Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
13d4829 to
50e35a4
Compare
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.6.11 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.6.11) Updates `langchain-openai` from 1.1.12 to 1.7.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.2) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
50e35a4 to
9078dbb
Compare
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.6.11Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
c088db9release(core): 1.6.11 (#41260)8d4838ffeat(core): accept address inside LangChainTracer (#41006)7185be5chore(model-profiles): refresh model profile data (#41253)84ba23crelease(langchain): 1.4.6 (#41247)ac2f5e3feat(langchain): add opt-in per-call interrupts to HITL middleware (#41062)f295bfechore(model-profiles): refresh model profile data (#41242)170060erelease(openai): 1.7.2 (#41245)4bbbc5afix(openai): keep Responses stream items on one block when output_index drift...8ace87echore(model-profiles): refresh model profile data (#41229)f2bf626release(langchain): 1.4.5 (#41226)Updates
langchain-openaifrom 1.1.12 to 1.7.2Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
170060erelease(openai): 1.7.2 (#41245)4bbbc5afix(openai): keep Responses stream items on one block when output_index drift...8ace87echore(model-profiles): refresh model profile data (#41229)f2bf626release(langchain): 1.4.5 (#41226)a0074fbfeat(langchain): acceptsummarizerinSummarizationMiddleware(#41225)36fb6aarelease(anthropic): 1.7.6 (#41221)ba2bacachore(model-profiles): refresh model profile data (#41215)85e0b7drelease(openai): 1.7.1 (#41222)fddca06release(core): 1.6.10 (#41220)e4b1437chore(model-profiles): refresh model profile data (#41145)