ProwlrBot · dependabot · May 8, 2026
diff --git a/evaluation/pyproject.toml b/evaluation/pyproject.toml
@@ -5,7 +5,7 @@ description = "Tool Evaluation Framework using Azure OpenAI and MCP"
 requires-python = ">=3.13"
 dependencies = [
     "openai>=1.54.0",
-    "mcp>=1.12.3",
+    "mcp>=1.23.0",
     # LangGraph is pinned to an exact version. The 1.x line is API-stable
     # but minor releases routinely tweak checkpointer / interrupt semantics,
     # so we want changes to land via an explicit bump rather than a passive
@@ -20,7 +20,7 @@ dependencies = [
     "langgraph==1.1.9",
     # tomllib is in stdlib since 3.11 and the project pins >=3.13, so we
     # don't need a backport for the config loader.
-    "python-dotenv>=1.0.0",
+    "python-dotenv>=1.2.2",
     # NVD CVE lookup for phase_recon. nvdlib handles NIST NVD API rate
     # limiting (50 req/30s with key, 5 req/30s without) and pagination.
     "nvdlib>=0.8.3",

diff --git a/evaluation/uv.lock b/evaluation/uv.lock
diff --git a/examples/oss-upload/pyproject.toml b/examples/oss-upload/pyproject.toml
@@ -6,7 +6,7 @@ readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
     "agent-sandbox",
-    "python-dotenv>=1.0.0",
+    "python-dotenv>=1.2.2",
     "boto3>=1.34.0",
     "tos>=2.6.0",
 ]

diff --git a/examples/oss-upload/uv.lock b/examples/oss-upload/uv.lock
diff --git a/examples/site-to-markdown/pyproject.toml b/examples/site-to-markdown/pyproject.toml
@@ -7,7 +7,7 @@ requires-python = ">=3.11"
 dependencies = [
     "agent-sandbox",
     "playwright>=1.48.0",
-    "python-dotenv>=1.0.0",
+    "python-dotenv>=1.2.2",
 ]
 
 [tool.uv.sources]

diff --git a/examples/site-to-markdown/uv.lock b/examples/site-to-markdown/uv.lock
diff --git a/examples/volcengine-provider/pyproject.toml b/examples/volcengine-provider/pyproject.toml
@@ -6,7 +6,7 @@ readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
     "agent-sandbox",
-    "python-dotenv>=1.0.0",
+    "python-dotenv>=1.2.2",
 ]
 
 [tool.uv.sources]

diff --git a/examples/volcengine-provider/uv.lock b/examples/volcengine-provider/uv.lock