build(deps): update python-json-logger requirement from >=2.0 to >=4.1.0 in /services

[dependabot]

Updates the requirements on python-json-logger to permit the latest version.

Release notes

Sourced from python-json-logger's releases.

4.1.0

4.1.0 - 2026-03-29

Added

• Add support for Python 3.14, PyPy 3.11

Removed

• Remove support for Python 3.8, 3.9 (includes PyPy versions).

Changelog

Sourced from python-json-logger's changelog.

4.1.0 - 2026-03-29

Added

• Add support for Python 3.14, PyPy 3.11

Removed

• Remove support for Python 3.8, 3.9 (includes PyPy versions).

4.0.0 - 2025-10-06

Added

• Support DictConfigurator prefixes for rename_fields and static_fields. #45
  • Allows using values like ext://sys.stderr in fileConfig/dictConfig value fields.
• Support comma separated lists for Formatter fmt (style=",") e.g. "asctime,message,levelname" #15
  • Note that this style is specific to python-json-logger and thus care should be taken not to pass this format to other logging Formatter implementations.
• Supports sequences of strings (e.g. lists and tuples) of field names for Formatter fmt. #16

Changed

• Rename pythonjsonlogger.core.LogRecord and log_record arguments to avoid confusion / overlapping with logging.LogRecord. #38
  • Affects arguments to pythonjsonlogger.core.BaseJsonFormatter (and any child classes).
    • serialize_log_record
    • add_fields
    • jsonify_log_record
    • process_log_record
  • Note: functions referring to log_record have not had their function name changed.

Removed

• Remove support for providing strings instead of objects when instantiating formatters. Instead use the DictConfigurator ext:// prefix format when using fileConfig/dictConfig. #47
  • Affects pythonjsonlogger.json.JsonFormatter: json_default, json_encoder, json_serializer.
  • Affects pythonjsonlogger.orjson.OrjsonFormatter: json_default.
  • Affects pythonjsonlogger.msgspec.MsgspecFormatter: json_default.

Thanks @​rubensa

3.3.0 - 2025-03-06

Added

• exc_info_as_array and stack_info_as_array options are added to pythonjsonlogger.core.BaseJsonFormatter allowing both to be encoded as list of lines instead of a single multi-line string. #35

Security

• Remove msgspec-python313-pre from dev dependencies preventing potential RCE. Details: GHSA-wmxh-pxcx-9w24

Thanks @​1hakusai1 and @​omnigodz

3.2.1 - 2024-12-16

Fixed

• Import error on import pythonjsonlogger.jsonlogger #29

... (truncated)

Commits

• d80c68d Release v4.1.0
• b589b2a [pyproject] Update license table to PEP 639 format
• 2bb784a Update code unlocked by Python 3.10 minimum version
• 79599b5 Drop python 3.8, 3.9 support
• 622650c [docs.contributing] Update unsupported JSON encoders
• 06165bb [tests.test_formatters] Add non-printable bytes to test_common_types_encoded
• 61f88a9 [docs.contributing] Clarify which packages have been considered and rejected
• 0add524 [docs.contributing] Clarify when we will add support for new third-party pack...
• eee9505 [pylint] Remove old command
• 8045926 [mypy] Don't ignore orjson
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[letuhao]

Combines exactly what #206 (composition-service), #207 (knowledge-service), #213 (lore-enrichment-service) and #215 (worker-ai) already cover individually, same version (python-json-logger >=2.0 -> >=4.1.0, a MAJOR jump). Closing this one in favor of the four per-service PRs so this gets reviewed per-service rather than bundled.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.