Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
6 times, most recently
from
October 23, 2026 14:24
50e35a4 to
9078dbb
Compare
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
6 times, most recently
from
November 3, 2026 05:54
1cc3d7f to
ab5494c
Compare
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
3 times, most recently
from
November 11, 2026 05:54
8b8413b to
4432daf
Compare
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.7.6 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.7.6) Updates `langchain-openai` from 1.1.12 to 1.7.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.4) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
from
November 13, 2026 05:54
4432daf to
e0460b1
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.7.6Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
b4aa7e7release(core): 1.7.6 (#41698)df8fd17perf(core): merge streamedAIMessageChunks once when accumulating runnable ...7d72af0perf(core): stopparse_partial_jsonfrom retrying one character at a time (...6869934fix(fireworks): report streamed token usage once (#41693)d3b3a8dfix(langchain): omit trace inputs fromModelRefusalMiddleware(#41689)15306e3fix(infra): use publishedlangchainin min-version release check (#41691)1f032fdrelease(fireworks): 1.7.2 (#41690)9d57278fix(fireworks): report the served model in response metadata (#41686)d1d95b7release(langchain): 1.4.9 (#41684)bbcdd56release(anthropic): 1.7.10 (#41685)Updates
langchain-openaifrom 1.1.12 to 1.7.4Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
16a08bdrelease(openai): 1.7.4 (#41683)d5a9cd5chore(deps): requirelangchain-core>=1.7.5for refusal handling (#41682)504fd5cchore(model-profiles): refresh model profile data (#41669)aa2528ffeat(typesafe): accept aclassifierin experimental middleware (#41657)49b9dfbrelease(core): 1.7.5 (#41665)f1ca47afeat(core): translate Gemini safety blocks to refusal content blocks (#41658)4a9d4dafix(infra): pin optional deps in min-version release checks (#41661)67f17dbfix(core): end tool run on cancellation (#41660)0cc6e7crelease(typesafe): 0.0.1 (#41650)ddd7303feat(core): standardize model refusal content blocks (#41582)