build(deps): Bump langchain-core from 1.4.8 to 1.4.9

[dependabot]

Bumps langchain-core from 1.4.8 to 1.4.9.

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

Commits

• 1c3a418 release(core): 1.4.9 (#38728)
• 1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
• a6f0369 chore(qdrant): bump fastembed to latest (#38726)
• fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
• 874bada chore(model-profiles): refresh model profile data (#38712)
• 6e51a7e chore(model-profiles): refresh model profile data (#38699)
• 2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
• b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
• 83386b5 chore(model-profiles): refresh model profile data (#38689)
• 701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bnayahu]

@evaline-ju / @pdettori - this one is more than a routine bump; it's currently the blocker for the Kind E2E on every open kagenti/kagenti PR.

The Deploy & Test job (e2e-kind-pr.yaml) clones kagenti-extensions main at test time and runs pip install -r authbridge/requirements.txt from the AuthBridge weather-agent demo. Since #538 bumped langchain-openai to 1.3.4 (which requires langchain-core>=1.4.9) while langchain-core is still pinned at 1.4.8, the install fails ResolutionImpossible:

The user requested langchain-core==1.4.8
langgraph 1.2.5        depends on langchain-core >=1.4.7,<2
langchain-openai 1.3.4 depends on langchain-core >=1.4.9,<2.0.0

This aborts the "AuthBridge Weather (advanced) E2E" step before any test runs, so it's red on unrelated PRs (including mine, e.g., rossoctl/rossoctl#2171)

This PR alone fixes it - I verified a clean pip resolve with langchain-core==1.4.9 and the existing langchain-openai==1.3.4 / langgraph==1.2.5. #667 (langgraph) and #669 (langchain-openai 1.3.5) aren't required for the fix. All 19 checks here are green; it's just waiting on an approving review. Would appreciate a merge to unblock the E2E gate. 🙏