Skip to content

deps(ai-backend)(deps): bump the ai-backend-minor-patch group across 1 directory with 19 updates - #668

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/ai-backend/dev/ai-backend-minor-patch-113bd5f8cb
Closed

deps(ai-backend)(deps): bump the ai-backend-minor-patch group across 1 directory with 19 updates#668
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/ai-backend/dev/ai-backend-minor-patch-113bd5f8cb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the ai-backend-minor-patch group with 19 updates in the /services/ai-backend directory:

Package From To
deepagents 0.7.4 0.7.19
ddgs 9.14.4 9.16.0
langchain 1.3.14 1.4.2
langchain-openai 1.4.1 1.6.6
langchain-anthropic 1.5.4 1.7.4
langchain-google-genai 4.3.2 4.4.0
litellm 1.95.0 1.102.1
langgraph 1.2.10 1.2.12
pydantic 2.13.4 2.13.5
pydantic-settings 2.14.2 2.15.0
python-dotenv 1.2.2 1.2.3
uvicorn 0.52.1 0.54.0
gunicorn 26.0.0 26.2.0
opentelemetry-api 1.44.0 1.45.0
opentelemetry-sdk 1.44.0 1.45.0
opentelemetry-exporter-otlp-proto-grpc 1.44.0 1.45.0
opentelemetry-instrumentation-fastapi 0.65b0 0.66b0
opentelemetry-instrumentation-httpx 0.65b0 0.66b0
wheel 0.47.0 0.48.0

Updates deepagents from 0.7.4 to 0.7.19

Release notes

Sourced from deepagents's releases.

deepagents==0.7.19

Bug Fixes

  • Recover when read_file media is rejected.
  • Filter unsupported multimodal content through separate middleware.
  • Bound tool offload paths and abbreviate long IDs.

Special thanks to everyone who reported the issues addressed in this release: @​mdrxy (#3864), @​zhe-code85 (#5544)

Internal maintainers: @​ccurme

Released by: @​ccurme

This commit history includes changes to this package. Commits are listed newest first.

  • bb49cf5 release(deepagents): 0.7.19 (#6523)
  • 802140c fix(sdk): recover from rejected read_file media (#6515)
  • 737621b fix(sdk): use separate middleware for filtering unsupported multimodal content (#6366)
  • 123f9c3 chore(deps): raise dependency minimums for all (#6535)
  • ca5f0e5 fix(sdk): bound tool offload paths and abbreviate long IDs (#6519)

deepagents==0.7.18

Bug Fixes

  • Large tool result previews now more clearly explain when output was clipped or truncated, including byte-cap losses, per-line clipping, and showing truncation notices only when truncation occurs. Legacy large-result preview templates are preserved behind a deprecation path. (#5567, #5564, #5563, #5568)
  • Task tool calls now reject unknown argument keys instead of silently dropping unexpected input. (#6299)
  • Correct FileInfo.size to represent the file size in bytes across backends. (#6258)

Thanks to our community contributors: @​burakeyler, @​eknathmali

Special thanks to everyone who reported the issues addressed in this release: @​BogdanSliskovic (#6286), @​eknathmali (#6042)

Internal maintainers: @​mdrxy

Released by: @​mdrxy

This commit history includes changes to this package. Commits are listed newest first.

... (truncated)

Commits
  • bb49cf5 release(deepagents): 0.7.19 (#6523)
  • 802140c fix(sdk): recover from rejected read_file media (#6515)
  • 737621b fix(sdk): use separate middleware for filtering unsupported multimodal conten...
  • e801fa1 release(deepagents-code): 0.1.76 (#6538)
  • 8d599c9 fix(code): keep empty MCP servers searchable and match descriptions (#6540)
  • d9defc1 feat(code): label plugin servers in the MCP viewer (#6539)
  • 123f9c3 chore(deps): raise dependency minimums for all (#6535)
  • ae00358 fix(code): resolve plugin MCP servers for login (#6524)
  • 74d768b fix(talon): store offloaded artifacts in the assistant home (#6530)
  • 4d02307 docs(repo): update OpenWiki (#6531)
  • Additional commits viewable in compare view

Updates ddgs from 9.14.4 to 9.16.0

Release notes

Sourced from ddgs's releases.

