chore: Add support for python version 3.14 (#444)

Author: vamaq

.github/workflows/test.yaml

@@ -12,7 +12,11 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
+        exclude:
+          # lxml doesn't have pre-built wheels for Python 3.14 on Windows yet
+          - os: windows-latest
+            python-version: "3.14"
 
     runs-on: ${{ matrix.os }}
 
@@ -33,6 +37,14 @@ jobs:
       - name: Install invoke
         run: pipx install invoke
 
+      - name: Install lxml build dependencies (Linux)
+        if: matrix.python-version == '3.14' && runner.os == 'Linux'
+        run: sudo apt-get install -y libxml2-dev libxslt-dev
+
+      - name: Install lxml build dependencies (macOS)
+        if: matrix.python-version == '3.14' && runner.os == 'macOS'
+        run: brew install libxml2 libxslt
+
       - name: Install Dependencies
         run: invoke install
 

poetry.lock

@@ -4,16 +4,16 @@ version = "1.39.0"
 description = "Client library for the Galileo platform."
 authors = [{ name = "Galileo Technologies Inc.", email = "team@galileo.ai" }]
 readme = "README.md"
-requires-python = ">=3.9,<3.14"
+requires-python = ">=3.9,<3.15"
 dynamic = ["dependencies"]
 license = "Apache-2.0"
 
 [project.urls]
 Repository = "https://github.com/rungalileo/galileo-python"
 
 [tool.poetry.dependencies]
-python = "^3.9,<3.14"
-pydantic = "^2.11.7"
+python = "^3.9,<3.15"
+pydantic = "^2.12.0"
 pyjwt = "^2.8.0"
 wrapt = "^1.14"
 attrs = ">=22.2.0"
@@ -50,7 +50,7 @@ pre-commit = "^4.0.1"
 mypy = "^1.16.0"
 openai = "^1.95.1"
 fastapi = "^0.115.0"
-codeflash = ">=0.12.3"
+codeflash = { version = ">=0.12.3", python = "<3.14" }
 ruff = "^0.12.3"
 openapi-python-client = "^0.26.1"
 yq = "^3.4.3"
@@ -59,11 +59,14 @@ pyyaml = "^6.0.2"
 
 [tool.pytest.ini_options]
 pythonpath = ["./src/"]
+# Note: Some env vars are also set in conftest.py for pytest-xdist compatibility
+# on Python 3.14+. This section remains for documentation and older Python support.
 env = [
     "GALILEO_CONSOLE_URL=http://localtest:8088",
     "GALILEO_API_KEY=api-1234567890",
     "GALILEO_PROJECT=test-project",
     "GALILEO_LOG_STREAM=test-log-stream",
+    "OPENAI_API_KEY=sk-test",
 ]
 addopts = [
     # Run tests in parallel.
@@ -321,10 +324,10 @@ formatter-cmds = ["ruff check --exit-zero --fix $file", "ruff format $file"]
 [project.optional-dependencies]
 langchain = ["langchain-core"]
 openai = ["openai", "packaging (>=24.2,<25.0)", "openai-agents"]
-crewai = ["crewai (>=0.152.0,<=0.201.1)"]
+crewai = ["crewai (>=0.152.0,<=0.201.1); python_version < '3.14'"]
 middleware = ["starlette"]
 otel = ["opentelemetry-sdk (>=1.38.0,<2.0.0)", "opentelemetry-api (>=1.38.0,<2.0.0)", "opentelemetry-exporter-otlp (>=1.38.0,<2.0.0)"]
-all = ["langchain-core", "openai", "packaging (>=24.2,<25.0)", "openai-agents", "opentelemetry-sdk (>=1.38.0,<2.0.0)", "opentelemetry-api (>=1.38.0,<2.0.0)", "opentelemetry-exporter-otlp (>=1.38.0,<2.0.0)", "crewai (>=0.152.0,<=0.201.1)", "starlette"]
+all = ["langchain-core", "openai", "packaging (>=24.2,<25.0)", "openai-agents", "opentelemetry-sdk (>=1.38.0,<2.0.0)", "opentelemetry-api (>=1.38.0,<2.0.0)", "opentelemetry-exporter-otlp (>=1.38.0,<2.0.0)", "crewai (>=0.152.0,<=0.201.1); python_version < '3.14'", "starlette"]
 
