Bump the core-deps group across 1 directory with 4 updates

[dependabot]

Updates the requirements on structlog, cloudwright-ai-cli, cloudwright-ai-web and cloudwright-ai-mcp to permit the latest version.
Updates structlog to 25.5.0

Release notes

Sourced from structlog's releases.

25.5.0

Highlights

Huge release! There's plenty of important little bug fixes and new features, but the headliner is definitely the improved ergonomics of structlog.dev.ConsoleRenderer. We have finally accepted that local development has different priorities than production and made it both mutable (with automatic re-configuration) and also easily retrievable (cr = ConsoleRenderer.get_active()). This allows you, for example, to disable Rich exception formatting as easily as structlog.dev.ConsoleRenderer.get_active().exception_formatter = structlog.dev.plain_traceback. Please check out the updated docs!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), thanks.dev (@thnxdev), Privacy Solutions GmbH (@privacy-solutions), Quesma (@​QuesmaOrg), FilePreviews (@filepreviews), LambdaTest (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Jeff McCarrell (@jmccarrell), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), Roboflow (@roboflow), and Jeff McCarrell (@jmccarrell).

Full Changelog

Deprecated

• structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

• Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

• structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

  You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

  cr = structlog.dev.ConsoleRenderer.get_active()
  cr.exception_formatter = structlog.dev.plain_traceback

  Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

  #749 #756 #757 #759

• Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

• structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

... (truncated)

Changelog

Sourced from structlog's changelog.

25.5.0 - 2025-10-27

Deprecated

• structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

• Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

• structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

  You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

  cr = structlog.dev.ConsoleRenderer.get_active()
  cr.exception_formatter = structlog.dev.plain_traceback

  Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

  #749 #756 #757 #759

• Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

• structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

• structlog.dev.RichTracebackFormatter now exposes the upstream code_width parameter. Default width is now None for full terminal width. Full terminal width is now handled by Rich itself, bringing support for reflow and COLUMN environment variable. Passing -1 for width is now deprecated and automatically replaced by None. #717

• Native loggers now allow the passing of a dictionary for dictionary-based interpolation log.info("hello %(name)s!", {"name": "world"}). #748

• On Python 3.11+, structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_NAME that adds the qualified name of the callsite, including scope and class names. This is only available for structlog-originated events since the standard library has no equivalent.

• structlog.stdlib.LoggerFactory now supports the stacklevel parameter. #763

... (truncated)

Commits

• c0ef9e0 Prepare 25.5.0
• 9cb662f docs: nit
• 5400612 docs/stdlib: add warning about ProcessorFormatter
• 1c2c19a Try validating pyproject.toml
• aca10f2 Drop pretend dependency (#766)
• 3800d40 docs: use native
• ecaa15a stdlib: add support for stacklevel (#763)
• 7f7a221 update dev (#765)
• 5acfc85 docs: 5% bigger still
• c102862 docs: bigger font
• Additional commits viewable in compare view

Updates cloudwright-ai-cli from 0.4.0 to 1.0.0

Release notes

Sourced from cloudwright-ai-cli's releases.

v1.0.0 — Production-Ready Architecture

Full structural overhaul of the entire codebase.

Breaking Changes

• Import paths: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec. Old from cloudwright.architect import ... still works via shim.
• Sub-package dependency bumped to cloudwright-ai>=1.0.0,<2

v0.5.0 — Correctness & Security

• Connection validation on ArchSpec (rejects orphan references)
• Config sanitization blocks shell metacharacters in Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0)
• BaseLLM.pricing property replaces string-matching cost detection
• Error hint sliding window (max 5)
• MCP sessions persist to disk via SessionStore
• Auth + rate limiting on all web endpoints (was missing on 7 of 9 routers)
• Content-Disposition header injection fix
• HCL template directive injection fix
• Percent-encoded path traversal fix

v1.0 — Structural Overhaul

• architect.py (1,491 LOC) decomposed into session.py, designer.py, parsing.py, prompts.py
• Web backend split into 9 FastAPI router modules + middleware + streaming abstraction
• Terraform exporter split into per-provider modules (aws/gcp/azure/databricks)
• CLI chat decomposed into UI/session/streaming layers
• CLI command decorator for standardized output handling

Install

pip install cloudwright-ai==1.0.0
pip install cloudwright-ai-cli==1.0.0
pip install cloudwright-ai-web==1.0.0
pip install cloudwright-ai-mcp==1.0.0

1,031+ tests passing across all packages.

Changelog

Sourced from cloudwright-ai-cli's changelog.

