apunkt/trustgraph
1
0
Fork 0
mirror of https://github.com/trustgraph-ai/trustgraph.git synced 2026-05-02 03:42:36 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update packages with vulns in container builds (#861)

Browse source 
* Fix vulns-flagged imports

* Fix archaic pulls in the "trustgraph" package

* Add unstructured to meta package
This commit is contained in:
cybermaggedon 2026-04-30 20:02:53 +01:00 • committed by GitHub
parent 89f058d35b
commit 9be257ceee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
9 changed files with 32 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

15
containers/Containerfile.hf
View file

@ -8,8 +8,9 @@ ENV PIP_BREAK_SYSTEM_PACKAGES=1
RUN dnf install -y python3.12 && \
alternatives --install /usr/bin/python python /usr/bin/python3.12 1 && \
python -m ensurepip --upgrade && \
pip3 install --no-cache-dir --upgrade 'pip>=26.0' 'setuptools>=78.1.1' && \
pip3 install --no-cache-dir build wheel aiohttp && \
pip3 install --no-cache-dir pulsar-client==3.7.0 && \
pip3 install --no-cache-dir pulsar-client==3.11.0 && \
dnf clean all
# This won't work on ARM
@ -19,15 +20,15 @@ RUN dnf install -y python3.12 && \
RUN pip3 install torch
RUN pip3 install --no-cache-dir \
langchain==0.3.25 langchain-core==0.3.60 langchain-huggingface==0.2.0 \
langchain-community==0.3.24 \
sentence-transformers==4.1.0 transformers==4.51.3 \
huggingface-hub==0.31.2 \
pulsar-client==3.7.0
langchain==1.2.16 langchain-core==1.3.2 langchain-huggingface==1.2.2 \
langchain-community==0.4.1 \
sentence-transformers==5.4.1 transformers==5.7.0 \
huggingface-hub==1.13.0 \
pulsar-client==3.11.0
# Most commonly used embeddings model, just build it into the container
# image
RUN huggingface-cli download sentence-transformers/all-MiniLM-L6-v2
RUN hf download sentence-transformers/all-MiniLM-L6-v2
# ----------------------------------------------------------------------------
# Build a container which contains the built Python packages. The build