build(deps): bump the python-examples group across 2 directories with 14 updates

demos/requirements.txt

@@ -3,6 +3,6 @@
 # demos now use. cmcp-runtime needs a floor. Without one, an unsatisfiable constraint elsewhere in
 # this file makes pip backtrack to 0.1.0 rather than report a conflict, and the demo
 # then dies at startup instead of at install time. See PR body.
-cmcp-runtime>=0.7.0
+cmcp-runtime>=0.7.1
 weight-custody-manifest>=0.32.0,<0.33.0
-openai>=3.24.0
+openai>=3.46.0

demos/requirements/ci.in

@@ -5,5 +5,5 @@
 #   uv pip compile requirements/ci.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/ci.txt
 -r ../requirements.txt
-pytest>=8.0
+pytest>=9.2.0
 httpx>=0.27

demos/requirements/fuzz.in

@@ -4,4 +4,4 @@
 # .clusterfuzzlite/build.sh. Compile with:
 #   uv pip compile requirements/fuzz.in --generate-hashes --universal \
 #     --python-version 3.11 -o requirements/fuzz.txt
-starlette>=1.6.0
+starlette>=1.10.0

demos/requirements/fuzz.txt

@@ -1,20 +1,14 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/fuzz.in --generate-hashes --universal --python-version 3.11 -o requirements/fuzz.txt
-anyio==4.15.1 \
-    --hash=sha256:6152fdbbf9a77fdec97731721bebf7c4c44f7c29b424b0065826173efc7ed101 \
-    --hash=sha256:9f28306018cbd6d329e64a36d58256edff76dd996fe423bc957326e578b82a94
+anyio==4.16.0 \
+    --hash=sha256:59bb03251907983d1603d27c3087ddb1e93299ea2163adcdba37899a4fb12ffb \
+    --hash=sha256:c66ae634e0b8228396b801741beb3294326d4b6102f7bba4041c0dfb58c29026
     # via starlette
 idna==3.20 \
     --hash=sha256:a7db850025b95ded1eae8a46181a1a6c56c92c96f0e2b005d9ff8dc0210cab44 \
     --hash=sha256:ab7ae7122974553370f0bdb919e1a960b2cd1bc1ef0276416d896db81c14582c
     # via anyio
-starlette==1.7.0 \
-    --hash=sha256:67f8e99895493dd2911a03f11314af6ceebeae4e704bb9f43dfc6a9db151c93e \
-    --hash=sha256:c79f74ea63cff761804fbbfb182f1e0b440c2d07b164d24700c5a1bab5d6ff5d
+starlette==1.10.0 \
+    --hash=sha256:478c0ab3b4ced6e82719849c118fa406f0278a3499c1a898cd15cd31bdc38ce4 \
+    --hash=sha256:b8399098d4c1e3522734f7235dc79b1fc967f96cf139c81e0fa30479e0685f9b
     # via -r requirements/fuzz.in
-typing-extensions==4.16.0 ; python_full_version < '3.15' \
-    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \
-    --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5
-    # via
-    #   anyio
-    #   starlette

demos/server/requirements.txt

@@ -1,2 +1,2 @@
-starlette>=1.6.0
+starlette>=1.10.0
 uvicorn>=0.53.0

examples/industrial-embodied-ai/requirements.txt

@@ -1,4 +1,4 @@
 agent-manifest>=0.15.0
-cmcp-runtime>=0.7.0
-cedarpy==4.12.1
+cmcp-runtime>=0.7.1
+cedarpy==4.12.2
 httpx>=0.28.1,<1

examples/requirements/wcm-harness.txt

@@ -1,9 +1,5 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements/wcm-harness.in --generate-hashes --universal --python-version 3.11 -o requirements/wcm-harness.txt
-colorama==0.4.6 ; sys_platform == 'win32' \
-    --hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
-    --hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
-    # via pytest
 iniconfig==2.3.0 \
     --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \
     --hash=sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12
@@ -20,7 +16,7 @@ pygments==2.21.0 \
     --hash=sha256:2363c69b61c4a97c838da3b130dcd6468f4848992b21a82f2a63ec34377137d9 \
     --hash=sha256:610ca751c9bc2492b38eb9a38a7fbc93edbbb2d7182edaf34e66ae493dee5c8c
     # via pytest
-pytest==9.1.1 \
-    --hash=sha256:1088fbde8f2b49d95a549a195707afa7a76a3ce9bcadc26b6d71f0ffda5fe313 \
-    --hash=sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c
+pytest==9.2.0 \
+    --hash=sha256:07acdcf88ec174f907dc01af70bf52d49b014bbab03faeeade31c96b18c2e588 \
+    --hash=sha256:97c4f3b1f3c7414aa36465e09b8220f1d03627993bd51b1282e193753c80557b
     # via -r requirements/wcm-harness.in

examples/sovereign-agent-connector/requirements.txt

@@ -1,10 +1,10 @@
 # Runtime and test dependencies for this example. agentrust_auc is a local
 # module in this folder and is not published as a package.
 ca2a-runtime>=0.4.0,<0.5
-cmcp-runtime>=0.7.0,<0.8
+cmcp-runtime>=0.7.1,<0.8
 trace-verify>=0.4.3,<0.5
 rfc8785>=0.1.4
 cryptography>=50.0.2
-cbor2>=6.1.5,<7
-cedarpy>=4.8.7,<5
-pytest>=8
+cbor2>=6.2.0.post2,<7
+cedarpy>=4.12.2,<5
+pytest>=9.2.0

examples/weight-custody-manifest/requirements-lora.txt

@@ -2,8 +2,8 @@
 -r requirements-model-signing.txt
 huggingface_hub==1.33.0
 safetensors==0.8.0
-transformers==5.19.0
+transformers==5.22.1
 peft==0.21.2
 accelerate==1.15.0
-torch==2.14.1
+torch==2.15.0
 model-signing==1.1.1