Skip to content

chore(deps): pin all Python dependencies to exact versions#130

Open
zimeg wants to merge 1 commit into
mainfrom
deps-pin-versions
Open

chore(deps): pin all Python dependencies to exact versions#130
zimeg wants to merge 1 commit into
mainfrom
deps-pin-versions

Conversation

@zimeg

@zimeg zimeg commented Jun 24, 2026

Copy link
Copy Markdown
Member

This pull request pins every Python dependency across all three agent variants to an exact == version.

Summary

  • All variants declared loose or unpinned dependencies, so CI resolved the latest release at run time.
  • pydantic-ai 2.0.0 removed MCPServerStreamableHTTP (now unified under MCPToolset) — under the bare pydantic-ai[...] spec, any newly triggered build (pydantic-ai) run would fail on import. (This already broke CI on the sibling bolt-python-starter-agent.)
  • Pinned every dep to == in each variant's requirements.txt and pyproject.toml so this cannot recur; Dependabot now drives future bumps.
  • pydantic-ai is pinned to 1.107.0, the last 1.x release that still exports MCPServerStreamableHTTP. Migrating to the new MCPToolset API is left as a follow-up.
  • Mirrors the same fix applied to bolt-python-starter-agent.

Testing

  • In a clean venv per variant, install from the pinned requirements.txt, then pip install -e ".[test]" and run pytest — all three pass (9/9 each).
  • Confirm python -c "from pydantic_ai.mcp import MCPServerStreamableHTTP" succeeds under the pinned pydantic-ai==1.107.0.

Every variant declared loose or unpinned dependencies (bare
pydantic-ai/openai-agents, >= and < ranges), so CI resolved the
latest release at run time. pydantic-ai 2.0.0 removed
MCPServerStreamableHTTP (now unified under MCPToolset), which would
break the pydantic-ai build job on any newly triggered run.

Pin every dependency to an exact == version across all three
variants' requirements.txt and pyproject.toml. pydantic-ai is pinned
to 1.107.0, the last 1.x release that still exports
MCPServerStreamableHTTP; migrating to the new MCPToolset API is left
for a follow-up.

Mirrors the same fix applied to bolt-python-starter-agent.
@zimeg zimeg marked this pull request as ready for review June 24, 2026 22:38
@zimeg zimeg requested a review from a team as a code owner June 24, 2026 22:38
@zimeg zimeg self-assigned this Jun 24, 2026
@zimeg zimeg added bug Something isn't working dependencies Pull requests that update a dependency file labels Jun 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant