RAG Pipeline Utils v3.8.2: Security Fixes and a Re-ingest Check

DEV · By Devil's Dev · 3h ago

The Brief · written from 2 sources

RAG Pipeline Utils v3.8.2 is a security release that fixes issues in several components, including vector-store retrievers, HybridRetriever with access control, GuardrailsPipeline, plugins, AuditLogger and DevServer.
RAG Pipeline Utils v3.8.3 contains only documentation and package metadata changes, with no code changes.
The security fixes are in v3.8.2, so users on v3.8.1 or earlier should upgrade.

Why it matters

If you use RAG Pipeline Utils 3.8.1 or earlier with any of the affected components, you should upgrade to get the security fixes. The 3.8.3 release only changes the npm page.

Who’s affected

Users of QdrantRetriever, PineconeRetriever, WeaviateRetriever or PgVectorRetriever
Users of HybridRetriever with access control
Users of GuardrailsPipeline, AuditLogger or DevServer
Users of plugins loaded from .ragrc.json or hub install

What to do

Upgrade RAG Pipeline Utils to v3.8.2 or later if you are on v3.8.1 or earlier

RAG Pipeline Utils 3.8.1
RAG Pipeline Utils 3.8.2
RAG Pipeline Utils 3.8.3
#rag
#security
#npm
#retrieval
#llm-tooling

A security release. Upgrade now if you use the vector-store retrievers ( QdrantRetriever , PineconeRetriever , WeaviateRetriever , PgVectorRetriever ) or HybridRetriever with access control, GuardrailsPipeline , plugins from .ragrc.json or hub install , AuditLogger , DevServer or…

Read the full story at dev.to ↗