-
Notifications
You must be signed in to change notification settings - Fork 51
Expand file tree
/
Copy pathpyproject.toml
More file actions
77 lines (70 loc) · 2.02 KB
/
Copy pathpyproject.toml
File metadata and controls
77 lines (70 loc) · 2.02 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
[project]
name = "agentex"
version = "0.1.0"
description = "agentex workspace"
authors = [{ name = "Felix Su", email = "felix.su@scale.com" }]
readme = "README.md"
requires-python = ">=3.12,<3.13"
dependencies = [
"agentex-sdk>=0.9.4",
"temporalio>=1.18.0",
]
[dependency-groups]
dev = [
"httpx>=0.27.2",
"pre-commit>=3.0.0",
"ruff>=0.3.4",
]
[tool.uv]
environments = [
"sys_platform == 'linux'",
"sys_platform == 'darwin'",
]
# Override agentex-sdk's fastapi<0.116 pin to allow the starlette 1.x line, which
# carries the fixes for CVE-2026-48818 / CVE-2026-54283 (and CVE-2025-62727).
# python-multipart>=0.0.32 clears CVE-2026-53539. Keep these floors at the patched
# minimums so a re-resolve can't regress below them.
# fastapi is capped <0.137.0: 0.137.0 made app.routes a tree of _IncludedRouter
# wrappers (no .path), which crashes the injected OTel FastAPI instrumentation on
# OPTIONS/CORS preflights (-> 500). 0.137.1/0.137.2/0.138.0 do not restore the flat
# list. The starlette>=1.3.1 floor below keeps the CVE fixes regardless of this cap.
# aiohttp>=3.14.1 clears 11 CVEs (incl. CVE-2026-54273 / CVE-2026-54274) present in
# the transitively-resolved 3.13.x line. Floor kept at the patched minimum so a
# re-resolve can't regress below it.
override-dependencies = [
"fastapi>=0.135.0,<0.137.0",
"starlette>=1.3.1",
"httpx[http2]>=0.28.1,<0.29",
"langchain-core>=1.3.3",
"mako>=1.3.12",
"python-multipart>=0.0.32",
"aiohttp>=3.14.1",
]
[tool.uv.workspace]
members = ["agentex"]
[tool.ruff]
target-version = "py311"
include = ["agentex/**/*py"]
exclude = [
".git",
".venv",
"__pycache__",
"*.egg-info",
"agentex/database/migrations/",
]
[tool.ruff.lint]
ignore = [
"E501", # Line too long (>79 characters)
]
select = [
"E", # pycodestyle errors
"W", # pycodestyle warnings
"F", # pyflakes
"I", # isort
"B", # flake8-bugbear
"C4", # flake8-comprehensions
"UP", # pyupgrade
]
[tool.ruff.format]
quote-style = "double"
indent-style = "space"