Rasa

Latest version: v3.6.21

Safety actively analyzes 724206 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 17 of 51

3.3.5

Not secure
No significant changes.

3.3.4

Not secure
Improvements
- [11996](https://github.com/rasahq/rasa/issues/11996): Add capability to send compressed body in HTTP request to action server.
Use COMPRESS_ACTION_SERVER_REQUEST=True to turn the feature on.
- [12001](https://github.com/rasahq/rasa/issues/12001): Add support for custom RulePolicy.

Bugfixes
- [11869](https://github.com/rasahq/rasa/issues/11869): Implements a new CLI option `--jwt-private-key` required to have complete support for asymmetric algorithms as specified
originally in the docs.
- [11926](https://github.com/rasahq/rasa/issues/11926): Decision to publish docs should not consider next major and minor alpha release versions.

3.3.3

Not secure
- [11792](https://github.com/rasahq/rasa/issues/11792): Bypass Windows path length restrictions upon saving and reading a model archive in `rasa.engine.storage.LocalModelStorage`.

Improvements
- [11819](https://github.com/rasahq/rasa/issues/11819): Updated tensorflow to 2.8.4.

3.3.2

Not secure
- [11762](https://github.com/rasahq/rasa/issues/11762): Added support for camembert french bert model

Bugfixes
- [11818](https://github.com/rasahq/rasa/issues/11818): Fixes `RuntimeWarning: coroutine 'Bot.set_webhook' was never awaited` issue encountered when starting the rasa server,
which caused the Telegram bot to be unresponsive.

Improved Documentation
- [11768](https://github.com/rasahq/rasa/issues/11768): The documentation was updated for Buttons using messages that start with '/'.
Previously, it wrongly stated that messages with '/' bypass NLU, which is not the case.
- [11799](https://github.com/rasahq/rasa/issues/11799): Add documentation for Rasa Pro Services upgrades.

3.3.1

Not secure
- [11721](https://github.com/rasahq/rasa/issues/11721): Add docs on how to set up additional data lakes for Rasa Pro analytics pipeline.
- [11724](https://github.com/rasahq/rasa/issues/11724): Update migration guide and form docs with prescriptive recommendation on how to implement dynamic forms with custom slot mappings.

Improvements
- [11732](https://github.com/rasahq/rasa/issues/11732): Updated numpy and scikit learn version to fix vulnerabilities of those dependencies

3.3.0

Not secure
- [11561](https://github.com/rasahq/rasa/issues/11561): Added option `--offset-timestamps-by-seconds` to offset the timestamp of events when using `rasa export`
- [11578](https://github.com/rasahq/rasa/issues/11578): Rasa supports native installations on Apple Silicon (M1 / M2). Please
follow the installation instructions and take a look at the limitations.
- [11596](https://github.com/rasahq/rasa/issues/11596): Caching `Message` and `Features` fingerprints unless they are altered, saving up to 2/3 of fingerprinting time in our tests.
- [11598](https://github.com/rasahq/rasa/issues/11598): Added package versions of component dependencies as an additional part of fingerprinting calculation. Upgrading an dependency will thus lead to a retraining of the component in the future. Also, by changing fingerprint calculation, the next training after this change will be a complete retraining.
- [11623](https://github.com/rasahq/rasa/issues/11623): Export events continuously rather than loading all events in memory first when
using `rasa export`. Events will be streamed right from the start rather
than loading all events first and pushing them to the broker afterwards.
- [11568](https://github.com/rasahq/rasa/issues/11568): Adds new dependency pluggy, with which it was possible to implement new plugin functionality.
This plugin manager enables the extension and/or enhancement of the Rasa command line interface with functionality made available in the rasa-plus package.

Bugfixes
- [11575](https://github.com/rasahq/rasa/issues/11575): Fix `BlockingIOError` when running `rasa interactive`, after the upgrade of `prompt-toolkit` dependency.
- [11395](https://github.com/rasahq/rasa/issues/11395): Fixes a bug that lead to initial slot values being incorporated into all rules by default, thus breaking most rules when the slot value changed from its initial value
- [11429](https://github.com/rasahq/rasa/issues/11429): Made logistic regression classifier output a proper intent ranking and made ranking length configurable

Deprecations and Removals
- [11190](https://github.com/rasahq/rasa/issues/11190): Remove code related to Rasa X local mode as it is deprecated and scheduled for removal.

Miscellaneous internal changes
- [11548](https://github.com/rasahq/rasa/issues/11548)

Page 17 of 51

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.