Skip to content

LCORE-1108: Updated Konflux references #1072

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tisnik merged 2 commits into from
Jan 28, 2026
+10 −9
Merged

LCORE-1108: Updated Konflux references #1072

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1c90403
LCORE-1108: Updated Konflux references
tisnik Jan 28, 2026
ddd3935
Fixed cffi
tisnik Jan 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions requirements.hashes.source.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ azure-identity==1.25.1 \
blobfile==3.1.0 \
--hash=sha256:2b4c5e766ebb7dfa20e4990cf6ec3d2106bdc91d632fb9377f170a234c5a5c6a \
--hash=sha256:d45b6b1fa3b0920732314c23ddbdb4f494ca12f787c2b6eb6bba6faa51382671
cachetools==6.2.5 \
--hash=sha256:6d8bfbba1ba94412fb9d9196c4da7a87e9d4928fffc5e93542965dca4740c77f \
--hash=sha256:db3ae5465e90befb7c74720dd9308d77a09b7cf13433570e07caa0845c30d5fe
cachetools==6.2.6 \
--hash=sha256:16c33e1f276b9a9c0b49ab5782d901e3ad3de0dd6da9bf9bcd29ac5672f2f9e6 \
--hash=sha256:8c9717235b3c651603fff0076db52d6acbfd1b338b8ed50256092f7ce9c85bda
certifi==2026.1.4 \
--hash=sha256:9943707519e4add1115f44c2bc244f782c0249876bf51b6599fee1ffbedd685c \
--hash=sha256:ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120
Expand Down Expand Up @@ -193,9 +193,9 @@ kubernetes==35.0.0 \
langdetect==1.0.9 \
--hash=sha256:7cbc0746252f19e76f77c0b1690aadf01963be835ef0cd4b56dddf2a8f1dfc2a \
--hash=sha256:cbc1fef89f8d062739774bd51eda3da3274006b3661d199c2655f6b3f6d605a0
litellm==1.81.3 \
--hash=sha256:3f60fd8b727587952ad3dd18b68f5fed538d6f43d15bb0356f4c3a11bccb2b92 \
--hash=sha256:a7688b429a88abfdd02f2a8c3158ebb5385689cfb7f9d4ac1473d018b2047e1b
litellm==1.81.4 \
--hash=sha256:bd64fd4f11fe39c0c12fbb4a062c040bfb5c966f58717f38780d8a6b1e15169b \
--hash=sha256:be8ebc00ce08589a6851c88a2cb5fb399206844f31d107e37c9852013dd2333d
llama-stack==0.4.3 \
--hash=sha256:423207eae2b640894992a9075ff9dd6300ff904ab06a49fe38cfe0bb809d4669 \
--hash=sha256:70d379ae9dbb5b1d0693f14054d9817aba183ffcd805133f0a4442baee132c6d
Expand Down Expand Up @@ -471,9 +471,9 @@ multiprocess==0.70.18 \
--hash=sha256:dbf705e52a154fe5e90fb17b38f02556169557c2dd8bb084f2e06c2784d8279b \
--hash=sha256:e78ca805a72b1b810c690b6b4cc32579eba34f403094bbbae962b7b5bf9dfcb8 \
--hash=sha256:f9597128e6b3e67b23956da07cf3d2e5cba79e2f4e0fba8d7903636663ec6d0d
openai==2.15.0 \
--hash=sha256:42eb8cbb407d84770633f31bf727d4ffb4138711c670565a41663d9439174fba \
--hash=sha256:6ae23b932cd7230f7244e52954daa6602716d6b9bf235401a107af731baea6c3
openai==2.16.0 \
--hash=sha256:42eaa22ca0d8ded4367a77374104d7a2feafee5bd60a107c3c11b5243a11cd12 \
--hash=sha256:5f46643a8f42899a84e80c38838135d7038e7718333ce61396994f887b09a59b
peft==0.18.1 \
--hash=sha256:0bf06847a3551e3019fc58c440cffc9a6b73e6e2962c95b52e224f77bbdb50f1 \
--hash=sha256:2dd0d6bfce936d1850e48aaddbd250941c5c02fc8ef3237cd8fd5aac35e0bae2
Expand Down
1 change: 1 addition & 0 deletions requirements.overrides.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ tokenizers==0.22.1
scipy==1.16.3
aiohttp==3.13.3
aiosqlite==0.22.0
cryptography==46.0.3
Copy link
Contributor

