fix(core): match AttachmentsProtocol.upload_async to the concrete overloads

[radu-mocanu]

Summary

• redefine AttachmentsProtocol.upload_async with @overloads (content XOR source_path) so the concrete AttachmentsService is a structural subtype, not just a runtime_checkable one
• add a static + runtime conformance test asserting AttachmentsService satisfies AttachmentsProtocol

Why

the protocol shipped in #1744 declared a single over-broad upload_async (both content and source_path optional), which the overloaded concrete service does not structurally satisfy. it surfaced only when a consumer passes the real AttachmentsService into the runtime's WorkspaceHydrator (mypy error), since the protocol's own tests use a conforming fake. the new conformance test guards against this regressing.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR fixes a type-contract mismatch between uipath-core’s AttachmentsProtocol and the concrete uipath-platform AttachmentsService by redefining upload_async using overloads that match the service’s “content XOR source_path” API. It also adds a conformance test to ensure this structural subtyping relationship (and the runtime-checkable contract) doesn’t regress.

Changes:

• Redefine AttachmentsProtocol.upload_async with two @overloads (content vs. source_path) aligned to AttachmentsService.
• Add a static + runtime conformance test asserting AttachmentsService satisfies AttachmentsProtocol.
• Bump uipath-core version to 0.5.23 and update uv.lock files accordingly.

Reviewed changes

Copilot reviewed 3 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
packages/uipath-core/src/uipath/core/workspace/protocols.py	Adds overloads to AttachmentsProtocol.upload_async to match the concrete service signatures for structural subtyping.
packages/uipath-platform/tests/services/test_attachments_service.py	Adds a test that forces mypy to validate structural conformance and also checks the runtime-checkable protocol via isinstance.
packages/uipath-core/pyproject.toml	Bumps uipath-core version to 0.5.23.
packages/uipath-core/uv.lock	Updates lockfile to reflect uipath-core==0.5.23.
packages/uipath-platform/uv.lock	Updates lockfile to reflect uipath-core==0.5.23 in the platform package environment.
packages/uipath/uv.lock	Updates lockfile to reflect uipath-core==0.5.23 in the aggregate package environment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.