Fix JSON crew version pin#6342
Conversation
There was a problem hiding this comment.
Summary: This PR updates JSON crew scaffolding and installation guidance to pin crewai[tools] to the CLI package version. No exploitable security vulnerabilities were identified in the added code.
Risk: Low risk. The changes affect dependency version strings and user-facing install guidance, without introducing new authentication, authorization, data handling, or network-exposed functionality.
📝 WalkthroughWalkthroughThe CLI now computes a bounded ChangesDynamic CrewAI tools dependency
Suggested reviewers
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
Tests
Note
Low Risk
Scaffolding and user-facing install text only; no runtime crew execution or dependency resolution logic changes beyond what new projects declare in pyproject.toml.
Overview
Generated projects no longer pin a fixed
crewai[tools]==…(including old prerelease strings).get_crewai_dependency_rangeandget_crewai_tools_dependencyinversion.pybuild a constraint from the installed CLI version:>=that version,<next major.0.0(e.g.crewai[tools]>=1.15.0,<2.0.0).That value is wired through JSON crew creation, flow/crew/tool templates,
copy_template, and custom tool scaffolding via the{{crewai_tools_dependency}}placeholder. The “CLI withoutcrewai” install hint inrun_crewnow uses the same helper and drops prerelease-only wording.Tests were updated to assert the new range in generated
pyproject.tomlfiles and install messages.Reviewed by Cursor Bugbot for commit 218b48c. Bugbot is set up for automated code reviews on this repo. Configure here.
Summary by CodeRabbit
pyproject.tomlfiles now use the correctcrewai[tools]dependency range based on the installed CLI/next supported major version, instead of a fixed prerelease pin.crewai[tools]constraint.crewai[tools]range.crewai[tools]>=...<...dependency behavior in generated artifacts.