Skip to content

chore(deps): Bump the minor-and-patch group in /a2a/weather_service with 12 updates - #949

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-16096c09aa
Open

chore(deps): Bump the minor-and-patch group in /a2a/weather_service with 12 updates#949
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/weather_service/minor-and-patch-16096c09aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /a2a/weather_service with 12 updates:

Package From To
a2a-sdk 1.1.5 1.2.2
langgraph 1.2.12 1.2.13
langchain-core 1.6.5 1.6.6
langchain-openai 1.6.6 1.6.7
opentelemetry-instrumentation-openai 0.62.3 0.62.4
openinference-semantic-conventions 0.1.39 0.1.41
openinference-instrumentation-langchain 0.1.76 0.1.78
aiohttp 3.14.3 3.14.4
gitpython 3.1.62 3.2.0
langchain-text-splitters 1.1.2 1.1.3
langsmith 0.14.1 0.14.4
python-dotenv 1.2.3 1.2.4

Updates a2a-sdk from 1.1.5 to 1.2.2

Release notes

Sourced from a2a-sdk's releases.

v1.2.2

1.2.2 (2026-10-03)

Features

  • allow configuring SSE shutdown grace periods (#1222) (6ff0a82)

Bug Fixes

  • client: handle REST error bodies that are not a google.rpc.Status (#1300) (ee61dc1)
  • compat: keep timestamp and three other fields in v0.3 gRPC conversion (#1277) (fad0482), closes #1276
  • compat: treat an unset v0.3 history_length as unlimited (#1306) (21fe836), closes #1305
  • server: name the task state in terminal-state errors (#1302) (fdca1d0)
  • server: return the stored id when creating a push notification config (#1236) (dac7d9d), closes #1237
  • server: stop printing a traceback to stderr for malformed JSON-RPC bodies (#1301) (5a1a004)

v1.2.1

1.2.1 (2026-09-30)

Bug Fixes

  • server: use keyset cursors for ListTasks page tokens (#1282) (b7cba7c), closes #1280

v1.2.0

1.2.0 (2026-09-29)

Features

  • rest: serve HTTP+JSON responses as application/a2a+json (#1274) (dc5a5da)
  • server: add caching headers to the agent card endpoint (#1272) (83d7f5d)
  • server: add multi-replica cluster mode (#1281) (942d621)
  • server: add opt-in validation of message media types against the agent card (#1269) (8037b24)

Bug Fixes

  • compare in-memory task timestamps numerically (#1233) (0d5473c)
  • server: ignore unrecognized request fields and fix parse-error data shape (#1273) (83f1cf8)
  • server: reject a message whose contextId disagrees with its task (#1270) (c25022f)
  • server: reject terminal-task operations with UnsupportedOperationError (#1268) (6cce91b)
  • server: send PushNotificationConfig.authentication as an Authorization header (#1271) (5751d31), closes #585

Documentation

Changelog

Sourced from a2a-sdk's changelog.

1.2.2 (2026-10-03)

Features

  • allow configuring SSE shutdown grace periods (#1222) (6ff0a82)

Bug Fixes

  • client: handle REST error bodies that are not a google.rpc.Status (#1300) (ee61dc1)
  • compat: keep timestamp and three other fields in v0.3 gRPC conversion (#1277) (fad0482), closes #1276
  • compat: treat an unset v0.3 history_length as unlimited (#1306) (21fe836), closes #1305
  • server: name the task state in terminal-state errors (#1302) (fdca1d0)
  • server: return the stored id when creating a push notification config (#1236) (dac7d9d), closes #1237
  • server: stop printing a traceback to stderr for malformed JSON-RPC bodies (#1301) (5a1a004)

1.2.1 (2026-09-30)

Bug Fixes

  • server: use keyset cursors for ListTasks page tokens (#1282) (b7cba7c), closes #1280

1.2.0 (2026-09-29)

Features

  • rest: serve HTTP+JSON responses as application/a2a+json (#1274) (dc5a5da)
  • server: add caching headers to the agent card endpoint (#1272) (83d7f5d)
  • server: add multi-replica cluster mode (#1281) (942d621)
  • server: add opt-in validation of message media types against the agent card (#1269) (8037b24)

Bug Fixes

  • compare in-memory task timestamps numerically (#1233) (0d5473c)
  • server: ignore unrecognized request fields and fix parse-error data shape (#1273) (83f1cf8)
  • server: reject a message whose contextId disagrees with its task (#1270) (c25022f)
  • server: reject terminal-task operations with UnsupportedOperationError (#1268) (6cce91b)
  • server: send PushNotificationConfig.authentication as an Authorization header (#1271) (5751d31), closes #585

Documentation

Commits
  • 2f9e44a chore(main): release 1.2.2 (#1284)
  • e649325 chore(deps-dev): bump pyjwt from 2.13.0 to 2.15.0 (#1292)
  • 37b6646 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 (#1291)
  • e72db26 chore(deps): bump virtualenv from 21.2.0 to 21.7.13 (#1293)
  • fdca1d0 fix(server): name the task state in terminal-state errors (#1302)
  • 21fe836 fix(compat): treat an unset v0.3 history_length as unlimited (#1306)
  • 6ff0a82 feat: allow configuring SSE shutdown grace periods (#1222)
  • 52030cf test(cluster): only require accepted follow-ups to survive the replica race (...
  • ee61dc1 fix(client): handle REST error bodies that are not a google.rpc.Status (#1300)
  • 5a1a004 fix(server): stop printing a traceback to stderr for malformed JSON-RPC bodie...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.12 to 1.2.13

Release notes

Sourced from langgraph's releases.

langgraph==1.2.13

Changes since 1.2.12

  • fix(langgraph): fork before replaying an update checkpoint the thread moved past (#9170)
  • fix(langgraph): keep an update_state on an older checkpoint out of its other branches (#9165)
  • fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • release(langgraph): 1.2.13 (#9205)
  • fix(langgraph): don't walk history for a DeltaChannel that was never written (#9141)
  • fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8548)
  • chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
  • fix(langgraph): hydrate subgraph delta channels with the caller-resolved saver (#8538)
  • fix(langgraph): stop reporting answered interrupts in get_state (#9103)
  • chore(deps-dev): bump the minor-and-patch group across 1 directory with 5 updates (#9155)
  • chore(deps-dev): bump the minor-and-patch group in /libs/checkpoint-conformance with 2 updates (#9145)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 5 updates (#9149)
  • chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/langgraph (#9160)
  • chore(deps-dev): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/langgraph (#9156)
  • chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/langgraph (#9140)
  • chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/langgraph (#9138)
  • chore(deps): bump pyjwt from 2.14.0 to 2.15.0 in /libs/langgraph (#9139)
  • chore(deps): bump pyjwt from 2.13.0 to 2.14.0 in /libs/langgraph (#9126)
Commits
  • 2d94208 fix(langgraph): fork before replaying an update checkpoint the thread moved p...
  • 456e2b1 fix(langgraph): keep an update_state on an older checkpoint out of its other ...
  • 1b84cb0 fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • 8e15e0d release(langgraph): 1.2.13 (#9205)
  • 524b320 fix(langgraph): don't walk history for a DeltaChannel that was never written ...
  • 9a0394d fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8...
  • 7dc9195 chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
  • 1fd716c chore(deps): bump virtualenv from 21.7.12 to 21.7.13 in /libs/cli (#9167)
  • 3af2631 fix(langgraph): hydrate subgraph delta channels with the caller-resolved save...
  • e6cf9ea fix(langgraph): stop reporting answered interrupts in get_state (#9103)
  • Additional commits viewable in compare view

Updates langchain-core from 1.6.5 to 1.6.6

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.6

Changes since langchain-core==1.6.5

release(core): 1.6.6 (#40906) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) docs(core): fix docstring examples that don't run as copied (#40815)

Commits

Updates langchain-openai from 1.6.6 to 1.6.7

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.7

Changes since langchain-openai==1.6.6

release(openai): 1.6.7 (#40933) chore(model-profiles): refresh model profile data (#40924) test(openai): drop retired completions live tests (#40910) chore(model-profiles): refresh model profile data (#40869) feat(openai): discover Azure workload identity (#40532)

Commits

Updates opentelemetry-instrumentation-openai from 0.62.3 to 0.62.4

Release notes

Sourced from opentelemetry-instrumentation-openai's releases.

0.62.4

v0.62.4 (2026-09-29)

Fix

  • groq: record token usage and duration metrics for streaming responses (#4439)
  • mcp: end the session span when Client.aexit is cancelled (#4517)
  • mcp: honor TRACELOOP_TRACE_CONTENT on the client path (#4466)
  • openai: don't crash tracing responses.with_raw_response.create(stream=True) (#4477)
  • mistralai: record chunked assistant content instead of dropping it (#4478)
  • langchain: keep objects out of association properties (#4467)
  • crewai: stop the dict walk leaking credentials onto spans (#4465)

[main be498301c] bump: version 0.62.3 → 0.62.4 66 files changed, 77 insertions(+), 65 deletions(-)

Changelog

Sourced from opentelemetry-instrumentation-openai's changelog.

v0.62.4 (2026-09-29)

Fix

  • groq: record token usage and duration metrics for streaming responses (#4439)
  • mcp: end the session span when Client.aexit is cancelled (#4517)
  • mcp: honor TRACELOOP_TRACE_CONTENT on the client path (#4466)
  • openai: don't crash tracing responses.with_raw_response.create(stream=True) (#4477)
  • mistralai: record chunked assistant content instead of dropping it (#4478)
  • langchain: keep objects out of association properties (#4467)
  • crewai: stop the dict walk leaking credentials onto spans (#4465)
Commits
  • be49830 bump: version 0.62.3 → 0.62.4
  • 32a2aa8 fix(groq): record token usage and duration metrics for streaming responses (#...
  • 6102f9e fix(mcp): end the session span when Client.aexit is cancelled (#4517)
  • d92433b fix(mcp): honor TRACELOOP_TRACE_CONTENT on the client path (#4466)
  • f7082c8 fix(openai): don't crash tracing responses.with_raw_response.create(stream=Tr...
  • d13e721 fix(mistralai): record chunked assistant content instead of dropping it (#4478)
  • dac2534 fix(langchain): keep objects out of association properties (#4467)
  • 0c7520a fix(crewai): stop the dict walk leaking credentials onto spans (#4465)
  • See full diff in compare view

Updates openinference-semantic-conventions from 0.1.39 to 0.1.41

Release notes

Sourced from openinference-semantic-conventions's releases.

python-openinference-semantic-conventions: v0.1.41

0.1.41 (2026-10-01)

Features

python-openinference-instrumentation-smolagents: v0.1.41

0.1.41 (2026-10-01)

Bug Fixes

  • bump openinference-instrumentation minimum to >=0.1.66 (#3837) (6ec4270)
  • bump openinference-semantic-conventions minimum to >=0.1.39 (#3836) (90c1e28)

python-openinference-semantic-conventions: v0.1.40

0.1.40 (2026-10-01)

Features

Commits
  • 48becd7 chore: release main (#3899)
  • 53b7a0e feat(semconv): add decision model attributes (#3900)
  • 565edea feat(typesafe): trace system_one calls as DECISION spans (#3898)
  • 32714fd chore: release main (#3883)
  • a1f276c feat(semconv): add DECISION span kind (#3825)
  • 6ec4270 fix: bump openinference-instrumentation minimum to >=0.1.66 (#3837)
  • 90c1e28 fix: bump openinference-semantic-conventions minimum to >=0.1.39 (#3836)
  • 08e676b chore: Typecheck Remaining Instrumentors For OTel API 1.45 (#3886)
  • 8f0e355 fix(litellm): record every tool_result block of an anthropic message, not jus...
  • 732eec1 fix(together): keep multimodal input message content on spans (#3843)
  • Additional commits viewable in compare view

Updates openinference-instrumentation-langchain from 0.1.76 to 0.1.78

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.78

0.1.78 (2026-10-01)

Bug Fixes

  • bump openinference-instrumentation minimum to >=0.1.69 (#3911) (ac30a8f)
  • bump openinference-semantic-conventions minimum to >=0.1.41 (#3907) (04fe33f)

python-openinference-instrumentation-langchain: v0.1.77

0.1.77 (2026-10-01)

Bug Fixes

  • bump openinference-instrumentation minimum to >=0.1.66 (#3837) (6ec4270)
  • bump openinference-semantic-conventions minimum to >=0.1.39 (#3836) (90c1e28)
Commits
  • c7f15ec chore: release main (#3915)
  • 802fcb5 feat(typesafe): record System One calls with decision.* semantic conventions ...
  • 04fe33f fix: bump openinference-semantic-conventions minimum to >=0.1.41 (#3907)
  • ac30a8f fix: bump openinference-instrumentation minimum to >=0.1.69 (#3911)
  • 615284b chore: release main (#3910)
  • 0d26a59 feat: add decision span decorators and attribute helpers (JS + Python) (#3897)
  • 48becd7 chore: release main (#3899)
  • 565edea feat(typesafe): trace system_one calls as DECISION spans (#3898)
  • 32714fd chore: release main (#3883)
  • 6ec4270 fix: bump openinference-instrumentation minimum to >=0.1.66 (#3837)
  • Additional commits viewable in compare view

Updates aiohttp from 3.14.3 to 3.14.4
Updates gitpython from 3.1.62 to 3.2.0

Release notes

Sourced from gitpython's releases.

3.2.0 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.62...3.2.0

Commits
  • 6a7180a prepare for next release, v3.2
  • 25a1a69 Merge pull request #2259 from radhika1314/config-option-line-bound
  • a3e1ea4 Merge pull request #2258 from gitpython-developers/sec-audit
  • 1a2117c fix(remote): validate protocols in rendered transport arguments
  • 2235723 fix(config): bound option-line parsing
  • cc02e45 ci: remove codespell checks and configuration
  • f2dfa9f fix(index): confine staging reads to worktree files
  • d1576c4 fix(tree): validate entry names and record boundaries
  • a75aedf fix(index): validate paths at native index boundaries
  • 428d205 fix(repo): validate rendered archive remote options
  • Additional commits viewable in compare view

Updates langchain-text-splitters from 1.1.2 to 1.1.3

Release notes

Sourced from langchain-text-splitters's releases.

langchain-text-splitters==1.1.3

Changes since langchain-text-splitters==1.1.2

release(text-splitters): 1.1.3 (#41001) chore(deps): bump the minor-and-patch group across 3 directories with 4 updates (#40969) chore(deps): bump tornado from 6.5.9 to 6.5.10 in /libs/text-splitters (#40971) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/text-splitters (#40938) chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/text-splitters (#40940) chore(deps): bump anyio from 4.14.2 to 4.15.1 in /libs/text-splitters (#40645) chore(deps): bump anyio from 4.11.0 to 4.14.2 in /libs/text-splitters (#40624) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/text-splitters (#40579) chore(deps): bump the minor-and-patch group across 3 directories with 5 updates (#40566) chore(deps): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/text-splitters (#40568) chore(deps): update lxml requirement from <7.0,>=6.1.2 to >=6.1.3,<7.0 in /libs/text-splitters (#40569) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/text-splitters (#40148) chore(deps): bump the minor-and-patch group across 3 directories with 5 updates (#40085) chore(deps): update lxml requirement from <7.0,>=6.1.0 to >=6.1.2,<7.0 in /libs/text-splitters (#40087) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/text-splitters (#40112) chore: bump the minor-and-patch group across 3 directories with 8 updates (#39863) chore: bump the major group across 2 directories with 2 updates (#39864) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/text-splitters (#39867) fix(text-splitters): raise TypeError for non-dict, non-convertible input to RecursiveJsonSplitter (#39238) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) chore(infra): add missing LICENSE files to publishable packages (#39146) chore: bump jupyterlab from 4.5.9 to 4.5.10 in /libs/text-splitters (#39028) chore: bump setuptools from 80.9.0 to 83.0.0 in /libs/text-splitters (#39029) chore: bump torch from 2.12.1 to 2.13.0 in /libs/text-splitters (#38946) chore: bump soupsieve from 2.8 to 2.8.4 in /libs/text-splitters (#38748) chore: bump nltk from 3.9.4 to 3.10.0 in /libs/text-splitters (#38747) chore: bump mistune from 3.2.1 to 3.3.0 in /libs/text-splitters (#38826) chore(deps): refresh lockfiles (#38746) fix(text-splitters): restore lazy imports for heavy optional dependencies (#35469) feat(text-splitters): replace mypy by ty for type checking (#38658) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump pytest from 9.1.0 to 9.1.1 in /libs/text-splitters (#38299) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/text-splitters (#38296) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/text-splitters (#38301) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175) chore: bump bleach from 6.2.0 to 6.4.0 in /libs/text-splitters (#38195) chore: bump torch from 2.9.1 to 2.12.1 in /libs/text-splitters (#38231) chore: bump pytest from 9.0.3 to 9.1.0 in /libs/text-splitters (#38232) chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/text-splitters (#38250) docs: refresh README installation and resources (#38119) chore: bump tornado from 6.5.5 to 6.5.6 in /libs/text-splitters (#38112) release(core): 1.4.7 (#38111) release(core): 1.4.6 (#38061) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): tighten structured output model fallbacks (#38042) hotfix(core): bump lockfile(s) (#38032) chore(core): fix some any generics (#34545)

... (truncated)

Commits

@dependabot
chore(deps): Bump the minor-and-patch group
350e655 
---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.62.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openinference-semantic-conventions
  dependency-version: 0.1.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.78
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: gitpython
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.14.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Rossoctl Issue Prioritization
Status: New/ToDo

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants