Skip to content
This repository was archived by the owner on Oct 11, 2025. It is now read-only.

Commit 9239e15

Browse files
authored
[mlir] [python] Update PyYAML minimum version to 5.4 and limit ml_dtypes to 0.4.0 (#102178)
PyYAML 5.3.1 has a security vulnerability as described here: https://nvd.nist.gov/vuln/detail/CVE-2020-14343. Update the minimum PyYAML version to 5.4. Also limit ml_dtypes version to 0.4.0.
1 parent 7e8726e commit 9239e15

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

mlir/python/requirements.txt

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
numpy>=1.19.5, <=1.26
22
pybind11>=2.9.0, <=2.10.3
3-
PyYAML>=5.3.1, <=6.0.1
4-
ml_dtypes # provides several NumPy dtype extensions, including the bf16
3+
PyYAML>=5.4.0, <=6.0.1
4+
ml_dtypes>=0.1.0, <=0.4.0 # provides several NumPy dtype extensions, including the bf16

0 commit comments

Comments
 (0)