v2.3.1
Release Notes
v2.3.1
⬆️ Upgrade Notes
- For security reasons,
OutputAdapter
andConditionalRouter
can only return the following Python literal structures: strings, bytes, numbers, tuples, lists, dicts, sets, booleans,None
andEllipsis
(...
). This implies that types likeChatMessage
,Document
, andAnswer
cannot be used as output types.
Security Notes
-
Fix issue that could lead to remote code execution when using insecure Jinja template in the following Components:
- PromptBuilder
- ChatPromptBuilder
- DynamicPromptBuilder
- DynamicChatPromptBuilder
- OutputAdapter
- ConditionalRouter
The same issue has been fixed in the PipelineTemplate class too.
🐛 Bug Fixes
- Pins structlog to <= 24.2.0 to avoid some unit test failures. This is a temporary fix until we can upgrade tests to a newer versions of structlog.