Skip to content

Commit 52682ca

Browse files
authored
Merge branch 'main' into oauth-userId-claim-ui
2 parents 3152ec6 + 62bd371 commit 52682ca

11 files changed

Lines changed: 505 additions & 470 deletions

File tree

go/go.mod

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ require (
99
// adk dependencies
1010
github.com/a2aproject/a2a-go v0.3.15
1111
github.com/abiosoft/ishell/v2 v2.0.2
12-
github.com/anthropics/anthropic-sdk-go v1.42.0
12+
github.com/anthropics/anthropic-sdk-go v1.43.0
1313
github.com/aws/aws-sdk-go-v2/config v1.32.17
1414
github.com/briandowns/spinner v1.23.2
1515
github.com/charmbracelet/bubbles v1.0.0
@@ -29,7 +29,7 @@ require (
2929
github.com/kagent-dev/mockllm v0.0.5
3030
github.com/modelcontextprotocol/go-sdk v1.6.0
3131
github.com/muesli/reflow v0.3.0
32-
github.com/openai/openai-go/v3 v3.35.0
32+
github.com/openai/openai-go/v3 v3.36.0
3333
github.com/pgvector/pgvector-go v0.3.0
3434
github.com/prometheus/client_golang v1.23.2
3535
github.com/spf13/afero v1.15.0
@@ -47,14 +47,14 @@ require (
4747
go.uber.org/zap v1.28.0
4848
golang.org/x/text v0.37.0
4949
google.golang.org/adk v1.2.0
50-
google.golang.org/genai v1.56.0
50+
google.golang.org/genai v1.57.0
5151
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
5252
gopkg.in/yaml.v3 v3.0.1
53-
k8s.io/api v0.36.0
54-
k8s.io/apimachinery v0.36.0
55-
k8s.io/client-go v0.36.0
56-
sigs.k8s.io/agent-sandbox v0.4.5
57-
sigs.k8s.io/controller-runtime v0.24.0
53+
k8s.io/api v0.36.1
54+
k8s.io/apimachinery v0.36.1
55+
k8s.io/client-go v0.36.1
56+
sigs.k8s.io/agent-sandbox v0.4.6
57+
sigs.k8s.io/controller-runtime v0.24.1
5858
sigs.k8s.io/yaml v1.6.0
5959
trpc.group/trpc-go/trpc-a2a-go v0.2.5
6060
)
@@ -65,7 +65,7 @@ require (
6565
github.com/golang/protobuf v1.5.4
6666
github.com/google/jsonschema-go v0.4.3
6767
github.com/jackc/pgx/v5 v5.9.2
68-
github.com/ollama/ollama v0.23.2
68+
github.com/ollama/ollama v0.24.0
6969
github.com/testcontainers/testcontainers-go v0.42.0
7070
github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
7171
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.19.0
@@ -74,8 +74,8 @@ require (
7474
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0
7575
go.opentelemetry.io/otel/sdk/log v0.19.0
7676
golang.org/x/crypto v0.51.0
77-
google.golang.org/grpc v1.81.0
78-
k8s.io/apiextensions-apiserver v0.36.0
77+
google.golang.org/grpc v1.81.1
78+
k8s.io/apiextensions-apiserver v0.36.1
7979
)
8080

8181
require (
@@ -355,7 +355,7 @@ require (
355355
github.com/sourcegraph/go-diff v0.8.0 // indirect
356356
github.com/spf13/cast v1.10.0 // indirect
357357
github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
358-
github.com/standard-webhooks/standard-webhooks/libraries v0.0.0-20260508151727-1282bb917829 // indirect
358+
github.com/standard-webhooks/standard-webhooks/libraries v0.0.1 // indirect
359359
github.com/stbenjam/no-sprintf-host-port v0.3.1 // indirect
360360
github.com/stretchr/objx v0.5.3 // indirect
361361
github.com/subosito/gotenv v1.6.0 // indirect
@@ -423,12 +423,12 @@ require (
423423
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
424424
gopkg.in/inf.v0 v0.9.1 // indirect
425425
honnef.co/go/tools v0.7.0 // indirect
426-
k8s.io/apiserver v0.36.0 // indirect
427-
k8s.io/component-base v0.36.0 // indirect
426+
k8s.io/apiserver v0.36.1 // indirect
427+
k8s.io/component-base v0.36.1 // indirect
428428
k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3 // indirect
429429
k8s.io/klog/v2 v2.140.0 // indirect
430430
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a // indirect
431-
k8s.io/streaming v0.36.0 // indirect
431+
k8s.io/streaming v0.36.1 // indirect
432432
k8s.io/utils v0.0.0-20260507154919-ff6756f316d2 // indirect
433433
mvdan.cc/gofumpt v0.9.2 // indirect
434434
mvdan.cc/unparam v0.0.0-20251027182757-5beb8c8f8f15 // indirect

go/go.sum

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -88,8 +88,8 @@ github.com/alingse/asasalint v0.0.11 h1:SFwnQXJ49Kx/1GghOFz1XGqHYKp21Kq1nHad/0WQ
8888
github.com/alingse/asasalint v0.0.11/go.mod h1:nCaoMhw7a9kSJObvQyVzNTPBDbNpdocqrSP7t/cW5+I=
8989
github.com/alingse/nilnesserr v0.2.0 h1:raLem5KG7EFVb4UIDAXgrv3N2JIaffeKNtcEXkEWd/w=
9090
github.com/alingse/nilnesserr v0.2.0/go.mod h1:1xJPrXonEtX7wyTq8Dytns5P2hNzoWymVUIaKm4HNFg=
91-
github.com/anthropics/anthropic-sdk-go v1.42.0 h1:Zv882/dnrE4OHnwhMAsi9lwVVXRF8GtR3ofiBResYUw=
92-
github.com/anthropics/anthropic-sdk-go v1.42.0/go.mod h1:r4eaLX9tBolUrXLOrLj7eU8tmeBtoobCkM0kBsivBaY=
91+
github.com/anthropics/anthropic-sdk-go v1.43.0 h1:ShY3C7lafzHP0ze1dCxL3ZFZzvkGfXJN91DfZTG8zLM=
92+
github.com/anthropics/anthropic-sdk-go v1.43.0/go.mod h1:5cEaslQ6A9ajdL5YUvhNW57LKxEz0OAZ7WEzgZWLD7k=
9393
github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI=
9494
github.com/antlr4-go/antlr/v4 v4.13.0/go.mod h1:pfChB/xh/Unjila75QW7+VU4TSnWnnk9UTnmpPaOR2g=
9595
github.com/ashanbrown/forbidigo/v2 v2.3.1 h1:KAZijvQ7zeIBKbhikT4jCm0TLYXC4u78bTiLh/8JROI=
@@ -633,15 +633,15 @@ github.com/nishanths/predeclared v0.2.2 h1:V2EPdZPliZymNAn79T8RkNApBjMmVKh5XRpLm
633633
github.com/nishanths/predeclared v0.2.2/go.mod h1:RROzoN6TnGQupbC+lqggsOlcgysk3LMK/HI84Mp280c=
634634
github.com/nunnatsa/ginkgolinter v0.23.0 h1:x3o4DGYOWbBMP/VdNQKgSj+25aJKx2Pe6lHr8gBcgf8=
635635
github.com/nunnatsa/ginkgolinter v0.23.0/go.mod h1:9qN1+0akwXEccwV1CAcCDfcoBlWXHB+ML9884pL4SZ4=
636-
github.com/ollama/ollama v0.23.2 h1:4u+iqgeqNhXsW6v/09ycWe3FN56Wjs/Yyza+GWkpG9I=
637-
github.com/ollama/ollama v0.23.2/go.mod h1:fYIR80A1ETfL8Il9opoZ5KiN3FzskskXjk4SH04FRkU=
636+
github.com/ollama/ollama v0.24.0 h1:CBZ0ffE+cxMWRWau5yD5vXHkiZHAeuxLk+3j55u0XxQ=
637+
github.com/ollama/ollama v0.24.0/go.mod h1:lX6J1oDiqbQLNMg9qJbLyEbFwqgM4uD3VDFn6YYy2v4=
638638
github.com/onsi/ginkgo v1.16.4 h1:29JGrr5oVBm5ulCWet69zQkzWipVXIol6ygQUe/EzNc=
639639
github.com/onsi/ginkgo/v2 v2.28.2 h1:DTrMfpqxiNUyQ3Y0zhn1n3cOO2euFgQPYIpkWwxVFps=
640640
github.com/onsi/ginkgo/v2 v2.28.2/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
641641
github.com/onsi/gomega v1.39.1 h1:1IJLAad4zjPn2PsnhH70V4DKRFlrCzGBNrNaru+Vf28=
642642
github.com/onsi/gomega v1.39.1/go.mod h1:hL6yVALoTOxeWudERyfppUcZXjMwIMLnuSfruD2lcfg=
643-
github.com/openai/openai-go/v3 v3.35.0 h1:109x3epXMSE423KW2euR506GGFezcEt0s87MoWejpH0=
644-
github.com/openai/openai-go/v3 v3.35.0/go.mod h1:cdufnVK14cWcT9qA1rRtrXx4FTRsgbDPW7Ia7SS5cZo=
643+
github.com/openai/openai-go/v3 v3.36.0 h1:PXYyY/v1S6WXGBEdFoNUFqKX7p3O5az2HMXklIeRXzk=
644+
github.com/openai/openai-go/v3 v3.36.0/go.mod h1:cdufnVK14cWcT9qA1rRtrXx4FTRsgbDPW7Ia7SS5cZo=
