deps(libraries): add upper bound specifiers and sync package versions (fixes #693) (#713)

* deps(libraries): add upper bound specifiers and sync package versions (fixes #693)

* deps(libraries): allow cryptography 50.x to resolve PYSEC-2026-3552

---------

Co-authored-by: chelslava <chelslava@users.noreply.github.com>

Author: chelslava

README.md

@@ -420,9 +420,9 @@ pnpm build        # Production build
 
 | Package | Description | Version | Status |
 |---------|-------------|---------|--------|
-| `rpaforge-core` | Engine, debugger, JSON-RPC bridge | v0.3.5 | ✅ Stable |
-| `rpaforge-libraries` | 14 RPA library modules | v0.3.5 | ✅ Stable |
-| `rpaforge-studio` | Electron + React desktop UI | v0.3.5 | 🔄 Alpha |
+| `rpaforge-core` | Engine, debugger, JSON-RPC bridge | v0.4.5 | ✅ Stable |
+| `rpaforge-libraries` | 14 RPA library modules | v0.4.5 | ✅ Stable |
+| `rpaforge-studio` | Electron + React desktop UI | v0.4.5 | 🔄 Alpha |
 | `rpaforge-orchestrator` | Control Tower | — | 🔜 Planned |
 
 ---

packages/core/src/rpaforge/version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-VERSION = "0.3.7"
+VERSION = "0.4.5"

packages/libraries/README.md

@@ -35,6 +35,7 @@ pip install rpaforge-libraries
 # With optional dependencies
 pip install rpaforge-libraries[desktop]    # Desktop UI automation (pywinauto)
 pip install rpaforge-libraries[web]        # Web UI automation (playwright)
+playwright install chromium                # Download browser binaries for WebUI
 pip install rpaforge-libraries[ocr]        # OCR support (pytesseract, pyzbar, pyautogui)
 pip install rpaforge-libraries[excel]      # Excel operations (openpyxl)
 pip install rpaforge-libraries[dataframes] # Tabular data (polars)

packages/libraries/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "rpaforge-libraries"
-version = "0.4.1"
+version = "0.4.5"
 description = "RPA automation libraries for RPAForge"
 readme = "README.md"
 license = {text = "Apache-2.0"}
@@ -30,41 +30,41 @@ classifiers = [
     "Programming Language :: Python :: 3.13",
 ]
 dependencies = [
-    "rpaforge-core>=0.3.0",
-    "cryptography>=48.0",
-    "requests>=2.32.0",
+    "rpaforge-core>=0.4.0,<0.5.0",
+    "cryptography>=48.0,<51.0",
+    "requests>=2.32.0,<3.0.0",
 ]
 
 [project.optional-dependencies]
 desktop = [
-    "pywinauto>=0.6.8",
-    "pillow>=10.0",
+    "pywinauto>=0.6.8,<1.0.0",
+    "pillow>=10.0,<12.0",
 ]
 web = [
-    "playwright>=1.40",
+    "playwright>=1.40.0,<2.0.0",
 ]
 ocr = [
-    "pytesseract>=0.3.10",
-    "pyzbar>=0.1.9",
-    "pyautogui>=0.9.54",
-    "pillow>=10.0",
+    "pytesseract>=0.3.10,<1.0.0",
+    "pyzbar>=0.1.9,<1.0.0",
+    "pyautogui>=0.9.54,<1.0.0",
+    "pillow>=10.0,<12.0",
 ]
 excel = [
-    "openpyxl>=3.1",
+    "openpyxl>=3.1,<4.0",
 ]
 database = [
-    "sqlalchemy>=2.0",
+    "sqlalchemy>=2.0,<3.0",
 ]
 keystore = [
-    "keyring>=24.0",
+    "keyring>=24.0,<26.0",
 ]
 spy = [
-    "uiautomation>=2.0",
-    "websocket-client>=1.0",
-    "pynput>=1.7",
+    "uiautomation>=2.0,<3.0",
+    "websocket-client>=1.0,<2.0",
+    "pynput>=1.7,<2.0",
 ]
 dataframes = [
-    "polars>=0.20",
+    "polars>=0.20,<2.0",
 ]
 all = [
     "rpaforge-libraries[desktop,web,ocr,excel,database,keystore,spy,dataframes]",

packages/libraries/tests/test_desktop_ui_unit.py

@@ -156,10 +156,15 @@ class TestDesktopUIImportError:
     """Tests for import error handling."""
 
     @pytest.mark.skipif(sys.platform != "win32", reason="Windows-only test")
-    def test_connect_raises_import_error(self):
+    def test_connect_raises_import_error(self, monkeypatch):
         """Test that connect raises helpful error message when pywinauto not installed."""
         desktop = DesktopUI()
 
+        def mock_pywinauto(self):
+            raise ImportError("pywinauto is required for DesktopUI library.")
+
+        monkeypatch.setattr(DesktopUI, "_pywinauto", property(mock_pywinauto))
+
         with pytest.raises(ImportError, match="pywinauto is required"):
             desktop.connect_to_application(process_id=1234)