Files
Alberto Schiabel dafe1389b1 chore(release): prepare Python 0.22.0 and TypeScript releases (#4563)
This PR:

- bumps Python `composio` and all 13 provider packages to `0.22.0`
- regenerates `uv.lock` and adds the coordinated Python and TypeScript
release changelog
- records the manually published `@composio/typesafe@0.1.0` as the
repository baseline
- replaces the original TypeSafe minor changeset with a patch release
for `0.1.1`, so post-publication runtime fixes ship instead of being
skipped
- keeps the existing Changesets train for `@composio/core@0.19.0`,
`@composio/slim@0.19.0`, and provider updates
- verifies the release workflow, changesets, all 20 TypeScript package
builds, 147 TypeSafe tests, 590 docs static tests, and all 28 Python
distributions with Twine
2026-09-21 23:02:55 +04:00

54 lines
1.8 KiB
TOML

[project]
name = "composio"
version = "0.22.0"
description = "SDK for integrating Composio with your applications."
readme = "README.md"
requires-python = ">=3.10,<4"
dependencies = [
"pysher>=1.0.8",
"pydantic>=2.11.9",
"composio-client==1.43.0",
"typing-extensions>=4.16.0",
"openai>=2.48.0",
"json-schema-to-pydantic>=0.4.11",
"jsonschema>=4.23.0",
# The pinning adapter mounts through `get_connection_with_tls_context`,
# which `HTTPAdapter.send` only calls on requests >= 2.32.2; older
# versions silently skip it and the pinning never engages.
# 2.32.4 fixes GHSA-9hjg-9r4m-mvj7 (.netrc credentials leaked to a
# malicious URL); `url_safety` fetches user- and server-supplied URLs.
"requests>=2.32.4",
# `url_safety` imports urllib3 directly: `NameResolutionError` only exists
# from 2.0, and the pinning adapter reaches into 2.x connection internals.
# requests alone allows 1.x, which would fail at import time.
# 2.7.0 fixes GHSA-mf9v-mfxr-j63j (decompression-bomb guard bypass in
# the streaming API our download size limit relies on) and
# GHSA-qccp-gfcp-xxvc (sensitive headers forwarded across origins).
"urllib3>=2.7.0",
]
classifiers = [
"Programming Language :: Python :: 3",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
]
[dependency-groups]
dev = [
"composio",
"nox>=2026.7.11",
"pytest>=9.1.1",
"pytest-timeout>=2.4.0",
"pytest-mock>=3.15.1",
"hypothesis>=6.140.3",
"requests>=2.34.2",
"ruff>=0.16.0",
# Langchain provider demo
"langchain_openai==1.6.0",
"fastapi>=0.140.0",
"twine>=6.2.0",
"click>=8.4.2",
"semver>=3.0.4",
# CrewAI 1.x currently constrains Tomli to the 2.0 line.
"tomli>=2.0.2,<2.1",
]