Merge pull request #656 from kagenti/dependabot/uv/a2a/a2a_currency_converter/minor-and-patch-7ab8ff706e

chore(deps): Bump the minor-and-patch group across 1 directory with 10 updates

Author: pdettori

a2a/a2a_currency_converter/pyproject.toml

@@ -6,26 +6,26 @@ readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
     "a2a-sdk[http-server]>=1.1.0,<2",
-    "click>=8.4.1",
+    "click>=8.4.2",
     "httpx>=0.28.1",
-    "langchain-google-genai>=4.2.3",
-    "langgraph>=1.2.2",
+    "langchain-google-genai>=4.2.6",
+    "langgraph>=1.2.7",
     "pydantic>=2.13.4",
     "python-dotenv>=1.2.2",
     "uvicorn>=0.49.0",
-    "langchain-openai>=1.2.2",
-    "pydantic-settings>=2.14.1",
-    "openinference-instrumentation-langchain>=0.1.66",
-    "opentelemetry-exporter-otlp>=1.42.1",
+    "langchain-openai>=1.3.3",
+    "pydantic-settings>=2.14.2",
+    "openinference-instrumentation-langchain>=0.1.67",
+    "opentelemetry-exporter-otlp>=1.43.0",
     # The following are to avoid CVEs reported by Trivy and checked by our CI
     "urllib3>=2.7.0",
-    "starlette>=1.2.1",
+    "starlette>=1.3.1",
     "pyasn1>=0.6.3",            # Indirect; prevents CVE-2026-30922
     "protobuf>=6.33.5",         # prevents CVE-2026-0994
     "langgraph-checkpoint>=4.1.1",
     "langchain-core>=1.4.0",   # Indirect; prevents CVE-2026-34070
     "orjson>=3.11.6",          # Indirect; prevents CVE-2025-67221
-    "langsmith>=0.8.9",        # Indirect; prevents CVE-2026-45134
+    "langsmith>=0.9.7",        # Indirect; prevents CVE-2026-45134
 ]
 
 [tool.hatch.build.targets.wheel]