Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 13 updates - #1007

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-07e94339fe
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-07e94339fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 13 updates in the /a2a/a2a_currency_converter directory:

Package From To
langchain-google-genai 4.4.0 4.4.2
langgraph 1.2.12 1.2.16
pydantic 2.13.5 2.14.1
python-dotenv 1.2.3 1.2.4
langchain-openai 1.6.6 1.7.2
pydantic-settings 2.15.0 2.16.0
openinference-instrumentation-langchain 0.1.76 0.1.79
opentelemetry-exporter-otlp 1.45.0 1.45.1
starlette 1.7.0 1.9.0
langgraph-checkpoint 4.2.0 4.3.0
langchain-core 1.6.6 1.7.0
orjson 3.12.0 3.13.0
langsmith 0.14.1 0.14.12

Updates langchain-google-genai from 4.4.0 to 4.4.2

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.4.2

Changes since libs/genai/v4.4.1

release(genai): 4.2.2 (#2058) fix(genai,vertexai): normalize model names and fix Gemini 3.5 cached content paths and streaming usage (#2044) chore(model-profiles): refresh model profile data (#1984)

langchain-google-genai==4.4.1

Changes since libs/genai/v4.4.0

release(genai): 4.4.1 (#2050) fix(genai): omit Bedrock cache points from Gemini prompts (#2049) fix(genai): treat Gemini 4+ models as Gemini 3 or later (#2047) chore: bump urllib3 from 2.7.0 to 2.8.0 in /libs/genai (#2032) chore: bump the minor-and-patch group in /libs/genai with 4 updates (#2034) chore: bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/genai (#2035) chore: bump types-protobuf from 7.35.1.20260827 to 7.35.1.20260906 in /libs/genai (#2036) chore: bump types-google-cloud-ndb from 2.4.0.20260724 to 2.4.0.20260909 in /libs/genai (#2037) chore: bump anyio from 4.12.1 to 4.14.2 in /libs/genai (#2020) chore: bump the minor-and-patch group across 1 directory with 2 updates (#1990) chore: bump types-protobuf from 7.35.1.20260824 to 7.35.1.20260827 in /libs/genai (#1986)

Commits
  • 69361c5 release(genai): 4.2.2 (#2058)
  • ee823bf fix(genai,vertexai): normalize model names and fix Gemini 3.5 cached content ...
  • f24b735 chore(model-profiles): refresh model profile data (#1984)
  • 63eba68 chore: bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/community (#2052)
  • 3d3b22f chore: bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/vertexai (#2054)
  • 4e206c2 chore: bump fsspec from 2025.12.0 to 2026.6.0 in /libs/vertexai (#2051)
  • 3df872b release(genai): 4.4.1 (#2050)
  • 933f69b fix(genai): omit Bedrock cache points from Gemini prompts (#2049)
  • 24ed398 fix(genai): treat Gemini 4+ models as Gemini 3 or later (#2047)
  • bd712d4 release(community): 5.1.1 (#2046)
  • Additional commits viewable in compare view

Updates langgraph from 1.2.12 to 1.2.16

Release notes

Sourced from langgraph's releases.

langgraph==1.2.16

Changes since 1.2.15

  • release(langgraph): 1.2.16 (#9334)
  • fix(langgraph): let other tasks finish when a resume value is invalid (#9265)
  • fix(langgraph): apply a resumed Command's update once (#9322)
  • fix(langgraph): stop a subgraph from rerunning its finished tasks on resume (#9315)
  • fix(langgraph): save a resumed exit run's pending writes once (#9314)
  • release(prebuilt): 1.1.1 (#9316)
  • release(checkpoint-postgres): 3.2.0 (#9313)
  • feat(checkpoint-postgres): add prune to PostgresSaver and AsyncPostgresSaver (#9290)
  • fix(langgraph): keep a DeltaChannel's value when its field changes to a plain reducer (#9302)
  • release(checkpoint-postgres): 3.1.3 (#9287)
  • release(checkpoint-sqlite): 3.1.2 (#9288)

langgraph==1.2.15

Changes since 1.2.14

  • release(langgraph): 1.2.15 (#9283)
  • fix(langgraph): give every message written to a messages DeltaChannel an id (#9275)
  • fix(langgraph): save a cached node's writes like a node that ran (#9259)
  • fix(langgraph): stop at an interrupt_before breakpoint when a drain is requested before it (#9281)
  • fix(langgraph): keep an exit run from a checkpoint the thread moved past out of its newer branch (#9269)
  • fix(langgraph): store an update_state input's writes on the checkpoint it updates (#9258)
  • fix(langgraph): read a run's DeltaChannel input back only on its own checkpoints (#9260)
  • fix(langgraph): snapshot a DeltaChannel that an update_state Overwrite resets (#9263)
  • fix(langgraph): keep a fork's DeltaChannel snapshot from starting nodes that never ran (#9264)
  • fix(langgraph): don't save a checkpoint past a failed DeltaChannel write (#9235)
  • fix(langgraph,prebuilt): stop ToolNode from swallowing invalid resume values (#9232)
  • fix(langgraph): never store exit-mode delta writes under the null task id (#9229)
  • fix(langgraph): stop astream_events dropping control/interrupts on v1/v2 (#9219)
  • chore(deps): bump notebook from 7.5.7 to 7.6.3 in /libs/langgraph (#9206)
  • fix(langgraph): give each bulk_update_state update its own task id (#9128)
  • fix(langgraph): replay a resumed exit-mode run's delta writes in live order (#9114)
  • fix: order delta channel replay by task path (#8544)

langgraph==1.2.14

Changes since 1.2.13

  • release(langgraph): 1.2.14 (#9215)

langgraph==1.2.13

Changes since 1.2.12

  • fix(langgraph): fork before replaying an update checkpoint the thread moved past (#9170)
  • fix(langgraph): keep an update_state on an older checkpoint out of its other branches (#9165)
  • fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • release(langgraph): 1.2.13 (#9205)
  • fix(langgraph): don't walk history for a DeltaChannel that was never written (#9141)
  • fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8548)

... (truncated)

Commits
  • 41c9c22 release(langgraph): 1.2.16 (#9334)
  • 5101865 release(sdk-py): 0.4.8 (#9335)
  • 9e6fc45 fix(sdk-py): surface thread stream errors and stop retrying a rejected stream...
  • b0cabd9 fix(langgraph): let other tasks finish when a resume value is invalid (#9265)
  • 4ac46ba release(cli): 0.4.36 (#9330)
  • e14f427 fix(langgraph): apply a resumed Command's update once (#9322)
  • 4e2dfe4 fix(cli): accept serverless and dedicated deployment aliases (#9325)
  • e77a5cb fix(cli): push through the active Docker context in langgraph deploy (#9321)
  • b0482d0 fix(langgraph): stop a subgraph from rerunning its finished tasks on resume (...
  • 889a5ff fix(langgraph): save a resumed exit run's pending writes once (#9314)
  • Additional commits viewable in compare view

Updates pydantic from 2.13.5 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • See full diff in compare view

Updates langchain-openai from 1.6.6 to 1.7.2

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.2

Changes since langchain-openai==1.7.1

release(openai): 1.7.2 (#41245) fix(openai): keep Responses stream items on one block when output_index drifts (#41121)

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

langchain-openai==1.6.7

Changes since langchain-openai==1.6.6

release(openai): 1.6.7 (#40933) chore(model-profiles): refresh model profile data (#40924) test(openai): drop retired completions live tests (#40910) chore(model-profiles): refresh model profile data (#40869) feat(openai): discover Azure workload identity (#40532)

Commits

Updates pydantic-settings from 2.15.0 to 2.16.0

Release notes

Sourced from pydantic-settings's releases.

v2.16.0

Highlights

Breaking changes and behavior changes

  • Python 3.10 is no longer supported (#1003). pydantic-settings now requires Python 3.11+, since 3.10 reaches end of life this month. The tomli fallback is gone in favor of stdlib tomllib; the toml extra is kept as an empty extra so pip install pydantic-settings[toml] keeps working.
  • python-dotenv>=1.2.2 is now required (#971) to pick up the fix for CVE-2026-28684.
  • Aliases are ignored in every source when validate_by_alias=False (#1033). Env vars, secrets, CLI flags and defaults now use only field names, matching pydantic. An env var named after the alias is now ignored instead of raising extra_forbidden, and the CLI exposes --apple rather than --pomo.
  • validation_alias takes precedence over alias (#1038). When the two differ, values from JSON/YAML/TOML files and the CLI were silently ignored; they now load. CLI help lists the validation_alias flag first, and CliApp.serialize emits it.
  • CLI case-insensitivity only lowercases registered options (#1036). With case_sensitive=False, args after -- and those captured by CliUnknownArgs keep their case (-Xmx4G no longer becomes -xmx4g). Unrecognized options are now reported as typed (--NOPE instead of --nope).
  • JSON and YAML config files are read as UTF-8 by default (#955) instead of the locale encoding, completing the secrets-file fix from 2.15.0. json_file_encoding/yaml_file_encoding still override it.
  • Discriminated union defaults are partially updated again (#997). This reverts the 2.15.0 regression with nested_model_default_partial_update=True: the default is only dropped when the incoming value selects a different union member.

New features

  • Python 3.15 and pydantic 2.14 support (#1026, #1029, #1022). pydantic 2.14 broke CliApp.run and validate_by_alias=False handling; both are fixed.
  • Cached settings instances via Settings.settings_cached() and Settings.settings_clear_cache() (#952). These give you a process-local singleton per settings class without hand-rolling lru_cache wrappers. Calling the class directly still builds a fresh instance.
  • AWS Systems Manager Parameter Store source — AWSSystemsManagerSettingsSource (#941). It recursively reads every parameter under an ssm_path, with / mapping onto nested models. Install it with the new aws-systems-manager extra.
  • env_file_depth (#940) lets a relative env_file be found in parent directories, mirroring pyproject_toml_depth. This is useful when scripts run from a subdirectory of a monorepo. It defaults to 0, which keeps the current behavior.
  • CliVariadicArg for named variadic options (#949, #958). It accepts --param a b c in addition to repeated --param a --param b. Required fields need at least one value.

Bug fixes

CLI

  • CliApp.serialize output now round-trips through CliApp.run for enums, tuples, dates and Decimals (#988), explicit None values (#981), empty containers (#1008), CliVariadicArg values (#976) and populated CliUnknownArgs fields, which previously raised IndexError (#992).
  • Empty JSON arrays (--items []) now give an empty list instead of [''] (#994).
  • Tuples, frozenset, MutableSequence and other collection subtypes are now treated as repeatable/variadic options (#972), and so are named collection type aliases such as TypeAliasType('Addrs', list[IPvAnyAddress]) (#1032).
  • cli_exit_on_error=False is now honored in CliSubCommand parsers, which raise SettingsError instead of exiting (#977).
  • CliSubCommand aliases keep their case with case_sensitive=False (#989).
  • Each CliUnknownArgs field now receives only its own subcommand's leftover args (#1004).
  • CliApp.format_help no longer crashes when cli_prefix is set in model_config (#945).

Type aliases and parsing

  • Named union type aliases (TypeAliasType('V', list[int] | str)) now decode like their inline equivalents in env and dotenv sources, including under Optional, Annotated and custom validation aliases (#1006, #1030, #1041).
  • Resolving a named Annotated type alias no longer mutates shared FieldInfo metadata, which made validators run twice on subclasses or after model_rebuild() (#979).
  • A bare single-segment AliasPath('SOME_KEY') no longer tries to JSON-decode plain string values (#980).
  • collections.abc.Set/MutableSet/typing.AbstractSet fields now JSON-decode env values (#973).
  • A bare typing.Dict field with env_nested_delimiter no longer raises IndexError, which was a regression in 2.13.0 (#1009).
  • Case-insensitive matching now works for nested pydantic dataclasses (#1010).

Dotenv, secrets and config files

  • With extra='allow', a non-lowercase env_prefix is now stripped from dotenv extras (#959, #968).
  • secrets_case_sensitive=True is now honored on Windows (#1001).
  • An empty JSON config file is treated as an empty mapping instead of crashing (#947), matching YAML and TOML.
  • TOML table headers: ~ paths are now expanded when checking that the file exists (#1034), and an explicit toml_table_header=() now overrides the model config to read the file root (#1027).

Cloud sources

  • Azure Key Vault and GCP Secret Manager now honor env_parse_none_str (#1019, #1040).
  • Azure Key Vault: dash_to_underscore=True now works for nested model fields (#1025).
  • NestedSecretsSettingsSource now validates its specific constructor arguments (#975).

... (truncated)

Commits
  • 8c259f4 Prepare release 2.16.0 (#1043)
  • 4bc667a Keep case of non-option CLI args when case_sensitive=False (#1036)
  • f75a805 Simplify alias resolution branch and test alias with AliasChoices/AliasPath (...
  • cfdc558 Honor env_parse_none_str for GCP Secret Manager (#1040)
  • 081d39f Fix config file and CLI values being ignored when alias differs from validati...
  • c46ebc4 Expand home paths when checking TOML table headers (#1034)
  • 6ea85e6 Decode optional Annotated named union aliases (#1041)
  • ca9d7c4 Fix JSON decoding for optional named union aliases (#1030)
  • b6ddda2 Fix CLI parsing for named collection type aliases (#1032)
  • bedb60e Honor explicit empty TOML table header overrides (#1027)
  • Additional commits viewable in compare view

Updates openinference-instrumentation-langchain from 0.1.76 to 0.1.79

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.79

0.1.79 (2026-10-09)

Bug Fixes

  • bump openinference-instrumentation minimum to >=0.1.71 (#3975) (3fbad7d)
Commits
  • 453da0e chore: release main (#3979)
  • d69ab8e fix(google-genai): apply base64_image_max_length to output.value (#3974)
  • 197f7e7 feat(llama_index): Add Finish Reason Attribute (#3986)
  • 12f2cc0 fix(mistralai): end the LLM span when a stream is closed, abandoned, or used ...
  • b625e5c chore(deps): update opentelemetry-sdk requirement from >=1.20.0 to >=1.45.0 i...
  • 3fbad7d fix: bump openinference-instrumentation minimum to >=0.1.71 (#3975)
  • 35e9efd chore: release main (#3976)
  • 29d97da fix(cohere): end LLM span when stream is abandoned or closed early (#3784) (#...
  • dde040f fix(google-adk): forward ADK 2.x invoke_workflow and invoke_node spans (#3846)
  • be777f6 fix(bedrock): record every toolResult block of a Converse message (#3787)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.45.0 to 1.45.1

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Commits
  • 14971ce Prepare release 1.45.1/0.66b1 (#5752)
  • 44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
  • a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
  • d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
  • db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
  • See full diff in compare view

Updates starlette from 1.7.0 to 1.9.0

Release notes

Sourced from starlette's releases.

Version 1.9.0

This release streams TestClient response bodies, so client.stream() returns before the application finishes. It also escapes path delimiters when building URLs, matches host names case-insensitively, and keeps every existing Vary header.

Changed

  • Stream TestClient response bodies, so client.stream() returns before the application finishes. Closing an unfinished streamed response now cancels the application #3491.

Fixed

  • Percent-encode ?, #, \ and a leading // in the request path when building request.url, and \ and a leading // in url_path_for #3671.
  • Use the byte length for Content-Length when the response body is a typed or multidimensional memoryview #3622.
  • Include HEAD in the Allow header of HTTPEndpoint 405 responses when GET is defined #3585.
  • Match host names case-insensitively in Host routing and TrustedHostMiddleware #3542.
  • Preserve every existing Vary header in MutableHeaders.add_vary_header(), used by GZipMiddleware and SessionMiddleware #3675.

Full changelog: 1.8.0...1.9.0

Version 1.8.0

This release adds HTTP 103 Early Hints, preserves response trailers through GZipMiddleware, and stops FileResponse transfers when clients disconnect. Starlette now requires Python 3.11.

Added

  • Add Request.send_early_hints() for HTTP 103 Early Hints through the ASGI http.response.early_hint extension #3435.

Changed

  • Require Python 3.11 or later, dropping support for Python 3.10

…3 updates

Bumps the minor-and-patch group with 13 updates in the /a2a/a2a_currency_converter directory:

| Package | From | To |
| --- | --- | --- |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.4.0` | `4.4.2` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.12` | `1.2.16` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.7.2` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.15.0` | `2.16.0` |
| [openinference-instrumentation-langchain](https://github.com/Arize-ai/openinference) | `0.1.76` | `0.1.79` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.45.0` | `1.45.1` |
| [starlette](https://github.com/Kludex/starlette) | `1.7.0` | `1.9.0` |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.2.0` | `4.3.0` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.7.0` |
| [orjson](https://github.com/ijl/orjson) | `3.12.0` | `3.13.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-python) | `0.14.1` | `0.14.12` |



Updates `langchain-google-genai` from 4.4.0 to 4.4.2
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.4.0...libs/genai/v4.4.2)

Updates `langgraph` from 1.2.12 to 1.2.16
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.12...1.2.16)

Updates `pydantic` from 2.13.5 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.1)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

Updates `langchain-openai` from 1.6.6 to 1.7.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.6.6...langchain-openai==1.7.2)

Updates `pydantic-settings` from 2.15.0 to 2.16.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.15.0...v2.16.0)

Updates `openinference-instrumentation-langchain` from 0.1.76 to 0.1.79
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-instrumentation-langchain-v0.1.76...python-openinference-instrumentation-langchain-v0.1.79)

Updates `opentelemetry-exporter-otlp` from 1.45.0 to 1.45.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.0...v1.45.1)

Updates `starlette` from 1.7.0 to 1.9.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.7.0...1.9.0)

Updates `langgraph-checkpoint` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.2.0...checkpoint==4.3.0)

Updates `langchain-core` from 1.6.6 to 1.7.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.6.6...langchain-core==1.7.0)

Updates `orjson` from 3.12.0 to 3.13.0
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.12.0...3.13.0)

Updates `langsmith` from 0.14.1 to 0.14.12
- [Release notes](https://github.com/langchain-ai/langsmith-python/releases)
- [Changelog](https://github.com/langchain-ai/langsmith-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langsmith-python/commits/v0.14.12)

---
updated-dependencies:
- dependency-name: langchain-google-genai
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph-checkpoint
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: orjson
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.14.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team and pdettori as code owners October 23, 2026 05:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant