Merge pull request #701 from kagenti/dependabot/uv/a2a/reservation_service/minor-and-patch-0439363076

chore(deps): Bump the minor-and-patch group across 1 directory with 7 updates

Author: pdettori

a2a/reservation_service/pyproject.toml

@@ -10,20 +10,20 @@ license = { text = "Apache-2.0" }
 requires-python = ">=3.11"
 dependencies = [
     "a2a-sdk[http-server]>=1.1.0",
-    "langgraph>=1.2.2",
+    "langgraph>=1.2.9",
     "langchain-core>=1.4.0",
     "langchain-community>=0.4.2",
     "langchain-ollama>=1.1.0",
-    "langchain-openai>=1.2.2",
-    "openinference-instrumentation-langchain>=0.1.66",
-    "pydantic-settings>=2.14.1",
+    "langchain-openai>=1.3.5",
+    "openinference-instrumentation-langchain>=0.1.67",
+    "pydantic-settings>=2.14.2",
     "langchain-mcp-adapters>=0.3.0",
     "mcp>=1.27.2",               # Pin floor: adapters>=0.3.0 imports streamable_http_client (renamed in newer mcp); also prevents CVE-2025-66416
     "python-keycloak>=7.1.1",
-    "opentelemetry-exporter-otlp>=1.42.1",
+    "opentelemetry-exporter-otlp>=1.43.0",
     "urllib3>=2.7.0",   # Indirect; prevents CVE-2025-66418
     "python-multipart>=0.0.32",  # Indirect; prevents CVE-2026-24486
-    "langsmith>=0.8.9",          # Indirect; prevents CVE-2026-45134
+    "langsmith>=0.10.5",          # Indirect; prevents CVE-2026-45134
 ]
 
 [project.scripts]