chore(deps): Bump the minor-and-patch group (#683)

Bumps the minor-and-patch group in /a2a/a2a_currency_converter with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.2.6` | `4.2.7` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.7` | `1.2.9` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.49.0` | `0.51.0` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.3.3` | `1.3.4` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.3` | `0.6.4` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.8` | `1.4.9` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.9.7` | `0.10.1` |


Updates `langchain-google-genai` from 4.2.6 to 4.2.7
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.2.6...libs/genai/v4.2.7)

Updates `langgraph` from 1.2.7 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.7...1.2.9)

Updates `uvicorn` from 0.49.0 to 0.51.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.49.0...0.51.0)

Updates `langchain-openai` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.3.3...langchain-openai==1.3.4)

Updates `pyasn1` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4)

Updates `langchain-core` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.8...langchain-core==1.4.9)

Updates `langsmith` from 0.9.7 to 0.10.1
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.9.7...v0.10.1)

---
updated-dependencies:
- dependency-name: langchain-google-genai
  dependency-version: 4.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langsmith
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

a2a/a2a_currency_converter/pyproject.toml

@@ -8,24 +8,24 @@ dependencies = [
     "a2a-sdk[http-server]>=1.1.0,<2",
     "click>=8.4.2",
     "httpx>=0.28.1",
-    "langchain-google-genai>=4.2.6",
-    "langgraph>=1.2.7",
+    "langchain-google-genai>=4.2.7",
+    "langgraph>=1.2.9",
     "pydantic>=2.13.4",
     "python-dotenv>=1.2.2",
-    "uvicorn>=0.49.0",
-    "langchain-openai>=1.3.3",
+    "uvicorn>=0.51.0",
+    "langchain-openai>=1.3.4",
     "pydantic-settings>=2.14.2",
     "openinference-instrumentation-langchain>=0.1.67",
     "opentelemetry-exporter-otlp>=1.43.0",
     # The following are to avoid CVEs reported by Trivy and checked by our CI
     "urllib3>=2.7.0",
     "starlette>=1.3.1",
-    "pyasn1>=0.6.3",            # Indirect; prevents CVE-2026-30922
+    "pyasn1>=0.6.4",            # Indirect; prevents CVE-2026-30922
     "protobuf>=6.33.5",         # prevents CVE-2026-0994
     "langgraph-checkpoint>=4.1.1",
     "langchain-core>=1.4.0",   # Indirect; prevents CVE-2026-34070
     "orjson>=3.11.6",          # Indirect; prevents CVE-2025-67221
-    "langsmith>=0.9.7",        # Indirect; prevents CVE-2026-45134
+    "langsmith>=0.10.1",        # Indirect; prevents CVE-2026-45134
 ]
 
 [tool.hatch.build.targets.wheel]