Skip to content

chore: Dev to Main - #728

Open
PadhiAjit-Microsoft wants to merge 5 commits into
mainfrom
dev
Open

PadhiAjit-Microsoft wants to merge 5 commits into
mainfrom
dev

Conversation

@PadhiAjit-Microsoft

@PadhiAjit-Microsoft PadhiAjit-Microsoft commented Nov 6, 2026 •

Copy link
Copy Markdown
Contributor

Purpose

  • This pull request updates dependency versions and constraints across the ContentProcessor, ContentProcessorAPI, ContentProcessorWorkflow, and ContentProcessorWeb projects to address security, compatibility, and feature improvements. The changes include upgrading several core and development dependencies, adding new required packages, and introducing or updating dependency constraints for better environment consistency.

Dependency Upgrades and Additions

  • Upgraded core dependencies for improved compatibility and security, including certifi, dnspython, pillow, pymongo, and others in both pyproject.toml and requirements.txt files across ContentProcessor and ContentProcessorAPI. [1] [2] [3] [4] [5] [6] [7]
  • Added new dependencies such as agent-framework-openai, aiohttp, jinja2, tenacity, and mem0ai to support new features or integrations in ContentProcessor and ContentProcessorWorkflow. [1] [2] [3]

Development and Tooling Improvements

  • Updated development dependencies, including black and ruff, to newer versions for enhanced linting and formatting in both ContentProcessorAPI and ContentProcessorWorkflow. [1] [2] [3]
  • Introduced or updated [tool.uv] constraint-dependencies sections to enforce minimum versions for key packages (dnspython, pillow, filelock, virtualenv, etc.), ensuring consistent environments during development and CI. [1] [2] [3]

JavaScript Dependency Updates

  • Upgraded several JavaScript dependencies in ContentProcessorWeb/package.json, including body-parser, launch-editor, and follow-redirects, to address security or compatibility issues. [1] [2]

Other Notable Changes

  • Updated authlib and added mem0ai in ContentProcessorWorkflow to support authentication and memory features.
  • Aligned dependency versions across multiple files for consistency and to prevent environment mismatches. (all references above)

These updates help maintain security, compatibility, and feature parity across the codebase while improving developer experience and reliability.

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

@github-actions

github-actions Bot commented Nov 6, 2026

Copy link
Copy Markdown

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL122516786% 
report-only-changed-files is enabled. No files were changed during this commit :)

Tests Skipped Failures Errors Time
244 0 💤 0 ❌ 0 🔥 2.299s ⏱️

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The Agent Framework dependency split and mem0ai beta pin affect production agent/memory paths excluded from CI, with no recorded startup or golden-path compatibility validation.

No open issues 🎉

What changed in this PR

This PR refreshes dependencies across the content processor, API, workflow service, and web application. It also replaces the Agent Framework umbrella dependency with explicit core and OpenAI packages.

Changes:

  • Updates Python dependency pins and adds minimum-version constraints.
  • Adjusts processor and workflow dependencies, including adding mem0ai to the workflow service.
  • Updates web overrides for body-parser, launch-editor, and follow-redirects.
File Description
src/​ContentProcessorWorkflow/​pyproject.toml Revises Agent Framework dependencies, adds mem0ai, and updates pins and constraints.
src/​ContentProcessorWeb/​package.json Updates three transitive dependency overrides.
src/​ContentProcessorAPI/​requirements.txt Updates certificate, DNS, and MongoDB dependency pins.
src/​ContentProcessorAPI/​pyproject.toml Updates dependency and formatter pins; adds minimum-version constraints.
src/​ContentProcessor/​requirements.txt Updates certificate, DNS, Pillow, and MongoDB dependency pins.
src/​ContentProcessor/​pyproject.toml Revises Agent Framework dependencies, adds explicit runtime dependencies, and updates pins and constraints.

Review effort: Balanced

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants