[dependabot]

Bumps the python group with 17 updates in the / directory:

Package	From	To
google-adk	2.11.0	2.13.0
pydantic	2.13.5	2.14.2
python-dotenv	1.2.3	1.2.4
uvicorn	0.52.4	0.54.0
agent-manifest	0.12.0	0.15.0
pytest	9.1.1	9.2.0
langchain-core	1.6.3	1.7.3
langgraph	1.2.12	1.2.18
ruff	0.16.9	0.17.3
numpy	2.5.3	2.5.4
pandas	3.0.6	3.1.0
agentrust-trace	0.10.0	0.11.0
chap-coordinator	0.2.13	0.3.4
openai	3.24.0	3.41.0
openai-agents	0.22.3	0.24.0
agent-passport-system	4.2.0	4.3.0
pydantic-ai-slim	2.53.0	2.63.0

Updates google-adk from 2.11.0 to 2.13.0

Release notes

Sourced from google-adk's releases.

v2.13.0

2.13.0 (2026-10-22)

Highlights

This release stabilizes core features while introducing TypeSafe workflow classification, live audio interactions, MongoDB integrations, and execution performance improvements.

• Stability: Access 12 mature experimental features now promoted to stable status. See the unit guide for more details. (ea298d4)
• Classifiers: Route workflows with TypeSafe's Jev models via the new TypesafeClassifier and ClassifierNode. Jev returns calibrated probabilities in a single forward pass, much faster than an LLM. See the unit guide for more details. (ddf8c55, e8c4bac)
• Live Audio: Enable natural real-time voice interactions with barge-in support alongside Gemini speech-to-text and text-to-speech integration. See the unit guide for more details. (2e7ef92)
• MongoDB Sessions & Memory: Persist sessions in MongoDB and share them across runner replicas with the new MongoDbSessionService. Add long-term memory without an embedding model using MongoDbMemoryService, which recalls past turns by keyword match on any MongoDB deployment, with no vector index needed. Both are experimental. See the session service and memory service guides for more details. (0df43f5, e40e349)
• MongoDB: Deploy MongoDbToolset to Agent Engine without packaging your connection string, and let Atlas Automated Embedding embed search queries server-side, with no Google embedding call or credentials needed. See the unit guide for more details. (bc3773f, 2f6c666, 8bbfc33)
• Performance: Enjoy up to 8x faster execution turns for string-model agents and reduced event-loading overhead. (772f139)

Breaking changes

• Telemetry: Defaults to OpenTelemetry GenAI v2 (otel_semconv_1_44, removing call_llm); set ADK_TELEMETRY_SCHEMA_VERSION_OPT_IN=otel_semconv_1_36 to keep the legacy v1 schema. See the unit guide for more details. (7838488)

⚠ BREAKING CHANGES

• telemetry: deprecate call_llm span and OpenTelemetry 1.36 GenAI semconv

Features

• add delete_memory api to BaseMemoryService (41e5c7b), closes #6949
• add MongoDB-backed memory service (e40e349)
• add MongoDB-backed session service (0df43f5)
• add OpenSandbox environment (69d1c90), closes #6758
• classifiers: add BaseClassifier and typed question/answer types (773418f)
• classifiers: add ClassifierNode for workflow routing (e8c4bac)
• classifiers: add LlmClassifier (772b577)
• eval: split invocation duration into model, tool and framework time (e3797a4)
• features: promote 12 mature experimental features to stable (ea298d4)
• honor ADK_SUPPRESS_EXPERIMENTAL_FEATURE_WARNINGS (b592dee), closes #5114
• integrations: add TypesafeClassifier for TypeSafe's Jev models (ddf8c55)
• integrations: keep MongoDB credentials out of Agent Engine packages (ab5cb45)
• live: add barge-in support to CascadeLiveConnection (2e7ef92)
• live: add Gemini speech-to-text and text-to-speech for CascadeLive (f78149a)
• live: add ZIP_STORED visual frame pack and unpack helpers (17d8a5a)
• make MongoDbToolset picklable for Agent Engine (2f6c666)
• plugins: add agent evaluation session and turn trace views (ab9c994)
• plugins: classify error-bearing tool results and extract shared callback helpers (a4b8ee9), closes #7112
• plugins: classify write-time 403 and 404 drops in BigQueryAgentAnalyticsPlugin (d5c87a6)
• plugins: log terminations, node results and tool result errors in the logging plugins (6a77d48)
• record google_search grounding on LLM spans (ead208a), closes #7345
• samples: add Secret Manager and Parameter Manager integration samples (7391411), closes #7582

... (truncated)

Changelog

Sourced from google-adk's changelog.

