Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 19 updates - #1033

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-d5f6cde919
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-d5f6cde919

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 19 updates in the /a2a/weather_service directory:

Package From To
a2a-sdk 1.1.5 1.3.0
langgraph 1.2.12 1.2.19
langchain-core 1.6.5 1.7.4
langchain-openai 1.6.6 1.7.3
pydantic-settings 2.15.0 2.16.2
opentelemetry-exporter-otlp 1.45.0 1.45.2
opentelemetry-instrumentation-httpx 0.66b0 0.66b2
opentelemetry-instrumentation-openai 0.62.3 0.62.4
openinference-semantic-conventions 0.1.39 0.1.43
openinference-instrumentation-langchain 0.1.76 0.1.81
python-multipart 0.0.32 0.0.33
langgraph-checkpoint 4.2.0 4.3.1
starlette 1.7.0 1.10.0
pyasn1 0.6.4 0.6.5
aiohttp 3.14.3 3.14.5
gitpython 3.1.62 3.2.1
langchain-text-splitters 1.1.2 1.1.3
langsmith 0.14.1 0.14.17
python-dotenv 1.2.3 1.2.4

Updates a2a-sdk from 1.1.5 to 1.3.0

Release notes

Sourced from a2a-sdk's releases.

v1.3.0

1.3.0 (2026-10-27)

Features

  • server: release parked interrupted tasks after a configurable timeout (#1338) (b22a68d)

Bug Fixes

  • client: Create separate httpx per client when none configured (#1358) (d316d0e)
  • client: raise A2A errors for malformed JSON-RPC responses (#1375) (7e55413)
  • client: rejections from unrecognized fields (#1354) (91929cd)
  • compat: keep an unset v0.3 status message and provider as None (#1362) (cdb4799), closes #1361
  • compat: return A2A error codes from the v0.3 JSON-RPC adapter (#1369) (8e32d53)
  • compat: set last_updated when storing a task in v0.3 format (#1372) (30b6d50), closes #1371
  • core: restore structured repr on A2A exceptions (#1348) (79a6f45)
  • server: allow recovery after status event validation fails (#1365) (ca3ef0d)
  • server: apply history_length to legacy streaming sends (#1364) (261c074)
  • server: include legacy task states in database list filters (#1337) (e12d494)
  • server: record executor failures through the event consumer (#1366) (ad85806)
  • server: reject boolean JSON-RPC request IDs (#1350) (05392b3)
  • skip malformed agent card signature headers (#1335) (b21a144)

Documentation

  • helpers: note that whole numbers in a data Part come back as floats (#1373) (654774f)

Miscellaneous Chores

v1.2.3

1.2.3 (2026-10-17)

Bug Fixes

  • client: ignore the patch version when preferring a 1.0 interface (#1304) (cbb2d84)
  • client: normalize malformed agent card parsing errors (#1307) (486f0f6)
  • compat: block on a v0.3 gRPC and REST send without configuration (#1334) (8160310), closes #1321
  • compat: treat a v0.3 history_length of 0 as unlimited in JSON-RPC and REST (#1312) (e86695c)
  • jcs: count open containers for the nesting bound, so an empty container leaf is refused (#1294) (5653daf)
  • server: isolate push notification failures from the task lifecycle (#1329) (0ee47d7)
  • server: mark internal lifecycle events done so a cancelled stream frees its producer (#1336) (a4c4fc9)
  • server: reject push URLs in shared address space (#1326) (01da00b)
  • server: release the ActiveTask after a direct Message response (#1297) (49ebce6)

... (truncated)

Changelog

Sourced from a2a-sdk's changelog.

1.3.0 (2026-10-27)

Features

  • server: release parked interrupted tasks after a configurable timeout (#1338) (b22a68d)

Bug Fixes

  • client: Create separate httpx per client when none configured (#1358) (d316d0e)
  • client: raise A2A errors for malformed JSON-RPC responses (#1375) (7e55413)
  • client: rejections from unrecognized fields (#1354) (91929cd)
  • compat: keep an unset v0.3 status message and provider as None (#1362) (cdb4799), closes #1361
  • compat: return A2A error codes from the v0.3 JSON-RPC adapter (#1369) (8e32d53)
  • compat: set last_updated when storing a task in v0.3 format (#1372) (30b6d50), closes #1371
  • core: restore structured repr on A2A exceptions (#1348) (79a6f45)
  • server: allow recovery after status event validation fails (#1365) (ca3ef0d)
  • server: apply history_length to legacy streaming sends (#1364) (261c074)
  • server: include legacy task states in database list filters (#1337) (e12d494)
  • server: record executor failures through the event consumer (#1366) (ad85806)
  • server: reject boolean JSON-RPC request IDs (#1350) (05392b3)
  • skip malformed agent card signature headers (#1335) (b21a144)

Documentation

  • helpers: note that whole numbers in a data Part come back as floats (#1373) (654774f)

Miscellaneous Chores

1.2.3 (2026-10-17)

Bug Fixes

  • client: ignore the patch version when preferring a 1.0 interface (#1304) (cbb2d84)
  • client: normalize malformed agent card parsing errors (#1307) (486f0f6)
  • compat: block on a v0.3 gRPC and REST send without configuration (#1334) (8160310), closes #1321
  • compat: treat a v0.3 history_length of 0 as unlimited in JSON-RPC and REST (#1312) (e86695c)
  • jcs: count open containers for the nesting bound, so an empty container leaf is refused (#1294) (5653daf)
  • server: isolate push notification failures from the task lifecycle (#1329) (0ee47d7)
  • server: mark internal lifecycle events done so a cancelled stream frees its producer (#1336) (a4c4fc9)
  • server: reject push URLs in shared address space (#1326) (01da00b)
  • server: release the ActiveTask after a direct Message response (#1297) (49ebce6)
  • server: run follow-up messages in the sender's contextvars (#1317) (a016002)
  • server: warn when an AgentCard is missing required fields (#1279) (4f4101c)

... (truncated)

Commits
  • 0d9dafb chore(main): release 1.3.0 (#1359)
  • 3d185ad test: extend selected scenarios to REST (#1370)
  • fb6373f chore: release 1.3.0 (#1389)
  • 7e55413 fix(client): raise A2A errors for malformed JSON-RPC responses (#1375)
  • b21a144 fix: skip malformed agent card signature headers (#1335)
  • ca3ef0d fix(server): allow recovery after status event validation fails (#1365)
  • c70403a chore(deps): bump opentelemetry-api from 1.42.1 to 1.45.1 (#1387)
  • c666b5f chore(deps): bump certifi from 2026.2.25 to 2026.10.19 (#1386)
  • 8e32d53 fix(compat): return A2A error codes from the v0.3 JSON-RPC adapter (#1369)
  • b22a68d feat(server): release parked interrupted tasks after a configurable timeout (...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.12 to 1.2.19

Release notes

Sourced from langgraph's releases.

langgraph==1.2.19

Changes since 1.2.18

  • release(langgraph): 1.2.19 (#9504)
  • release(checkpoint-sqlite): 3.1.3 (#9505)
  • fix(langgraph): keep trace_policy from rewriting streamed node payloads (#9486)
  • fix(langgraph): give messages and tools events the namespace of their graph (#9458)
  • chore(deps): bump setuptools from 83.0.0 to 84.1.0 in /libs/langgraph (#9433)
  • fix(langgraph): emit node-output messages from a graph streamed inside a node (#9463)
  • fix(langgraph): respect subgraphs=False in RemoteGraph.stream under a streaming parent (#9453)
  • fix(langgraph): don't report a paused tool as failed on the tools stream (#9406)
  • fix(langgraph): return an awaited @​task's value while streaming (#9407)
  • feat(langgraph): list ToolNode tool names in graph node metadata (#9449)

langgraph==1.2.18

Changes since 1.2.17

  • release(checkpoint): 4.3.1 (#9447)
  • release(langgraph): 1.2.18 (#9445)
  • fix(langgraph): let error_handler recover on every path and stream failed task results (#9408)
  • feat(langgraph): default delta snapshots to 100 updates (#9420). DeltaChannel now takes a full snapshot every 100 updates instead of 1000: faster reads on long threads, more storage. Pass snapshot_frequency=1000 to keep the old behavior.
  • fix(langgraph): stream the last checkpoint of a run stopped by interrupt_after or the recursion limit (#9409)
  • fix(langgraph): stop duplicating tags at every subgraph level (#9400)
  • chore(deps): bump opentelemetry-api from 1.39.1 to 1.45.1 in /libs/langgraph (#9424)
  • chore(deps): bump nbconvert from 7.17.1 to 7.17.2 in /libs/langgraph (#9426)

