shylie/llvm-project
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[mlir] [python] Update PyYAML minimum version to 5.4 and limit ml_dtypes to 0.4.0 (#102178)

Browse Source 
PyYAML 5.3.1 has a security vulnerability as described here:
https://nvd.nist.gov/vuln/detail/CVE-2020-14343. Update the minimum
PyYAML version to 5.4. Also limit ml_dtypes version to 0.4.0.
This commit is contained in:
Nhat Nguyen 2024-08-07 11:24:15 -04:00 committed by GitHub
parent f126bc984c
commit d60008d861
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
mlir/python/requirements.txt
View File

@ -1,4 +1,4 @@
numpy>=1.19.5, <=1.26
pybind11>=2.9.0, <=2.10.3
PyYAML>=5.3.1, <=6.0.1
ml_dtypes # provides several NumPy dtype extensions, including the bf16
PyYAML>=5.4.0, <=6.0.1
ml_dtypes>=0.1.0, <=0.4.0 # provides several NumPy dtype extensions, including the bf16