rayhan 166758cb0f fix: migrate mistralai to 2.x and remediate CVE-2025-67221 (orjson) (#17810) ...

## Summary
  
Migrates `mistralai` from `==0.4.2` to `>=2.7.2,<3.0.0` to unblock the
orjson CVE fix. The old SDK pinned `orjson>=3.9.10,<3.11`, preventing
upgrade to the patched version.
  
  | CVE | Severity | Package | Installed | Fixed in |
  |---|---|---|---|---|
  | CVE-2025-67221 | HIGH | orjson | 3.10.18 | 3.11.6 |

`mistralai` 2.x (the current maintained version) drops the orjson
dependency entirely. Added `orjson>=3.11.6` to `constraint-dependencies`
to pin the floor for remaining parent packages (`langgraph-sdk`,
`langsmith`, `ranx`).

2026-08-05 09:52:30 +08:00

..

advanced_rag

Refactor: Make wiki and web searchable. (#17789)

2026-08-04 18:02:13 +08:00

app

feat(serenedb): add SereneDB doc-store engine (Go + Python connectors) (#17375)

2026-08-04 14:16:39 +08:00

flow

fix: optimize dataflow indexing and logs (#17737)

2026-08-03 19:15:44 +08:00

graphrag

refa: resolve tenant model refs consistently (#16744)

2026-07-09 14:02:08 +08:00

llm

fix: migrate mistralai to 2.x and remediate CVE-2025-67221 (orjson) (#17810)

2026-08-05 09:52:30 +08:00

nlp

Refactor: Make wiki and web searchable. (#17789)

2026-08-04 18:02:13 +08:00

prompts

fix: soften ask_summary refusal for partially relevant knowledge (#17121)

2026-07-20 19:22:03 +08:00

res

Feat: Bitbucket connector (#12332)

2025-12-31 17:18:30 +08:00

svr

fix: optimize dataflow indexing and logs (#17737)

2026-08-03 19:15:44 +08:00

utils

feat(serenedb): add SereneDB doc-store engine (Go + Python connectors) (#17375)

2026-08-04 14:16:39 +08:00

__init__.py

Fix: incorrect async chat streamly output (#11679)

2025-12-03 11:15:45 +08:00

benchmark.py

refa: resolve tenant model refs consistently (#16744)

2026-07-09 14:02:08 +08:00

settings.py

Move api.settings to common.settings (#11036)

2025-11-06 09:36:38 +08:00