Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.6.9 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.6.9) Updates `langchain-openai` from 1.1.12 to 1.7.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.0) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
2671f2c to
bb09ab8
Compare
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.6.9Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
fc7dc77release(core): 1.6.9 (#41160)a055e83feat(core): accept a callable in with_retry (#41158)2baf2f3release(openai): 1.7.0 (#41154)4acca64release(core): 1.6.8 (#41153)b53209bfeat(openai): support decisions api (#41125)2813f7afix(core): harden scoped and compatible IPv6 SSRF checks (#41151)1f587e3test(fireworks): stabilize forced tool-call extraction (#41139)38682b8release(fireworks): 1.7.1 (#41137)e986d20fix(fireworks): preserve reasoning in streaming and tool loops (#41093)4db8c0echore(model-profiles): refresh model profile data (#41117)Updates
langchain-openaifrom 1.1.12 to 1.7.0Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
2baf2f3release(openai): 1.7.0 (#41154)4acca64release(core): 1.6.8 (#41153)b53209bfeat(openai): support decisions api (#41125)2813f7afix(core): harden scoped and compatible IPv6 SSRF checks (#41151)1f587e3test(fireworks): stabilize forced tool-call extraction (#41139)38682b8release(fireworks): 1.7.1 (#41137)e986d20fix(fireworks): preserve reasoning in streaming and tool loops (#41093)4db8c0echore(model-profiles): refresh model profile data (#41117)f5a80b1chore(deps): bump fsspec from 2026.6.0 to 2026.9.0 in /libs/langchain_v1 (#41...cb4fec2fix(huggingface): use a supported Scaleway model in streaming test (#41095)