Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 9 updates#637

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-410aed6953
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 9 updates#637
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-410aed6953

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the /a2a/a2a_currency_converter directory:

Package From To
click 8.4.1 8.4.2
langchain-google-genai 4.2.4 4.2.5
langgraph 1.2.4 1.2.6
langchain-openai 1.2.2 1.3.3
pydantic-settings 2.14.1 2.14.2
opentelemetry-exporter-otlp 1.42.1 1.43.0
starlette 1.2.1 1.3.1
langsmith 0.8.9 0.9.2

Updates click from 8.4.1 to 8.4.2

Changelog

Sourced from click's changelog.

Version 8.4.2

Unreleased

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates langchain-google-genai from 4.2.4 to 4.2.5

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.2.5

Changes since libs/genai/v4.2.4

release(genai): 4.2.5 (#1831) fix(genai): merge per-request http options into chat config (#1830)

Commits

Updates langgraph from 1.2.4 to 1.2.6

Release notes

Sourced from langgraph's releases.

langgraph==1.2.6

Changes since 1.2.5

  • release(langgraph): 1.2.6 (#8139)
  • fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • release(cli): 0.4.30 (#8101)
  • docs: standardize package README.md structure (#8064)
  • chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)

langgraph==1.2.5

Changes since 1.2.4

  • release(langgraph): 1.2.5 (#8062)
  • fix(langgraph): merge lc_versions config metadata (#8052)
  • release(cli): 0.4.28 (#8041)
  • fix: updateState bug for deltaChannel on empty thread (#8011)
  • chore: migrate Python type checking to ty (#8002)
  • chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)
  • chore(deps): bump the minor-and-patch group in /libs/langgraph with 14 updates (#7975)
Commits
  • ce6c8b2 release(langgraph): 1.2.6 (#8139)
  • 9100f2c feat: add delta-channel-dump recovery script as examples to dump from Postgre...
  • 79befe6 fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • 9af2521 fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • 1a9baae release(cli): 0.4.30 (#8101)
  • 916025d feat(cli): support compatible api version ranges (#8023)
  • 9732084 ci(deps): pin GitHub Actions to commit SHAs (#8065)
  • 8558481 docs: standardize package README.md structure (#8064)
  • 4cf120d chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)
  • 7ab79f9 release(langgraph): 1.2.5 (#8062)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.2.2 to 1.3.3

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.3

Changes since langchain-openai==1.3.2

release(openai): 1.3.3 (#38375) fix(openai): drop response item ids when store is false (#38372) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) test(openai): clarify expected strict schema error (#38338) fix(openai): drop stop from Responses API payload (#38336) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/openai (#38293) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/openai (#38294) chore(model-profiles): refresh model profile data (#38274) test(openai): vcr embedding raw equivalence tests (#38199)

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-openai==1.3.0

Changes since langchain-openai==1.2.2

hotfix(openai): min core dep (#37990) release(openai): 1.3.0 (#37989) feat(openai): support apply_patch built-in tool (#37157) chore(model-profiles): refresh model profile data (#37973) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895)

Commits

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates opentelemetry-exporter-otlp from 1.42.1 to 1.43.0

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.43.0/0.64b0 (2026-06-24)

