chore: Add fixes to v2#5013

Merged

sasha-gitg merged 7 commits intov2from

Mar 26, 2026

Commits on Mar 26, 2026

fix: Exclude compromised LiteLLM versions from dependencies pin to 1.82.6

GWeale
authored and
sasha-gitg
committed
fix: add protection for arbitrary module imports

GWeale
authored and
sasha-gitg
committed
fix: gate builder endpoints behind web flag
sasha-gitg
committed
fix: add agent name validation to prevent arbitrary module imports
sasha-gitg
committed
fix: Default to ClusterIP so GKE deployment isn't publicly exposed by default
sasha-gitg
committed
fix: Update eval extras to Vertex SDK package version with constrained LiteLLM upperbound
sasha-gitg
committed
fix: enforce allowed file extensions for GET requests in the builder API
sasha-gitg
committed