Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
dependabot[bot] wants to merge 1 commit into
Conversation
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
2671f2c to
bb09ab8
Compare
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.6.10 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.6.10) Updates `langchain-openai` from 1.1.12 to 1.7.1 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.1) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
bb09ab8 to
35b8675
Compare
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.6.10Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
fddca06release(core): 1.6.10 (#41220)e4b1437chore(model-profiles): refresh model profile data (#41145)b060a74feat(core,anthropic,openai): declare mid-conversation support in model profil...34489d6release(langchain): 1.4.4 (#41163)e7ca68bfix(langchain): (SummarizationMiddleware) retry summary step on context overf...fc7dc77release(core): 1.6.9 (#41160)a055e83feat(core): accept a callable in with_retry (#41158)2baf2f3release(openai): 1.7.0 (#41154)4acca64release(core): 1.6.8 (#41153)b53209bfeat(openai): support decisions api (#41125)Updates
langchain-openaifrom 1.1.12 to 1.7.1Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
85e0b7drelease(openai): 1.7.1 (#41222)fddca06release(core): 1.6.10 (#41220)e4b1437chore(model-profiles): refresh model profile data (#41145)b060a74feat(core,anthropic,openai): declare mid-conversation support in model profil...34489d6release(langchain): 1.4.4 (#41163)e7ca68bfix(langchain): (SummarizationMiddleware) retry summary step on context overf...fc7dc77release(core): 1.6.9 (#41160)a055e83feat(core): accept a callable in with_retry (#41158)2baf2f3release(openai): 1.7.0 (#41154)4acca64release(core): 1.6.8 (#41153)