chore(deps): bump the strands family (slice 2 of 3 from #19)

[Robobc]

What

Slice 2 of 3 from #19: the four strands-based patterns — strands-agent, research-agent, code-agent, agui-strands-agent.

Package	From	To
strands-agents	1.30.0 / 1.32.0	1.52.0
bedrock-agentcore	1.4.x	1.21.0
strands-agents-builder	0.1.0	0.1.10
ag-ui-strands	0.1.1	0.3.0
PyJWT[crypto]	2.12.0	2.13.0
mcp	1.26.0 (agui only)	1.29.0 — not 2.0.0

mcp stays at 1.29.0. #19 wanted 2.0.0, but strands-agents 1.52.0 itself requires mcp<2.0.0, so that batch is uninstallable (pip … → ResolutionImpossible).

Verified — the checks GitHub CI cannot run

• arm64 container build + import agent inside the image, all four patterns: strands 1.52.0, bedrock-agentcore 1.21.0.
• Live on the rig: deployed with AGENT_PATTERN=strands-agent → UPDATE_COMPLETE → invoke returned all three tools (text_analysis_tool, WebSearch, execute_python_securely) and a real gateway web-search answer with a cited URL. That exercises the MCP client, the AgentCore Identity M2M token-vault path, and the code interpreter on the new versions.
• Rig restored to AGENT_PATTERN=orchestrator after the test.

Note for maintainers

code-agent's Dockerfile builds from its own directory as context (COPY agent.py .), unlike patterns that copy shared/. A build loop over agent-code/ fails on it — that's expected and matches its RuntimeStack(source_dir=…).

Next

Slice 3: the langchain/langgraph + claude-sdk patterns (langgraph-agent, agui-langgraph-agent, claude-sdk-agent, claude-sdk-multi-agent) — the copilotkit/langchain constraint web, verified the same way.

[github-actions]

Commit: 9ce8342 | Updated: 2026-08-18 23:36:52 UTC

Security Scan Results

Scanner	S	C	H	M	L	I	Time	Action	Result	Thresh
bandit	0	0	0	0	0	0	825ms	0	PASSED	MED (g)
cdk-nag	0	0	0	0	0	0	8.7s	0	PASSED	MED (g)
cfn-nag	0	0	0	0	0	0	9ms	0	PASSED	MED (g)
checkov	0	0	0	0	0	0	6.6s	0	PASSED	MED (g)
detect-secrets	0	0	0	0	0	0	32ms	0	PASSED	MED (g)
grype	0	0	0	0	0	0	1m 1s	0	PASSED	MED (g)
npm-audit	0	0	0	0	0	0	198ms	0	PASSED	MED (g)
opengrep	0	0	0	0	0	0	17.5s	0	PASSED	MED (g)
semgrep	0	0	0	0	0	0	<1ms	0	MISSING	MED (g)
syft	0	0	0	0	0	0	3.3s	0	PASSED	MED (g)