Katsuhide Tsuruta
774e92540c
Raise declared dependency floors to non-vulnerable versions: diffusers 0.38.0 fixes the trust_remote_code/custom_pipeline RCE advisories (CVE-2026-44513/44827/45804), and pytest 9.0.3 fixes the tmpdir handling issue. uv.lock is gitignored, so only pyproject floors are tracked; the local lock was refreshed and the suite re-run (20 passed) to verify the upgraded resolution still works. Closes #9
23 lines
454 B
TOML
23 lines
454 B
TOML
[project]
|
|
name = "comfyui-alphavae"
|
|
version = "0.1.0"
|
|
description = "ComfyUI custom nodes for AlphaVAE — native RGBA transparent image generation using FLUX"
|
|
license = "MIT"
|
|
requires-python = ">=3.10"
|
|
dependencies = [
|
|
"diffusers>=0.38.0",
|
|
"torch",
|
|
"safetensors",
|
|
]
|
|
|
|
[project.urls]
|
|
Repository = "https://github.com/katsut/ComfyUI-AlphaVAE"
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"pytest>=9.0.3",
|
|
]
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = ["tests"]
|