[Eduard van Valkenburg (eavanvalkenburg)]

Motivation & Context

Prepare the Python 1.23.0 package release from the 58 Python pull requests merged since python-1.22.0. This consolidates the release changelog, package-specific versions, dependency floors, Python 3.15 support updates, and lockfiles so the published distributions reflect the current release cohort.

Description & Review Guide

• What are the major changes? Adds the 1.23.0 CHANGELOG section covering all 58 merged PRs and 20 releasing distributions; moves Core and the root package to 1.23.0, AG-UI to 1.7.0, Declarative and Orchestrations to 1.4.0, and selectively stamps 15 changed alpha and beta packages with 261022; refreshes the core[all] release cohort; raises the Core floor only for Declarative, DevUI, Foundry Hosting, and Orchestrations under the strict consumer policy; enables Python 3.15 support for DuckDB, Hyperlight, and the AG-UI A2UI extra; adapts Hyperlight output-limit handling to Hyperlight 0.8; raises the psutil floor to a Windows ABI3-wheel release; incorporates the TypeScript 7 and Hugging Face Hub 2.2 dependency updates; documents the standalone Lab artifact build path; and refreshes the root and Lab lockfiles.
• What is the impact of these changes? The release publishes the merged MCP 2.x, AG-UI authorization, workflow, provider, shell-tool, and reliability changes under the new package versions. Python 3.15 users gain DuckDB 2.x support, Hyperlight CodeAct on supported Windows/Linux platforms, and the A2UI extra. Redis, Declarative Power Fx, and Lab Tau2 retain their documented upstream Python 3.15 limitations. Lab remains a separately built and published standalone distribution, with its local release command documented in its README. Unchanged prerelease packages are not restamped.
• What do you want reviewers to focus on? Confirm the CHANGELOG coverage and semver decisions, the selective prerelease bump set, the strict Core-floor choices, the core[all] cohort bounds, the Python 3.15 dependency markers, the Hyperlight 0.8 compatibility adjustment, the TypeScript and Lab lock updates, the standalone Lab build path, and the generated lockfiles.

Related Issue

N/A - repository automation. This is maintainer-directed Python release preparation consumed by .github/workflows/python-release.yml when the release is published; Lab artifacts are built and published separately using the documented standalone command.

AI Assistance

• No material AI assistance was used.
• This is an AI-assisted contribution. I reviewed, understood, and verified all submitted content and accept responsibility for it.

AI assistance details: Release-scope analysis, changelog assembly and reconciliation, package-version and dependency updates, Hyperlight compatibility changes, Python 3.15 verification, Lab release-path documentation, validation, and this PR description.

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR links to an agreed issue with no competing open PR, or the Related Issue section documents a trivial-change or repository-automation exception.
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and the title prefix in sync automatically.

[github-code-quality]

Code coverage overview

Languages: Python

Python / code-coverage/python

main 07a83a7	python-version-bump ca584a7	+/-
92%	92%	0%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

---

_{Updated October 22, 2026 15:51 UTC}

[Copilot]

🔵 Needs a closer look

The unresolved Lab artifact-generation path and cross-platform native dependency changes require maintainer validation before publication.

1 open issue

• Lab release workflow produces no publishable artifact · New

What changed in this PR

Prepares the Python 1.23.0 release by aligning package versions, dependency requirements, release notes, and compatibility documentation.

Changes:

• Updates 19 distribution versions, selected Core dependency floors, and the standard-install package cohort.
• Enables Python 3.15 support for DuckDB, Hyperlight, and AG-UI A2UI, including Hyperlight 0.8 compatibility adjustments.
• Refreshes changelog entries, lockfiles, and Python 3.15 test coverage.

File	Description
python/​uv.lock	Refreshes workspace versions and dependency metadata.
python/​README.md	Removes resolved Python 3.15 limitations.
python/​pyproject.toml	Bumps root version and exact Core pin.
python/​packages/​tools/​pyproject.toml	Bumps version and raises the psutil floor.
python/​packages/​redis/​pyproject.toml	Bumps Redis package version.
python/​packages/​orchestrations/​pyproject.toml	Bumps version and Core floor.
python/​packages/​ollama/​pyproject.toml	Bumps Ollama package version.
python/​packages/​lab/​uv.lock	Synchronizes the Lab version.
python/​packages/​lab/​README.md	Clarifies remaining Python 3.15 limitations.
python/​packages/​lab/​pyproject.toml	Bumps Lab package version.
python/​packages/​hyperlight/​tests/​hyperlight/​test_hyperlight_codeact.py	Adjusts output-limit expectations for Hyperlight 0.8.
python/​packages/​hyperlight/​README.md	Documents Python 3.15 platform support.
python/​packages/​hyperlight/​pyproject.toml	Requires Hyperlight 0.8 and enables Python 3.15.
python/​packages/​hyperlight/​agent_framework_hyperlight/​_execute_code_tool.py	Passes output limits as numeric strings.
python/​packages/​hosting-mcp/​pyproject.toml	Bumps MCP hosting package version.
python/​packages/​gemini/​pyproject.toml	Bumps Gemini package version.
python/​packages/​foundry_hosting/​pyproject.toml	Bumps version and Core floor.
python/​packages/​duckdb/​README.md	Documents version-specific DuckDB support.
python/​packages/​duckdb/​pyproject.toml	Selects DuckDB 2.x for Python 3.15.
python/​packages/​devui/​pyproject.toml	Bumps version and Core floor.
python/​packages/​declarative/​pyproject.toml	Bumps version and Core floor.
python/​packages/​core/​pyproject.toml	Updates Core and standard-install dependencies.
python/​packages/​bedrock/​pyproject.toml	Bumps Bedrock package version.
python/​packages/​azure-cosmos-memory/​pyproject.toml	Bumps Cosmos memory package version.
python/​packages/​anthropic/​pyproject.toml	Bumps Anthropic package version.
python/​packages/​ag-ui/​README.md	Documents A2UI Python 3.15 support.
python/​packages/​ag-ui/​pyproject.toml	Bumps AG-UI and the A2UI toolkit floor.
python/​packages/​a2a/​pyproject.toml	Bumps A2A package version.
python/​CHANGELOG.md	Adds release notes and comparison links.
.github/​workflows/​python-tests.yml	Includes DuckDB in Python 3.15 tests.

_{Review effort: Balanced}

[github-actions]

MAF Automated Review — Iteration 1

Result: Findings reported
Scope: full PR (1 commit(s)): 70cd8860bbf7
Model: gpt-5.6-sol

Overview

The release update consistently advances the root/Core pin, bounds the core[all] cohort, refreshes markers and lockfiles, and adds focused Hyperlight 0.8 coverage. Hyperlight retains independent host-side output limits, cleanup, and Python 3.15 CI guardrails. However, the release assigns minor versions to stable Core and AG-UI packages while its own changelog documents incompatible MCP and endpoint-registration changes, so ordinary 1.x dependency ranges can receive breaking upgrades.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
2 verified findings remained after source verification (2 high) across 2 files. Details are attached to the affected lines below.

Affected areas: python/packages/ag-ui/pyproject.toml, python/packages/core/pyproject.toml