Description: Briefly describe the changes in this pull request.
Changelog: Ensure a changelog entry following the format of Keep a Changelog is added at the bottom of the PR description.
Documentation: No documentation updates are required for this change.
Dependencies: The litellm dependency version has been updated to 1.35.28, which includes an updated version of Gunicorn (22.0.0).
Testing: No new tests are required for this change.
Code Review: The code has been self-reviewed and meets coding standards.
Description
This pull request updates the litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0). This update addresses a vulnerability in Gunicorn (CVE-2024-1135).
Changelog Entry
Security
Updated litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0) to address CVE-2024-1135.
Additional Information
This update is necessary to address a vulnerability in a transient dependency, Gunicorn (CVE-2024-1135).
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/1827
**Author:** [@justinh-rahb](https://github.com/justinh-rahb)
**Created:** 4/28/2024
**Status:** ✅ Merged
**Merged:** 4/28/2024
**Merged by:** [@tjbck](https://github.com/tjbck)
**Base:** `dev` ← **Head:** `update-litellm`
---
### 📝 Commits (6)
- [`92c98ed`](https://github.com/open-webui/open-webui/commit/92c98eda2e7340bc7c8f32d33bc49cec8498b1bb) Merge pull request #1781 from open-webui/dev
- [`d401d77`](https://github.com/open-webui/open-webui/commit/d401d77cbd23a45bad7691619ce9604d5ed482fb) Merge pull request #1805 from open-webui/dev
- [`9760997`](https://github.com/open-webui/open-webui/commit/97609970b23ffc73d39091ad42a5d9d2a1f7bcf9) Merge pull request #1806 from open-webui/dev
- [`0455b80`](https://github.com/open-webui/open-webui/commit/0455b8060486a6aa4c63aa5c778494d2bc5be7a5) Merge pull request #1809 from open-webui/dev
- [`c9589e2`](https://github.com/open-webui/open-webui/commit/c9589e21181d97d7cab2937e69a345ba60e4fe71) Merge pull request #1810 from open-webui/dev
- [`d42517b`](https://github.com/open-webui/open-webui/commit/d42517b7ed563272614767a026cce619aedc0c55) Update LiteLLM (and Gunicorn)
### 📊 Changes
**1 file changed** (+2 additions, -2 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+2 -2)
</details>
### 📄 Description
## Pull Request Checklist
- [x] **Description:** Briefly describe the changes in this pull request.
- [x] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description.
- [x] **Documentation:** No documentation updates are required for this change.
- [x] **Dependencies:** The litellm dependency version has been updated to 1.35.28, which includes an updated version of Gunicorn (22.0.0).
- [x] **Testing:** No new tests are required for this change.
- [x] **Code Review:** The code has been self-reviewed and meets coding standards.
---
## Description
This pull request updates the litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0). This update addresses a vulnerability in Gunicorn (CVE-2024-1135).
### Changelog Entry
### Security
- Updated litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0) to address CVE-2024-1135.
### Additional Information
This update is necessary to address a vulnerability in a transient dependency, Gunicorn (CVE-2024-1135).
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/1827
Author: @justinh-rahb
Created: 4/28/2024
Status: ✅ Merged
Merged: 4/28/2024
Merged by: @tjbck
Base:
dev← Head:update-litellm📝 Commits (6)
92c98edMerge pull request #1781 from open-webui/devd401d77Merge pull request #1805 from open-webui/dev9760997Merge pull request #1806 from open-webui/dev0455b80Merge pull request #1809 from open-webui/devc9589e2Merge pull request #1810 from open-webui/devd42517bUpdate LiteLLM (and Gunicorn)📊 Changes
1 file changed (+2 additions, -2 deletions)
View changed files
📝
backend/requirements.txt(+2 -2)📄 Description
Pull Request Checklist
Description
This pull request updates the litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0). This update addresses a vulnerability in Gunicorn (CVE-2024-1135).
Changelog Entry
Security
Additional Information
This update is necessary to address a vulnerability in a transient dependency, Gunicorn (CVE-2024-1135).
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.