Skip to content

Commit 5d6b04f

Browse files
chore(deps): Bump the minor-and-patch group across 1 directory with 12 updates
--- updated-dependencies: - dependency-name: langgraph dependency-version: 1.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-core dependency-version: 1.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-openai dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openinference-instrumentation-langchain dependency-version: 0.1.67 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-mcp-adapters dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: opentelemetry-exporter-otlp dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: opentelemetry-proto dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-classic dependency-version: 1.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langsmith dependency-version: 0.9.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: mcp dependency-version: 1.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 3716b35 commit 5d6b04f

2 files changed

Lines changed: 184 additions & 180 deletions

File tree

a2a/file_organizer/pyproject.toml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,24 +10,24 @@ license = { text = "Apache" }
1010
requires-python = ">=3.11"
1111
dependencies = [
1212
"a2a-sdk[http-server]>=1.1.0,<2",
13-
"langgraph>=1.2.2",
13+
"langgraph>=1.2.7",
1414
"langchain-core>=1.4.0",
1515
"langchain-community>=0.4.2",
1616
"langchain-ollama>=1.1.0",
17-
"langchain-openai>=1.2.2",
18-
"openinference-instrumentation-langchain>=0.1.66",
19-
"pydantic-settings>=2.14.1",
20-
"langchain-mcp-adapters>=0.2.2",
17+
"langchain-openai>=1.3.3",
18+
"openinference-instrumentation-langchain>=0.1.67",
19+
"pydantic-settings>=2.14.2",
20+
"langchain-mcp-adapters>=0.3.0",
2121
"python-keycloak>=7.1.1",
22-
"opentelemetry-exporter-otlp>=1.42.1",
22+
"opentelemetry-exporter-otlp>=1.43.0",
2323
"opentelemetry-proto>=1.42.1", # (Old versions of this dependency use obsolete protobufs)
2424
"urllib3>=2.7.0", # Indirect; prevents CVE-2025-66418
2525
"python-multipart>=0.0.32", # Indirect; prevents CVE-2026-24486
26-
"aiohttp>=3.14.0", # Indirect; prevents CVE-2026-34525, CVE-2026-34516, CVE-2026-34515, CVE-2026-22815
27-
"langchain-classic>=1.0.7", # Indirect; prevents CVE-2026-45134
28-
"langsmith>=0.8.9", # Indirect; prevents CVE-2026-45134
26+
"aiohttp>=3.14.1", # Indirect; prevents CVE-2026-34525, CVE-2026-34516, CVE-2026-34515, CVE-2026-22815
27+
"langchain-classic>=1.0.8", # Indirect; prevents CVE-2026-45134
28+
"langsmith>=0.9.7", # Indirect; prevents CVE-2026-45134
2929
"cryptography>=48.0.0,<49", # Indirect; prevents CVE-2026-26007
30-
"mcp>=1.27.2", # Indirect; prevents CVE-2025-66416
30+
"mcp>=1.28.1", # Indirect; prevents CVE-2025-66416
3131
"orjson>=3.11.6", # Indirect; prevents CVE-2025-67221
3232
"protobuf>=6.33.5", # Indirect; prevents CVE-2026-0994
3333
"pyasn1>=0.6.3", # Indirect; prevents CVE-2026-30922

0 commit comments

Comments
 (0)