Fix oneclick issues.

[ZePan110]

Description

Fix oneclick issues.

Issues

https://github.com/opea-project/GenAIExamples/actions/runs/19187255017/job/55156256685

Type of change

List the type of change like below. Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds new functionality)
• Breaking change (fix or feature that would break existing design and interface)
• Others (enhancement, documentation, validation, etc.)

Dependencies

List the newly introduced 3rd party dependency if exists.

Tests

https://github.com/opea-project/GenAIExamples/actions/runs/19321500664/job/55263726449

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

one_click_deploy/requirements.txt

Name	Version	Vulnerability	Severity
urllib3	2.2.3	urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation	moderate
		urllib3 does not control redirects in browsers and Node.js	moderate

License Issues

one_click_deploy/requirements.txt

Package	Version	License	Issue Type
ruamel-yaml	0.18.16	Null	Unknown License
ruamel-yaml-clib	0.2.8	Null	Unknown License
certifi	2025.11.12	Null	Unknown License

Scanned Files

• one_click_deploy/requirements.txt

[Copilot]

Pull Request Overview

This PR updates the one-click deployment workflow to support multiple operating systems and pins dependency versions with cryptographic hashes for improved security and reproducibility.

Key changes:

• Added OS selection capability (debian/openeuler) to the manual workflow
• Converted requirements.txt to use pip-compile with hash verification for all dependencies
• Created requirements.in as the source file for dependency specifications

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
one_click_deploy/requirements.txt	Replaced simple dependency list with pip-compile generated pinned versions including SHA256 hashes for security
one_click_deploy/requirements.in	New source file listing the three required dependencies for pip-compile
.github/workflows/manual-one-click-workflow.yml	Added OS parameter to workflow allowing selection between debian and openeuler platforms

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.