fix: Bump h11 to 0.16.0 to fix cve-2025-43859 (#2041)

This resolves a new critical severity on h11. See
https://access.redhat.com/security/cve/cve-2025-43859. We should
consider releasing a new patch with this fix.

This was updated via:

```
uv add "h11>=0.16.0"
uv export --frozen --no-hashes --no-emit-project --output-file=requirements.txt
```

Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
This commit is contained in:
Yuan Tang 2025-04-27 14:45:35 -04:00 committed by GitHub
parent 6cf6791de1
commit 28687b0e85
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 11 additions and 8 deletions

View file

@ -38,6 +38,7 @@ dependencies = [
"termcolor",
"tiktoken",
"pillow",
"h11>=0.16.0",
]
[project.optional-dependencies]