Added

  • opentelemetry-sdk: add add_metric_reader / remove_metric_reader public APIs to register / unregister metric readers at runtime. (#4863)
  • opentelemetry-exporter-prometheus: add support for configuring metric scope labels (#5123)
  • opentelemetry-exporter-otlp-proto-grpc: Add grpc error details to the log message that's written when the grpc call fails. (#5143)
  • opentelemetry-exporter-http-transport: add 'opentelemetry-exporter-http-transport' package for HTTP exporters (#5194)
  • opentelemetry-sdk: Add composite/development samplers support to declarative file configuration (#5201)
  • opentelemetry-exporter-otlp-json-file: Add OTLP JSON File exporter implementation (#5207)
  • opentelemetry-sdk: add _resolve_component shared utility for declarative config plugin loading, reducing boilerplate in exporter factory functions (#5215)
  • opentelemetry-sdk: add pull metric reader support to declarative file configuration, including Prometheus metric reader via the prometheus_development config field (#5216)
  • opentelemetry-proto-json: update to use opentelemetry-proto v1.10.0 (#5224)
  • opentelemetry-proto: bump maximum supported protobuf version to 7.x.x (#5251)
  • opentelemetry-sdk: add ServiceInstanceIdResourceDetector for populating service.instance.id (#5259)
  • opentelemetry-sdk: declarative config loader now recursively converts parsed dicts into typed dataclass instances, including nested dataclasses, lists of dataclasses, and enum values. End-to-end YAML/JSON → SDK configuration now works via the factory functions. (#5269)
  • opentelemetry-sdk: add configure_sdk(config) to the declarative configuration API. Single entry point that takes a parsed OpenTelemetryConfiguration, builds the resource, and applies the tracer/meter/logger providers and propagator globally. Honors the top-level disabled flag. (#5270)
  • opentelemetry-sdk: the SDK configurator now honors the OTEL_CONFIG_FILE environment variable. When set, the SDK loads and applies the referenced declarative configuration file (YAML or JSON) in place of the env-var-based

... (truncated)

Commits
  • fcbbeb8 [release/v1.43.x-0.64bx] Prepare release 1.43.0/0.64b0 (#5349)
  • b40dcbc opentelemetry-exporter-http-transport: enable entry-point loading of transpor...
  • 10e8577 update to Sphinx to 8.1.3 in order to support Python 3.14 (#5278)
  • 6ac6895 docs: add declarative configuration guide and example (#5309)
  • 13ad4d5 opentelemetry-api: normalize empty environment propagation names to "_" in En...
  • 6a0ab84 opentelemetry-sdk: merge doesn't need a copy, dict already does this (#5326)
  • ac7a3df feat(config): support OTEL_CONFIG_FILE in the SDK configurator (#5271)
  • fa75422 Add support for composite samplers in declarative config (#5201)
  • 43f079f Update json and proto encoder to always accept None type, cleanup code / test...
  • 53c9d96 chore: cleanup typo found in test (#5324)
  • Additional commits viewable in compare view

Updates starlette from 1.2.1 to 1.3.1

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

Full Changelog: Kludex/starlette@1.3.0...1.3.1

Version 1.3.0

What's Changed

New Contributors

Full Changelog: Kludex/starlette@1.2.1...1.3.0

Changelog

Sourced from starlette's changelog.

1.3.1 (June 12, 2026)

Fixed

  • Enforce max_fields and max_part_size in FormParser #3329.
  • Enforce FormParser limits in parser callbacks #3331.

1.3.0 (June 11, 2026)

Added

  • Add httpx2 to the full extra #3323.
  • Annotate the URLPath protocol parameter with Literal #3285.

Fixed

  • Build request.url from structured components #3326.
  • Clamp oversized suffix ranges in FileResponse #3307.
  • Catch OSError alongside MultiPartException when closing temp files #3191.
  • Avoid collapsing exception groups raised from user code #2830.
  • Use removeprefix to strip the weak ETag indicator in is_not_modified #3193.
  • Fix IndexError in URL.replace() on a URL with no authority #3317.
  • Adjust testclient typing and warnings #3322.
Commits
  • 8ebffd0 Version 1.3.1 (#3330)
  • 25b8e17 Enforce FormParser limits in parser callbacks (#3331)
  • dba1c4b Enforce max_fields and max_part_size in FormParser (#3329)
  • 45e51dc Use StarletteDeprecationWarning instead of DeprecationWarning (#3119)
  • 5f8610c Version 1.3.0 (#3327)
  • 167b585 Build request.url from structured components (#3326)
  • 3730925 Use removeprefix to strip weak ETag indicator in is_not_modified (#3193)
  • e6f7ad1 avoid collapsing exception groups from user code (#2830)
  • 115228f Annotate URLPath protocol parameter with Literal (#3285)
  • 113f193 docs: replace inline ASGI server list with link to canonical implemen… (#3204)
  • Additional commits viewable in compare view

Updates langchain-core from 1.4.0 to 1.4.8

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.8

Changes since langchain-core==1.4.7

chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184) chore: bump bleach from 6.3.0 to 6.4.0 in /libs/core (#38198) release(core): 1.4.8 (#38254) refactor(langchain-classic): remove code for Python < 3.10 (#38194) perf(core): memoize BaseTool.tool_call_schema subset model and cache model_json_schema (#38073) style(core): fix style in langchain_core/_security (#38189) fix(core): preserve usage token details in v3 streaming events (#38021) fix(core): disallow_any_generics (#38156) chore(core): add mypy warn_unreachable (#38109) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118)

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

release(core): 1.4.5 (#38056) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(core): async tracer on_chat_model_start fallback in sync context (#35233) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-core==1.4.4

Changes since langchain-core==1.4.3

hotfix(core): bump lockfile(s) (#38032) release(core): 1.4.4 (#38031) fix(core): support content block tokens in callbacks (#34739) chore(core): improve typing of Runnable __or__ (#34530) chore(core): fix some any generics (#34545) fix(core): accept sequence tool error content (#38005)

... (truncated)

Commits
  • 15b0a49 chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252)
  • 612139f chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175)
  • 921e370 chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176)
  • 1aabc26 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179)
  • 8d51355 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain (#38180)
  • 0b1b7bb chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain (#38181)
  • dfd0627 chore: bump starlette from 1.0.1 to 1.3.1 in /libs/langchain (#38182)
  • 0269392 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/langchain (#38183)
  • 24d0b37 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184)
  • f368854 chore: bump bleach from 6.2.0 to 6.4.0 in /libs/text-splitters (#38195)
  • Additional commits viewable in compare view

Updates langsmith from 0.8.9 to 0.9.2

Release notes

Sourced from langsmith's releases.

v0.9.2

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.9.1...v0.9.2

v0.9.1

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.9.0...v0.9.1

v0.9.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.8.18...v0.9.0

v0.8.18

What's Changed

... (truncated)

Commits
  • 8a76faf release(python): bump py version to 0.9.2 (#3088)
  • 294d380 feat(client): expose v2 OpenAPI runs resource on Python and JS clients (#3084)
  • 0a79541 chore(js): bump AI SDK 7 to beta (#3085)
  • 275003f chore: sync langsmith_api (#3083)
  • 61e3478 chore: sync langsmith_api (#3082)
  • 4d79b2b chore: bump _MIN_BACKEND_VERSION to 0.16.6rc1 (#3076)
  • db296de release(js): bump js sdk version to 0.7.11 (#3079)
  • c269243 release(python): bump py version to 0.9.1 (#3078)
  • 435b7fc fix(python): declare missing runtime deps for _openapi_client (#3070)
  • b0511e9 feat: updating create feedback to add opt out for trace retention (#3047)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 8 updates in the /a2a/a2a_currency_converter directory:

| Package | From | To |
| --- | --- | --- |
| [click](https://github.com/pallets/click) | `8.4.1` | `8.4.2` |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.2.4` | `4.2.5` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.4` | `1.2.6` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.2` | `1.3.3` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.43.0` |
| [starlette](https://github.com/Kludex/starlette) | `1.2.1` | `1.3.1` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.9` | `0.9.2` |



Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `langchain-google-genai` from 4.2.4 to 4.2.5
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.2.4...libs/genai/v4.2.5)

Updates `langgraph` from 1.2.4 to 1.2.6
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.4...1.2.6)

Updates `langchain-openai` from 1.2.2 to 1.3.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.2...langchain-openai==1.3.3)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `opentelemetry-exporter-otlp` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `starlette` from 1.2.1 to 1.3.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.2.1...1.3.1)

Updates `langchain-core` from 1.4.0 to 1.4.8
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.8)

Updates `langsmith` from 0.8.9 to 0.9.2
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.9...v0.9.2)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-google-genai
  dependency-version: 4.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant