Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2026

Bumps the uv group with 1 update in the / directory: protobuf.

Updates protobuf from 6.33.2 to 6.33.5

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Luiz-Frias and others added 16 commits January 10, 2026 22:34
- Created  for environment variable configuration.
- Added  to exclude unnecessary files from version control.
- Introduced  for secret scanning configuration.
- Set up  for pre-commit hooks.
- Specified Python version in .
- Added documentation files including , , and .
- Included  and  for package distribution.
- Updated  and  for project configuration.
- Created initial CI/CD workflows in  and .
- Added various documentation files under  for API, architecture, and integration details.
- Established initial test structure in  directory for unit and integration tests.
- Implemented foundational code structure in  directory for the application logic.
- Ensured all new files are properly formatted and adhere to project standards.
## Features

- **Tool Calling Agent Mode**: Full agentic tool loop with native support across all LLM providers
  - Native tool calling for OpenAI, Anthropic, Gemini, Azure OpenAI, LiteLLM, and Portkey
  - Tool registry with @tool decorator for defining callable functions
  - Automatic Pydantic model → JSON Schema conversion for structured outputs
  - Conversation management with message history and multi-turn tool execution
  - tool_choice parameter support (auto, required, none, or specific tool)
  - Prompt token counting via count_tokens() on all adapters

- **Extension Protocols**: Duck-typed protocols for customizing orchestrator behavior
  - StoppingPolicy: Control when the tool loop terminates
  - ContextCompressor: Compress conversation context between iterations
  - NestedCallPolicy: Configure handling of nested llm_query() calls
  - Default implementations with full backward compatibility

- **Performance Benchmarks**: Comprehensive profiling infrastructure
  - Frame encoding/decoding benchmarks
  - Connection pool performance tests
  - Live LLM benchmarks gated by RLM_LIVE_LLM=1

## Improvements

- Optimized codec for faster frame encoding/decoding
- FINAL() marker search optimization
- Enhanced type hints across adapter layer
- Docker environment host network mode for CI

## Fixes

- Correct async tool execution with proper Optional/Union schema handling
- Trusted OIDC publishing for PyPI releases
- Wheel installation tests include dependencies

Full changelog: https://github.com/Luiz-Frias/agentic-codebase-navigator/blob/main/CHANGELOG.md
- Update ruff-pre-commit from v0.9.3 to v0.14.0
- Remove deprecated UP038 from ignore list
Bumps the uv group with 1 update in the / directory: [filelock](https://github.com/tox-dev/py-filelock).


Updates `filelock` from 3.20.2 to 3.20.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.20.2...3.20.3)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.20.3
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the uv group with 1 update in the / directory: [urllib3](https://github.com/urllib3/urllib3).


Updates `urllib3` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.2...2.6.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Type-Driven Architecture Refactor

## Breaking Changes
- Local environment now uses subprocess workers (was in-process)
- StoppingPolicy detection via policy_stop flag (was string matching)

## Features
- StateMachine[S, E, C] declarative orchestration
- Result[T, E] pattern (Rust-inspired Ok/Err)
- SafeAccessor for duck-typed LLM response navigation
- Optional Pydantic integration (JsonSchemaMapper)
- SDK boundary layer for type-safe Any handling
- Explicit policy_stop flag for StoppingPolicy tracking

## Documentation
- Migration guide (1.1.0 → 1.2.0)
- State machine architecture docs
- Pydantic integration guide
- Expanded troubleshooting

See CHANGELOG.md for full details.
Removes placeholder Goal2 ports that were superseded by the v1.2.0
type-driven architecture refactor.
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 2 to 3.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@v2...v3)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 5 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v5...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the uv group with 1 update in the / directory: [pyasn1](https://github.com/pyasn1/pyasn1).


Updates `pyasn1` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: pyasn1
  dependency-version: 0.6.2
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the uv group with 1 update in the / directory: [protobuf](https://github.com/protocolbuffers/protobuf).


Updates `protobuf` from 6.33.2 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 5, 2026
@dependabot dependabot bot requested a review from Luiz-Frias as a code owner February 5, 2026 16:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 5, 2026
@Luiz-Frias Luiz-Frias closed this Feb 10, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 10, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/uv/uv-915b9422ef branch February 10, 2026 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant