mirror of
https://github.com/ComposioHQ/composio.git
synced 2026-09-22 11:46:35 +08:00
dafe1389b1
This PR: - bumps Python `composio` and all 13 provider packages to `0.22.0` - regenerates `uv.lock` and adds the coordinated Python and TypeScript release changelog - records the manually published `@composio/typesafe@0.1.0` as the repository baseline - replaces the original TypeSafe minor changeset with a patch release for `0.1.1`, so post-publication runtime fixes ship instead of being skipped - keeps the existing Changesets train for `@composio/core@0.19.0`, `@composio/slim@0.19.0`, and provider updates - verifies the release workflow, changesets, all 20 TypeScript package builds, 147 TypeSafe tests, 590 docs static tests, and all 28 Python distributions with Twine
54 lines
1.8 KiB
TOML
54 lines
1.8 KiB
TOML
[project]
|
|
name = "composio"
|
|
version = "0.22.0"
|
|
description = "SDK for integrating Composio with your applications."
|
|
readme = "README.md"
|
|
requires-python = ">=3.10,<4"
|
|
dependencies = [
|
|
"pysher>=1.0.8",
|
|
"pydantic>=2.11.9",
|
|
"composio-client==1.43.0",
|
|
"typing-extensions>=4.16.0",
|
|
"openai>=2.48.0",
|
|
"json-schema-to-pydantic>=0.4.11",
|
|
"jsonschema>=4.23.0",
|
|
# The pinning adapter mounts through `get_connection_with_tls_context`,
|
|
# which `HTTPAdapter.send` only calls on requests >= 2.32.2; older
|
|
# versions silently skip it and the pinning never engages.
|
|
# 2.32.4 fixes GHSA-9hjg-9r4m-mvj7 (.netrc credentials leaked to a
|
|
# malicious URL); `url_safety` fetches user- and server-supplied URLs.
|
|
"requests>=2.32.4",
|
|
# `url_safety` imports urllib3 directly: `NameResolutionError` only exists
|
|
# from 2.0, and the pinning adapter reaches into 2.x connection internals.
|
|
# requests alone allows 1.x, which would fail at import time.
|
|
# 2.7.0 fixes GHSA-mf9v-mfxr-j63j (decompression-bomb guard bypass in
|
|
# the streaming API our download size limit relies on) and
|
|
# GHSA-qccp-gfcp-xxvc (sensitive headers forwarded across origins).
|
|
"urllib3>=2.7.0",
|
|
]
|
|
classifiers = [
|
|
"Programming Language :: Python :: 3",
|
|
"License :: OSI Approved :: Apache Software License",
|
|
"Operating System :: OS Independent",
|
|
]
|
|
|
|
[dependency-groups]
|
|
dev = [
|
|
"composio",
|
|
"nox>=2026.7.11",
|
|
"pytest>=9.1.1",
|
|
"pytest-timeout>=2.4.0",
|
|
"pytest-mock>=3.15.1",
|
|
"hypothesis>=6.140.3",
|
|
"requests>=2.34.2",
|
|
"ruff>=0.16.0",
|
|
# Langchain provider demo
|
|
"langchain_openai==1.6.0",
|
|
"fastapi>=0.140.0",
|
|
"twine>=6.2.0",
|
|
"click>=8.4.2",
|
|
"semver>=3.0.4",
|
|
# CrewAI 1.x currently constrains Tomli to the 2.0 line.
|
|
"tomli>=2.0.2,<2.1",
|
|
]
|