From 84d5d0d950d3aa5f92334faefbb083517202a2eb Mon Sep 17 00:00:00 2001 From: Eduard Dumitru Date: Fri, 7 Aug 2026 14:42:44 +0200 Subject: [PATCH 1/2] chore: require uipath-runtime>=0.13.1 for the output-arguments split 0.13.1 adds runtime.splitOutputArguments, which writes a job's output arguments to their own file and leaves an outputArgumentsFilePath pointer in the result envelope. Raising the floor guarantees the key is understood rather than silently ignored by an older runtime, which would leave the payload inline and hand the consumer the memory blowup the split exists to avoid. Version-only change on top; no source touched. Co-Authored-By: Claude Opus 5 --- packages/uipath/pyproject.toml | 4 ++-- packages/uipath/uv.lock | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/packages/uipath/pyproject.toml b/packages/uipath/pyproject.toml index 9d03dcc1e..c077ade3e 100644 --- a/packages/uipath/pyproject.toml +++ b/packages/uipath/pyproject.toml @@ -1,12 +1,12 @@ [project] name = "uipath" -version = "2.14.2" +version = "2.14.3" description = "Python SDK and CLI for UiPath Platform, enabling programmatic interaction with automation services, process management, and deployment tools." readme = { file = "README.md", content-type = "text/markdown" } requires-python = ">=3.11" dependencies = [ "uipath-core>=0.5.30, <0.6.0", - "uipath-runtime>=0.13.0, <0.14.0", + "uipath-runtime>=0.13.1, <0.14.0", "uipath-platform>=0.2.14, <0.3.0", "click>=8.3.1", "httpx>=0.28.1", diff --git a/packages/uipath/uv.lock b/packages/uipath/uv.lock index f9c60b86a..2e7bc9f68 100644 --- a/packages/uipath/uv.lock +++ b/packages/uipath/uv.lock @@ -2599,7 +2599,7 @@ wheels = [ [[package]] name = "uipath" -version = "2.14.2" +version = "2.14.3" source = { editable = "." } dependencies = [ { name = "applicationinsights" }, @@ -2682,7 +2682,7 @@ requires-dist = [ { name = "uipath-core", editable = "../uipath-core" }, { name = "uipath-ipc", marker = "extra == 'ipc'", specifier = ">=2.5.1,<2.6.0" }, { name = "uipath-platform", editable = "../uipath-platform" }, - { name = "uipath-runtime", specifier = ">=0.13.0,<0.14.0" }, + { name = "uipath-runtime", specifier = ">=0.13.1,<0.14.0" }, ] provides-extras = ["ipc"] @@ -2800,16 +2800,16 @@ dev = [ [[package]] name = "uipath-runtime" -version = "0.13.0" +version = "0.13.1" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "chardet" }, { name = "uipath-core" }, { name = "vadersentiment" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/65/c0/d55cf48ee43758c2c1c65f52fd0596fd75f5bd5067a5016e6553b4d2c5fe/uipath_runtime-0.13.0.tar.gz", hash = "sha256:8ae3150df5fb0043210faacf39148789c1fb252c6a8d6bc27174c0d9ce7304f5", size = 243594, upload-time = "2026-08-04T11:19:04.886Z" } +sdist = { url = "https://files.pythonhosted.org/packages/15/42/837240fd4cb2824ee5899cd2e06352c617645077efcecff7081a7292464a/uipath_runtime-0.13.1.tar.gz", hash = "sha256:4fd51d95e8b3c8554de8148239425499bbb7ec8687ad93a38f5107c6cdc0d7dd", size = 246257, upload-time = "2026-08-12T12:48:20.386Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/dc/88/9518dcbeedaa8117e5fd3d0424c4a7354bae1f3ede1b2e3f48524e4b7efc/uipath_runtime-0.13.0-py3-none-any.whl", hash = "sha256:2a7c128cf14fdbef899b272ee5995da63baeb882acc904f39ef8f8f52bcb019f", size = 96349, upload-time = "2026-08-04T11:19:03.376Z" }, + { url = "https://files.pythonhosted.org/packages/84/de/94e1ebcd7f25ee7620cb712f376cd84349d5d4b599bdbc6298556310598f/uipath_runtime-0.13.1-py3-none-any.whl", hash = "sha256:365134dfdc87050636b9027b839bbd93636ee56bd463bb38c1e48b7e19e848dd", size = 96876, upload-time = "2026-08-12T12:48:19.014Z" }, ] [[package]] From 3665a5223eb11564b287150f1a305ec7429f6cac Mon Sep 17 00:00:00 2001 From: Eduard Dumitru Date: Thu, 13 Aug 2026 09:48:54 +0200 Subject: [PATCH 2/2] ci: exempt uipath-runtime from the Safe Chain package-age gate pyproject.toml already exempts uipath-runtime from uv's own 2-day exclude-newer window ([tool.uv.exclude-newer-package]). Safe Chain runs outside the project and does not see that, so a freshly published uipath-runtime is blocked for being too new while the release train promotes it across repos. Skips only the age gate; malware and every other Safe Chain check still run. Same approach as uipath-agents-python and UiPath/cli#2195. Separate commit so it can be dropped independently of the version bump. Co-Authored-By: Claude Opus 5 --- .github/workflows/lint-packages.yml | 3 +++ .github/workflows/test-packages.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/lint-packages.yml b/.github/workflows/lint-packages.yml index c005b8ba9..07d6d8483 100644 --- a/.github/workflows/lint-packages.yml +++ b/.github/workflows/lint-packages.yml @@ -3,6 +3,9 @@ name: Lint Packages on: workflow_call: +env: + SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS: uipath-runtime + permissions: contents: read diff --git a/.github/workflows/test-packages.yml b/.github/workflows/test-packages.yml index 5202195e3..b50dcecab 100644 --- a/.github/workflows/test-packages.yml +++ b/.github/workflows/test-packages.yml @@ -6,6 +6,9 @@ on: SONAR_TOKEN: required: false +env: + SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS: uipath-runtime + permissions: contents: read