[SDAChess]

Summary

Update setuptools to 83.0.0, the first patched version for GHSA-h35f-9h28-mq5c, and require the patched minimum for isolated Python builds.

Related Issue

Addresses Dependabot alert 25. The requesting maintainer explicitly waived a separate issue for this dependency update.

Changes

• Raise the build-system setuptools minimum from 80 to 83.
• Update only setuptools in uv.lock from 80.10.2 to 83.0.0.

Testing

• uv lock --check and uv sync --frozen
• Python protobuf generation with the frozen lockfile
• Ruff format and lint checks on python and tasks
• ty check python
• Python unit tests: 229 passed on Python 3.14.5
• Build sdist and wheel with setuptools constrained to exactly 83.0.0; validate the resulting wheel with tasks/scripts/verify-python-wheel.py
• No new tests or E2E changes: this updates an upstream dependency and its build requirement.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs: not applicable

[github-actions]

Compatibility review (advisory)

New or updated breaking changes; see the full report for all findings.

1. python-sdk — No explicit risk acceptance found

[build-system].requires changed from setuptools>=80 to setuptools>=83.

• Impact: Consumers performing isolated Python SDK builds from an sdist or checkout with setuptools constrained to versions 80–82 now fail build-dependency resolution before installation.
• Action: Restore setuptools>=80 for v0.1.5 while pinning release builds to 83, or defer the minimum-version increase to a break-allowing minor release with notice and source-build migration guidance.
• PR: fix(deps): update setuptools to 83.0.0 #4711

Review details

• Execution: complete
• Candidate: PR #4711 (44eb5bc8a76ad8269deb6950f1993f030a56d764)
• Baseline: b1cfc9172022d80983a09a0aeec8dd65f7a8f44c (b1cfc9172022d80983a09a0aeec8dd65f7a8f44c)
• Reviewed: rust-sdk, python-sdk, go-sdk, typescript-sdk, api-behavior, cli, configuration, policy, helm, state

Advisory review; publication gates are unchanged.

Branch check run