[sol-aeternum]

Daemon's locked arq 0.27.0 calls asyncio.iscoroutinefunction when registering jobs and cron schedules. Python 3.14 warns that this API will be removed in Python 3.16.

This updates the arq minimum and lock to 0.28.0, which uses inspect.iscoroutinefunction and adds Python 3.14 event-loop support (upstream fix, release history). The lock was regenerated with uv lock --upgrade-package arq; arq is the only changed package. LiteLLM 1.96.0 already uses inspect.iscoroutinefunction in the logging path cited by the issue.

Closes #177.

Validation:

• Reproduced both arq warnings on 0.27.0 with Python 3.14.
• On 0.28.0, cron registration, function registration, and Daemon worker import pass with arq deprecations treated as errors.
• Worker schedule and failure-audit tests: 12 passed with arq deprecations treated as errors.
• Full local checks: lint, format, types, high-severity Bandit, pip-audit, all frontend gates (254 tests and production build), feature matrix, doc freshness, and pre-commit passed. Full backend: 2,618 passed, 8 skipped, and the same 9 live-DNS SSRF test failures previously reproduced on unchanged main a717191; no arq deprecation warnings remain.
• Existing inventory is unchanged: Bandit [triage][test-failure] Bandit misclassifies benchmark path-exclusion assertion #272, frontend encoding [triage][dependency] jsdom pulls deprecated whatwg-encoding #195 and Vitest advisory [triage][security] locked Vitest 3 stack has moderate mocker path traversal advisory #293, Starlette [triage][deprecation] Starlette TestClient warns on legacy httpx transport #192, and naive datetime [triage][deprecation] Backend tests use deprecated datetime and httpx cookie APIs #228. Their fixes/tracking remain separate.
• Host anomalies recorded locally: known DNS/proxy limitations and a LiteLLM remote cost-map timeout (bundled fallback succeeded). No new project/upstream anomaly.
• GitHub CI: all gates passed on 9eb67d42; backend 2,627 passed / 8 skipped on Python 3.14, frontend 254 passed, browser inventory 3 passed. Backend logs confirm arq 0.28.0 and no tracked arq deprecations.
• CodeQL: passed.

No application code, warning filters, or gate configuration changed. This internal dependency maintenance does not change feature-matrix status.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-09-22T11:31:25.965786Z	9eb67d4	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.