composiohq__composio/.changeset/dependency-rollup.md at py@0.18.0

mirror of https://github.com/ComposioHQ/composio.git synced 2026-09-22 11:46:35 +08:00

Files

T

Alberto Schiabel 58bc93b2d9 chore(deps): consolidate dependency updates (#3760 )

This PR:
- consolidates https://github.com/ComposioHQ/composio/pull/3733,
https://github.com/ComposioHQ/composio/pull/3735 through
https://github.com/ComposioHQ/composio/pull/3744, and
https://github.com/ComposioHQ/composio/pull/3752
- refreshes the pnpm workspace dependencies under the existing
`minimumReleaseAge` supply-chain gate
- keeps latest compatible pins for ESLint 9, AI SDK 6, and Cloudflare
workers types 4 where latest majors conflict with the current workspace
- keeps zod-v3 runtime fixtures on `zod@3.25.76` while bumping the
workspace catalog to zod 4
- bumps Python `composio-client` to `1.42.0` and refreshes `uv.lock`
- updates the SHA-pinned Claude and Codex workflow actions from the
Dependabot action group
- adds a patch changeset for the versioned package manifests touched by
dependency updates
- verifies the rollup with frozen pnpm/uv locks, peer checks, audit
threshold checks, typecheck, lint, builds, TypeScript tests, and Python
`nox -s chk`

## Context

`pnpm audit --prod --audit-level=moderate` passes. The remaining
production audit item is a low `@ai-sdk/provider-utils` advisory through
Mastra transitive dependencies; forcing it higher would require leaving
the compatible stable Mastra dependency path.

2026-07-06 14:33:55 +04:00

404 B

Raw Permalink Blame History

@composio/core, @composio/slim, @composio/experimental, @composio/json-schema-to-zod, @composio/anthropic, @composio/claude-agent-sdk, @composio/langchain, @composio/mastra, @composio/openai-agents, @composio/cli-keyring, @composio/ts-builders

@composio/core	@composio/slim	@composio/experimental	@composio/json-schema-to-zod	@composio/anthropic	@composio/claude-agent-sdk	@composio/langchain	@composio/mastra	@composio/openai-agents	@composio/cli-keyring	@composio/ts-builders
patch	patch	patch	patch	patch	patch	patch	patch	patch	patch	patch

Refresh dependency ranges and lockfiles across the workspace.

404 B Raw Permalink Blame History

404 B

Raw Permalink Blame History