From 02a59f46750017924df131063f1b13557c33215c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 00:23:00 +0000
Subject: [PATCH] build(deps): bump the python group across 1 directory with 16
 updates

Bumps the python group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [google-adk](https://github.com/google/adk-python) | `2.11.0` | `2.13.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.4` | `0.54.0` |
| [agent-manifest](https://github.com/agentrust-io/agent-manifest) | `0.12.0` | `0.15.0` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.3` | `1.7.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.12` | `1.2.17` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.17.2` |
| [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.6` | `3.1.0` |
| [agentrust-trace](https://github.com/agentrust-io/trace-spec) | `0.10.0` | `0.11.0` |
| [chap-coordinator](https://github.com/BrightbeamAI/chap) | `0.2.13` | `0.3.3` |
| [openai](https://github.com/openai/openai-python) | `3.24.0` | `3.37.0` |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.22.3` | `0.24.0` |
| [agent-passport-system](https://github.com/agent-passport-system/agent-passport-python) | `4.2.0` | `4.3.0` |
| [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai) | `2.53.0` | `2.61.0` |



Updates `google-adk` from 2.11.0 to 2.13.0
- [Release notes](https://github.com/google/adk-python/releases)
- [Changelog](https://github.com/google/adk-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/adk-python/compare/v2.11.0...v2.13.0)

Updates `pydantic` from 2.13.5 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.13.5...v2.14.1)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.3...v1.2.4)

Updates `uvicorn` from 0.52.4 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.52.4...0.54.0)

Updates `agent-manifest` from 0.12.0 to 0.15.0
- [Release notes](https://github.com/agentrust-io/agent-manifest/releases)
- [Changelog](https://github.com/agentrust-io/agent-manifest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/agentrust-io/agent-manifest/compare/python-v0.12.0...python-v0.15.0)

Updates `langchain-core` from 1.6.3 to 1.7.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-core==1.6.3...langchain-core==1.7.0)

Updates `langgraph` from 1.2.12 to 1.2.17
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](https://github.com/langchain-ai/langgraph/compare/1.2.12...1.2.17)

Updates `ruff` from 0.16.9 to 0.17.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.9...0.17.2)

Updates `numpy` from 2.5.3 to 2.5.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](https://github.com/numpy/numpy/compare/v2.5.3...v2.5.4)

Updates `pandas` from 3.0.6 to 3.1.0
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](https://github.com/pandas-dev/pandas/compare/v3.0.6...v3.1.0)

Updates `agentrust-trace` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/agentrust-io/trace-spec/releases)
- [Changelog](https://github.com/agentrust-io/trace-spec/blob/main/CHANGELOG.md)
- [Commits](https://github.com/agentrust-io/trace-spec/compare/v0.10.0...v0.11.0)

Updates `chap-coordinator` from 0.2.13 to 0.3.3
- [Release notes](https://github.com/BrightbeamAI/chap/releases)
- [Changelog](https://github.com/BrightbeamAI/chap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/BrightbeamAI/chap/compare/v0.2.13...v0.3.3)

Updates `openai` from 3.24.0 to 3.37.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/openai/openai-python/compare/v3.24.0...v3.37.0)

Updates `openai-agents` from 0.22.3 to 0.24.0
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/openai/openai-agents-python/compare/v0.22.3...v0.24.0)

Updates `agent-passport-system` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/agent-passport-system/agent-passport-python/releases)
- [Changelog](https://github.com/agent-passport-system/agent-passport-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/agent-passport-system/agent-passport-python/compare/v4.2.0...v4.3.0)

Updates `pydantic-ai-slim` from 2.53.0 to 2.61.0
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](https://github.com/pydantic/pydantic-ai/compare/v2.53.0...v2.61.0)

---
updated-dependencies:
- dependency-name: google-adk
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: uvicorn
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: agent-manifest
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: langchain-core
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: langgraph
  dependency-version: 1.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: numpy
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pandas
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: agentrust-trace
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: chap-coordinator
  dependency-version: 0.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: openai
  dependency-version: 3.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: openai-agents
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: agent-passport-system
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pydantic-ai-slim
  dependency-version: 2.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 claude-code/requirements.txt                  |   2 +-
 demos/requirements.txt                        |   2 +-
 integrations/sentinel/requirements.txt        |  10 +-
 requirements/aeoess-aps-fixed.in              |   4 +-
 requirements/aeoess-aps-fixed.txt             |  12 +-
 requirements/capture-core.in                  |   2 +-
 requirements/capture-core.txt                 | 111 ++++--------------
 requirements/chap-fixed.in                    |   4 +-
 requirements/chap-fixed.txt                   |  21 ++--
 .../companyscope-incident-register-fixed.in   |   2 +-
 .../companyscope-incident-register-fixed.txt  |  14 +--
 requirements/lint.in                          |   2 +-
 requirements/lint.txt                         |  38 +++---
 requirements/pic-standard-mcp-guard-fixed.txt |  11 +-
 requirements/sdk-google-adk.in                |   2 +-
 requirements/sdk-google-adk.txt               |  19 +--
 requirements/sdk-langchain.in                 |   4 +-
 requirements/sdk-langchain.txt                |  45 ++++---
 requirements/sdk-openai-agents.in             |   2 +-
 requirements/sdk-openai-agents.txt            |   8 +-
 requirements/sdk-pydantic-ai.in               |   2 +-
 requirements/sdk-pydantic-ai.txt              |  22 ++--
 22 files changed, 126 insertions(+), 213 deletions(-)

diff --git a/claude-code/requirements.txt b/claude-code/requirements.txt
index 31ffeda7..62e0a6c4 100644
--- a/claude-code/requirements.txt
+++ b/claude-code/requirements.txt
@@ -9,6 +9,6 @@ agentrust-capture-core>=0.1.3,<0.2
 # These are required only to generate SIGNED records (/trace, /manifest approve
 # --sign): the Agent Manifest and the TRACE Trust Record. Verified against the
 # PyPI releases below in a clean virtualenv.
-agent-manifest>=0.12.0
+agent-manifest>=0.15.0
 agentrust-trace>=0.11.0
 agentrust-trace-tests>=0.5.1,<0.6
diff --git a/demos/requirements.txt b/demos/requirements.txt
index 1f87fc54..067852fc 100644
--- a/demos/requirements.txt
+++ b/demos/requirements.txt
@@ -5,4 +5,4 @@
 # then dies at startup instead of at install time. See PR body.
 cmcp-runtime>=0.7.0
 weight-custody-manifest>=0.32.0,<0.33.0
-openai>=3.24.0
+openai>=3.37.0
diff --git a/integrations/sentinel/requirements.txt b/integrations/sentinel/requirements.txt
index e658cff5..b4ed35ea 100644
--- a/integrations/sentinel/requirements.txt
+++ b/integrations/sentinel/requirements.txt
@@ -1,13 +1,13 @@
 fastapi>=0.115.0
-uvicorn[standard]>=0.34.0
-pydantic>=2.10.0
+uvicorn[standard]>=0.54.0
+pydantic>=2.14.1
 pytest>=8.0.0
 httpx>=0.27.0
-python-dotenv>=1.0.0
+python-dotenv>=1.2.4
 click>=8.0.0
 jinja2>=3.1.0
-pandas>=2.0.0
-numpy>=1.24.0
+pandas>=3.1.0
+numpy>=2.5.4
 scikit-learn>=1.3.0
 cryptography>=50.0.0
 PyJWT>=2.15.0
\ No newline at end of file
diff --git a/requirements/aeoess-aps-fixed.in b/requirements/aeoess-aps-fixed.in
index 3acf25a7..cd666289 100644
--- a/requirements/aeoess-aps-fixed.in
+++ b/requirements/aeoess-aps-fixed.in
@@ -5,7 +5,7 @@
 # agentrust-io pins must equal tested_against in
 # integrations/aeoess-aps/integration.yaml; the job checks that after install.
 # The floating job stays unpinned on purpose (drift detection).
-agentrust-trace==0.10.0
+agentrust-trace==0.11.0
 agentrust-trace-tests==0.5.1
-agent-passport-system==4.2.0
+agent-passport-system==4.3.0
 pytest
diff --git a/requirements/aeoess-aps-fixed.txt b/requirements/aeoess-aps-fixed.txt
index fa77c34e..0693c400 100644
--- a/requirements/aeoess-aps-fixed.txt
+++ b/requirements/aeoess-aps-fixed.txt
@@ -1,12 +1,12 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/aeoess-aps-fixed.in --generate-hashes --universal --python-version 3.11 -o requirements/aeoess-aps-fixed.txt
-agent-passport-system==4.2.0 \
-    --hash=sha256:2596e6ab44c953e36ab33c4f00485051cd3e36223b5e7194fd31a41f8b540f7e \
-    --hash=sha256:63924175e96d0aa6713b361f01ec1a66eee839fd7ab9ba6ce682a2f296a5d899
+agent-passport-system==4.3.0 \
+    --hash=sha256:96d3fe02b47501d1736949843106fff0ecd811534a5ee65b7f895788d6ae1883 \
+    --hash=sha256:ef40b725be12661e1432a1d0189a160ffc3ddea27aeae17ffe80a21006b51a40
     # via -r requirements/aeoess-aps-fixed.in
-agentrust-trace==0.10.0 \
-    --hash=sha256:a82900c426c92f71ec244a13123611953771d232eb02137fec72927225ab472b \
-    --hash=sha256:e3ef4438ecb8eb9cbbf1aed13d2d409673ef46afe424c8dc579b8ecce79f2b46
+agentrust-trace==0.11.0 \
+    --hash=sha256:7de621eaf795449e365d04967a82a551a18d75c99d248b4a0923f6d593bdb09e \
+    --hash=sha256:8b76de58ec74fad57417093bf7977fe826ce6ade5859b4d5be8ce3938f9fcb35
     # via -r requirements/aeoess-aps-fixed.in
 agentrust-trace-tests==0.5.1 \
     --hash=sha256:5c13421d41357a5b2e096eced457f5dee65d4921b253b25dac53684b3d31eeeb \
diff --git a/requirements/capture-core.in b/requirements/capture-core.in
index 0718baf1..4b6bb144 100644
--- a/requirements/capture-core.in
+++ b/requirements/capture-core.in
@@ -13,4 +13,4 @@
 #     --python-version 3.9 -o requirements/capture-core.txt
 # agentrust-capture-core has no runtime dependencies; this is its dev extra.
 pytest>=8.0
-ruff>=0.16.9
+ruff>=0.17.2
diff --git a/requirements/capture-core.txt b/requirements/capture-core.txt
index eb5c9bb9..9967e7d9 100644
--- a/requirements/capture-core.txt
+++ b/requirements/capture-core.txt
@@ -1,18 +1,6 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/capture-core.in --generate-hashes --universal --python-version 3.9 -o requirements/capture-core.txt
-colorama==0.4.6 ; sys_platform == 'win32' \
-    --hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
-    --hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
-    # via pytest
-exceptiongroup==1.3.1 ; python_full_version < '3.11' \
-    --hash=sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219 \
-    --hash=sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598
-    # via pytest
-iniconfig==2.1.0 ; python_full_version < '3.10' \
-    --hash=sha256:3abbd2e30b36733fee78f9c7f7308f2d0050e88f0087fd25c2645f63c773e1c7 \
-    --hash=sha256:9deba5723312380e77435581c6bf4935c94cbfab9b1ed33ef8d238ea168eb760
-    # via pytest
-iniconfig==2.3.0 ; python_full_version >= '3.10' \
+iniconfig==2.3.0 \
     --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \
     --hash=sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12
     # via pytest
@@ -28,84 +16,27 @@ pygments==2.21.0 \
     --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9 \
     --hash=sha256:610ca751c9bc2492b38eb9a38a7fbc93edbbb2d7182edaf34e66ae493dee5c8c
     # via pytest
-pytest==8.4.2 ; python_full_version < '3.10' \
-    --hash=sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01 \
-    --hash=sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79
-    # via -r requirements/capture-core.in
-pytest==9.1.1 ; python_full_version >= '3.10' \
+pytest==9.1.1 \
     --hash=sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313 \
     --hash=sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c
     # via -r requirements/capture-core.in
-ruff==0.16.9 \
