chore(deps): update dependency llama-index to v0.10.13 [security] #1296
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.7.4
->==0.10.13
GitHub Vulnerability Alerts
CVE-2023-39662
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the
exec
parameter in PandasQueryEngine function.CVE-2024-4181
A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models (LLMs). The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised LLM hosting provider to execute arbitrary commands on the client's machine. This issue was fixed in version 0.10.13. The exploitation of this vulnerability could lead to a hosting provider gaining full control over client machines.
Release Notes
run-llama/llama_index (llama-index)
v0.10.13
Compare Source
New Features
mistral-large
(#11398)Bug Fixes / Nits
v0.10.12
Compare Source
New Features
llama-index-postprocessor-colbert-rerank
package (#11057)MyMagicAI
LLM (#11263)MariaTalk
LLM (#10925)Bug Fixes / Nits
download_llama_pack
for multiple files (#11272)BUILD
files from packages (#11267)v0.10.11
Compare Source
Bug Fixes / Nits
v0.10.10
Compare Source
I'm still a bit wonky with our publishing process -- apologies. This is just a version
bump to ensure the changes that were supposed to happen in 0.10.9 actually
did get published. (AF)
v0.10.9
Compare Source
v0.10.8
Compare Source
v0.10.7
Compare Source
New Features
Bug Fixes / Nits
v0.10.6
Compare Source
First, apologies for missing the changelog the last few versions. Trying to figure out the best process with 400+ packages.
At some point, each package will have a dedicated changelog.
But for now, onto the "master" changelog.
New Features
NomicHFEmbedding
(#10762)MinioReader
(#10744)Bug Fixes / Nits
llama_index.core.__version__
(#10930)v0.10.5
FnAgentWorker
for custom agents (#14329)v0.10.4
PropertyGraphIndex
and other supporting abstractions. See the full guide for more details (#13747)AutoPrevNextNodePostprocessor
to allow passing in response mode and LLM (#13771)_aget_retrieved_ids_and_texts
in retrievval evaluator (#13765)self._query_transform
(#13756)SimpleVectorStoreIndex
(#13365)v0.10.3
Compare Source
Bug Fixes / Nits
as_chat_engine
(#10605)__version__
(#10656)from_credentials
passing ing the model name (#10640)v0.10.1
Compare Source
New Features
Bug Fixes / Nits
v0.10.0
Compare Source
Breaking Changes
v0.9.48
Compare Source
Bug Fixes / Nits
v0.9.47
Compare Source
Last patch before v0.10!
New Features
Bug Fixes / Nits
v0.9.46
Compare Source
New Features
Bug Fixes / Nits
v0.9.45.post1
Compare Source
New Features
Bug Fixes / Nits
v0.9.45
Compare Source
New Features
Bug Fixes / Nits
v0.9.44
Compare Source
New Features
v0.9.43
Compare Source
New Features
Bug Fixes / Nits
v0.9.42.post2
Compare Source
v0.9.42.post1
Compare Source
New Features
v0.9.42
Compare Source
New Features
v0.9.41
Compare Source
New Features
Bug Fixes / Nits
v0.9.40
Compare Source
New Features
v0.9.39
Compare Source
New Features
Bug Fixes / Nits
v0.9.38
Compare Source
New Features
Bug Fixes / Nits
v0.9.37.post1
Compare Source
v0.9.37
Compare Source
New Features
Bug Fixes / Nits
SentenceTransformerRerank
(#10225)v0.9.36
Compare Source
New Features
SageMakerEmbedding
(#10207)Bug Fixes / Nits
file_id
on openai assistant (#10223)TitleExtractor
on groups of nodes from the same parent document (#10209)v0.9.35
Compare Source
New Features
beautifulsoup4
dependency to new optional extrahtml
(#10156)BaseNode.hash
an@property
(#10163)Bug Fixes / Nits
beautifulsoup4
optional dependency (#10156)v0.9.34
Compare Source
New Features
Bug Fixes / Nits
v0.9.33
Compare Source
New Features
Bug Fixes / Nits
v0.9.32
Compare Source
New Features
v0.9.31
Compare Source
New Features
put_all
method (#10014)Bug Fixes / Nits
max_string_length
(#10015)node.resolve_image()
for base64 strings (#10026)v0.9.30
Compare Source
New Features
Bug Fixes / Nits
language
used before assignment inCodeSplitter
(#9987)v0.9.29
Compare Source
New Features
IngestionPipeline.run()
(#9920)Bug Fixes / Nits
v0.9.28.post2
Compare Source
v0.9.28.post1
Compare Source
v0.9.28
Compare Source
New Features
tool_choice
to be set during agent construction (#9924)QueryPipeline
(#9919)Bug Fixes / Nits
tool_choice
flag to downstream APIs (#9901)chat_store_key
to chat memoryfrom_defaults()
(#9928)v0.9.27
Compare Source
New Features
Bug Fixes / Nits / Smaller Features
tool_choice
flag to downstream APIs (#9901)v0.9.26
Compare Source
New Features
BaseChatStore
andSimpleChatStore
abstraction for dedicated chat memory storage (#9863)tree_sitter
parser to be passed intoCodeSplitter
(#9845)BaseAutoRetriever
base class, to allow other retrievers to extend to auto modes (#9846)DeepEval
one-click observability (#9801)Bug Fixes / Nits
sphinx-automodapi
dependency for docs (#9852)v0.9.25.post1
Compare Source
v0.9.25
Compare Source
New Features
deepeval
one-click observability handler (#9801)Bug Fixes / Nits
_verify_source_safety
uses AST, not regexes, for proper safety checks (#9789)v0.9.24
Compare Source
New Features
Bug Fixes / Nits
v0.9.23
Compare Source
Bug Fixes / Nits
download_module
anddownload_llama_pack
(#9734)v0.9.22
Compare Source
New Features
.iter_data()
method toSimpleDirectoryReader
(#9658)Ollama
LLM (#9689)in
andnot in
(#9683)Bug Fixes / Nits
None
handling inChromaVectorStore
(#9697)v0.9.21
Compare Source
New Features
Bug Fixes / Nits
v0.9.20
Compare Source
New Features
insert_batch_size
to limit number of embeddings held in memory when creating an index, defaults to 2048 (#9630)Bug Fixes / Nits
v0.9.19
Compare Source
New Features
LabelledEvaluatorDataset
&LabelledPairwiseEvaluatorDataset
(#9531)v0.9.18
Compare Source
New Features
Bug Fixes / Nits
v0.9.17
Compare Source
New Features
Bug Fixes / Nits
types-protobuf
from being a primary dependency (#9595)v0.9.16.post1
Compare Source
v0.9.16
Compare Source
New Features
Bug Fixes / Nits
default=None
forLLM.system_prompt
(#9504)WHERE
filter to the Sparse Query for PgVectorStore (#9529)formatted
option (#9555)v0.9.15.post2
Compare Source
v0.9.15.post1
Compare Source
v0.9.15
Compare Source
New Features
from_existing()
method + async support to OpenAI assistants (#9367)Bug Fixes / Nits
v0.9.14.post3
Compare Source
v0.9.14.post2
Compare Source
v0.9.14.post1
Compare Source
v0.9.14
Compare Source
New Features
Ollama
Embedding class (#9341)FlagEmbeddingReranker
for reranking (#9285)sql_only
parameter to SQL query engines to avoid executing SQL (#9422)Bug Fixes / Nits
aiostream
dependency (#9403)top_k
being multiplied by 10 in azure cosmos (#9438)Breaking Changes
LLM
interface to matchLLMPredictor
(#9388)LLMPredictor
(#9388)v0.9.13
Compare Source
New Features
LabelledRagDataset
(#9332)Bug Fixes / Nits
v0.9.12
Compare Source
New Features
reuse_client
to openai/azure to help with async timeouts. Set toFalse
to see improvements (#9301)vLLM
llm (#9257)claude-2.1
model name (#9275)Bug Fixes / Nits
delete_kwargs
for filtering in weaviate vector store (#9300)v0.9.11.post1
Compare Source
v0.9.11
Compare Source
New Features
reference_contexts
optional inLabelledRagDataset
(#9266)download
module (#9253)LabelledRagDataset
(#9228)LabelledRagDataset
(#9273)Bug Fixes / Nits
InstructorEmbedding
(#9255)v0.9.10
Compare Source
New Features
OpenAIAssistant
(#9125)Breaking Changes / Deprecations
v0.9.9
Compare Source
New Features
LlamaDataset
's (#9165)AstraDBVectorStore
(#9193)scikit-learn
versions (#9213)Breaking Changes / Deprecations
LocalAI
demo and began deprecation cycle (#9151)QueryResponseDataset
andDatasetGenerator
ofevaluation
module (#9165)Bug Fixes / Nits
download_utils.py
with pointing to wrong repo ([#9215](https://togithub.com/run-llama/lConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.