Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 13 updates - #816

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-8a3c276145
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 13 updates#816
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-8a3c276145

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates in the /a2a/a2a_currency_converter directory:

Package From To
langchain-google-genai 4.2.7 4.3.4
langgraph 1.2.9 1.2.11
python-dotenv 1.2.2 1.2.3
uvicorn 0.51.0 0.52.3
langchain-openai 1.3.4 1.5.1
pydantic-settings 2.14.2 2.15.0
openinference-instrumentation-langchain 0.1.67 0.1.70
opentelemetry-exporter-otlp 1.43.0 1.44.0
starlette 1.3.1 1.6.0
langgraph-checkpoint 4.1.1 4.2.0
orjson 3.11.9 3.12.0
langsmith 0.10.1 0.11.0

Updates langchain-google-genai from 4.2.7 to 4.3.4

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.3.4

Changes since libs/genai/v4.3.3

release(genai): 4.3.4 (#1946) chore(model-profiles): refresh model profile data (#1906) chore(genai): update tests for LangSmith gateway (#1944)

langchain-google-genai==4.3.3

Changes since libs/genai/v4.3.2

release(genai): 4.3.3 (#1936) fix: normalize empty AI content for Vertex (#1935) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/genai (#1918) chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)

langchain-google-genai==4.3.2

Changes since libs/genai/v4.3.1

release(genai): 4.3.2 (#1911) feat(genai): support langsmith gateway through env var (#1907) chore: bump pyasn1 from 0.6.3 to 0.6.4 in /libs/genai (#1901)

langchain-google-genai==4.3.1

Changes since libs/genai/v4.3.0

release(genai): 4.3.1 (#1900) fix(genai): align reasoning effort profiles with Gemini docs (#1899)

langchain-google-genai==4.3.0

Changes since libs/genai/v4.2.7

fix(genai): handle request rules for new Gemini models (#1897) chore(model-profiles): refresh model profile data (#1879) release(genai): 4.3.0 (#1896) feat(genai): add reasoning_effort as a standard chat model parameter (#1895) test(genai): retry flaky structured output streaming tests (#1893) fix(genai): remove default temperature for gemini models (#1882) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1876)

Commits
  • da7a42e release(genai): 4.3.4 (#1946)
  • 7b7be53 chore(model-profiles): refresh model profile data (#1906)
  • b276bb5 chore(genai): update tests for LangSmith gateway (#1944)
  • af46f84 release(genai): 4.3.3 (#1936)
  • c638727 fix: normalize empty AI content for Vertex (#1935)
  • 508acdd chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/c...
  • 67abfcd chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/community (#1926)
  • 126c389 chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /...
  • f7952fc chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/vertexai (#1924)
  • 8b014ca chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/g...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.9 to 1.2.11

Release notes

Sourced from langgraph's releases.

langgraph==1.2.11

Changes since 1.2.10

  • release(langgraph): 1.2.11 (#8595)
  • feat(langgraph): expose trace_policy on add_node (#8523)
  • chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8533)
  • chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
  • release(checkpoint-postgres): 3.1.2 (#8565)
  • release(checkpoint): 4.2.0 (#8563)
  • fix(checkpoint): collect writes at plain-value seed in delta channel history (#8526)
  • chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
  • chore: enable RUF100 and clear unused noqa directives (#8546)
  • chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/langgraph (#8502)
  • chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /libs/langgraph (#8528)
  • release(checkpoint-sqlite): 3.1.1 (#8481)
  • release(checkpoint-postgres): 3.1.1 (#8480)

langgraph==1.2.10

Changes since 1.2.9

  • release(langgraph): 1.2.10 (#8462)
  • chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
  • chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
  • feat(langgraph): type v3 stream_events return and native projections (#8389)
  • revert(langgraph): delete TracePolicy (#8403)
  • feat(langgraph): drop tags from TracePolicy (#8402)
  • feat(langgraph): expose trace_policy on add_node (#8362)
  • chore(deps): bump mistune from 3.2.1 to 3.3.0 in /libs/langgraph (#8317)
  • chore(deps): bump soupsieve from 2.8.1 to 2.8.4 in /libs/langgraph (#8318)
  • chore(cli): allow langgraph-api versions up to 1.0.0 (#8319)
Commits
  • 644815f release(langgraph): 1.2.11 (#8595)
  • 7d6b579 feat(langgraph): expose trace_policy on add_node (#8523)
  • d56666f chore(deps): bump the minor-and-patch group across 1 directory with 7 updates...
  • 6a2822d chore(deps): bump the minor-and-patch group across 1 directory with 5 updates...
  • fde3068 release(checkpoint-postgres): 3.1.2 (#8565)
  • f55e772 release(checkpoint): 4.2.0 (#8563)
  • a90ab44 fix(checkpoint): collect writes at plain-value seed in delta channel history ...
  • ea5f9cc chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • 36a505a test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
  • d569e18 fix(checkpoint-postgres): find plain-value seeds when walking delta history (...
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.52.3

Release notes

Sourced from uvicorn's releases.

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn's changelog.

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)
Commits

Updates langchain-openai from 1.3.4 to 1.5.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.5.1

Changes since langchain-openai==1.5.0

release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651)

langchain-openai==1.5.0

Changes since langchain-openai==1.4.3

release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617)

langchain-openai==1.4.3

Changes since langchain-openai==1.4.2

release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326)

langchain-openai==1.4.2

Changes since langchain-openai==1.4.1

release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050)

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

... (truncated)

Commits

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

... (truncated)

Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates openinference-instrumentation-langchain from 0.1.67 to 0.1.70

Release notes

Sourced from openinference-instrumentation-langchain's releases.

python-openinference-instrumentation-langchain: v0.1.70

0.1.70 (2026-08-07)

Features

Bug Fixes

  • bump openinference-semantic-conventions minimum to >=0.1.31 (#3474) (5398a80)

python-openinference-instrumentation-langchain: v0.1.69

0.1.69 (2026-08-04)

Bug Fixes

  • langchain: map unknown run types (parser) to CHAIN instead of UNKNOWN (#3486) (84df77e)

python-openinference-instrumentation-langchain: v0.1.68

0.1.68 (2026-07-30)

Bug Fixes

  • langchain: accept LangGraph interrupt and resume callbacks (#3308) (c5bbce6)

Documentation

  • link Arize AX alongside Phoenix across all READMEs (#3330) (0433526)
Commits
  • 5b9114c chore: release main (#3495)
  • 3ae875d chore(pydantic-ai): restore genai-prices compatibility ceiling (#3520)
  • d4a4a6a fix(openllmetry): map retrieval task spans (#3424)
  • 98e30b5 chore(deps): update anthropic requirement from <0.117 to <0.121 in /python/in...
  • bbdcfd2 fix(agno): guard model_dump_json on non-pydantic run response content (#3270)
  • 1f57c59 chore(deps): update websockets requirement from <17.0,>=13.1 to >=13.1,<18.0 ...
  • 7af2f99 chore(deps): update genai-prices requirement from <0.1 to <0.2 in /python/ins...
  • 2b2d78f feat(ag2): add first-class instrumentation (#3379)
  • 0406932 feat(cohere): add Cohere instrumentor (#3349)
  • 5dc8cbd chore(deps): update opentelemetry-instrumentation requirement from >=0.57b0 t...
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

Version 1.44.0/0.65b0

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)
  • opentelemetry-sdk: add record_min_max option to ExponentialBucketHistogramAggregation, matching the option already available on ExplicitBucketHistogramAggregation and required by the specification (#5377)

Changed

  • opentelemetry-sdk: revert BoundedAttributes RLock back to Lock (#5329)
  • docs: update logs example to use opentelemetry-instrumentation-logging (#5344)
  • opentelemetry-sdk: bump declarative configuration schema to v1.1.0 (#5345)
  • opentelemetry-configuration: declarative configuration moves from opentelemetry.sdk._configuration into the new public opentelemetry-configuration package (opentelemetry.configuration namespace), published experimentally. opentelemetry-sdk[file-configuration] continues to work as an alias that installs opentelemetry-configuration alongside the SDK. (#5356)
  • opentelemetry-api: remove env carrier environment snapshot caching, you now have to pass explicitly the mapping where to get the environment variables from as the EnvironmentGetter.get first argument. (#5366)
  • opentelemetry-semantic-conventions: bump to 1.42.0 (#5410)
  • opentelemetry-semantic-conventions: bump to 1.43.0 (#5413)

Removed

  • opentelemetry-api, opentelemetry-sdk: Removed deprecated Events API/SDK. Use LogRecord with the event_name field set instead. (#5293)

Fixed

  • opentelemetry-sdk: Optimize LogRecord memory in BatchLogRecordProcessor by clearing the Context object before buffering. This is a potentially breaking change for custom log exporters that access context from the exported ReadableLogRecord, as the context will now be an empty Context() instead of the original. (#4977)
  • opentelemetry-sdk: drop non-finite measurements (NaN and Inf) at the instrument level to prevent permanent aggregation poisoning (#5336)
  • opentelemetry-sdk: raise ValueError when ExplicitBucketHistogramAggregation boundaries are not strictly increasing or finite (#5340)
  • opentelemetry-sdk: ProcessResourceDetector no longer collects or emits process.command_args and process.command_line by default since the values are not sanitized and may contain sensitive information. Users who depend on these resource attributes must pass include_command_args=True. (#5364)
  • opentelemetry-exporter-otlp-proto-http: fix the OTLP HTTP metric exporter self-observability metrics over-counting data points when max_export_batch_size splits a batch; each split now reports its own data-point count instead of the whole-batch count. (#5370)
  • opentelemetry-api: Prevent in-place mutation of Context via inherited dict methods (#5399)
Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a d...

    Description has been truncated

@dependabot
chore(deps): Bump the minor-and-patch group across 1 directory with 1…
0c7067f 
…3 updates

Bumps the minor-and-patch group with 12 updates in the /a2a/a2a_currency_converter directory:

| Package | From | To |
| --- | --- | --- |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.2.7` | `4.3.4` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.9` | `1.2.11` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.3` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.3.4` | `1.5.1` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [openinference-instrumentation-langchain](https://github.com/Arize-ai/openinference) | `0.1.67` | `0.1.70` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.6.0` |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.1.1` | `4.2.0` |
| [orjson](https://github.com/ijl/orjson) | `3.11.9` | `3.12.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.10.1` | `0.11.0` |



Updates `langchain-google-genai` from 4.2.7 to 4.3.4
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.2.7...libs/genai/v4.3.4)

Updates `langgraph` from 1.2.9 to 1.2.11
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.9...1.2.11)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `uvicorn` from 0.51.0 to 0.52.3
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.3)

Updates `langchain-openai` from 1.3.4 to 1.5.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.3.4...langchain-openai==1.5.1)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `openinference-instrumentation-langchain` from 0.1.67 to 0.1.70
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-instrumentation-langchain-v0.1.67...python-openinference-instrumentation-langchain-v0.1.70)

Updates `opentelemetry-exporter-otlp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `starlette` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.3.1...1.6.0)

Updates `langgraph-checkpoint` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.1.1...checkpoint==4.2.0)

Updates `langchain-core` from 1.4.9 to 1.6.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.9...langchain-core==1.6.0)

Updates `orjson` from 3.11.9 to 3.12.0
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.9...3.12.0)

Updates `langsmith` from 0.10.1 to 0.11.0
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.10.1...v0.11.0)

---
updated-dependencies:
- dependency-name: langchain-google-genai
  dependency-version: 4.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.52.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langgraph-checkpoint
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: orjson
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Rossoctl Issue Prioritization
Status: New/ToDo

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rubambiza