From 5ec56b455c6f400f2706e89fa5c571b454cac624 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 25 Sep 2026 21:41:11 +0000 Subject: [PATCH 1/2] chore(deps): Bump cedarpy from 4.8.7 to 4.12.0 Bumps [cedarpy](https://github.com/k9securityio/cedar-py) from 4.8.7 to 4.12.0. - [Release notes](https://github.com/k9securityio/cedar-py/releases) - [Changelog](https://github.com/k9securityio/cedar-py/blob/main/CHANGELOG.md) - [Commits](https://github.com/k9securityio/cedar-py/compare/v4.8.7...v4.12.0) --- updated-dependencies: - dependency-name: cedarpy dependency-version: 4.12.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pyproject.toml | 2 +- requirements/dev.in | 2 +- requirements/runtime.in | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index cc95ad3..8291fcd 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ requires-python = ">=3.11" dependencies = [ "cryptography>=50.0", "pyyaml>=6.0", - "cedarpy==4.8.7", + "cedarpy==4.12.0", # TRACE record models + RFC 8785 signing, reused rather than reimplemented # (see ROADMAP Tier 0). Pin a compatible minor; cross-repo skew is a known # risk documented in LIMITATIONS.md. diff --git a/requirements/dev.in b/requirements/dev.in index c53b20c..c4d9784 100644 --- a/requirements/dev.in +++ b/requirements/dev.in @@ -8,7 +8,7 @@ # --python-version 3.11 -o requirements/dev.txt cryptography>=50.0 pyyaml>=6.0 -cedarpy==4.8.7 +cedarpy==4.12.0 agentrust-trace>=0.5 agent-manifest>=0.11.1 rfc8785>=0.1 diff --git a/requirements/runtime.in b/requirements/runtime.in index 65d488c..2a8fae4 100644 --- a/requirements/runtime.in +++ b/requirements/runtime.in @@ -6,7 +6,7 @@ # --python-version 3.11 -o requirements/runtime.txt cryptography>=50.0 pyyaml>=6.0 -cedarpy==4.8.7 +cedarpy==4.12.0 agentrust-trace>=0.5 agent-manifest>=0.11.1 rfc8785>=0.1 From f57d05f7ce9378b2768bc63d4581893722b548f9 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Mon, 28 Sep 2026 11:29:26 -0700 Subject: [PATCH 2/2] build: regenerate lockfiles for cedarpy 4.12.0 The bump changed the .in pins but not the hash-locked .txt files CI installs from, so the test run used cedarpy 4.8.7. Regenerated with uv --universal, upgrading cedarpy only. Co-Authored-By: Claude Opus 5.5 --- requirements/dev.txt | 62 ++++++++++++++++++++-------------------- requirements/runtime.txt | 62 ++++++++++++++++++++-------------------- 2 files changed, 62 insertions(+), 62 deletions(-) diff --git a/requirements/dev.txt b/requirements/dev.txt index 1dfbea3..f304630 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -289,37 +289,37 @@ cbor2==6.1.4 \ --hash=sha256:e8097e8259b78c8feb5dd5b833b23f83ed588e821ef44cf1455082cfc9434440 \ --hash=sha256:f3fc7d15cba4174373df2496070faa4a927fe3ed772130d281808120aec7b61c # via agent-manifest -cedarpy==4.8.7 \ - --hash=sha256:07690aac1f5fd0632fd3bde119c67f39f729cb88329be95b5ab43733bfa18c3c \ - --hash=sha256:081f2881ae4f439c6505dc14c3223d24a147cae0b16bf19f1cde9b9179669bdc \ - --hash=sha256:110cea54ca558996b19599cdca329a3fb59df41a08c86bd06c591e75d9f24d70 \ - --hash=sha256:149a89f910a937bec3835de1f0ccb5f96c955434b6eeb8c357d159bf9da81fcf \ - --hash=sha256:1e3cfb91738795500d2123cbdf389830253899231e34c03bd685e88a0f105474 \ - --hash=sha256:3039ff7905cd97be6504961bbe97abab8ce5eebd23b0811378406bdcab1fe9ea \ - --hash=sha256:31e63b4dff33ddbf9d9f1630c4c46561e78a28776aa43b9c9ba85c5d9483114f \ - --hash=sha256:365e07e108cd5b99bf2777d2ddbe803ab52594a899ab4d1fd1802a4ab27baf75 \ - --hash=sha256:366a9e1b24a5c98e009b1233ec415d843e4b81b0f8d0959626832091d1918147 \ - --hash=sha256:3a4f06417374e66b93a582340d7c8e0c4f88a370387ee3364ad7a8f563c3711c \ - --hash=sha256:3ff337cc540775ef7c043cd01a127b145a47e7565f9e50bc8557ea5fcd8097b5 \ - --hash=sha256:464f93d86e02c6212ee2112862b1c0aa023b65069f9fcd1e4137b523510827d4 \ - --hash=sha256:4998a9aea8e481d122940c87615a0bf3efe574f9e50b7c0efa82c88fab832e48 \ - --hash=sha256:51fec10645fc6a2a8f6c038e791d05297f3afcd3d9513a9c5685e50724debf1b \ - --hash=sha256:5bba28c91c2232f91354f135c1c08c4af8caa609ae1c02ebee970d86cc21ea13 \ - --hash=sha256:73d2209602c424251722cbd62f69dc0f4542fc6dd8ff4b3d29fb856d6145fa7a \ - --hash=sha256:7b2623226b9aaf2b21f988e93f92dc82d7ebfe18806867dbb1f75ab1e4e2acff \ - --hash=sha256:8302a606fd8ab197175e4dd76ae8b6749909c0cbe85ce2235e6878d58ecc477c \ - --hash=sha256:90eda3406daa817c243a0b2499b8b512f47e1c41656302795f9800357650ecde \ - --hash=sha256:9763dd6cdbebb2df6e12d94fcfc07ce0b6c7e77d7cc9da3cf94c9fd05da0a1cd \ - --hash=sha256:995883175655d4a328558ba7eaf1b4f6603cab0e79c543d4bf229777c78e1fb7 \ - --hash=sha256:9ae10446842fa81246315257d470c01cc3b0ccd64b86dece4a87ce2ace5966e1 \ - --hash=sha256:bba2a522c508379f796cd00ab32dea4047ad9d5d0d3091af2b6440a4c64faf99 \ - --hash=sha256:bc6f911e210502c1572a861ebbfe3533885e2738f1e4f492bd6067132a11d2e0 \ - --hash=sha256:bcce86f71a0071d3af5631d4d9e311b4cc66b131d19d1be018810799fc577171 \ - --hash=sha256:c63af3a6d41f273655e348203c6475e6eaeb46b8e2aa42e7c9a70b25880d25c9 \ - --hash=sha256:cf3a1080e6ccf69747da8315f9b1838588b1a8e48d03f939b2775c7b3729102d \ - --hash=sha256:ebbad67672f7b58ce64b1a3eecd2ec5545dfd9dcd64a87345a2ddd922e1dd2f7 \ - --hash=sha256:f4c2eb6f72f3df04c33c7129de0f05b736516464641cfad39322ad542e13d673 \ - --hash=sha256:f713b2874dac187c1fd96712992c5ed20a5d98e463cc7eda6186c36aa8455c64 +cedarpy==4.12.0 \ + --hash=sha256:0781fd8b64f7d48f5caab494204786b261cd6e1a7073d95a28b7dffece1a6509 \ + --hash=sha256:0a43b67e3c9f636a753fb53b7d69b0d464be03783867cf6a56527fb1989010a0 \ + --hash=sha256:11b4db8b637eee06a98c4fda4f033b6e0f7be055c00fd6051783b31b8ade4616 \ + --hash=sha256:138421bf457cd7a9daab97e94409136365c8f78db03578d4e14ee1a0c2745988 \ + --hash=sha256:1e654622e09b6d2ab7e6d7a1a243297d03a9bf7ff6bcd01df370d795ef2dfd1a \ + --hash=sha256:28332b25daf00daa04a0ce617d64ed951d1cd7005104873aec5779cceaec5bc3 \ + --hash=sha256:2965d1208dd019b09be08591284500a1f5cfed275e213eb48d796d1762fe3f4b \ + --hash=sha256:3df55aedd36cfed0dd21aaf11541443a0e5413d7b09945a7506b1a09096d0259 \ + --hash=sha256:3e29045484b6fa1e45bb080e9abfa4b11b8d530b7d397e411d85d010bd7c67ee \ + --hash=sha256:5131633d25a465f5bf6ecf4c60da58c06846adc16de6f826a597a202c137c97e \ + --hash=sha256:8152fa97f0f6849728dc7a9fc006d229a47ab40bce78f79f851dabb502897820 \ + --hash=sha256:8432c63aa98791c1460de491b460214cb285ab4d99c8902380d1ed5c8d6a9b3a \ + --hash=sha256:919186c88c60116f0e116b8a2e830fcae8247e66f83252faad12a0f128a0505e \ + --hash=sha256:95df0b20e62c6b74166c29c982e3f346c27ff0332e46296dee8d5900022c4b04 \ + --hash=sha256:97598b4f5c119e5e2780429bcfa53001d433c2cbe2798ab3d89991b16374a785 \ + --hash=sha256:9d165f2fafeb724eff1b0aa49140c21918c52187bdc283f1227f29e439b7922e \ + --hash=sha256:a58eb381c68fb27f7832b84f9d4d4c608185fd750fadd4dbacd3ab906b0cfc1a \ + --hash=sha256:a88f382f8d20d9f7c746bdbc57ea499cc280d3b9ac61e45d89720d44df936a48 \ + --hash=sha256:a93e328cb988b25ad77e47719f080feb8eaf1f32a3e26a4ee6ffe110b5b32e51 \ + --hash=sha256:ac26b4ce5074ebd3ce4e57ca338d370e49a3502e41be62df52905d86661b33cc \ + --hash=sha256:b1c89fa73cb230bd1836fcd6bff8ccf5df5fdc213735e6eeadf7fccea91448cc \ + --hash=sha256:b2dedd523a2335acb705a598f5875f5b104e9c8e453c21447e5ca6e3f48232b8 \ + --hash=sha256:b4605a8e4db4059f8a7e708184628977b77aa0f2beb9e8cf44a633ccb8390dd1 \ + --hash=sha256:ba50b8674795cfdd1575c3d96fd7c379880a849fc448de445128685adebb7ecf \ + --hash=sha256:ba6c3cfdaa9b29fade2fe31f35761ace3082e0d4de550b943de59d0cdf0173c2 \ + --hash=sha256:bd64201df4f4e742f09bf0b38c0ac5407fd3fad68133d82ee1e446caf4595c42 \ + --hash=sha256:c12ab8d220d345dcb6ea4ec3e263f043640a8daa1a47d6538898bd5326437179 \ + --hash=sha256:d8d219d962a862118c4d31fb492dd3f3e4c8c1fbc2df816d02084ab43ecd58e3 \ + --hash=sha256:ded1a8f80e1ae1ddec1ce308790f1facb9fb3065369df4c227759b6fe1606223 \ + --hash=sha256:f053c8e3996604040e418f93dc59c5baa13bd9cb4f9d2b18cc832d9328543a55 # via -r requirements/dev.in certifi==2026.7.22 \ --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \ diff --git a/requirements/runtime.txt b/requirements/runtime.txt index 5f74387..54a4c2c 100644 --- a/requirements/runtime.txt +++ b/requirements/runtime.txt @@ -69,37 +69,37 @@ cbor2==6.1.4 \ --hash=sha256:e8097e8259b78c8feb5dd5b833b23f83ed588e821ef44cf1455082cfc9434440 \ --hash=sha256:f3fc7d15cba4174373df2496070faa4a927fe3ed772130d281808120aec7b61c # via agent-manifest -cedarpy==4.8.7 \ - --hash=sha256:07690aac1f5fd0632fd3bde119c67f39f729cb88329be95b5ab43733bfa18c3c \ - --hash=sha256:081f2881ae4f439c6505dc14c3223d24a147cae0b16bf19f1cde9b9179669bdc \ - --hash=sha256:110cea54ca558996b19599cdca329a3fb59df41a08c86bd06c591e75d9f24d70 \ - --hash=sha256:149a89f910a937bec3835de1f0ccb5f96c955434b6eeb8c357d159bf9da81fcf \ - --hash=sha256:1e3cfb91738795500d2123cbdf389830253899231e34c03bd685e88a0f105474 \ - --hash=sha256:3039ff7905cd97be6504961bbe97abab8ce5eebd23b0811378406bdcab1fe9ea \ - --hash=sha256:31e63b4dff33ddbf9d9f1630c4c46561e78a28776aa43b9c9ba85c5d9483114f \ - --hash=sha256:365e07e108cd5b99bf2777d2ddbe803ab52594a899ab4d1fd1802a4ab27baf75 \ - --hash=sha256:366a9e1b24a5c98e009b1233ec415d843e4b81b0f8d0959626832091d1918147 \ - --hash=sha256:3a4f06417374e66b93a582340d7c8e0c4f88a370387ee3364ad7a8f563c3711c \ - --hash=sha256:3ff337cc540775ef7c043cd01a127b145a47e7565f9e50bc8557ea5fcd8097b5 \ - --hash=sha256:464f93d86e02c6212ee2112862b1c0aa023b65069f9fcd1e4137b523510827d4 \ - --hash=sha256:4998a9aea8e481d122940c87615a0bf3efe574f9e50b7c0efa82c88fab832e48 \ - --hash=sha256:51fec10645fc6a2a8f6c038e791d05297f3afcd3d9513a9c5685e50724debf1b \ - --hash=sha256:5bba28c91c2232f91354f135c1c08c4af8caa609ae1c02ebee970d86cc21ea13 \ - --hash=sha256:73d2209602c424251722cbd62f69dc0f4542fc6dd8ff4b3d29fb856d6145fa7a \ - --hash=sha256:7b2623226b9aaf2b21f988e93f92dc82d7ebfe18806867dbb1f75ab1e4e2acff \ - --hash=sha256:8302a606fd8ab197175e4dd76ae8b6749909c0cbe85ce2235e6878d58ecc477c \ - --hash=sha256:90eda3406daa817c243a0b2499b8b512f47e1c41656302795f9800357650ecde \ - --hash=sha256:9763dd6cdbebb2df6e12d94fcfc07ce0b6c7e77d7cc9da3cf94c9fd05da0a1cd \ - --hash=sha256:995883175655d4a328558ba7eaf1b4f6603cab0e79c543d4bf229777c78e1fb7 \ - --hash=sha256:9ae10446842fa81246315257d470c01cc3b0ccd64b86dece4a87ce2ace5966e1 \ - --hash=sha256:bba2a522c508379f796cd00ab32dea4047ad9d5d0d3091af2b6440a4c64faf99 \ - --hash=sha256:bc6f911e210502c1572a861ebbfe3533885e2738f1e4f492bd6067132a11d2e0 \ - --hash=sha256:bcce86f71a0071d3af5631d4d9e311b4cc66b131d19d1be018810799fc577171 \ - --hash=sha256:c63af3a6d41f273655e348203c6475e6eaeb46b8e2aa42e7c9a70b25880d25c9 \ - --hash=sha256:cf3a1080e6ccf69747da8315f9b1838588b1a8e48d03f939b2775c7b3729102d \ - --hash=sha256:ebbad67672f7b58ce64b1a3eecd2ec5545dfd9dcd64a87345a2ddd922e1dd2f7 \ - --hash=sha256:f4c2eb6f72f3df04c33c7129de0f05b736516464641cfad39322ad542e13d673 \ - --hash=sha256:f713b2874dac187c1fd96712992c5ed20a5d98e463cc7eda6186c36aa8455c64 +cedarpy==4.12.0 \ + --hash=sha256:0781fd8b64f7d48f5caab494204786b261cd6e1a7073d95a28b7dffece1a6509 \ + --hash=sha256:0a43b67e3c9f636a753fb53b7d69b0d464be03783867cf6a56527fb1989010a0 \ + --hash=sha256:11b4db8b637eee06a98c4fda4f033b6e0f7be055c00fd6051783b31b8ade4616 \ + --hash=sha256:138421bf457cd7a9daab97e94409136365c8f78db03578d4e14ee1a0c2745988 \ + --hash=sha256:1e654622e09b6d2ab7e6d7a1a243297d03a9bf7ff6bcd01df370d795ef2dfd1a \ + --hash=sha256:28332b25daf00daa04a0ce617d64ed951d1cd7005104873aec5779cceaec5bc3 \ + --hash=sha256:2965d1208dd019b09be08591284500a1f5cfed275e213eb48d796d1762fe3f4b \ + --hash=sha256:3df55aedd36cfed0dd21aaf11541443a0e5413d7b09945a7506b1a09096d0259 \ + --hash=sha256:3e29045484b6fa1e45bb080e9abfa4b11b8d530b7d397e411d85d010bd7c67ee \ + --hash=sha256:5131633d25a465f5bf6ecf4c60da58c06846adc16de6f826a597a202c137c97e \ + --hash=sha256:8152fa97f0f6849728dc7a9fc006d229a47ab40bce78f79f851dabb502897820 \ + --hash=sha256:8432c63aa98791c1460de491b460214cb285ab4d99c8902380d1ed5c8d6a9b3a \ + --hash=sha256:919186c88c60116f0e116b8a2e830fcae8247e66f83252faad12a0f128a0505e \ + --hash=sha256:95df0b20e62c6b74166c29c982e3f346c27ff0332e46296dee8d5900022c4b04 \ + --hash=sha256:97598b4f5c119e5e2780429bcfa53001d433c2cbe2798ab3d89991b16374a785 \ + --hash=sha256:9d165f2fafeb724eff1b0aa49140c21918c52187bdc283f1227f29e439b7922e \ + --hash=sha256:a58eb381c68fb27f7832b84f9d4d4c608185fd750fadd4dbacd3ab906b0cfc1a \ + --hash=sha256:a88f382f8d20d9f7c746bdbc57ea499cc280d3b9ac61e45d89720d44df936a48 \ + --hash=sha256:a93e328cb988b25ad77e47719f080feb8eaf1f32a3e26a4ee6ffe110b5b32e51 \ + --hash=sha256:ac26b4ce5074ebd3ce4e57ca338d370e49a3502e41be62df52905d86661b33cc \ + --hash=sha256:b1c89fa73cb230bd1836fcd6bff8ccf5df5fdc213735e6eeadf7fccea91448cc \ + --hash=sha256:b2dedd523a2335acb705a598f5875f5b104e9c8e453c21447e5ca6e3f48232b8 \ + --hash=sha256:b4605a8e4db4059f8a7e708184628977b77aa0f2beb9e8cf44a633ccb8390dd1 \ + --hash=sha256:ba50b8674795cfdd1575c3d96fd7c379880a849fc448de445128685adebb7ecf \ + --hash=sha256:ba6c3cfdaa9b29fade2fe31f35761ace3082e0d4de550b943de59d0cdf0173c2 \ + --hash=sha256:bd64201df4f4e742f09bf0b38c0ac5407fd3fad68133d82ee1e446caf4595c42 \ + --hash=sha256:c12ab8d220d345dcb6ea4ec3e263f043640a8daa1a47d6538898bd5326437179 \ + --hash=sha256:d8d219d962a862118c4d31fb492dd3f3e4c8c1fbc2df816d02084ab43ecd58e3 \ + --hash=sha256:ded1a8f80e1ae1ddec1ce308790f1facb9fb3065369df4c227759b6fe1606223 \ + --hash=sha256:f053c8e3996604040e418f93dc59c5baa13bd9cb4f9d2b18cc832d9328543a55 # via -r requirements/runtime.in cffi==2.1.1 ; platform_python_implementation != 'PyPy' \ --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \