From 6bcb3c4c7860245cbfa855149fc1a9abf5341b0d Mon Sep 17 00:00:00 2001
From: Sam Plant <samp@stacklet.io>
Date: Fri, 30 Oct 2026 17:51:30 +0000
Subject: [PATCH 1/3] fix: allow pydantic-settings 2.14

---
 NEWS.md        | 2 ++
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 3 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/NEWS.md b/NEWS.md
index 4bed06a..79935d2 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -6,6 +6,8 @@
 
 ### Fixes
 
+- **Dependency compatibility**: stacklet-mcp can share an environment with applications
+  requiring pydantic-settings 2.14, including Chainlit 2.12.
 - **Past months' costs**: your AI assistant no longer reports past months as having no
   cost data.
 
diff --git a/pyproject.toml b/pyproject.toml
index fd50135..b994528 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -23,7 +23,7 @@ dependencies = [
   "graphql-core>=3.2",
   "httpx>=0.28.1",
   "pydantic>=2.11.7",
-  "pydantic-settings>=2.13,<2.14",
+  "pydantic-settings>=2.13,<2.15",
   "pyjwt>=2.15",                   # not imported directly; CVE-2026-101918 and CVE-2026-102275 fixed in 2.15.0
   "starlette>=1.3.1",              # not imported directly; CVE-2026-54283 fixed in 1.3.1
 ]
diff --git a/uv.lock b/uv.lock
index 9108fe9..0f03ea0 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1174,16 +1174,16 @@ wheels = [
 
 [[package]]
 name = "pydantic-settings"
-version = "2.13.1"
+version = "2.14.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pydantic" },
     { name = "python-dotenv" },
     { name = "typing-inspection" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/52/6d/fffca34caecc4a3f97bda81b2098da5e8ab7efc9a66e819074a11955d87e/pydantic_settings-2.13.1.tar.gz", hash = "sha256:b4c11847b15237fb0171e1462bf540e294affb9b86db4d9aa5c01730bdbe4025", size = 223826, upload-time = "2026-02-19T13:45:08.055Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5c/b5/8f48e906c3e0205276e8bd8cb7512217a87b2685304d64be27cad5b3019f/pydantic_settings-2.14.2.tar.gz", hash = "sha256:c19dd64b19097f1de80184f0cc7b0272a13ae6e170cbf240a3e27e381ed14a5f", size = 237700, upload-time = "2026-06-19T13:44:56.324Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/00/4b/ccc026168948fec4f7555b9164c724cf4125eac006e176541483d2c959be/pydantic_settings-2.13.1-py3-none-any.whl", hash = "sha256:d56fd801823dbeae7f0975e1f8c8e25c258eb75d278ea7abb5d9cebb01b56237", size = 58929, upload-time = "2026-02-19T13:45:06.034Z" },
+    { url = "https://files.pythonhosted.org/packages/77/c1/6e422f34e569cf8e18df68d1939c81c099d2b61e4f7d9621c8a77560799c/pydantic_settings-2.14.2-py3-none-any.whl", hash = "sha256:a20c97b37910b6550d5ea50fbcc2d4187defe58cd57070b73863d069419c9440", size = 61715, upload-time = "2026-06-19T13:44:55.02Z" },
 ]
 
 [[package]]
@@ -1609,7 +1609,7 @@ requires-dist = [
     { name = "graphql-core", specifier = ">=3.2" },
     { name = "httpx", specifier = ">=0.28.1" },
     { name = "pydantic", specifier = ">=2.11.7" },
-    { name = "pydantic-settings", specifier = ">=2.13,<2.14" },
+    { name = "pydantic-settings", specifier = ">=2.13,<2.15" },
     { name = "pyjwt", specifier = ">=2.15" },
     { name = "starlette", specifier = ">=1.3.1" },
 ]

From ec932b31b13c411d81de5da5621cf5316fa4dee5 Mon Sep 17 00:00:00 2001
From: Sam Plant <samp@stacklet.io>
Date: Fri, 30 Oct 2026 18:09:33 +0000
Subject: [PATCH 2/3] fix: use supported Python release for CI bootstrap

---
 .tool-versions | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.tool-versions b/.tool-versions
index 94f2da4..8edca59 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,3 +1,3 @@
 just   1.50.0
-uv     0.13.4
-python 3.12.10
+uv     0.13.6
+python 3.12.16

From f34f4602c38111b6a8fe0258f5927af8551146d0 Mon Sep 17 00:00:00 2001
From: Sam Plant <samp@stacklet.io>
Date: Fri, 30 Oct 2026 18:16:21 +0000
Subject: [PATCH 3/3] docs: generalize dependency compatibility release note

---
 NEWS.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/NEWS.md b/NEWS.md
index 79935d2..dd8a765 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -6,8 +6,8 @@
 
 ### Fixes
 
-- **Dependency compatibility**: stacklet-mcp can share an environment with applications
-  requiring pydantic-settings 2.14, including Chainlit 2.12.
+- **Dependency compatibility**: relaxed version constraints to allow additional
+  dependency versions validated by our test suite.
 - **Past months' costs**: your AI assistant no longer reports past months as having no
   cost data.