Skip to content

Conversation

AzulGarza
Copy link

Issue #, if available:

Description of changes:

this pr relaxes the version constraint for the transformers dependency. i’ve tested the minimal proposed version, and all tests pass successfully.

image

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@lostella
Copy link
Contributor

Thanks @AzulGarza: given this only touches the minimum transformer version, I don’t have concerns.

@abdulfatir do you have any concern?

@abdulfatir
Copy link
Contributor

Thanks @AzulGarza! @lostella I believe we bumped transformers in #280 due to a dependabot security alert. I am not sure how much of a concern that is.

@lostella
Copy link
Contributor

@AzulGarza see the above answer; I think merging this change is not ideal since that will raise again security alerts.

Could you maybe consider taking chronos-forecasting as a dependency, but using no-deps?

@AzulGarza
Copy link
Author

thanks, @lostella and @abdulfatir! i didn't know about no-deps, appreciate the hint! i think it fixes the issue:)

@AzulGarza AzulGarza closed this Jul 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants