From 6ffa1b90b2bc9267f8d6a98aad0f2d5c4617cc80 Mon Sep 17 00:00:00 2001 From: mschoi Date: Tue, 27 Oct 2026 10:26:34 +0900 Subject: [PATCH] fix(deps): relax the decepticon-core pin for the lockstep co-install model --- packages/autobot/pyproject.toml | 8 +++++--- uv.lock | 2 +- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/packages/autobot/pyproject.toml b/packages/autobot/pyproject.toml index 106f3d3..7f9a4a2 100644 --- a/packages/autobot/pyproject.toml +++ b/packages/autobot/pyproject.toml @@ -36,9 +36,11 @@ classifiers = [ # framework runtime — so it installs and runs standalone (a defender need not # pull in the offensive agent). Red/Blue are composed by Cybertron on top. dependencies = [ - # 2.1.0 is the first core release carrying the AutoBot contract layer - # (OCSF event envelope, EventStoreProtocol, CoverageAdapterProtocol). - "decepticon-core>=2.1.0", + # AutoBot and Decepticon ship in lockstep (release policy §2) — the + # contract layer is version-compatible by construction. Unpinned so the + # co-installed Decepticon workspace's sentinel-versioned member satisfies + # the requirement (uv rejects a 0.0.0 member against a >= floor). + "decepticon-core", "pydantic>=2.0.0", # Agent runtime (Phase 2b-ii): the middleware stack is LangChain-native # (AgentMiddleware), matching the Decepticon agent architecture. The diff --git a/uv.lock b/uv.lock index 26b4056..22065de 100644 --- a/uv.lock +++ b/uv.lock @@ -108,7 +108,7 @@ testing = [ [package.metadata] requires-dist = [ - { name = "decepticon-core", specifier = ">=2.1.0" }, + { name = "decepticon-core" }, { name = "deepagents", specifier = ">=0.3.0" }, { name = "httpx", specifier = ">=0.28.0" }, { name = "langchain", specifier = ">=0.3.0" },