fix: Work around compromised transitive dependency#6257
Merged
Conversation
Contributor
Codecov Results 📊✅ 146 passed | Total: 146 | Pass Rate: 100% | Execution Time: 21.68s 📊 Comparison with Base Branch
✨ No test changes detected All tests are passing successfully. ✅ Patch coverage is 100.00%. Project has 14343 uncovered lines. Coverage diff@@ Coverage Diff @@
## main #PR +/-##
==========================================
+ Coverage 34.96% 34.96% —%
==========================================
Files 190 190 —
Lines 22052 22052 —
Branches 7408 7408 —
==========================================
+ Hits 7709 7709 —
- Misses 14343 14343 —
- Partials 807 807 —Generated by Codecov Action |
alexander-alderman-webb
approved these changes
May 12, 2026
tonal
added a commit
to tonal/sentry-python
that referenced
this pull request
May 12, 2026
Include fix for compromised transitive dependency (getsentry#6257). Regenerate tox.ini and CI workflows with aiomysql config. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
mistralaimight have been compromised. It's been quarantined by PyPI, so it can't be installed at all.pydantic-aiinstallspydantic-ai-slimwith a bunch of extras for all sort of AI providers, includingmistralai.pydantic-ai, which then tries to pull inmistralaitransitively.Even though there's now a new release of
pydantic-aiwithout the dependency, older versions still have it, and we still want to test against a variety of versions in our test suite.The fix: don't install
pydantic-ai, but instead installpydantic-ai-slimdirectly, at least for now untilmistralaiis restored.