RAG Pipeline Utils v3.8.3: A Clearer npm Page (No Code Changes)

DEV · By Devil's Dev · 2h ago

The Brief · written from 2 sources

RAG Pipeline Utils v3.8.2 is a security release that fixes issues in several components, including vector-store retrievers, HybridRetriever with access control, GuardrailsPipeline, plugins, AuditLogger and DevServer.
RAG Pipeline Utils v3.8.3 contains only documentation and package metadata changes, with no code changes.
The security fixes are in v3.8.2, so users on v3.8.1 or earlier should upgrade.

Why it matters

If you use RAG Pipeline Utils 3.8.1 or earlier with any of the affected components, you should upgrade to get the security fixes. The 3.8.3 release only changes the npm page.

Who’s affected

Users of QdrantRetriever, PineconeRetriever, WeaviateRetriever or PgVectorRetriever
Users of HybridRetriever with access control
Users of GuardrailsPipeline, AuditLogger or DevServer
Users of plugins loaded from .ragrc.json or hub install

What to do

Upgrade RAG Pipeline Utils to v3.8.2 or later if you are on v3.8.1 or earlier

RAG Pipeline Utils 3.8.1
RAG Pipeline Utils 3.8.2
RAG Pipeline Utils 3.8.3
#rag
#security
#npm
#retrieval
#llm-tooling

Documentation and package metadata only; no code changes. The security fixes are in 3.8.2: if you're on 3.8.1 or earlier, upgrade for them (see the v3.8.2 release ). npm install @devilsdev/rag-pipeline-utils@^3.8.3 What changed The npm page is the first thing most people see, so…

Read the full story at dev.to ↗