chore(deps): update dependency python to 3.14

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
python	uses-with	minor	3.13 → 3.14

---

Release Notes

actions/python-versions (python)

v3.14.6: 3.14.6

Compare Source

Python 3.14.6

v3.14.5: 3.14.5

Compare Source

Python 3.14.5

v3.14.4: 3.14.4

Compare Source

Python 3.14.4

v3.14.3: 3.14.3

Compare Source

Python 3.14.3

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[toolhive-release-app]

🛡️ Skill Security Scan Results

⚠️ No skills were scanned in this PR.

[toolhive-release-app]

🔒 MCP Security Scan Results

✅ adb-mysql-mcp-server

• Status: Passed
• Tools scanned: 3
• Result: No security issues detected

✅ agentql-mcp

• Status: Passed
• Tools scanned: 1
• Result: No security issues detected

---

Summary: Scanned 2 MCP server(s), all passed security checks. ✅

[danbarr]

Holding this off for now. The 3.14 bump breaks the skill security scan job, but the blocker is upstream and not something we can fix on our side.

The scan installs cisco-ai-skill-scanner, which depends on litellm (<2,>=1.84.0). The latest in that range, litellm 1.92.0, ships a native Rust extension built with PyO3 0.23.5, whose maximum supported Python is 3.13. On 3.14 there's no prebuilt wheel, so uv builds from the sdist and the compile fails:

error: the configured Python interpreter version (3.14) is newer than
       PyO3's maximum supported version (3.13)

litellm also declares requires_python: <3.14, so upstream considers 3.14 unsupported. There's no newer litellm in the scanner's range to pick up either.

Closing until litellm ships PyO3 3.14 support (and the scanner's dependency range picks it up), at which point Renovate can re-propose the bump. Staying on 3.13 in the meantime has no downside for these jobs.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (3.14). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.