Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 4 updates - #898

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/sdk/python/python-dependencies-2849910668
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/sdk/python/python-dependencies-2849910668

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 4 updates in the /sdk/python directory: langchain-core, langgraph, crewai and pydantic-ai-slim.

Updates langchain-core from 1.6.5 to 1.6.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.9

Changes since langchain-core==1.6.8

release(core): 1.6.9 (#41160) feat(core): accept a callable in with_retry (#41158)

langchain-core==1.6.8

Changes since langchain-core==1.6.7

release(core): 1.6.8 (#41153) fix(core): harden scoped and compatible IPv6 SSRF checks (#41151)

langchain-core==1.6.7

Changes since langchain-core==1.6.6

release(core): 1.6.7 (#41087) fix(core): include openai redacted_content in v1 output for bedrock converse (#41086) fix(core): python 3.14 hardening around inspect.signature (#41059) chore(deps): bump notebook from 7.5.7 to 7.6.3 in /libs/core (#41057) chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/core (#40992) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/core (#40972) chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/core (#40970)

langchain-core==1.6.6

Changes since langchain-core==1.6.5

release(core): 1.6.6 (#40906) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) docs(core): fix docstring examples that don't run as copied (#40815)

Commits

Updates langgraph from 1.2.12 to 1.2.14

Release notes

Sourced from langgraph's releases.

langgraph==1.2.14

Changes since 1.2.13

  • release(langgraph): 1.2.14 (#9215)

langgraph==1.2.13

Changes since 1.2.12

  • fix(langgraph): fork before replaying an update checkpoint the thread moved past (#9170)
  • fix(langgraph): keep an update_state on an older checkpoint out of its other branches (#9165)
  • fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • release(langgraph): 1.2.13 (#9205)
  • fix(langgraph): don't walk history for a DeltaChannel that was never written (#9141)
  • fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8548)
  • chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
  • fix(langgraph): hydrate subgraph delta channels with the caller-resolved saver (#8538)
  • fix(langgraph): stop reporting answered interrupts in get_state (#9103)
  • chore(deps-dev): bump the minor-and-patch group across 1 directory with 5 updates (#9155)
  • chore(deps-dev): bump the minor-and-patch group in /libs/checkpoint-conformance with 2 updates (#9145)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 5 updates (#9149)
  • chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/langgraph (#9160)
  • chore(deps-dev): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/langgraph (#9156)
  • chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/langgraph (#9140)
  • chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/langgraph (#9138)
  • chore(deps): bump pyjwt from 2.14.0 to 2.15.0 in /libs/langgraph (#9139)
  • chore(deps): bump pyjwt from 2.13.0 to 2.14.0 in /libs/langgraph (#9126)
Commits
  • 70dd640 release(langgraph): 1.2.14 (#9215)
  • 55b0e36 release(sdk-py): 0.4.6 (#9214)
  • d89c7e1 fix(sdk-py): percent-encode thread_id and assistant_id in thread stream reque...
  • 2d94208 fix(langgraph): fork before replaying an update checkpoint the thread moved p...
  • 456e2b1 fix(langgraph): keep an update_state on an older checkpoint out of its other ...
  • 1b84cb0 fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • 8e15e0d release(langgraph): 1.2.13 (#9205)
  • 524b320 fix(langgraph): don't walk history for a DeltaChannel that was never written ...
  • 9a0394d fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8...
  • 7dc9195 chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
  • Additional commits viewable in compare view

Updates crewai from 1.15.22 to 1.15.27

Release notes

Sourced from crewai's releases.

1.15.27

What's Changed

Features

  • Add XPU to OpenCLIP provider device options
  • Add deepinfra as an OpenAI-compatible provider
  • Record why an evaluation stopped before its verdict
  • Record what the run app's Deploy met before an attempt
  • Implement per-run cost and time tracking in crewai eval --models without repeated progress lines

Bug Fixes

  • Fix issue where stopSequences were sent to OpenAI GPT-6/GPT-5.6/gpt-oss
  • Preserve GitHub loader source attribution
  • Fix SQLite flow initialization contention

Documentation

  • Add snapshot and changelog for v1.15.26

Contributors

@​StoyanD, @​ats3v, @​joaomdmoura, @​kimnamu, @​lorenzejay, @​mhbuehler, @​zouyonghe

1.15.26

What's Changed

Bug Fixes

  • Fix ownership retention of rwlock when acquisition is interrupted.
  • Resolve issue with documentation site source URLs not being preserved.
  • Fix task output display in log-tasks-outputs to show actual output.

Documentation

  • Update snapshot and changelog for version v1.15.25.

Contributors

@​Velmet44, @​Vidit-Ostwal, @​joaomdmoura, @​leilei3167, @​lorenzejay, @​lux-liang

1.15.25

What's Changed

Documentation

  • Snapshot and changelog for v1.15.24

Contributors

@​lorenzejay

1.15.24

What's Changed

... (truncated)

Commits
  • 6b93fa0 [docs-freeze] docs: snapshot and changelog for v1.15.27 (#8004)
  • d522c31 feat: bump versions to 1.15.27 (#8001)
  • 140bfcb docs(rag): add XPU to OpenCLIP provider device options (#7923)
  • 107fab8 fix(bedrock): don't send stopSequences to OpenAI GPT-6/GPT-5.6/gpt-oss (#7731)
  • ce149db fix(rag): preserve github loader source attribution (#7983)
  • d38ceaf feat(llms): add deepinfra as an openai-compatible provider (#7459)
  • b3c4409 feat(cli): record why an evaluation stopped before its verdict (#7963)
  • ed71a6f crewai eval --models: per-run cost and time, and no repeated progress lines (...
  • 274fba6 COR-891 Fix SQLite flow initialization contention (#7821)
  • 24a1ddf feat(cli): record what the run app's Deploy met before an attempt (#7964)
  • Additional commits viewable in compare view

Updates pydantic-ai-slim from 2.50.0 to 2.54.0

Release notes

Sourced from pydantic-ai-slim's releases.

v2.54.0 (2026-10-02)

What's Changed

⚠️ Compatibility Notes

🚀 Features

🐛 Bug Fixes

Full Changelog: pydantic/pydantic-ai@v2.53.0...v2.54.0

... (truncated)

Commits
  • 6695132 Hold pydantic-ai-harness to the 100% coverage gate and strict-no-cover, a...
  • 1ec8ce4 Normalize CRLF in the rewind menu preview test so it passes on Rich 15 (#9722)
  • c4cc8bc Exempt the arguments and text TestModel generates from the scope requiremen...
  • bdffc6c Keep BubblewrapWorkspace commands from running code on the SSH host through...
  • fcbbc00 Return the live token from PKCESignIn.token() when another clai2 session ...
  • a5258ce Name tests/test_docs_navigation.py as the check for harness navigation entr...
  • de0dab7 Propagate a native cancel that lands during a command timeout's stop (#9675)
  • 47f5715 Preserve text and reasoning part boundaries in OpenAIChatModel streams (#8729)
  • 3184a7d Preserve dependency extras in clai2 archive updates (#9690)
  • ee1b888 Allow deleting unused models from the clai2 /model menu (#9696)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 4 updates

Bumps the python-dependencies group with 4 updates in the /sdk/python directory: [langchain-core](https://github.com/langchain-ai/langchain), [langgraph](https://github.com/langchain-ai/langgraph), [crewai](https://github.com/crewAIInc/crewAI) and [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai).


Updates `langchain-core` from 1.6.5 to 1.6.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.6.5...langchain-core==1.6.9)

Updates `langgraph` from 1.2.12 to 1.2.14
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.12...1.2.14)

Updates `crewai` from 1.15.22 to 1.15.27
- [Release notes](https://github.com/crewAIInc/crewAI/releases)
- [Commits](crewAIInc/crewAI@1.15.22...1.15.27)

Updates `pydantic-ai-slim` from 2.50.0 to 2.54.0
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v2.50.0...v2.54.0)

---
updated-dependencies:
- dependency-name: langchain-core
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph
  dependency-version: 1.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: crewai
  dependency-version: 1.15.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pydantic-ai-slim
  dependency-version: 2.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 14, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Thanks @dependabot[bot] for keeping our dependencies current! 🙌

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated approval for Dependabot dependency update.

@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 31d71e9b-100d-42a9-ada6-df6b81e0ba20

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@NiveditJain

Copy link
Copy Markdown
Member

Superseded by #901, which combines every open Dependabot update into one PR (this commit is cherry-picked there unchanged) and clears the OSV-Scanner gate that was red on all of them.

@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/uv/sdk/python/python-dependencies-2849910668 branch October 14, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant