Merge pull request #429 from gn00295120/fix/pin-litellm-supply-chain

fix: pin liteLLM <=1.82.6 to mitigate TeamPCP supply chain attack

Author: ryan-lempka

nemo/Evaluator/Custom LLM-as-a-Judge/pyproject.toml

@@ -10,7 +10,7 @@ dependencies = [
     "jinja2>=3.1.0",
     "jsonschema>=4.23.0",
     "jupyterlab>=4.4.1",
-    "litellm>=1.67.1",
+    "litellm>=1.67.1, <=1.82.6",
     "openai>=1.76.0",
     "peft>=0.15.2",
     "torch>=2.0.0",