Skip to content

Commit c12c3d2

Browse files
committed
fix(deps): Relax protobuf upper bound to <7.0 for CVE-2026-0994
Raise the protobuf upper bound from <6.32 to <7.0 so users on the 6.x line can upgrade to 6.33.5+ which contains the fix for CVE-2026-0994. The minimum remains >=3.12 to avoid breaking existing environments. Fixes #5548
1 parent be0d6b5 commit c12c3d2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ dependencies = [
4545
"pandas>=2.3.0",
4646
"pathos",
4747
"platformdirs",
48-
"protobuf>=3.12,<6.32",
48+
"protobuf>=3.12,<7.0",
4949
"psutil",
5050
"PyYAML>=6.0.1",
5151
"requests",

0 commit comments

Comments
 (0)