Skip to content

fix: raise cli mcp cryptography ceiling to match agent-os and agent-mesh - #3736

Closed
fei (feiiiiii5) wants to merge 1 commit into
microsoft:mainfrom
feiiiiii5:issue3651/cli-mcp-cryptography-ceiling
Closed

fix: raise cli mcp cryptography ceiling to match agent-os and agent-mesh#3736
fei (feiiiiii5) wants to merge 1 commit into
microsoft:mainfrom
feiiiiii5:issue3651/cli-mcp-cryptography-ceiling

Conversation

@feiiiiii5

Copy link
Copy Markdown

Problem

The toolkit-cli mcp extra still pinned cryptography>=46.0.7,<49.0 while agent-os and agent-mesh were raised to cryptography>=50.0.0,<51.0 (#3615, #3621). Installing the CLI with the mcp extra in the same environment as agent-os or agent-mesh fails pip resolution: no cryptography version satisfies both ranges.

Fixes #3651.

Fix

Raised the cli mcp extra range to cryptography>=50.0.0,<51.0, matching the other packages.

Validation

pip install --dry-run "cryptography>=50.0.0,<51.0" "mcp>=1.0.0,<2.0"
# resolves successfully; the previously-conflicting agent-os/agent-mesh range now overlaps

DCO signoff included.

agent-os and agent-mesh now require cryptography>=50.0.0,<51.0, but the
toolkit-cli mcp extra still capped it below 49.0, so installing the CLI
with the mcp extra alongside agent-os or agent-mesh fails pip resolution.

Signed-off-by: fei <204683769+feiiiiii5@users.noreply.github.com>
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions

Copy link
Copy Markdown

Welcome to the Agent Governance Toolkit! Thanks for your first pull request.
Please ensure tests pass, code follows style (ruff check), and you have signed the CLA.
See our Contributing Guide.

@github-actions github-actions Bot added dependencies Pull requests that update a dependency file size/XS Extra small PR (< 10 lines) labels Aug 15, 2026
@github-actions

Copy link
Copy Markdown

PR Review Summary

Check Status Details
🔍 Code Review ⚠️ Missing No current-run comment
🛡️ Security Scan ⚠️ Missing No current-run comment
🔄 Breaking Changes ⚠️ Missing No current-run comment
📝 Docs Sync ⚠️ Missing No current-run comment
🧪 Test Coverage ⚠️ Missing No current-run comment

Verdict: ⚠️ AI review incomplete; ready for human review

AI review comments are untrusted advisory output. The summary reports workflow-generated completion status only, not model-authored pass/fail claims.

@github-actions

Copy link
Copy Markdown

🔴 Contributor Check: HIGH

Check Result
Profile HIGH
Credential LOW
Overall HIGH

Automated check by AGT Contributor Check.

@github-actions github-actions Bot added the needs-review:HIGH Contributor reputation check flagged HIGH risk label Aug 15, 2026
@feiiiiii5

Copy link
Copy Markdown
Author

Closing after two weeks without review to keep the queue tidy — the branch stays up, and I'm happy to revive this if it becomes relevant. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file needs-review:HIGH Contributor reputation check flagged HIGH risk size/XS Extra small PR (< 10 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cli mcp extra still caps cryptography below 49, conflicts with agent mesh and agent os

1 participant