Skip to content

deps: bump monai to 1.6.0 in quickstart-monai example - #7931

Open
katsugtgz wants to merge 1 commit into
flwrlabs:mainfrom
katsugtgz:deps-monai-1.6.0
Open

deps: bump monai to 1.6.0 in quickstart-monai example#7931
katsugtgz wants to merge 1 commit into
flwrlabs:mainfrom
katsugtgz:deps-monai-1.6.0

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates monai to 1.6.0 in the quickstart-monai example.

Evidence:

Validation:

  • pip-audit reports no advisories for monai 1.6.0
  • TOML parses clean after the change; the repo's dev/test.sh TOML formatting step (taplo) was not run locally because taplo is not installed here

Scope: dependency bump only.

monai 1.5.2 is affected by GHSA-89gg-p5r5-q6r4, GHSA-wg9g-w2j2-8pgr,
GHSA-qxq5-qhx6-94qw and GHSA-rghg-q7wp-9767. All four are fixed in
1.6.0. Verified with pip-audit that none of these advisories apply to
monai 1.6.0.

Scope: dependency version bump only.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the quickstart-monai example’s pinned monai dependency from 1.5.2 to 1.6.0 to address reported security advisories for the older version.

Changes:

  • Bump monai from ==1.5.2 to ==1.6.0 in the example’s pyproject.toml.

Critical issues

  • None found.

Simplicity/readability suggestions

  • None.

Consistency concerns

  • None.

Should this PR be split?

  • No.

Overall verdict

  • Looks good as a dependency-only bump in an example.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@github-actions github-actions Bot added the Contributor Used to determine what PRs (mainly) come from external contributors. label Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Contributor Used to determine what PRs (mainly) come from external contributors.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants