Upgrade to python 3.11, remove poetry for uv, move to lazy loading in app.py #85

morganmcg1 · 2024-12-26T03:45:43Z

wandbot v1.3.0

Note that to trigger the final initalization after running run.sh, a request has to be made to the /startup endpoint, as tiggering the heavy initialzations during app startup causes replit to timeout:

curl https://wandbot.replit.app/startup

New:

Move to uv for package management: Installs and dependency checks cut down from minutes to seconds
Support python 3.11 on replit
Move to lazing loading in app.py to help with startup: Replit app deployments can't seen to handle the delay from loading the app, despite attempting async or background tasks
Turn off web search: Currently we don't have a web search provider to use.
Small formatting updates for weave.op
Add dotenv in app.py for easy env var loads

Testing

Tested on Replit, slack and discord working as expected.
Testing by running evals

… app.py

socket-security · 2024-12-26T03:46:39Z

Report is too large to display inline.
View full report↗︎

Next steps

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/pywin32@308
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]
@SocketSecurity ignore pypi/[email protected]

src/wandbot/api/app.py

socket-security · 2024-12-27T04:50:08Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
pypi/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	`+1792`	6.78 GB
pypi/[email protected]	environment, filesystem, network, shell Transitive: eval, unsafe	`+1657`	5.98 GB	1vn, billytrend-cohere, miguel-cohere
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	`+1393`	4.7 GB	messense
pypi/[email protected]	environment, eval, filesystem, network, shell, unsafe	`+1999`	6.25 GB	dmontagu, samuelcolvin
pypi/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	`+89`	109 MB

View full report↗︎

- Update chromadb to 0.6.0 which supports numpy 2.2.0 - Keep our optimized MMR implementation since chromadb doesn't have built-in MMR yet

…andbot into make_wandbot_great_again

- Add native ChromaDB wrapper that matches langchain-chroma behavior - Remove dependency on langchain-chroma's internal implementation - Add documentation explaining the native implementation - Update VectorStore to use native ChromaDB wrapper

Use code interpreter with python 3.12

Upgrade to python 3.11, remove poetry for uv, move to lazy loading in…

4d23861

… app.py

github-advanced-security bot found potential problems Dec 26, 2024

View reviewed changes

src/wandbot/api/app.py Fixed Show fixed Hide fixed

morganmcg1 added 2 commits December 25, 2024 22:00

ruff fixes

ed0b3d9

run black

284ad1d

github-advanced-security bot found potential problems Dec 26, 2024

View reviewed changes

src/wandbot/api/app.py Fixed Show fixed Hide fixed

morganmcg1 added 6 commits December 25, 2024 22:19

update to weave.op

94adeca

Update pyproject.toml

324164e

remove poetry.lock

6cbabe3

add disk-usage route

960c2a4

fix disk usage

f9bceb2

add no-user to installs

25941a9

github-advanced-security bot found potential problems Dec 26, 2024

View reviewed changes

src/wandbot/api/app.py Dismissed Show dismissed Hide dismissed

src/wandbot/api/app.py Fixed Show fixed Hide fixed

morganmcg1 added 16 commits December 25, 2024 22:51

simple, newer .replit file

47bc78b

Update README

143a06c

add clear pip cache

182c667

add disk usage increment logging

8eae613

Add dotenv for better devX

5d40093

add bulid.sh debug disk usage logging

a520738

add top 20 disk usage logging

380527d

tidy up

8d81f01

add wandb cache cleanup

555d433

readme

eaeedc5

Update readme

825741e

Add args and configs to eval script, update reqs, update readme

a8cefd7

update env var, rename main.py to eval

eea41f0

Remove langchain-cohere

e06ab67

disable feedback logging for now

230e0bf

Readme

41f2bfb

openhands-agent and others added 30 commits January 1, 2025 01:10

OpenHands: Update chromadb to 0.6.0 for numpy 2.2.0 compatibility

03fb31b

- Update chromadb to 0.6.0 which supports numpy 2.2.0 - Keep our optimized MMR implementation since chromadb doesn't have built-in MMR yet

python 3.12, add retries for evals

a3a1fdd

Merge branch 'make_wandbot_great_again' of https://github.com/wandb/w…

8567ba1

…andbot into make_wandbot_great_again

update eval naming and logging

17df3fb

Add validation error retry to query enhancer chain

dcdb23d

update default index artifact, add config logging to evals

914a1e9

remove emojis from disk usage message

6dc42da

formatting

7c2d779

update readme

b43c2d6

modify similarity search in retrieval

cf8a633

remove mistaken openhands chroma commit

6ace947

rename chroma wrapper

8c0ea03

Fix native ChromaDB implementation to match langchain-chroma behavior

e91d81b

remove langchain embeddings, add native embeddings models

0ce71f5

make EmbeddingsModel callable

8b5b856

Centralise all configs

60c66f3

fix configs

4ad024c

prompt updates

66313fc

update readme

61ddd45

increase retries for query handler

f6e4f7b

Add e2b dockerfile

255cd3f

update docker file

80278d4

docker fixes

0da7bdc

Update readme and dockerfile

b6fd1d6

add docker temp dir clearnup

d52c23d

Use code interpreter with python 3.12

c002c88

Merge pull request #87 from jakubno/make_wandbot_great_again

67a7005

Use code interpreter with python 3.12

fix retry in query handler

a3d0714

tidy up configs app routes, tidy up web search

51afeb4

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Upgrade to python 3.11, remove poetry for uv, move to lazy loading in app.py #85

Upgrade to python 3.11, remove poetry for uv, move to lazy loading in app.py #85

morganmcg1 commented Dec 26, 2024 •

edited

Loading

socket-security bot commented Dec 26, 2024 •

edited

Loading

socket-security bot commented Dec 27, 2024 •

edited

Loading

Upgrade to python 3.11, remove poetry for uv, move to lazy loading in app.py #85

Are you sure you want to change the base?

Upgrade to python 3.11, remove poetry for uv, move to lazy loading in app.py #85

Conversation

morganmcg1 commented Dec 26, 2024 • edited Loading

wandbot v1.3.0

Testing

socket-security bot commented Dec 26, 2024 • edited Loading

Next steps

socket-security bot commented Dec 27, 2024 • edited Loading

morganmcg1 commented Dec 26, 2024 •

edited

Loading

socket-security bot commented Dec 26, 2024 •

edited

Loading

socket-security bot commented Dec 27, 2024 •

edited

Loading