Repository navigation
chore(deps-dev): bump the langchain group across 1 directory with 2 updates - #2003
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
I reviewed this lockfile bump and didn't find any bugs. The langchain bump also pulls the dev environment's openai from 2.29.0 to 3.26.0, a major version, so a human should confirm the OpenAI integration tests still pass before merging.
What was reviewed:
- The openai jump from 2.x to 3.x (now built on httpx2, with distro and tqdm dropped). langfuse/openai.py imports private openai modules (
_types,_constants,_legacy_response,_response) and has version-gated resource patching, so it is the code most likely to break. - httpx 0.x is still locked, so the SDK's own httpx-based code paths are unaffected.
- In the
[options]block, uv rewrote the absolute exclude-newer timestamps to the0001-01-01placeholder. It kept the P7D/P3D spans, which matchexclude-newer = "7 days"in pyproject.toml.
Extended reasoning...
Only uv.lock changes. It bumps langchain-core and langchain-openai, and through them openai goes up a major version, from 2.29.0 to 3.26.0, and new packages are added (httpx2, httpcore2, truststore, langchain-protocol). No auth, crypto or data-handling code changes, but the SDK's OpenAI wrapper in langfuse/openai.py relies on private openai internals and version checks, which a major upgrade can break. pyproject.toml allows openai>=1.0.0 without an upper bound, so nothing stops the v3 resolution. That compatibility risk is why this should be deferred rather than approved.
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
6 times, most recently
from
October 23, 2026 14:24
50e35a4 to
9078dbb
Compare
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
5 times, most recently
from
November 2, 2026 06:01
bd53748 to
1cc3d7f
Compare
…pdates Bumps the langchain group with 2 updates in the / directory: [langchain-core](https://github.com/langchain-ai/langchain) and [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-core` from 1.2.22 to 1.7.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.22...langchain-core==1.7.0) Updates `langchain-openai` from 1.1.12 to 1.7.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.7.3) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/langchain-7a0a862fad
branch
from
November 3, 2026 05:54
1cc3d7f to
ab5494c
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the langchain group with 2 updates in the / directory: langchain-core and langchain-openai.
Updates
langchain-corefrom 1.2.22 to 1.7.0Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
f4e6cderelease(core): 1.7.0 (#41418)1013180docs: update OpenWiki (#41416)64ecb6achore(model-profiles): refresh model profile data (#41415)b84fa61feat(core): emittool-call-deltafor streamed tool-call args (#41257)6908e67chore(deps): bump uv to 0.13.5 (#41408)8eff3b3docs: update OpenWiki (#41356)45dae8cchore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/openai (#41...150d2cbchore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/huggingface...de1cc39chore(deps): bump setuptools from 84.2.0 to 84.2.1 in /libs/partners/huggingf...fbb8a35chore(langchain): update lockfile (#41402)Updates
langchain-openaifrom 1.1.12 to 1.7.3Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
575db57test(openai): use current lightweight model in integration tests (#41509)0d29456release(openai): 1.7.3 (#41506)8635846chore(model-profiles): refresh openai model profile data (#41505)0c09d02chore(deps): bump the minor-and-patch group across 3 directories with 32 upda...621a915ci(infra): harden release workflow against supply-chain tampering (#41489)b2f6837docs: update OpenWiki (#41497)7b8bc18chore(model-profiles): refresh model profile data (#41494)d57f1eabuild(infra): avoid vulnerable filelock releases without dropping compatibili...2cc234cci(infra): run matrix regression tests before generating jobs (#41487)28ec094build(infra): patch test-only Pillow without dropping Python 3.10 (#41484)