Skip to content

Commit d224dc2

Browse files
committed
chore(deps): relax redis pin to support 6.x/7.x
Bumps the constraint from redis>=5.2.0,<6 to redis>=5.2.0,<8. The previous ceiling was a Stainless template default with no specific incompat — only adapter_redis.py imports the client, and the API surface (from_url, async pipeline, xadd/xread/expire/delete) is unaffected by redis-py 6.0 and 7.0 breaking changes (cluster/sentinel SSL defaults, search dialect, etc. don't apply here). Relaxing the pin resolves recurring Mend false-positive findings (CVE-2021-31294 mis-attributed to the Python client) for every agentex-sdk consumer.
1 parent 84dbf72 commit d224dc2

3 files changed

Lines changed: 39 additions & 5 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ dependencies = [
2929
"jsonref>=1.1.0,<2",
3030
"temporalio>=1.26.0,<2",
3131
"aiohttp>=3.10.10,<4",
32-
"redis>=5.2.0,<6",
32+
"redis>=5.2.0,<8",
3333
"litellm>=1.83.7,<2",
3434
"kubernetes>=25.0.0,<36.0.0",
3535
"jinja2>=3.1.3,<4",

requirements-dev.lock

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -112,10 +112,13 @@ frozenlist==1.8.0
112112
# via aiosignal
113113
fsspec==2026.3.0
114114
# via huggingface-hub
115+
genai-prices==0.0.61
116+
# via pydantic-ai-slim
115117
google-auth==2.49.1
116118
# via kubernetes
117119
griffelib==2.0.2
118120
# via openai-agents
121+
# via pydantic-ai-slim
119122
h11==0.16.0
120123
# via httpcore
121124
# via uvicorn
@@ -126,12 +129,15 @@ httpcore==1.0.9
126129
httpx==0.28.1
127130
# via agentex-sdk
128131
# via anthropic
132+
# via genai-prices
129133
# via httpx-aiohttp
130134
# via huggingface-hub
131135
# via langsmith
132136
# via litellm
133137
# via mcp
134138
# via openai
139+
# via pydantic-ai-slim
140+
# via pydantic-graph
135141
# via respx
136142
# via scale-gp
137143
# via scale-gp-beta
@@ -196,6 +202,8 @@ langsmith==0.7.22
196202
# via langchain-core
197203
litellm==1.83.7
198204
# via agentex-sdk
205+
logfire-api==4.33.0
206+
# via pydantic-graph
199207
markdown-it-py==3.0.0
200208
# via rich
201209
markupsafe==3.0.3
@@ -236,6 +244,7 @@ opentelemetry-api==1.40.0
236244
# via ddtrace
237245
# via opentelemetry-sdk
238246
# via opentelemetry-semantic-conventions
247+
# via pydantic-ai-slim
239248
opentelemetry-sdk==1.40.0
240249
# via agentex-sdk
241250
opentelemetry-semantic-conventions==0.61b0
@@ -287,18 +296,25 @@ pydantic==2.12.5
287296
# via agentex-sdk
288297
# via anthropic
289298
# via fastapi
299+
# via genai-prices
290300
# via langchain-core
291301
# via langsmith
292302
# via litellm
293303
# via mcp
294304
# via openai
295305
# via openai-agents
306+
# via pydantic-ai-slim
307+
# via pydantic-graph
296308
# via pydantic-settings
297309
# via python-on-whales
298310
# via scale-gp
299311
# via scale-gp-beta
312+
pydantic-ai-slim==1.101.0
313+
# via agentex-sdk
300314
pydantic-core==2.41.5
301315
# via pydantic
316+
pydantic-graph==1.101.0
317+
# via pydantic-ai-slim
302318
pydantic-settings==2.13.1
303319
# via mcp
304320
pygments==2.19.2
@@ -308,7 +324,6 @@ pygments==2.19.2
308324
# via rich
309325
pyjwt==2.12.1
310326
# via mcp
311-
# via redis
312327
pyright==1.1.399
313328
pytest==8.4.2
314329
# via agentex-sdk
@@ -339,7 +354,7 @@ pyzmq==27.1.0
339354
# via jupyter-client
340355
questionary==2.1.1
341356
# via agentex-sdk
342-
redis==5.3.1
357+
redis==7.4.0
343358
# via agentex-sdk
344359
referencing==0.37.0
345360
# via jsonschema
@@ -459,6 +474,8 @@ typing-inspection==0.4.2
459474
# via fastapi
460475
# via mcp
461476
# via pydantic
477+
# via pydantic-ai-slim
478+
# via pydantic-graph
462479
# via pydantic-settings
463480
tzdata==2025.3
464481
# via agentex-sdk

requirements.lock

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -99,10 +99,13 @@ frozenlist==1.8.0
9999
# via aiosignal
100100
fsspec==2026.3.0
101101
# via huggingface-hub
102+
genai-prices==0.0.61
103+
# via pydantic-ai-slim
102104
google-auth==2.49.1
103105
# via kubernetes
104106
griffelib==2.0.2
105107
# via openai-agents
108+
# via pydantic-ai-slim
106109
h11==0.16.0
107110
# via httpcore
108111
# via uvicorn
@@ -113,12 +116,15 @@ httpcore==1.0.9
113116
httpx==0.28.1
114117
# via agentex-sdk
115118
# via anthropic
119+
# via genai-prices
116120
# via httpx-aiohttp
117121
# via huggingface-hub
118122
# via langsmith
119123
# via litellm
120124
# via mcp
121125
# via openai
126+
# via pydantic-ai-slim
127+
# via pydantic-graph
122128
# via scale-gp
123129
# via scale-gp-beta
124130
httpx-aiohttp==0.1.12
@@ -180,6 +186,8 @@ langsmith==0.7.22
180186
# via langchain-core
181187
litellm==1.83.7
182188
# via agentex-sdk
189+
logfire-api==4.33.0
190+
# via pydantic-graph
183191
markdown-it-py==4.0.0
184192
# via rich
185193
markupsafe==3.0.3
@@ -214,6 +222,7 @@ opentelemetry-api==1.40.0
214222
# via ddtrace
215223
# via opentelemetry-sdk
216224
# via opentelemetry-semantic-conventions
225+
# via pydantic-ai-slim
217226
opentelemetry-sdk==1.40.0
218227
# via agentex-sdk
219228
opentelemetry-semantic-conventions==0.61b0
@@ -260,18 +269,25 @@ pydantic==2.12.5
260269
# via agentex-sdk
261270
# via anthropic
262271
# via fastapi
272+
# via genai-prices
263273
# via langchain-core
264274
# via langsmith
265275
# via litellm
266276
# via mcp
267277
# via openai
268278
# via openai-agents
279+
# via pydantic-ai-slim
280+
# via pydantic-graph
269281
# via pydantic-settings
270282
# via python-on-whales
271283
# via scale-gp
272284
# via scale-gp-beta
285+
pydantic-ai-slim==1.101.0
286+
# via agentex-sdk
273287
pydantic-core==2.41.5
274288
# via pydantic
289+
pydantic-graph==1.101.0
290+
# via pydantic-ai-slim
275291
pydantic-settings==2.13.1
276292
# via mcp
277293
pygments==2.20.0
@@ -281,7 +297,6 @@ pygments==2.20.0
281297
# via rich
282298
pyjwt==2.12.1
283299
# via mcp
284-
# via redis
285300
pytest==9.0.2
286301
# via agentex-sdk
287302
# via pytest-asyncio
@@ -308,7 +323,7 @@ pyzmq==27.1.0
308323
# via jupyter-client
309324
questionary==2.1.1
310325
# via agentex-sdk
311-
redis==5.3.1
326+
redis==7.4.0
312327
# via agentex-sdk
313328
referencing==0.37.0
314329
# via jsonschema
@@ -424,6 +439,8 @@ typing-inspection==0.4.2
424439
# via fastapi
425440
# via mcp
426441
# via pydantic
442+
# via pydantic-ai-slim
443+
# via pydantic-graph
427444
# via pydantic-settings
428445
tzdata==2025.3
429446
# via agentex-sdk

0 commit comments

Comments
 (0)