4c4b3568db
Python (uv.lock, pyproject.toml): - authlib 1.6.6 → 1.6.9 (JWS header injection, OIDC hash binding, Bleichenbacher padding oracle) - pyasn1 0.6.2 → 0.6.3 (unbounded recursion DoS) - pyjwt 2.10.1 → 2.12.1 (unknown crit header extensions - also in integration-tests and crewai) - orjson 3.11.4 → 3.11.7 (deeply nested JSON recursion DoS) - tornado 6.5.2 → 6.5.5 (multipart DoS, incomplete cookie validation) npm (package.json, package-lock.json): - next ^16.1.6 → ^16.1.7 (HTTP smuggling, CSRF bypass, cache DoS, null origin bypass) - fast-xml-parser override updated to >=5.5.6 (numeric entity expansion bypass) - undici override added >=7.24.0 (WebSocket overflow, smuggling, CRLF injection, DoS) - flatted override added >=3.4.0 (unbounded recursion DoS) - svgo override added >=3.3.3 (DOCTYPE entity expansion DoS) - dompurify override added >=3.3.2 (XSS vulnerability)
62 lines
1.6 KiB
TOML
62 lines
1.6 KiB
TOML
[project]
|
|
name = "hindsight-crewai"
|
|
version = "0.4.19"
|
|
description = "CrewAI memory integration via Hindsight - persistent memory for AI agent crews"
|
|
readme = "README.md"
|
|
requires-python = ">=3.10"
|
|
license = { text = "MIT" }
|
|
authors = [
|
|
{ name = "Vectorize", email = "support@vectorize.io" }
|
|
]
|
|
keywords = [
|
|
"ai",
|
|
"memory",
|
|
"crewai",
|
|
"agents",
|
|
"hindsight",
|
|
]
|
|
classifiers = [
|
|
"Development Status :: 4 - Beta",
|
|
"Intended Audience :: Developers",
|
|
"License :: OSI Approved :: MIT License",
|
|
"Programming Language :: Python :: 3",
|
|
"Programming Language :: Python :: 3.10",
|
|
"Programming Language :: Python :: 3.11",
|
|
"Programming Language :: Python :: 3.12",
|
|
"Topic :: Scientific/Engineering :: Artificial Intelligence",
|
|
]
|
|
|
|
dependencies = [
|
|
"crewai>=0.86.0",
|
|
"hindsight-client>=0.4.0",
|
|
# Transitive dependency security fixes
|
|
"cryptography>=46.0.5", # Subgroup attack vulnerability fix
|
|
"pillow>=12.1.1", # Out-of-bounds write in PSD image loading fix
|
|
"pyjwt>=2.12.0", # Accepts unknown crit header extensions fix
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
dev = [
|
|
"pytest>=7.0.0",
|
|
"pytest-mock>=3.10.0",
|
|
]
|
|
|
|
[project.urls]
|
|
Homepage = "https://github.com/vectorize-io/hindsight"
|
|
Documentation = "https://github.com/vectorize-io/hindsight/tree/main/hindsight-integrations/crewai"
|
|
Repository = "https://github.com/vectorize-io/hindsight"
|
|
|
|
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["hindsight_crewai"]
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = ["tests"]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"pytest>=9.0.2",
|
|
]
|