From 4e0060a3f858f74b29dab062a279b871a2399538 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 07:47:48 +0000 Subject: [PATCH] build(deps-dev): bump the python group across 1 directory with 3 updates Updates the requirements on [langchain-core](https://github.com/langchain-ai/langchain), [webauthn](https://github.com/duo-labs/py_webauthn) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version. Updates `langchain-core` to 1.7.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](https://github.com/langchain-ai/langchain/compare/langchain-core==0.3.0...langchain-core==1.7.0) Updates `webauthn` to 3.0.1 - [Release notes](https://github.com/duo-labs/py_webauthn/releases) - [Changelog](https://github.com/duo-labs/py_webauthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/duo-labs/py_webauthn/compare/v2.0.0...v3.0.1) Updates `ruff` from 0.16.9 to 0.17.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.9...0.17.2) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.7.0 dependency-type: direct:development dependency-group: python - dependency-name: webauthn dependency-version: 3.0.1 dependency-type: direct:development dependency-group: python - dependency-name: ruff dependency-version: 0.17.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] --- pyproject.toml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 6edfeed..d0b619c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -43,15 +43,15 @@ Security = "https://github.com/SourceShift/InterLock/blob/main/SECURITY.md" [project.optional-dependencies] mcp = ["wrapt>=1.15"] -langchain = ["langchain-core>=0.3,<0.4"] +langchain = ["langchain-core>=0.3,<1.8"] # The control plane's server, driver and signing primitives. Nothing in the # core package imports these; `import interlock.cloud` stays dependency-free. # cryptography 46 is audited out (PYSEC-2026-3552/3553/3554, GHSA-537c-gmf6-5ccf); # 50.x is the current line, and the cloud suite is exercised against it. -cloud = ["uvicorn>=0.30,<1", "psycopg[binary]>=3.1,<4", "cryptography>=50,<52", "webauthn>=2.0,<3"] +cloud = ["uvicorn>=0.30,<1", "psycopg[binary]>=3.1,<4", "cryptography>=50,<52", "webauthn>=2.0,<4"] # ruff is pinned here too: CI pins it (an unpinned linter turns a green repo red # on a release schedule), and a contributor should run the same version as CI. -dev = ["pytest>=7", "langchain-core>=0.3,<0.4", "ruff==0.16.9", +dev = ["pytest>=7", "langchain-core>=0.3,<1.8", "ruff==0.17.2", # tests/test_cloud_compose.py parses the shipped compose file. "PyYAML>=6,<7", # scripts/check_site.py reads the Zensical TOML; tomllib is 3.11+