rayhan 166758cb0f fix: migrate mistralai to 2.x and remediate CVE-2025-67221 (orjson) (#17810) ...

## Summary
  
Migrates `mistralai` from `==0.4.2` to `>=2.7.2,<3.0.0` to unblock the
orjson CVE fix. The old SDK pinned `orjson>=3.9.10,<3.11`, preventing
upgrade to the patched version.
  
  | CVE | Severity | Package | Installed | Fixed in |
  |---|---|---|---|---|
  | CVE-2025-67221 | HIGH | orjson | 3.10.18 | 3.11.6 |

`mistralai` 2.x (the current maintained version) drops the orjson
dependency entirely. Added `orjson>=3.11.6` to `constraint-dependencies`
to pin the floor for remaining parent packages (`langgraph-sdk`,
`langsmith`, `ranx`).

2026-08-05 09:52:30 +08:00

..

__init__.py

feat: add AIMLAPI (aimlapi.com) as a model provider (#17311)

2026-07-24 22:50:14 +08:00

chat_model.py

fix: migrate mistralai to 2.x and remediate CVE-2025-67221 (orjson) (#17810)

2026-08-05 09:52:30 +08:00

cv_model.py

fix: list model function for nvidia on python/go not returning current models (#17501)

2026-07-29 13:15:34 +08:00

embedding_model.py

fix: migrate mistralai to 2.x and remediate CVE-2025-67221 (orjson) (#17810)

2026-08-05 09:52:30 +08:00

key_utils.py

fix: replicate model provider (#15933)

2026-06-11 15:08:33 +08:00

model_meta.py

Fix: Add list_models support for Hugging Face provider (#17542)

2026-07-30 09:34:10 +08:00

ocr_model.py

feat: add Mistral OCR (/v1/ocr) as a document parser; fix "Can't find model" mis-tag (#5782, #7075) (#17057)

2026-07-24 21:07:48 +08:00

rerank_model.py

Fix: replace unsupported default qwen rerank model (#17535)

2026-07-29 17:40:02 +08:00

sequence2txt_model.py

feat: add GreenPT model provider (#17447)

2026-07-28 19:19:00 +08:00

tool_decorator.py

Add Go service/handler tests for API contract parity (#16905)

2026-07-20 20:02:41 +08:00

tts_model.py

Fix: sample_rate in siliconflow tts model call (#17043)

2026-07-17 16:29:57 +08:00