From 57f839623e0db466f49a7b26b156fe7a0f69ecaa Mon Sep 17 00:00:00 2001 From: Tawakalt Date: Wed, 23 Aug 2023 16:38:18 +0200 Subject: [PATCH 1/3] bump rasa-sdk dependency --- poetry.lock | 10 ++++++---- pyproject.toml | 2 +- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/poetry.lock b/poetry.lock index 7cfcac567ab2..f00275aa6a2e 100644 --- a/poetry.lock +++ b/poetry.lock @@ -4533,14 +4533,14 @@ fire = "*" [[package]] name = "rasa-sdk" -version = "3.6.1" +version = "3.6.2" description = "Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants" category = "main" optional = false python-versions = ">=3.8,<3.11" files = [ - {file = "rasa_sdk-3.6.1-py3-none-any.whl", hash = "sha256:fb4d8c9ac0a6266931bc1dda108ef965d7f1c3fbe10ff2330dffef7add987b29"}, - {file = "rasa_sdk-3.6.1.tar.gz", hash = "sha256:f5dbd776dcbe9eea4308c1dcf32f14765297af32f71f76a0f43e29d6d030810c"}, + {file = "rasa_sdk-3.6.2-py3-none-any.whl", hash = "sha256:13dbd7d7f65378d793a171cef913fa785f01b256675dcdba4e97614c385333ae"}, + {file = "rasa_sdk-3.6.2.tar.gz", hash = "sha256:fe69a2eb97dfe8a16e9fd3cca55f86593b1d24b5d8a117de51d152933b4bfeac"}, ] [package.dependencies] @@ -4550,8 +4550,10 @@ prompt-toolkit = ">=3.0,<3.0.29" "ruamel.yaml" = ">=0.16.5,<0.18.0" sanic = ">=21.12.0,<22.0.0" Sanic-Cors = ">=2.0.0,<3.0.0" +setuptools = ">=65.5.1" typing-extensions = ">=4.1.1,<5.0.0" websockets = ">=10.0,<11.0" +wheel = ">=0.38.1" [[package]] name = "redis" @@ -7200,4 +7202,4 @@ transformers = ["sentencepiece", "transformers"] [metadata] lock-version = "2.0" python-versions = ">=3.8,<3.11" -content-hash = "8aafcff6709b0d1bbc293967cdb42d396895664a14dfee1533f28c58bf712c64" +content-hash = "d18bc52489f53e9ba2504c20f897c676fc5649d04e2f668e45ef049e0a988a61" diff --git a/pyproject.toml b/pyproject.toml index db725336a021..9cfb226ebbfa 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -111,7 +111,7 @@ colorhash = ">=1.0.2,<1.3.0" jsonschema = ">=3.2,<4.18" packaging = ">=20.0,<21.0" pytz = ">=2019.1,<2023.0" -rasa-sdk = "~3.6.1" +rasa-sdk = "~3.6.2" colorclass = "~2.2" terminaltables = "~3.1.0" sanic = "~21.12" From 26aba3c3fed8bbdb6d3b942ae39bfbbebc71146e Mon Sep 17 00:00:00 2001 From: Tawakalt Date: Wed, 23 Aug 2023 16:39:10 +0200 Subject: [PATCH 2/3] prepared release of version 3.6.6 --- CHANGELOG.mdx | 7 +++++++ changelog/12755.bugfix.md | 1 - pyproject.toml | 5 +---- rasa/version.py | 2 +- 4 files changed, 9 insertions(+), 6 deletions(-) delete mode 100644 changelog/12755.bugfix.md diff --git a/CHANGELOG.mdx b/CHANGELOG.mdx index 707a4cabf226..f2ab2d94ba30 100644 --- a/CHANGELOG.mdx +++ b/CHANGELOG.mdx @@ -16,6 +16,13 @@ https://github.com/RasaHQ/rasa/tree/main/changelog/ . --> +## [3.6.6] - 2023-08-23 + +Rasa 3.6.6 (2023-08-23) +### Bugfixes +- [#12755](https://github.com/rasahq/rasa/issues/12755): Updated setuptools and wheel to address security vulnerabilities. + + ## [3.6.5] - 2023-08-17 Rasa 3.6.5 (2023-08-17) diff --git a/changelog/12755.bugfix.md b/changelog/12755.bugfix.md deleted file mode 100644 index 4cb0c2473884..000000000000 --- a/changelog/12755.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Updated setuptools and wheel to address security vulnerabilities. \ No newline at end of file diff --git a/pyproject.toml b/pyproject.toml index 9cfb226ebbfa..e255b84ca516 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -9,7 +9,7 @@ exclude = "((.eggs | .git | .pytest_cache | build | dist))" [tool.poetry] name = "rasa" -version = "3.6.5" +version = "3.6.6" description = "Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants" authors = [ "Rasa Technologies GmbH ",] maintainers = [ "Tom Bocklisch ",] @@ -151,11 +151,8 @@ confluent-kafka = ">=1.9.2,<3.0.0" portalocker = "^2.7.0" structlog = "^23.1.0" structlog-sentry = "^2.0.2" -# pin dnspython to avoid dependency incompatibility -# in order to fix https://rasahq.atlassian.net/browse/ATO-1419 dnspython = "2.3.0" wheel = ">=0.38.1" - [[tool.poetry.dependencies.tensorflow-io-gcs-filesystem]] version = "==0.31" markers = "sys_platform == 'win32'" diff --git a/rasa/version.py b/rasa/version.py index 61483961626c..b3635cd45e51 100644 --- a/rasa/version.py +++ b/rasa/version.py @@ -1,3 +1,3 @@ # this file will automatically be changed, # do not add anything but the version number here! -__version__ = "3.6.5" +__version__ = "3.6.6" From c44bbd99eaa9816cad92ac8a2ae3d6ecce2a714e Mon Sep 17 00:00:00 2001 From: Tawakalt Date: Wed, 23 Aug 2023 16:42:34 +0200 Subject: [PATCH 3/3] readd comment --- pyproject.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pyproject.toml b/pyproject.toml index e255b84ca516..f803e637a85d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -151,6 +151,8 @@ confluent-kafka = ">=1.9.2,<3.0.0" portalocker = "^2.7.0" structlog = "^23.1.0" structlog-sentry = "^2.0.2" +# pin dnspython to avoid dependency incompatibility +# in order to fix https://rasahq.atlassian.net/browse/ATO-1419 dnspython = "2.3.0" wheel = ">=0.38.1" [[tool.poetry.dependencies.tensorflow-io-gcs-filesystem]]