645645
github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
646646
github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
647647
github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
@@ -747,8 +747,8 @@ github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=
747747
github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=
748748
github.com/ssgreg/nlreturn/v2 v2.2.1 h1:X4XDI7jstt3ySqGU86YGAURbxw3oTDPK9sPEi6YEwQ0=
749749
github.com/ssgreg/nlreturn/v2 v2.2.1/go.mod h1:E/iiPB78hV7Szg2YfRgyIrk1AD6JVMTRkkxBiELzh2I=
750-
github.com/standard-webhooks/standard-webhooks/libraries v0.0.0-20260508151727-1282bb917829 h1:zGlGD0Zfk2HaIo4EnUVBRhnXQ+cnGQz5X2PdBcplOyw=
751-
github.com/standard-webhooks/standard-webhooks/libraries v0.0.0-20260508151727-1282bb917829/go.mod h1:L1MQhA6x4dn9r007T033lsaZMv9EmBAdXyU/+EF40fo=
750+
github.com/standard-webhooks/standard-webhooks/libraries v0.0.1 h1:uOfcYT+3QungH6tIGSVCR/Y3KJmgJiHcojJbMTPDZAI=
751+
github.com/standard-webhooks/standard-webhooks/libraries v0.0.1/go.mod h1:L1MQhA6x4dn9r007T033lsaZMv9EmBAdXyU/+EF40fo=
752752
github.com/stbenjam/no-sprintf-host-port v0.3.1 h1:AyX7+dxI4IdLBPtDbsGAyqiTSLpCP9hWRrXQDU4Cm/g=
753753
github.com/stbenjam/no-sprintf-host-port v0.3.1/go.mod h1:ODbZesTCHMVKthBHskvUUexdcNHAQRXk9NpSsL8p/HQ=
754754
github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs=
@@ -1029,14 +1029,14 @@ google.golang.org/adk v1.2.0 h1:MfQD1/GqPfIsFNBcozNykkjdqNIdCrPH/SNqKPZF/yM=
10291029
google.golang.org/adk v1.2.0/go.mod h1:6QY5jQI7awU4WYtJqvyIkJQheCvqsGWweU6BX63USEc=
10301030
google.golang.org/api v0.272.0 h1:eLUQZGnAS3OHn31URRf9sAmRk3w2JjMx37d2k8AjJmA=
10311031
google.golang.org/api v0.272.0/go.mod h1:wKjowi5LNJc5qarNvDCvNQBn3rVK8nSy6jg2SwRwzIA=
1032-
google.golang.org/genai v1.56.0 h1:IwWrg1K0cn1/WBiPno/dYr0Q6o75NeH/bh3G4JEFERE=
1033-
google.golang.org/genai v1.56.0/go.mod h1:A3kkl0nyBjyFlNjgxIwKq70julKbIxpSxqKO5gw/gmk=
1032+
google.golang.org/genai v1.57.0 h1:qTyG2ynz5dQy2jF4CvZdLHHVslhR0heMue+zM1a4GNM=
1033+
google.golang.org/genai v1.57.0/go.mod h1:A3kkl0nyBjyFlNjgxIwKq70julKbIxpSxqKO5gw/gmk=
10341034
google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d h1:/aDRtSZJjyLQzm75d+a1wOJaqyKBMvIAfeQmoa3ORiI=
10351035
google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:etfGUgejTiadZAUaEP14NP97xi1RGeawqkjDARA/UOs=
10361036
google.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d h1:wT2n40TBqFY6wiwazVK9/iTWbsQrgk5ZfCSVFLO9LQA=
10371037
google.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
1038-
google.golang.org/grpc v1.81.0 h1:W3G9N3KQf3BU+YuCtGKJk0CmxQNbAISICD/9AORxLIw=
1039-
google.golang.org/grpc v1.81.0/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
1038+
google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
1039+
google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
10401040
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=
10411041
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
10421042
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -1060,26 +1060,26 @@ gotest.tools/v3 v3.5.2 h1:7koQfIKdy+I8UTetycgUqXWSDwpgv193Ka+qRsmBY8Q=
10601060
gotest.tools/v3 v3.5.2/go.mod h1:LtdLGcnqToBH83WByAAi/wiwSFCArdFIUV/xxN4pcjA=
10611061
honnef.co/go/tools v0.7.0 h1:w6WUp1VbkqPEgLz4rkBzH/CSU6HkoqNLp6GstyTx3lU=
10621062
honnef.co/go/tools v0.7.0/go.mod h1:pm29oPxeP3P82ISxZDgIYeOaf9ta6Pi0EWvCFoLG2vc=
1063-
k8s.io/api v0.36.0 h1:SgqDhZzHdOtMk40xVSvCXkP9ME0H05hPM3p9AB1kL80=
1064-
k8s.io/api v0.36.0/go.mod h1:m1LVrGPNYax5NBHdO+QuAedXyuzTt4RryI/qnmNvs34=
1065-
k8s.io/apiextensions-apiserver v0.36.0 h1:Wt7E8J+VBCbj4FjiBfDTK/neXDDjyJVJc7xfuOHImZ0=
1066-
k8s.io/apiextensions-apiserver v0.36.0/go.mod h1:kGDjH0msuiIB3tgsYRV0kS9GqpMYMUsQ3GHv7TApyug=
1067-
k8s.io/apimachinery v0.36.0 h1:jZyPzhd5Z+3h9vJLt0z9XdzW9VzNzWAUw+P1xZ9PXtQ=
1068-
k8s.io/apimachinery v0.36.0/go.mod h1:FklypaRJt6n5wUIwWXIP6GJlIpUizTgfo1T/As+Tyxc=
1069-
k8s.io/apiserver v0.36.0 h1:Jg5OFAENUACByUCg15CmhZAYrr5ZyJ+jodyA1mHl3YE=
1070-
k8s.io/apiserver v0.36.0/go.mod h1:mHvwdHf+qKEm+1/hYm756SV+oREOKSPnsjagOpx6Vho=
1071-
k8s.io/client-go v0.36.0 h1:pOYi7C4RHChYjMiHpZSpSbIM6ZxVbRXBy7CuiIwqA3c=
1072-
k8s.io/client-go v0.36.0/go.mod h1:ZKKcpwF0aLYfkHFCjillCKaTK/yBkEDHTDXCFY6AS9Y=
1073-
k8s.io/component-base v0.36.0 h1:hFjEktssxiJhrK1zfybkH4kJOi8iZuF+mIDCqS5+jRo=
1074-
k8s.io/component-base v0.36.0/go.mod h1:JZvIfcNHk+uck+8LhJzhSBtydWXaZNQwX2OdL+Mnwsk=
1063+
k8s.io/api v0.36.1 h1:XbL/EMj8K2aJpJtePmqUyQMsM0D4QI2pvl7YKJ20FTY=
1064+
k8s.io/api v0.36.1/go.mod h1:KOWo4ey3TINlXjeHVuwB3i+tXXnu+UcwFBHlI/9dvEo=
1065+
k8s.io/apiextensions-apiserver v0.36.1 h1:6JfYmPUsuUIHuN+3QxutXYWj492RqF5fBSx67GYK5Ks=
1066+
k8s.io/apiextensions-apiserver v0.36.1/go.mod h1:pLzZin90riwisdzKwv/GoTwENooytoIx5zWJb4Hkby8=
1067+
k8s.io/apimachinery v0.36.1 h1:G63Gjx2W+q0YD+72Vo8oY0nDnePVwnuzTmmy5ENrVSA=
1068+
k8s.io/apimachinery v0.36.1/go.mod h1:ibYOR00vW/I1kzvi5SF0dRuJ52BvKtfvRdOn35GPQ+8=
1069+
k8s.io/apiserver v0.36.1 h1:iMS5V+rPUertv5P9RaqJgmHHTuh4quWpoxchvMUY+JY=
1070+
k8s.io/apiserver v0.36.1/go.mod h1:Cby1PbLWztu0GDOxoO6iFOyyqIsziHNEW+w9zVQ22Kw=
1071+
k8s.io/client-go v0.36.1 h1:FN/K8QIT2CEDt+2WB2HnWrUANZ50AP5GII43/SP2JR0=
1072+
k8s.io/client-go v0.36.1/go.mod h1:s6rAnCtTGYDQnpNjEhSaISV+2O8jwruZ6m3QOYBFbtU=
1073+
k8s.io/component-base v0.36.1 h1:iG6GsELftXqTNG9HG6kiVjatSgAw1sf5pJ6R5a6N0kA=
1074+
k8s.io/component-base v0.36.1/go.mod h1:nf9XPlntRdqO6WMeEWAA5F93Y4ICZQdeT9GeqLDB3JI=
10751075
k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3 h1:3L6PNkMLXkU/pz3jWzaaIUz0Rs2V9h+5O51AeRC7poc=
10761076
k8s.io/gengo/v2 v2.0.0-20260408192533-25e2208e0dc3/go.mod h1:yvyl3l9E+UxlqOMUULdKTAYB0rEhsmjr7+2Vb/1pCSo=
10771077
k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
10781078
k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
10791079
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg=
10801080
k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a/go.mod h1:uGBT7iTA6c6MvqUvSXIaYZo9ukscABYi2btjhvgKGZ0=
1081-
k8s.io/streaming v0.36.0 h1:agnTxU+NFulUrtYzXUGKO3ndEa8jKwht1Kwn9nu9x+4=
1082-
k8s.io/streaming v0.36.0/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s=
1081+
k8s.io/streaming v0.36.1 h1:L+K68n4Gg940BGNNYtUBvL1WTLL0YnKT3s+P1MNAmR4=
1082+
k8s.io/streaming v0.36.1/go.mod h1:z6fV3D+NVkoeqRMtWwlUZK6U17SY/LqNzOxWL6GyR/s=
10831083
k8s.io/utils v0.0.0-20260507154919-ff6756f316d2 h1:wU4tMEhLGgIbLvXQb1cfN+EcM0wf7zC6CPF+C79jroc=
10841084
k8s.io/utils v0.0.0-20260507154919-ff6756f316d2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
10851085
mellium.im/sasl v0.3.1 h1:wE0LW6g7U83vhvxjC1IY8DnXM+EU095yeo8XClvCdfo=
@@ -1094,12 +1094,12 @@ rsc.io/omap v1.2.0 h1:c1M8jchnHbzmJALzGLclfH3xDWXrPxSUHXzH5C+8Kdw=
10941094
rsc.io/omap v1.2.0/go.mod h1:C8pkI0AWexHopQtZX+qiUeJGzvc8HkdgnsWK4/mAa00=
10951095
rsc.io/ordered v1.1.1 h1:1kZM6RkTmceJgsFH/8DLQvkCVEYomVDJfBRLT595Uak=
10961096
rsc.io/ordered v1.1.1/go.mod h1:evAi8739bWVBRG9aaufsjVc202+6okf8u2QeVL84BCM=
1097-
sigs.k8s.io/agent-sandbox v0.4.5 h1:Hp4j3xelUSQCCilTeSl12BgMr2l6COYEF6MUxZX5KJw=
1098-
sigs.k8s.io/agent-sandbox v0.4.5/go.mod h1:rrBXoA+nKZO2MIs3pTG+qOuKadX5gzMvO/nrlwC9W1w=
1097+
sigs.k8s.io/agent-sandbox v0.4.6 h1:dUUvQ+rlv4kT3CB9p2MgnPcNSMAQg6eTBrWyCiYgxYs=
1098+
sigs.k8s.io/agent-sandbox v0.4.6/go.mod h1:rrBXoA+nKZO2MIs3pTG+qOuKadX5gzMvO/nrlwC9W1w=
10991099
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 h1:hSfpvjjTQXQY2Fol2CS0QHMNs/WI1MOSGzCm1KhM5ec=
11001100
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
1101-
sigs.k8s.io/controller-runtime v0.24.0 h1:Ck6N2LdS8Lovy1o25BB4r1xjvLEKUl1s2o9kU+KWDE4=
1102-
sigs.k8s.io/controller-runtime v0.24.0/go.mod h1:vFkfY5fGt5xAC/sKb8IBFKgWPNKG9OUG29dR8Y2wImw=
1101+
sigs.k8s.io/controller-runtime v0.24.1 h1:miPEwrmirImAvgME1L9qebGHrOnGJoVmVdtOU9fRfo4=
1102+
sigs.k8s.io/controller-runtime v0.24.1/go.mod h1:vFkfY5fGt5xAC/sKb8IBFKgWPNKG9OUG29dR8Y2wImw=
11031103
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
11041104
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
11051105
sigs.k8s.io/kube-api-linter v0.0.0-20260505141229-de8f85687fd2 h1:8u/hAnFYeb1AvOyaVbMmlLtlqopZhjN8h5gKg7JTa74=

python/Dockerfile

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
### STAGE 1: base image
22
ARG BASE_IMAGE_REGISTRY=cgr.dev
3+
ARG UV_VERSION=0.11.15
4+
FROM ghcr.io/astral-sh/uv:${UV_VERSION} AS uv-bin
35
FROM $BASE_IMAGE_REGISTRY/chainguard/wolfi-base:latest AS base-os
46

57
# Build arg to control SSL verification (set DISABLE_SSL_VERIFY=1 to skip SSL checks)
@@ -14,12 +16,16 @@ RUN --mount=type=cache,target=/var/cache/apk,rw \
1416
if [ "$DISABLE_SSL_VERIFY" = "1" ]; then \
1517
echo "WARNING: Disabling SSL verification for apk (development only)"; \
1618
apk update --no-check-certificate && apk add --no-check-certificate \
17-
curl openssl bash git ca-certificates uv libstdc++; \
19+
curl openssl bash git ca-certificates libstdc++; \
1820
else \
1921
apk update && apk add \
20-
curl openssl bash git ca-certificates uv libstdc++; \
22+
curl openssl bash git ca-certificates libstdc++; \
2123
fi
2224

25+
# Install uv from upstream so we control the version and pick up rkyv fixes
26+
# independently of the Wolfi apk release cadence.
27+
COPY --from=uv-bin /uv /uvx /usr/local/bin/
28+
2329
### STAGE 2: python
2430
FROM base-os AS python-os
2531
ARG TOOLS_PYTHON_VERSION=3.13
@@ -74,6 +80,7 @@ RUN --mount=type=cache,target=/root/.npm \
7480
git clone --depth 1 --revision=ef4afdef4d711ba21a507d7f7369e305f7d3dbfa https://github.com/anthropic-experimental/sandbox-runtime.git && \
7581
cd sandbox-runtime && \
7682
npm install --save-exact lodash-es@4.18.1 @types/lodash-es@4.17.12 && \
83+
npm install --save-exact brace-expansion@5.0.6 && \
7784
npm run build && \
7885
# CVE-2026-26996: all minimatch instances (3.1.2, 9.0.5) are transitive dev
7986
# deps (eslint, typescript-eslint). Prune dev deps after build to remove them.

python/pyproject.toml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,16 +5,21 @@ members = ["packages/*", "samples/adk/*", "samples/langgraph/*", "samples/crewai
55
dev = [
66
"pytest>=9.0.3",
77
"pytest-asyncio>=0.25.3",
8-
"ruff>=0.15.12",
9-
"authlib>=1.7.1"
8+
"ruff>=0.15.13",
9+
"authlib>=1.7.2"
1010
]
1111

1212
[tool.uv]
1313
constraint-dependencies = [
14-
"cryptography>=46.0.5",
14+
"aiohttp>=3.13.5",
15+
"cryptography>=48.0.0",
1516
"jaraco-context>=6.1.0",
17+
"mako>=1.3.12",
1618
"pyasn1>=0.6.3",
1719
"pyopenssl>=26.0.0",
20+
"python-dotenv>=1.2.2",
21+
"requests>=2.34.2",
22+
"sqlparse>=0.5.5",
1823
"wheel>=0.46.2",
1924
]
2025

0 commit comments

Comments
 (0)