@coderabbitai coderabbitai bot Jan 28, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify cryptography version 46.0.3 details

echo "=== Checking cryptography versions on PyPI ==="
curl -s https://pypi.org/pypi/cryptography/json | jq -r '.info | "Latest: \(.version)\nLicense: \(.license)\nHome Page: \(.home_page)"'

echo -e "\n=== Checking if version 46.0.3 exists ==="
curl -s https://pypi.org/pypi/cryptography/46.0.3/json | jq -r 'if .info then "Version exists - Released: \(.info.release_date)\nSummary: \(.info.summary)" else "Version not found" end'

echo -e "\n=== All 46.x versions available ==="
curl -s https://pypi.org/pypi/cryptography/json | jq -r '.releases | keys[] | select(startswith("46."))' | sort -V

echo -e "\n=== Recent 46.0.x versions ==="
curl -s https://pypi.org/pypi/cryptography/json | jq -r '.releases | keys[] | select(startswith("46.0."))' | sort -V | tail -5

Repository: lightspeed-core/lightspeed-stack

Length of output: 490

🏁 Script executed:

#!/bin/bash
# Get detailed info about cryptography 46.0.3 and check for security issues

echo "=== Detailed info for cryptography 46.0.3 ==="
curl -s https://pypi.org/pypi/cryptography/46.0.3/json | jq -r '.info | "Release: \(.release_date)\nAuthor: \(.author)\nRequires Python: \(.requires_python)\nClassifiers: \(.classifiers | length) items"'

echo -e "\n=== Release history for 46.0.x versions ==="
curl -s https://pypi.org/pypi/cryptography/json | jq -r '.releases | to_entries[] | select(.key | startswith("46.0.")) | .value[0] | "Version: \(.filename | split("-")[1])\n  Upload time: \(.upload_time)"' 2>/dev/null | head -40

echo -e "\n=== Checking Python version requirement ==="
curl -s https://pypi.org/pypi/cryptography/46.0.3/json | jq -r '.info.requires_python'

echo -e "\n=== Known security issues (checking changelog) ==="
curl -s https://raw.githubusercontent.com/pyca/cryptography/main/CHANGELOG.rst 2>/dev/null | head -100 || echo "Cannot fetch changelog"

Repository: lightspeed-core/lightspeed-stack

Length of output: 5891

Version 46.0.3 is valid and published. The cryptography version exists on PyPI (released 2025-10-15) and appears stable. Note that version 46.0.4 was recently released (2026-01-28) and may be worth considering.

However, there's an inconsistency in the PR metadata: the title mentions "Updated Konflux references", the commit message says "Fixed cffi", but the actual change adds a cryptography version override. Please clarify the intent of this change.

🤖 Prompt for AI Agents 
In `@requirements.overrides.txt` at line 8, The change adds a cryptography pin
(cryptography==46.0.3) but the PR title ("Updated Konflux references") and
commit message ("Fixed cffi") do not match this edit; clarify intent by either
(A) if you intended to pin cryptography, update the PR title and commit message
to mention the cryptography override and consider using the newer 46.0.4
release, or (B) if you intended to fix cffi/Konflux, revert this cryptography
line and make the correct change to the cffi/Konflux dependency instead;
reference the exact token "cryptography==46.0.3" when making or reverting the
edit so reviewers can verify the intended change.

anyio==4.12.0
datasets==4.4.1
pandas==2.3.3
Expand Down
Loading