[dependabot]

Bumps the python group with 16 updates in the / directory:

Package	From	To
google-adk	2.11.0	2.13.0
pydantic	2.13.5	2.14.1
python-dotenv	1.2.3	1.2.4
uvicorn	0.52.4	0.54.0
agent-manifest	0.12.0	0.15.0
langchain-core	1.6.3	1.7.0
langgraph	1.2.12	1.2.17
ruff	0.16.9	0.17.2
numpy	2.5.3	2.5.4
pandas	3.0.6	3.1.0
agentrust-trace	0.10.0	0.11.0
chap-coordinator	0.2.13	0.3.3
openai	3.24.0	3.37.0
openai-agents	0.22.3	0.24.0
agent-passport-system	4.2.0	4.3.0
pydantic-ai-slim	2.53.0	2.61.0

Updates google-adk from 2.11.0 to 2.13.0

Release notes

Sourced from google-adk's releases.

v2.13.0

2.13.0 (2026-10-22)

Highlights

This release stabilizes core features while introducing TypeSafe workflow classification, live audio interactions, MongoDB integrations, and execution performance improvements.

• Stability: Access 12 mature experimental features now promoted to stable status. See the unit guide for more details. (ea298d4)
• Classifiers: Route workflows with TypeSafe's Jev models via the new TypesafeClassifier and ClassifierNode. Jev returns calibrated probabilities in a single forward pass, much faster than an LLM. See the unit guide for more details. (ddf8c55, e8c4bac)
• Live Audio: Enable natural real-time voice interactions with barge-in support alongside Gemini speech-to-text and text-to-speech integration. See the unit guide for more details. (2e7ef92)
• MongoDB Sessions & Memory: Persist sessions in MongoDB and share them across runner replicas with the new MongoDbSessionService. Add long-term memory without an embedding model using MongoDbMemoryService, which recalls past turns by keyword match on any MongoDB deployment, with no vector index needed. Both are experimental. See the session service and memory service guides for more details. (0df43f5, e40e349)
• MongoDB: Deploy MongoDbToolset to Agent Engine without packaging your connection string, and let Atlas Automated Embedding embed search queries server-side, with no Google embedding call or credentials needed. See the unit guide for more details. (bc3773f, 2f6c666, 8bbfc33)
• Performance: Enjoy up to 8x faster execution turns for string-model agents and reduced event-loading overhead. (772f139)

Breaking changes

• Telemetry: Defaults to OpenTelemetry GenAI v2 (otel_semconv_1_44, removing call_llm); set ADK_TELEMETRY_SCHEMA_VERSION_OPT_IN=otel_semconv_1_36 to keep the legacy v1 schema. See the unit guide for more details. (7838488)

⚠ BREAKING CHANGES

• telemetry: deprecate call_llm span and OpenTelemetry 1.36 GenAI semconv

Features

• add delete_memory api to BaseMemoryService (41e5c7b), closes #6949
• add MongoDB-backed memory service (e40e349)
• add MongoDB-backed session service (0df43f5)
• add OpenSandbox environment (69d1c90), closes #6758
• classifiers: add BaseClassifier and typed question/answer types (773418f)
• classifiers: add ClassifierNode for workflow routing (e8c4bac)
• classifiers: add LlmClassifier (772b577)
• eval: split invocation duration into model, tool and framework time (e3797a4)
• features: promote 12 mature experimental features to stable (ea298d4)
• honor ADK_SUPPRESS_EXPERIMENTAL_FEATURE_WARNINGS (b592dee), closes #5114
• integrations: add TypesafeClassifier for TypeSafe's Jev models (ddf8c55)
• integrations: keep MongoDB credentials out of Agent Engine packages (ab5cb45)
• live: add barge-in support to CascadeLiveConnection (2e7ef92)
• live: add Gemini speech-to-text and text-to-speech for CascadeLive (f78149a)
• live: add ZIP_STORED visual frame pack and unpack helpers (17d8a5a)
• make MongoDbToolset picklable for Agent Engine (2f6c666)
• plugins: add agent evaluation session and turn trace views (ab9c994)
• plugins: classify error-bearing tool results and extract shared callback helpers (a4b8ee9), closes #7112
• plugins: classify write-time 403 and 404 drops in BigQueryAgentAnalyticsPlugin (d5c87a6)
• plugins: log terminations, node results and tool result errors in the logging plugins (6a77d48)
• record google_search grounding on LLM spans (ead208a), closes #7345
• samples: add Secret Manager and Parameter Manager integration samples (7391411), closes #7582

... (truncated)

Changelog

Sourced from google-adk's changelog.

2.13.0 (2026-10-22)

Highlights

This release stabilizes core features while introducing TypeSafe workflow classification, live audio interactions, MongoDB integrations, and execution performance improvements.

• Stability: Access 12 mature experimental features now promoted to stable status. See the unit guide for more details. (ea298d4)
• Classifiers: Route workflows with TypeSafe's Jev models via the new TypesafeClassifier and ClassifierNode. Jev returns calibrated probabilities in a single forward pass, much faster than an LLM. See the unit guide for more details. (ddf8c55, e8c4bac)
• Live Audio: Enable natural real-time voice interactions with barge-in support alongside Gemini speech-to-text and text-to-speech integration. See the unit guide for more details. (2e7ef92)
• MongoDB Sessions & Memory: Persist sessions in MongoDB and share them across runner replicas with the new MongoDbSessionService. Add long-term memory without an embedding model using MongoDbMemoryService, which recalls past turns by keyword match on any MongoDB deployment, with no vector index needed. Both are experimental. See the session service and memory service guides for more details. (0df43f5, e40e349)
• MongoDB: Deploy MongoDbToolset to Agent Engine without packaging your connection string, and let Atlas Automated Embedding embed search queries server-side, with no Google embedding call or credentials needed. See the unit guide for more details. (bc3773f, 2f6c666, 8bbfc33)
• Performance: Enjoy up to 8x faster execution turns for string-model agents and reduced event-loading overhead. (772f139)

Breaking changes

• Telemetry: Defaults to OpenTelemetry GenAI v2 (otel_semconv_1_44, removing call_llm); set ADK_TELEMETRY_SCHEMA_VERSION_OPT_IN=otel_semconv_1_36 to keep the legacy v1 schema. See the unit guide for more details. (7838488)

⚠ BREAKING CHANGES

• telemetry: deprecate call_llm span and OpenTelemetry 1.36 GenAI semconv

Features

• add delete_memory api to BaseMemoryService (41e5c7b), closes #6949
• add MongoDB-backed memory service (e40e349)
• add MongoDB-backed session service (0df43f5)
• add OpenSandbox environment (69d1c90), closes #6758
• classifiers: add BaseClassifier and typed question/answer types (773418f)
• classifiers: add ClassifierNode for workflow routing (e8c4bac)
• classifiers: add LlmClassifier (772b577)
• eval: split invocation duration into model, tool and framework time (e3797a4)
• features: promote 12 mature experimental features to stable (ea298d4)
• honor ADK_SUPPRESS_EXPERIMENTAL_FEATURE_WARNINGS (b592dee), closes #5114
• integrations: add TypesafeClassifier for TypeSafe's Jev models (ddf8c55)
• integrations: keep MongoDB credentials out of Agent Engine packages (ab5cb45)
• live: add barge-in support to CascadeLiveConnection (2e7ef92)
• live: add Gemini speech-to-text and text-to-speech for CascadeLive (f78149a)
• live: add ZIP_STORED visual frame pack and unpack helpers (17d8a5a)
• make MongoDbToolset picklable for Agent Engine (2f6c666)
• plugins: add agent evaluation session and turn trace views (ab9c994)
• plugins: classify error-bearing tool results and extract shared callback helpers (a4b8ee9), closes #7112
• plugins: classify write-time 403 and 404 drops in BigQueryAgentAnalyticsPlugin (d5c87a6)
• plugins: log terminations, node results and tool result errors in the logging plugins (6a77d48)
• record google_search grounding on LLM spans (ead208a), closes #7345
• samples: add Secret Manager and Parameter Manager integration samples (7391411), closes #7582
• seed adk web sessions from initial_state.json (3c8c63e), closes #4961

... (truncated)