[1.0.0] - 2026-03-26

Breaking

• Import paths changed: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec are the canonical locations. Old from cloudwright.architect import ... still works via re-export shim.
• Web backend restructured: app.py is now an app factory (create_app()), endpoints split into routers under cloudwright_web/routers/
• Frontend rewritten with Zustand state management and restructured component architecture
• Terraform exporter split into per-provider modules under exporter/terraform/ (import path unchanged)
• CLI chat command decomposed into chat.py, chat_ui.py, chat_session.py, chat_streaming.py

Added

• Shared SSE streaming abstraction (cloudwright_web/streaming.py) used by all streaming endpoints
• CLI command decorator (cloudwright_cli/decorators.py) for standardized output/error handling
• Frontend test infrastructure: Vitest + React Testing Library + MSW
• Zustand stores for spec, chat, cost, validation, and UI state

Changed

• architect.py decomposed into session.py (ConversationSession), designer.py (Architect), parsing.py (JSON extraction, spec parsing), prompts.py (all constants)

[0.5.0] - 2026-03-26

Added

• Connection validation: ArchSpec model validator rejects connections referencing non-existent component IDs
• Config value sanitization: validate_export_config() rejects shell metacharacters before Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0) stored in spec.metadata['template_confidence']
• BaseLLM.model_name and BaseLLM.pricing abstract properties for explicit cost tracking

Changed

• Extracted ~600 LOC of prompt constants from architect.py into prompts.py (pure data, no behavior change)
• Error hints capped to sliding window of 5 (prevents unbounded growth in long sessions)
• MCP sessions now persist to disk via SessionStore (survive process restarts)
• Cost tracking uses llm.pricing instead of string-matching on module name

Removed

• MCP in-memory session storage, TTL cleanup, and max session eviction (replaced by SessionStore)

Commits

• c73382a Bump CLI and MCP versions to 1.0.0
• b3d2831 Fix mock patching: routers use module-level singleton lookup
• 33bde90 Fix ConversationSession patch path to cloudwright.session
• e84f9bf Fix web test mock paths to use singletons module
• 178d0b1 Add web test conftest to reset rate limiter between tests
• 90a304a Bump sub-package core dependency to >=1.0.0,<2
• 11c614a CI: non-editable local install (./packages/core not -e)
• cbdaa3b CI: fix pip install to use local path not PyPI
• 49a87aa CI: debug install to find missing modules
• 7d62796 CI: force-reinstall core + verify new modules present
• Additional commits viewable in compare view

Updates cloudwright-ai-web from 0.4.0 to 1.0.0

Release notes

Sourced from cloudwright-ai-web's releases.

v1.0.0 — Production-Ready Architecture

Full structural overhaul of the entire codebase.

Breaking Changes

• Import paths: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec. Old from cloudwright.architect import ... still works via shim.
• Sub-package dependency bumped to cloudwright-ai>=1.0.0,<2

v0.5.0 — Correctness & Security

• Connection validation on ArchSpec (rejects orphan references)
• Config sanitization blocks shell metacharacters in Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0)
• BaseLLM.pricing property replaces string-matching cost detection
• Error hint sliding window (max 5)
• MCP sessions persist to disk via SessionStore
• Auth + rate limiting on all web endpoints (was missing on 7 of 9 routers)
• Content-Disposition header injection fix
• HCL template directive injection fix
• Percent-encoded path traversal fix

v1.0 — Structural Overhaul

• architect.py (1,491 LOC) decomposed into session.py, designer.py, parsing.py, prompts.py
• Web backend split into 9 FastAPI router modules + middleware + streaming abstraction
• Terraform exporter split into per-provider modules (aws/gcp/azure/databricks)
• CLI chat decomposed into UI/session/streaming layers
• CLI command decorator for standardized output handling

Install

pip install cloudwright-ai==1.0.0
pip install cloudwright-ai-cli==1.0.0
pip install cloudwright-ai-web==1.0.0
pip install cloudwright-ai-mcp==1.0.0

1,031+ tests passing across all packages.

Changelog

Sourced from cloudwright-ai-web's changelog.

[1.0.0] - 2026-03-26

Breaking

• Import paths changed: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec are the canonical locations. Old from cloudwright.architect import ... still works via re-export shim.
• Web backend restructured: app.py is now an app factory (create_app()), endpoints split into routers under cloudwright_web/routers/
• Frontend rewritten with Zustand state management and restructured component architecture
• Terraform exporter split into per-provider modules under exporter/terraform/ (import path unchanged)
• CLI chat command decomposed into chat.py, chat_ui.py, chat_session.py, chat_streaming.py

Added

• Shared SSE streaming abstraction (cloudwright_web/streaming.py) used by all streaming endpoints
• CLI command decorator (cloudwright_cli/decorators.py) for standardized output/error handling
• Frontend test infrastructure: Vitest + React Testing Library + MSW
• Zustand stores for spec, chat, cost, validation, and UI state

Changed

• architect.py decomposed into session.py (ConversationSession), designer.py (Architect), parsing.py (JSON extraction, spec parsing), prompts.py (all constants)

[0.5.0] - 2026-03-26

Added

• Connection validation: ArchSpec model validator rejects connections referencing non-existent component IDs
• Config value sanitization: validate_export_config() rejects shell metacharacters before Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0) stored in spec.metadata['template_confidence']
• BaseLLM.model_name and BaseLLM.pricing abstract properties for explicit cost tracking

Changed

• Extracted ~600 LOC of prompt constants from architect.py into prompts.py (pure data, no behavior change)
• Error hints capped to sliding window of 5 (prevents unbounded growth in long sessions)
• MCP sessions now persist to disk via SessionStore (survive process restarts)
• Cost tracking uses llm.pricing instead of string-matching on module name

Removed

• MCP in-memory session storage, TTL cleanup, and max session eviction (replaced by SessionStore)

Commits

• c73382a Bump CLI and MCP versions to 1.0.0
• b3d2831 Fix mock patching: routers use module-level singleton lookup
• 33bde90 Fix ConversationSession patch path to cloudwright.session
• e84f9bf Fix web test mock paths to use singletons module
• 178d0b1 Add web test conftest to reset rate limiter between tests
• 90a304a Bump sub-package core dependency to >=1.0.0,<2
• 11c614a CI: non-editable local install (./packages/core not -e)
• cbdaa3b CI: fix pip install to use local path not PyPI
• 49a87aa CI: debug install to find missing modules
• 7d62796 CI: force-reinstall core + verify new modules present
• Additional commits viewable in compare view

Updates cloudwright-ai-mcp from 0.4.0 to 1.0.0

Release notes

Sourced from cloudwright-ai-mcp's releases.

v1.0.0 — Production-Ready Architecture

Full structural overhaul of the entire codebase.

Breaking Changes

• Import paths: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec. Old from cloudwright.architect import ... still works via shim.
• Sub-package dependency bumped to cloudwright-ai>=1.0.0,<2

v0.5.0 — Correctness & Security

• Connection validation on ArchSpec (rejects orphan references)
• Config sanitization blocks shell metacharacters in Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0)
• BaseLLM.pricing property replaces string-matching cost detection
• Error hint sliding window (max 5)
• MCP sessions persist to disk via SessionStore
• Auth + rate limiting on all web endpoints (was missing on 7 of 9 routers)
• Content-Disposition header injection fix
• HCL template directive injection fix
• Percent-encoded path traversal fix

v1.0 — Structural Overhaul

• architect.py (1,491 LOC) decomposed into session.py, designer.py, parsing.py, prompts.py
• Web backend split into 9 FastAPI router modules + middleware + streaming abstraction
• Terraform exporter split into per-provider modules (aws/gcp/azure/databricks)
• CLI chat decomposed into UI/session/streaming layers
• CLI command decorator for standardized output handling

Install

pip install cloudwright-ai==1.0.0
pip install cloudwright-ai-cli==1.0.0
pip install cloudwright-ai-web==1.0.0
pip install cloudwright-ai-mcp==1.0.0

1,031+ tests passing across all packages.

Changelog

Sourced from cloudwright-ai-mcp's changelog.

[1.0.0] - 2026-03-26

Breaking

• Import paths changed: cloudwright.session.ConversationSession, cloudwright.designer.Architect, cloudwright.parsing._parse_arch_spec are the canonical locations. Old from cloudwright.architect import ... still works via re-export shim.
• Web backend restructured: app.py is now an app factory (create_app()), endpoints split into routers under cloudwright_web/routers/
• Frontend rewritten with Zustand state management and restructured component architecture
• Terraform exporter split into per-provider modules under exporter/terraform/ (import path unchanged)
• CLI chat command decomposed into chat.py, chat_ui.py, chat_session.py, chat_streaming.py

Added

• Shared SSE streaming abstraction (cloudwright_web/streaming.py) used by all streaming endpoints
• CLI command decorator (cloudwright_cli/decorators.py) for standardized output/error handling
• Frontend test infrastructure: Vitest + React Testing Library + MSW
• Zustand stores for spec, chat, cost, validation, and UI state

Changed

• architect.py decomposed into session.py (ConversationSession), designer.py (Architect), parsing.py (JSON extraction, spec parsing), prompts.py (all constants)

[0.5.0] - 2026-03-26

Added

• Connection validation: ArchSpec model validator rejects connections referencing non-existent component IDs
• Config value sanitization: validate_export_config() rejects shell metacharacters before Terraform/CloudFormation export
• Template match confidence scores (0.0-1.0) stored in spec.metadata['template_confidence']
• BaseLLM.model_name and BaseLLM.pricing abstract properties for explicit cost tracking

Changed

• Extracted ~600 LOC of prompt constants from architect.py into prompts.py (pure data, no behavior change)
• Error hints capped to sliding window of 5 (prevents unbounded growth in long sessions)
• MCP sessions now persist to disk via SessionStore (survive process restarts)
• Cost tracking uses llm.pricing instead of string-matching on module name

Removed

• MCP in-memory session storage, TTL cleanup, and max session eviction (replaced by SessionStore)

Commits

• c73382a Bump CLI and MCP versions to 1.0.0
• b3d2831 Fix mock patching: routers use module-level singleton lookup
• 33bde90 Fix ConversationSession patch path to cloudwright.session
• e84f9bf Fix web test mock paths to use singletons module
• 178d0b1 Add web test conftest to reset rate limiter between tests
• 90a304a Bump sub-package core dependency to >=1.0.0,<2
• 11c614a CI: non-editable local install (./packages/core not -e)
• cbdaa3b CI: fix pip install to use local path not PyPI
• 49a87aa CI: debug install to find missing modules
• 7d62796 CI: force-reinstall core + verify new modules present
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.