Skip to content

build(deps): bump the uv group across 1 directory with 15 updates#6

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/backend/uv-c66a7a1c8c
Open

build(deps): bump the uv group across 1 directory with 15 updates#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/backend/uv-c66a7a1c8c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown

Bumps the uv group with 8 updates in the /backend directory:

Package From To
python-dotenv 1.1.1 1.2.2
langchain 0.3.27 1.3.9
idna 3.10 3.15
langsmith 0.4.31 0.8.18
python-multipart 0.0.20 0.0.31
requests 2.32.5 2.33.0
starlette 0.48.0 1.3.1
urllib3 2.5.0 2.7.0

Updates python-dotenv from 1.1.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

v1.2.1

What's Changed

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits

Updates langchain from 0.3.27 to 1.3.9

Release notes

Sourced from langchain's releases.

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105) release(langchain): 1.3.9 (#38104) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106)

langchain==1.3.8

Changes since langchain==1.3.7

release(langchain): 1.3.8 (#38096) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) chore(langchain): add overloads to create_agent (#34309) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): support async middleware decorator typing (#34584) fix(langchain): tighten structured output model fallbacks (#38042) release(anthropic): 1.4.5 (#38036) hotfix(core): bump lockfile(s) (#38032) refactor(langchain): refactor test_create_agent_tool_validation (#34443)

langchain==1.3.7

Changes since langchain==1.3.6

release(langchain): 1.3.7 (#38024) style(langchain): add ruff rules ARG (#34435) feat(langchain): add ProviderToolSearchMiddleware (#37969) chore(langchain): activate mypy warn_return_any (#34249) test(langchain): mark legacy trigger view for 2.0 removal (#38002)

langchain==1.3.6

Changes since langchain==1.3.5

release(langchain): 1.3.6 (#38001) fix(langchain): preserve summarization trigger compatibility (#38000)

langchain==1.3.5

Changes since langchain==1.3.4

release(langchain): 1.3.5 (#37998) feat(langchain): port AND-capable trigger conditions to SummarizationMiddleware (#34576) hotfix(openai): min core dep (#37990) feat(openai): support apply_patch built-in tool (#37157) chore: bump pyarrow from 21.0.0 to 23.0.1 in /libs/langchain_v1 (#37930) chore: bump dependencies (#37892) chore: bump aiohttp from 3.13.4 to 3.14.0 in /libs/langchain_v1 (#37888)

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

... (truncated)

Commits
  • 3bfb6a3 release(langchain): 1.3.9 (#38104)
  • dcaf779 fix(langchain,anthropic): confine file-search results and tighten anthropic `...
  • 0392b6b fix(core): fix Pydantic v1 support in tools/runnable (#33698)
  • f6d63bc release(langchain): 1.3.8 (#38096)
  • 5d20596 style(core,langchain,langchain-classic,partners): replace double backticks in...
  • fb55c66 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/huggingface (#38...
  • 51daae5 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/chroma (#38092)
  • 70e9579 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/fireworks (#38093)
  • 6c0e9af chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/xai (#38094)
  • 222dc84 ci(infra): clarify early PR auto-close guidance (#38090)
  • Additional commits viewable in compare view

Updates langgraph from 0.6.8 to 1.2.9

Release notes

Sourced from langgraph's releases.

langgraph==1.2.9

Changes since 1.2.8

  • release(langgraph): 1.2.9 (#8316)
  • fix: updateState metadata/counters for delta channel (#8315)

langgraph==1.2.8

Changes since 1.2.7

  • release(langgraph): 1.2.8 (#8292)
  • fix: delta channel bug with updateState on fresh thread will force snapshot instead of stub checkpoint (#8290)
  • chore(deps): bump the minor-and-patch group in /libs/langgraph with 8 updates (#8255)
  • chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the major group (#8256)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#8252)

langgraph==1.2.7

Changes since 1.2.6

  • release(langgraph): 1.2.7 (#8223)
  • fix(langgraph): snapshot DeltaChannel overwrite supersteps (#8125)
  • fix(langgraph): Make Overwrite survive JSON roundtrips (#8127)
  • chore(deps): bump redis in /libs/langgraph (#7976)
  • chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/langgraph (#8176)
  • chore(deps): bump jupyterlab from 4.5.7 to 4.5.9 in /libs/langgraph (#8164)
  • fix(langgraph): emit valid UUIDs for exit-mode delta task_ids for langgraph-api (#8165)
  • chore(deps): bump bleach from 6.3.0 to 6.4.0 in /libs/langgraph (#8107)
  • chore(deps): bump cryptography from 46.0.7 to 48.0.1 in /libs/langgraph (#8106)
  • chore(deps): bump jupyter-server from 2.18.0 to 2.20.0 in /libs/langgraph (#8134)
  • chore(deps): bump tornado from 6.5.6 to 6.5.7 in /libs/langgraph (#8108)
  • chore(deps): bump pyjwt from 2.12.0 to 2.13.0 in /libs/langgraph (#8092)

langgraph==1.2.6

Changes since 1.2.5

  • release(langgraph): 1.2.6 (#8139)
  • fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • release(cli): 0.4.30 (#8101)
  • docs: standardize package README.md structure (#8064)
  • chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)

langgraph==1.2.5

Changes since 1.2.4

  • release(langgraph): 1.2.5 (#8062)
  • fix(langgraph): merge lc_versions config metadata (#8052)
  • release(cli): 0.4.28 (#8041)
  • fix: updateState bug for deltaChannel on empty thread (#8011)
  • chore: migrate Python type checking to ty (#8002)
  • chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)

... (truncated)

Commits
  • 95af6a0 release(langgraph): 1.2.9 (#8316)
  • 7d0b33c fix: updateState metadata/counters for delta channel (#8315)
  • 23652c5 release(langgraph): 1.2.8 (#8292)
  • b45d96b fix: delta channel bug with updateState on fresh thread will force snapshot i...
  • be999ad chore(deps): bump the minor-and-patch group in /libs/cli with 5 updates (#8251)
  • 4df294f chore(deps): bump the minor-and-patch group in /libs/langgraph with 8 updates...
  • 84e065a chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the ma...
  • 64a3e68 chore(deps): bump the minor-and-patch group in /libs/cli/js-examples with 6 u...
  • 7989e59 chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#...
  • 2390d6f chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the minor-and-p...
  • Additional commits viewable in compare view

Updates langchain-openai from 0.3.33 to 1.3.5

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762) chore(model-profiles): refresh model profile data (#38774)

langchain-openai==1.3.4

Changes since langchain-openai==1.3.3

release(openai): 1.3.4 (#38731) fix(openai): suppress Pydantic serializer warning on structured output parsed field (#37727) test(openai): skip Codex VCR tests before cassette setup (#38690) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai (#38476) fix(core): use asyncio.get_running_loop() in async contexts (#38157) test(openai): clarify async API key sync failure trace (#38379)

langchain-openai==1.3.3

Changes since langchain-openai==1.3.2

release(openai): 1.3.3 (#38375) fix(openai): drop response item ids when store is false (#38372) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) test(openai): clarify expected strict schema error (#38338) fix(openai): drop stop from Responses API payload (#38336) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/openai (#38293) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/openai (#38294) chore(model-profiles): refresh model profile data (#38274) test(openai): vcr embedding raw equivalence tests (#38199)

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707)

... (truncated)

Commits

Updates idna from 3.10 to 3.15

Changelog

Sourced from idna's changelog.

3.15 (2026-05-12)

  • Enforce DNS-length cap on individual labels early in check_label, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage.
  • Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared _unicode_dots_re from idna.core in the codec module.
  • Use raise ... from err for proper exception chaining and switch internal string formatting to f-strings.
  • Allow flit_core 4.x in the build backend.
  • Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14.
  • Add Dependabot configuration for GitHub Actions.
  • Convert README and HISTORY from reStructuredText to Markdown.
  • Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release.

3.14 (2026-05-10)

  • Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

3.13 (2026-04-22)

  • Correct classification error for codepoint U+A7F1

3.12 (2026-04-21)

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

3.11 (2025-10-12)

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.

... (truncated)

Commits
  • af30a09 Release 3.15
  • 30314d4 Pre-release 3.15rc0
  • 05d4b21 Merge pull request #237 from kjd/convert-docs-to-markdown
  • 2987fdb Convert README and HISTORY from reStructuredText to Markdown
  • 59fa800 Merge pull request #236 from kjd/dependabot/github_actions/actions-f3e34333ea
  • def6983 Merge branch 'master' into dependabot/github_actions/actions-f3e34333ea
  • bbd8004 Merge pull request #234 from StanFromIreland/patch-1
  • edd07c0 Bump github/codeql-action from 3.35.2 to 4.35.2 in the actions group
  • 5557db0 Merge branch 'master' into patch-1
  • f11746c Merge pull request #235 from StanFromIreland/patch-2
  • Additional commits viewable in compare view

Updates langchain-core from 0.3.76 to 1.4.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

langchain-core==1.4.8

Changes since langchain-core==1.4.7

chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184) chore: bump bleach from 6.3.0 to 6.4.0 in /libs/core (#38198) release(core): 1.4.8 (#38254) refactor(langchain-classic): remove code for Python < 3.10 (#38194) perf(core): memoize BaseTool.tool_call_schema subset model and cache model_json_schema (#38073) style(core): fix style in langchain_core/_security (#38189) fix(core): preserve usage token details in v3 streaming events (#38021) fix(core): disallow_any_generics (#38156) chore(core): add mypy warn_unreachable (#38109) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118)

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

... (truncated)

Commits
  • 1c3a418 release(core): 1.4.9 (#38728)
  • 1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
  • a6f0369 chore(qdrant): bump fastembed to latest (#38726)
  • fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
  • 874bada chore(model-profiles): refresh model profile data (#38712)
  • 6e51a7e chore(model-profiles): refresh model profile data (#38699)
  • 2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
  • b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
  • 83386b5 chore(model-profiles): refresh model profile data (#38689)
  • 701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
  • Additional commits viewable in compare view

Updates langgraph-checkpoint from 2.1.1 to 4.1.1

Release notes

Sourced from langgraph-checkpoint's releases.

langgraph-checkpoint==4.1.1

Changes since checkpoint==4.1.0

  • release(checkpoint): 4.1.1 (#7890)
  • fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/checkpoint (#7784)

langgraph-checkpoint==4.1.0

Changes since checkpoint==4.1.0a4

  • release: bump alpha packages to official versions (#7775)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/checkpoint (#7762)
  • chore(deps): bump langchain-core from 1.3.2 to 1.3.3 in /libs/checkpoint (#7752)
  • feat(checkpoint): force delta channel snapshot after max supersteps since last snapshot (#7746)
  • fix(checkpoint): specify allowed_objects in Reviver (#7743)
  • chore: remove keepset helper (#7745)
  • chore(langgraph): add guide/conformance for delta channel checkpointer (#7736)
  • docs(checkpoint): mark DeltaChannel and delta-history APIs as beta (#7732)
  • chore(deps): bump the minor-and-patch group across 1 directory with 3 updates (#7670)
  • chore: "chore: minor clean up around checkpoint and delta channel" (#7706)
  • chore: minor clean up around checkpoint and delta channel (#7705)

langgraph-checkpoint==4.1.0a4

Changes since checkpoint==4.1.0a3

  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • feat: public get_writes_history saver API + delta cadence rework (#7699)

langgraph-checkpoint==4.1.0a3

Changes since checkpoint==4.1.0a2

  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • chore(langgraph): use two phase read to avoid unnecessary data transport (#7660)
  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)
  • chore: update x links to langchain_oss (#7645)
  • release(checkpoint): 4.0.3 (#7625)
  • fix(checkpoint): revive lc=2 JSON blobs for safe types without allowlist (#7582)

langgraph-checkpoint==4.1.0a2

Changes since checkpoint==4.1.0a1

langgraph-checkpoint==4.1.0a1

Changes since checkpoint==4.0.3

  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)

... (truncated)

Commits
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • bf7fec0 release(langgraph): 1.2.1 (#7883)
  • 8215a9d feat(langgraph): add before_builtins opt-in for stream transformers (#7882)
  • Additional commits viewable in compare view

Updates langgraph-sdk from 0.2.9 to 0.4.2

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.4.2

Changes since sdk==0.4.1

  • release(sdk-py): 0.4.2 (#7955)
  • fix(sdk-py): percent-encode thread_id in v3 stream transport default paths (#7954)

langgraph-sdk==0.4.1

Changes since sdk==0.4.0

  • release(sdk-py): 0.4.1 (#7944)
  • feat(sdk-py): extract stream decoders and add interleave_projections (#7935)
  • feat(langgraph): add v3 streaming support to RemoteGraph (#7927)
  • fix(sdk-py): make tools_agent fake model stateless (#7930)

langgraph-sdk==0.4.0

Changes since sdk==0.3.15

  • release(sdk-py): 0.4.0 (#7923)
  • feat(sdk-py): add thread stream helpers (#7833)
  • feat(sdk-py): wire websocket stream selection (#7832)
  • feat(sdk-py): add websocket stream transports (#7830)
  • feat(sdk-py): harden streaming reconnects (#7829)
  • feat(sdk-py): add sync scoped subgraphs (#7828)
  • feat(sdk-py): add sync messages and tool calls (#7827)
  • feat(sdk-py): add sync thread stream core (#7826)
  • feat(sdk-py): add async stream reconnect support (#7825)
  • feat(sdk-py): add scoped subgraph handles (#7824)
  • feat(sdk-py): add messages and tool call projections (#7823)
  • feat(sdk-py): add output, values, and controller extraction (#7822)
  • feat(sdk-py): wire lifecycle state and output prerequisites (#7821)
  • feat(sdk-py): add shared stream subscriptions (#7820)
  • feat(sdk-py): add async thread stream skeleton (#7819)
  • feat(sdk-py): add v3 streaming primitives and SSE transport (#7818)
  • chore(langgraph): bump version to 1.2.2 (#7914)

langgraph-sdk==0.3.15

Changes since sdk==0.3.14

  • release(checkpoint): 4.1.1 (#7890)
  • release(sdk-py): 0.3.15 (#7891)
  • fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • release(langgraph): 1.2.1 (#7883)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/sdk-py (#7863)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/sdk-py (#7764)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/sdk-py (#7789)
  • release: bump alpha packages to official versions (#7775)
  • chore(langgraph): bump langchain-core to 1.4.0 (#7767)
  • feat(sdk-py): support metadata filter for crons search/count (#7737)
  • chore(deps): bump ty from 0.0.23 to 0.0.33 in /libs/sdk-py (#7666)

... (truncated)

Commits
  • 4aeaffe 0.4.2 (#4570)
  • f1bfd60 update
  • 998be75 langgraph: decouple name from assistant ID in RemoteGraph
  • 365dd5f sdk-py: Prefix private functions in sdk with _
  • 0e61cc2 prebuilt: remove state_modifier (#4439)
  • a0a302d prebuilt: switch to executing parallel tool calls via Send by default (#4438)
  • 4e05db8 Release checkpoint-sqlite (#4509)
  • d6e20e6 Add missing 'running' RunStatus (#4508)
  • fcd06ac Add support for specifying a custom base image in docker commands (#4500)
  • 94994a8 meaningless commit to get vercel going sigh
  • Additional commits viewable in compare view

Updates langsmith from 0.4.31 to 0.8.18

Release notes

Sourced from langsmith's releases.

v0.8.18

What's Changed

Bumps the uv group with 8 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [langchain](https://github.com/langchain-ai/langchain) | `0.3.27` | `1.3.9` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.15` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.4.31` | `0.8.18` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.20` | `0.0.31` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.0` |
| [starlette](https://github.com/Kludex/starlette) | `0.48.0` | `1.3.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.5.0` | `2.7.0` |



Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.2)

Updates `langchain` from 0.3.27 to 1.3.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.27...langchain==1.3.9)

Updates `langgraph` from 0.6.8 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.6.8...1.2.9)

Updates `langchain-openai` from 0.3.33 to 1.3.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==0.3.33...langchain-openai==1.3.5)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.10...v3.15)

Updates `langchain-core` from 0.3.76 to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.76...langchain-core==1.4.9)

Updates `langgraph-checkpoint` from 2.1.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==2.1.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.2.9 to 0.4.2
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.2.9...0.4.2)

Updates `langsmith` from 0.4.31 to 0.8.18
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.4.31...v0.8.18)

Updates `mcp` from 1.15.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@1.15.0...v1.28.1)

Updates `orjson` from 3.11.3 to 3.11.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.3...3.11.9)

Updates `python-multipart` from 0.0.20 to 0.0.31
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.20...0.0.31)

Updates `requests` from 2.32.5 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.0)

Updates `starlette` from 0.48.0 to 1.3.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.48.0...1.3.1)

Updates `urllib3` from 2.5.0 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.5.0...2.7.0)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: langchain
  dependency-version: 1.3.9
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: langgraph
  dependency-version: 1.2.9
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: langchain-openai
  dependency-version: 1.3.5
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langchain-core
  dependency-version: 1.4.9
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.4.2
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langsmith
  dependency-version: 0.8.18
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: indirect
  dependency-group: uv
- dependency-name: python-multipart
  dependency-version: 0.0.31
  dependency-type: indirect
  dependency-group: uv
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: starlette
  dependency-version: 1.3.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants