2 Commits

Author	SHA1	Message	Date
HAL9000	05acc26c40	chore(deps): upgrade PyYAML to address known security vulnerability ... - Added `pyyaml>=6.0.3` dependency constraint to pyproject.toml after aiohttp to prevent installation of vulnerable older versions with known YAML parsing security issues. - Updated uv.lock package dependencies and requires-dist to include pyyaml entry with specifier '>=6.0.3'. - Added changelog Security section entry under [Unreleased] documenting the upgrade for issue #9055. - Updated CONTRIBUTORS.md with contribution note (PR #9244). - Added BDD test scenario verifying PyYAML security dependency constraint. ISSUES CLOSED: #9055	2026-05-11 08:59:08 +00:00
freemo	a5d6f0c393	fix(a2a): add A2A Python SDK as project dependency ... Add a2a-sdk>=0.3.0 to [project.dependencies] in pyproject.toml. The specification mandates that both local (stdio) and server (HTTP) transports use the A2A Python SDK (ADR-047). Previously the package was absent from pyproject.toml and uv.lock, making the project non-compliant with the spec requirement. Changes: - Add 'a2a-sdk>=0.3.0' to [project.dependencies] in pyproject.toml - Regenerate uv.lock to include a2a-sdk 0.3.25 and its transitive deps - Add Behave scenarios confirming a2a is importable as a project dependency - Add step definitions for the new TDD scenarios ISSUES CLOSED: #2922	2026-04-05 07:18:27 +00:00