From b2191dd31e25297c91c83cb04002f0efacb6a992 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 13:57:26 +0000 Subject: [PATCH] deps(ai-backend)(deps): bump the ai-backend-minor-patch group across 1 directory with 19 updates Bumps the ai-backend-minor-patch group with 19 updates in the /services/ai-backend directory: | Package | From | To | | --- | --- | --- | | [deepagents](https://github.com/langchain-ai/deepagents) | `0.7.4` | `0.7.19` | | [ddgs](https://github.com/deedy5/ddgs) | `9.14.4` | `9.16.0` | | [langchain](https://github.com/langchain-ai/langchain) | `1.3.14` | `1.4.2` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.4.1` | `1.6.6` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.5.4` | `1.7.4` | | [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.3.2` | `4.4.0` | | [litellm](https://github.com/BerriAI/litellm) | `1.95.0` | `1.102.1` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.10` | `1.2.12` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.54.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.65b0` | `0.66b0` | | [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.65b0` | `0.66b0` | | [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` | Updates `deepagents` from 0.7.4 to 0.7.19 - [Release notes](https://github.com/langchain-ai/deepagents/releases) - [Commits](https://github.com/langchain-ai/deepagents/compare/deepagents==0.7.4...deepagents==0.7.19) Updates `ddgs` from 9.14.4 to 9.16.0 - [Release notes](https://github.com/deedy5/ddgs/releases) - [Commits](https://github.com/deedy5/ddgs/compare/v9.14.4...v9.16.0) Updates `langchain` from 1.3.14 to 1.4.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](https://github.com/langchain-ai/langchain/compare/langchain==1.3.14...langchain==1.4.2) Updates `langchain-openai` from 1.4.1 to 1.6.6 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](https://github.com/langchain-ai/langchain/compare/langchain-openai==1.4.1...langchain-openai==1.6.6) Updates `langchain-anthropic` from 1.5.4 to 1.7.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](https://github.com/langchain-ai/langchain/compare/langchain-anthropic==1.5.4...langchain-anthropic==1.7.4) Updates `langchain-google-genai` from 4.3.2 to 4.4.0 - [Release notes](https://github.com/langchain-ai/langchain-google/releases) - [Commits](https://github.com/langchain-ai/langchain-google/compare/libs/genai/v4.3.2...libs/genai/v4.4.0) Updates `litellm` from 1.95.0 to 1.102.1 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](https://github.com/BerriAI/litellm/compare/v1.95.0...v1.102.1) Updates `langgraph` from 1.2.10 to 1.2.12 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](https://github.com/langchain-ai/langgraph/compare/1.2.10...1.2.12) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.13.5) Updates `pydantic-settings` from 2.14.2 to 2.15.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.2...v2.15.0) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3) Updates `uvicorn` from 0.52.1 to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.52.1...0.54.0) Updates `gunicorn` from 26.0.0 to 26.2.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.2.0) Updates `opentelemetry-api` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0) Updates `opentelemetry-sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0) Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0) Updates `opentelemetry-instrumentation-fastapi` from 0.65b0 to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-httpx` from 0.65b0 to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `wheel` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](https://github.com/pypa/wheel/compare/0.47.0...0.48.0) --- updated-dependencies: - dependency-name: deepagents dependency-version: 0.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-backend-minor-patch - dependency-name: ddgs dependency-version: 9.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: langchain dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: langchain-openai dependency-version: 1.6.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: langchain-anthropic dependency-version: 1.7.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: langchain-google-genai dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: litellm dependency-version: 1.102.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: langgraph dependency-version: 1.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-backend-minor-patch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-backend-minor-patch - dependency-name: pydantic-settings dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-backend-minor-patch - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: gunicorn dependency-version: 26.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: opentelemetry-api dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: opentelemetry-sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: opentelemetry-exporter-otlp-proto-grpc dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch - dependency-name: opentelemetry-instrumentation-fastapi dependency-version: 0.66b0 dependency-type: direct:production dependency-group: ai-backend-minor-patch - dependency-name: opentelemetry-instrumentation-httpx dependency-version: 0.66b0 dependency-type: direct:production dependency-group: ai-backend-minor-patch - dependency-name: wheel dependency-version: 0.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ai-backend-minor-patch ... Signed-off-by: dependabot[bot] --- services/ai-backend/pyproject.toml | 40 ++++++++++++++--------------- services/ai-backend/requirements.in | 36 +++++++++++++------------- 2 files changed, 38 insertions(+), 38 deletions(-) diff --git a/services/ai-backend/pyproject.toml b/services/ai-backend/pyproject.toml index 340bb3b5b..f94de5260 100644 --- a/services/ai-backend/pyproject.toml +++ b/services/ai-backend/pyproject.toml @@ -1,5 +1,5 @@ [build-system] -requires = ["setuptools==83.0.0", "wheel==0.47.0"] +requires = ["setuptools==83.0.0", "wheel==0.48.0"] build-backend = "setuptools.build_meta" [project] @@ -8,42 +8,42 @@ version = "0.1.0" description = "Agent runtime foundation for the enterprise work surface" requires-python = ">=3.13" dependencies = [ - "deepagents==0.7.4", - "ddgs==9.14.4", + "deepagents==0.7.19", + "ddgs==9.16.0", "fastapi==0.141.1", - "langchain==1.3.14", - "langchain-openai==1.4.1", - "langchain-anthropic==1.5.4", - "langchain-google-genai==4.3.2", - "litellm==1.95.0", - "langgraph==1.2.10", + "langchain==1.4.2", + "langchain-openai==1.6.6", + "langchain-anthropic==1.7.4", + "langchain-google-genai==4.4.0", + "litellm==1.102.1", + "langgraph==1.2.12", # Upstream authority for provider model metadata, pricing, and preflight # token counting. Desktop packages it into the prebuilt runtime; it is never # replaced by a locally-maintained per-model catalog. - "litellm==1.95.0", + "litellm==1.102.1", # SQLite-backed LangGraph checkpointer for the single_user_desktop file store # (durable graph/approval continuation across worker restart). Desktop path # only; the in-memory backend keeps InMemorySaver. Pulls in aiosqlite. "langgraph-checkpoint-sqlite==3.1.1", "openai==2.53.0", "anthropic==0.120.2", - "pydantic==2.13.4", - "pydantic-settings==2.14.2", - "python-dotenv==1.2.2", + "pydantic==2.13.5", + "pydantic-settings==2.15.0", + "python-dotenv==1.2.3", "python-multipart==0.0.32", - "uvicorn==0.52.1", - "gunicorn==26.0.0", + "uvicorn==0.54.0", + "gunicorn==26.2.0", "httpx==0.28.1", # Retry/backoff for transient tool failures (agent_runtime.capabilities # .retrying_tool). Already resolved transitively via langchain-core; declared # here because it is now imported directly. Pin matches requirements.txt. "tenacity==9.1.4", "pyyaml==6.0.3", - "opentelemetry-api==1.44.0", - "opentelemetry-sdk==1.44.0", - "opentelemetry-exporter-otlp-proto-grpc==1.44.0", - "opentelemetry-instrumentation-fastapi==0.65b0", - "opentelemetry-instrumentation-httpx==0.65b0", + "opentelemetry-api==1.45.0", + "opentelemetry-sdk==1.45.0", + "opentelemetry-exporter-otlp-proto-grpc==1.45.0", + "opentelemetry-instrumentation-fastapi==0.66b0", + "opentelemetry-instrumentation-httpx==0.66b0", ] [project.optional-dependencies] diff --git a/services/ai-backend/requirements.in b/services/ai-backend/requirements.in index 0df5050d7..d1610b43e 100644 --- a/services/ai-backend/requirements.in +++ b/services/ai-backend/requirements.in @@ -22,22 +22,22 @@ fastapi==0.141.1 # `from starlette import status` is used directly across runtime_api/ and # runtime_adapters/. FastAPI happens to require it; the import is still ours. starlette==1.4.1 -uvicorn==0.52.1 -gunicorn==26.0.0 +uvicorn==0.54.0 +gunicorn==26.2.0 httpx==0.28.1 python-multipart==0.0.32 -pydantic==2.13.4 -pydantic-settings==2.14.2 -python-dotenv==1.2.2 +pydantic==2.13.5 +pydantic-settings==2.15.0 +python-dotenv==1.2.3 PyYAML==6.0.3 # -- agent runtime ------------------------------------------------------------ -deepagents==0.7.4 -langchain==1.3.14 -langchain-openai==1.4.1 -langchain-anthropic==1.5.4 -langchain-google-genai==4.3.2 -langgraph==1.2.10 +deepagents==0.7.19 +langchain==1.4.2 +langchain-openai==1.6.6 +langchain-anthropic==1.7.4 +langchain-google-genai==4.4.0 +langgraph==1.2.12 # SQLite-backed LangGraph checkpointer for the single_user_desktop file store # (durable graph/approval continuation across worker restart). Desktop path # only; postgres/in-memory keep InMemorySaver. @@ -55,8 +55,8 @@ openai==2.53.0 anthropic==0.120.2 # Upstream authority for provider model metadata, pricing, and preflight token # counting. Never replaced by a locally-maintained per-model catalog. -litellm==1.95.0 -ddgs==9.14.4 +litellm==1.102.1 +ddgs==9.16.0 # Main-content extraction for `web_search` (PRD local-search-extraction, S1). # Search gives us four URLs; this turns each page into the article text a # snippet-anchored window can be cut from. Without it the whole extraction path @@ -73,11 +73,11 @@ cryptography==50.0.0 wcmatch==11.0 # -- telemetry ---------------------------------------------------------------- -opentelemetry-api==1.44.0 -opentelemetry-sdk==1.44.0 -opentelemetry-exporter-otlp-proto-grpc==1.44.0 -opentelemetry-instrumentation-fastapi==0.65b0 -opentelemetry-instrumentation-httpx==0.65b0 +opentelemetry-api==1.45.0 +opentelemetry-sdk==1.45.0 +opentelemetry-exporter-otlp-proto-grpc==1.45.0 +opentelemetry-instrumentation-fastapi==0.66b0 +opentelemetry-instrumentation-httpx==0.66b0 # Deliberately ABSENT — boto3. `persistence/_aws_kms_client.py` imports it # lazily so a deployment that does not use AWS KMS never carries the SDK; one