Sohail/CVE fix

client/pyproject.toml

@@ -28,6 +28,7 @@ dependencies = [
     "pydantic>2.0.0",
     "pydantic-settings>2.0.0",
     "requests>=2.32.5",
+    "urllib3==2.6.3",
     "setuptools>=78.1.1",
     "tqdm>=4.67.1",
     "lancedb>=0.25.3",

nemo_retriever/tests/test_chart_graphic_elements.py

@@ -9,7 +9,7 @@
 import base64
 import importlib
 import io
-from unittest.mock import MagicMock, patch
+from unittest.mock import MagicMock
 
 import pandas as pd
 import pytest
@@ -280,23 +280,22 @@ def test_actor_error_returns_dataframe_with_error(self) -> None:
         """Actor should never raise; errors go into metadata columns."""
         from nemo_retriever.chart.chart_detection import GraphicElementsActor
 
-        with patch("nemo_retriever.chart.chart_detection.GraphicElementsActor.__init__", return_value=None):
-            actor = GraphicElementsActor.__new__(GraphicElementsActor)
-            actor._graphic_elements_model = None
-            actor._ocr_model = None
-            actor._graphic_elements_invoke_url = ""
-            actor._ocr_invoke_url = ""
-            actor._api_key = None
-            actor._request_timeout_s = 120.0
-            actor._remote_retry = None
-
-            df = _make_chart_page_df()
-            # This will fail because both models are None and no URLs set.
-            result = actor(df)
-            assert "chart" in result.columns
-            assert "graphic_elements_ocr_v1" in result.columns
-            meta = result.iloc[0]["graphic_elements_ocr_v1"]
-            assert meta["error"] is not None
+        actor = GraphicElementsActor.__new__(GraphicElementsActor)
+        actor._graphic_elements_model = None
+        actor._ocr_model = None
+        actor._graphic_elements_invoke_url = ""
+        actor._ocr_invoke_url = ""
+        actor._api_key = None
+        actor._request_timeout_s = 120.0
+        actor._remote_retry = None
+
+        df = _make_chart_page_df()
+        # This will fail because both models are None and no URLs set.
+        result = actor(df)
+        assert "chart" in result.columns
+        assert "graphic_elements_ocr_v1" in result.columns
+        meta = result.iloc[0]["graphic_elements_ocr_v1"]
+        assert meta["error"] is not None
 
 
 # ---------------------------------------------------------------------------

src/pyproject.toml

@@ -61,6 +61,7 @@ dependencies = [
     "tqdm>=4.67.1",
     "urllib3==2.6.3",
     "nltk==3.9.3",
+    "pillow==12.1.1",
     "uvicorn",
     "pip",
     "opencv-python",