Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
6 times, most recently
from
October 23, 2026 14:24
50e35a4 to
9078dbb
Compare
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
from
October 27, 2026 05:54
9078dbb to
f5cc8da
Compare
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.6.12 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.6.12) Updates `langchain-openai` from 1.1.12 to 1.7.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.2) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
from
October 28, 2026 05:54
f5cc8da to
dc1a9fa
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.6.12Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
bd5b134release(core): 1.6.12 (#41277)b7b942afix(core): propagate extras on content-block-start events (#41272)f37ca68docs: update OpenWiki (#40925)011507echore(deps): bump mcp from 2.1.1 to 2.2.0 in /libs/langchain_v1 (#41270)738dff9chore(model-profiles): refresh model profile data (#41265)3bf004cfix: fix dependencies in some partner packages (#41266)c088db9release(core): 1.6.11 (#41260)8d4838ffeat(core): accept address inside LangChainTracer (#41006)7185be5chore(model-profiles): refresh model profile data (#41253)84ba23crelease(langchain): 1.4.6 (#41247)Updates
langchain-openaifrom 1.1.12 to 1.7.2Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
170060erelease(openai): 1.7.2 (#41245)4bbbc5afix(openai): keep Responses stream items on one block when output_index drift...8ace87echore(model-profiles): refresh model profile data (#41229)f2bf626release(langchain): 1.4.5 (#41226)a0074fbfeat(langchain): acceptsummarizerinSummarizationMiddleware(#41225)36fb6aarelease(anthropic): 1.7.6 (#41221)ba2bacachore(model-profiles): refresh model profile data (#41215)85e0b7drelease(openai): 1.7.1 (#41222)fddca06release(core): 1.6.10 (#41220)e4b1437chore(model-profiles): refresh model profile data (#41145)