rasa-pro 3.13.8__tar.gz → 3.13.10__tar.gz

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: rasa-pro
-Version: 3.13.8
+Version: 3.13.10
 Summary: State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development.
 Keywords: nlp,machine-learning,machine-learning-library,bot,bots,botkit,rasa conversational-agents,conversational-ai,chatbot,chatbot-framework,bot-framework
 Author: Rasa Technologies GmbH
@@ -61,8 +61,8 @@ Requires-Dist: jsonpatch (>=1.33,<2.0)
 Requires-Dist: jsonpickle (>=3.3.0,<3.4)
 Requires-Dist: jsonschema (>=4.22)
 Requires-Dist: keras (==2.14.0)
-Requires-Dist: langchain (>=0.2.17,<0.3.0)
-Requires-Dist: langchain-community (>=0.2.19,<0.3.0)
+Requires-Dist: langchain (>=0.3.27,<0.4.0)
+Requires-Dist: langchain-community (>=0.3.29,<0.4.0)
 Requires-Dist: langcodes (>=3.5.0,<4.0.0)
 Requires-Dist: litellm (>=1.69.0,<1.70.0)
 Requires-Dist: matplotlib (>=3.7,<3.8)
@@ -102,7 +102,7 @@ Requires-Dist: randomname (>=0.2.1,<0.3.0)
 Requires-Dist: rasa-sdk (==3.13.0)
 Requires-Dist: redis (>=4.6.0,<6.0)
 Requires-Dist: regex (>=2024.7.24,<2024.8.0)
-Requires-Dist: requests (>=2.32.3,<2.33.0)
+Requires-Dist: requests (>=2.32.5,<2.33.0)
 Requires-Dist: rich (>=13.4.2,<14.0.0)
 Requires-Dist: rocketchat_API (>=1.32.0,<1.33.0)
 Requires-Dist: ruamel.yaml (>=0.17.21,<0.17.22)
@@ -117,7 +117,7 @@ Requires-Dist: sentencepiece[sentencepiece] (>=0.1.99,<0.2.0) ; extra == "transf
 Requires-Dist: sentry-sdk (>=2.8.0,<3)
 Requires-Dist: setuptools (>=78.1.1,<78.2.0)
 Requires-Dist: sklearn-crfsuite (>=0.3.6,<0.4.0)
-Requires-Dist: skops (>=0.10.0,<0.11.0)
+Requires-Dist: skops (>=0.13.0,<0.14.0)
 Requires-Dist: slack-sdk (>=3.27.1,<3.28.0)
 Requires-Dist: spacy (>=3.5.4,<4.0.0) ; extra == "spacy" or extra == "full"
 Requires-Dist: structlog (>=23.1.0,<23.2.0)

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.poetry]
 name = "rasa-pro"
-version = "3.13.8"
+version = "3.13.10"
 description = "State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development."
 authors = [ "Rasa Technologies GmbH <hi@rasa.com>",]
 maintainers = [ "Tom Bocklisch <tom@rasa.com>",]
@@ -127,7 +127,7 @@ python = ">=3.9.2,<3.12"
 boto3 = "~1.35.15"
 google-cloud-storage = "~2.14.0"
 azure-storage-blob = ">=12.16.0, <12.17.0"
-requests = "~2.32.3"
+requests = "~2.32.5"
 matplotlib = ">=3.7,<3.8"
 attrs = ">=23.1,<23.2"
 jsonpickle = ">=3.3.0,<3.4"
@@ -187,8 +187,8 @@ portalocker = "^2.7.0"
 pypred = "^0.4.0"
 structlog = ">=23.1.0,<23.2.0"
 structlog-sentry = ">=2.0.3,<2.1.0"
-langchain = "~0.2.17"
-langchain-community = "~0.2.19"
+langchain = "~0.3.27"
+langchain-community = "~0.3.29"
 jinja2 = "~3.1.6"
 openai = "~1.68.2"
 dnspython = "2.6.1"
@@ -218,7 +218,7 @@ types-protobuf = "4.25.0.20240417"
 litellm = "~1.69.0"
 openpyxl = "^3.1.5"
 diskcache = "~5.6.3"
-skops = "~0.10.0"
+skops = "~0.13.0"
 safetensors = "~0.4.5"
 dask = "~2024.7.0" # later versions drop python 3.9 support
 numpy = "~1.26.4"
@@ -385,6 +385,8 @@ convention = "google"
 
 
 
+
+
 [tool.poetry.group.dev.dependencies]
 ruff = ">=0.3.5,<0.4.0"
 docker = "~7.1.0"

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/rasa/core/channels/voice_stream/audiocodes.py

@@ -86,6 +86,7 @@ class AudiocodesVoiceOutputChannel(VoiceOutputChannel):
         # This is an approximation, as the bot will be sent the audio chunks next
         # which are played to the user immediately.
         call_state.is_bot_speaking = True  # type: ignore[attr-defined]
+        VoiceInputChannel._cancel_silence_timeout_watcher()
 
     async def send_intermediate_marker(self, recipient_id: str) -> None:
         """Audiocodes doesn't need intermediate markers, so do nothing."""

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/rasa/dialogue_understanding/generator/flow_retrieval.py

@@ -249,6 +249,16 @@ class FlowRetrieval(EmbeddingsHealthCheckMixin):
         )
 
         flows_to_embedd = flows.exclude_link_only_flows()
+
+        if not flows_to_embedd:
+            structlogger.debug(
+                "flow_retrieval.populate_vector_store.no_flows_to_embed",
+                event_info=(
+                    "No flows to embed in the vector store, skipping population."
+                ),
+            )
+            return
+
         embeddings = self._create_embedder(self.config)
         documents = self._generate_flow_documents(flows_to_embedd, domain)
         try:

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/rasa/engine/storage/local_model_storage.py

@@ -10,7 +10,7 @@ import uuid
 from contextlib import contextmanager
 from datetime import datetime
 from pathlib import Path
-from typing import Callable, Generator, Optional, Text, Tuple, Union
+from typing import Callable, Generator, List, Optional, Text, Tuple, Union
 
 from tarsafe import TarSafe
 
@@ -158,16 +158,24 @@ class LocalModelStorage(ModelStorage):
                     # before trying the \\?\ prefix approach first
                     prev_filter = getattr(tar, "extraction_filter", None)
                     tar.extraction_filter = create_combined_filter(prev_filter)
-                    tar.extractall(f"\\\\?\\{temporary_directory}")
+                    tar.extractall(
+                        f"\\\\?\\{temporary_directory}",
+                        members=yield_safe_members(tar.getmembers()),
+                    )
                 except Exception:
                     # Fallback for Python versions with tarfile security fix
                     logger.warning(
                         "Failed to extract model archive with long path support. "
                         "Falling back to regular extraction."
                     )
-                    tar.extractall(temporary_directory)
+                    tar.extractall(
+                        temporary_directory,
+                        members=yield_safe_members(tar.getmembers()),
+                    )
             else:
-                tar.extractall(temporary_directory)
+                tar.extractall(
+                    temporary_directory, members=yield_safe_members(tar.getmembers())
+                )
         LocalModelStorage._assert_not_rasa2_archive(temporary_directory)
 
     @staticmethod
@@ -287,3 +295,32 @@ class LocalModelStorage(ModelStorage):
             core_target=model_configuration.core_target,
             nlu_target=model_configuration.nlu_target,
         )
+
+
+def yield_safe_members(
+    members: List[tarfile.TarInfo],
+) -> Generator[tarfile.TarInfo, None, None]:
+    """
+    Filter function for tar.extractall members parameter.
+    Validates each member and yields only safe ones.
+
+    Args:
+        members: Iterator of TarInfo objects from tar.getmembers()
+
+    Yields:
+        TarInfo: Safe members to extract
+    """
+    for member in members:
+        # Skip absolute paths
+        if Path(member.name).is_absolute():
+            continue
+
+        # Skip paths with directory traversal sequences
+        if ".." in member.name or "\\.." in member.name:
+            continue
+
+        # Skip special file types unless you need them
+        if member.isdev() or member.issym():
+            continue
+
+        yield member

{rasa_pro-3.13.8 → rasa_pro-3.13.10}/rasa/version.py

@@ -1,3 +1,3 @@
 # this file will automatically be changed,
 # do not add anything but the version number here!
-__version__ = "3.13.8"
+__version__ = "3.13.10"