Bump packages to resolve CVEs (#87)

Ickerday · web-flow · commit e05fe84bbb19 · 2026-03-10T14:09:02.000Z
* uv.lock

* Upgrade packages

* Fix errors after upgrade

* Bump up GH workflow commit pins
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -5,8 +5,8 @@ jobs:
   lint-stage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-      - uses: astral-sh/setup-uv@9cfd02964306b527feff5fee75acfd028cce4260
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: astral-sh/setup-uv@fe3617d6e9d89d9b2ddd353e1b3c5d20d20c896f
         with:
           activate-environment: true
       - name: Verify uv.lock is up-to-date
diff --git a/pyproject.toml b/pyproject.toml
@@ -96,6 +96,9 @@ select = [
   "RUF", # ruff-specific rules
   "UP",  # pyupgrade
 ]
+ignore = [
+  "E501", # line-length
+]
 
 [tool.ruff.lint.isort]
 combine-as-imports = true
diff --git a/splunklib/ai/engines/langchain.py b/splunklib/ai/engines/langchain.py
@@ -27,7 +27,10 @@
     ModelResponse as LC_ModelResponse,
 )
 from langchain.agents.middleware.summarization import TokenCounter as LC_TokenCounter
-from langchain.agents.middleware.types import ModelCallResult as LC_ModelCallResult
+from langchain.agents.middleware.types import (
+    ExtendedModelResponse as LC_ExtendedModelResponse,
+    ModelCallResult as LC_ModelCallResult,
+)
 from langchain.messages import (
     AIMessage as LC_AIMessage,
     AnyMessage as LC_AnyMessage,
@@ -70,10 +73,10 @@
     ToolMessage,
 )
 from splunklib.ai.middleware import (
-    AgentMiddlewareHandler,
-    AgentState,
     AgentMiddleware,
+    AgentMiddlewareHandler,
     AgentRequest,
+    AgentState,
     ModelMiddlewareHandler,
     ModelRequest,
     ModelResponse,
@@ -130,7 +133,7 @@ def __init__(
         model: BaseChatModel,
         tools: list[BaseTool],
         output_schema: type[OutputT] | None,
-        lcmiddleware: Sequence[LC_AgentMiddleware] | None = None,
+        lc_middleware: Sequence[LC_AgentMiddleware] | None = None,
         middleware: Sequence[AgentMiddleware] | None = None,
     ) -> None:
         super().__init__()
@@ -147,7 +150,7 @@ def __init__(
             system_prompt=system_prompt,
             checkpointer=checkpointer,
             response_format=output_schema,
-            middleware=lcmiddleware or [],
+            middleware=lc_middleware or [],
         )
 
     def _with_agent_middleware(
@@ -300,7 +303,7 @@ async def create_agent(
             model=model_impl,
             tools=tools,
             output_schema=agent.output_schema,
-            lcmiddleware=middleware,
+            lc_middleware=middleware,
             middleware=agent.middleware,
         )
 
@@ -589,6 +592,9 @@ def _convert_tool_message_from_lc(
 
 
 def _convert_model_result_from_lc(model_response: LC_ModelCallResult) -> ModelResponse:
+    if isinstance(model_response, LC_ExtendedModelResponse):
+        model_response = model_response.model_response
+
     if isinstance(model_response, LC_ModelResponse):
         ai_message = next(
             (m for m in model_response.result if isinstance(m, LC_AIMessage)), None
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -96,6 +96,9 @@ select = [`
`96`	`96`	`"RUF", # ruff-specific rules`
`97`	`97`	`"UP", # pyupgrade`
`98`	`98`	`]`
	`99`	`+ignore = [`
	`100`	`+ "E501", # line-length`
	`101`	`+]`
`99`	`102`
`100`	`103`	`[tool.ruff.lint.isort]`
`101`	`104`	`combine-as-imports = true`