chore: bump hedera-guardian-ai-toolkit deps#6060
Merged
Merged
Conversation
Consolidates 34 Dependabot dependency bumps across the toolkit root and its five sub-packages. Refreshes all poetry.lock files via 'poetry update' and widens the pytest constraint to ^9.0.0 in three sub-packages so their lockfiles can reach pytest 9.0.3. The fastmcp pin (2.14.5) is intentionally held while its 2.x to 3.x migration is handled separately (PR #5916). Captures the pydantic 2.13 JSON Schema change to the inline-snapshot in test_list_tools (now emits the wrapper class docstring as a description). Signed-off-by: Alex Piatakov <alex.piatakov@swirldslabs.com>
This was referenced May 12, 2026
Closed
Closed
Closed
This was referenced May 12, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Consolidates 34 open Dependabot dependency bumps against
hedera-guardian-ai-toolkitand its five sub-packages into a single change. Allpoetry.lockfiles were refreshed viapoetry updateagainst the existing pyproject constraints, with three constraint widenings to let pytest reach 9.0.3.Direct constraint changes
packages/document_ingestion_worker/pyproject.toml:pytest = "^7.4.0"→"^9.0.0"packages/vector_store/pyproject.toml:pytest = "^8.0.0"→"^9.0.0"packages/policy_schema_builder/pyproject.toml:pytest = "^8.0.0"→"^9.0.0"fastmcpis intentionally held at2.14.5in both the root andhedera_guardian_mcp_server; its 2 → 3 major upgrade is left for a dedicated migration PR.Resolved target deps in the lockfiles (at or above the version each Dependabot PR requested)
Test snapshot update
tests/hedera_guardian_mcp_server/unit/test_mcp_server_endpoints.py— pydantic 2.13's JSON schema generator now emits the wrapper class docstring, so the inline snapshot intest_list_toolsgains two"description": "Generic wrapper for non-object return types."entries and one block-string reformat.Supersedes (close after merge): #5845, #5846, #5888, #5890, #5891, #5892, #5914, #5920, #5921, #5922, #5930, #5931, #5940, #5947, #5948, #5949, #5950, #5965, #5966, #5970, #5972, #5981, #5982, #5984, #5985, #5986, #5989, #6041, #6042, #6055, #6056, #6057, #6058, #6059. fastmcp PR #5916 is deliberately excluded.