Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 8 updates#657

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/reservation_service/minor-and-patch-14c171cd33
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 8 updates#657
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/reservation_service/minor-and-patch-14c171cd33

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the /a2a/reservation_service directory:

Package From To
langgraph 1.2.4 1.2.7
langchain-openai 1.2.2 1.3.3
openinference-instrumentation-langchain 0.1.66 0.1.67
pydantic-settings 2.14.1 2.14.2
langchain-mcp-adapters 0.2.2 0.3.0
opentelemetry-exporter-otlp 1.42.1 1.43.0
langsmith 0.8.9 0.9.7

Updates langgraph from 1.2.4 to 1.2.7

Release notes

Sourced from langgraph's releases.

langgraph==1.2.7

Changes since 1.2.6

  • release(langgraph): 1.2.7 (#8223)
  • fix(langgraph): snapshot DeltaChannel overwrite supersteps (#8125)
  • fix(langgraph): Make Overwrite survive JSON roundtrips (#8127)
  • chore(deps): bump redis in /libs/langgraph (#7976)
  • chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/langgraph (#8176)
  • chore(deps): bump jupyterlab from 4.5.7 to 4.5.9 in /libs/langgraph (#8164)
  • fix(langgraph): emit valid UUIDs for exit-mode delta task_ids for langgraph-api (#8165)
  • chore(deps): bump bleach from 6.3.0 to 6.4.0 in /libs/langgraph (#8107)
  • chore(deps): bump cryptography from 46.0.7 to 48.0.1 in /libs/langgraph (#8106)
  • chore(deps): bump jupyter-server from 2.18.0 to 2.20.0 in /libs/langgraph (#8134)
  • chore(deps): bump tornado from 6.5.6 to 6.5.7 in /libs/langgraph (#8108)
  • chore(deps): bump pyjwt from 2.12.0 to 2.13.0 in /libs/langgraph (#8092)

langgraph==1.2.6

Changes since 1.2.5

  • release(langgraph): 1.2.6 (#8139)
  • fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • release(cli): 0.4.30 (#8101)
  • docs: standardize package README.md structure (#8064)
  • chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)

langgraph==1.2.5

Changes since 1.2.4

  • release(langgraph): 1.2.5 (#8062)
  • fix(langgraph): merge lc_versions config metadata (#8052)
  • release(cli): 0.4.28 (#8041)
  • fix: updateState bug for deltaChannel on empty thread (#8011)
  • chore: migrate Python type checking to ty (#8002)
  • chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)
  • chore(deps): bump the minor-and-patch group in /libs/langgraph with 14 updates (#7975)
Commits
  • 5931a5f release(langgraph): 1.2.7 (#8223)
  • 9a27693 fix(langgraph): snapshot DeltaChannel overwrite supersteps (#8125)
  • 1b5ca0a fix(langgraph): Make Overwrite survive JSON roundtrips (#8127)
  • d2f9719 chore(deps): bump redis in /libs/langgraph (#7976)
  • c1aad8b chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 in /libs/sdk-py (#8104)
  • d5dfeaf chore(deps): bump starlette from 1.0.1 to 1.3.1 in /libs/cli (#8105)
  • bdb323e chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/checkpoint-sqlite (...
  • 31f6955 chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/checkpoint-postgres...
  • 6b767de chore(deps): bump langsmith from 0.8.2 to 0.8.18 in /libs/checkpoint-conforma...
  • e6574a8 chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/cli (#8172)
  • Additional commits viewable in compare view

Updates langchain-core from 1.4.0 to 1.4.8

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.8

Changes since langchain-core==1.4.7

chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184) chore: bump bleach from 6.3.0 to 6.4.0 in /libs/core (#38198) release(core): 1.4.8 (#38254) refactor(langchain-classic): remove code for Python < 3.10 (#38194) perf(core): memoize BaseTool.tool_call_schema subset model and cache model_json_schema (#38073) style(core): fix style in langchain_core/_security (#38189) fix(core): preserve usage token details in v3 streaming events (#38021) fix(core): disallow_any_generics (#38156) chore(core): add mypy warn_unreachable (#38109) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118)

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

release(core): 1.4.5 (#38056) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(core): async tracer on_chat_model_start fallback in sync context (#35233) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-core==1.4.4

Changes since langchain-core==1.4.3

hotfix(core): bump lockfile(s) (#38032) release(core): 1.4.4 (#38031) fix(core): support content block tokens in callbacks (#34739) chore(core): improve typing of Runnable __or__ (#34530) chore(core): fix some any generics (#34545) fix(core): accept sequence tool error content (#38005)

... (truncated)

Commits
  • 15b0a49 chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252)
  • 612139f chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175)
  • 921e370 chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176)
  • 1aabc26 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179)
  • 8d51355 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain (#38180)
  • 0b1b7bb chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain (#38181)
  • dfd0627 chore: bump starlette from 1.0.1 to 1.3.1 in /libs/langchain (#38182)
  • 0269392 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/langchain (#38183)
  • 24d0b37 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184)
  • f368854 chore: bump bleach from 6.2.0 to 6.4.0 in /libs/text-splitters (#38195)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.2.2 to 1.3.3

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.3

Changes since langchain-openai==1.3.2

release(openai): 1.3.3 (#38375) fix(openai): drop response item ids when store is false (#38372) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) test(openai): clarify expected strict schema error (#38338) fix(openai): drop stop from Responses API payload (#38336) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/openai (#38293) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/openai (#38294) chore(model-profiles): refresh model profile data (#38274) test(openai): vcr embedding raw equivalence tests (#38199)

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-openai==1.3.0

Changes since langchain-openai==1.2.2

hotfix(openai): min core dep (#37990) release(openai): 1.3.0 (#37989) feat(openai): support apply_patch built-in tool (#37157) chore(model-profiles): refresh model profile data (#37973) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895)

Commits

Updates openinference-instrumentation-langchain from 0.1.66 to 0.1.67

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.67

0.1.67 (2026-07-01)

Features

  • langchain: Ignore GraphInterrupt Exceptions (#3316) (4f10a2a)
Commits
  • de91981 chore: release main (#3319)
  • d12a680 chore(deps): bump pipecat-ai to 1.4.0 in pipecat test-requirements (#3326)
  • 97974ee chore(deps): bump langchain test requirements to patch security advisories (#...
  • c562e68 chore(deps): pin beeai transitive test deps (aiohttp, litellm, python-dotenv)...
  • f473c4a chore(deps): bump litellm to 1.84.0 in litellm instrumentation test-requireme...
  • adbe6af chore(deps): bump pydantic-ai to 1.56.0 to resolve SSRF advisory (GHSA-2jrp-2...
  • af24f54 fix(google_adk): Preserve Final Response Content Output (#3298)
  • 4f10a2a feat(langchain): Ignore GraphInterrupt Exceptions (#3316)
  • c0319b9 chore: release main (#3315)
  • 7ce4027 feat: add support for reasoning content and signatures in attributes and type...
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates langchain-mcp-adapters from 0.2.2 to 0.3.0

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0

Commits
  • a61c783 release: 0.3.0 (#542)
  • ef4b4d6 feat: surface MCP tool execution errors as failed tool output (#540)
  • 4f614ad fix: use non-deprecated streamable HTTP client (#541)
  • d62349d build(deps): bump the minor-and-patch group with 4 updates (#534)
  • 20eb39e build(deps-dev): bump mypy from 1.20.0 to 2.1.0 in the major group (#535)
  • 62b48ab build(deps): bump starlette from 0.49.1 to 1.0.1 in /examples/servers/streama...
  • ed77d67 build(deps): bump starlette from 0.50.0 to 1.0.1 (#537)
  • 4f9f7ea build(deps): bump the uv group across 1 directory with 2 updates (#517)
  • e82aa8c build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 in the mi...
  • effc918 build(deps): bump python-multipart from 0.0.26 to 0.0.27 (#504)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.42.1 to 1.43.0

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.43.0/0.64b0 (2026-06-24)

Added

  • opentelemetry-sdk: add add_metric_reader / remove_metric_reader public APIs to register / unregister metric readers at runtime. (#4863)
  • opentelemetry-exporter-prometheus: add support for configuring metric scope labels (#5123)
  • opentelemetry-exporter-otlp-proto-grpc: Add grpc error details to the log message that's written when the grpc call fails. (#5143)
  • opentelemetry-exporter-http-transport: add 'opentelemetry-exporter-http-transport' package for HTTP exporters (#5194)
  • opentelemetry-sdk: Add composite/development samplers support to declarative file configuration (#5201)
  • opentelemetry-exporter-otlp-json-file: Add OTLP JSON File exporter implementation (#5207)
  • opentelemetry-sdk: add _resolve_component shared utility for declarative config plugin loading, reducing boilerplate in exporter factory functions (#5215)
  • opentelemetry-sdk: add pull metric reader support to declarative file configuration, including Prometheus metric reader via the prometheus_development config field (#5216)
  • opentelemetry-proto-json: update to use opentelemetry-proto v1.10.0 (#5224)
  • opentelemetry-proto: bump maximum supported protobuf version to 7.x.x (#5251)
  • opentelemetry-sdk: add ServiceInstanceIdResourceDetector for populating service.instance.id (#5259)
  • opentelemetry-sdk: declarative config loader now recursively converts parsed dicts into typed dataclass instances, including nested dataclasses, lists of dataclasses, and enum values. End-to-end YAML/JSON → SDK configuration now works via the factory functions. (#5269)
  • opentelemetry-sdk: add configure_sdk(config) to the declarative configuration API. Single entry point that takes a parsed OpenTelemetryConfiguration, builds the resource, and applies the tracer/meter/logger providers and propagator globally. Honors the top-level disabled flag. (#5270)
  • opentelemetry-sdk: the SDK configurator now honors the OTEL_CONFIG_FILE environment variable. When set, the SDK loads and applies the referenced declarative configuration file (YAML or JSON) in place of the env-var-based

... (truncated)

Commits
  • fcbbeb8 [release/v1.43.x-0.64bx] Prepare release 1.43.0/0.64b0 (#5349)
  • b40dcbc opentelemetry-exporter-http-transport: enable entry-point loading of transpor...
  • 10e8577 update to Sphinx to 8.1.3 in order to support Python 3.14 (#5278)
  • 6ac6895 docs: add declarative configuration guide and example (#5309)
  • 13ad4d5 opentelemetry-api: normalize empty environment propagation names to "_" in En...
  • 6a0ab84 opentelemetry-sdk: merge doesn't need a copy, dict already does this (#5326)
  • ac7a3df feat(config): support OTEL_CONFIG_FILE in the SDK configurator (#5271)
  • fa75422 Add support for composite samplers in declarative config (#5201)
  • 43f079f Update json and proto encoder to always accept None type, cleanup code / test...
  • 53c9d96 chore: cleanup typo found in test (#5324)
  • Additional commits viewable in compare view

Updates langsmith from 0.8.9 to 0.9.7

Release notes

Sourced from langsmith's releases.

v0.9.7

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.9.6...v0.9.7

v0.9.6

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.9.5...v0.9.6

v0.9.5

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.9.4...v0.9.5

v0.9.4

What's Changed

... (truncated)

Commits
  • b5c9d01 chore(release): bump version to 0.9.7 (#3153)
  • cf2cb5a feat(integrations): set ls_provider/ls_model_name on voice llm runs for cost ...
  • 41d0594 feat(integrations): attribute voice traces via ls_integration metadata (#3144)
  • 1f72f18 feat(integrations): add Google ADK Live voice tracing integration (#3115)
  • 93361c0 release(python): bump py version to 0.9.6 (#3149)
  • f1aeaeb fix: remove duplicate opentelemetry-exporter-gcp entries breaking uv.lock (#3...
  • 83a3024 release(js): bump to 0.7.15 (#3150)
  • c8a2a53 chore: sync langsmith_api (#3129)
  • 8a064d9 chore: bump _MIN_BACKEND_VERSION to 0.16.10rc1 (#3147)
  • fd2bd4a chore(deps-dev): bump the js-major group across 1 directory with 7 updates (#...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 7 updates in the /a2a/reservation_service directory:

| Package | From | To |
| --- | --- | --- |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.4` | `1.2.7` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.2` | `1.3.3` |
| [openinference-instrumentation-langchain](https://github.com/Arize-ai/openinference) | `0.1.66` | `0.1.67` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters) | `0.2.2` | `0.3.0` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.43.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.9` | `0.9.7` |



Updates `langgraph` from 1.2.4 to 1.2.7
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.4...1.2.7)

Updates `langchain-core` from 1.4.0 to 1.4.8
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.8)

Updates `langchain-openai` from 1.2.2 to 1.3.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.2...langchain-openai==1.3.3)

Updates `openinference-instrumentation-langchain` from 0.1.66 to 0.1.67
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-instrumentation-langchain-v0.1.66...python-openinference-instrumentation-langchain-v0.1.67)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `langchain-mcp-adapters` from 0.2.2 to 0.3.0
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases)
- [Commits](langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0)

Updates `opentelemetry-exporter-otlp` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `langsmith` from 0.8.9 to 0.9.7
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.9...v0.9.7)

---
updated-dependencies:
- dependency-name: langgraph
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-mcp-adapters
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant