From 3ec9a0f052b87bec580c9fc652d7ea160b8a0f39 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 30 Sep 2026 22:47:10 +0000 Subject: [PATCH] build(deps): bump the python-deps group across 3 directories with 8 updates Updates the requirements on [msal](https://github.com/AzureAD/microsoft-authentication-library-for-python), [requests](https://github.com/psf/requests), [urllib3](https://github.com/urllib3/urllib3), [httpx](https://github.com/encode/httpx), [mcp](https://github.com/modelcontextprotocol/python-sdk), [pyyaml](https://github.com/yaml/pyyaml), [cryptography](https://github.com/pyca/cryptography) and [python-dotenv](https://github.com/theskumar/python-dotenv) to permit the latest version. Updates `msal` to 1.39.0 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-python/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/RELEASES.md) - [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.0...1.39.0) Updates `requests` to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](https://github.com/psf/requests/compare/v2.32.0...v2.34.2) Updates `urllib3` to 2.8.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/2.2.0...2.8.0) Updates `httpx` to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpx/compare/0.27.0...0.28.1) Updates `mcp` to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.29.0...v2.2.0) Updates `pyyaml` to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/46.0.0...50.0.1) Updates `httpx` to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpx/compare/0.27.0...0.28.1) Updates `mcp` to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.29.0...v2.2.0) Updates `httpx` to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpx/compare/0.27.0...0.28.1) Updates `mcp` to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.29.0...v2.2.0) Updates `python-dotenv` to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.2.3) --- updated-dependencies: - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: python-deps - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production dependency-group: python-deps - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production dependency-group: python-deps - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production dependency-group: python-deps - dependency-name: mcp dependency-version: 2.2.0 dependency-type: direct:production dependency-group: python-deps - dependency-name: mcp dependency-version: 2.2.0 dependency-type: direct:production dependency-group: python-deps - dependency-name: mcp dependency-version: 2.2.0 dependency-type: direct:production dependency-group: python-deps - dependency-name: msal dependency-version: 1.38.0 dependency-type: direct:production dependency-group: python-deps - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production dependency-group: python-deps - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production dependency-group: python-deps - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production dependency-group: python-deps - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: direct:production dependency-group: python-deps ... Signed-off-by: dependabot[bot] --- .../ess-maker-skills/scripts/requirements.txt | 14 +++++++------- .../src/mcp/agentconfig_core/requirements.txt | 8 ++++---- .../src/mcp/servicenow/requirements.txt | 4 ++-- .../src/mcp/workday/requirements.txt | 6 +++--- 4 files changed, 16 insertions(+), 16 deletions(-) diff --git a/solutions/ess-maker-skills/scripts/requirements.txt b/solutions/ess-maker-skills/scripts/requirements.txt index a60d2a3b9..5ff3a4833 100644 --- a/solutions/ess-maker-skills/scripts/requirements.txt +++ b/solutions/ess-maker-skills/scripts/requirements.txt @@ -4,16 +4,16 @@ # pip ecosystem grouping in .github/dependabot.yml. # Auth + HTTP -msal>=1.31.0,<2.0 -requests>=2.32.0,<3.0 -urllib3>=2.2.0,<3.0 -httpx>=0.27.0,<1.0 +msal>=1.39.0,<2.0 +requests>=2.34.2,<3.0 +urllib3>=2.8.0,<3.0 +httpx>=0.28.1,<1.0 # Local AgentConfiguration MCP server -mcp>=1.29.0,<2.0.0 +mcp>=2.2.0,<3.0.0 # YAML parse for pre-push schema validation -PyYAML>=6.0.2,<7.0 +PyYAML>=6.0.3,<7.0 # Safe XML parsing for Workday SOAP responses (XXE / billion-laughs hardened). defusedxml>=0.7.1,<0.8 @@ -30,7 +30,7 @@ pythonnet>=3.1.0,<4.0 # msal pulls cryptography transitively; this constraint only narrows the # acceptable range on win_arm64 so resolution lands on a wheel-having # version. Other platforms keep msal's own (wider) cryptography bound. -cryptography>=46.0.0; sys_platform == "win32" and platform_machine == "ARM64" +cryptography>=50.0.1; sys_platform == "win32" and platform_machine == "ARM64" # Shared AgentConfiguration authentication and cache persistence -r ../src/mcp/agentconfig_core/requirements.txt diff --git a/solutions/ess-maker-skills/src/mcp/agentconfig_core/requirements.txt b/solutions/ess-maker-skills/src/mcp/agentconfig_core/requirements.txt index 3ba35beae..579ca872d 100644 --- a/solutions/ess-maker-skills/src/mcp/agentconfig_core/requirements.txt +++ b/solutions/ess-maker-skills/src/mcp/agentconfig_core/requirements.txt @@ -1,5 +1,5 @@ -httpx>=0.27.0,<1.0 -msal>=1.35.0 +httpx>=0.28.1,<1.0 +msal>=1.39.0 msal-extensions[portalocker]>=1.3.1,<2.0 -requests>=2.32.0,<3.0 -urllib3>=2.2.0,<3.0 +requests>=2.34.2,<3.0 +urllib3>=2.8.0,<3.0 diff --git a/solutions/ess-maker-skills/src/mcp/servicenow/requirements.txt b/solutions/ess-maker-skills/src/mcp/servicenow/requirements.txt index 9714bd9ae..180185f69 100644 --- a/solutions/ess-maker-skills/src/mcp/servicenow/requirements.txt +++ b/solutions/ess-maker-skills/src/mcp/servicenow/requirements.txt @@ -1,2 +1,2 @@ -mcp>=1.0.0 -httpx>=0.27.0 +mcp>=2.2.0 +httpx>=0.28.1 diff --git a/solutions/ess-maker-skills/src/mcp/workday/requirements.txt b/solutions/ess-maker-skills/src/mcp/workday/requirements.txt index fcdfe6427..24e9a8550 100644 --- a/solutions/ess-maker-skills/src/mcp/workday/requirements.txt +++ b/solutions/ess-maker-skills/src/mcp/workday/requirements.txt @@ -1,4 +1,4 @@ -mcp>=1.0.0 -httpx>=0.27.0 -python-dotenv>=1.0.0 +mcp>=2.2.0 +httpx>=0.28.1 +python-dotenv>=1.2.3 defusedxml>=0.7.1