Skip to content

Bump the python-minor group across 1 directory with 10 updates#13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-b860b79b25
Open

Bump the python-minor group across 1 directory with 10 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-b860b79b25

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-minor group with 9 updates in the / directory:

Package From To
fastapi 0.136.3 0.138.0
langchain 1.3.2 1.3.10
langchain-mcp-adapters 0.2.2 0.3.0
langchain-openai 1.2.2 1.3.2
numpy 2.4.6 2.5.0
openai-agents 0.17.4 0.17.6
pydantic-settings 2.14.1 2.14.2
pytest 9.0.3 9.1.1
python-multipart 0.0.30 0.0.32

Updates fastapi from 0.136.3 to 0.138.0

Release notes

Sourced from fastapi's releases.

0.138.0

Features

  • ✨ Add support for app.frontend("/", directory="dist") and router.frontend("/", directory="dist"). PR #15800 by @​tiangolo.

Docs

Translations

Internal

0.137.2

Features

  • ✨ Add iter_route_contexts() for advanced use cases that used to use router.routes (e.g. Jupyverse). PR #15785 by @​tiangolo.

Translations

Internal

... (truncated)

Commits

Updates langchain from 1.3.2 to 1.3.10

Release notes

Sourced from langchain's releases.

langchain==1.3.10

Changes since langchain==1.3.9

release(langchain): 1.3.10 (#38255) chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176) chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179) fix(langchain): switch summary format (#38171) fix(langchain): detect provider strategy for dated gpt-5.2/gpt-5.4 snapshots (#38222) chore(langchain): improve typing in tests (#38163) chore: bump pyjwt from 2.12.0 to 2.13.0 in /libs/langchain_v1 (#38168) release(openai): 1.3.2 (#38130) hotfix(openai): switch version (#38123) release(openai): 1.4.0 (#38120) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) release(anthropic): 1.4.6 (#38105)

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105) release(langchain): 1.3.9 (#38104) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106)

langchain==1.3.8

Changes since langchain==1.3.7

release(langchain): 1.3.8 (#38096) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) chore(langchain): add overloads to create_agent (#34309) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): support async middleware decorator typing (#34584) fix(langchain): tighten structured output model fallbacks (#38042) release(anthropic): 1.4.5 (#38036) hotfix(core): bump lockfile(s) (#38032) refactor(langchain): refactor test_create_agent_tool_validation (#34443)

langchain==1.3.7

Changes since langchain==1.3.6

release(langchain): 1.3.7 (#38024) style(langchain): add ruff rules ARG (#34435) feat(langchain): add ProviderToolSearchMiddleware (#37969) chore(langchain): activate mypy warn_return_any (#34249) test(langchain): mark legacy trigger view for 2.0 removal (#38002)

langchain==1.3.6

Changes since langchain==1.3.5

... (truncated)

Commits
  • a807a9c release(langchain): 1.3.10 (#38255)
  • 15b0a49 chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252)
  • 612139f chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175)
  • 921e370 chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176)
  • 1aabc26 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179)
  • 8d51355 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain (#38180)
  • 0b1b7bb chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain (#38181)
  • dfd0627 chore: bump starlette from 1.0.1 to 1.3.1 in /libs/langchain (#38182)
  • 0269392 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/langchain (#38183)
  • 24d0b37 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184)
  • Additional commits viewable in compare view

Updates langchain-mcp-adapters from 0.2.2 to 0.3.0

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0

Commits
  • a61c783 release: 0.3.0 (#542)
  • ef4b4d6 feat: surface MCP tool execution errors as failed tool output (#540)
  • 4f614ad fix: use non-deprecated streamable HTTP client (#541)
  • d62349d build(deps): bump the minor-and-patch group with 4 updates (#534)
  • 20eb39e build(deps-dev): bump mypy from 1.20.0 to 2.1.0 in the major group (#535)
  • 62b48ab build(deps): bump starlette from 0.49.1 to 1.0.1 in /examples/servers/streama...
  • ed77d67 build(deps): bump starlette from 0.50.0 to 1.0.1 (#537)
  • 4f9f7ea build(deps): bump the uv group across 1 directory with 2 updates (#517)
  • e82aa8c build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 in the mi...
  • effc918 build(deps): bump python-multipart from 0.0.26 to 0.0.27 (#504)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.2.2 to 1.3.2

