New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

consider fixing possible setuptools vulnerability #3234

Open

martinjankowiak opened this issue Jun 23, 2023 · 1 comment

Assignees

Labels

Collaborator

martinjankowiak commented Jun 23, 2023

https://github.com/pyro-ppl/pyro/security/dependabot/1

To resolve the issue add a supported lockfile (Pipfile.lock, pyproject.lock or poetry.lock).

fritz: oh man we're using an old setuptools because lap requires it. I guess we can drop lap support; I doubt anyone but me ever used it, but I'd still prefer to follow a responsible deprecation process.

martinjankowiak added the discussion label

Member

fritzo commented Aug 27, 2023

We may be able to replace lap with scipy's maximum_bipartite_matching

fritzo self-assigned this

fritzo mentioned this issue

Replace lap.lapjv() with scipy.optimize.linear_sum_assignment() #3267

Merged

3 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment