Repository navigation
chore: Dev to Main - #728
Open
PadhiAjit-Microsoft wants to merge 5 commits into
Open
PadhiAjit-Microsoft wants to merge 5 commits into
PadhiAjit-Microsoft wants to merge 5 commits into
Conversation
chore: main to dev merge
fix: dependabot critical and high vulnerabilities
Contributor
There was a problem hiding this comment.
🔵 Needs a closer look
The Agent Framework dependency split and mem0ai beta pin affect production agent/memory paths excluded from CI, with no recorded startup or golden-path compatibility validation.
No open issues 🎉
What changed in this PR
This PR refreshes dependencies across the content processor, API, workflow service, and web application. It also replaces the Agent Framework umbrella dependency with explicit core and OpenAI packages.
Changes:
- Updates Python dependency pins and adds minimum-version constraints.
- Adjusts processor and workflow dependencies, including adding
mem0aito the workflow service. - Updates web overrides for
body-parser,launch-editor, andfollow-redirects.
| File | Description |
|---|---|
src/ContentProcessorWorkflow/pyproject.toml |
Revises Agent Framework dependencies, adds mem0ai, and updates pins and constraints. |
src/ContentProcessorWeb/package.json |
Updates three transitive dependency overrides. |
src/ContentProcessorAPI/requirements.txt |
Updates certificate, DNS, and MongoDB dependency pins. |
src/ContentProcessorAPI/pyproject.toml |
Updates dependency and formatter pins; adds minimum-version constraints. |
src/ContentProcessor/requirements.txt |
Updates certificate, DNS, Pillow, and MongoDB dependency pins. |
src/ContentProcessor/pyproject.toml |
Revises Agent Framework dependencies, adds explicit runtime dependencies, and updates pins and constraints. |
Review effort: Balanced
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
ContentProcessor,ContentProcessorAPI,ContentProcessorWorkflow, andContentProcessorWebprojects to address security, compatibility, and feature improvements. The changes include upgrading several core and development dependencies, adding new required packages, and introducing or updating dependency constraints for better environment consistency.Dependency Upgrades and Additions
certifi,dnspython,pillow,pymongo, and others in bothpyproject.tomlandrequirements.txtfiles acrossContentProcessorandContentProcessorAPI. [1] [2] [3] [4] [5] [6] [7]agent-framework-openai,aiohttp,jinja2,tenacity, andmem0aito support new features or integrations inContentProcessorandContentProcessorWorkflow. [1] [2] [3]Development and Tooling Improvements
blackandruff, to newer versions for enhanced linting and formatting in bothContentProcessorAPIandContentProcessorWorkflow. [1] [2] [3][tool.uv]constraint-dependencies sections to enforce minimum versions for key packages (dnspython,pillow,filelock,virtualenv, etc.), ensuring consistent environments during development and CI. [1] [2] [3]JavaScript Dependency Updates
ContentProcessorWeb/package.json, includingbody-parser,launch-editor, andfollow-redirects, to address security or compatibility issues. [1] [2]Other Notable Changes
authliband addedmem0aiinContentProcessorWorkflowto support authentication and memory features.These updates help maintain security, compatibility, and feature parity across the codebase while improving developer experience and reliability.
Does this introduce a breaking change?
Golden Path Validation
Deployment Validation
What to Check
Verify that the following are valid
Other Information