v9.16.0

Full Changelog: deedy5/ddgs@v9.15.0...v9.16.0

v9.15.0

What's Changed

Full Changelog: deedy5/ddgs@v9.14.4...v9.15.0

Commits
  • 70a5635 chore(release): bump version to 9.16.0
  • 9f517bc fix(engines): update DuckDuckgo
  • 3ea6cbc fix(engines): update and enable Google
  • 173ccbd chore(release): bump version to 9.15.0
  • a770102 feat(mcp): migrate to mcp 2.0
  • f4ba66c fix(engines): disable Google, Yandex
  • a12929a refactor(ddgs): improve extract performance
  • a97a4fc feat: remove dht
  • See full diff in compare view

Updates langchain from 1.3.14 to 1.4.2

Release notes

Sourced from langchain's releases.

langchain-openai==1.4.2

Changes since langchain-openai==1.4.1

release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050)

langchain==1.4.2

Changes since langchain==1.4.1

release(langchain): 1.4.2 (#40621) fix(langchain): preserve model-generated tool calls in HITL tool call edits and add notice to ToolMessage (#40463)

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-perplexity==1.4.1

Changes since langchain-perplexity==1.4.0

release(perplexity): 1.4.1 (#39826) fix(perplexity): include type="message" on Responses input items (#39774) fix(perplexity): preserve caller extra_body (#39203) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/perplexity (#38991) chore(deps): refresh lockfiles (#38746) fix(perplexity): use supported Responses API model (#38337) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/perplexity (#38290) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/perplexity (#38289) docs: refresh README installation and resources (#38119) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) chore(partners): bump locks (#38052)

langchain==1.4.1

Changes since langchain==1.4.0

release(langchain): 1.4.1 (#40498) fix(langchain): preserve open MCP object arguments (#40414)

... (truncated)

Commits
  • a18de59 release(langchain): 1.4.2 (#40621)
  • 5bf6a15 fix(langchain): preserve model-generated tool calls in HITL tool call edits a...
  • a893bbd chore(model-profiles): refresh model profile data (#40600)
  • fd4f161 chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/text-splitters (#40579)
  • 3b81e02 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/chroma (#40582)
  • fa369c9 chore(deps): bump langsmith from 0.12.1 to 0.12.6 in /libs/partners/chroma (#...
  • eb544d3 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/fireworks (#4...
  • 5e8888f chore(deps): bump filelock from 3.32.5 to 4.0.0 in /libs/partners/chroma (#40...
  • a62361a chore(deps): bump langsmith from 0.12.1 to 0.12.6 in /libs/partners/fireworks...
  • e2d39c4 chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/fireworks ...
  • Additional commits viewable in compare view

Updates langchain-openai from 1.4.1 to 1.6.6

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.6

Changes since langchain-openai==1.6.5

release(openai): 1.6.6 (#40800) fix(openai): raise on error events in stream path (#40791)

langchain-openai==1.6.5

Changes since langchain-openai==1.6.4

release(openai): 1.6.5 (#40787) fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785) feat(anthropic,openai): mid-conversation tool changes on SystemMessage (#40758)

langchain-openai==1.6.4

Changes since langchain-openai==1.6.3

release(openai): 1.6.4 (#40775) chore(model-profiles): refresh openai model profile data (#40774)

langchain-openai==1.6.3

Changes since langchain-openai==1.6.2

release(openai): 1.6.3 (#40719) fix(openai): expose inferred Responses API routing at initialization (#40715) chore(deps): bump anyio from 4.11.0 to 4.14.2 in /libs/partners/openai (#40629) fix(openai): support GPT-6 request constraints (#40443)

langchain-openai==1.6.2

Changes since langchain-openai==1.6.1

release(openai): 1.6.2 (#40339) fix(openai): add GPT-6 Astra reasoning efforts (#40330) chore(deps): bump httpx2 from 2.10.0 to 2.12.0 in /libs/partners/openai (#40309)

langchain-openai==1.6.1

Changes since langchain-openai==1.6.0

fix(openai): bump max_completion_tokens in cache breakpoint integration test (#40284) release(openai): 1.6.1 (#40268) chore(model-profiles): refresh model profile data (#40217) fix(openai): support Azure AD auth with OpenAI 3.8 (#40190) feat(openai): support async tools (#40208) feat(openai): support configuration_update (#40201) chore(model-profiles): refresh model profile data (#40171) fix(openai): route gpt-5.6-sol to responses API (#40133) chore(openai): fix tests (#39972) fix(openai): correct reasoning_effort_levels for gpt-5 and gpt-5.1 profiles (#39936) chore(model-profiles): refresh model profile data (#39954)

langchain-openai==1.6.0

... (truncated)

Commits
  • 7622d3d release(openai): 1.6.6 (#40800)
  • 2dd956b docs(infra): fix AGENTS.md root setup guidance and package doc accuracy (#40794)
  • 49f4b40 fix(openai): raise on error events in stream path (#40791)
  • 19cadaa fix(core): abbreviate long tool IDs in XML buffer strings (#40792)
  • 798441e chore(anthropic): fix integration test cassette (#40790)
  • a476942 release(openai): 1.6.5 (#40787)
  • 46c6bdf release(anthropic): 1.7.4 (#40786)
  • 290daba fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785)
  • 59baeb2 feat(anthropic,openai): mid-conversation tool changes on SystemMessage (#40...
  • 4b65996 chore(model-profiles): refresh model profile data (#40780)
  • Additional commits viewable in compare view

Updates langchain-anthropic from 1.5.4 to 1.7.4

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.7.4

Changes since langchain-anthropic==1.7.3

chore(anthropic): fix integration test cassette (#40790) release(anthropic): 1.7.4 (#40786) fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785) feat(anthropic,openai): mid-conversation tool changes on SystemMessage (#40758)

langchain-anthropic==1.7.3

Changes since langchain-anthropic==1.7.2

release(anthropic): 1.7.3 (#40773) chore(model-profiles): refresh anthropic model profile data (#40772) fix(anthropic): auto-route with_structured_output to method="json_schema" for fable and opus 5.5 (#40766) chore(anthropic): update docs for Opus 5.5 (#40765) feat(anthropic): send mid-conversation SystemMessages in place (#40622) chore(deps): bump anyio from 4.11.0 to 4.14.2 in /libs/partners/anthropic (#40643)

langchain-anthropic==1.7.2

Changes since langchain-anthropic==1.7.1

release(anthropic): 1.7.2 (#40387) fix(anthropic): preserve invalid tool use blocks (#40372)

langchain-anthropic==1.7.1

Changes since langchain-anthropic==1.7.0

release(anthropic): 1.7.1 (#40181) perf(anthropic,langchain): omit middleware trace inputs (#40098) feat(anthropic): add Claude Fable 5.1 support (#40106)

langchain-anthropic==1.7.0

Changes since langchain-anthropic==1.6.1

release(anthropic): 1.7.0 (#39963) feat(anthropic): support top-level param for skills via container; updates thinking display mode (#39962) feat(anthropic): support 1.0 sdk (#39938) fix(anthropic): auto-append advisor-tool-2026-03-01 beta header for advisor_20260301 tool (#39917) feat(anthropic): surface gateway response metadata (#39809)

langchain-anthropic==1.6.1

Changes since langchain-anthropic==1.6.0

release(anthropic): 1.6.1 (#39804) fix(anthropic): filter invalid tool calls from v1 content (#39803)

langchain-anthropic==1.6.0

Changes since langchain-anthropic==1.5.6

release(anthropic): 1.6.0 (#39763)

... (truncated)

Commits

Updates langchain-google-genai from 4.3.2 to 4.4.0

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.4.0

Changes since libs/genai/v4.3.7

release(genai): 4.4.0 (#1989) feat(genai): support agentic video understanding (#1988)

langchain-google-genai==4.3.7

Changes since libs/genai/v4.3.6

release(genai): 4.3.7 (#1977) fix(genai): apply distinct indexes to repeated block types (#1974) chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /libs/genai (#1917) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969) fix(genai): remove __del__ that closes a potentially shared client (#1963) fix(genai): send skip_thought_signature_validator as a literal string (#1972) test(genai): failing test for DUMMY_THOUGHT_SIGNATURE rejection (#1971) fix(genai): drop foreign-provider reasoning blocks (#1970)

langchain-google-genai==4.3.6

Changes since libs/genai/v4.3.5

release(genai): 4.3.6 (#1968) fix(genai): preserve text and reasoning content for AIMessages with tool calls in _parse_chat_history (#1967) chore(model-profiles): refresh model profile data (#1956)

langchain-google-genai==4.3.5

Changes since libs/genai/v4.3.4

release(genai): 4.3.5 (#1955) feat(genai): support standard chat model exception types (#1952)

langchain-google-genai==4.3.4

Changes since libs/genai/v4.3.3

release(genai): 4.3.4 (#1946) chore(model-profiles): refresh model profile data (#1906) chore(genai): update tests for LangSmith gateway (#1944)

langchain-google-genai==4.3.3

Changes since libs/genai/v4.3.2

release(genai): 4.3.3 (#1936) fix: normalize empty AI content for Vertex (#1935) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/genai (#1918) chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)

Commits
  • d38d42f release(genai): 4.4.0 (#1989)
  • e52ace7 feat(genai): support agentic video understanding (#1988)
  • 3d9e491 release(genai): 4.3.7 (#1977)
  • df0901b fix(genai): apply distinct indexes to repeated block types (#1974)
  • 9bd41b7 chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /...
  • fcbb0d7 chore: bump the major group in /libs/community with 3 updates (#1920)
  • 71a17cf chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969)
  • a6206c3 fix(vertexai): bump pyarrow dependency (#1962)
  • d530f2f fix(genai): remove __del__ that closes a potentially shared client (#1963)
  • bd39818 fix(genai): send skip_thought_signature_validator as a literal string (#1972)
  • Additional commits viewable in compare view

Updates litellm from 1.95.0 to 1.102.1

Release notes

Sourced from litellm's releases.

v1.102.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.102.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.102.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.102.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

Full Changelog: BerriAI/litellm@v1.102.0...v1.102.1

v1.102.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

... (truncated)

Commits
  • d09bbae Merge pull request #42618 from BerriAI/litellm_backport_stable_1_102_x_realti...
  • 188c9d1 Merge pull request #42595 from BerriAI/litellm_cherrypick_1_102_x
  • d1cd2dc chore(backport): regenerate the openapi snapshot and dashboard api types for ...
  • 5aa45f1 test(realtime): drop legacy InvalidStatusCode tests and pin websockets imports
  • 4bfac88 fix(ui): adapt the jev dashboard pieces to stable/1.102.x
  • da246e9 chore(deps): bump anyio to 4.14.2 and soupsieve to 2.9.0
  • 9a46f1f Merge pull request #41462 from BerriAI/litellm_otel_promote_nested_request_me...
  • 96e7739 fix(realtime): surface an upstream handshake refusal as an error event and po...
  • d068734 feat(openrouter): price typesafe/jev-1.13 and add an openrouter decisions pas...
  • e20cfbe feat(auto-router): add JEV classifier alongside LLM classifier
  • Additional commits viewable in compare view

Updates langgraph from 1.2.10 to 1.2.12

Release notes

Sourced from langgraph's releases.

langgraph==1.2.12

Changes since 1.2.11

  • release(langgraph): 1.2.12 (#8987)
  • chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/langgraph (#8958)
  • feat(langgraph): add response_schema to interrupt() (#8886)
  • fix(langgraph): type undeclared v3 stream projections (#8596)
  • chore(langgraph): bump mistune to 3.3.4 (#8804)
  • chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8779)
  • chore(deps): bump the minor-and-patch group across 1 directory with 4 updates (#8782)
  • chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/langgraph (#8792)
  • chore(deps): bump the major group in /libs/langgraph with 2 updates (#8783)
  • fix(langgraph): detect subgraphs from bytecode instead of source (#8569)

langgraph==1.2.11

Changes since 1.2.10

  • release(langgraph): 1.2.11 (#8595)
  • feat(langgraph): expose trace_policy on add_node (#8523)
  • chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8533)
  • chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
  • release(checkpoint-postgres): 3.1.2 (#8565)
  • release(checkpoint): 4.2.0 (#8563)
  • fix(checkpoint): collect writes at plain-value seed in delta channel history (#8526)
  • chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
  • chore: enable RUF100 and clear unused noqa directives (#8546)
  • chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/langgraph (#8502)
  • chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /libs/langgraph (#8528)
  • release(checkpoint-sqlite): 3.1.1 (#8481)
  • release(checkpoint-postgres): 3.1.1 (#8480)
Commits
  • 49cce0c release(sdk-py): 0.4.5 (#8988)
  • 19273fa release(langgraph): 1.2.12 (#8987)
  • ed384f3 fix(cli): remediate AnyIO vulnerabilities in example lockfiles (#9022)
  • aa742fb chore(deps): bump anyio from 4.14.2 to 4.15.1 in /libs/sdk-py (#8997)
  • b58044a chore(deps): bump anyio from 4.13.0 to 4.14.2 in /libs/cli (#8998)
  • daa514a chore(deps): bump anyio from 4.13.0 to 4.14.2 in /libs/checkpoint-conformance...
  • 022043a chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/checkpoint (#8995)
  • d7b99cc chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/sdk-py (#8994)
  • b19edd7 chore(deps): bump anyio from 4.12.1 to 4.14.2 in /libs/checkpoint-sqlite (#8993)
  • c81c135 chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/langgraph (#8958)
  • Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (

@dependabot
deps(ai-backend)(deps): bump the ai-backend-minor-patch group across …
b2191dd 
…1 directory with 19 updates

Bumps the ai-backend-minor-patch group with 19 updates in the /services/ai-backend directory:

| Package | From | To |
| --- | --- | --- |
| [deepagents](https://github.com/langchain-ai/deepagents) | `0.7.4` | `0.7.19` |
| [ddgs](https://github.com/deedy5/ddgs) | `9.14.4` | `9.16.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.3.14` | `1.4.2` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.4.1` | `1.6.6` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.5.4` | `1.7.4` |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.3.2` | `4.4.0` |
| [litellm](https://github.com/BerriAI/litellm) | `1.95.0` | `1.102.1` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.10` | `1.2.12` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.54.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` |
| [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.65b0` | `0.66b0` |
| [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.65b0` | `0.66b0` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |



Updates `deepagents` from 0.7.4 to 0.7.19
- [Release notes](https://github.com/langchain-ai/deepagents/releases)
- [Commits](langchain-ai/deepagents@deepagents==0.7.4...deepagents==0.7.19)

Updates `ddgs` from 9.14.4 to 9.16.0
- [Release notes](https://github.com/deedy5/ddgs/releases)
- [Commits](deedy5/ddgs@v9.14.4...v9.16.0)

Updates `langchain` from 1.3.14 to 1.4.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.3.14...langchain==1.4.2)

Updates `langchain-openai` from 1.4.1 to 1.6.6
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.4.1...langchain-openai==1.6.6)

Updates `langchain-anthropic` from 1.5.4 to 1.7.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.5.4...langchain-anthropic==1.7.4)

Updates `langchain-google-genai` from 4.3.2 to 4.4.0
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.3.2...libs/genai/v4.4.0)

Updates `litellm` from 1.95.0 to 1.102.1
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.95.0...v1.102.1)

Updates `langgraph` from 1.2.10 to 1.2.12
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.10...1.2.12)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `uvicorn` from 0.52.1 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.1...0.54.0)

Updates `gunicorn` from 26.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@26.0.0...26.2.0)

Updates `opentelemetry-api` from 1.44.0 to 1.45.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0)

Updates `opentelemetry-sdk` from 1.44.0 to 1.45.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.44.0 to 1.45.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0)

Updates `opentelemetry-instrumentation-fastapi` from 0.65b0 to 0.66b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-httpx` from 0.65b0 to 0.66b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

---
updated-dependencies:
- dependency-name: deepagents
  dependency-version: 0.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: ddgs
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-openai
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-anthropic
  dependency-version: 1.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-google-genai
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: litellm
  dependency-version: 1.102.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langgraph
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: uvicorn
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: opentelemetry-api
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: opentelemetry-sdk
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.66b0
  dependency-type: direct:production
  dependency-group: ai-backend-minor-patch
- dependency-name: opentelemetry-instrumentation-httpx
  dependency-version: 0.66b0
  dependency-type: direct:production
  dependency-group: ai-backend-minor-patch
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ai-backend, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 5, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/services/ai-backend/dev/ai-backend-minor-patch-113bd5f8cb branch October 5, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@0x-copilot-dev 0x-copilot-dev Awaiting requested review from 0x-copilot-dev 0x-copilot-dev is a code owner
@parthpahwa1 parthpahwa1 Awaiting requested review from parthpahwa1 parthpahwa1 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants