Merge pull request #132 from edwardquarm/vllm-rocm-CVE-2025-62727

fix starlette CVE-2025-62727

Author: Jooho

requirements/common.txt

@@ -10,7 +10,7 @@ transformers >= 4.51.1
 huggingface-hub[hf_xet] >= 0.30.0  # Required for Xet downloads.
 tokenizers >= 0.19.1  # Required for Llama 3.
 protobuf # Required by LlamaTokenizer.
-fastapi[standard] >= 0.115.0 # Required by FastAPI's form models in the OpenAI API server's audio transcriptions endpoint.
+fastapi[standard] >= 0.120.1 # Required by FastAPI's form models in the OpenAI API server's audio transcriptions endpoint.
 aiohttp
 openai >= 1.52.0 # Ensure modern openai package (ensure types module present and max_completion_tokens field support)
 pydantic >= 2.9

requirements/test.txt

@@ -15,6 +15,8 @@ aiohttp==3.10.11
     #   lm-eval
 aiosignal==1.3.1
     # via aiohttp
+annotated-doc==0.0.4
+    # via fastapi
 annotated-types==0.7.0
     # via pydantic
 anyio==4.6.2.post1
@@ -117,6 +119,10 @@ encodec==0.1.1
     # via vocos
 evaluate==0.4.3
     # via lm-eval
+fastapi==0.120.1
+     # via
+     #   gpt-oss
+     #   mlflow-skinny
 fastparquet==2024.11.0
     # via genai-perf
 fastrlock==0.8.2