fix: update python protobuf dependency

This commit is contained in:
SnapOtter
2026-07-08 13:11:46 +08:00
parent 37a3cfc844
commit 780624e168
2 changed files with 16 additions and 6 deletions
+8 -3
View File
@@ -19,6 +19,11 @@ codeformer-pip==0.0.4
# OpenTelemetry: enables the innermost sidecar.<script> span when
# OTEL_EXPORTER_OTLP_ENDPOINT is set (enterprise distributed_tracing). Pure-Python,
# no numpy/scipy deps, so safe for the numpy==1.26.4-locked stack.
opentelemetry-api==1.27.0
opentelemetry-sdk==1.27.0
opentelemetry-exporter-otlp-proto-http==1.27.0
opentelemetry-api==1.28.2
opentelemetry-sdk==1.28.2
opentelemetry-exporter-otlp-proto-http==1.28.2
# Keep protobuf on a patched 5.x release. OpenTelemetry 1.27.x pinned
# opentelemetry-proto to protobuf<5, which left the resolver on vulnerable
# protobuf 4.25.9 (PYSEC-2026-1805).
protobuf==5.29.6
+8 -3
View File
@@ -19,6 +19,11 @@ codeformer-pip==0.0.4
# OpenTelemetry: enables the innermost sidecar.<script> span when
# OTEL_EXPORTER_OTLP_ENDPOINT is set (enterprise distributed_tracing). Pure-Python,
# no numpy/scipy deps, so safe for the numpy==1.26.4-locked stack.
opentelemetry-api==1.27.0
opentelemetry-sdk==1.27.0
opentelemetry-exporter-otlp-proto-http==1.27.0
opentelemetry-api==1.28.2
opentelemetry-sdk==1.28.2
opentelemetry-exporter-otlp-proto-http==1.28.2
# Keep protobuf on a patched 5.x release. OpenTelemetry 1.27.x pinned
# opentelemetry-proto to protobuf<5, which left the resolver on vulnerable
# protobuf 4.25.9 (PYSEC-2026-1805).
protobuf==5.29.6