rayhan 6a85d1c5c4 migrate: replace zhipuai with zai-sdk to unblock pyjwt CVE fix (#17197) ...

## Summary

Old `zhipuai==2.0.1` SDK (MetaGLM/zhipuai-sdk-python-v4) requires
`pyjwt~=2.8.0`, which blocks upgrading pyjwt past 2.8.0 to address
active CVEs. The upstream project now recommends the maintained
successor [`zai-sdk`](https://github.com/zai-org/z-ai-sdk-python).

`zai-sdk` relaxes the pyjwt constraint to `>=2.9.0,<3.0.0`, allowing
pyjwt 2.13.0+. The embedding API surface (`client.embeddings.create`) is
identical, no functional changes required.

Related CVE's:

- CVE-2026-48522
- CVE-2026-48524
- CVE-2026-48525
- CVE-2026-48526
- CVE-2026-32597

2026-07-21 22:24:29 +08:00

..

advanced_rag

Py: ruff format (#17193)

2026-07-21 21:04:09 +08:00

app

Add Go service/handler tests for API contract parity (#16905)

2026-07-20 20:02:41 +08:00

flow

Support pipeline DSL modification through dataset configuration (backend) (#16991)

2026-07-17 14:40:09 +08:00

graphrag

refa: resolve tenant model refs consistently (#16744)

2026-07-09 14:02:08 +08:00

llm

migrate: replace zhipuai with zai-sdk to unblock pyjwt CVE fix (#17197)

2026-07-21 22:24:29 +08:00

nlp

Fix: get_by_id (#16765)

2026-07-09 14:52:41 +08:00

prompts

fix: soften ask_summary refusal for partially relevant knowledge (#17121)

2026-07-20 19:22:03 +08:00

res

Feat: Bitbucket connector (#12332)

2025-12-31 17:18:30 +08:00

svr

Fix cancel ingest task, it will be stilling running and show internal server error (#836) (#16945)

2026-07-15 18:33:51 +08:00

utils

fix(metadata): discover ES fields after sparse table chunks (#16949)

2026-07-16 13:41:46 +08:00

__init__.py

Fix: incorrect async chat streamly output (#11679)

2025-12-03 11:15:45 +08:00

benchmark.py

refa: resolve tenant model refs consistently (#16744)

2026-07-09 14:02:08 +08:00

settings.py

Move api.settings to common.settings (#11036)

2025-11-06 09:36:38 +08:00