2.13.0 (2026-10-22)

Highlights

This release stabilizes core features while introducing TypeSafe workflow classification, live audio interactions, MongoDB integrations, and execution performance improvements.

• Stability: Access 12 mature experimental features now promoted to stable status. See the unit guide for more details. (ea298d4)
• Classifiers: Route workflows with TypeSafe's Jev models via the new TypesafeClassifier and ClassifierNode. Jev returns calibrated probabilities in a single forward pass, much faster than an LLM. See the unit guide for more details. (ddf8c55, e8c4bac)
• Live Audio: Enable natural real-time voice interactions with barge-in support alongside Gemini speech-to-text and text-to-speech integration. See the unit guide for more details. (2e7ef92)
• MongoDB Sessions & Memory: Persist sessions in MongoDB and share them across runner replicas with the new MongoDbSessionService. Add long-term memory without an embedding model using MongoDbMemoryService, which recalls past turns by keyword match on any MongoDB deployment, with no vector index needed. Both are experimental. See the session service and memory service guides for more details. (0df43f5, e40e349)
• MongoDB: Deploy MongoDbToolset to Agent Engine without packaging your connection string, and let Atlas Automated Embedding embed search queries server-side, with no Google embedding call or credentials needed. See the unit guide for more details. (bc3773f, 2f6c666, 8bbfc33)
• Performance: Enjoy up to 8x faster execution turns for string-model agents and reduced event-loading overhead. (772f139)

Breaking changes

• Telemetry: Defaults to OpenTelemetry GenAI v2 (otel_semconv_1_44, removing call_llm); set ADK_TELEMETRY_SCHEMA_VERSION_OPT_IN=otel_semconv_1_36 to keep the legacy v1 schema. See the unit guide for more details. (7838488)

⚠ BREAKING CHANGES

• telemetry: deprecate call_llm span and OpenTelemetry 1.36 GenAI semconv

Features

• add delete_memory api to BaseMemoryService (41e5c7b), closes #6949
• add MongoDB-backed memory service (e40e349)
• add MongoDB-backed session service (0df43f5)
• add OpenSandbox environment (69d1c90), closes #6758
• classifiers: add BaseClassifier and typed question/answer types (773418f)
• classifiers: add ClassifierNode for workflow routing (e8c4bac)
• classifiers: add LlmClassifier (772b577)
• eval: split invocation duration into model, tool and framework time (e3797a4)
• features: promote 12 mature experimental features to stable (ea298d4)
• honor ADK_SUPPRESS_EXPERIMENTAL_FEATURE_WARNINGS (b592dee), closes #5114
• integrations: add TypesafeClassifier for TypeSafe's Jev models (ddf8c55)
• integrations: keep MongoDB credentials out of Agent Engine packages (ab5cb45)
• live: add barge-in support to CascadeLiveConnection (2e7ef92)
• live: add Gemini speech-to-text and text-to-speech for CascadeLive (f78149a)
• live: add ZIP_STORED visual frame pack and unpack helpers (17d8a5a)
• make MongoDbToolset picklable for Agent Engine (2f6c666)
• plugins: add agent evaluation session and turn trace views (ab9c994)
• plugins: classify error-bearing tool results and extract shared callback helpers (a4b8ee9), closes #7112
• plugins: classify write-time 403 and 404 drops in BigQueryAgentAnalyticsPlugin (d5c87a6)
• plugins: log terminations, node results and tool result errors in the logging plugins (6a77d48)
• record google_search grounding on LLM spans (ead208a), closes #7345
• samples: add Secret Manager and Parameter Manager integration samples (7391411), closes #7582
• seed adk web sessions from initial_state.json (3c8c63e), closes #4961

... (truncated)

Commits

• d68ca85 chore: update last-release-sha for next main release
• 4326f06 chore(release/candidate): release 2.13.0 (#7653)
• e40e349 feat: add MongoDB-backed memory service
• 83ffe8b fix: stub ADC in modules that imported google.auth.default by name
• 0df43f5 feat: add MongoDB-backed session service
• 5f84976 fix: pin certifi 2026.10.19 in the constraints files
• a16c6e1 fix: keep ADK tracking headers and http options when client_kwargs sets http_...
• d68910f fix: require authlib 1.9.1 or newer for CVE fixes
• bc3773f feat(integrations): keep MongoDB credentials out of Agent Engine packages
• 6fa8ba3 refactor: remove the Gemini._merge_tracking_headers wrapper
• Additional commits viewable in compare view

Updates pydantic from 2.13.5 to 2.14.2

Release notes

Sourced from pydantic's releases.

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

• Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @​Viicos in #14003
• Bump speedate to v0.18.0 by @​Viicos in #14007
• Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @​Viicos in #14083

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Lazily call repr of values during nested union serialization by @​Viicos in #14082
• Skip decorator field checks when no field decorators exist by @​alexmojaki in #14111
• Avoid heap allocation for small JSON model field buffers by @​alexmojaki in #14113

Fixes

• Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

  JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

  from pydantic import BaseModel, ConfigDict
  from pydantic.alias_generators import to_camel
  class Page(BaseModel):
  model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
  page_size: int = 10
  
  Page.model_validate_json('{"page_size": 50}')
  Before: Page(page_size=10)
  After: ValidationError (extra_forbidden)

  See the pull request for the full list of behavior changes. This change addresses GHSA-qpmf-fgh3-ff25.

• Ignore extra data matching a field name in TypedDict and dataclasses with extra=allow by @​Viicos in #14090. Addresses GHSA-3r8g-cqwr-jr29.

• Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

• Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

• Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

• Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

• Implement recursion guard for validate_strings() by @​Viicos in #14029

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.2 (2026-10-29)

GitHub release

What's Changed

Packaging

• Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @​Viicos in #14003
• Bump speedate to v0.18.0 by @​Viicos in #14007
• Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @​Viicos in #14083

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Lazily call repr of values during nested union serialization by @​Viicos in #14082
• Skip decorator field checks when no field decorators exist by @​alexmojaki in #14111
• Avoid heap allocation for small JSON model field buffers by @​alexmojaki in #14113

Fixes

• Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

  JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

  from pydantic import BaseModel, ConfigDict
  from pydantic.alias_generators import to_camel
  class Page(BaseModel):
  model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
  page_size: int = 10
  
  Page.model_validate_json('{"page_size": 50}')
  Before: Page(page_size=10)
  After: ValidationError (extra_forbidden)

  See the pull request for the full list of behavior changes.

• Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

• Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

• Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

• Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

• Implement recursion guard for validate_strings() by @​Viicos in #14029

• Support named tuples in Sequence serialization by @​Viicos in #14033

... (truncated)

Commits

• aa540ac Update changelog for v2.14.2
• 6cde12f Update changelog for v2.14.2
• 2db7c25 Fix deep copy of self-referential models
• d783154 Update changelog for v2.14.2
• df49b6c Avoid heap allocation for small JSON model field buffers
• cd93e69 Skip decorator field checks when no field decorators exist
• 2771e57 Make JSON validation by iteration consistent with Python approach
• 8102e3f Avoid Python tuple allocation during model fields validation
• dd139b5 Bump pydantic.v1 namespace to v1.10.27
• 66155f9 Prepare release v2.14.2
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Commits

• a565c2c Bump version: 1.2.3 → 1.2.4
• 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
• f215c02 fix: dotenv get exits 0 for empty string values (#700)
• 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
• e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
• a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
• f5485a6 fix: parse empty unquoted value with inline comment as empty string
• See full diff in compare view

Updates uvicorn from 0.52.4 to 0.54.0

Release notes

Sourced from uvicorn's releases.

Version 0.54.0

📨 Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.

uv add uvicorn==0.54.0 "zttp>=0.0.34"

• Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.
• HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

💡 Hint at resources before the final response

• Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0

• Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
• HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

• Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

• Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
• Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
• Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

• Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)
• Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

• Add experimental HTTP/2 support through zttp (#2982, #3101)
• Add support for zuvloop (#3104)

Fixed

• Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
• Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
• Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

Commits

• 3eb9a9a Version 0.54.0 (#3161)
• cd7ef6d Remove races from supervisor tests (#3134)
• a56c7cc Support HTTP/2 response trailers (#3146)
• 9bd4404 chore(deps): bump anyio from 4.13.0 to 4.14.2 (#3145)
• 21f39ef Add HTTP/2 Early Hints support (#3137)
• 421708f Version 0.53.0 (#3136)
• f1a1bff Unset the keep-alive timer when upgrading to WebSocket (#3107)
• 63971ed Document HTTP/2 support (#3130)
• 7d1a005 Remove race from multiprocess health check test (#3128)
• 5ac6265 Add ::1 to FORWARDED_ALLOW_IPS (#3119)
• Additional commits viewable in compare view

Updates agent-manifest from 0.12.0 to 0.15.0

Release notes

Sourced from agent-manifest's releases.

python-v0.15.0

What's Changed

• fix(sdk): attach_receipt refuses a non-array receipts value instead of corrupting it by @​rajnisht7 in agentrust-io/agent-manifest#469
• docs(changelog): file the attach_receipt fix under Unreleased by @​imran-siddique in agentrust-io/agent-manifest#478
• feat(sdk): add opt-in experimental evidence-requirements profile by @​imran-siddique in agentrust-io/agent-manifest#479
• fix(attestation): refuse debug guests and non-VMPL0 SNP reports, release 0.15.0 by @​imran-siddique in agentrust-io/agent-manifest#480

Full Changelog: agentrust-io/agent-manifest@python-v0.14.0...python-v0.15.0

python-v0.14.0

What's Changed

• fix: enforce strict HashValue format when parsing checkpoint roots by @​rajnisht7 in agentrust-io/agent-manifest#465
• docs(api): mark signing_pre_image() as v0.1-only by @​litzki-systems in agentrust-io/agent-manifest#460
• chore(deps): bump the codeql-action group with 4 updates by @​dependabot[bot] in agentrust-io/agent-manifest#467
• docs(spec): publish the two-tool catalog_hash vector in Appendix D by @​imran-siddique in agentrust-io/agent-manifest#470
• docs(spec): correct identity framing, container-digest binding and Blackwell SPDM by @​imran-siddique in agentrust-io/agent-manifest#471
• chore(deps): bump urllib3 to 2.8.0 by @​rajnisht7 in agentrust-io/agent-manifest#475
• fix(attestation): read verdicts from signed evidence, pin the AMD root (0.14.0) by @​imran-siddique in agentrust-io/agent-manifest#476

Full Changelog: agentrust-io/agent-manifest@python-v0.13.1...python-v0.14.0

python-v0.13.1

agent-manifest 0.13.1

pip install agent-manifest==0.13.1

Behaviour change

verify_evidence_pack() now reads the verdict inside the pack. A pack whose embedded section 5.2 verification_result says REVOKED, EXPIRED, MISMATCH or anything other than VALID returns FAILED. Under 0.13.0 the same pack returned VERIFIED. If you accepted those packs, they will now be rejected.

Fixed

• [SDK] verify_evidence_pack() only checked that the embedded verification_result carried a known enum value, and never read its verification_signature. Now a non-VALID result fails the pack, a manifest_id that differs from the pack's manifest fails it, and a result with no manifest_id is MALFORMED. New keyword arguments result_key_id and result_algorithm check verification_signature over the new verification_result_pre_image(). Leave out result_key_id and the result reports verification_result_signature_verified=False with a verification_result_signature_not_appraised warning. signature_verified still covers the outer pack_signature only. (#463)
• [SDK] verify_evidence_pack() and verify_trace_envelope() raised TypeError or ValueError on some untrusted input: a non-string verification_result.result or pack_signature.key_id, or a value RFC 8785 cannot represent (NaN, Infinity, a lone surrogate, an integer beyond 2^53, nesting deeper than 64). They now return MALFORMED. (#463)

Changed

• [CI] CodeQL runs on every pull request and every push to main, with the python/** path filter and the Dependabot skip removed (#463). Write permissions in codeql.yml and docs.yml moved from workflow level to the job that needs them (#464). New ClusterFuzzLite target fuzz_trace.py covers both verifiers (#463).

Full changelog: agentrust-io/agent-manifest@python-v0.13.0...python-v0.13.1

agent-manifest 0.13.0 is on PyPI: pip install agent-manifest==0.13.0.

Compatibility: canonicalize() now follows RFC 8785 exactly (#404, closes #322). It no longer NFC-normalizes strings, no longer escapes U+2028, U+2029 or U+007F to U+009F, and refuses integers above 2**53 - 1. A signature that 0.12.0 made over a document containing any of those will not verify. Every other document canonicalizes to the same bytes as before.

Security fixes

• #404: two distinct strings could share one signature, and two keys that normalized alike produced invalid JSON that silently dropped a signed field.
• #450: verify_revocation_signature() compares signer_key_id in constant time.

... (truncated)

Changelog

Sourced from agent-manifest's changelog.

[0.15.0] - 2026-09-30

Security

• [SDK] verify_attestation_chain() refuses debug guests. The SEV-SNP path never read the signed guest policy and the TDX path never parsed TDATTRIBUTES, so a debug-enabled guest with an allow-listed measurement returned passed=True. A debug guest's memory is readable and writable by the host, so its REPORT_DATA and the code that chose it are the host's to set. The verdict now fails when SNP guest policy DEBUG (bit 19, AMD 56860) or TDX TDATTRIBUTES.DEBUG (bit 0, TD report body offset 120) is set, read from the signed bytes after the signature verifies. SNP reports must also carry VMPL 0, the level both of this package's SNP producers request at (SEVSNPProvider through configfs-TSM, and the Azure paravisor). verify_runtime_report() and verify_runtime_freshness() apply the same checks with no opt-in. ChainVerificationResult gains debug and vmpl, read from the signed report (None without a verified signature, and for platforms with no such field). verify_attestation_chain(allow_debug=True) accepts a debug guest for development and records it in reasons; it does not relax VMPL. SnpReport.debug, TdxQuote.td_attributes and TdxQuote.debug expose the parsed state. Behaviour change: a debug guest, or an SNP report at VMPL 1 to 3, that previously verified now fails.

Added

• [SDK] Experimental, opt-in evidence-requirements-experimental-v1 profile. A v0.2 manifest that declares it may carry a signed evidence_requirements block (components, required relationships, combination policy reference), and agent_manifest.evidence_requirements.verify_evidence_manifest() returns it only after verify_manifest() is VALID. Without the profile the block is still rejected as an unknown field, so existing manifests verify as before. Under the profile every 0.14.0 check still applies, including the signed audit_key_sealed rule under enforce_attestation. Not part of the specification; see docs/evidence-requirements-experimental.md. Consumer: agentrust-io/trace-spec#439.

Fixed

• [SDK] attach_receipt() corrupted or crashed when the envelope's receipts header (label 394) wasn't already an array - a map became its keys, a string its characters, and null/0/false/"" were silently replaced with []. attach_approvals() was already fixed for the same issue in 0.13.0; attach_receipt() now works the same way: a non-array existing value raises CoseStructureError instead of being coerced or overwritten, and receipt itself must be bytes or bytearray. To replace the array, use attach_unprotected(envelope, HDR_RECEIPTS, receipts). Behaviour change: a bad receipt, or a non-array receipts value, now raises instead of being silently coerced.

... (truncated)

Commits

• 2f1b9f5 fix(attestation): refuse debug guests and non-VMPL0 SNP reports, release 0.15...
• 7466b3d feat(sdk): add opt-in experimental evidence-requirements profile (#479)
• 7a28a4b docs(changelog): file the attach_receipt fix under Unreleased (#478)
• d3ed22e fix attach receipt (#469)
• 3c3f5a5 fix(attestation): read verdicts from signed evidence, pin the AMD root (0.14....
• d991472 bump-urllib3-2.8.0 (#475)
• 025247a docs(spec): correct identity framing, container-digest binding and Blackwell ...
• 539c24c docs(spec): publish the two-tool catalog_hash vector in Appendix D (#470)
• 2f54af9 chore(deps): bump the codeql-action group with 4 updates (#467)
• 3c12491 docs(api): mark signing_pre_image() as v0.1-only (#460)
• Additional commits viewable in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

• #14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

• #8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

  Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

• #993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

  • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
  • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

  pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

• #14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

• #14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

• #14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

  They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

• #14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

• #7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

• #14743: Full diff: