fix(ci): revert rembg to 2.0.62 (2.0.75 requires numpy>=2.3)

rembg 2.0.75 pulls in numpy>=2.3.0 which conflicts with our pinned
numpy==1.26.4 and would break the entire AI dependency chain. The two
rembg CVEs (SSRF + path traversal) are in its server/CLI components
which we don't use; they're already in the pip-audit ignore list.
This commit is contained in:
SnapOtter
2026-06-10 21:21:39 +08:00
parent 8792080982
commit 3b8d529b44
3 changed files with 3 additions and 3 deletions
+1 -1
View File
@@ -9,7 +9,7 @@
"description": "Remove image backgrounds with AI",
"estimatedSize": "4-5 GB",
"packages": {
"common": ["rembg==2.0.75"],
"common": ["rembg==2.0.62"],
"amd64": ["onnxruntime-gpu==1.20.1", "mediapipe>=0.10.21"],
"arm64": ["onnxruntime==1.20.1", "mediapipe>=0.10.18"]
},
+1 -1
View File
@@ -1,4 +1,4 @@
rembg==2.0.75
rembg==2.0.62
realesrgan==0.3.0
paddleocr==2.9.1
paddlepaddle-gpu==3.0.0
+1 -1
View File
@@ -1,4 +1,4 @@
rembg[cpu]==2.0.75
rembg[cpu]==2.0.62
realesrgan==0.3.0
paddleocr[doc-parser]>=3.4.0,<3.5.0
paddlepaddle>=3.0.0,<3.1.0