[MAINT]: Pin PyRIT + tool

pyproject.toml

@@ -32,10 +32,9 @@ dependencies = [
     "jsonschema>=4.26.0",
     "msgraph-sdk>=1.55.0",
     "playwright>=1.58.0",
-    "pyrit==0.12.1",
+    "pyrit==0.13.0",
     "pytest>=9.0.3",
     "pytest-asyncio>=1.3.0",
-    "pytest-xdist[psutil]>=3.8.0",
     "pyyaml>=6.0.3",
 ]
 
@@ -117,4 +116,4 @@ known-first-party = ["rampart"]
 convention = "google"
 
 [tool.uv.sources]
-pyrit = { git = "https://github.com/microsoft/PyRIT", rev = "3873c7762c42febcf844c468e1eb4adee6cf2e30" } # v0.12.1
+pyrit = { git = "https://github.com/microsoft/PyRIT", rev = "6dc8b94139757390286bbce7d53c1f7e58e66e29" } # v0.13.0

scripts/bump_pyrit_version.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT license.
+#
+# Bump the pinned PyRIT dependency to a given version tag.
+# Usage: ./scripts/bump_pyrit_version.sh v0.13.0
+
+set -euo pipefail
+
+TAG="${1:?Usage: $0 <tag>  (e.g. v0.13.0)}"
+VERSION="${TAG#v}"  # strip leading v if present
+REPO="https://github.com/microsoft/PyRIT"
+
+# Resolve tag -> commit SHA
+SHA=$(git ls-remote "$REPO" "refs/tags/${TAG}" "refs/tags/${TAG}^{}" | tail -1 | cut -f1)
+[[ ${#SHA} -eq 40 ]] || { echo "error: tag ${TAG} not found in ${REPO}" >&2; exit 1; }
+
+uv add "pyrit==${VERSION}" --rev "$SHA"
+
+# Restore the version comment that uv strips
+sed -i "s|rev = \"${SHA}\" }|rev = \"${SHA}\" } # ${TAG}|" pyproject.toml
+
+echo "Bumped pyrit -> ${TAG} (${SHA:0:12}…)"