deps: bump asyncssh to 2.23.1 in pykaos (GHSA-2wxc-x7rj-hg8f)

[katsugtgz]

Updates asyncssh from 2.21.1 to 2.23.1 in the pykaos workspace package to address GHSA-2wxc-x7rj-hg8f and GHSA-qr67-gv47-xwwh.

Evidence:

• packages/kaos/pyproject.toml pinned asyncssh==2.21.1
• uv.lock resolved asyncssh 2.21.1
• OSV reports GHSA-2wxc-x7rj-hg8f and GHSA-qr67-gv47-xwwh for 2.21.1
• updated version: 2.23.1

Validation:

• OSV reports no advisories for asyncssh 2.23.1
• uv lock --check passes on the updated lock
• uv run --project packages/kaos --directory packages/kaos pytest tests -vv (the repo's documented pykaos test command) passes: 37 passed, 16 skipped. The skips are the SSH integration tests, which need a local sshd on port 22 and skip in any environment without one
• ruff check passes for the package

Scope: packages/kaos/pyproject.toml and uv.lock only.

---

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🟡 pykaos version left unchanged after dependency bump

The asyncssh pin changes but pykaos stays at 0.9.0. The repository's minor-bump-only rule requires a minor version bump for any change to any package, so version must move to 0.10.0.

Prompt for agents

AGENTS.md specifies a minor-bump-only versioning scheme that applies to all packages including packages/*. Any change (including a dependency bump/bug fix) requires bumping the minor version. This PR changes the asyncssh dependency in packages/kaos/pyproject.toml but leaves version = "0.9.0" unchanged. Bump the pykaos version minor number (e.g. to 0.10.0) at line 3, and run uv sync/uv lock to keep uv.lock consistent.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[Copilot]

Pull request overview

This PR updates the pykaos workspace package’s pinned asyncssh dependency to a newer version to address the security advisories GHSA-2wxc-x7rj-hg8f and GHSA-qr67-gv47-xwwh.

Changes:

• Bump packages/kaos dependency pin from asyncssh==2.21.1 to asyncssh==2.23.1.
• Refresh uv.lock entries to resolve asyncssh at 2.23.1 (including sdist/wheel URLs and hashes).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
packages/kaos/pyproject.toml	Updates the pinned asyncssh requirement to ==2.23.1 for pykaos.
uv.lock	Updates the resolved asyncssh package entry and pykaos metadata to reflect 2.23.1.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[katsugtgz]

Bumped pykaos to 0.10.0 and synced uv.lock. Thanks!