Skip to content

chore(deps): bump cpex-rate-limiter to 0.0.7#4608

Open
gandhipratik203 wants to merge 1 commit intomainfrom
chore/bump-cpex-rate-limiter-0.0.7
Open

chore(deps): bump cpex-rate-limiter to 0.0.7#4608
gandhipratik203 wants to merge 1 commit intomainfrom
chore/bump-cpex-rate-limiter-0.0.7

Conversation

@gandhipratik203
Copy link
Copy Markdown
Collaborator

Summary

Bump cpex-rate-limiter from 0.0.6 to 0.0.7 to pull in the production-hardening release from cpex-plugins#78.

Changes

  • pyproject.toml: cpex-rate-limiter>=0.0.6>=0.0.7,<0.1.0. Upper bound holds us at the 0.0.x line; 0.1.0 (also published today) is the matching half of the framework migration in feat: replace the internal plugin framework with CPEX #3754 and shouldn't land alone.
  • uv.lock: regenerated via uv lock --upgrade-package cpex-rate-limiter.
  • plugins/config.yaml: bump RateLimiterPlugin.version metadata from 0.0.6 to 0.0.7.

Test plan

  • uv sync --extra plugins installs 0.0.7 cleanly
  • Plugin-framework loader unit tests pass (27/27)
  • Verified end-to-end against TLS Redis on the test/tls-redis-smoke-test stack
  • CI green

…ening)

Pulls in PR #78's production hardening of the Redis connection path
on top of 0.0.6's TLS support.  Wraps connection acquisition in a
2-second ``tokio::time::timeout`` so ``rediss://`` (or ``redis://``)
endpoints that accept TCP but never respond at the application
layer — TLS-required servers reached without TLS, network ACLs
that drop post-handshake bytes, etc. — fail fast through the
plugin's existing ``fail_mode`` path instead of hanging the
request indefinitely.

Three coordinated edits:

- ``pyproject.toml:281`` — tighten min-version constraint
  ``cpex-rate-limiter>=0.0.6`` → ``>=0.0.7,<0.1.0``.  The upper
  bound holds us at the 0.0.x line: 0.1.0 (also published today)
  is the matching half of an in-flight framework migration that
  pairs with mcp-context-forge#3754; until that lands, taking
  0.1.0 alone would break plugin loading.
- ``uv.lock`` — regenerated via
  ``uv lock --upgrade-package cpex-rate-limiter`` to pin the
  resolved version + per-platform wheel hashes for 0.0.7.
- ``plugins/config.yaml:280`` — bump
  ``RateLimiterPlugin.version`` metadata from ``0.0.6`` to
  ``0.0.7`` so the shipped sample config reflects the wheel
  version operators actually load.  This field is operator-facing
  metadata mirrored from the plugin's ``plugin-manifest.yaml``;
  not a dependency constraint.

The existing date pin (``2026-05-31T23:59:59Z``) already covers
0.0.7's upload (2026-05-05T13:10:33), so no date-pin change is
needed.

Verified locally: ``uv sync --extra plugins`` installs 0.0.7
cleanly, ``cpex_rate_limiter.rate_limiter.RateLimiterPlugin``
imports without error, and the plugin-framework loader unit
tests stay green (27 passed).

Signed-off-by: Pratik Gandhi <gandhipratik203@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant