chore(deps): bump strands-agents-tools from 0.8.5 to 0.8.7

[dependabot]

Bumps strands-agents-tools from 0.8.5 to 0.8.7.

Release notes

Sourced from strands-agents-tools's releases.

v0.8.7

Auto-drafted from commits in v0.8.6..v0.8.7, grouped by conventional-commit type. Edit on the release page after publish if you want a polished writeup; the canonical release notes live on the website.

🚀 Features

• feat: add MongoDB driver handshake metadata (#543) (1174bd6)

🐛 Fixes

• fix(calculator): reject cls= reroute in symbols() (#585) (c7c0c28)
• fix(mem0): lazy-load OpenSearch dependency (#540) (a47c204)
• fix: gate side-effecting AWS actions behind use_aws consent prompt (#584) (2425040)

📚 Documentation

• docs(think): move developer content out of the LLM-facing docstring (#320) (#549) (badcb5c)

👷 CI

• ci: update bedrock-agentcore requirement from <1.2.0,>=1.1.0 to >=1.1.0,<1.23.0 (#583) (29df37f)
• ci: update opensearch-py requirement from <3.0.0,>=2.8.0 to >=2.8.0,<4.0.0 (#561) (836b0d5)
• ci: update rich requirement from <15.0.0,>=14.0.0 to >=14.0.0,<16.0.0 (#563) (db4cf76)

v0.8.6

Auto-drafted from commits in v0.8.5..v0.8.6, grouped by conventional-commit type. Edit on the release page after publish if you want a polished writeup; the canonical release notes live on the website.

🚀 Features

• feat: deprecate 11 tools superseded by SDK capability, MCP servers, or nothing (#566) (bddfd3a)
• feat: deprecate sleep, editor, and shell in favor of SDK vended tools (#550) (45bf7b8)

🐛 Fixes

• fix(environment): drive value masking from environment variable (#545) (60b6390)
• fix(use_aws): gate and redact ssm parameter and kms responses (#520) (f924945)

📚 Documentation

• docs: note that tools are experimental and require an independent security review (#547) (6702a90)

👷 CI

• ci: update ruff requirement from <0.14.0,>=0.13.0 to >=0.13.0,<0.17.0 (#562) (b13980c)
• ci: update pre-commit requirement from <4.2.0,>=3.2.0 to >=3.2.0,<4.7.0 (#552) (95293c1)
• ci: update psutil requirement from <6.0.0,>=5.8.0 to >=5.8.0,<8.0.0 (#554) (c24fcc3)
• ci: update mypy requirement from <1.0.0,>=0.981 to >=0.981,<3.0.0 (#556) (d6a4a52)
• ci: align dependabot config with harness-sdk conventions (#538) (a2d90e6)
• ci(integ): opt in to allow-unsafe-pr-checkout on fork PR checkout (#548) (b27f672)

Commits

• c7c0c28 fix(calculator): reject cls= reroute in symbols() (#585)
• 29df37f ci: update bedrock-agentcore requirement from <1.2.0,>=1.1.0 to >=1.1.0,<1.23...
• badcb5c docs(think): move developer content out of the LLM-facing docstring (#320) (#...
• a47c204 fix(mem0): lazy-load OpenSearch dependency (#540)
• 2425040 fix: gate side-effecting AWS actions behind use_aws consent prompt (#584)
• 836b0d5 ci: update opensearch-py requirement from <3.0.0,>=2.8.0 to >=2.8.0,<4.0.0 (#...
• 1174bd6 feat: add MongoDB driver handshake metadata (#543)
• db4cf76 ci: update rich requirement from <15.0.0,>=14.0.0 to >=14.0.0,<16.0.0 (#563)
• bddfd3a feat: deprecate 11 tools superseded by SDK capability, MCP servers, or nothin...
• b13980c ci: update ruff requirement from <0.14.0,>=0.13.0 to >=0.13.0,<0.17.0 (#562)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)