Skip to content

build(deps): bump the python-dependencies group with 11 updates #3408

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 27, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 26, 2025

Updates the requirements on python-dotenv, langchain-openai, langchain-anthropic, langchain-community, langgraph, zhipuai, boto3, tencentcloud-sdk-python, anthropic, dashscope and pypdf to permit the latest version.
Updates python-dotenv to 1.1.1

Release notes

Sourced from python-dotenv's releases.

v1.1.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.1.0...v1.1.1

Changelog

Sourced from python-dotenv's changelog.

[1.1.1] - 2025-06-24

Fixed

[1.1.0] - 2025-03-25

Feature

  • Add support for python 3.13
  • Enhance dotenv run, switch to execvpe for better resource management and signal handling (#523) by [@​eekstunt]

Fixed

  • find_dotenv and load_dotenv now correctly looks up at the current directory when running in debugger or pdb (#553 by [@​randomseed42])

Misc

  • Drop support for Python 3.8

[1.0.1] - 2024-01-23

Fixed

  • Gracefully handle code which has been imported from a zipfile (#456 by [@​samwyma])
  • Allow modules using load_dotenv to be reloaded when launched in a separate thread (#497 by [@​freddyaboulton])
  • Fix file not closed after deletion, handle error in the rewrite function (#469 by [@​Qwerty-133])

Misc

[1.0.0] - 2023-02-24

Fixed

[0.21.1] - 2023-01-21

Added

... (truncated)

Commits

Updates langchain-openai to 0.3.25

Release notes

Sourced from langchain-openai's releases.

langchain-openai==0.3.25

Changes since langchain-openai==0.3.24

openai: release 0.3.25 (#31702) openai[patch]: fix client caching when request_timeout is specified via httpx.Timeout (#31698) openai[patch]: Improve error message when response type is malformed (#31619) openai[patch]: include 'type' key internally when streaming reasoning blocks (#31661)

Commits
  • 6437414 openai: release 0.3.25 (#31702)
  • b268ab6 openai[patch]: fix client caching when request_timeout is specified via httpx...
  • 4ee6112 openai[patch]: Improve error message when response type is malformed (#31619)
  • 9de4f22 langchain[patch]: smith.evaluation.progress.ProgressBarCallback: Make output ...
  • 6105a58 core: fix get_buffer_string output for structured message content (#31600)
  • cf5a442 langchain: release 0.3.26 (#31695)
  • 5015188 Revert "infra: temporarily drop OpenAI from core release test matrix" (#31694)
  • 26030ab infra: temporarily drop OpenAI from core release test matrix (#31693)
  • 5271fd7 core[patch]: check before removing tags (#31691)
  • 39a8a11 core: release 0.3.66 (#31690)
  • Additional commits viewable in compare view

Updates langchain-anthropic to 0.3.16

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==0.3.16

Changes since langchain-anthropic==0.3.15

anthropic: release 0.3.16 (#31744) anthropic[patch]: cache clients (#31659) anthropic[patch]: add benchmark (#31718) docs: document Anthropic cache TTL count details (#31708) anthropic[patch]: cache tokens nit (#31484) infra: relax types-requests version range (#31504)

Commits

Updates langchain-community to 0.3.26

Commits
  • cf5a442 langchain: release 0.3.26 (#31695)
  • 5015188 Revert "infra: temporarily drop OpenAI from core release test matrix" (#31694)
  • 26030ab infra: temporarily drop OpenAI from core release test matrix (#31693)
  • 5271fd7 core[patch]: check before removing tags (#31691)
  • 39a8a11 core: release 0.3.66 (#31690)
  • 4fe490c [Docs] Update deprecated Pydantic .schema() method to .model_json_schema() in...
  • 2c98599 text-splitters: fix stale header metadata in ExperimentalMarkdownSyntaxTextSp...
  • 9d4d258 [Doc] Improve api doc for DeepSeek (#31655)
  • 22e6d90 langchain_mistralai: Include finish_reason in response metadata when parsin...
  • 7ff4050 core[patch]: Returning always 2D Array for _cosine_similarity (#31528)
  • Additional commits viewable in compare view

Updates langgraph to 0.4.10

Release notes

Sourced from langgraph's releases.

0.4.10

Changes since 0.4.9

  • Revert change to default value of checkpoint_during arg (#5177)
  • Revert change to default value of checkpoint_during arg
  • Fix bug where Command(update=) could be ignored if there was a 2nd interrupt after it
  • Reduce extraneous keys in checkpoint.metadata
  • If FuturesDict callback has been GCed, don't call it
  • langgraph 0.5.0rc1
  • langgraph 0.5.0rc0
  • Preparation for 0.5 release: langgraph-checkpoint (#5124)
  • Preparation for 0.5 release
  • Add migration for pending_sends (#5106)
  • Lint
  • Introduce "tasks" and "checkpoints" stream modes
  • Add migration for pending_sends
  • Restore compatibility with custom checkpointer classes created in prior versions
  • Revert "Remove UntrackedValue channel"
  • Revert "Remove MessageGraph (#4875)"
  • fix(langgraph): remove deprecated output usage in favor of output_schema (#5095)
  • refactor(langgraph): Remove PregelNode's inheritance from Runnable (#5093)
  • Remove support for node reading a single managed value
  • PregelLoop: Simplify tick() method (#5080)
  • serialize/deserialize pandas with pickle fallback (#5057)
  • Remove code paths no longer needed
  • Avoid saving checkpoints for subgraphs when checkpoint_during=False (#5051)
  • Remove gitmcp badge (#5055)
  • Update existing
  • Add tests
  • Avoid saving checkpoints for subgraphs when checkpoint_during=False
  • Clean up things for Matt!
  • Support numpy array serialization in JsonPlusSerializer (#5035)
  • Update ormsgpack (#5034)
  • deprecate input and output in favor of input_schema and output_schema (#4983)
  • using StateT as default for InputT
  • lint: use pep 604 union syntax and pep 585 generic syntax (#4963)
  • docs: remove references to StateGraph(dict) (#4964)
  • rename retry -> retry_policy (#4957)
  • Fix step_timeout causing ParentCommand/GraphInterrupt exception to bubble up
  • docs: fix a grammar issue in multiple files (#4935)
  • Make it possible to run test command without docker installed (#4948)
  • Fix async callback manager tag handling (#4949)
  • Pass tags when configuring async callback manager
  • Allow same-name channels and nodes in StateGraph (#4944)
  • Make it possible to run test command without docker installed
  • docs: fix ensure_config docstring
  • Allow same-name channels and nodes in StateGraph
  • Improve type checking on graph init and invoke/stream (#4932)
  • docs: fix a grammar issue in multiple files
  • Fix makefile command file for dev server - pidfile was always empty

... (truncated)

Commits
  • 13d66e0 0.4.10
  • 9fcd0d4 v0.4.x: Forward compatibility with checkpoints without pending_sends (#5199)
  • 4749a16 v0.4.x: Forward compatibility with checkpoints without pending_sends
  • 8f285a7 Add FAQ for nodes executed
  • 98c369a 0.4.9
  • f45ee34 Update cli config doc on pip_installer
  • bd206c2 docs: fix assistants links (#5172)
  • 14ec895 docs: Fix LGP sdk typo (#5170)
  • fb66736 add more docs for lgp deployment metrics (#5168)
  • c354402 If FuturesDict callback has been GCed, don't call it
  • Additional commits viewable in compare view

Updates zhipuai to 2.1.5.20250626

Updates boto3 to 1.38.44

Commits
  • 6fac8a4 Merge branch 'release-1.38.44'
  • 02fd8fa Bumping version to 1.38.44
  • f8c4982 Add changelog entries from botocore
  • c4d1b2e Merge branch 'release-1.38.43'
  • 74b5ec9 Merge branch 'release-1.38.43' into develop
  • 33f36d7 Bumping version to 1.38.43
  • a31afd9 Add changelog entries from botocore
  • 614e6b9 Merge branch 'release-1.38.42'
  • 82ef79a Merge branch 'release-1.38.42' into develop
  • 91202c3 Bumping version to 1.38.42
  • Additional commits viewable in compare view

Updates tencentcloud-sdk-python to 3.0.1410

Changelog

Sourced from tencentcloud-sdk-python's changelog.

Release 3.0.1410

运维安全中心(堡垒机)(bh) 版本:2023-04-18

第 15 次发布

发布时间:2025-06-26 01:04:54

本次发布包含了以下内容:

改善已有的文档。

新增接口:

主机安全(cwp) 版本:2018-02-28

第 148 次发布

发布时间:2025-06-26 01:13:01

本次发布包含了以下内容:

改善已有的文档。

修改接口:

... (truncated)

Commits

Updates anthropic to 0.55.0

Release notes

Sourced from anthropic's releases.

v0.55.0

0.55.0 (2025-06-23)

Full Changelog: v0.54.0...v0.55.0

Features

Bug Fixes

  • client: correctly parse binary response | stream (d93817d)
  • internal: revert unintentional changes (bb3beab)
  • tests: fix: tests which call HTTP endpoints directly with the example parameters (ee69d74)
  • tests: suppress warnings in tests when running on the latest Python versions (#982) (740da21)

Chores

  • ci: enable for pull requests (08f2dd2)
  • internal: update conftest.py (1174a62)
  • internal: version bump (7241eaa)
  • readme: update badges (00661c2)
  • tests: add tests for httpx client instantiation & proxies (b831d88)
  • tests: run tests in parallel (4b24a79)

Documentation

  • client: fix httpx.Timeout documentation reference (b0138b1)
Changelog

Sourced from anthropic's changelog.

0.55.0 (2025-06-23)

Full Changelog: v0.54.0...v0.55.0

Features

Bug Fixes

  • client: correctly parse binary response | stream (d93817d)
  • internal: revert unintentional changes (bb3beab)
  • tests: fix: tests which call HTTP endpoints directly with the example parameters (ee69d74)
  • tests: suppress warnings in tests when running on the latest Python versions (#982) (740da21)

Chores

  • ci: enable for pull requests (08f2dd2)
  • internal: update conftest.py (1174a62)
  • internal: version bump (7241eaa)
  • readme: update badges (00661c2)
  • tests: add tests for httpx client instantiation & proxies (b831d88)
  • tests: run tests in parallel (4b24a79)

Documentation

  • client: fix httpx.Timeout documentation reference (b0138b1)

0.54.0 (2025-06-10)

Full Changelog: v0.53.0...v0.54.0

Features

  • client: add support for fine-grained-tool-streaming-2025-05-14 (07ec081)

Bug Fixes

  • httpx: resolve conflict between default transport and proxy settings (#969) (a6efded)
  • tests: update test (99c2433)

Chores

... (truncated)

Commits
  • 472c51e release: 0.55.0
  • d5af89c fix(tests): suppress warnings in tests when running on the latest Python vers...
  • 3311d58 feat(client): add support for aiohttp
  • f6f5898 docs(client): fix httpx.Timeout documentation reference
  • ad506a2 fix(tests): fix: tests which call HTTP endpoints directly with the example pa...
  • 5e27995 chore(readme): update badges
  • 9cdc361 chore(ci): enable for pull requests
  • d386fad chore(internal): update conftest.py
  • 1b9b4f1 chore(tests): add tests for httpx client instantiation & proxies
  • cdad794 fix(client): correctly parse binary response | stream
  • Additional commits viewable in compare view

Updates dashscope to 1.23.6

Updates pypdf to 5.6.1

Release notes

Sourced from pypdf's releases.

Version 5.6.1, 2025-06-22

What's new

New Features (ENH)

Robustness (ROB)

Developer Experience (DEV)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 5.6.1, 2025-06-22

New Features (ENH)

  • Add PDF/A XMP metadata support (#3314)

Robustness (ROB)

  • Deal with annotations not being lists on merge (#3321)
  • Handle NullObject for cmap encoding Differences entry (#3317)

Developer Experience (DEV)

  • Update ruff to 0.12.0 (#3316)

Full Changelog

Version 5.6.0, 2025-06-01

New Features (ENH)

  • Add basic support for JBIG2 by using jbig2dec (#3163)

Bug Fixes (BUG)

  • Fix crashes by removing unnecessary line (#3293)
  • Add delimiters to NameObject.renumber_table (#3286)

Robustness (ROB)

  • Handle DecodeParms being a NullObject (#3285)

Code Style (STY)

  • Update to mypy 1.16.0 (#3300)

Full Changelog

Version 5.5.0, 2025-05-11

New Features (ENH)

  • Add support for IndirectObject.iter (#3228)
  • Allow filtering by font when removing text (#3216)

Bug Fixes (BUG)

  • Add missing named destinations being ByteStringObjects (#3282)
  • Get font information more reliably when removing text (#3252)
  • T* 2D Translation consistent with PDF 1.7 Spec (#3250)
  • Add font stack to q/Q operations in layout mode (#3225)
  • Avoid completely hiding image loading issues like exceeding image size limits (#3221)
  • Using compress_identical_objects on transformed content duplicates differing content (#3197)
  • Consider BlackIs1 parameter for CCITTFaxDecode filter (#3196)

Robustness (ROB)

  • Deal with insufficient cm matrix during text extraction (#3283)
  • Allow merging when annotations miss D entry (#3281)
  • Fix merging documents if there are no Dests (#3280)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [python-dotenv](https://github.com/theskumar/python-dotenv), [langchain-openai](https://github.com/langchain-ai/langchain), [langchain-anthropic](https://github.com/langchain-ai/langchain), [langchain-community](https://github.com/langchain-ai/langchain), [langgraph](https://github.com/langchain-ai/langgraph), zhipuai, [boto3](https://github.com/boto/boto3), [tencentcloud-sdk-python](https://github.com/TencentCloud/tencentcloud-sdk-python), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [dashscope](https://dashscope.aliyun.com/) and [pypdf](https://github.com/py-pdf/pypdf) to permit the latest version.

Updates `python-dotenv` to 1.1.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.0...v1.1.1)

Updates `langchain-openai` to 0.3.25
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==0.3.24...langchain-openai==0.3.25)

Updates `langchain-anthropic` to 0.3.16
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==0.3.15...langchain-anthropic==0.3.16)

Updates `langchain-community` to 0.3.26
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.25...langchain==0.3.26)

Updates `langgraph` to 0.4.10
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.4.8...0.4.10)

Updates `zhipuai` to 2.1.5.20250626

Updates `boto3` to 1.38.44
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.38.39...1.38.44)

Updates `tencentcloud-sdk-python` to 3.0.1410
- [Changelog](https://github.com/TencentCloud/tencentcloud-sdk-python/blob/master/SERVICE_CHANGELOG.md)
- [Commits](TencentCloud/tencentcloud-sdk-python@3.0.1405...3.0.1410)

Updates `anthropic` to 0.55.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.54.0...v0.55.0)

Updates `dashscope` to 1.23.6

Updates `pypdf` to 5.6.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.6.0...5.6.1)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.1.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: langchain-openai
  dependency-version: 0.3.25
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: langchain-anthropic
  dependency-version: 0.3.16
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: langchain-community
  dependency-version: 0.3.26
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: langgraph
  dependency-version: 0.4.10
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: zhipuai
  dependency-version: 2.1.5.20250626
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.38.44
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: tencentcloud-sdk-python
  dependency-version: 3.0.1410
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 0.55.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: dashscope
  dependency-version: 1.23.6
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pypdf
  dependency-version: 5.6.1
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 26, 2025
Copy link

f2c-ci-robot bot commented Jun 26, 2025

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link

f2c-ci-robot bot commented Jun 26, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@liuruibin liuruibin merged commit 0eeb79a into v2 Jun 27, 2025
0 of 3 checks passed
@liuruibin liuruibin deleted the dependabot/pip/v2/python-dependencies-b2e4add92d branch June 27, 2025 03:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file do-not-merge/release-note-label-needed python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant