diff --git a/pyproject.toml b/pyproject.toml index f7f51ddf..4cf4691a 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ requires-python = ">=3.11" dependencies = [ "cryptography>=50.0", "pyyaml>=6.0", - "cedarpy==4.12.1", + "cedarpy==4.12.2", # TRACE record models + RFC 8785 signing, reused rather than reimplemented # (see ROADMAP Tier 0). Pin a compatible minor; cross-repo skew is a known # risk documented in LIMITATIONS.md. diff --git a/requirements/dev.in b/requirements/dev.in index 8e942bd7..ad636eff 100644 --- a/requirements/dev.in +++ b/requirements/dev.in @@ -8,7 +8,7 @@ # --python-version 3.11 -o requirements/dev.txt cryptography>=50.0 pyyaml>=6.0 -cedarpy==4.12.1 +cedarpy==4.12.2 agentrust-trace>=0.5 agent-manifest>=0.11.1 rfc8785>=0.1 diff --git a/requirements/dev.txt b/requirements/dev.txt index 356a4357..86e7d526 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -331,37 +331,37 @@ cbor2==6.1.4 \ --hash=sha256:e8097e8259b78c8feb5dd5b833b23f83ed588e821ef44cf1455082cfc9434440 \ --hash=sha256:f3fc7d15cba4174373df2496070faa4a927fe3ed772130d281808120aec7b61c # via agent-manifest -cedarpy==4.12.1 \ - --hash=sha256:14630de081249519d76a6c9aca9f677251aa5aa722a056ac4e1f365db392f1ed \ - --hash=sha256:1c765643cc3c1472d85324f42147f3732b1c8dd47f71ff066386e7c8afe109b7 \ - --hash=sha256:2609aaa1e2041599592a821de3741c56b2a778b9c20e87ac97c84a0531120dbd \ - --hash=sha256:28f99b8c3f8faf0cd78a82c2a845360f60f47d54ab8b97ba64e19b04a42e70d5 \ - --hash=sha256:3010ab38bd691387944d57d925aab6b743694a89a1cd3de4295421161bad1609 \ - --hash=sha256:333e89642a5914037bead6ddc16ad4d246d7a27f227856c5636db5524d16e27c \ - --hash=sha256:34316ad5eb18d5ed34beb5b00398b1928f9add67dca6fef7f12f6bf11eb86e8d \ - --hash=sha256:357002b436d06ad00cd24c1dc27287933af9c45af0541b0cd9d52036cccfe8c2 \ - --hash=sha256:35e7446894bf8889e5c04118391b8720afee7dcd2e9d4ebecfa646674301fb96 \ - --hash=sha256:3c216ce8e4e9f8edb03154424dd99611e99533c3fb2f552147f61b0fcde5ac22 \ - --hash=sha256:42e238d25695f92898d4249cd659b67e6d9cde0c3f5ab1403cc642af5e4f5b85 \ - --hash=sha256:46429641712af012e1b2579cc1083eb5ab1ea7df2e7117d94b965cfe515255ba \ - --hash=sha256:547fda0b8f9948634a8b4445a449d4736de4312c11a2133aa5df7deb1d2b99fb \ - --hash=sha256:6f814415d96eed4d724b2ea34f1017217a7022a958307986eb009d5878d482c9 \ - --hash=sha256:7047ff6368a9e52453dbd2ac33f8d7d062a67ff1ee3f3a887f41c0a857f3f6e4 \ - --hash=sha256:74b3d6deb0d482f9645b7709016ab81dc7405be83270b10790b646a60f475518 \ - --hash=sha256:7f71d2285a4cd048866bd66aac36c0cff791554d6755f4230a71987f0b601b71 \ - --hash=sha256:80dca63da4cea16969d023daff31a15665ba54a769f633fb26ac5594b7ffd291 \ - --hash=sha256:832bdcd9586bd9597e52b6adf248adc77c1e2b0c55f3cfc10259feb6627bcd96 \ - --hash=sha256:84aaac429b3cae8b9d496aef9ef99426c130bde390767f46738dea04b7a05714 \ - --hash=sha256:869e4318dbd827aea996fe0b858592866fb7ad1888484b71b5fdd15334eaf8a0 \ - --hash=sha256:91410cbd0027a91a1a3dadf919f1d54bc75a62705247b833a004c5e24add1803 \ - --hash=sha256:9497da64835f431a0acdc6f393a841235bc0657188978238badae2ded3653b02 \ - --hash=sha256:970ecd03259e691d8b947c972b03d3ae34c7dd1d3e9e39d03fbe62dccc03227f \ - --hash=sha256:a935e3ed9e5873f88348469eb917e816335f62387d0f9ebed7058fac76c9a547 \ - --hash=sha256:bbcfb99ef9dc0c155677473d7e5bea8baac6ff2abe27b89a530a7cabb184e3e0 \ - --hash=sha256:c5eea3a4ce98862f1dc06bef1038ae8edf52c74d36980e8e75b59a38168f53ab \ - --hash=sha256:d00d151a1b2bd3697d778fd89597cc16aa1fca11da25594d7a000c725477f151 \ - --hash=sha256:e8ed70991b958f344017663f753f044070cd0e61dfd4ffe408ba05d48c48dea4 \ - --hash=sha256:f164ca11999e1d3a1641548d17755c3c45a5385b2590a642ef3122a1196947ca +cedarpy==4.12.2 \ + --hash=sha256:007864e951556b9ec769f3d446f73b3b13f2234aaa00056627bb49218c30aac0 \ + --hash=sha256:0626f2c55e3982b89423402fe6d91334ef2a780c2951c81408676e9ea2f21ac4 \ + --hash=sha256:1a27d6d80665068df644059c6a3513700f3df0f50fd65b3f0050661aa13d4170 \ + --hash=sha256:1b793721d6ffa49a4a94863404332d7da8fe140dc9e97b83217143bfec2a26fe \ + --hash=sha256:1e777f80ac23f50bcb5319a9724015788e262ed7d4efd7c9bc3aa6d5fe072f66 \ + --hash=sha256:310afe5d97fc82238592e760e2cef8f25dbb193c6abede93c6c5cc6564842433 \ + --hash=sha256:33d6430cf5ec485638cb051c91aa6068b0d70d641d01201a2883cf1b5bf11c20 \ + --hash=sha256:35bf1028237cc3aeb0717d8d1c129c355caf8440ec007e6a1309457be94a86b4 \ + --hash=sha256:38941ae12f187e00896ce31036d436fc3190fd0f1501daea6265006aea018e4a \ + --hash=sha256:445ec987b2d39be0e1c55cb4a21121ae10cf95adcebfa156331341f94a8b4d31 \ + --hash=sha256:48bac292e79f88740b90d0a5abde2e2c61a77ca7876e1048da1379a901e8373f \ + --hash=sha256:5f85dc340b97e7057ca5ab8249659ced6d69a13bcb01a248c1d8c9544f34a0c6 \ + --hash=sha256:61e49baf4d075189c068a028a01f6e2f5bb91f1877a2039c55b4fb8709659a07 \ + --hash=sha256:651e25541c43ce1efbf0c58da6af70a312f6138f56e248522365660031202571 \ + --hash=sha256:6d4fee5fee0634a41e08432fc33ecbbe3eb5e6a5f058958a333ed8089579442c \ + --hash=sha256:6fcee9586e069df5b95d369984483b8d2ffcdb588a305a6a738bc934ed1db3f2 \ + --hash=sha256:82ed87e561db7f468c9262993a41ce20ffcfecdc8c9e98f20619f31d01400ac5 \ + --hash=sha256:868a741d31599ea3a10e9e4ae62ffe6213837dcd5295349b13c456ed706c026d \ + --hash=sha256:9b2a3fa0af5fc9369d3be2e761ef98d1bd27b2eb3d6f16260f01642a1ee05b4e \ + --hash=sha256:9e902ab0faafbe1109cea456daba1b0cabd309eaef8b2e6f517949522c24daa3 \ + --hash=sha256:a389bc0e930797e23428608304a0fc78dc46d8b5f2405cc80a683dcde2998ceb \ + --hash=sha256:a38d8d3318cf5067d1240c56e8f76cd3882b048ed1580fdd9794d1d793d5e0eb \ + --hash=sha256:b1829d4b6163072a04d1e6a774f7771b08d15dcee19901f04d70f5a75c27ebb0 \ + --hash=sha256:b5545f575fad6667560b3ca6910b879250dc320095b4eb10d183e09ae5da99dd \ + --hash=sha256:bb52e8af010ee7bd3a4c227d7b20be392085900cd6ef554b0d662e265ed45895 \ + --hash=sha256:c0214599126a6ee93191fc1f0b559e00fbc1e3f07610ec0e3ab31927b40550e7 \ + --hash=sha256:e1b7d93a1b47d9afacb9cdb809576bf9fafa61b266c9f7a587cc2cf80034c489 \ + --hash=sha256:e359db5ae9a1e1e7ec00127b9a97899fd313a931ab4e3f116a47e4996758e897 \ + --hash=sha256:eb6d1f0f40208a2bbcdd20e711a03f7f45bf8c301bb1560a0f162ed6b2f875af \ + --hash=sha256:fdbb1ef908bad76d8fa1fa2d774377bf4763e238a2ca6ac2f1cc15b93a389748 # via -r requirements/dev.in certifi==2026.7.22 \ --hash=sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775 \ diff --git a/requirements/docs.txt b/requirements/docs.txt index baaf1f80..f62eee1a 100644 --- a/requirements/docs.txt +++ b/requirements/docs.txt @@ -247,9 +247,9 @@ jinja2==3.1.6 \ jsmin==3.0.1 \ --hash=sha256:c0959a121ef94542e807a674142606f7e90214a2b3d1eb17300244bbb5cc2bfc # via mkdocs-minify-plugin -markdown==3.11 \ - --hash=sha256:180224db6aed87ba9ce1f2781ebcd5826253de8ff637112090e24b84502bbf9f \ - --hash=sha256:cd6c89e7eb308c8b332ed673215a52d208a43f8bacc030b1419376129408719e +markdown==3.11.1 \ + --hash=sha256:496f4f80f9ebd3395a04c8ec9595c40bbe8ec19e9c67d21fe071a1643e876606 \ + --hash=sha256:f1fa378ba5d682900c9ecb55ccceacca936016dda7c3b27097e8ae03ff78feb5 # via # mkdocs # mkdocs-autorefs @@ -498,9 +498,9 @@ pathspec==1.1.1 \ --hash=sha256:17db5ecd524104a120e173814c90367a96a98d07c45b2e10c2f3919fff91bf5a \ --hash=sha256:a00ce642f577bf7f473932318056212bc4f8bfdf53128c78bbd5af0b9b20b189 # via mkdocs -platformdirs==4.13.1 \ - --hash=sha256:4902b4ad355cb0b202c746b29580ab67c5c2d918e30e3d006353465b82ec3ecc \ - --hash=sha256:ee77cf2d36d5a515b2acf68ede6434cf3a8fc70b822bb6b3264d01b96c69a8e0 +platformdirs==4.13.3 \ + --hash=sha256:5e567f664eb087ab8521c0179cd8d1bd60857d271136567a39719e28e2d383ce \ + --hash=sha256:f6ad7f447f24f8a3b82cce5976387428bff894a0eca6c3488f4a17f153c130c4 # via mkdocs-get-deps pygments==2.21.0 \ --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9 \ diff --git a/requirements/runtime.in b/requirements/runtime.in index dfbf0a53..332594b9 100644 --- a/requirements/runtime.in +++ b/requirements/runtime.in @@ -6,7 +6,7 @@ # --python-version 3.11 -o requirements/runtime.txt cryptography>=50.0 pyyaml>=6.0 -cedarpy==4.12.1 +cedarpy==4.12.2 agentrust-trace>=0.5 agent-manifest>=0.11.1 rfc8785>=0.1 diff --git a/requirements/runtime.txt b/requirements/runtime.txt index 969eb067..b3b1e6ee 100644 --- a/requirements/runtime.txt +++ b/requirements/runtime.txt @@ -69,37 +69,37 @@ cbor2==6.1.4 \ --hash=sha256:e8097e8259b78c8feb5dd5b833b23f83ed588e821ef44cf1455082cfc9434440 \ --hash=sha256:f3fc7d15cba4174373df2496070faa4a927fe3ed772130d281808120aec7b61c # via agent-manifest -cedarpy==4.12.1 \ - --hash=sha256:14630de081249519d76a6c9aca9f677251aa5aa722a056ac4e1f365db392f1ed \ - --hash=sha256:1c765643cc3c1472d85324f42147f3732b1c8dd47f71ff066386e7c8afe109b7 \ - --hash=sha256:2609aaa1e2041599592a821de3741c56b2a778b9c20e87ac97c84a0531120dbd \ - --hash=sha256:28f99b8c3f8faf0cd78a82c2a845360f60f47d54ab8b97ba64e19b04a42e70d5 \ - --hash=sha256:3010ab38bd691387944d57d925aab6b743694a89a1cd3de4295421161bad1609 \ - --hash=sha256:333e89642a5914037bead6ddc16ad4d246d7a27f227856c5636db5524d16e27c \ - --hash=sha256:34316ad5eb18d5ed34beb5b00398b1928f9add67dca6fef7f12f6bf11eb86e8d \ - --hash=sha256:357002b436d06ad00cd24c1dc27287933af9c45af0541b0cd9d52036cccfe8c2 \ - --hash=sha256:35e7446894bf8889e5c04118391b8720afee7dcd2e9d4ebecfa646674301fb96 \ - --hash=sha256:3c216ce8e4e9f8edb03154424dd99611e99533c3fb2f552147f61b0fcde5ac22 \ - --hash=sha256:42e238d25695f92898d4249cd659b67e6d9cde0c3f5ab1403cc642af5e4f5b85 \ - --hash=sha256:46429641712af012e1b2579cc1083eb5ab1ea7df2e7117d94b965cfe515255ba \ - --hash=sha256:547fda0b8f9948634a8b4445a449d4736de4312c11a2133aa5df7deb1d2b99fb \ - --hash=sha256:6f814415d96eed4d724b2ea34f1017217a7022a958307986eb009d5878d482c9 \ - --hash=sha256:7047ff6368a9e52453dbd2ac33f8d7d062a67ff1ee3f3a887f41c0a857f3f6e4 \ - --hash=sha256:74b3d6deb0d482f9645b7709016ab81dc7405be83270b10790b646a60f475518 \ - --hash=sha256:7f71d2285a4cd048866bd66aac36c0cff791554d6755f4230a71987f0b601b71 \ - --hash=sha256:80dca63da4cea16969d023daff31a15665ba54a769f633fb26ac5594b7ffd291 \ - --hash=sha256:832bdcd9586bd9597e52b6adf248adc77c1e2b0c55f3cfc10259feb6627bcd96 \ - --hash=sha256:84aaac429b3cae8b9d496aef9ef99426c130bde390767f46738dea04b7a05714 \ - --hash=sha256:869e4318dbd827aea996fe0b858592866fb7ad1888484b71b5fdd15334eaf8a0 \ - --hash=sha256:91410cbd0027a91a1a3dadf919f1d54bc75a62705247b833a004c5e24add1803 \ - --hash=sha256:9497da64835f431a0acdc6f393a841235bc0657188978238badae2ded3653b02 \ - --hash=sha256:970ecd03259e691d8b947c972b03d3ae34c7dd1d3e9e39d03fbe62dccc03227f \ - --hash=sha256:a935e3ed9e5873f88348469eb917e816335f62387d0f9ebed7058fac76c9a547 \ - --hash=sha256:bbcfb99ef9dc0c155677473d7e5bea8baac6ff2abe27b89a530a7cabb184e3e0 \ - --hash=sha256:c5eea3a4ce98862f1dc06bef1038ae8edf52c74d36980e8e75b59a38168f53ab \ - --hash=sha256:d00d151a1b2bd3697d778fd89597cc16aa1fca11da25594d7a000c725477f151 \ - --hash=sha256:e8ed70991b958f344017663f753f044070cd0e61dfd4ffe408ba05d48c48dea4 \ - --hash=sha256:f164ca11999e1d3a1641548d17755c3c45a5385b2590a642ef3122a1196947ca +cedarpy==4.12.2 \ + --hash=sha256:007864e951556b9ec769f3d446f73b3b13f2234aaa00056627bb49218c30aac0 \ + --hash=sha256:0626f2c55e3982b89423402fe6d91334ef2a780c2951c81408676e9ea2f21ac4 \ + --hash=sha256:1a27d6d80665068df644059c6a3513700f3df0f50fd65b3f0050661aa13d4170 \ + --hash=sha256:1b793721d6ffa49a4a94863404332d7da8fe140dc9e97b83217143bfec2a26fe \ + --hash=sha256:1e777f80ac23f50bcb5319a9724015788e262ed7d4efd7c9bc3aa6d5fe072f66 \ + --hash=sha256:310afe5d97fc82238592e760e2cef8f25dbb193c6abede93c6c5cc6564842433 \ + --hash=sha256:33d6430cf5ec485638cb051c91aa6068b0d70d641d01201a2883cf1b5bf11c20 \ + --hash=sha256:35bf1028237cc3aeb0717d8d1c129c355caf8440ec007e6a1309457be94a86b4 \ + --hash=sha256:38941ae12f187e00896ce31036d436fc3190fd0f1501daea6265006aea018e4a \ + --hash=sha256:445ec987b2d39be0e1c55cb4a21121ae10cf95adcebfa156331341f94a8b4d31 \ + --hash=sha256:48bac292e79f88740b90d0a5abde2e2c61a77ca7876e1048da1379a901e8373f \ + --hash=sha256:5f85dc340b97e7057ca5ab8249659ced6d69a13bcb01a248c1d8c9544f34a0c6 \ + --hash=sha256:61e49baf4d075189c068a028a01f6e2f5bb91f1877a2039c55b4fb8709659a07 \ + --hash=sha256:651e25541c43ce1efbf0c58da6af70a312f6138f56e248522365660031202571 \ + --hash=sha256:6d4fee5fee0634a41e08432fc33ecbbe3eb5e6a5f058958a333ed8089579442c \ + --hash=sha256:6fcee9586e069df5b95d369984483b8d2ffcdb588a305a6a738bc934ed1db3f2 \ + --hash=sha256:82ed87e561db7f468c9262993a41ce20ffcfecdc8c9e98f20619f31d01400ac5 \ + --hash=sha256:868a741d31599ea3a10e9e4ae62ffe6213837dcd5295349b13c456ed706c026d \ + --hash=sha256:9b2a3fa0af5fc9369d3be2e761ef98d1bd27b2eb3d6f16260f01642a1ee05b4e \ + --hash=sha256:9e902ab0faafbe1109cea456daba1b0cabd309eaef8b2e6f517949522c24daa3 \ + --hash=sha256:a389bc0e930797e23428608304a0fc78dc46d8b5f2405cc80a683dcde2998ceb \ + --hash=sha256:a38d8d3318cf5067d1240c56e8f76cd3882b048ed1580fdd9794d1d793d5e0eb \ + --hash=sha256:b1829d4b6163072a04d1e6a774f7771b08d15dcee19901f04d70f5a75c27ebb0 \ + --hash=sha256:b5545f575fad6667560b3ca6910b879250dc320095b4eb10d183e09ae5da99dd \ + --hash=sha256:bb52e8af010ee7bd3a4c227d7b20be392085900cd6ef554b0d662e265ed45895 \ + --hash=sha256:c0214599126a6ee93191fc1f0b559e00fbc1e3f07610ec0e3ab31927b40550e7 \ + --hash=sha256:e1b7d93a1b47d9afacb9cdb809576bf9fafa61b266c9f7a587cc2cf80034c489 \ + --hash=sha256:e359db5ae9a1e1e7ec00127b9a97899fd313a931ab4e3f116a47e4996758e897 \ + --hash=sha256:eb6d1f0f40208a2bbcdd20e711a03f7f45bf8c301bb1560a0f162ed6b2f875af \ + --hash=sha256:fdbb1ef908bad76d8fa1fa2d774377bf4763e238a2ca6ac2f1cc15b93a389748 # via -r requirements/runtime.in cffi==2.1.1 ; platform_python_implementation != 'PyPy' \ --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \