Rasa

Latest version: v3.6.20

Safety actively analyzes 628040 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 49

3.5.7

Not secure
Bugfixes
- [12314](https://github.com/rasahq/rasa/issues/12314): `SlotSet` events will be emitted when the value set by the custom action is the same as the existing value of the slot. This was fixed for `AugmentedMemoizationPolicy` to work properly with truncated trackers.

To restore the previous behaviour, the custom action can return a SlotSet only if the slot value has changed. For example,


class CustomAction(Action):
def name(self) -> Text:
return "custom_action"

def run(self, dispatcher: CollectingDispatcher,
tracker: Tracker,
domain: Dict[Text, Any]) -> List[Dict[Text, Any]]:
current value of the slot
slot_value = tracker.get_slot('my_slot')

value of the entity
this is parsed from the user utterance
entity_value = next(tracker.get_latest_entity_values("entity_name"), None)

if slot_value != entity_value:
return[SlotSet("my_slot", entity_value)]

3.5.6

Not secure
Bugfixes
- [12280](https://github.com/rasahq/rasa/issues/12280): Addresses Regular Expression Denial of Service vulnerability in slack connector (https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS)
- [12325](https://github.com/rasahq/rasa/issues/12325): Fix parsing of RabbitMQ URL provided in `endpoints.yml` file to include vhost path and query parameters.
Re-allows inclusion of credentials in the URL as a regression fix (this was supported in 2.x).

3.5.5

Not secure
Bugfixes
- [12268](https://github.com/rasahq/rasa/issues/12268): Allow slot mapping parameter `intent` to accept a list of intent names (as strings), in addition to accepting an intent name as a single string.
- [12271](https://github.com/rasahq/rasa/issues/12271): Fix `BlockingIOError` when running `rasa shell` on utterances with more than 5KB of text.
- [12286](https://github.com/rasahq/rasa/issues/12286): Use `ruamel.yaml` round-trip loader in order to preserve all comments after appending `assistant_id` to `config.yml`.
- [12295](https://github.com/rasahq/rasa/issues/12295): Fix `AttributeError: 'NoneType' object has no attribute 'send_response'` caused by retrieving tracker via `GET /conversations/{conversation_id}/tracker` endpoint when `action_session_start` is customized in a custom action.
This was addressed by passing an instance of `CollectingOutputChannel` to the method retrieving the tracker from the `MessageProcessor`.

Improved Documentation
- [12272](https://github.com/rasahq/rasa/issues/12272): Updated AWS model loading documentation to indicate what should `AWS_ENDPOINT_URL` environment variable be set to.
Added integration test for AWS model loading.
- [12279](https://github.com/rasahq/rasa/issues/12279): Updated Rasa Pro Services documentation to add `KAFKA_SSL_CA_LOCATION` environment variable. Allows connections over SSL to Kafka
- [12290](https://github.com/rasahq/rasa/issues/12290): Added note to CLI documentation to address encoding and color issues on certain Windows terminals

Miscellaneous internal changes
- [12267](https://github.com/rasahq/rasa/issues/12267)

3.5.4

Not secure
Bugfixes
- [12226](https://github.com/rasahq/rasa/issues/12226): Fix issue with failures while publishing events to RabbitMQ after a RabbitMQ restart.
The fix consists of pinning `aio-pika` dependency to `8.2.3`, since this issue was introduced in `aio-pika` v`8.2.4`.

Miscellaneous internal changes
- [12230](https://github.com/rasahq/rasa/issues/12230), [#12232](https://github.com/rasahq/rasa/issues/12232), [#12238](https://github.com/rasahq/rasa/issues/12238)

3.5.3

Not secure
Improved Documentation
- [12209](https://github.com/rasahq/rasa/issues/12209): Add new Rasa Pro page in docs, together with minimal content changes.

3.5.2

Not secure
Improvements
- [12144](https://github.com/rasahq/rasa/issues/12144): Add a self-reference of the synonym in the EntitySynonymMapper to handle entities extracted in a casing different to synonym case. (For example if a synonym `austria` is added, entities extracted with any alternate casing of the synonym will also be mapped to `austria`). It addresses ATO-616

Bugfixes
- [12189](https://github.com/rasahq/rasa/issues/12189): Make custom actions inheriting from rasa-sdk `FormValidationAction` parent class an exception of the `selective_domain` rule and always send them domain.
- [12193](https://github.com/rasahq/rasa/issues/12193): Fix 2 issues detected with the HTTP API:
- The `GET /conversations/{conversation_id}/tracker` endpoint was not returning the tracker with all sessions when `include_events` query parameter was set to `ALL`.
The fix constituted in using `TrackerStore.retrieve_full_tracker` method instead of `TrackerStore.retrieve` method in the function handling the `GET /conversations/{conversation_id}/tracker` endpoint.
Implemented or updated this method across all tracker store subclasses.
- The `GET /conversations/{conversation_id}/story` endpoint was not returning all the stories for all sessions when `all_sessions` query parameter was set to `true`.
The fix constituted in using all events of the tracker to be converted in stories instead of only the `applied_events`.

Improved Documentation
- [12110](https://github.com/rasahq/rasa/issues/12110): Add documentation for secrets managers.

Page 9 of 49

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.