refact(client): use rich handle for log

[imbajin]

• upgrade gradio to the last 4.x version
• enhance vid embedding dis log
• refactor the log frame/usage [V1]
• change the default rag option

---

New:

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

hugegraph-llm/requirements.txt

Name	Version	Vulnerability	Severity
gradio	~> 4.44.1	Gradio lacks integrity checking on the downloaded FRP client	high
		Gradio has a race condition in update_root_in_config may redirect user traffic	high
		Gradio uses insecure communication between the FRP client and server	high
		Gradio's `is_in_or_equal` function may be bypassed	moderate
		Gradio's CORS origin validation accepts the null origin	moderate
		Gradio vulnerable to SSRF in the path parameter of /queue/join	moderate
		Gradio has several components with post-process steps allow arbitrary file leaks	moderate
		Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files	moderate
		Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list	low

Scanned Manifest Files

hugegraph-llm/requirements.txt

• gradio@~> 4.44.1
• gradio@~> 4.43.0

hugegraph-python-client/requirements.txt

• decorator@~> 5.1.1
• requests@~> 2.32.0
• rich@~> 13.9.4
• setuptools@~> 70.0.0
• urllib3@~> 2.2.2
• [email protected]
• [email protected]
• [email protected]
• [email protected]

[imbajin]

TODO: upgrade to 5.x to avoid sec issues

And ignore it for now ⚠️

[liuxiaocs7]

+1