mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
fix(ci): revert rembg to 2.0.62 (2.0.75 requires numpy>=2.3)
rembg 2.0.75 pulls in numpy>=2.3.0 which conflicts with our pinned numpy==1.26.4 and would break the entire AI dependency chain. The two rembg CVEs (SSRF + path traversal) are in its server/CLI components which we don't use; they're already in the pip-audit ignore list.
This commit is contained in:
@@ -9,7 +9,7 @@
|
||||
"description": "Remove image backgrounds with AI",
|
||||
"estimatedSize": "4-5 GB",
|
||||
"packages": {
|
||||
"common": ["rembg==2.0.75"],
|
||||
"common": ["rembg==2.0.62"],
|
||||
"amd64": ["onnxruntime-gpu==1.20.1", "mediapipe>=0.10.21"],
|
||||
"arm64": ["onnxruntime==1.20.1", "mediapipe>=0.10.18"]
|
||||
},
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
rembg==2.0.75
|
||||
rembg==2.0.62
|
||||
realesrgan==0.3.0
|
||||
paddleocr==2.9.1
|
||||
paddlepaddle-gpu==3.0.0
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
rembg[cpu]==2.0.75
|
||||
rembg[cpu]==2.0.62
|
||||
realesrgan==0.3.0
|
||||
paddleocr[doc-parser]>=3.4.0,<3.5.0
|
||||
paddlepaddle>=3.0.0,<3.1.0
|
||||
|
||||
Reference in New Issue
Block a user