From 02c30e904bb272b13a2a875429d802396c9c39a4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=BD=98=E8=B6=85?= Date: Tue, 18 Aug 2026 11:51:50 +0800 Subject: [PATCH 1/2] ci: restore deterministic green builds --- .github/workflows/ci.yml | 4 ++-- frontend/package-lock.json | 16 ++++++++-------- frontend/package.json | 2 +- requirements-dev.txt | 1 + requirements.txt | 3 ++- 5 files changed, 14 insertions(+), 12 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2935764..d198fa3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,13 +22,13 @@ jobs: python-version: ${{ matrix.python-version }} cache: pip cache-dependency-path: | - requirements.txt + requirements.lock requirements-dev.txt - name: Install dependencies run: | python -m pip install --upgrade pip - pip install -r requirements.txt + pip install --require-hashes -r requirements.lock pip install -r requirements-dev.txt - name: Lint with Ruff diff --git a/frontend/package-lock.json b/frontend/package-lock.json index df4c4a9..c988f24 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -16,7 +16,7 @@ "openapi-fetch": "^0.17.0", "react": "^18.3.1", "react-dom": "^18.3.1", - "react-router-dom": "^7.18.1" + "react-router-dom": "7.18.2" }, "devDependencies": { "@testing-library/jest-dom": "^6.9.1", @@ -4070,9 +4070,9 @@ } }, "node_modules/react-router": { - "version": "7.18.1", - "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.1.tgz", - "integrity": "sha512-GDLgg3i3uM0aeJO3Fm+TCS+sDQ7gu12T6x0qdTEzcwqEfleci7JwugVNIF3U//0FWKnJT7ptG+20B2jfDqnZAg==", + "version": "7.18.2", + "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.2.tgz", + "integrity": "sha512-aUVMjFm3GAPTTZL7oYr5E7ETiqfQCHRLH+B+5afnICvf0r7kkK4eR6SMuwbSTJw/7t+12khT/Kahij49fqOCIg==", "license": "MIT", "dependencies": { "cookie": "^1.0.1", @@ -4092,12 +4092,12 @@ } }, "node_modules/react-router-dom": { - "version": "7.18.1", - "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.18.1.tgz", - "integrity": "sha512-KaZh+X/6UtEp28x51AUYZDMg9NGoz2ja3dNHa+ta/tk40vCzKhQ/RypCWBMLbmDr6//E24Vv5uPsrqXFozdkAg==", + "version": "7.18.2", + "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.18.2.tgz", + "integrity": "sha512-AIKJ/jgGlFb3EbfCXk5Gzshiwt+l3mqbCrNjmEWMMjqQxNJ3svBa6bgzFyCC2Sw3RA0VWF1kg3uQf2OFhxb8hw==", "license": "MIT", "dependencies": { - "react-router": "7.18.1" + "react-router": "7.18.2" }, "engines": { "node": ">=20.0.0" diff --git a/frontend/package.json b/frontend/package.json index bdcb475..fda9d5b 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -21,7 +21,7 @@ "openapi-fetch": "^0.17.0", "react": "^18.3.1", "react-dom": "^18.3.1", - "react-router-dom": "^7.18.1" + "react-router-dom": "7.18.2" }, "devDependencies": { "@testing-library/jest-dom": "^6.9.1", diff --git a/requirements-dev.txt b/requirements-dev.txt index 6e14eb2..37979c6 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -4,3 +4,4 @@ pytest pytest-asyncio pytest-cov httpx +reportlab>=4.0 diff --git a/requirements.txt b/requirements.txt index 1140c23..272357a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -40,7 +40,8 @@ lightrag-hku>=1.0.0 # HTTP & async httpx>=0.26.0 -mcp>=1.0.0 +# FastMCP remains under mcp.server.fastmcp in the 1.x SDK used by the app. +mcp>=1.0.0,<2.0.0 a2a-sdk[fastapi]==1.1.0 # Database, auth & migrations From 005fef65c2e48e5397f0a06cbf6530a9f121620e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=BD=98=E8=B6=85?= Date: Tue, 18 Aug 2026 11:56:47 +0800 Subject: [PATCH 2/2] ci: avoid platform-specific lock hashes --- .github/workflows/ci.yml | 4 ++-- requirements.txt | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d198fa3..2935764 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,13 +22,13 @@ jobs: python-version: ${{ matrix.python-version }} cache: pip cache-dependency-path: | - requirements.lock + requirements.txt requirements-dev.txt - name: Install dependencies run: | python -m pip install --upgrade pip - pip install --require-hashes -r requirements.lock + pip install -r requirements.txt pip install -r requirements-dev.txt - name: Lint with Ruff diff --git a/requirements.txt b/requirements.txt index 272357a..2661986 100644 --- a/requirements.txt +++ b/requirements.txt @@ -40,8 +40,8 @@ lightrag-hku>=1.0.0 # HTTP & async httpx>=0.26.0 -# FastMCP remains under mcp.server.fastmcp in the 1.x SDK used by the app. -mcp>=1.0.0,<2.0.0 +# Pin the SDK whose public FastMCP import path is used by the app. +mcp==1.28.1 a2a-sdk[fastapi]==1.1.0 # Database, auth & migrations