Release Notes

v2.3.1

⬆️ Upgrade Notes

• For security reasons, OutputAdapter and ConditionalRouter can only return the following Python literal structures: strings, bytes, numbers, tuples, lists, dicts, sets, booleans, None and Ellipsis (...). This implies that types like ChatMessage, Document, and Answer cannot be used as output types.

Security Notes

• Fix issue that could lead to remote code execution when using insecure Jinja template in the following Components:

  • PromptBuilder
  • ChatPromptBuilder
  • DynamicPromptBuilder
  • DynamicChatPromptBuilder
  • OutputAdapter
  • ConditionalRouter

  The same issue has been fixed in the PipelineTemplate class too.

🐛 Bug Fixes

• Pins structlog to <= 24.2.0 to avoid some unit test failures. This is a temporary fix until we can upgrade tests to a newer versions of structlog.