From 0df3efbfa0c93fd90f53e4ca6b4c4165ca6f67be Mon Sep 17 00:00:00 2001 From: Liang Wu <18244712+wuliang229@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:39:32 -0700 Subject: [PATCH 1/3] Update FastAPI and Starlette dependencies to fix CVEs --- pyproject.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 8a7048d10a7..271c3b7312c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ dependencies = [ "anyio>=4.9,<5", # For MCP Session Manager "authlib>=1.6.6,<2", # For RestAPI Tool "click>=8.1.8,<9", # For CLI tools - "fastapi>=0.124.1,<1", # FastAPI framework + "fastapi>=0.133.0,<1", # FastAPI framework "google-api-python-client>=2.157,<3", # Google API client discovery "google-auth[pyopenssl]>=2.47", # Google Auth library "google-cloud-aiplatform[agent-engines]>=1.148.1,<2", # For VertexAI integrations, e.g. example store. @@ -71,7 +71,7 @@ dependencies = [ "requests>=2.32.4,<3", "sqlalchemy>=2,<3", # SQL database ORM "sqlalchemy-spanner>=1.14", # Spanner database session service - "starlette>=0.49.1,<1", # For FastAPI CLI + "starlette>=1.3.1,<2", # For FastAPI CLI "tenacity>=9,<10", # For Retry management "typing-extensions>=4.5,<5", "tzlocal>=5.3,<6", # Time zone utilities From 32e05ef92663576d9ed9a590f86be371bb13ea9f Mon Sep 17 00:00:00 2001 From: Liang Wu <18244712+wuliang229@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:50:09 -0700 Subject: [PATCH 2/3] Fix FastAPI version constraint in pyproject.toml --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 271c3b7312c..0d9d4217dc8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ dependencies = [ "anyio>=4.9,<5", # For MCP Session Manager "authlib>=1.6.6,<2", # For RestAPI Tool "click>=8.1.8,<9", # For CLI tools - "fastapi>=0.133.0,<1", # FastAPI framework + "fastapi>=0.133,<1", # FastAPI framework "google-api-python-client>=2.157,<3", # Google API client discovery "google-auth[pyopenssl]>=2.47", # Google Auth library "google-cloud-aiplatform[agent-engines]>=1.148.1,<2", # For VertexAI integrations, e.g. example store. From dd6aa2fdd6e8b12fa0a3c7e3b3943ce30301ceea Mon Sep 17 00:00:00 2001 From: Liang Wu <18244712+wuliang229@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:54:05 -0700 Subject: [PATCH 3/3] Fix formatting in pyproject.toml dependencies --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 0d9d4217dc8..809332d953f 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ dependencies = [ "anyio>=4.9,<5", # For MCP Session Manager "authlib>=1.6.6,<2", # For RestAPI Tool "click>=8.1.8,<9", # For CLI tools - "fastapi>=0.133,<1", # FastAPI framework + "fastapi>=0.133,<1", # FastAPI framework "google-api-python-client>=2.157,<3", # Google API client discovery "google-auth[pyopenssl]>=2.47", # Google Auth library "google-cloud-aiplatform[agent-engines]>=1.148.1,<2", # For VertexAI integrations, e.g. example store.