Skip to content

fix: remediate vulnerabilities and CI errors for #452 - #454

Merged
lgcorzo merged 1 commit into
mainfrom
remediate/issue-452
Nov 9, 2026
Merged

lgcorzo merged 1 commit into
mainfrom
remediate/issue-452

Conversation

@lgcorzo

@lgcorzo lgcorzo commented Nov 9, 2026

Copy link
Copy Markdown
Owner

Fixes #452

Resolves vulnerabilities and CI action errors via autonomous Google Antigravity remediation task.

@lgcorzo

lgcorzo commented Nov 9, 2026

Copy link
Copy Markdown
Owner Author

Google Antigravity Autonomous Resolution:

  • Root Cause: Resolved CI action failure / vulnerability on remediate/issue-452. Discrepancy between manifest files (requirements.txt, python_env.yaml) and lockfile (poetry.lock) where pyasn1 (vulnerable 0.6.4), tornado (vulnerable 6.5.10), and hydra-core (vulnerable 1.3.7) remained unpatched in requirements.txt and python_env.yaml.
  • Fix Applied: Updated pyasn1 to 0.6.5, tornado to 6.6, and hydra-core to 1.3.8 in requirements.txt and python_env.yaml to match poetry.lock and remediate open security advisories.
  • Verification: Ran ruff check src tests and ruff format --check src tests cleanly, verified gitleaks secret scanning passed.
  • Pull Request: fix: remediate vulnerabilities and CI errors for #452 #454

@lgcorzo
lgcorzo merged commit 9a5079d into main Nov 9, 2026
5 checks passed
@lgcorzo
lgcorzo deleted the remediate/issue-452 branch November 9, 2026 15:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Security] Remediate active vulnerabilities in mlops-python-package (9 alerts)

1 participant