mirror of
https://github.com/microsoft/semantic-kernel.git
synced 2026-10-12 02:19:06 +00:00
Eduard van Valkenburg
625640b1a4
### Motivation and Context <!-- Thank you for your contribution to the semantic-kernel repo! Please help reviewers and future users, providing the following information: 1. Why is this change required? 2. What problem does it solve? 3. What scenario does it contribute to? 4. If it fixes an open issue, please link to the issue here. --> Consolidates the currently open Python Dependabot updates into one reviewable pull request while preserving the compatibility fixes already applied to those PRs. Supersedes #14463, #14462, #14456, #14393, #14392, #14391, #14336, and #14256. ### Description <!-- Describe your changes, the overall approach, the underlying design. These notes will help understanding how your code works. Thanks! --> - Updates the root Python dependency ranges for `google-genai` and `websockets`. - Keeps `mistralai` on its compatible 1.x API and retains the existing `mcp<2.0` bound because both 2.x updates break current connectors. - Updates `onnxruntime-genai` to 0.15.2 for Python 3.11+ while retaining 0.9.0 for Python 3.10. - Updates the root lockfile to `anyio` 4.14.2, `soupsieve` 2.9, `google-genai` 1.75.0, `websockets` 16.1.1, and the compatible ONNX GenAI pins. - Updates the OAuth server lockfile to `anyio` 4.14.2 and removes its obsolete `sniffio` dependency. - Regenerates and validates the lockfiles with the CI-pinned `uv` 0.5.31. Validation: - `uvx --from 'uv==0.5.31' uv lock --check` passed for both lockfiles. - `uvx --from 'uv==0.5.31' uv sync --all-extras --dev --frozen --quiet` passed. - `uvx --from 'uv==0.5.31' uv run --frozen pytest ./tests/unit --ignore=tests/unit/processes/dapr_runtime` passed. - The OAuth server dependency environment resolves with `uv sync --frozen --no-install-project`; its editable package build remains blocked by the sample's pre-existing missing `README.md`. ### Contribution Checklist <!-- Before submitting this PR, please make sure: --> - [ ] The code builds clean without any errors or warnings - [ ] The PR follows the [SK Contribution Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md) and the [pre-submission formatting script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts) raises no violations - [ ] All unit tests pass, and I have added new tests where possible - [x] I didn't break anyone 😄
10 lines
217 B
Plaintext
10 lines
217 B
Plaintext
# Auto-detect text files, ensure they use LF.
|
|
* text=auto eol=lf working-tree-encoding=UTF-8
|
|
|
|
# Bash scripts
|
|
*.sh text eol=lf
|
|
*.cmd text eol=crlf
|
|
|
|
# Generated dependency lock files
|
|
**/uv.lock linguist-generated=true
|