Commits

• d68ca85 chore: update last-release-sha for next main release
• 4326f06 chore(release/candidate): release 2.13.0 (#7653)
• e40e349 feat: add MongoDB-backed memory service
• 83ffe8b fix: stub ADC in modules that imported google.auth.default by name
• 0df43f5 feat: add MongoDB-backed session service
• 5f84976 fix: pin certifi 2026.10.19 in the constraints files
• a16c6e1 fix: keep ADK tracking headers and http options when client_kwargs sets http_...
• d68910f fix: require authlib 1.9.1 or newer for CVE fixes
• bc3773f feat(integrations): keep MongoDB credentials out of Agent Engine packages
• 6fa8ba3 refactor: remove the Gemini._merge_tracking_headers wrapper
• Additional commits viewable in compare view

Updates pydantic from 2.13.5 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

• Fix arguments-v3 schema with variadic keywords by @​Viicos in #13954
• Fix TypeError on ForwardRef on Python 3.10.0 by @​Viicos in #13964
• Support closed and extra_items via inheritance in TypedDict by @​Viicos in #13967
• Enforce the max_digits whole-digits limit in the Python Decimal validator by @​Viicos in #13972
• Reject out-of-range int inputs for timedelta by @​Viicos in #13973
• Support named tuples in Sequence validation by @​Viicos in #13978

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
• Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
• Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
• Handle OS errors during ZoneInfo validation by @​Viicos in #13912
• Handle exceptions during Decimal validation by @​Viicos in #13940
• Rebuild incomplete types during serialization inference by @​Viicos in #13922
• Reject large exponents in Fraction validation by @​Viicos in #13944
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

• @​saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Commits

• a565c2c Bump version: 1.2.3 → 1.2.4
• 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
• f215c02 fix: dotenv get exits 0 for empty string values (#700)
• 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
• e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
• a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
• f5485a6 fix: parse empty unquoted value with inline comment as empty string
• See full diff in compare view

Updates uvicorn from 0.52.4 to 0.54.0

Release notes

Sourced from uvicorn's releases.

Version 0.54.0

📨 Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.

uv add uvicorn==0.54.0 "zttp>=0.0.34"

• Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.
• HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

💡 Hint at resources before the final response

• Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0

• Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
• HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

• Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

• Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
• Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
• Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

• Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)
• Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

• Add experimental HTTP/2 support through zttp (#2982, #3101)
• Add support for zuvloop (#3104)

Fixed

• Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
• Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
• Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

Commits

• 3eb9a9a Version 0.54.0 (#3161)
• cd7ef6d Remove races from supervisor tests (#3134)
• a56c7cc Support HTTP/2 response trailers (#3146)
• 9bd4404 chore(deps): bump anyio from 4.13.0 to 4.14.2 (#3145)
• 21f39ef Add HTTP/2 Early Hints support (#3137)
• 421708f Version 0.53.0 (#3136)
• f1a1bff Unset the keep-alive timer when upgrading to WebSocket (#3107)
• 63971ed Document HTTP/2 support (#3130)
• 7d1a005 Remove race from multiprocess health check test (#3128)
• 5ac6265 Add ::1 to FORWARDED_ALLOW_IPS (#3119)
• Additional commits viewable in compare view

Updates agent-manifest from 0.12.0 to 0.15.0

Release notes

Sourced from agent-manifest's releases.

python-v0.15.0

What's Changed

• fix(sdk): attach_receipt refuses a non-array receipts value instead of corrupting it by @​rajnisht7 in agentrust-io/agent-manifest#469
• docs(changelog): file the attach_receipt fix under Unreleased by @​imran-siddique in agentrust-io/agent-manifest#478
• feat(sdk): add opt-in experimental evidence-requirements profile by @​imran-siddique in agentrust-io/agent-manifest#479
• fix(attestation): refuse debug guests and non-VMPL0 SNP reports, release 0.15.0 by @​imran-siddique in agentrust-io/agent-manifest#480

Full Changelog: agentrust-io/agent-manifest@python-v0.14.0...python-v0.15.0

python-v0.14.0

What's Changed

• fix: enforce strict HashValue format when parsing checkpoint roots by @​rajnisht7 in agentrust-io/agent-manifest#465
• docs(api): mark signing_pre_image() as v0.1-only by @​litzki-systems in agentrust-io/agent-manifest#460
• chore(deps): bump the codeql-action group with 4 updates by @​dependabot[bot] in agentrust-io/agent-manifest#467
• docs(spec): publish the two-tool catalog_hash vector in Appendix D by @​imran-siddique in agentrust-io/agent-manifest#470
• docs(spec): correct identity framing, container-digest binding and Blackwell SPDM by @​imran-siddique in agentrust-io/agent-manifest#471
• chore(deps): bump urllib3 to 2.8.0 by @​rajnisht7 in agentrust-io/agent-manifest#475
• fix(attestation): read verdicts from signed evidence, pin the AMD root (0.14.0) by @​imran-siddique in agentrust-io/agent-manifest#476

Full Changelog: agentrust-io/agent-manifest@python-v0.13.1...python-v0.14.0

python-v0.13.1

agent-manifest 0.13.1

pip install agent-manifest==0.13.1

Behaviour change

verify_evidence_pack() now reads the verdict inside the pack. A pack whose embedded section 5.2 verification_result says REVOKED, EXPIRED, MISMATCH or anything other than VALID returns FAILED. Under 0.13.0 the same pack returned VERIFIED. If you accepted those packs, they will now be rejected.

Fixed

• [SDK] verify_evidence_pack() only checked that the embedded verification_result carried a known enum value, and never read its verification_signature. Now a non-VALID result fails the pack, a manifest_id that differs from the pack's manifest fails it, and a result with no manifest_id is MALFORMED. New keyword arguments result_key_id and result_algorithm check verification_signature over the new verification_result_pre_image(). Leave out result_key_id and the result reports verification_result_signature_verified=False with a verification_result_signature_not_appraised warning. signature_verified still covers the outer pack_signature only. (#463)
• [SDK] verify_evidence_pack() and verify_trace_envelope() raised TypeError or ValueError on some untrusted input: a non-string verification_result.result or pack_signature.key_id, or a value RFC 8785 cannot represent (NaN, Infinity, a lone surrogate, an integer beyond 2^53, nesting deeper than 64). They now return MALFORMED. (#463)

Changed

• [CI] CodeQL runs on every pull request and every push to main, with the python/** path filter and the Dependabot skip removed (#463). Write permissions in codeql.yml and docs.yml moved from workflow level to the job that needs them (#464). New ClusterFuzzLite target fuzz_trace.py covers both verifiers (#463).

Full changelog: agentrust-io/agent-manifest@python-v0.13.0...python-v0.13.1

agent-manifest 0.13.0 is on PyPI: pip install agent-manifest==0.13.0.

Compatibility: canonicalize() now follows RFC 8785 exactly (#404, closes #322). It no longer NFC-normalizes strings, no longer escapes U+2028, U+2029 or U+007F to U+009F, and refuses integers above 2**53 - 1. A signature that 0.12.0 made over a document containing any of those will not verify. Every other document canonicalizes to the same bytes as before.

Security fixes

• #404: two distinct strings could share one signature, and two keys that normalized alike produced invalid JSON that silently dropped a signed field.
• #450: verify_revocation_signature() compares signer_key_id in constant time.

... (truncated)

Changelog

Sourced from agent-manifest's changelog.

[0.15.0] - 2026-09-30

Security

• [SDK] verify_attestation_chain() refuses debug guests. The SEV-SNP path never read the signed guest policy and the TDX path never parsed TDATTRIBUTES, so a debug-enabled guest with an allow-listed measurement returned passed=True. A debug guest's memory is readable and writable by the host, so its REPORT_DATA and the code that chose it are the host's to set. The verdict now fails when SNP guest policy DEBUG (bit 19, AMD 56860) or TDX TDATTRIBUTES.DEBUG (bit 0, TD report body offset 120) is set, read from the signed bytes after the signature verifies. SNP reports must also carry VMPL 0, the level both of this package's SNP producers request at (SEVSNPProvider through configfs-TSM, and the Azure paravisor). verify_runtime_report() and verify_runtime_freshness() apply the same checks with no opt-in. ChainVerificationResult gains debug and vmpl, read from the signed report (None without a verified signature, and for platforms with no such field). verify_attestation_chain(allow_debug=True) accepts a debug guest for development and records it in reasons; it does not relax VMPL. SnpReport.debug, TdxQuote.td_attributes and TdxQuote.debug expose the parsed state. Behaviour change: a debug guest, or an SNP report at VMPL 1 to 3, that previously verified now fails.

Added

• [SDK] Experimental, opt-in evidence-requirements-experimental-v1 profile. A v0.2 manifest that declares it may carry a signed evidence_requirements block (components, required relationships, combination policy reference), and agent_manifest.evidence_requirements.verify_evidence_manifest() returns it only after verify_manifest() is VALID. Without the profile the block is still rejected as an unknown field, so existing manifests verify as before. Under the profile every 0.14.0 check still applies, including the signed audit_key_sealed rule under enforce_attestation. Not part of the specification; see docs/evidence-requirements-experimental.md. Consumer: agentrust-io/trace-spec#439.

Fixed

• [SDK] attach_receipt() corrupted or crashed when the envelope's receipts header (label 394) wasn't already an array - a map became its keys, a string its characters, and null/0/false/"" were silently replaced with []. attach_approvals() was already fixed for the same issue in 0.13.0; attach_receipt() now works the same way: a non-array existing value raises CoseStructureError instead of being coerced or overwritten, and receipt itself must be bytes or bytearray. To replace the array, use attach_unprotected(envelope, HDR_RECEIPTS, receipts). Behaviour change: a bad receipt, or a non-array receipts value, now raises instead of being silently coerced.

... (truncated)

Commits

• 2f1b9f5 fix(attestation): refuse debug guests and non-VMPL0 SNP reports, release 0.15...
• 7466b3d feat(sdk): add opt-in experimental evidence-requirements profile (#479)
• 7a28a4b docs(changelog): file the attach_receipt fix under Unreleased (#478)
• d3ed22e fix attach receipt (#469)
• 3c3f5a5 fix(attestation): read verdicts from signed evidence, pin the AMD root (0.14....
• d991472 bump-urllib3-2.8.0 (#475)
• 025247a docs(spec): correct identity framing, container-digest binding and Blackwell ...
• 539c24c docs(spec): publish the two-tool catalog_hash vector in Appendix D (#470)
• 2f54af9 chore(deps): bump the codeql-action group with 4 updates (#467)
• 3c12491 docs(api): mark signing_pre_image() as v0.1-only (#460)
• Additional commits viewable in compare view

Updates langchain-core from 1.6.3 to 1.7.0

Release notes

Sourced from langchain-core's releases.

langchain-core==1.7.0

Changes since langchain-core==1.6.13

release(core): 1.7.0 (#41418) feat(core): emit tool-call-delta for streamed tool-call args (#41257)

Notes

• Tool-call args now stream as tool-call-delta slices instead of block-delta snapshots of the args so far. If you read raw stream events and their block-delta args mid-stream, read tool-call-delta instead. .tool_calls.get() and .output are unchanged. To keep snapshots, pin langchain-core<1.7.
• Since 1.6.13, iterating ChatModelStream.tool_calls yields each call's new args slice, not a snapshot of the args so far.

langchain-core==1.6.13

Changes since langchain-core==1.6.12

release(core): 1.6.13 (

[carloshvp]

Reviewed current head 02a59f46750017924df131063f1b13557c33215c.

The grouped update breaks its declared Python 3.11 integration matrix: Sentinel now requires numpy>=2.5.4, but NumPy 2.5.x requires Python >=3.12. Both current-head floating jobs stop during installation with no matching distribution. Preserve support with suitable version markers or propose a separate documented minimum-Python change and update the matrix consistently. The generated locks also drop platform-specific dependencies such as Windows colorama and change fixed integration versions; regenerate with the repository universal lock commands and reconcile the fixed pins with tested_against before rerunning all affected conformance jobs.

Prepared with OpenAI Codex.

[carloshvp]

[P1] Preserve the supported Python 3.11 install. NumPy 2.5.4 requires Python >=3.12, so this unconditional floor makes the existing 3.11 Sentinel conformance jobs unresolvable. Keep a compatible 3.11 requirement or make a separately reviewed minimum-version change across metadata and CI.

[dinakarjs]

A DCO-signed repair is ready for author adoption: dinakarjs#10, commit c919590f39b017a645074c7e6cf4e29422ce07ea. It preserves Python 3.11 via NumPy markers, restores fixed pins to recorded tested_against versions, and regenerates affected universal locks. Fresh Python 3.11 Sentinel/APS/CHAP/CompanyScope tests pass: 17/92/19/8. Please review the companion's explicit scope and remaining matrix checks, adopt into this PR, then rerun hosted CI. This is a contributor correction, not independent approval. Prepared with Codex.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.