Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sentient-core/requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ langchain
langgraph
groq
google-generativeai
pyautogen
ag2
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

πŸ’‘ Verification agent

🧩 Analysis chain

Confirm package identity & pin a baseline version for ag2

ag2 is not yet a well-established name on PyPI; typo-squatting or unpublished names could break CI/CD or introduce supply-chain risk.

  1. Verify that ag2 exists and is the intended successor to pyautogen.
  2. Pin to a concrete version once validated, to keep builds deterministic (mirrors the un-pinned style today, but brand-new libs merit extra care).
  3. Grep the codebase for lingering pyautogen imports and update them to ag2 to avoid runtime errors.

Run this script to check both the package presence on PyPI and any stale imports in the repo:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# 1) Check PyPI for an `ag2` release and print the latest version
curl -s https://pypi.org/pypi/ag2/json | jq '.info.version' || {
  echo "Package 'ag2' not found on PyPI – double-check the name."; exit 1;
}

# 2) Locate references to the old library
rg -n "import\s+pyautogen|from\s+pyautogen" || echo "No residual pyautogen imports found."

Length of output: 216


Pin ag2 to a specific, verified version

We’ve confirmed that ag2 exists on PyPI at version 0.9.6 and there are no leftover pyautogen imports in the repo. To ensure deterministic builds and guard against supply-chain risks, please:

  • In sentient-core/requirements.txt (line 9), change:
    ag2
    
    to:
    ag2==0.9.6
    
πŸ€– Prompt for AI Agents
In sentient-core/requirements.txt at line 9, the dependency 'ag2' is not pinned
to a specific version. Update the line to 'ag2==0.9.6' to ensure deterministic
builds and reduce supply-chain risks by specifying the verified version.

chromadb
sentence-transformers
tavily-python
Expand Down