Merge branch 'main' into feat/fastapi-routes-helpers

Author: martimfasantos

.github/workflows/coverage-comment.yaml

@@ -26,14 +26,14 @@ jobs:
 
       - name: Upload Coverage Report
         id: upload-report
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: coverage-report
           path: coverage/
           retention-days: 14
 
       - name: Post Comment
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           ARTIFACT_URL: ${{ steps.upload-report.outputs.artifact-url }}
         with:

.github/workflows/itk.yaml

@@ -31,4 +31,4 @@ jobs:
         run: bash run_itk.sh
         working-directory: itk
         env:
-          A2A_SAMPLES_REVISION: itk-v.02-alpha
+          A2A_SAMPLES_REVISION: itk-v.021-alpha

.github/workflows/linter.yaml

@@ -41,14 +41,10 @@ jobs:
         id: ruff-format
         run: uv run ruff format --check
         continue-on-error: true
-      - name: Run MyPy Type Checker
-        id: mypy
+      - name: Run ty Type Checker
+        id: ty
         continue-on-error: true
-        run: uv run mypy src
-      - name: Run Pyright (Pylance equivalent)
-        id: pyright
-        continue-on-error: true
-        run: uv run pyright src
+        run: uv run ty check --output-format=github
       - name: Run JSCPD for copy-paste detection
         id: jscpd
         continue-on-error: true
@@ -60,15 +56,13 @@ jobs:
         env:
           RUFF_LINT: ${{ steps.ruff-lint.outcome }}
           RUFF_FORMAT: ${{ steps.ruff-format.outcome }}
-          MYPY: ${{ steps.mypy.outcome }}
-          PYRIGHT: ${{ steps.pyright.outcome }}
+          TY: ${{ steps.ty.outcome }}
           JSCPD: ${{ steps.jscpd.outcome }}
         run: |-
           failed=()
           [[ "$RUFF_LINT"   == "failure" ]] && failed+=("Ruff Linter")
           [[ "$RUFF_FORMAT" == "failure" ]] && failed+=("Ruff Formatter")
-          [[ "$MYPY"        == "failure" ]] && failed+=("MyPy")
-          [[ "$PYRIGHT"     == "failure" ]] && failed+=("Pyright")
+          [[ "$TY"          == "failure" ]] && failed+=("ty")
           [[ "$JSCPD"       == "failure" ]] && failed+=("JSCPD")
           if (( ${#failed[@]} )); then
             joined=$(IFS=', '; echo "${failed[*]}")

.github/workflows/python-publish.yml

@@ -26,7 +26,7 @@ jobs:
         run: uv build
 
       - name: Upload distributions
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: release-dists
           path: dist/
@@ -46,6 +46,6 @@ jobs:
           path: dist/
 
       - name: Publish release distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
         with:
           packages-dir: dist/

.github/workflows/release-please.yml

@@ -13,7 +13,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v4
         with:
           token: ${{ secrets.A2A_BOT_PAT }}
           config-file: release-please-config.json

.github/workflows/security.yaml

@@ -12,7 +12,7 @@ jobs:
       contents: read
     steps:
       - name: Perform Bandit Analysis
-        uses: PyCQA/bandit-action@8a1b30610f61f3f792fe7556e888c9d7dffa52de # v1
+        uses: PyCQA/bandit-action@67a458d90fa11fb1463e91e7f4c8f068b5863c7f # v1.0.1
         with:
           severity: medium
           confidence: medium

.github/workflows/unit-tests.yml

@@ -102,7 +102,7 @@ jobs:
           echo ${{ github.event.pull_request.base.ref || 'main' }} > ./BASE_BRANCH
 
       - name: Upload Coverage Artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         if: github.event_name == 'pull_request' && matrix.python-version == '3.14'
         with:
           name: coverage-data
@@ -120,7 +120,7 @@ jobs:
         run: uv run pytest --cov=a2a --cov-report term --cov-fail-under=88
 
       - name: Upload Artifact (base)
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         if: github.event_name != 'pull_request' && matrix.python-version == '3.14'
         with:
           name: coverage-report

docs/ai/coding_conventions.md

@@ -3,7 +3,7 @@
 Non-negotiable rules for code quality and style.
 
 1. **Python Types**: All Python code MUST include type hints. All function definitions MUST include return types.
-2. **Type Safety**: All code MUST pass `mypy` and `pyright` checks.
+2. **Type Safety**: All code MUST pass `ty` checks.
 3. **Formatting & Linting**: All code MUST be formatted with `ruff`.
 
 #### Examples:

docs/ai/mandatory_checks.md

@@ -10,8 +10,7 @@ Exact shell commands required to test the project and fix formatting issues.
 
 2. **Type Checking**:
    ```bash
-   uv run mypy src
-   uv run pyright src
+   uv run ty check
    ```
 
 3. **Testing**:

itk/README.md

@@ -36,7 +36,7 @@ You must set the `A2A_SAMPLES_REVISION` environment variable to specify which re
 
 Example:
 ```
-export A2A_SAMPLES_REVISION=itk-v.02-alpha
+export A2A_SAMPLES_REVISION=itk-v.021-alpha
 ```
 
 ### 2. Execute Tests