qp-3mj4       │ 4.52.1         │
│ transformers    │ 4.51.3        │ GHSA-37mw-44qp-f5jm       │ 4.52.1         │
│ transformers    │ 4.51.3        │ GHSA-9356-575x-2w9m       │ 4.53.0         │
│ transformers    │ 4.51.3        │ GHSA-59p9-h35m-wg4g       │ 4.53.0         │
│ transformers    │ 4.51.3        │ GHSA-rcv9-qm8p-9p6j       │ 4.53.0         │
│ transformers    │ 4.51.3        │ GHSA-4w7r-h757-3r74       │ 4.53.0         │
└─────────────────┴───────────────┴───────────────────────────┴────────────────┘ 

Describe the solution you'd like
Upgrade to the latest version. See #309

Describe alternatives you've considered
There are no alternatives.

Additional context
Requires upgrade of optimum and optimum[onnxruntime]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions