From 12f6c2b881edbbe7866164a86fb9a6d49683d150 Mon Sep 17 00:00:00 2001 From: Roberto Catalano Date: Tue, 18 Aug 2026 13:55:04 -0700 Subject: [PATCH] chore(deps): bump the infra/test toolchain (root requirements only) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Slice 1 of 3 from dependabot PR #19, split by risk. This slice has no agent framework in it: CDK, boto3/botocore, pyyaml, requests, pytest, constructs. Nothing here reaches a container. - aws-cdk-lib 2.251.0 → 2.265.0, constructs 10.0.79 → 10.8.1 - boto3/botocore 1.34.0 → 1.43.72, requests 2.31.0 → 2.34.2, pyyaml 6.0.3 - pytest 8.0 → 9.1.1 (major; the actual risk in this slice) Verified: - pytest 9.1.1: 99 passed, no deprecation breakage in the suite. - cdk synth on the new aws-cdk-lib produces a BYTE-IDENTICAL gateway template to the old one (diff: 0 lines) — the bump changes no infrastructure. - cdk ls: 8 stacks as expected; validate_control_library.py clean. Deliberately NOT in this slice: everything under agent-code/. Those need container builds and live invokes, and PR #19's batch is unusable as-is — it pins mcp==2.0.0 while claude-agent-sdk 0.2.139, langchain-mcp-adapters 0.3.2 and strands-agents 1.52.0 all require mcp<2.0.0. Verified with pip: ResolutionImpossible. Slices 2 and 3 take the frameworks per-pattern, keeping mcp==1.29.0. --- requirements.txt | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/requirements.txt b/requirements.txt index da8790c..7790073 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,13 +1,13 @@ -aws-cdk-lib>=2.251.0 -constructs>=10.0.79,<11.0.0 +aws-cdk-lib>=2.265.0 +constructs>=10.8.1,<11.0.0 # control-library catalog parsing (infra_utils/policy_loader.py) -pyyaml>=6.0 +pyyaml>=6.0.3 # Test/utility script dependencies (scripts/test_*.py, tests/) -boto3>=1.34.0 -botocore>=1.34.0 -requests>=2.31.0 +boto3>=1.43.72 +botocore>=1.43.72 +requests>=2.34.2 colorama>=0.4.6 -pytest>=8.0 +pytest>=9.1.1 pydantic>=2.7,<3