Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 8 updates - #979

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/generic_agent/minor-and-patch-a56809be8f
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/generic_agent/minor-and-patch-a56809be8f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the /a2a/generic_agent directory:

Package From To
a2a-sdk 1.1.5 1.2.2
langgraph 1.2.12 1.2.15
langchain-core 1.6.5 1.6.10
langchain-openai 1.6.6 1.7.1
openinference-instrumentation-langchain 0.1.76 0.1.79
opentelemetry-exporter-otlp 1.45.0 1.45.1
langsmith 0.14.1 0.14.8
aiohttp 3.14.3 3.14.5

Updates a2a-sdk from 1.1.5 to 1.2.2

Release notes

Sourced from a2a-sdk's releases.

v1.2.2

1.2.2 (2026-10-03)

Features

  • allow configuring SSE shutdown grace periods (#1222) (6ff0a82)

Bug Fixes

  • client: handle REST error bodies that are not a google.rpc.Status (#1300) (ee61dc1)
  • compat: keep timestamp and three other fields in v0.3 gRPC conversion (#1277) (fad0482), closes #1276
  • compat: treat an unset v0.3 history_length as unlimited (#1306) (21fe836), closes #1305
  • server: name the task state in terminal-state errors (#1302) (fdca1d0)
  • server: return the stored id when creating a push notification config (#1236) (dac7d9d), closes #1237
  • server: stop printing a traceback to stderr for malformed JSON-RPC bodies (#1301) (5a1a004)

v1.2.1

1.2.1 (2026-09-30)

Bug Fixes

  • server: use keyset cursors for ListTasks page tokens (#1282) (b7cba7c), closes #1280

v1.2.0

1.2.0 (2026-09-29)

Features

  • rest: serve HTTP+JSON responses as application/a2a+json (#1274) (dc5a5da)
  • server: add caching headers to the agent card endpoint (#1272) (83d7f5d)
  • server: add multi-replica cluster mode (#1281) (942d621)
  • server: add opt-in validation of message media types against the agent card (#1269) (8037b24)

Bug Fixes

  • compare in-memory task timestamps numerically (#1233) (0d5473c)
  • server: ignore unrecognized request fields and fix parse-error data shape (#1273) (83f1cf8)
  • server: reject a message whose contextId disagrees with its task (#1270) (c25022f)
  • server: reject terminal-task operations with UnsupportedOperationError (#1268) (6cce91b)
  • server: send PushNotificationConfig.authentication as an Authorization header (#1271) (5751d31), closes #585

Documentation

Changelog

Sourced from a2a-sdk's changelog.

1.2.2 (2026-10-03)

Features

  • allow configuring SSE shutdown grace periods (#1222) (6ff0a82)

Bug Fixes

  • client: handle REST error bodies that are not a google.rpc.Status (#1300) (ee61dc1)
  • compat: keep timestamp and three other fields in v0.3 gRPC conversion (#1277) (fad0482), closes #1276
  • compat: treat an unset v0.3 history_length as unlimited (#1306) (21fe836), closes #1305
  • server: name the task state in terminal-state errors (#1302) (fdca1d0)
  • server: return the stored id when creating a push notification config (#1236) (dac7d9d), closes #1237
  • server: stop printing a traceback to stderr for malformed JSON-RPC bodies (#1301) (5a1a004)

1.2.1 (2026-09-30)

Bug Fixes

  • server: use keyset cursors for ListTasks page tokens (#1282) (b7cba7c), closes #1280

1.2.0 (2026-09-29)

Features

  • rest: serve HTTP+JSON responses as application/a2a+json (#1274) (dc5a5da)
  • server: add caching headers to the agent card endpoint (#1272) (83d7f5d)
  • server: add multi-replica cluster mode (#1281) (942d621)
  • server: add opt-in validation of message media types against the agent card (#1269) (8037b24)

Bug Fixes

  • compare in-memory task timestamps numerically (#1233) (0d5473c)
  • server: ignore unrecognized request fields and fix parse-error data shape (#1273) (83f1cf8)
  • server: reject a message whose contextId disagrees with its task (#1270) (c25022f)
  • server: reject terminal-task operations with UnsupportedOperationError (#1268) (6cce91b)
  • server: send PushNotificationConfig.authentication as an Authorization header (#1271) (5751d31), closes #585

Documentation

Commits
  • 2f9e44a chore(main): release 1.2.2 (#1284)
  • e649325 chore(deps-dev): bump pyjwt from 2.13.0 to 2.15.0 (#1292)
  • 37b6646 chore(deps): bump urllib3 from 2.7.0 to 2.8.0 (#1291)
  • e72db26 chore(deps): bump virtualenv from 21.2.0 to 21.7.13 (#1293)
  • fdca1d0 fix(server): name the task state in terminal-state errors (#1302)
  • 21fe836 fix(compat): treat an unset v0.3 history_length as unlimited (#1306)
  • 6ff0a82 feat: allow configuring SSE shutdown grace periods (#1222)
  • 52030cf test(cluster): only require accepted follow-ups to survive the replica race (...
  • ee61dc1 fix(client): handle REST error bodies that are not a google.rpc.Status (#1300)
  • 5a1a004 fix(server): stop printing a traceback to stderr for malformed JSON-RPC bodie...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.12 to 1.2.15

Release notes

Sourced from langgraph's releases.

langgraph==1.2.15

Changes since 1.2.14

  • release(langgraph): 1.2.15 (#9283)
  • fix(langgraph): give every message written to a messages DeltaChannel an id (#9275)
  • fix(langgraph): save a cached node's writes like a node that ran (#9259)
  • fix(langgraph): stop at an interrupt_before breakpoint when a drain is requested before it (#9281)
  • fix(langgraph): keep an exit run from a checkpoint the thread moved past out of its newer branch (#9269)
  • fix(langgraph): store an update_state input's writes on the checkpoint it updates (#9258)
  • fix(langgraph): read a run's DeltaChannel input back only on its own checkpoints (#9260)
  • fix(langgraph): snapshot a DeltaChannel that an update_state Overwrite resets (#9263)
  • fix(langgraph): keep a fork's DeltaChannel snapshot from starting nodes that never ran (#9264)
  • fix(langgraph): don't save a checkpoint past a failed DeltaChannel write (#9235)
  • fix(langgraph,prebuilt): stop ToolNode from swallowing invalid resume values (#9232)
  • fix(langgraph): never store exit-mode delta writes under the null task id (#9229)
  • fix(langgraph): stop astream_events dropping control/interrupts on v1/v2 (#9219)
  • chore(deps): bump notebook from 7.5.7 to 7.6.3 in /libs/langgraph (#9206)
  • fix(langgraph): give each bulk_update_state update its own task id (#9128)
  • fix(langgraph): replay a resumed exit-mode run's delta writes in live order (#9114)
  • fix: order delta channel replay by task path (#8544)

langgraph==1.2.14

Changes since 1.2.13

  • release(langgraph): 1.2.14 (#9215)

langgraph==1.2.13

Changes since 1.2.12

  • fix(langgraph): fork before replaying an update checkpoint the thread moved past (#9170)
  • fix(langgraph): keep an update_state on an older checkpoint out of its other branches (#9165)
  • fix(langgraph): keep DeltaChannel counters on every update_state path (#9142)
  • release(langgraph): 1.2.13 (#9205)
  • fix(langgraph): don't walk history for a DeltaChannel that was never written (#9141)
  • fix(langgraph): don't replay an abandoned branch into a DeltaChannel fork (#8548)
  • chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/langgraph (#9168)
  • fix(langgraph): hydrate subgraph delta channels with the caller-resolved saver (#8538)
  • fix(langgraph): stop reporting answered interrupts in get_state (#9103)
  • chore(deps-dev): bump the minor-and-patch group across 1 directory with 5 updates (#9155)
  • chore(deps-dev): bump the minor-and-patch group in /libs/checkpoint-conformance with 2 updates (#9145)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 5 updates (#9149)
  • chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/langgraph (#9160)
  • chore(deps-dev): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/langgraph (#9156)
  • chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/langgraph (#9140)
  • chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/langgraph (#9138)
  • chore(deps): bump pyjwt from 2.14.0 to 2.15.0 in /libs/langgraph (#9139)
  • chore(deps): bump pyjwt from 2.13.0 to 2.14.0 in /libs/langgraph (#9126)
Commits
  • 08a3456 release(langgraph): 1.2.15 (#9283)
  • b7d053b fix(langgraph): give every message written to a messages DeltaChannel an id (...
  • 395c145 fix(langgraph): save a cached node's writes like a node that ran (#9259)
  • 10f1fab fix(langgraph): stop at an interrupt_before breakpoint when a drain is reques...
  • 799c2f0 fix(langgraph): keep an exit run from a checkpoint the thread moved past out ...
  • b4991f1 fix(langgraph): store an update_state input's writes on the checkpoint it upd...
  • 6aa0afb fix(checkpoint): default InMemorySaver delta history to the latest checkpoint...
  • 12aeb0f fix(langgraph): read a run's DeltaChannel input back only on its own checkpoi...
  • d05236f fix(langgraph): snapshot a DeltaChannel that an update_state Overwrite resets...
  • 9d92f33 fix(langgraph): keep a fork's DeltaChannel snapshot from starting nodes that ...
  • Additional commits viewable in compare view

Updates langchain-core from 1.6.5 to 1.6.10

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.10

Changes since langchain-core==1.6.9

release(core): 1.6.10 (#41220) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-core==1.6.9

Changes since langchain-core==1.6.8

release(core): 1.6.9 (#41160) feat(core): accept a callable in with_retry (#41158)

langchain-core==1.6.8

Changes since langchain-core==1.6.7

release(core): 1.6.8 (#41153) fix(core): harden scoped and compatible IPv6 SSRF checks (#41151)

langchain-core==1.6.7

Changes since langchain-core==1.6.6

release(core): 1.6.7 (#41087) fix(core): include openai redacted_content in v1 output for bedrock converse (#41086) fix(core): python 3.14 hardening around inspect.signature (#41059) chore(deps): bump notebook from 7.5.7 to 7.6.3 in /libs/core (#41057) chore(deps): bump notebook from 7.5.6 to 7.5.7 in /libs/core (#40992) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/core (#40972) chore(deps): bump tornado from 6.5.8 to 6.5.9 in /libs/core (#40970)

langchain-core==1.6.6

Changes since langchain-core==1.6.5

release(core): 1.6.6 (#40906) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) docs(core): fix docstring examples that don't run as copied (#40815)

Commits

Updates langchain-openai from 1.6.6 to 1.7.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

langchain-openai==1.6.7

Changes since langchain-openai==1.6.6

release(openai): 1.6.7 (#40933) chore(model-profiles): refresh model profile data (#40924) test(openai): drop retired completions live tests (#40910) chore(model-profiles): refresh model profile data (#40869) feat(openai): discover Azure workload identity (#40532)

Commits

Updates openinference-instrumentation-langchain from 0.1.76 to 0.1.79

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.79

0.1.79 (2026-10-09)

Bug Fixes

  • bump openinference-instrumentation minimum to >=0.1.71 (#3975) (3fbad7d)
Commits
  • 453da0e chore: release main (#3979)
  • d69ab8e fix(google-genai): apply base64_image_max_length to output.value (#3974)
  • 197f7e7 feat(llama_index): Add Finish Reason Attribute (#3986)
  • 12f2cc0 fix(mistralai): end the LLM span when a stream is closed, abandoned, or used ...
  • b625e5c chore(deps): update opentelemetry-sdk requirement from >=1.20.0 to >=1.45.0 i...
  • 3fbad7d fix: bump openinference-instrumentation minimum to >=0.1.71 (#3975)
  • 35e9efd chore: release main (#3976)
  • 29d97da fix(cohere): end LLM span when stream is abandoned or closed early (#3784) (#...
  • dde040f fix(google-adk): forward ADK 2.x invoke_workflow and invoke_node spans (#3846)
  • be777f6 fix(bedrock): record every toolResult block of a Converse message (#3787)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.45.0 to 1.45.1

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Commits
  • 14971ce Prepare release 1.45.1/0.66b1 (#5752)
  • 44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
  • a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
  • d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
  • db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
  • See full diff in compare view

Updates langsmith from 0.14.1 to 0.14.8

Release notes

Sourced from langsmith's releases.

v0.14.8

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.14.7...v0.14.8

v0.14.7

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.14.6...v0.14.7

v0.14.6

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.14.5...v0.14.6

v0.14.5

What's Changed

... (truncated)

Commits
  • 19d5241 release(py): 0.14.8 (#3721)
  • 16d7c72 feat(sandbox): customer-managed KMS keys for S3 mounts (Python) (#3713)
  • 6c2d02f feat(sandbox): accept any JOSE asymmetric algorithm chosen by the JWKS key (p...
  • bedd023 fix(py): make the /runs/multipart 404 fallback to /runs/batch reachable (#3716)
  • 30e5f70 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /js (#3688)
  • 84a1dc0 fix: keep punctuation out of freeze guard links (#3707)
  • df30808 fix(py): send session_id on RunTree.patch (#3675)
  • 15468f9 release(py): 0.14.7 (#3705)
  • 6258882 fix: normalize sandbox API endpoint prefixes (#3683)
  • 2d42851 release(py): 0.14.6 (#3704)
  • Additional commits viewable in compare view

Updates aiohttp from 3.14.3 to 3.14.5

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.6.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.14.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team and pdettori as code owners October 16, 2026 05:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: New/ToDo

Development

Successfully merging this pull request may close these issues.

1 participant