 
 [build-system]

pyproject.toml

@@ -4,7 +4,6 @@
 from langchain_core.runnables.base import Runnable
 from langchain_core.tools import BaseTool
 from pydantic import UUID4, BaseModel, ConfigDict, Field
-from pydantic.v1 import BaseModel as BaseModelV1
 
 from galileo.constants.protect import TIMEOUT_SECS
 from galileo.protect import ainvoke_protect, invoke_protect
@@ -17,7 +16,9 @@
 logger = get_logger(__name__)
 
 
-class ProtectToolInputSchema(BaseModelV1):
+class ProtectToolInputSchema(BaseModel):
+    """Input schema for the ProtectTool."""
+
     input: Optional[str] = None
     output: Optional[str] = None
 
@@ -58,8 +59,7 @@ class ProtectTool(BaseTool):
         "The tool can be used on the input text or output text, and can be configured "
         "with a set of rulesets to evaluate on."
     )
-    # langchain requires pydantic v1
-    args_schema: type[BaseModelV1] = ProtectToolInputSchema
+    args_schema: type[BaseModel] = ProtectToolInputSchema
 
     prioritized_rulesets: Optional[Sequence[Ruleset]] = None
     project_id: Optional[UUID4] = None

src/galileo/handlers/langchain/tool.py

@@ -1,24 +1,43 @@
-import datetime
-import logging
-from collections.abc import Generator
-from typing import Callable
-from unittest.mock import MagicMock, patch
-from uuid import uuid4
-
-import pytest
-from openai.types import CompletionUsage
-from openai.types.chat import ChatCompletionMessage
-from openai.types.chat.chat_completion import ChatCompletion, Choice
-
-from galileo.config import GalileoPythonConfig
-from galileo.resources.models import DatasetContent, DatasetRow, DatasetRowValuesDict
-from galileo_core.constants.request_method import RequestMethod
-from galileo_core.constants.routes import Routes as CoreRoutes
-from galileo_core.schemas.core.user import User
-from galileo_core.schemas.core.user_role import UserRole
-from galileo_core.schemas.protect.rule import Rule, RuleOperator
-from galileo_core.schemas.protect.ruleset import Ruleset
-from tests.testutils.setup import setup_thread_pool_request_capture
+# fmt: off
+# CRITICAL: Set test environment variables BEFORE any other imports.
+# This MUST be at the absolute top of conftest.py before any import statements.
+# Required for pytest-xdist compatibility on Python 3.14+.
+#
+# NOTE: We unconditionally override these vars (not setdefault) to ensure:
+# 1. Tests never accidentally use real credentials from developer's environment
+# 2. Test isolation - all tests see the same predictable values
+# 3. Security - prevents real API keys from leaking into test logs
+import os as _os
+
+_os.environ["GALILEO_CONSOLE_URL"] = "http://localtest:8088"
+_os.environ["GALILEO_API_KEY"] = "api-1234567890"
+_os.environ["GALILEO_PROJECT"] = "test-project"
+_os.environ["GALILEO_LOG_STREAM"] = "test-log-stream"
+_os.environ["OPENAI_API_KEY"] = "sk-test"
+del _os  # Clean up temporary import
+# fmt: on
+
+import datetime  # noqa: E402
+import logging  # noqa: E402
+from collections.abc import Generator  # noqa: E402
+from typing import Callable  # noqa: E402
+from unittest.mock import MagicMock, patch  # noqa: E402
+from uuid import uuid4  # noqa: E402
+
+import pytest  # noqa: E402
+from openai.types import CompletionUsage  # noqa: E402
+from openai.types.chat import ChatCompletionMessage  # noqa: E402
+from openai.types.chat.chat_completion import ChatCompletion, Choice  # noqa: E402
+
+from galileo.config import GalileoPythonConfig  # noqa: E402
+from galileo.resources.models import DatasetContent, DatasetRow, DatasetRowValuesDict  # noqa: E402
+from galileo_core.constants.request_method import RequestMethod  # noqa: E402
+from galileo_core.constants.routes import Routes as CoreRoutes  # noqa: E402
+from galileo_core.schemas.core.user import User  # noqa: E402
+from galileo_core.schemas.core.user_role import UserRole  # noqa: E402
+from galileo_core.schemas.protect.rule import Rule, RuleOperator  # noqa: E402
+from galileo_core.schemas.protect.ruleset import Ruleset  # noqa: E402
+from tests.testutils.setup import setup_thread_pool_request_capture  # noqa: E402
 
 # Note: The mock_request fixture is automatically provided by galileo_core[testing] extras
 
@@ -62,7 +81,13 @@ def set_validated_config(
     mock_healthcheck: None, mock_login_api_key: None, mock_get_current_user: None, mock_decode_jwt: MagicMock
 ) -> Generator[None, None, None]:
     """Automatically set up validated config for tests."""
-    config = GalileoPythonConfig.get()
+    # Reset any existing config to ensure fresh initialization
+    # This is needed for pytest-xdist compatibility on Python 3.14+
+    if GalileoPythonConfig._instance is not None:
+        GalileoPythonConfig._instance.reset()
+    # Initialize config with EXPLICIT values to avoid env var timing issues with pytest-xdist
+    # This ensures correct config even if env vars weren't set before module imports
+    config = GalileoPythonConfig.get(console_url="http://localtest:8088", api_key="api-1234567890")
     yield
     config.reset()
 

tests/conftest.py

@@ -5,6 +5,10 @@
 to prevent interactive prompts and properly isolate Configuration tests.
 
 These tests are completely isolated from the parent conftest.py fixtures.
+
+NOTE: Unlike the main tests/conftest.py, we do NOT set default env vars here
+because future tests need to test "missing env var" scenarios (e.g.,
+test_connect_fails_without_console_url, test_connect_fails_without_api_key).
 """
 
 import logging
@@ -36,18 +40,25 @@ def set_validated_config() -> Generator[None, None, None]:
     """
     yield
     # Clean up any config that might have been created
-    try:
-        config = GalileoPythonConfig.get()
-        config.reset()
-    except Exception:
-        pass
+    # Only reset if already initialized to avoid triggering config initialization
+    # with potentially wrong values (no mocks available during teardown)
+    if GalileoPythonConfig._instance is not None:
+        GalileoPythonConfig._instance.reset()
 
 
-@pytest.fixture
+@pytest.fixture(autouse=True)
 def clean_env(monkeypatch: pytest.MonkeyPatch) -> Generator[None, None, None]:
-    """Clean environment fixture that removes all Galileo-related env vars."""
+    """Clean environment fixture that removes all Galileo-related env vars.
+
+    This is autouse=True to ensure future tests start with a clean environment,
+    especially important because the parent tests/conftest.py sets env vars at
+    import time for pytest-xdist compatibility. Future tests need to test
+    scenarios like "missing console URL" which require these vars to be absent.
+    """
     for key in _CONFIGURATION_KEYS:
         monkeypatch.delenv(key.env_var, raising=False)
+    # Also clear OPENAI_API_KEY which parent conftest sets
+    monkeypatch.delenv("OPENAI_API_KEY", raising=False)
     yield
 
 

tests/future/conftest.py

@@ -1,13 +1,21 @@
+import sys
 import uuid
 from datetime import datetime
 from typing import Any
 from unittest.mock import Mock, patch
 
 import pytest
 
-from galileo.handlers.crewai.handler import CrewAIEventListener
-from galileo.schema.handlers import NodeType
-from tests.testutils.setup import setup_mock_logstreams_client, setup_mock_projects_client, setup_mock_traces_client
+# Skip all tests in this module on Python 3.14+ (crewai doesn't support it yet)
+pytestmark = pytest.mark.skipif(sys.version_info >= (3, 14), reason="crewai does not support Python 3.14+")
+
+from galileo.handlers.crewai.handler import CrewAIEventListener  # noqa: E402
+from galileo.schema.handlers import NodeType  # noqa: E402
+from tests.testutils.setup import (  # noqa: E402
+    setup_mock_logstreams_client,
+    setup_mock_projects_client,
+    setup_mock_traces_client,
+)
 
 
 class MockEvent:

tests/test_crewai_handler.py

@@ -13,6 +13,12 @@
 from tests.testutils.streaming import EventStream
 
 
+@pytest.fixture(autouse=True)
+def ensure_openai_api_key(monkeypatch):
+    """Ensure OPENAI_API_KEY is set for OpenAI tests."""
+    monkeypatch.setenv("OPENAI_API_KEY", "sk-test")
+
+
 def openai_incorrect_api_key_error() -> bytes:
     return b"{'error': {'message': 'Incorrect API key provided: sk-galil********. You can find your API key at https://platform.openai.com/account/api-keys.', 'type': 'invalid_request_error', 'param': None, 'code': 'invalid_api_key'}}"