gingeekrishna opened a new pull request, #69399:
URL: https://github.com/apache/airflow/pull/69399

   ### Motivation
   
   Closes #69323
   
   `apache-airflow-providers-google` declares 
`google-cloud-aiplatform[evaluation]` as an unconditional base dependency. The 
`[evaluation]` extra transitively installs:
   
   - **litellm** → huggingface-hub → tokenizers (large ML stack)
   - **scikit-learn**
   - **ruamel-yaml**
   
   This bloats the install for every user of the provider, even those who only 
need `GCSHook`, `BigQueryHook`, or other features unrelated to Vertex AI 
evaluation. It also surfaces a constant stream of `litellm` proxy-server CVEs 
in `pip-audit` for all provider users.
   
   ### Changes
   
   **`providers/google/pyproject.toml`**
   - Change base dep from `google-cloud-aiplatform[evaluation]>=1.155.0` to 
`google-cloud-aiplatform>=1.155.0`
   - Add new optional extra `vertex-ai-evaluation` that provides 
`google-cloud-aiplatform[evaluation]>=1.155.0` for users who need the Rapid 
Evaluation API
   
   **`generative_model.py`**
   - Guard `from vertexai.preview.evaluation import EvalResult, EvalTask` with 
`try/except ImportError`
   - `get_eval_task()` and `run_evaluation()` raise an informative 
`ImportError` when the extra is not installed, pointing users to `pip install 
'apache-airflow-providers-google[vertex-ai-evaluation]'`
   
   ### Upgrade path
   
   Users who rely on Vertex AI evaluation operators (`RunEvaluationOperator` 
etc.) add the explicit extra:
   ```bash
   pip install 'apache-airflow-providers-google[vertex-ai-evaluation]'
   ```
   All other users get a smaller, CVE-quieter install with no behaviour change.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to