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

langchain-openai==1.3.1

Changes since langchain-openai==1.3.0

docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) test(openai): use gpt-4o for image token counting (#38089) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-openai==1.3.0

Changes since langchain-openai==1.2.2

hotfix(openai): min core dep (#37990) release(openai): 1.3.0 (#37989) feat(openai): support apply_patch built-in tool (#37157) chore(model-profiles): refresh model profile data (#37973) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895)

Commits
  • 879cad0 release(openai): 1.3.2 (#38130)
  • 37b339f fix(openai): build Codex async headers off the event loop in _agenerate (#3...
  • 11429a9 fix(openai): avoid sync token reads in Codex streaming (#38128)
  • 454e195 hotfix(openai): skip Codex live integration tests in CI (#38124)
  • 9e6f58b hotfix(openai): switch version (#38123)
  • bf7b018 refactor(openai): mark Codex OAuth classes private (#38122)
  • 34af883 chore(infra): wire up per-partner version-consistency pre-commit hooks (#38121)
  • 8180a09 release(openai): 1.4.0 (#38120)
  • 6c2b70e feat(openai): add ChatGPT OAuth-backed ChatOpenAICodex chat model (#37569)
  • 63cc1f4 docs: refresh README installation and resources (#38119)
  • Additional commits viewable in compare view

Updates langgraph from 1.2.2 to 1.2.6

Release notes

Sourced from langgraph's releases.

langgraph==1.2.6

Changes since 1.2.5

  • release(langgraph): 1.2.6 (#8139)
  • fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • release(cli): 0.4.30 (#8101)
  • docs: standardize package README.md structure (#8064)
  • chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)

langgraph==1.2.5

Changes since 1.2.4

  • release(langgraph): 1.2.5 (#8062)
  • fix(langgraph): merge lc_versions config metadata (#8052)
  • release(cli): 0.4.28 (#8041)
  • fix: updateState bug for deltaChannel on empty thread (#8011)
  • chore: migrate Python type checking to ty (#8002)
  • chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)
  • chore(deps): bump the minor-and-patch group in /libs/langgraph with 14 updates (#7975)

langgraph==1.2.4

Changes since 1.2.3

  • release(langgraph): 1.2.4 (#7991)
  • test(sdk-py): add factory-graph integration test exercising the server factory path (#7978)
  • fix(langgraph): keep _on_started backward-compatible with overrides predating cause (#7987)

langgraph==1.2.3

Changes since 1.2.2

  • release(langgraph): 1.2.3 (#7945)
  • feat(langgraph): wire RemoteGraph.interleave to sdk-py interleave_projections (#7938)
  • feat(langgraph): add v3 streaming support to RemoteGraph (#7927)
  • feat(langgraph): name tool-dispatched subagents via lc_agent_name (#7928)
  • fix(langgraph): rename ProtocolEvent.eventId to event_id to match the wire field (#7942)
  • fix(langgraph): merge instead of overwrite in ensure_config for callbacks, tags, metadata, configurable (#7926)
  • fix(langgraph): [LSD-1507] Distinguish between user cancelled and other cancellations (#7920)
  • fix(cli): bump api bound to 0.10.0 (#7922)
  • feat(sdk-py): add websocket stream transports (#7830)
  • feat(sdk-py): add messages and tool call projections (#7823)
  • feat(sdk-py): add v3 streaming primitives and SSE transport (#7818)
Commits
  • ce6c8b2 release(langgraph): 1.2.6 (#8139)
  • 9100f2c feat: add delta-channel-dump recovery script as examples to dump from Postgre...
  • 79befe6 fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • 9af2521 fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • 1a9baae release(cli): 0.4.30 (#8101)
  • 916025d feat(cli): support compatible api version ranges (#8023)
  • 9732084 ci(deps): pin GitHub Actions to commit SHAs (#8065)
  • 8558481 docs: standardize package README.md structure (#8064)
  • 4cf120d chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)
  • 7ab79f9 release(langgraph): 1.2.5 (#8062)
  • Additional commits viewable in compare view

Updates numpy from 2.4.6 to 2.5.0

Release notes

Sourced from numpy's releases.

v2.5.0 (June 21, 2026)

NumPy 2.5.0 Release Notes

Numpy 2.5.0 is a transitional release. It drops support for Python 3.11, marking the end of distutils, and expires a large number of deprecations made in the 2.0.x release. It also improves free threading and brings sorting into compliance with the array-api standard with the addition of descending sorts. There is also a fair amount of preparation for Python 3.15, which will be supported starting with the first rc.

This release supports Python versions 3.12-3.14.

Highlights

  • Distutils has been removed,
  • Many expired deprecations, see below,
  • Many new deprecations, see below,
  • Many static typing improvements.
  • Improved support for free threading,
  • Support for descending sorts,

See New Features below for other additions.

Deprecations

  • numpy.char.chararray is deprecated. Use an ndarray with a string or bytes dtype instead.

    (gh-30605)

  • numpy.take now correctly checks if the result can be cast to the provided out=out under the same-kind rule. A DeprecationWarning is given now when this check fails. Previously, take incorrectly checked if out could be cast to the result (the wrong direction). This deprecation also affects compress and possibly other functions. (Future versions of NumPy may tighten the casting check further.)

    (gh-30615)

  • The numpy.char.[as]array functions are deprecated. Use an numpy.[as]array with a string or bytes dtype instead.

    (gh-30802)

  • Setting the dtype attribute is deprecated because mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a view with a new dtype via array.view(dtype=new_dtype).

    (gh-29244)

... (truncated)

Commits
  • 6910b28 Merge pull request #31706 from charris/prepare-2.5.0-release
  • e0acd2b REL: Prepare for the NumPy 2.5.0 release.
  • 8d928b7 Merge pull request #31704 from charris/backport-31649
  • c2055ba MAINT: update openblas to 0.3.33.112.0 (#31649)
  • ce17c81 Merge pull request #31703 from charris/backport-31609
  • 3de6203 BUG: fix StringDType distinct-allocator bugs and add tests (#31609)
  • c723971 Merge pull request #31700 from charris/backport-31694
  • 64513b2 MAINT: Bump pypa/cibuildwheel from 3.4.1 to 4.1.0
  • 04707f0 Merge pull request #31698 from charris/try-fix-emscripten
  • 5cf0686 MAINT: Try to fix emscripten wheel build.
  • Additional commits viewable in compare view

Updates openai-agents from 0.17.4 to 0.17.6

Release notes

Sourced from openai-agents's releases.

v0.17.6

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-python@v0.17.5...v0.17.6

v0.17.5

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-python@v0.17.4...v0.17.5

Commits

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, ...

    Description has been truncated

@dependabot
Bump the python-minor group across 1 directory with 10 updates
cf80c4d 
Bumps the python-minor group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.3` | `0.138.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.3.2` | `1.3.10` |
| [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters) | `0.2.2` | `0.3.0` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.2` | `1.3.2` |
| [numpy](https://github.com/numpy/numpy) | `2.4.6` | `2.5.0` |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.17.4` | `0.17.6` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.30` | `0.0.32` |



Updates `fastapi` from 0.136.3 to 0.138.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.138.0)

Updates `langchain` from 1.3.2 to 1.3.10
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.3.2...langchain==1.3.10)

Updates `langchain-mcp-adapters` from 0.2.2 to 0.3.0
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases)
- [Commits](langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0)

Updates `langchain-openai` from 1.2.2 to 1.3.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.2...langchain-openai==1.3.2)

Updates `langgraph` from 1.2.2 to 1.2.6
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.2...1.2.6)

Updates `numpy` from 2.4.6 to 2.5.0
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.6...v2.5.0)

Updates `openai-agents` from 0.17.4 to 0.17.6
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.17.4...v0.17.6)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `python-multipart` from 0.0.30 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.30...0.0.32)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.138.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: langchain
  dependency-version: 1.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: langchain-mcp-adapters
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: langchain-openai
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: langgraph
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: numpy
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: openai-agents
  dependency-version: 0.17.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants