[Abdul-Microsoft]

Purpose

• This pull request updates several dependencies across multiple services to address security, compatibility, and feature improvements. The most notable changes include upgrading core libraries (such as agent-framework, aiohttp, and authlib), pinning the certifi library to a recent version for enhanced SSL certificate validation, and updating the minimum required Python version for the MCP server.

Dependency upgrades and additions:

• Upgraded agent-framework to version 1.8.1 and added claude-agent-sdk==0.2.121 in src/backend/pyproject.toml to support new agent features.
• Upgraded aiohttp to 3.14.4 in both src/backend/pyproject.toml and infra/scripts/post-provision/requirements.txt for improved stability and bug fixes. [1] [2]
• Upgraded authlib from 1.6.12 to 1.9.1 in src/mcp_server/pyproject.toml for enhanced authentication features and security.

Security and compatibility improvements:

• Pinned certifi to version 2026.10.18 in all relevant requirements and project files to ensure up-to-date SSL certificate validation. [1] [2] [3] [4]
• Added dnspython==2.9.0 to src/mcp_server/pyproject.toml to support DNS-related features.

Platform requirements:

• Increased the minimum required Python version for the MCP server from 3.10 to 3.11 in src/mcp_server/pyproject.toml to leverage newer language features and maintain compatibility.

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Note

Copilot was unable to run its full agentic suite in this review.

Copilot review overview

1 open issue

• The certifi pin is now duplicated across multiple dependency manifests… · New

What changed in this PR

Updates Python project dependency baselines across services, including a Python version floor bump for the MCP server and several dependency additions/version bumps.

Changes:

• Bump mcp_server minimum supported Python from 3.10 to 3.11.
• Update/add dependency pins across mcp_server, backend, and App (notably authlib, aiohttp, agent-framework, and certifi).
• Pin aiohttp in post-provision scripts for reproducible installs.

File	Description
src/​mcp_server/​pyproject.toml	Raises Python requirement and updates/adds pinned dependencies.
src/​backend/​pyproject.toml	Bumps agent framework + aiohttp and adds new SDK + certifi pin.
src/​App/​requirements.txt	Adds an explicit certifi pin.
src/​App/​pyproject.toml	Adds an explicit certifi pin for the App package.
infra/​scripts/​post-provision/​requirements.txt	Pins aiohttp to a specific version for provisioning reproducibility.

_{Review effort: Lite}

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	3835	552	85%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
841	0 💤	0 ❌	0 🔥	8.799s ⏱️