kaxil commented on code in PR #76503:
URL: https://github.com/apache/airflow/pull/76503#discussion_r4485376096
##########
providers/google/pyproject.toml:
##########
@@ -83,10 +83,20 @@ dependencies = [
# google-cloud-aiplatform doesn't install ray for python 3.12 (issue:
https://github.com/googleapis/python-aiplatform/issues/5252).
# Temporarily lock in ray 2.42.0 which is compatible with python 3.12
until linked issue is solved.
# Remove the ray dependency as well as google-cloud-bigquery-storage once
linked issue is fixed
- # Floor raised to 1.164.0: earlier "evaluation" extras cap litellm below
the version that
- # carries the fixes for CVE-2026-35030 and its follow-on advisories on
Python 3.14.
- # - https://github.com/googleapis/python-aiplatform/issues/7057
- "google-cloud-aiplatform[evaluation]>=1.164.0",
+ # The dependencies of google-cloud-aiplatform's "evaluation" extra, except
litellm, which
+ # vertexai.preview.evaluation (what the generative model hook uses) never
imports; only the
+ # vertexai._genai evals client does, behind an ImportError guard. The
extra caps litellm at a
+ # version that still requires openai<3, and below the fix for a critical
litellm advisory:
+ # https://github.com/googleapis/python-aiplatform/issues/7252
+ # The extra's pandas is listed further down. The floors of jsonschema,
pyyaml and tqdm match
+ # the other Airflow distributions; scikit-learn 1.7.2 is the first release
with Python 3.14
+ # wheels.
+ "google-cloud-aiplatform>=1.164.0",
+ "jsonschema>=4.19.1",
+ "pyyaml>=6.0.3",
+ "ruamel.yaml>=0.18.0",
+ "scikit-learn>=1.7.2",
Review Comment:
Done, split by Python version as suggested. Checked the wheel tags on PyPI
and that each floor runs with numpy 2.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