langgraph==1.2.17

Changes since 1.2.16

  • release(langgraph): 1.2.17 (#9418)
  • fix(langgraph): apply an explicit recursion_limit equal to the default (#9417)
  • fix(langgraph): keep the caller's namespace in RemoteGraph.stream(subgraphs=True) (#9401)
  • chore(deps): remove precautionary third-party upper bounds (#9390)
  • chore(deps): bump certifi from 2026.1.4 to 2026.10.19 in /libs/langgraph (#9375)
  • chore(deps-dev): bump the minor-and-patch group in /libs/prebuilt with 6 updates (#9150)

langgraph==1.2.16

Changes since 1.2.15

  • release(langgraph): 1.2.16 (#9334)
  • fix(langgraph): let other tasks finish when a resume value is invalid (#9265)
  • fix(langgraph): apply a resumed Command's update once (#9322)
  • fix(langgraph): stop a subgraph from rerunning its finished tasks on resume (#9315)
  • fix(langgraph): save a resumed exit run's pending writes once (#9314)
  • release(prebuilt): 1.1.1 (#9316)
  • release(checkpoint-postgres): 3.2.0 (#9313)
  • feat(checkpoint-postgres): add prune to PostgresSaver and AsyncPostgresSaver (#9290)
  • fix(langgraph): keep a DeltaChannel's value when its field changes to a plain reducer (#9302)
  • release(checkpoint-postgres): 3.1.3 (#9287)
  • release(checkpoint-sqlite): 3.1.2 (#9288)

... (truncated)

Commits
  • 5bd231c release(langgraph): 1.2.19 (#9504)
  • 3eaf06c release(checkpoint-sqlite): 3.1.3 (#9505)
  • 6fab323 release(sdk-py): 0.4.11 (#9503)
  • 8d5637b fix(langgraph): keep trace_policy from rewriting streamed node payloads (#9486)
  • 1f0cf81 fix(langgraph): give messages and tools events the namespace of their graph (...
  • 6f2df05 test(sdk-py): check that a reconnect loop resumes after the newest event (#9483)
  • ffc3336 fix(sdk-py): retry runs.wait, join and cancel(wait=True) reconnects with back...
  • 5f4b28a fix(sdk-py): warn when a stream reconnects without a Last-Event-ID (#9482)
  • 5c96bce chore(deps): bump setuptools from 83.0.0 to 84.1.0 in /libs/langgraph (#9433)
  • 2f46bb3 fix(sdk-py): preserve SSE data and cursor state across chunks (#9477)
  • Additional commits viewable in compare view

Updates langchain-core from 1.6.5 to 1.7.4

Release notes

Sourced from langchain-core's releases.

langchain-core==1.7.4

[!WARNING] Python 3.10 support will be dropped in langchain-core 1.8.0 and langchain 1.5.0. The current minor versions are the last to support Python 3.10. Please upgrade to Python 3.11 or later.

Changes since langchain-core==1.7.3

release(core): 1.7.4 (#41635) fix(core): avoid mutating message content in Anthropic translator (#40213)

langchain-core==1.7.3

Changes since langchain-core==1.7.2

release(core): 1.7.3 (#41564)

langchain-core==1.7.2

Changes since langchain-core==1.7.1

release(core): 1.7.2 (#41562) feat(core): add add_notification_metadata and get_notification_metadata (#41540) fix(core): stop merge_content from changing the first message's content (#41502)

langchain-core==1.7.1

Changes since langchain-core==1.7.0

release(core): version 1.7.1 (#41548) fix(core): preserve gateway tracing metadata in v3 streams (#41504) fix(core): escape node metadata in Mermaid labels (#41512) chore(deps): bump the minor-and-patch group across 3 directories with 32 updates (#41465) chore(deps-dev): bump setuptools from 83.0.0 to 84.1.0 in /libs/core (#41442) chore(deps): bump nbconvert from 7.17.1 to 7.17.2 in /libs/core (#41425) chore(infra): relax third-party dependency upper bounds (#41407)

langchain-core==1.7.0

Changes since langchain-core==1.6.13

release(core): 1.7.0 (#41418) feat(core): emit tool-call-delta for streamed tool-call args (#41257)

Notes

  • Tool-call args now stream as tool-call-delta slices instead of block-delta snapshots of the args so far. If you read raw stream events and their block-delta args mid-stream, read tool-call-delta instead. .tool_calls.get() and .output are unchanged. To keep snapshots, pin langchain-core<1.7.
  • Since 1.6.13, iterating ChatModelStream.tool_calls yields each call's new args slice, not a snapshot of the args so far.

langchain-core==1.6.13

Changes since langchain-core==1.6.12

release(core): 1.6.13 (#41397) chore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/core (#41373) feat(core,langchain,standard-tests): read tool-call-delta in stream consumers (#41246)

... (truncated)

Commits
  • e936943 release(anthropic): 1.7.8 (#41638)
  • 4570d3b fix(anthropic): strip index from compaction blocks (#41637)
  • 640f209 release(langchain): 1.4.8 (#41636)
  • 7f91a1b release(core): 1.7.4 (#41635)
  • 3b6dbfb chore(infra): support prefix on release notes (#41634)
  • 7c77783 docs: update OpenWiki (#41602)
  • 6f28e05 fix(core): avoid mutating message content in Anthropic translator (#40213)
  • e26358a chore(model-profiles): refresh model profile data (#41627)
  • aa13e9c chore(deps): bump the minor-and-patch group across 2 directories with 4 updat...
  • 957c8a6 chore(deps): bump vcrpy from 8.3.0 to 8.5.0 in /libs/standard-tests in the ma...
  • Additional commits viewable in compare view

Updates langchain-openai from 1.6.6 to 1.7.3

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.3

Changes since langchain-openai==1.7.2

test(openai): use current lightweight model in integration tests (#41509) release(openai): 1.7.3 (#41506) chore(model-profiles): refresh openai model profile data (#41505) build(infra): patch test-only Pillow without dropping Python 3.10 (#41484) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/openai (#41379) chore(deps): bump certifi from 2025.10.5 to 2026.10.19 in /libs/partners/openai (#41380) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/partners/openai (#41362) chore(model-profiles): refresh model profile data (#41325) chore(deps): bump pytest from 9.0.3 to 9.1.1 in /libs/partners/openai (#41328) chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/openai (#41333) chore(deps): bump requests from 2.33.0 to 2.34.2 in /libs/partners/openai (#41331) chore(deps): bump orjson from 3.11.6 to 3.13.0 in /libs/partners/openai (#41329) fix: fix dependencies in some partner packages (#41266)

langchain-openai==1.7.2

Changes since langchain-openai==1.7.1

release(openai): 1.7.2 (#41245) fix(openai): keep Responses stream items on one block when output_index drifts (#41121)

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

langchain-openai==1.6.7

Changes since langchain-openai==1.6.6

release(openai): 1.6.7 (#40933) chore(model-profiles): refresh model profile data (#40924) test(openai): drop retired completions live tests (#40910) chore(model-profiles): refresh model profile data (#40869) feat(openai): discover Azure workload identity (#40532)

Commits
  • 575db57 test(openai): use current lightweight model in integration tests (#41509)
  • 0d29456 release(openai): 1.7.3 (#41506)
  • 8635846 chore(model-profiles): refresh openai model profile data (#41505)
  • 0c09d02 chore(deps): bump the minor-and-patch group across 3 directories with 32 upda...
  • 621a915 ci(infra): harden release workflow against supply-chain tampering (#41489)
  • b2f6837 docs: update OpenWiki (#41497)
  • 7b8bc18 chore(model-profiles): refresh model profile data (#41494)
  • d57f1ea build(infra): avoid vulnerable filelock releases without dropping compatibili...
  • 2cc234c ci(infra): run matrix regression tests before generating jobs (#41487)
  • 28ec094 build(infra): patch test-only Pillow without dropping Python 3.10 (#41484)
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.15.0 to 2.16.2

Release notes

Sourced from pydantic-settings's releases.

v2.16.1

Highlights

This patch release fixes two CLI regressions introduced in 2.16.0.

Bug fixes

CLI

  • Fixed-length tuple positionals such as CliPositionalArg[tuple[int, int]] and NamedTuples are single-valued again (#1069). Since 2.16.0 they were treated as variadic, so a CLI either refused to start with a SettingsError or put the wrong argument into the tuple. Variable-length tuples (tuple[int, ...] and bare Tuple) are still variadic.
  • A field typed as an alias of a list of dicts, e.g. type ListOfDict = list[dict[str, int]], accepts a JSON list again (#1049). Since 2.16.0, --xx '[{"a":1},{"b":2}]' was merged into the single dict {"a": 1, "b": 2} and failed validation.

What's Changed

Full Changelog: pydantic/pydantic-settings@v2.16.0...v2.16.1

v2.16.0

Highlights

Breaking changes and behavior changes

  • Python 3.10 is no longer supported (#1003). pydantic-settings now requires Python 3.11+, since 3.10 reaches end of life this month. The tomli fallback is gone in favor of stdlib tomllib; the toml extra is kept as an empty extra so pip install pydantic-settings[toml] keeps working.
  • python-dotenv>=1.2.2 is now required (#971) to pick up the fix for CVE-2026-28684.
  • Aliases are ignored in every source when validate_by_alias=False (#1033). Env vars, secrets, CLI flags and defaults now use only field names, matching pydantic. An env var named after the alias is now ignored instead of raising extra_forbidden, and the CLI exposes --apple rather than --pomo.
  • validation_alias takes precedence over alias (#1038). When the two differ, values from JSON/YAML/TOML files and the CLI were silently ignored; they now load. CLI help lists the validation_alias flag first, and CliApp.serialize emits it.
  • CLI case-insensitivity only lowercases registered options (#1036). With case_sensitive=False, args after -- and those captured by CliUnknownArgs keep their case (-Xmx4G no longer becomes -xmx4g). Unrecognized options are now reported as typed (--NOPE instead of --nope).
  • JSON and YAML config files are read as UTF-8 by default (#955) instead of the locale encoding, completing the secrets-file fix from 2.15.0. json_file_encoding/yaml_file_encoding still override it.
  • Discriminated union defaults are partially updated again (#997). This reverts the 2.15.0 regression with nested_model_default_partial_update=True: the default is only dropped when the incoming value selects a different union member.

New features

  • Python 3.15 and pydantic 2.14 support (#1026, #1029, #1022). pydantic 2.14 broke CliApp.run and validate_by_alias=False handling; both are fixed.
  • Cached settings instances via Settings.settings_cached() and Settings.settings_clear_cache() (#952). These give you a process-local singleton per settings class without hand-rolling lru_cache wrappers. Calling the class directly still builds a fresh instance.
  • AWS Systems Manager Parameter Store source — AWSSystemsManagerSettingsSource (#941). It recursively reads every parameter under an ssm_path, with / mapping onto nested models. Install it with the new aws-systems-manager extra.
  • env_file_depth (#940) lets a relative env_file be found in parent directories, mirroring pyproject_toml_depth. This is useful when scripts run from a subdirectory of a monorepo. It defaults to 0, which keeps the current behavior.
  • CliVariadicArg for named variadic options (#949, #958). It accepts --param a b c in addition to repeated --param a --param b. Required fields need at least one value.

Bug fixes

CLI

... (truncated)

Commits
  • 94150a0 Prepare release 2.16.2 (#1111)
  • 9e02de0 Fix JSON decoding of nested dictionary environment values (#1109)
  • 7e2dacb Fix CliApp reconstruction of AliasPath inputs (#1096)
  • 2d1f924 Fix explicit nested secrets directory precedence (#1093)
  • e9588ae Fix regressions from nested dict union value decoding (#1089) (#1097)
  • e71a53e Decode nested dictionary values with complex union types (#1089)
  • 8dc9e05 Resolve only the discriminator annotation of stdlib dataclass defaults (#1077)
  • c50c853 Detect nested Field discriminators in default partial updates (#1076)
  • 9aabb8a build(deps): bump the python-packages group with 3 updates (#1056)
  • 4e286e2 Prepare release 2.16.1 (#1087)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.45.0 to 1.45.2

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

  • opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

  • opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

  • opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

  • opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Commits
  • ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
  • 78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
  • 14971ce Prepare release 1.45.1/0.66b1 (#5752)
  • 44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
  • a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
  • d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
  • db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
  • See full diff in compare view

Updates opentelemetry-instrumentation-httpx from 0.66b0 to 0.66b2

Release notes

Sourced from opentelemetry-instrumentation-httpx's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

No significant changes.

Changelog

Sourced from opentelemetry-instrumentation-httpx's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[!NOTE] The following components are released independently and maintain individual CHANGELOG files. Use this search for a list of all CHANGELOG.md files in this repo.

Version 1.45.1/0.66b1 (2026-10-06)

No significant changes.

Commits

Updates opentelemetry-instrumentation-openai from 0.62.3 to 0.62.4

Release notes

Sourced from opentelemetry-instrumentation-openai's releases.

0.62.4

v0.62.4 (2026-09-29)

Fix

  • groq: record token usage and duration metrics for streaming responses (#4439)
  • mcp: end the session span when Client.aexit is cancelled (#4517)
  • mcp: honor TRACELOOP_TRACE_CONTENT on the client path (#4466)
  • openai: don't crash tracing responses.with_raw_response.create(stream=True) (

…9 updates

Bumps the minor-and-patch group with 19 updates in the /a2a/weather_service directory:

| Package | From | To |
| --- | --- | --- |
| [a2a-sdk](https://github.com/a2aproject/a2a-python) | `1.1.5` | `1.3.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.12` | `1.2.19` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.5` | `1.7.4` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.7.3` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.15.0` | `2.16.2` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.45.0` | `1.45.2` |
| [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.66b0` | `0.66b2` |
| [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry) | `0.62.3` | `0.62.4` |
| [openinference-semantic-conventions](https://github.com/Arize-ai/openinference) | `0.1.39` | `0.1.43` |
| [openinference-instrumentation-langchain](https://github.com/Arize-ai/openinference) | `0.1.76` | `0.1.81` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.32` | `0.0.33` |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.2.0` | `4.3.1` |
| [starlette](https://github.com/Kludex/starlette) | `1.7.0` | `1.10.0` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.4` | `0.6.5` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.3` | `3.14.5` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.62` | `3.2.1` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.1.2` | `1.1.3` |
| [langsmith](https://github.com/langchain-ai/langsmith-python) | `0.14.1` | `0.14.17` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |



Updates `a2a-sdk` from 1.1.5 to 1.3.0
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v1.1.5...v1.3.0)

Updates `langgraph` from 1.2.12 to 1.2.19
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.12...1.2.19)

Updates `langchain-core` from 1.6.5 to 1.7.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.6.5...langchain-core==1.7.4)

Updates `langchain-openai` from 1.6.6 to 1.7.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.6.6...langchain-openai==1.7.3)

Updates `pydantic-settings` from 2.15.0 to 2.16.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.15.0...v2.16.2)

Updates `opentelemetry-exporter-otlp` from 1.45.0 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.0...v1.45.2)

Updates `opentelemetry-instrumentation-httpx` from 0.66b0 to 0.66b2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-openai` from 0.62.3 to 0.62.4
- [Release notes](https://github.com/traceloop/openllmetry/releases)
- [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md)
- [Commits](traceloop/openllmetry@0.62.3...0.62.4)

Updates `openinference-semantic-conventions` from 0.1.39 to 0.1.43
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-semantic-conventions-v0.1.39...python-openinference-semantic-conventions-v0.1.43)

Updates `openinference-instrumentation-langchain` from 0.1.76 to 0.1.81
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-instrumentation-langchain-v0.1.76...python-openinference-instrumentation-langchain-v0.1.81)

Updates `python-multipart` from 0.0.32 to 0.0.33
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.32...0.0.33)

Updates `langgraph-checkpoint` from 4.2.0 to 4.3.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.2.0...checkpoint==4.3.1)

Updates `starlette` from 1.7.0 to 1.10.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.7.0...1.10.0)

Updates `pyasn1` from 0.6.4 to 0.6.5
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.4...v0.6.5)

Updates `aiohttp` from 3.14.3 to 3.14.5

Updates `gitpython` from 3.1.62 to 3.2.1
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst)
- [Commits](gitpython-developers/GitPython@3.1.62...3.2.1)

Updates `langchain-text-splitters` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.2...langchain-text-splitters==1.1.3)

Updates `langsmith` from 0.14.1 to 0.14.17
- [Release notes](https://github.com/langchain-ai/langsmith-python/releases)
- [Changelog](https://github.com/langchain-ai/langsmith-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langsmith-python/commits/v0.14.17)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-instrumentation-httpx
  dependency-version: 0.66b2
  dependency-type: direct:production
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.62.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openinference-semantic-conventions
  dependency-version: 0.1.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.81
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: python-multipart
  dependency-version: 0.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langgraph-checkpoint
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pyasn1
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: gitpython
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.14.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team and pdettori as code owners November 6, 2026 05:18
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

0 participants