chore(deps): Bump the minor-and-patch group across 1 directory with 7 updates

Bumps the minor-and-patch group with 6 updates in the /a2a/reservation_service directory:

| Package | From | To |
| --- | --- | --- |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.4` | `1.2.9` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.2` | `1.3.5` |
| [openinference-instrumentation-langchain](https://github.com/Arize-ai/openinference) | `0.1.66` | `0.1.67` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.43.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.9` | `0.10.5` |



Updates `langgraph` from 1.2.4 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.4...1.2.9)

Updates `langchain-core` from 1.4.0 to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.9)

Updates `langchain-openai` from 1.2.2 to 1.3.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.2...langchain-openai==1.3.5)

Updates `openinference-instrumentation-langchain` from 0.1.66 to 0.1.67
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](Arize-ai/openinference@python-openinference-instrumentation-langchain-v0.1.66...python-openinference-instrumentation-langchain-v0.1.67)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `opentelemetry-exporter-otlp` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `langsmith` from 0.8.9 to 0.10.5
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.9...v0.10.5)

---
updated-dependencies:
- dependency-name: langgraph
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openinference-instrumentation-langchain
  dependency-version: 0.1.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

a2a/reservation_service/pyproject.toml

@@ -10,20 +10,20 @@ license = { text = "Apache-2.0" }
 requires-python = ">=3.11"
 dependencies = [
     "a2a-sdk[http-server]>=1.1.0",
-    "langgraph>=1.2.2",
+    "langgraph>=1.2.9",
     "langchain-core>=1.4.0",
     "langchain-community>=0.4.2",
     "langchain-ollama>=1.1.0",
-    "langchain-openai>=1.2.2",
-    "openinference-instrumentation-langchain>=0.1.66",
-    "pydantic-settings>=2.14.1",
+    "langchain-openai>=1.3.5",
+    "openinference-instrumentation-langchain>=0.1.67",
+    "pydantic-settings>=2.14.2",
     "langchain-mcp-adapters>=0.3.0",
     "mcp>=1.27.2",               # Pin floor: adapters>=0.3.0 imports streamable_http_client (renamed in newer mcp); also prevents CVE-2025-66416
     "python-keycloak>=7.1.1",
-    "opentelemetry-exporter-otlp>=1.42.1",
+    "opentelemetry-exporter-otlp>=1.43.0",
     "urllib3>=2.7.0",   # Indirect; prevents CVE-2025-66418
     "python-multipart>=0.0.32",  # Indirect; prevents CVE-2026-24486
-    "langsmith>=0.8.9",          # Indirect; prevents CVE-2026-45134
+    "langsmith>=0.10.5",          # Indirect; prevents CVE-2026-45134
 ]
 
 [project.scripts]