Skip to content

Bump the python-uv-lock group across 1 directory with 9 updates#762

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/python-uv-lock-ffff63ac25
Closed

Bump the python-uv-lock group across 1 directory with 9 updates#762
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/python-uv-lock-ffff63ac25

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026 •
edited
Loading

Updates the requirements on langchain, pydantic, langchain-anthropic, langchain-openai, build, basedpyright, ruff, rich and setuptools to permit the latest version.
Updates langchain from 1.2.15 to 1.2.17

Release notes

Sourced from langchain's releases.

langchain-core==1.2.17

Changes since langchain-core==1.2.16

release(core): 1.2.17 (#35527) fix(core): extract usage metadata from serialized tracer message outputs (#35526) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441)

langchain==1.2.17

Changes since langchain==1.2.16

release(langchain): 1.2.17 (#37110) feat(langchain): add respond decision to HITL middleware (#37095)

langchain-core==1.2.16

Changes since langchain-core==1.2.15

release(core): 1.2.16 (#35439) fix(core): treat empty tool chunk ids as missing in merge (#35414)

langchain==1.2.16

Changes since langchain==1.2.15

release(langchain): 1.2.16 (#37085) chore(docs): update x handle references (#37081) release(anthropic): 1.4.2 (#37061) perf(langchain): stop inlining agent state into tool-dispatch Sends (#36960) docs(langchain): correct import paths in agent middleware docstrings (#36987) hotfix: bump min core versions (#36996) release(openai): 1.2.1 (#36995) feat(core): add content-block-centric streaming (v2) (#36834) fix(fireworks): honor max_retries (#36973) release(openai): 1.2.0 (#36961) docs(langchain): correct import path in ModelCallLimitMiddleware docstring (#36895) feat(langchain): ls_agent_type tag on create_agent calls (#36774) release(core): release 1.3.0 (#36851) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (#36800) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/langchain_v1 (#36717) chore: bump pillow from 12.1.1 to 12.2.0 in /libs/langchain_v1 (#36710) test(langchain): test cache hit/miss on lru (#36659) perf(langchain): add lru cache when resolving types (#36649) perf(langchain): add another init test with middleware (#36644) chore(core): reduce streaming metadata / perf (#36588) perf(langchain): add benchmark command (#36641) chore: bump cryptography from 46.0.6 to 46.0.7 in /libs/langchain_v1 (#36619) docs(langchain): add missing baseten and litellm to init_chat_model (#36562) release(core): 1.2.26 (#36511)

Commits
  • b339f65 release(langchain): 1.2.17 (#37110)
  • 04e7a55 fix(fireworks): translate canonical multimodal content blocks for chat comple...
  • a1f336f fix(core): preserve structured inputs on tool runs in tracers (#37108)
  • ba56ac6 feat(langchain): add respond decision to HITL middleware (#37095)
  • b6b836a chore: bump notebook from 7.4.5 to 7.5.6 in /libs/langchain (#37104)
  • 3d96874 chore: bump notebook from 7.4.7 to 7.5.6 in /libs/text-splitters (#37105)
  • 5ac6224 chore: bump aiohttp from 3.13.4 to 3.13.5 in /libs/partners/fireworks (#37106)
  • 90caeef chore: bump requests from 2.33.0 to 2.33.1 in /libs/partners/fireworks (#37107)
  • 38553c3 release(perplexity): 1.2.0 (#37091)
  • 28f5448 feat(perplexity): add PerplexityEmbeddings (#37082)
  • Additional commits viewable in compare view

Updates pydantic from 2.13.1 to 2.13.3

Release notes

Sourced from pydantic's releases.

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

Changelog

Sourced from pydantic's changelog.

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084
Commits
  • 9e9a111 Fix backported test
  • 1ec8c6a Prepare release v2.13.3
  • fb4f204 Handle AttributeError subclasses with from_attributes
  • ca3ddd1 Prepare release v2.13.2
  • 000e823 Fix ValidationInfo.field_name missing with model_validate_json()
  • See full diff in compare view

Updates langchain-anthropic from 1.4.0 to 1.4.3

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.3

Changes since langchain-anthropic==1.4.2

release(anthropic): 1.4.3 (#37166) refactor(langchain-classic): retarget deprecations to create_agent, other chores (#37164) chore(docs): update x handle references (#37081) fix(anthropic): guard httpx finalizers (#37064)

langchain-anthropic==1.4.2

Changes since langchain-anthropic==1.4.1

release(anthropic): 1.4.2 (#37061) fix(anthropic): restore cache_control on non-direct subclasses (#37057) hotfix: bump min core versions (#36996) feat(core): add content-block-centric streaming (v2) (#36834) hotfix(ci): remove nobenchmark flag (#36959) chore(partners): standardize integration test invocation (#36958)

langchain-anthropic==1.4.1

Changes since langchain-anthropic==1.4.0

fix(anthropic): strip null encrypted_content from compaction blocks (#36850) release(anthropic): 1.4.1 (#36848) feat(anthropic): support opus 4.7 features (#36847) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/anthropic (#36803) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/anthropic (#36789) chore(model-profiles): refresh model profile data (#36482) fix(core): fixed typos in the documentation (#36459) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) feat(anthropic): support adaptive thinking mode (#36293) chore: bump requests from 2.32.5 to 2.33.0 in /libs/partners/anthropic (#36258) chore(partners): bump langchain-core min to 1.2.21 (#36183) fix(core,model-profiles): add missing ModelProfile fields, warn on schema drift (#36129) ci: suppress pytest streaming output in CI (#36092) ci: avoid unnecessary dep installs in lint targets (#36046)

Commits
  • 1c08d47 release(anthropic): 1.4.3 (#37166)
  • 71708c6 release(langchain-classic): 1.0.5 (#37165)
  • 5a9b1ec refactor(langchain-classic): retarget deprecations to create_agent, other c...
  • 255f227 chore(langchain,langchain-classic): uncomment optional deps (#37163)
  • c42b080 chore(model-profiles): refresh model profile data (#37162)
  • e411a4e chore(model-profiles): refresh model profile data (#37148)
  • 934d9e2 release(openrouter): 0.2.3 (#37146)
  • 70f5626 fix(openrouter): merge fragmented reasoning_details in streaming (#36401)
  • 2ed9359 release(mistralai): 1.1.3 (#37145)
  • d1a3c3d feat(mistralai): add image input support for human messages (#37112)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.1.13 to 1.2.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.2.1

Changes since langchain-openai==1.2.0

hotfix: bump min core versions (#36996) release(openai): 1.2.1 (#36995) fix(openai): add gpt-5.5 pro to Responses API check (#36994) feat(core): add content-block-centric streaming (v2) (#36834) chore(model-profiles): refresh model profile data (#36982)

langchain-openai==1.2.0

Changes since langchain-openai==1.1.16

release(openai): 1.2.0 (#36961) feat(openai): prevent silent streaming hangs in ChatOpenAI (#36949) hotfix(ci): remove nobenchmark flag (#36959) chore(partners): standardize integration test invocation (#36958)

langchain-openai==1.1.16

Changes since langchain-openai==1.1.15

release(openai): 1.1.16 (#36927) fix(openai): tolerate prompt_cache_retention drift in streaming (#36925)

langchain-openai==1.1.15

Changes since langchain-openai==1.1.14

release(openai): 1.1.15 (#36901) fix(openai): accommodate dict response items in streaming (#36899) fix(openai): infer azure chat profiles from model name (#36858) chore(model-profiles): refresh model profile data (#36864)

langchain-openai==1.1.14

Changes since langchain-openai==1.1.13

release(openai): 1.1.14 (#36820) fix(openai): use SSRF-safe transport for image token counting (#36819) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/partners/openai (#36795) chore: bump pillow from 12.1.1 to 12.2.0 in /libs/partners/openai (#36777)

Commits

Updates build from 1.4.3 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

Full Changelog: pypa/build@1.4.4...1.5.0

1.4.4

What's Changed

Full Changelog: pypa/build@1.4.3...1.4.4

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

Features

  • Drop Python 3.9 support - by :user:henryiii (:issue:1036)

Bugfixes

  • Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

Miscellaneous

  • :issue:1033

#################### 1.4.4 (2026-04-22) ####################

Bugfixes

  • Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
  • Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
  • Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
  • Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

Miscellaneous

  • :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

Features

... (truncated)

Commits

Updates basedpyright from 1.39.0 to 1.39.3

Commits
  • 5f66727 1.39.3
  • d8741df hopefully fix docs deployment job
  • ceb200c 1.39.2
  • eb7a92c try to fix browser-basedpyright being published with nothing in it
  • dec5306 update package-lock.json
  • 6db43de 1.39.1
  • 335e486 fix failing tests from merge
  • bbe71b6 delete newly added github action from upstream that we don't use
  • 8f22618 update prettierignore
  • ff1f5a4 fix compile errors from merge
  • Additional commits viewable in compare view

Updates ruff from 0.15.10 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits
  • 66f93cf Bump 0.15.12 (#24815)
  • 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
  • ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
  • e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
  • 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
  • 0fbf2bc Drop deprecated license classifier (#24808)
  • 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
  • 4f449ae [ty] Add error context for intersection types (#24772)
  • 5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
  • e7cc762 [ty] Add error context for TypedDict assignments (#24790)
  • Additional commits viewable in compare view

Updates rich from 14.3.3 to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

The Faster Startup Release

No new features in this release, but there should be improved startup time for Rich apps, and potentially improved runtime if you have a lot of links.

[14.3.4] - 2026-04-11

Changed

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

[14.3.4] - 2026-04-11

Changed

Commits

Updates setuptools to 82.0.1

Changelog

Sourced from setuptools's changelog.

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

... (truncated)

Commits
  • 5a13876 Bump version: 82.0.0 → 82.0.1
  • 51ab8f1 Avoid using (deprecated) 'json.version' in tests (#5194)
  • f9c37b2 Docs/CI: Fix intersphinx references (#5195)
  • 8173db2 Docs: Fix intersphinx references
  • 09bafbc Fix past tense on newsfragment
  • 461ea56 Add news fragment
  • c4ffe53 Avoid using (deprecated) 'json.version' in tests
  • 749258b Cleanup pkg_resources dependencies and configuration (#5175)
  • 2019c16 Parse ext-module.define-macros from pyproject.toml as list of tuples (#5169)
  • b809c86 Sync setuptools schema with validate-pyproject (#5157)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-uv-lock group across 1 directory with 9 updates
d8e0b59 
Updates the requirements on [langchain](https://github.com/langchain-ai/langchain), [pydantic](https://github.com/pydantic/pydantic), [langchain-anthropic](https://github.com/langchain-ai/langchain), [langchain-openai](https://github.com/langchain-ai/langchain), [build](https://github.com/pypa/build), [basedpyright](https://github.com/detachhead/basedpyright), [ruff](https://github.com/astral-sh/ruff), [rich](https://github.com/Textualize/rich) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `langchain` from 1.2.15 to 1.2.17
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.2.15...langchain==1.2.17)

Updates `pydantic` from 2.13.1 to 2.13.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.1...v2.13.3)

Updates `langchain-anthropic` from 1.4.0 to 1.4.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.4.0...langchain-anthropic==1.4.3)

Updates `langchain-openai` from 1.1.13 to 1.2.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.1.13...langchain-openai==1.2.1)

Updates `build` from 1.4.3 to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.4.3...1.5.0)

Updates `basedpyright` from 1.39.0 to 1.39.3
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.39.0...v1.39.3)

Updates `ruff` from 0.15.10 to 0.15.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.12)

Updates `rich` from 14.3.3 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.3.3...v15.0.0)

Updates `setuptools` to 82.0.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v61.0.0...v82.0.1)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-uv-lock
- dependency-name: pydantic
  dependency-version: 2.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-uv-lock
- dependency-name: langchain-anthropic
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-uv-lock
- dependency-name: langchain-openai
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-uv-lock
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-uv-lock
- dependency-name: basedpyright
  dependency-version: 1.39.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-uv-lock
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-uv-lock
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-uv-lock
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:development
  dependency-group: python-uv-lock
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 5, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 5, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 5, 2026
@dependabot dependabot Bot deleted the dependabot/uv/python-uv-lock-ffff63ac25 branch May 5, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants