From c706cf51577bfbba7be03d4c8b9908e70c1ef5bc Mon Sep 17 00:00:00 2001
From: jaylfc <jaylfc25@gmail.com>
Date: Fri, 23 Oct 2026 13:08:18 +0000
Subject: [PATCH] release: 1.0.0-beta.57 (dependency security hotfix)

Docs-Reviewed: version-only bump in pyproject.toml plus the CHANGELOG entry; no packaging or contribution rule changed
---
 CHANGELOG.md                              | 8 ++++++++
 changelog.d/3925-dependabot-high-bumps.md | 3 ---
 desktop/package-lock.json                 | 4 ++--
 desktop/package.json                      | 2 +-
 pyproject.toml                            | 2 +-
 tinyagentos/__init__.py                   | 2 +-
 uv.lock                                   | 2 +-
 7 files changed, 14 insertions(+), 9 deletions(-)
 delete mode 100644 changelog.d/3925-dependabot-high-bumps.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0110fd6a1..3916877e9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,14 @@ Versions follow semver beta: `1.0.0-beta.N`, bumped on each dev->master promotio
 
 ## [Unreleased]
 
+## [1.0.0-beta.57] - 2026-10-23
+
+Dependency security hotfix cut from beta.56.
+
+### Security
+
+- Updated dependencies with open high and critical advisories: Pillow 13.0.0, aiohttp 3.14.5, anyio 4.14.2, certifi 2026.10.19, fsspec 2026.9.0 and urllib3 2.8.0 on the Python side (both `uv.lock` and the macOS app bundle lock `tinyagentos/requirements.lock`, which also gains the pypdf, python-slugify, tenacity and yt-dlp pins it was missing); dompurify 3.4.17, Vue 3.5.44, vite 8.3.5, undici 7.30.1 and source-map-js 1.2.2 in the desktop build.
+
 ## [1.0.0-beta.56] - 2026-10-13
 
 Security hotfix cut from beta.55.
diff --git a/changelog.d/3925-dependabot-high-bumps.md b/changelog.d/3925-dependabot-high-bumps.md
deleted file mode 100644
index 63ce10613..000000000
--- a/changelog.d/3925-dependabot-high-bumps.md
+++ /dev/null
@@ -1,3 +0,0 @@
-### Security
-
-- Updated dependencies with open high and critical advisories: Pillow 13.0.0, aiohttp 3.14.5, anyio 4.14.2, certifi 2026.10.19, fsspec 2026.9.0 and urllib3 2.8.0 on the Python side (both `uv.lock` and the macOS app bundle lock `tinyagentos/requirements.lock`, which also gains the pypdf, python-slugify, tenacity and yt-dlp pins it was missing); dompurify 3.4.17, Vue 3.5.44, vite 8.3.5, undici 7.30.1 and source-map-js 1.2.2 in the desktop build.
diff --git a/desktop/package-lock.json b/desktop/package-lock.json
index 46c6225a6..370d171e2 100644
--- a/desktop/package-lock.json
+++ b/desktop/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "tinyagentos-desktop",
-  "version": "1.0.0-beta.56",
+  "version": "1.0.0-beta.57",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tinyagentos-desktop",
-      "version": "1.0.0-beta.56",
+      "version": "1.0.0-beta.57",
       "dependencies": {
         "@codemirror/commands": "^6.11.0",
         "@codemirror/lang-markdown": "^6.5.2",
diff --git a/desktop/package.json b/desktop/package.json
index 20c9e3ed8..333c235e9 100644
--- a/desktop/package.json
+++ b/desktop/package.json
@@ -1,7 +1,7 @@
 {
   "name": "tinyagentos-desktop",
   "private": true,
-  "version": "1.0.0-beta.56",
+  "version": "1.0.0-beta.57",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/pyproject.toml b/pyproject.toml
index 8f1de374e..22819c372 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tinyagentos"
-version = "1.0.0-beta.56"
+version = "1.0.0-beta.57"
 description = "Self-hosted AI agent memory system for low-power hardware"
 license = { file = "LICENSE" }
 # Upper-capped at <3.15 because the proxy extra's litellm (pinned
diff --git a/tinyagentos/__init__.py b/tinyagentos/__init__.py
index 1fd3c0f21..ed8f7555b 100644
--- a/tinyagentos/__init__.py
+++ b/tinyagentos/__init__.py
@@ -1 +1 @@
-__version__ = "1.0.0-beta.56"
+__version__ = "1.0.0-beta.57"
diff --git a/uv.lock b/uv.lock
index 6ec86ebf1..6cb46e5d6 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2780,7 +2780,7 @@ wheels = [
 
 [[package]]
 name = "tinyagentos"
-version = "1.0.0b56"
+version = "1.0.0b57"
 source = { editable = "." }
 dependencies = [
     { name = "aiosqlite" },