fix: Bump h11 to 0.16.0 to fix cve-2025-43859 (#2041)

This resolves a new critical severity on h11. See
https://access.redhat.com/security/cve/cve-2025-43859. We should
consider releasing a new patch with this fix.

This was updated via:

```
uv add "h11>=0.16.0"
uv export --frozen --no-hashes --no-emit-project --output-file=requirements.txt
```

Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
This commit is contained in:
Yuan Tang 2025-04-27 14:45:35 -04:00 committed by GitHub
parent 6cf6791de1
commit 28687b0e85
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 11 additions and 8 deletions

View file

@ -13,8 +13,8 @@ exceptiongroup==1.2.2 ; python_full_version < '3.11'
filelock==3.17.0
fire==0.7.0
fsspec==2024.12.0
h11==0.14.0
httpcore==1.0.7
h11==0.16.0
httpcore==1.0.9
httpx==0.28.1
huggingface-hub==0.29.0
idna==3.10