Project-MONAI / MONAILabel

MONAI Label is an intelligent open source image labeling and learning tool.
https://docs.monai.io/projects/label
Apache License 2.0
567 stars 185 forks source link

Update version with remove requests and requests-toolbelt version limit #1615

Closed caokls closed 6 months ago

caokls commented 6 months ago

Context

Modify reason

Due to using the poetry to manage Python project dependencies, I installed the following packages monai, MONAILabel, monai-deploy-sdk. I found this error in the terminal.

(monai) ➜  MONAITest git:(master) poetry add monailabel       
Using version ^0.8.1 for monailabel

Updating dependencies
Resolving dependencies... Downloading
Because no versions of monailabel match >0.8.1,<0.9.0
 and monailabel (0.8.1) depends on requests (2.28.2), monailabel (>=0.8.1,<0.9.0) requires requests (2.28.2).
So, because medai depends on both requests (^2.31.0) and monailabel (^0.8.1), version solving failed.

And I checked the MONAI, MONAILabel, monai-deply-sdk dependencies and found only MONAILabel has the version of a limited request. Comparing the latest version and the current limit version, they fixed security vulnerabilities, I think we should release this package to the latest version and better.

Summary