chore: upgrade dependencies across manifests and lockfiles#403
Open
ImBIOS wants to merge 1 commit into
Open
Conversation
|
|
Upgrades esbuild, pydantic-settings, nltk, cryptography, and aiohttp to keep the build healthy and up to date. Closes usemoss#377 Closes usemoss#366 Closes usemoss#364 Closes usemoss#363 Closes usemoss#357
Contributor
There was a problem hiding this comment.
Pull request overview
This PR performs repository-wide dependency maintenance across JavaScript (npm/pnpm) and Python (uv) lockfiles/manifests to keep builds current and aligned, notably updating esbuild and several Python runtime dependencies used by apps/examples.
Changes:
- Bump esbuild overrides to
^0.28.1and update corresponding npm/pnpm lockfile entries. - Regenerate multiple Python
uv.lockfiles to pull newer dependency versions (notably cryptography, pydantic-settings, and aiohttp where applicable). - Update dependency override declarations in package manifests for the md-indexer and demo-site.
Reviewed changes
Copilot reviewed 4 out of 33 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| packages/vitepress-plugin-moss/demo-site/package.json | Updates pnpm override to force esbuild ^0.28.1 for the demo-site. |
| packages/moss-md-indexer/pnpm-lock.yaml | Updates lockfile override and resolved esbuild packages to 0.28.1. |
| packages/moss-md-indexer/package.json | Updates overrides (and pnpm overrides) to esbuild ^0.28.1. |
| packages/moss-md-indexer/example/package.json | Updates pnpm override to esbuild ^0.28.1 for the example. |
| packages/moss-data-connector/moss-connector-supabase/uv.lock | Regenerated uv lock (includes cryptography upgrade and updated resolved requirements). |
| packages/moss-data-connector/moss-connector-sqlite/uv.lock | Regenerated uv lock (updates resolved requirements). |
| packages/moss-data-connector/moss-connector-mongodb/uv.lock | Regenerated uv lock (updates resolved requirements). |
| packages/agora-moss/uv.lock | Regenerated uv lock (includes cryptography upgrade). |
| apps/agora-moss/uv.lock | Regenerated uv lock (includes cryptography and pydantic-settings upgrades). |
| apps/elevenlabs-moss/uv.lock | Regenerated uv lock (updates resolved requirements). |
| apps/vapi-moss/uv.lock | Regenerated uv lock (updates resolved requirements). |
| moss-live-labs/python/uv.lock | Regenerated uv lock (updates resolved requirements). |
| moss-live-labs/examples/voice-agent/uv.lock | Regenerated uv lock (includes aiohttp upgrade to 3.14.1). |
| moss-live-labs/examples/semantic-cache/uv.lock | Regenerated uv lock (updates resolved requirements). |
| moss-live-labs/examples/image-search/setup-py/uv.lock | Regenerated uv lock (updates resolved requirements). |
| moss-live-labs/examples/image-search/backend-py/uv.lock | Regenerated uv lock (updates resolved requirements). |
| examples/voice-agents/insurance-adjuster/uv.lock | Regenerated uv lock (updates resolved requirements). |
| examples/cookbook/smolagents/uv.lock | Regenerated uv lock (updates resolved requirements). |
| examples/cookbook/sim/uv.lock | Regenerated uv lock (updates resolved requirements). |
| package.json | Updates root override to force esbuild ^0.28.1. |
| package-lock.json | Updates resolved esbuild and platform packages to 0.28.1. |
Files not reviewed (3)
- packages/moss-md-indexer/example/pnpm-lock.yaml: Generated file
- packages/moss-md-indexer/pnpm-lock.yaml: Generated file
- packages/vitepress-plugin-moss/pnpm-lock.yaml: Generated file
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
ImBIOS
force-pushed
the
chore/update-dependencies-and-lockfiles
branch
from
July 16, 2026 04:12
a25847a to
c39b305
Compare
| @@ -1,5 +1,5 @@ | |||
| version = 1 | |||
| revision = 3 | |||
| revision = 2 | |||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR upgrades several dependencies across the repository manifests and lockfiles to keep the build healthy and up to date.
Upgrades:
0.28.1(Closes Update esbuild to the latest version #364)These upgrades keep the dependencies current, secure, and fully compatible across all SDK and example manifests.