From 29f0e878057c731772f88411eacc7ea551213cbd Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:17:12 -0700 Subject: [PATCH 1/7] Bump torch and requests to address CVEs --- requirements/base.in | 2 +- requirements/base.txt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/base.in b/requirements/base.in index 8a94d2325..2abe56550 100644 --- a/requirements/base.in +++ b/requirements/base.in @@ -3,7 +3,7 @@ unstructured[all-docs] # Pinning click due to a unicode issue in black # can remove after black drops support for Python 3.6 # ref: https://github.com/psf/black/issues/2964 -click==8.1.3 +click==8.2.1 fastapi uvicorn ratelimit diff --git a/requirements/base.txt b/requirements/base.txt index 189aa743d..442073966 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -301,7 +301,7 @@ regex==2024.11.6 # via # nltk # transformers -requests==2.32.3 +requests==2.32.4 # via # -r requirements/base.in # google-api-core @@ -342,7 +342,7 @@ timm==1.0.14 # unstructured-inference tokenizers==0.21.0 # via transformers -torch==2.7.0 +torch==2.7.1-rc1 # via # effdet # timm From 9a65369d5e7180fe16177f5bc84403dd8d6b936b Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:19:42 -0700 Subject: [PATCH 2/7] Bump test deps --- requirements/test.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/test.txt b/requirements/test.txt index df65a21f9..3ccad2b5d 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -702,7 +702,7 @@ regex==2024.11.6 # -r requirements/base.txt # nltk # transformers -requests==2.32.3 +requests==2.32.4 # via # -r requirements/base.txt # google-api-core @@ -785,7 +785,7 @@ tokenizers==0.21.0 # via # -r requirements/base.txt # transformers -torch==2.7.0 +torch==2.7.1-rc2 # via # -r requirements/base.txt # effdet From 418b968596176f9cbb631729c3b77e878b1bd93f Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:28:11 -0700 Subject: [PATCH 3/7] Don't use rc1 --- requirements/base.txt | 2 +- requirements/test.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 442073966..1e7345361 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -342,7 +342,7 @@ timm==1.0.14 # unstructured-inference tokenizers==0.21.0 # via transformers -torch==2.7.1-rc1 +torch==2.7.1 # via # effdet # timm diff --git a/requirements/test.txt b/requirements/test.txt index 3ccad2b5d..0431ed4ca 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -785,7 +785,7 @@ tokenizers==0.21.0 # via # -r requirements/base.txt # transformers -torch==2.7.1-rc2 +torch==2.7.1 # via # -r requirements/base.txt # effdet From 60aa501fa18ac18803858eb950785133d247d1c2 Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:34:25 -0700 Subject: [PATCH 4/7] Bump torchvision --- requirements/base.txt | 2 +- requirements/test.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 1e7345361..f12b58266 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -348,7 +348,7 @@ torch==2.7.1 # timm # torchvision # unstructured-inference -torchvision==0.22.0 +torchvision==0.22.1 # via # effdet # timm diff --git a/requirements/test.txt b/requirements/test.txt index 0431ed4ca..224fe01fa 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -792,7 +792,7 @@ torch==2.7.1 # timm # torchvision # unstructured-inference -torchvision==0.22.0 +torchvision==0.22.1 # via # -r requirements/base.txt # effdet From 77a55acd54b5b1e490154f163919a1aaff75e5f3 Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:36:21 -0700 Subject: [PATCH 5/7] Bump to 0.0.86 --- CHANGELOG.md | 3 +++ preprocessing-pipeline-family.yaml | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 946636732..f940e14eb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,6 @@ +## 0.0.86 +* Patch various CVEs + ## 0.0.85 * Patch various CVEs * Bump Python version to 3.12, some packages no longer support 3.9 diff --git a/preprocessing-pipeline-family.yaml b/preprocessing-pipeline-family.yaml index aba3fa30d..039aef554 100644 --- a/preprocessing-pipeline-family.yaml +++ b/preprocessing-pipeline-family.yaml @@ -1,2 +1,2 @@ name: general -version: 0.0.85 +version: 0.0.86 From 50b3cd2657fd52ac35ff6f6128b18aa4cbdee66b Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:36:31 -0700 Subject: [PATCH 6/7] Changelog --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f940e14eb..cd37b437c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,7 @@ ## 0.0.86 * Patch various CVEs -## 0.0.85 +## 0.0.86 * Patch various CVEs * Bump Python version to 3.12, some packages no longer support 3.9 From 1a11d4dc233ab3eada4ec4c75e1831895b26a898 Mon Sep 17 00:00:00 2001 From: Emily Voss Date: Tue, 10 Jun 2025 15:37:36 -0700 Subject: [PATCH 7/7] Missed files --- prepline_general/api/app.py | 2 +- prepline_general/api/general.py | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/prepline_general/api/app.py b/prepline_general/api/app.py index a0c3ebd35..26380bfba 100644 --- a/prepline_general/api/app.py +++ b/prepline_general/api/app.py @@ -13,7 +13,7 @@ app = FastAPI( title="Unstructured Pipeline API", summary="Partition documents with the Unstructured library", - version="0.0.85", + version="0.0.86", docs_url="/general/docs", openapi_url="/general/openapi.json", servers=[ diff --git a/prepline_general/api/general.py b/prepline_general/api/general.py index 632ae4a20..176197026 100644 --- a/prepline_general/api/general.py +++ b/prepline_general/api/general.py @@ -600,7 +600,7 @@ def return_content_type(filename: str): @router.get("/general/v0/general", include_in_schema=False) -@router.get("/general/v0.0.85/general", include_in_schema=False) +@router.get("/general/v0.0.86/general", include_in_schema=False) async def handle_invalid_get_request(): raise HTTPException( status_code=status.HTTP_405_METHOD_NOT_ALLOWED, detail="Only POST requests are supported." @@ -615,7 +615,7 @@ async def handle_invalid_get_request(): description="Description", operation_id="partition_parameters", ) -@router.post("/general/v0.0.85/general", include_in_schema=False) +@router.post("/general/v0.0.86/general", include_in_schema=False) def general_partition( request: Request, # cannot use annotated type here because of a bug described here: