diff --git a/a2a/slack_researcher/pyproject.toml b/a2a/slack_researcher/pyproject.toml index 92a4f9b7..f40b008d 100644 --- a/a2a/slack_researcher/pyproject.toml +++ b/a2a/slack_researcher/pyproject.toml @@ -5,11 +5,11 @@ requires-python = ">=3.11,<3.13" description = "Slack research Agent module" dependencies = [ "ag2[openai,mcp]>=0.13.2", - "tavily-python>=0.7.24", + "tavily-python>=0.7.25", "python-dotenv>=1.2.2", "a2a-sdk>=0.2.16", "urllib3>=2.7.0", # Indirect; prevents CVE-2025-66418 - "python-multipart>=0.0.30", # Indirect; prevents CVE-2026-24486 + "python-multipart>=0.0.32", # Indirect; prevents CVE-2026-24486 ] [tool.ruff] diff --git a/a2a/slack_researcher/uv.lock b/a2a/slack_researcher/uv.lock index 5bacef71..7f7a75dd 100644 --- a/a2a/slack_researcher/uv.lock +++ b/a2a/slack_researcher/uv.lock @@ -537,11 +537,11 @@ wheels = [ [[package]] name = "python-multipart" -version = "0.0.30" +version = "0.0.32" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/4b/82/c8cd43a6e0719bf5a3b034f6726dd701f75829c08944c83d4b95d02ed0e8/python_multipart-0.0.30.tar.gz", hash = "sha256:0edfe0475c1f46ddd3ff7785a626f6118af32bdcf359bb21260367313bb32118", size = 46316, upload-time = "2026-05-31T19:24:55.198Z" } +sdist = { url = "https://files.pythonhosted.org/packages/5b/42/55c32bb9b12693c092ad250a0e82edb5b31ddeda6eb772de5f308b3804ad/python_multipart-0.0.32.tar.gz", hash = "sha256:be54b7f3fa167bb83e4fcd936b887b708f4e57fe75911c02aebf53efaf8d938e", size = 46881, upload-time = "2026-06-04T16:18:58.647Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/1c/fd/0318007beb234790993d3ec5afd051d1dbceb733e81e3afe2b981ece3f37/python_multipart-0.0.30-py3-none-any.whl", hash = "sha256:830964def8c90607ac5daa00514e3987815865713ade8d20febc9177ac0c3c5b", size = 29730, upload-time = "2026-05-31T19:24:53.814Z" }, + { url = "https://files.pythonhosted.org/packages/e1/04/e8135ebd1ad02c56ec633277529b2602ff99ff634be76cdba5744cf554fd/python_multipart-0.0.32-py3-none-any.whl", hash = "sha256:ff6d3f776f16878c894e52e107296ffc890e913c611b1a4ec6c44e2821fe2e23", size = 30042, upload-time = "2026-06-04T16:18:57.319Z" }, ] [[package]] @@ -729,8 +729,8 @@ requires-dist = [ { name = "a2a-sdk", specifier = ">=0.2.16" }, { name = "ag2", extras = ["openai", "mcp"], specifier = ">=0.13.2" }, { name = "python-dotenv", specifier = ">=1.2.2" }, - { name = "python-multipart", specifier = ">=0.0.30" }, - { name = "tavily-python", specifier = ">=0.7.24" }, + { name = "python-multipart", specifier = ">=0.0.32" }, + { name = "tavily-python", specifier = ">=0.7.25" }, { name = "urllib3", specifier = ">=2.7.0" }, ] @@ -770,16 +770,16 @@ wheels = [ [[package]] name = "tavily-python" -version = "0.7.24" +version = "0.7.25" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "httpx" }, { name = "requests" }, { name = "tiktoken" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/92/d3/a6a9c24bfafed30b4ce3c3d685ab00806ad631c9742441f2597ec91f0002/tavily_python-0.7.24.tar.gz", hash = "sha256:6c8954193c6472231e813fe50cbd07806bd86c7228957675eb45875a44d58296", size = 27311, upload-time = "2026-04-27T17:26:50.511Z" } +sdist = { url = "https://files.pythonhosted.org/packages/c3/17/c9eb61fdb8787008321724256a7b4d8537c2bd7e5dea3a9d906f344b873a/tavily_python-0.7.25.tar.gz", hash = "sha256:7fa4a4e9248db8766af1273d0604e48dbf8ff4359af683238feaba8974b259ea", size = 29755, upload-time = "2026-05-29T14:18:23.33Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/63/ce/37e3aba0f359f540bfc57eb178f73d521161761f21e0aa28749f42750b11/tavily_python-0.7.24-py3-none-any.whl", hash = "sha256:1a750108de42c4b0b46e4c1b7b64aeaf7fad7d7bac9167927edce0081fe166c9", size = 20022, upload-time = "2026-04-27T17:26:48.885Z" }, + { url = "https://files.pythonhosted.org/packages/87/4a/b64377abab39ea156473fff10b8f395c4f6c40e609ce20490ecfae245b60/tavily_python-0.7.25-py3-none-any.whl", hash = "sha256:add36692a488d3ca9fb838d92d04e4004bf149a7260c9e12fb727963056af3b0", size = 21866, upload-time = "2026-05-29T14:18:22.063Z" }, ] [[package]]