-    --hash=sha256:0e1dbc2073624dee6618d41d0098690a7244654af746704b64759e12b6b6b385 \
-    --hash=sha256:12b625c6cfba78d285d9f48eda5f053374f1e53cb10ef17342a383750db99161 \
-    --hash=sha256:1632eb1d6197f33bd00b1acbc5b71009e89a8895c158e2d2b03a834fac964ab6 \
-    --hash=sha256:41e3870277694177429b56406d65dfbdb2c2802c52b715edaf6a0b829c69d4ee \
-    --hash=sha256:447fc07e1573afff7cb02803462b12b6c8ece7cf10e2cd78565fa6d7a1c0bf8d \
-    --hash=sha256:4684dded7db60aa57cb118fa158630f5feade4af5782903b6053484bdf9bd129 \
-    --hash=sha256:6bd40fec8cd4c8a3d4dd589bd8ad4e6320c13c29234159bfd959a40d529d597b \
-    --hash=sha256:7baa24ef5fc8e77aa93879e1d3f43754a01ae488e869f1ae30cf431afd4d2452 \
-    --hash=sha256:8a3e039a6a40ed976c491722b60e0ae4a4aa1a86057f540ee7a37a5d19ae9120 \
-    --hash=sha256:8adbe4e58af167f767d7b2ba5e83c42e878350796cf78c2f5e14ab9903a92588 \
-    --hash=sha256:95e6f022090368ab3b824c36276839c53b2adf1a3f4c09fefc33dfc400f6da96 \
-    --hash=sha256:a21713e629d3e5bdb2f5c2def1cc7f04f47fa8e1a7eb0571b4a28e1da64bc728 \
-    --hash=sha256:a41aac6230aadfaa133bdfa1614488531ffa3e0837567ae04c0da2058a9c0f9e \
-    --hash=sha256:a5f27be168556594a86d2f415db0cf43f5291917849318f873c7e2791f7a8c67 \
-    --hash=sha256:b3f951b14d865d5952c89d40a5ca07e87abe24fa5453299878411e127748fb1c \
-    --hash=sha256:c2529fb5896d49115b0e9aa8f887490b34bbe76baf879ec2264ac59406869ce7 \
-    --hash=sha256:d29c934357e45642fda2f34c0b1f4025b4a6c01e15e4bf0016879d60078a142c \
-    --hash=sha256:ed1a252039200f57a59eebc063b54beabea67bfbaaca0eeaa7f54b5fbcda2284
+ruff==0.17.2 \
+    --hash=sha256:122258f6ecde0e0dd1bb60b24263c3edde4338caf723fca711cc729f9bfd414a \
+    --hash=sha256:195ad918027f817c119310ca89a42d347887dfc28934aaa869325e9c5dc9d962 \
+    --hash=sha256:1b59d447f197bef9ef48a22ba1a6016137753c6099e9bac9c36eb566e422424c \
+    --hash=sha256:2d086be452eed686aa51271ecf2cbe5037956517cc6ee39a17b4489ac12f8bbe \
+    --hash=sha256:39c5b55c960515cdb32be16e69efb5734c589c06a0eb38a22694524a336b889d \
+    --hash=sha256:583bd67bb9e7061dd09bc46a0a884bae2bbd214dbcd48e509813612619683869 \
+    --hash=sha256:5875a16b0de70b43cb81eabea5ae5e8f5d1b2fd1b5e6ed07f80cfe5019d0bd5a \
+    --hash=sha256:6bce7d1f5165701ae18f5df85c65afe78cddfa6c5fb4b9bdb0014d60388f3edd \
+    --hash=sha256:7cfd783590edf2b77317882631900f6a13ea2e8eacefe6ebf2370d2715299160 \
+    --hash=sha256:7f8fba429d6ac4128ab29cfb8fa6240d2fa671d04adf7f84d3b22fc7b6b6bea4 \
+    --hash=sha256:84d632402d14c23b488f941db23712d6736a013225162062d34558c3f3c780eb \
+    --hash=sha256:8c21b4ab24485358f17291a4f8dc5399b834e963b8efedd920fe4fdb02081bb4 \
+    --hash=sha256:92a80d2f44584dabb0189b3a6c393e37e525e04942838482010575cb81945be7 \
+    --hash=sha256:96a65e755d8dba094707fb23ab602111d9a31ec2835b3a6992a1914a8fcb211e \
+    --hash=sha256:b7d0906677d89bbf3cf73cde64b5bbe2ab35df3ae43e49ee2627301e91265bac \
+    --hash=sha256:ba405cbd5ec7bda1f555d5e52be1fd68d02608d4d95d24591bdac92cfacb579f \
+    --hash=sha256:c555a877f8f41447e318101cfefea9bf12dfa9f82eedf90c376e57e069f917d0 \
+    --hash=sha256:c60f93fec7142dba5b8f487f94bf2f6231dae24dc11e4c48648347c8b0720004
     # via -r requirements/capture-core.in
-tomli==2.4.1 ; python_full_version < '3.11' \
-    --hash=sha256:01f520d4f53ef97964a240a035ec2a869fe1a37dde002b57ebc4417a27ccd853 \
-    --hash=sha256:0d85819802132122da43cb86656f8d1f8c6587d54ae7dcaf30e90533028b49fe \
-    --hash=sha256:136443dbd7e1dee43c68ac2694fde36b2849865fa258d39bf822c10e8068eac5 \
-    --hash=sha256:1d8591993e228b0c930c4bb0db464bdad97b3289fb981255d6c9a41aedc84b2d \
-    --hash=sha256:2190f2e9dd7508d2a90ded5ed369255980a1bcdd58e52f7fe24b8162bf9fedbd \
-    --hash=sha256:2c1c351919aca02858f740c6d33adea0c5deea37f9ecca1cc1ef9e884a619d26 \
-    --hash=sha256:36d2bd2ad5fb9eaddba5226aa02c8ec3fa4f192631e347b3ed28186d43be6b54 \
-    --hash=sha256:3d48a93ee1c9b79c04bb38772ee1b64dcf18ff43085896ea460ca8dec96f35f6 \
-    --hash=sha256:47149d5bd38761ac8be13a84864bf0b7b70bc051806bc3669ab1cbc56216b23c \
-    --hash=sha256:4ab97e64ccda8756376892c53a72bd1f964e519c77236368527f758fbc36a53a \
-    --hash=sha256:4b605484e43cdc43f0954ddae319fb75f04cc10dd80d830540060ee7cd0243cd \
-    --hash=sha256:504aa796fe0569bb43171066009ead363de03675276d2d121ac1a4572397870f \
-    --hash=sha256:51529d40e3ca50046d7606fa99ce3956a617f9b36380da3b7f0dd3dd28e68cb5 \
-    --hash=sha256:52c8ef851d9a240f11a88c003eacb03c31fc1c9c4ec64a99a0f922b93874fda9 \
-    --hash=sha256:559db847dc486944896521f68d8190be1c9e719fced785720d2216fe7022b662 \
-    --hash=sha256:5a881ab208c0baf688221f8cecc5401bd291d67e38a1ac884d6736cbcd8247e9 \
-    --hash=sha256:5cb41aa38891e073ee49d55fbc7839cfdb2bc0e600add13874d048c94aadddd1 \
-    --hash=sha256:5e262d41726bc187e69af7825504c933b6794dc3fbd5945e41a79bb14c31f585 \
-    --hash=sha256:5ee18d9ebdb417e384b58fe414e8d6af9f4e7a0ae761519fb50f721de398dd4e \
-    --hash=sha256:7008df2e7655c495dd12d2a4ad038ff878d4ca4b81fccaf82b714e07eae4402c \
-    --hash=sha256:734e20b57ba95624ecf1841e72b53f6e186355e216e5412de414e3c51e5e3c41 \
-    --hash=sha256:7c7e1a961a0b2f2472c1ac5b69affa0ae1132c39adcb67aba98568702b9cc23f \
-    --hash=sha256:7f86fd587c4ed9dd76f318225e7d9b29cfc5a9d43de44e5754db8d1128487085 \
-    --hash=sha256:7f94b27a62cfad8496c8d2513e1a222dd446f095fca8987fceef261225538a15 \
-    --hash=sha256:88dceee75c2c63af144e456745e10101eb67361050196b0b6af5d717254dddf7 \
-    --hash=sha256:8a650c2dbafa08d42e51ba0b62740dae4ecb9338eefa093aa5c78ceb546fcd5c \
-    --hash=sha256:8d65a2fbf9d2f8352685bc1364177ee3923d6baf5e7f43ea4959d7d8bc326a36 \
-    --hash=sha256:96481a5786729fd470164b47cdb3e0e58062a496f455ee41b4403be77cb5a076 \
-    --hash=sha256:a120733b01c45e9a0c34aeef92bf0cf1d56cfe81ed9d47d562f9ed591a9828ac \
-    --hash=sha256:b1d22e6e9387bf4739fbe23bfa80e93f6b0373a7f1b96c6227c32bef95a4d7a8 \
-    --hash=sha256:b8c198f8c1805dc42708689ed6864951fd2494f924149d3e4bce7710f8eb5232 \
-    --hash=sha256:c2541745709bad0264b7d4705ad453b76ccd191e64aa6f0fc66b69a293a45ece \
-    --hash=sha256:c742f741d58a28940ce01d58f0ab2ea3ced8b12402f162f4d534dfe18ba1cd6a \
-    --hash=sha256:c7f2c7f2b9ca6bdeef8f0fa897f8e05085923eb091721675170254cbc5b02897 \
-    --hash=sha256:d312ef37c91508b0ab2cee7da26ec0b3ed2f03ce12bd87a588d771ae15dcf82d \
-    --hash=sha256:d4d8fe59808a54658fcc0160ecfb1b30f9089906c50b23bcb4c69eddc19ec2b4 \
-    --hash=sha256:da25dc3563bff5965356133435b757a795a17b17d01dbc0f42fb32447ddfd917 \
-    --hash=sha256:eab21f45c7f66c13f2a9e0e1535309cee140182a9cdae1e041d02e47291e8396 \
-    --hash=sha256:eb0dc4e38e6a1fd579e5d50369aa2e10acfc9cace504579b2faabb478e76941a \
-    --hash=sha256:ec9bfaf3ad2df51ace80688143a6a4ebc09a248f6ff781a9945e51937008fcbc \
-    --hash=sha256:ede3e6487c5ef5d28634ba3f31f989030ad6af71edfb0055cbbd14189ff240ba \
-    --hash=sha256:f3c6818a1a86dd6dca7ddcaaf76947d5ba31aecc28cb1b67009a5877c9a64f3f \
-    --hash=sha256:f758f1b9299d059cc3f6546ae2af89670cb1c4d48ea29c3cacc4fe7de3058257 \
-    --hash=sha256:f8f0fc26ec2cc2b965b7a3b87cd19c5c6b8c5e5f436b984e85f486d652285c30 \
-    --hash=sha256:fd0409a3653af6c147209d267a0e4243f0ae46b011aa978b1080359fddc9b6cf \
-    --hash=sha256:ff18e6a727ee0ab0388507b89d1bc6a22b138d1e2fa56d1ad494586d61d2eae9 \
-    --hash=sha256:ff2983983d34813c1aeb0fa89091e76c3a22889ee83ab27c5eeb45100560c049
-    # via pytest
-typing-extensions==4.16.0 ; python_full_version < '3.11' \
-    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \
-    --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
-    # via exceptiongroup
diff --git a/requirements/chap-fixed.in b/requirements/chap-fixed.in
index 81d0cf14..8a26dcd1 100644
--- a/requirements/chap-fixed.in
+++ b/requirements/chap-fixed.in
@@ -7,8 +7,8 @@
 # rfc8785 and pytest are the integration's runtime and test dependencies,
 # which the --no-deps editable install no longer pulls in.
 # The floating job stays unpinned on purpose (drift detection).
-agentrust-trace==0.10.0
+agentrust-trace==0.11.0
 agentrust-trace-tests==0.5.1
-chap-coordinator==0.2.13
+chap-coordinator==0.3.3
 rfc8785
 pytest
diff --git a/requirements/chap-fixed.txt b/requirements/chap-fixed.txt
index bc017912..bce99d1c 100644
--- a/requirements/chap-fixed.txt
+++ b/requirements/chap-fixed.txt
@@ -1,8 +1,8 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/chap-fixed.in --generate-hashes --universal --python-version 3.11 -o requirements/chap-fixed.txt
-agentrust-trace==0.10.0 \
-    --hash=sha256:a82900c426c92f71ec244a13123611953771d232eb02137fec72927225ab472b \
-    --hash=sha256:e3ef4438ecb8eb9cbbf1aed13d2d409673ef46afe424c8dc579b8ecce79f2b46
+agentrust-trace==0.11.0 \
+    --hash=sha256:7de621eaf795449e365d04967a82a551a18d75c99d248b4a0923f6d593bdb09e \
+    --hash=sha256:8b76de58ec74fad57417093bf7977fe826ce6ade5859b4d5be8ce3938f9fcb35
     # via -r requirements/chap-fixed.in
 agentrust-trace-tests==0.5.1 \
     --hash=sha256:5c13421d41357a5b2e096eced457f5dee65d4921b253b25dac53684b3d31eeeb \
@@ -18,7 +18,7 @@ attrs==26.1.0 \
     # via
     #   jsonschema
     #   referencing
-cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
+cffi==2.1.1 \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
     --hash=sha256:06c72bb76605a4b0cd0aad6930b69d4baf7dd5d806cfc409b824191099700e66 \
     --hash=sha256:0beceaabe56af686895136a2de78db54ecd8e4046b236b8fd6d6cb61389e9bf2 \
@@ -120,18 +120,14 @@ cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
     --hash=sha256:fb92203a88b3d3053034db775110081c49d28be6551923805e039924093761e4 \
     --hash=sha256:fcd22650c908d7b7da162bbfaab594a1227a15d1643a98c68b122ac642fa2264
     # via cryptography
-chap-coordinator==0.2.13 \
-    --hash=sha256:6c4cfd86247bc9593d899c7c454aea4b4f912559381a59ab34b7871bf78c5671 \
-    --hash=sha256:e0f2d8836b375cd34c50c55b7b6914fc81b5ce399807dc9ce6186baa8f139f87
+chap-coordinator==0.3.3 \
+    --hash=sha256:1a8ab8b6abc028cde281a0f2faa0c31cd414dfdcf6630ad5e7eac81d20e5b08e \
+    --hash=sha256:4adf70fa717c93a3da0b90b0740bdfbfb72a2854b13674a138cb1337bf04012b
     # via -r requirements/chap-fixed.in
 click==8.5.0 \
     --hash=sha256:255bc9599cf7748b4b1a446ccc735421bd08a2ae529a8b88597d3de5664ee360 \
     --hash=sha256:ba0d2089de75ea0310e2dde03160e6ca10009947fb95a182f9b54021bb272e34
     # via agentrust-trace-tests
-colorama==0.4.6 ; sys_platform == 'win32' \
-    --hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
-    --hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
-    # via pytest
 cryptography==50.0.1 \
     --hash=sha256:01f41478cf33fc605a6a089cd56d28b45c6c0b45a1928b61797f2621a04bac71 \
     --hash=sha256:05ba322c4da95b262a212c345af888ef2c37c88c0509756ea00a0e6d68850f23 \
@@ -204,7 +200,7 @@ pluggy==1.6.0 \
     --hash=sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3 \
     --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746
     # via pytest
-pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy' \
+pycparser==3.0 \
     --hash=sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29 \
     --hash=sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992
     # via cffi
@@ -486,7 +482,6 @@ typing-extensions==4.16.0 \
     # via
     #   pydantic
     #   pydantic-core
-    #   referencing
     #   typing-inspection
 typing-inspection==0.4.4 \
     --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \
diff --git a/requirements/companyscope-incident-register-fixed.in b/requirements/companyscope-incident-register-fixed.in
index 2479ea0f..4e7ba56b 100644
--- a/requirements/companyscope-incident-register-fixed.in
+++ b/requirements/companyscope-incident-register-fixed.in
@@ -3,5 +3,5 @@
 #     --python-version 3.11 -o requirements/companyscope-incident-register-fixed.txt
 # Match the published version recorded in integration.yaml; keep the existing
 # floating job as drift detection against current releases.
-agent-manifest==0.12.0
+agent-manifest==0.15.0
 pytest
diff --git a/requirements/companyscope-incident-register-fixed.txt b/requirements/companyscope-incident-register-fixed.txt
index 5f55be56..a9f27ee8 100644
--- a/requirements/companyscope-incident-register-fixed.txt
+++ b/requirements/companyscope-incident-register-fixed.txt
@@ -1,8 +1,8 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/companyscope-incident-register-fixed.in --generate-hashes --universal --python-version 3.11 -o requirements/companyscope-incident-register-fixed.txt
-agent-manifest==0.12.0 \
-    --hash=sha256:ad8380f39d906054ff07852386bb5caeb3525c82126ccc6b5d463656ba41a8e1 \
-    --hash=sha256:beb4ead3f8f7782563f2a715371a45322c5a927962743eeb1b33ccb07b768177
+agent-manifest==0.15.0 \
+    --hash=sha256:62b10c22c0a3b0888a91f944c703d13f567430dcb25c7e4f71568854e4299017 \
+    --hash=sha256:e6f33bc7b4a1243fded44154df535c5055e09e9f1603d6e9297482eaa6cfef77
     # via -r requirements/companyscope-incident-register-fixed.in
 annotated-types==0.8.0 \
     --hash=sha256:13b2beaad985e05e2d6407ee4c4f35590b11f8d693a258a561055cac8f64cab7 \
@@ -75,7 +75,7 @@ cbor2==6.1.5 \
     --hash=sha256:fd34b35b0a2b366f5b4bd53489ccd10d7576b0d4dd68db38ef64b4e617ea8f76 \
     --hash=sha256:fe81e4ff1b6bab72856d020dab89d86d4dcfbe18af4ff3fe2f391e1b03d0793c
     # via agent-manifest
-cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
+cffi==2.1.1 \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
     --hash=sha256:06c72bb76605a4b0cd0aad6930b69d4baf7dd5d806cfc409b824191099700e66 \
     --hash=sha256:0beceaabe56af686895136a2de78db54ecd8e4046b236b8fd6d6cb61389e9bf2 \
@@ -177,10 +177,6 @@ cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
     --hash=sha256:fb92203a88b3d3053034db775110081c49d28be6551923805e039924093761e4 \
     --hash=sha256:fcd22650c908d7b7da162bbfaab594a1227a15d1643a98c68b122ac642fa2264
     # via cryptography
-colorama==0.4.6 ; sys_platform == 'win32' \
-    --hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
-    --hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
-    # via pytest
 cryptography==50.0.2 \
     --hash=sha256:0ddc924c04591c2811ca024d62ecad4f7f6f08af8939c211438f48a16bd23602 \
     --hash=sha256:0ec5f09541743261e66e291b4a0cbf0fb2997aeaab6d9e9c740b9dba1b58d1c2 \
@@ -254,7 +250,7 @@ pluggy==1.6.0 \
     --hash=sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3 \
     --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746
     # via pytest
-pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy' \
+pycparser==3.0 \
     --hash=sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29 \
     --hash=sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992
     # via cffi
diff --git a/requirements/lint.in b/requirements/lint.in
index cc5461c9..39ffef07 100644
--- a/requirements/lint.in
+++ b/requirements/lint.in
@@ -2,4 +2,4 @@
 #   uv pip compile requirements/lint.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/lint.txt
 # The repo linter.
-ruff==0.16.9
+ruff==0.17.2
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 598fcb77..60a43c0d 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -1,22 +1,22 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/lint.in --generate-hashes --universal --python-version 3.11 -o requirements/lint.txt
-ruff==0.16.9 \
-    --hash=sha256:0e1dbc2073624dee6618d41d0098690a7244654af746704b64759e12b6b6b385 \
-    --hash=sha256:12b625c6cfba78d285d9f48eda5f053374f1e53cb10ef17342a383750db99161 \
-    --hash=sha256:1632eb1d6197f33bd00b1acbc5b71009e89a8895c158e2d2b03a834fac964ab6 \
-    --hash=sha256:41e3870277694177429b56406d65dfbdb2c2802c52b715edaf6a0b829c69d4ee \
-    --hash=sha256:447fc07e1573afff7cb02803462b12b6c8ece7cf10e2cd78565fa6d7a1c0bf8d \
-    --hash=sha256:4684dded7db60aa57cb118fa158630f5feade4af5782903b6053484bdf9bd129 \
-    --hash=sha256:6bd40fec8cd4c8a3d4dd589bd8ad4e6320c13c29234159bfd959a40d529d597b \
-    --hash=sha256:7baa24ef5fc8e77aa93879e1d3f43754a01ae488e869f1ae30cf431afd4d2452 \
-    --hash=sha256:8a3e039a6a40ed976c491722b60e0ae4a4aa1a86057f540ee7a37a5d19ae9120 \
-    --hash=sha256:8adbe4e58af167f767d7b2ba5e83c42e878350796cf78c2f5e14ab9903a92588 \
-    --hash=sha256:95e6f022090368ab3b824c36276839c53b2adf1a3f4c09fefc33dfc400f6da96 \
-    --hash=sha256:a21713e629d3e5bdb2f5c2def1cc7f04f47fa8e1a7eb0571b4a28e1da64bc728 \
-    --hash=sha256:a41aac6230aadfaa133bdfa1614488531ffa3e0837567ae04c0da2058a9c0f9e \
-    --hash=sha256:a5f27be168556594a86d2f415db0cf43f5291917849318f873c7e2791f7a8c67 \
-    --hash=sha256:b3f951b14d865d5952c89d40a5ca07e87abe24fa5453299878411e127748fb1c \
-    --hash=sha256:c2529fb5896d49115b0e9aa8f887490b34bbe76baf879ec2264ac59406869ce7 \
-    --hash=sha256:d29c934357e45642fda2f34c0b1f4025b4a6c01e15e4bf0016879d60078a142c \
-    --hash=sha256:ed1a252039200f57a59eebc063b54beabea67bfbaaca0eeaa7f54b5fbcda2284
+ruff==0.17.2 \
+    --hash=sha256:122258f6ecde0e0dd1bb60b24263c3edde4338caf723fca711cc729f9bfd414a \
+    --hash=sha256:195ad918027f817c119310ca89a42d347887dfc28934aaa869325e9c5dc9d962 \
+    --hash=sha256:1b59d447f197bef9ef48a22ba1a6016137753c6099e9bac9c36eb566e422424c \
+    --hash=sha256:2d086be452eed686aa51271ecf2cbe5037956517cc6ee39a17b4489ac12f8bbe \
+    --hash=sha256:39c5b55c960515cdb32be16e69efb5734c589c06a0eb38a22694524a336b889d \
+    --hash=sha256:583bd67bb9e7061dd09bc46a0a884bae2bbd214dbcd48e509813612619683869 \
+    --hash=sha256:5875a16b0de70b43cb81eabea5ae5e8f5d1b2fd1b5e6ed07f80cfe5019d0bd5a \
+    --hash=sha256:6bce7d1f5165701ae18f5df85c65afe78cddfa6c5fb4b9bdb0014d60388f3edd \
+    --hash=sha256:7cfd783590edf2b77317882631900f6a13ea2e8eacefe6ebf2370d2715299160 \
+    --hash=sha256:7f8fba429d6ac4128ab29cfb8fa6240d2fa671d04adf7f84d3b22fc7b6b6bea4 \
+    --hash=sha256:84d632402d14c23b488f941db23712d6736a013225162062d34558c3f3c780eb \
+    --hash=sha256:8c21b4ab24485358f17291a4f8dc5399b834e963b8efedd920fe4fdb02081bb4 \
+    --hash=sha256:92a80d2f44584dabb0189b3a6c393e37e525e04942838482010575cb81945be7 \
+    --hash=sha256:96a65e755d8dba094707fb23ab602111d9a31ec2835b3a6992a1914a8fcb211e \
+    --hash=sha256:b7d0906677d89bbf3cf73cde64b5bbe2ab35df3ae43e49ee2627301e91265bac \
+    --hash=sha256:ba405cbd5ec7bda1f555d5e52be1fd68d02608d4d95d24591bdac92cfacb579f \
+    --hash=sha256:c555a877f8f41447e318101cfefea9bf12dfa9f82eedf90c376e57e069f917d0 \
+    --hash=sha256:c60f93fec7142dba5b8f487f94bf2f6231dae24dc11e4c48648347c8b0720004
     # via -r requirements/lint.in
diff --git a/requirements/pic-standard-mcp-guard-fixed.txt b/requirements/pic-standard-mcp-guard-fixed.txt
index 5e3f69b9..1e121d4b 100644
--- a/requirements/pic-standard-mcp-guard-fixed.txt
+++ b/requirements/pic-standard-mcp-guard-fixed.txt
@@ -24,7 +24,7 @@ attrs==26.1.0 \
     # via
     #   jsonschema
     #   referencing
-cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
+cffi==2.1.1 \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
     --hash=sha256:06c72bb76605a4b0cd0aad6930b69d4baf7dd5d806cfc409b824191099700e66 \
     --hash=sha256:0beceaabe56af686895136a2de78db54ecd8e4046b236b8fd6d6cb61389e9bf2 \
@@ -130,10 +130,6 @@ click==8.5.0 \
     --hash=sha256:255bc9599cf7748b4b1a446ccc735421bd08a2ae529a8b88597d3de5664ee360 \
     --hash=sha256:ba0d2089de75ea0310e2dde03160e6ca10009947fb95a182f9b54021bb272e34
     # via agentrust-trace-tests
-colorama==0.4.6 ; sys_platform == 'win32' \
-    --hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
-    --hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
-    # via pytest
 cryptography==49.0.0 \
     --hash=sha256:026ac7423e6fa66872d3bf889be5974507da3944f866f704fa200eadacd00001 \
     --hash=sha256:07cab27cc7b7e0fd28e5e26bb9eeedde5c135c868b46de4a27845abe94af6122 \
@@ -207,7 +203,7 @@ packaging==26.3 \
     # via
     #   -r requirements/pic-standard-mcp-guard-fixed.in
     #   pytest
-pic-standard==0.9.1 \
+pic-standard[crypto]==0.9.1 \
     --hash=sha256:befe885d3f1b40c75daf1928a6e669b608cd72d78accbf709180292431893cb1 \
     --hash=sha256:e35a129a1472fd2a101ede63bf1cbb3d991e4117681335230ca213a1ea7b0d4e
     # via -r requirements/pic-standard-mcp-guard-fixed.in
@@ -215,7 +211,7 @@ pluggy==1.7.0 \
     --hash=sha256:7dd7b0d8832ba3cb632c306926ded123429211b83641b35dc5c41ad2d34f9bec \
     --hash=sha256:d1eaa46ebb595891b860ab086b4d09c8588af65ebd4361b8e8f4bb8920b90ba8
     # via pytest
-pycparser==3.11 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy' \
+pycparser==3.11 \
     --hash=sha256:51d5a8ba2be0bbe440b99d2112604c95bbbc3c2748a64260186c541e1729cd80 \
     --hash=sha256:d875f09c3507d00e1aba0eecc6dcadc1352f30fff09dc6bff2f1c2935e97c2bc
     # via cffi
@@ -528,7 +524,6 @@ typing-extensions==4.16.0 \
     # via
     #   pydantic
     #   pydantic-core
-    #   referencing
     #   typing-inspection
 typing-inspection==0.4.4 \
     --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \
diff --git a/requirements/sdk-google-adk.in b/requirements/sdk-google-adk.in
index 17625125..2845d1af 100644
--- a/requirements/sdk-google-adk.in
+++ b/requirements/sdk-google-adk.in
@@ -2,5 +2,5 @@
 #   uv pip compile requirements/sdk-google-adk.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/sdk-google-adk.txt
 # Second pass only: released Google ADK plus the conformance suite.
-google-adk==2.11.0
+google-adk==2.13.0
 agentrust-trace-tests==0.5.1
diff --git a/requirements/sdk-google-adk.txt b/requirements/sdk-google-adk.txt
index d9f1e9b5..890d5f80 100644
--- a/requirements/sdk-google-adk.txt
+++ b/requirements/sdk-google-adk.txt
@@ -29,9 +29,9 @@ attrs==26.1.0 \
     # via
     #   jsonschema
     #   referencing
-authlib==1.8.0 \
-    --hash=sha256:88aebbd9af6757e14e912d5dc007ae1dc1f3e27e3b2152ce7c552ee2c3b3c121 \
-    --hash=sha256:f3ecd5f1da737262fb53bf1a4d95c4ea1ad9dd509316587a255c99ab1838a4f0
+authlib==1.9.1 \
+    --hash=sha256:5c7d9848f47cac340f060f76ae0bc09b59f5c8e89cc1bb032d4370a0c55b5974 \
+    --hash=sha256:8b9be8b1e5174dcbf5520e984f1a22dc2edae5b6e40a61d4cedbf86b97e9e69b
     # via google-adk
 certifi==2026.10.19 \
     --hash=sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae \
@@ -373,6 +373,7 @@ cryptography==50.0.1 \
     # via
     #   agentrust-trace-tests
     #   authlib
+    #   google-adk
     #   google-auth
     #   joserfc
 distro==1.9.0 \
@@ -383,9 +384,9 @@ fastapi==0.141.1 \
     --hash=sha256:bfb91aa2d334c61cb35ba9a116fc123b3d3df31640b801cf57a7a78ec3f603b3 \
     --hash=sha256:e8822fc40db1e1858054d7a949a888695bc9bdce70139178e33bd2871a453ca1
     # via google-adk
-google-adk==2.11.0 \
-    --hash=sha256:4774e1fc7bb37727e56142e7d41e9035949ebfc876a2b15d5505969b02798bcd \
-    --hash=sha256:59258cec8d79306192bf65e0d43fa64b764f831e3b74ed3b8e6fe9df16a1e2c8
+google-adk==2.13.0 \
+    --hash=sha256:bc2389c9d41bfadd9f0c87d6bfd8d5c7eaf1c449e8906079600b8f3752ddaa88 \
+    --hash=sha256:bec4c4ee0aa3e63a2243c23365c5aef666ea539bc48c78dfbbf004dbddfc5f00
     # via -r requirements/sdk-google-adk.in
 google-auth[pyopenssl,requests]==2.57.1 \
     --hash=sha256:ab439dee60a6856412bc058f13a68eb6a59c5b81526bb89cfdcf89ce9c0a48c9 \
@@ -393,9 +394,9 @@ google-auth[pyopenssl,requests]==2.57.1 \
     # via
     #   google-adk
     #   google-genai
-google-genai==2.22.0 \
-    --hash=sha256:9fa3b5d9ddb635005d8ab2d6206fb2b3d7204b66965bbce7de13ecd1a866ebcd \
-    --hash=sha256:c514001c45470cc0a942440ae1b8215445d12bfb6c373aac94637127e1f74ec6
+google-genai==2.33.0 \
+    --hash=sha256:f3f8ab696b35caf95c222e05268740c1ccd6934257890506be73b126150d3b14 \
+    --hash=sha256:fced7f746da45264b34bcf6044a6fcdb91ebad1825e95c324ee48addb6e557ae
     # via google-adk
 graphviz==0.21 \
     --hash=sha256:20743e7183be82aaaa8ad6c93f8893c923bd6658a04c32ee115edb3c8a835f78 \
diff --git a/requirements/sdk-langchain.in b/requirements/sdk-langchain.in
index 6182a302..740e3eab 100644
--- a/requirements/sdk-langchain.in
+++ b/requirements/sdk-langchain.in
@@ -3,5 +3,5 @@
 #     --python-version 3.11 -o requirements/sdk-langchain.txt
 # Second pass only: released LangChain/LangGraph, layered onto
 # adapters-no-framework.txt so the first pass stays framework-free.
-langchain-core==1.6.3
-langgraph==1.2.12
+langchain-core==1.7.0
+langgraph==1.2.17
diff --git a/requirements/sdk-langchain.txt b/requirements/sdk-langchain.txt
index ae0e3c88..8eabd486 100644
--- a/requirements/sdk-langchain.txt
+++ b/requirements/sdk-langchain.txt
@@ -206,7 +206,7 @@ httpcore==1.0.9 \
     --hash=sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55 \
     --hash=sha256:6e34463af53fd2ab5d807f399a9b45ea31c3dfa2276f15a2c3f00afff6e176e8
     # via httpx
-httpcore2==2.12.0 ; sys_platform != 'emscripten' \
+httpcore2==2.12.0 \
     --hash=sha256:7e04258ce01013d7d615e5b910a3b27fac937d7a95038227e79652b4ba3b4ceb \
     --hash=sha256:9293522bba0aa7c4c8e9e3f040c16575bd8868e155a77fa30c7a9085a5eae648
     # via httpx2
@@ -220,10 +220,6 @@ httpx2==2.12.0 \
     --hash=sha256:7631fe9887a8a2275f4a2540e053aa670fcc50742864a9ae7c66e609fdcf12cf \
     --hash=sha256:cc8b6eecb8661c146b8f89a60e97456ee086e91a784ed31ac450c3a9e613dd36
     # via langsmith
-httpx2-jsfetch==1.0 ; python_full_version >= '3.12' and sys_platform == 'emscripten' \
-    --hash=sha256:70a0e3eabfef7cce5ad9c629f7d01ca05e418f586646f4ddf14782e4c1454c60 \
-    --hash=sha256:cb916b707601e69a07721aabc8f3f6659be3a6893bc1ff5c6f9e02241df2da32
-    # via httpx2
 idna==3.19 \
     --hash=sha256:5e0811a4383b21dc5838069f801c4fb62113b7447663d2530d2bd6e77b49bf15 \
     --hash=sha256:815e7be7a7806d54abb586dc943addc79e8b2ee16915059658cbeff4b1b43bf4
@@ -240,28 +236,28 @@ jsonpointer==3.1.1 \
     --hash=sha256:0b801c7db33a904024f6004d526dcc53bbb8a4a0f4e32bfd10beadf60adf1900 \
     --hash=sha256:8ff8b95779d071ba472cf5bc913028df06031797532f08a7d5b602d8b2a488ca
     # via jsonpatch
-langchain-core==1.6.3 \
-    --hash=sha256:114fe1868c9ed60606662b9dd0074bf3152cc6b0b1522ba37cbd6b04f55ca77d \
-    --hash=sha256:88b430944fbd4d40fa98135d6c873581d497b6f33515d01962337548e918df2f
+langchain-core==1.7.0 \
+    --hash=sha256:c34e53358b103cd73f43c63f5f46f9b5c6c3467efdffcdf134892b89020494e4 \
+    --hash=sha256:e82b24d7ac51fc74874baa29d6b3c0b8234880d4f3d897f8ff57fb80dfd9b07d
     # via
     #   -r requirements/sdk-langchain.in
     #   langgraph
     #   langgraph-checkpoint
     #   langgraph-prebuilt
     #   langgraph-sdk
-langchain-protocol==0.0.19 \
-    --hash=sha256:4cdf879a492a35980fd859ae792d3c65458ccaae504e183c9a10d7eac1f0720f \
-    --hash=sha256:79d90a1425122ac87e8052e2ec054fbd09c3edbf341bdfb6397112a495c7bf8c
+langchain-protocol==0.0.20 \
+    --hash=sha256:0f5bd002474265648e91161771a9e0438fe9480bd55a416e51af0f60070637ec \
+    --hash=sha256:3c935e5e46b0f6f9cb52f45ba7cfa53d1b9fa80c82c4a277d47f03e07f7385b1
     # via
     #   langchain-core
     #   langgraph-sdk
-langgraph==1.2.12 \
-    --hash=sha256:5fae9fa4ce771e90f10ff19ce0d5aaef4b41d7632c713d769e89cbce1241a4b9 \
-    --hash=sha256:95403af7b510de8d79164742f71daaf866c69ca804a8cb72bef2cc1fa1ab9813
+langgraph==1.2.17 \
+    --hash=sha256:311516e313abd5424596d6c5250507c89be2e1973cbe813061696728803b0e10 \
+    --hash=sha256:e022a9fea64631fed946557a23f3fa5ac2ff38c72dcb999f426fc77d55ccde60
     # via -r requirements/sdk-langchain.in
-langgraph-checkpoint==4.2.0 \
-    --hash=sha256:0547fd228935a0b758865de3a3d6d7a2537c308895d0f9ab092ce9151b5da942 \
-    --hash=sha256:51a593b6bee684b0818e5d6e58e28ab340c6db7794575056ce7bd1b746a84ed7
+langgraph-checkpoint==4.3.1 \
+    --hash=sha256:215a826935c8db4d9676e79fd95943e5b3847d78604390898e1d98581cc594e5 \
+    --hash=sha256:625e7c78a72b33e7c47f7e87ca051060fb90aa66f5fd551c472c08376fb669cb
     # via
     #   langgraph
     #   langgraph-prebuilt
@@ -269,13 +265,13 @@ langgraph-prebuilt==1.1.0 \
     --hash=sha256:3c579cf6eed2d17f9c157c2d0fcaddcd8688524e7022d3b22b37a3bf4589d528 \
     --hash=sha256:51e311747d755b751d5c6b39b0c1446124d3a7643d2515017e6714b323508fc9
     # via langgraph
-langgraph-sdk==0.4.4 \
-    --hash=sha256:39afe416c91742925e6f8a93715f566d499b36e1b636b804a4ffe3190e4f4e64 \
-    --hash=sha256:4e651ffa09de695681579396375377bdde23bedbc8e35b070e615cbd5af7da8b
+langgraph-sdk==0.4.10 \
+    --hash=sha256:306ede340814e79332812e3b5a8bda2587a09657c95e14e5c7af3370e06c22fe \
+    --hash=sha256:d8d7afd326b4df42ddc0878b7fbf53f03c3237c664c236bf5bac4ab16fc38ed9
     # via langgraph
-langsmith==0.12.2 \
-    --hash=sha256:ca2b6386cf452cf8edebf27c9c476503c18bad895e7ad566578393fa0ba7fea2 \
-    --hash=sha256:ff369ba4390e0969dbb109e838281404ae637e76ef73b347336bae05b4f87331
+langsmith==0.14.14 \
+    --hash=sha256:9265529ed9a592110cc75fa21f088ed34eb5f56ae680f6e9490e7f65e177386c \
+    --hash=sha256:fc28d1981656918f145d8d8089ed924dbf93d95e4959d0c1882cb5aec1563a0d
     # via langchain-core
 orjson==3.12.0 \
     --hash=sha256:010811c1b69773450a01cef97727a67b223242f350b77d4ca000e59a9ef2155a \
@@ -625,7 +621,7 @@ tenacity==9.1.4 \
     --hash=sha256:6095a360c919085f28c6527de529e76a06ad89b23659fa881ae0649b867a9d55 \
     --hash=sha256:adb31d4c263f2bd041081ab33b498309a57c77f9acf2db65aadf0898179cf93a
     # via langchain-core
-truststore==0.10.4 ; sys_platform != 'emscripten' \
+truststore==0.10.4 \
     --hash=sha256:9d91bd436463ad5e4ee4aba766628dd6cd7010cf3e2461756b3303710eebc301 \
     --hash=sha256:adaeaecf1cbb5f4de3b1959b42d41f6fab57b2b1666adb59e89cb0b53361d981
     # via
@@ -636,7 +632,6 @@ typing-extensions==4.16.0 \
     --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
     # via
     #   anyio
-    #   httpx2
     #   langchain-core
     #   langchain-protocol
     #   langsmith
diff --git a/requirements/sdk-openai-agents.in b/requirements/sdk-openai-agents.in
index a3fa9dca..24d5f072 100644
--- a/requirements/sdk-openai-agents.in
+++ b/requirements/sdk-openai-agents.in
@@ -2,4 +2,4 @@
 #   uv pip compile requirements/sdk-openai-agents.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/sdk-openai-agents.txt
 # Second pass only: the released OpenAI Agents SDK.
-openai-agents==0.22.3
+openai-agents==0.24.0
diff --git a/requirements/sdk-openai-agents.txt b/requirements/sdk-openai-agents.txt
index a1c210ba..8e5e0a9f 100644
--- a/requirements/sdk-openai-agents.txt
+++ b/requirements/sdk-openai-agents.txt
@@ -506,10 +506,10 @@ openai==3.24.0 \
     --hash=sha256:1e7463f7d78773ab2ce4fe85710481aa5bd5ffefd54c8de4b067506cd2d42895 \
     --hash=sha256:b59703a3e3b5df78b269e90049d383a1dda58c90104cc4be59db21078db4b7a4
     # via openai-agents
-openai-agents==0.22.3 \
-    --hash=sha256:33c79a5da0c9cf8ace0019bb09e268338d9162a18edbb6c2ce12bc139917109e \
-    --hash=sha256:41dec9e2e703db32a627bf0290f3721a6ca37405603a8cb654213356dbb8ee9d
-    # via -r sdk-openai-agents.in
+openai-agents==0.24.0 \
+    --hash=sha256:18d4ac34e84ed937333ec8ce46395ed3521ffcbb0a521780a4c2eaa451467f49 \
+    --hash=sha256:4b4b285f4fed81fdf1b4ac426a9101658d9cd29b4fb1aaeee18f639b77e704e3
+    # via -r requirements/sdk-openai-agents.in
 opentelemetry-api==1.44.0 \
     --hash=sha256:67647e5e9566edcf421166fdf022b3537f818635daa852b289e34604dc6fb33a \
     --hash=sha256:94b98c893a91b88657eaac1e3ba89618cdb85be6918196705354f34728b2cdef
diff --git a/requirements/sdk-pydantic-ai.in b/requirements/sdk-pydantic-ai.in
index 12d47c04..099d2942 100644
--- a/requirements/sdk-pydantic-ai.in
+++ b/requirements/sdk-pydantic-ai.in
@@ -2,5 +2,5 @@
 #   uv pip compile requirements/sdk-pydantic-ai.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/sdk-pydantic-ai.txt
 # Second pass only: released Pydantic AI, which instruments through OTel.
-pydantic-ai-slim==2.53.0
+pydantic-ai-slim==2.61.0
 opentelemetry-sdk>=1.25
diff --git a/requirements/sdk-pydantic-ai.txt b/requirements/sdk-pydantic-ai.txt
index 3385e996..169ebc74 100644
--- a/requirements/sdk-pydantic-ai.txt
+++ b/requirements/sdk-pydantic-ai.txt
@@ -11,9 +11,9 @@ anyio==4.15.1 \
     #   httpx2
     #   pydantic-ai-slim
     #   pydantic-graph
-genai-prices==0.1.9 \
-    --hash=sha256:20ec774d32ec5d345510877fac415f2560bbfeb081bc4cd4e7ebce57a5503e8d \
-    --hash=sha256:3da8faa0a126e4df7be36696b90abe2be1fea8826bfcf45d39d91bc397fa9d1d
+genai-prices==0.1.13 \
+    --hash=sha256:6d2b40760a2f7f5e207bac9b98de0af80e60c58ead497872a5331a7cee610477 \
+    --hash=sha256:76c9e2dd3917fdacdf3bc562297c4591384142ea2283c477e1512fafa4e3a384
     # via pydantic-ai-slim
 griffelib==2.3.0 \
     --hash=sha256:1b8f9cd525681c26b1d6d574faa1371651e8459ca51d209684f50b8096ae06e0 \
@@ -53,7 +53,7 @@ opentelemetry-api==1.44.0 \
 opentelemetry-sdk==1.44.0 \
     --hash=sha256:cebe7f65dc12f26ead75c6064de12fd2a9052e5060c0272d402cfa203aae123b \
     --hash=sha256:df081c4c6bcfdb1211e3e86140376792643128a25f8d72d1d27675936e7e96ad
-    # via -r sdk-pydantic-ai.in
+    # via -r requirements/sdk-pydantic-ai.in
 opentelemetry-semantic-conventions==0.65b0 \
     --hash=sha256:1cacde7b0ad306f84c5ef08c3dbe1bbaf20165bba6f8bff43b670e555a086bcb \
     --hash=sha256:f9b2b81e9d5b64f11bc952075e7e9c7fb0aab075c7fd1c46d597f1b919852d60
@@ -65,10 +65,10 @@ pydantic==2.13.5 \
     #   genai-prices
     #   pydantic-ai-slim
     #   pydantic-graph
-pydantic-ai-slim==2.53.0 \
-    --hash=sha256:37539693ff944dca2ee1ad30ad3c2b5c8adfdb9f54808767098dbc5410130a9b \
-    --hash=sha256:979fb5553cc32baf9f3aaeff7a83c19d6ce6d19c0284f5cd54087bc9870b2522
-    # via -r sdk-pydantic-ai.in
+pydantic-ai-slim==2.61.0 \
+    --hash=sha256:1d1a2b651de2555c6d0e22e14716969db7cc4f7ff5bd0e06578d5fa6648be462 \
+    --hash=sha256:fe134b7fb8c65ca1e102bcd4c46bd8253866423f9a639ba7ed2341b6eb34b8f2
+    # via -r requirements/sdk-pydantic-ai.in
 pydantic-core==2.46.5 \
     --hash=sha256:013d6f3483d81e02e7c328831808f336c8596ee33b4bd4026b9ffb1e960b8942 \
     --hash=sha256:03b9666e41e35d8909852ba191a0607520f81b74eaf12ccf8737005dbb313821 \
@@ -191,9 +191,9 @@ pydantic-core==2.46.5 \
     --hash=sha256:fc8515076c11f3cfdf4fb142dcca0fe384b1230a3b5415458ac84f3e0903ec13 \
     --hash=sha256:ff218293c9c806138dca139765e3b067621be52bcd93cdc14c7711be7ddc90a9
     # via pydantic
-pydantic-graph==2.53.0 \
-    --hash=sha256:28f05d5f66f5f6b11ef8f1c263f93781271b3af77ef3b313cc51b88a2e33445a \
-    --hash=sha256:48d70fd7affe15f33773a74b9657ab9442569725d9e67263ac3a3b95de89f714
+pydantic-graph==2.61.0 \
+    --hash=sha256:30e93a073998d8bc90ef2b765a8e9b0dc443cca47eb54da78ed8a6986884752d \
+    --hash=sha256:e304dc150ffa148ce04c3b9b248d0333c639abb6812c4cf4f5bcaa9a8eec17fc
     # via pydantic-ai-slim
 truststore==0.10.4 \
     --hash=sha256:9d91bd436463ad5e4ee4aba766628dd6cd7010cf3e2461756b3303710eebc301 \