Skip to content

SQLAlchemy 2 compatibility #4062

@ddl-joyce-zhao

Description

@ddl-joyce-zhao

Is your feature request related to a problem? Please describe.

There is a security vulnerability PVE-2022-51668 in SQLAlchemy < 2.0.0.b1.
https://data.safetycli.com/v/51668/f17/

However feast pinned the SQLAlchemy version to be < 2. We are struggling to have solve this vulnerability in our feast dependent projects.
https://github.com/feast-dev/feast/blob/master/setup.py#L60

Describe the solution you'd like

Change the version specification to be >1 only

Describe alternatives you've considered
NA

Additional context
NA

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions