Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 8 updates#742

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-9dd22f4565
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 8 updates#742
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-9dd22f4565

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the /a2a/weather_service directory:

Package From To
a2a-sdk 1.1.0 1.1.2
langchain-core 1.4.9 1.5.1
langchain-openai 1.3.5 1.4.1
opentelemetry-exporter-otlp 1.43.0 1.44.0
aiohttp 3.14.1 3.14.3
gitpython 3.1.51 3.1.55
langsmith 0.10.3 0.10.10

Updates a2a-sdk from 1.1.0 to 1.1.2

Release notes

Sourced from a2a-sdk's releases.

v1.1.2

1.1.2 (2026-07-20)

Features

  • server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

  • agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
  • persist early producer failure as FAILED with originating message (#1106) (4e3d724)

v1.1.1

1.1.1 (2026-07-15)

Bug Fixes

  • server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

  • grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
  • http: eliminate httpx-sse dependency (#1132) (0d82ab9)
Changelog

Sourced from a2a-sdk's changelog.

1.1.2 (2026-07-20)

Features

  • server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

  • agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
  • persist early producer failure as FAILED with originating message (#1106) (4e3d724)

1.1.1 (2026-07-15)

Bug Fixes

  • server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

  • grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
  • http: eliminate httpx-sse dependency (#1132) (0d82ab9)
Commits
  • 3e6fa6a chore(main): release 1.1.2 (#1139)
  • 9801f46 feat(server): add aclose() to drain ActiveTask background tasks (#1101) (#1105)
  • d19c4d2 fix(agent_execution): resolve ActiveTask 'destroyed but pending' warning duri...
  • 4e3d724 fix: persist early producer failure as FAILED with originating message (#1106)
  • 86c6b0d chore(main): release 1.1.1 (#1103)
  • 0d82ab9 refactor(http): eliminate third-party httpx-sse dependency (#1132)
  • 723880e refactor(grpc): remove grpcio-status dependency (#1130)
  • 343373b test: expand itk scenarios with ts java and rust agents (#1129)
  • e7eafe3 chore(deps): bump cryptography from 48.0.0 to 48.0.1 (#1109)
  • 46b292b fix(server): improve Swagger /docs example annotations for A2A routes (#1092)
  • Additional commits viewable in compare view

Updates langchain-core from 1.4.9 to 1.5.1

Release notes

Sourced from langchain-core's releases.

langchain-core==1.5.1

Changes since langchain-core==1.5.0

release(core): 1.5.1 (#39042) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(core): use tool_call_schema cache for BaseTool token counting in count_tokens_approximately (#39020)

langchain-core==1.5.0

Changes since langchain-core==1.4.9

release(core): 1.5.0 (#38978) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore: bump soupsieve from 2.8 to 2.8.4 in /libs/core (#38750) chore: bump mistune from 3.2.1 to 3.3.0 in /libs/core (#38783)

Commits
  • eb705ca release(core): 1.5.1 (#39042)
  • d35a4ef feat(anthropic,fireworks,openai): support langsmith gateway through env var (...
  • 64f5ebf chore(model-profiles): refresh model profile data (#39036)
  • 6a97222 fix(core): use tool_call_schema cache for BaseTool token counting in `cou...
  • 1e385eb release(openrouter): 0.2.7 (#39022)
  • 50e9126 fix(anthropic): enable structured output for Claude Opus 4.8 (#39021)
  • 339fcf3 chore(model-profiles): refresh model profile data (#39010)
  • 592055e fix(openai): correct gpt-5.3-chat-latest profile (#39009)
  • 789c6ab release(xai): 1.3.0 (#38984)
  • 8ccd16a release(anthropic): 1.5.0 (#38985)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.3.5 to 1.4.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

Commits

Updates opentelemetry-exporter-otlp from 1.43.0 to 1.44.0

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits
  • 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
  • d9f34e7 Fixup eachdist.py handling of package names (#5417)
  • d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
  • ae8feeb Update otelbot token workflows to use client IDs (#5404)
  • 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
  • 87baad9 Bump semconv to 1.42.0 (#5410)
  • 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
  • bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
  • 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
  • 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
  • Additional commits viewable in compare view

Updates opentelemetry-instrumentation-httpx from 0.64b0 to 0.65b0

Changelog

Sourced from opentelemetry-instrumentation-httpx's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • Add opentelemetry-instrumentation-structlog instrumentation package and shared log_utils helpers for emitting structlog events as OpenTelemetry logs. (#4286)
  • opentelemetry-instrumentation-celery: add use_span_links option to link task execution spans to producer spans instead of creating parent-child relationships (#4537)
  • opentelemetry-instrumentation-aws-lambda: add SQS context propagation support (#4668)
  • opentelemetry-instrumentation-httpx: add support for httpx2 (#4730)
  • opentelemetry-instrumentation-tortoiseorm: Implement database semantic convention stability migration support through OTEL_SEMCONV_STABILITY_OPT_IN (#4731)
  • opentelemetry-instrumentation-asyncpg: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4733)
  • opentelemetry-instrumentation-pymemcache: add database semconv stability migration support (#4739)
  • opentelemetry-instrumentation-cassandra: add semconv stability migration support (#4747)
  • opentelemetry-instrumentation-pymongo: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4772)
  • opentelemetry-instrumentation-aiopg: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4820)

Changed

  • opentelemetry-instrumentation-urllib3: remove multiple calls to sanitize_method (#4718)

Removed

  • opentelemetry-instrumentation-elasticsearch: drop the package since all supported elasticsearch versions have a native OTel instrumentation (#4759)

Fixed

... (truncated)

Commits

Updates aiohttp from 3.14.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.


3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates gitpython from 3.1.51 to 3.1.55

Release notes

Sourced from gitpython's releases.

3.1.55 - SECURITY

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

3.1.54 - SECURITY

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

3.1.52 Security

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

Commits
  • 681c82c prepare release
  • e227e01 Merge pull request #2181 from gitpython-developers/fix-env-var-exfiltration
  • 8634174 fix: prevent environment expansion in remote URLs
  • e59d9ba prepare next release
  • a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
  • 1d51b89 fix: guard diff output options
  • ffcb535 fix: reject unsafe clone templates
  • e8d0fbf fix: validate split short-option values
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • Additional commits viewable in compare view

Updates langsmith from 0.10.3 to 0.10.10

Release notes

Sourced from langsmith's releases.

v0.10.10

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.10.9...v0.10.10

v0.10.9

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.10.8...v0.10.9

v0.10.8

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.10.7...v0.10.8

v0.10.7

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.10.6...v0.10.7

v0.10.6

What's Changed

... (truncated)

Commits
  • caf1ccc release(py): Bump version: 0.10.9 → 0.10.10 (#3258)
  • 0872227 fix: add session_id and start_time to feedback generated from evaluat… (#3249)
  • 7ee59a6 feat: require project in get_run_stats / getRunStats (#3250)
  • a771ed7 ci(py): remove test_feedback_formula_crud_flow integration test after endpoin...
  • b310221 fix(py): merge sandbox request headers case-insensitively (#3244)
  • ab76a6b js: only check min backend version on stainless resource access (#3245)
  • 33995e1 release(py): Bump version: 0.10.8 → 0.10.9 (#3237)
  • 59cc9ce feat(py/strands): improved tracing of thinking and tool result blocks from St...
  • 5df5ef1 fix(python): exclude internal signing env vars from trace metadata (#3235)
  • 152228b release(py): Bump version: 0.10.7 → 0.10.8 (#3234)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 7 updates in the /a2a/weather_service directory:

| Package | From | To |
| --- | --- | --- |
| [a2a-sdk](https://github.com/a2aproject/a2a-python) | `1.1.0` | `1.1.2` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.9` | `1.5.1` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.3.5` | `1.4.1` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.1` | `3.14.3` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.51` | `3.1.55` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.10.3` | `0.10.10` |



Updates `a2a-sdk` from 1.1.0 to 1.1.2
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v1.1.0...v1.1.2)

Updates `langchain-core` from 1.4.9 to 1.5.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.9...langchain-core==1.5.1)

Updates `langchain-openai` from 1.3.5 to 1.4.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.3.5...langchain-openai==1.4.1)

Updates `opentelemetry-exporter-otlp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-instrumentation-httpx` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `aiohttp` from 3.14.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/v3.14.3/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3)

Updates `gitpython` from 3.1.51 to 3.1.55
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.51...3.1.55)

Updates `langsmith` from 0.10.3 to 0.10.10
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.10.3...v0.10.10)

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-instrumentation-httpx
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: minor-and-patch
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: gitpython
  dependency-version: 3.1.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.10.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant