🧹 Resolve Security Vulnerabilities and Migrate Paraglide to v2

.github/workflows/ci-cd.yml

@@ -14,10 +14,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set up Python 3.10
+      - name: Set up Python 3.11
         uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          python-version: '3.11'
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
@@ -28,7 +28,12 @@ jobs:
         uses: pnpm/action-setup@v4
         with:
           version: latest
-
+
+      - name: Install System Dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y ffmpeg
+
       - name: Install dependencies
         run: |
           # Install all dependency groups needed for tests
@@ -50,10 +55,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set up Python 3.10
+      - name: Set up Python 3.11
         uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          python-version: '3.11'
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
@@ -64,7 +69,12 @@ jobs:
         uses: pnpm/action-setup@v4
         with:
           version: latest
-
+
+      - name: Install System Dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y ffmpeg
+
       - name: Extract version from tag
         id: get_version
         run: |

.github/workflows/docs.yml

@@ -21,10 +21,10 @@ jobs:
 
       - name: Adding Known Hosts
         run: ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
-      - name: Set up Python 3.10
+      - name: Set up Python 3.11
         uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          python-version: '3.11'
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6

.python-version

@@ -1 +1 @@
-3.10
+3.11

README.md

@@ -37,7 +37,7 @@ tests for your agent's logic. Ensure your agent behaves as expected before you e
 
 Get your first Xaibo agent running in under a minute.
 
-**Prerequisites:** Python 3.10+ and `pip`.
+**Prerequisites:** Python 3.11+ and `pip`.
 
 1.  **Install `uv`:** _(if you don't already have it)_
 

docs/how-to/installation.md

@@ -5,7 +5,7 @@ This guide shows you how to install Xaibo with only the dependencies you need fo
 ## Prerequisites
 
 Before installing Xaibo, ensure you have:
-- Python 3.10 or higher installed
+- Python 3.11 or higher installed
 - pip or uv package manager
 
 ## Install core Xaibo package

docs/how-to/integrations/livekit-voice-assistant.md

@@ -15,7 +15,7 @@ This guide shows you how to integrate your Xaibo agents with LiveKit's voice ass
 
 ## Prerequisites
 
-- Python 3.10 or higher
+- Python 3.11 or higher
 - uv package manager installed
 - Agent configurations in YAML format
 - Environment variables configured (`.env` file)

docs/index.md

@@ -20,7 +20,7 @@
 Xaibo is a powerful, protocol-driven framework that enables developers to build sophisticated AI agents with unprecedented flexibility and modularity. By using well-defined interfaces and dependency injection, Xaibo allows you to create, test, and deploy AI systems that are both robust and easily maintainable.
 
 !!! tip "Quick Start"
-    **Prerequisites:** Python 3.10 or higher installed
+    **Prerequisites:** Python 3.11 or higher installed
 
     Get up and running with Xaibo in 60 seconds:
     ```bash

docs/reference/troubleshooting.md

@@ -20,7 +20,7 @@ This reference provides systematic solutions for common issues encountered when
 
 **Resolution:**
 
-1. Verify Python version: `python --version` (requires >=3.10)
+1. Verify Python version: `python --version` (requires >=3.11)
 2. Install with required dependency groups:
    ```bash
    pip install xaibo[webserver,openai,anthropic]

docs/tutorial/advanced-orchestration.md

@@ -27,7 +27,7 @@ Before starting, make sure you have:
 
 - Completed the [Getting Started](getting-started.md) tutorial
 - Basic understanding of agent configuration
-- Python 3.10 or higher installed
+- Python 3.11 or higher installed
 - An OpenAI API key configured
 
 ## Understanding the ReAct Pattern

docs/tutorial/getting-started.md

@@ -4,7 +4,7 @@ In this lesson, you'll create your first Xaibo agent from scratch. You'll instal
 
 ## Step 1: Install Xaibo
 
-**Prerequisites:** Ensure you have Python 3.10 or higher installed on your system.
+**Prerequisites:** Ensure you have Python 3.11 or higher installed on your system.
 
 First, let's install the `uv` package manager if you don't have it:
 

docs/tutorial/index.md

@@ -25,7 +25,7 @@ You'll create a personal assistant agent that can:
 
 Before starting, make sure you have:
 
-- Python 3.10 or higher installed
+- Python 3.11 or higher installed
 - Basic familiarity with command line operations
 - A text editor for editing configuration files
 

examples/google_calendar_example/pyproject.toml

@@ -3,7 +3,7 @@ name = "google-calendar-example"
 version = "0.1.0"
 description = "Simple Google Calendar integration example for Xaibo"
 readme = "README.md"
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 dependencies = [
     "xaibo[openai,webserver]>=0.1.2",
     "google-api-python-client>=2.100.0",

examples/livekit_example/pyproject.toml

@@ -3,7 +3,7 @@ name = "voice-agent"
 version = "0.1.0"
 description = "Add your description here"
 readme = "README.md"
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 dependencies = [
     "livekit>=1.0.8",
     "livekit-agents[openai,silero]~=1.0",

pyproject.toml

@@ -5,7 +5,7 @@ authors = [{ name = "Xpress AI", email = "hello@xpress.ai"}]
 description = "Xaibo is a framework for building powerful, transparent, and modular AI agents."
 keywords = ["AI", "agent", "framework", "modular"]
 readme = "README.md"
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 dependencies = [
     "docstring-parser>=0.16",
     "pydantic>=2.10.6",
@@ -18,6 +18,7 @@ dependencies = [
     "aiohttp>=3.8.0",
     "websockets>=11.0.0",
     "mkdocs-llmstxt>=0.2.0",
+    "av!=14.4.0",
 ]
 classifiers = [
     "Intended Audience :: Developers",
@@ -26,7 +27,6 @@ classifiers = [
     "Topic :: Multimedia :: Video",
     "Topic :: Scientific/Engineering :: Artificial Intelligence",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",

ui/package.json

@@ -17,54 +17,56 @@
     "schema:generate": "cd .. && uv run strawberry export-schema xaibo.server.adapters.ui:schema --output ui/schema.graphql"
   },
   "devDependencies": {
-    "@chromatic-com/storybook": "^3.2.6",
+    "@chromatic-com/storybook": "^3.2.7",
+    "@inlang/paraglide-js": "^2.12.0",
     "@lucide/svelte": "^0.486.0",
-    "@storybook/addon-essentials": "^8.6.12",
+    "@storybook/addon-essentials": "^8.6.14",
     "@storybook/addon-svelte-csf": "5.0.0-next.27",
-    "@storybook/blocks": "^8.6.12",
-    "@storybook/experimental-addon-test": "^8.6.12",
-    "@storybook/svelte": "^8.6.12",
-    "@storybook/sveltekit": "^8.6.12",
-    "@storybook/test": "^8.6.12",
-    "@sveltejs/adapter-static": "^3.0.8",
-    "@sveltejs/kit": "^2.19.0",
-    "@sveltejs/vite-plugin-svelte": "^5.0.3",
+    "@storybook/blocks": "^8.6.14",
+    "@storybook/experimental-addon-test": "^8.6.14",
+    "@storybook/svelte": "^8.6.16",
+    "@storybook/sveltekit": "^8.6.16",
+    "@storybook/test": "^8.6.15",
+    "@sveltejs/adapter-static": "^3.0.10",
+    "@sveltejs/kit": "^2.52.0",
+    "@sveltejs/vite-plugin-svelte": "^5.1.1",
     "@tailwindcss/container-queries": "^0.1.1",
-    "@tailwindcss/forms": "^0.5.10",
-    "@tailwindcss/typography": "^0.5.16",
-    "@vitest/browser": "^3.0.8",
-    "@vitest/coverage-v8": "^3.0.8",
-    "autoprefixer": "^10.4.21",
-    "bits-ui": "^1.3.15",
+    "@tailwindcss/forms": "^0.5.11",
+    "@tailwindcss/typography": "^0.5.19",
+    "@vitest/browser": "^3.2.4",
+    "@vitest/coverage-v8": "^3.2.4",
+    "autoprefixer": "^10.4.24",
+    "bits-ui": "^1.8.0",
     "clsx": "^2.1.1",
-    "graphql-ws": "^6.0.4",
-    "houdini": "^1.5.4",
-    "houdini-svelte": "^2.1.12",
-    "mermaid": "^11.5.0",
+    "graphql-ws": "^6.0.7",
+    "houdini": "^1.5.10",
+    "houdini-svelte": "^2.1.20",
+    "mermaid": "^11.12.3",
     "paneforge": "1.0.0-next.4",
-    "playwright": "^1.51.0",
-    "prettier": "^3.5.3",
-    "prettier-plugin-svelte": "^3.3.3",
-    "prettier-plugin-tailwindcss": "^0.6.11",
-    "storybook": "^8.6.12",
-    "svelte": "^5.25.3",
-    "svelte-check": "^4.1.5",
-    "tailwind-merge": "^2.6.0",
+    "playwright": "^1.58.2",
+    "prettier": "^3.8.1",
+    "prettier-plugin-svelte": "^3.4.1",
+    "prettier-plugin-tailwindcss": "^0.6.14",
+    "storybook": "^10.2.9",
+    "svelte": "^5.51.3",
+    "svelte-check": "^4.4.0",
+    "svelte-jsoneditor": "^3.11.0",
+    "tailwind-merge": "^2.6.1",
     "tailwind-variants": "^0.3.1",
-    "tailwindcss": "^3.4.17",
+    "tailwindcss": "^3.4.19",
     "tailwindcss-animate": "^1.0.7",
-    "typescript": "^5.8.2",
+    "typescript": "^5.9.3",
     "vaul-svelte": "1.0.0-next.3",
-    "vite": "^6.2.1",
-    "vitest": "^3.0.8",
-    "svelte-jsoneditor": "^3.3.1"
-  },
-  "dependencies": {
-    "@inlang/paraglide-sveltekit": "^0.15.5"
+    "vite": "^7.3.1",
+    "vitest": "^3.2.4"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
       "esbuild"
-    ]
+    ],
+    "overrides": {
+      "ajv@<8.18.0": ">=8.18.0",
+      "cookie@<0.7.0": ">=0.7.0"
+    }
   }
-}
+}