Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 7 updates#847

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/lisa-sdk/develop/python-dependencies-209173858c
Open

chore(deps): bump the python-dependencies group across 1 directory with 7 updates#847
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/lisa-sdk/develop/python-dependencies-209173858c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps the python-dependencies group with 7 updates in the /lisa-sdk directory:

Package From To
langchain 1.2.10 1.2.12
langchain-core 1.2.14 1.2.19
langchain-openai 1.1.10 1.1.11
langchain-text-splitters 1.0.0 1.1.1
langsmith 0.7.4 0.7.17
numpy 2.3.3 2.4.3
boto3 1.40.37 1.42.68

Updates langchain from 1.2.10 to 1.2.12

Release notes

Sourced from langchain's releases.

langchain-core==1.2.12

Changes since langchain-core==1.2.11

release(core): 1.2.12 (#35192) fix(core): fix setting ChatGeneration.text (#35191)

langchain==1.2.12

Changes since langchain==1.2.11

release(langchain_v1): 1.2.12 (#35770) feat: tracing for wrap model + tool call (#35765)

langchain-core==1.2.11

Changes since langchain-core==1.2.10

release(core): 1.2.11 (#35144) fix(openai): sanitize urls when counting tokens in images (#35143) chore(core): clean up docstring mismatch and redundant logic in langchain-core (#35064) fix(core): replace bare except with Exception in tracer (#35138)

langchain==1.2.11

Changes since langchain==1.2.10

release(langchain_v1): 1.2.11 (#35723) fix(langchain): normalize custom detector output to prevent KeyError in hash/mask strategies (#35651) chore: bump the minor-and-patch group across 3 directories with 7 updates (#35605) chore(langchain): switch refs from gemini-3 to gemini-3.1 (#35535) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump langgraph-checkpoint from 3.0.1 to 4.0.0 in /libs/langchain_v1 (#35445) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441) chore: bump google-cloud-aiplatform from 1.127.0 to 1.133.0 in /libs/langchain_v1 (#35397) revert: add ChatAnthropicBedrockWrapper (#35371) fix(langchain): support anthropic-bedrock in init_chat_model (#35366) style: fix some ruff noqa (#35321) fix(langchain): allow Gemini 3 models to use ProviderStrategy with tools (#34464) docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283) feat(openai): support automatic server-side compaction (#35212) chore: bump the langchain-deps group across 3 directories with 8 updates (#35257) feat(openrouter): add langchain-openrouter provider package (#35211) style: bump ruff version to 0.15 (#35042) chore(deps): bump pillow from 12.0.0 to 12.1.1 in /libs/langchain_v1 (#35174) chore(core): raise more descriptive model error in init_chat_model (#35167) chore(deps): bump langsmith from 0.4.42 to 0.6.3 in /libs/langchain_v1 (#35149) chore(deps): bump cryptography from 46.0.3 to 46.0.5 in /libs/langchain_v1 (#35148)

Commits

Updates langchain-core from 1.2.14 to 1.2.19

Release notes

Sourced from langchain-core's releases.

langchain-core==1.2.19

Changes since langchain-core==1.2.18

release(core): 1.2.19 (#35832) chore(core): move BaseCrossEncoder to langchain-core (#35809) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/core (#35775)

langchain-core==1.2.18

Changes since langchain-core==1.2.17

release(core): 1.2.18 (#35704) fix(core): fix double backticks in deprecation docstring for alternative_import (#35658) fix(core): preserve default_factory when generating tool call schema (#35550) feat(openai): support tool search (#35582) chore: bump the minor-and-patch group across 3 directories with 7 updates (#35605)

langchain-core==1.2.17

Changes since langchain-core==1.2.16

release(core): 1.2.17 (#35527) fix(core): extract usage metadata from serialized tracer message outputs (#35526) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441)

langchain-core==1.2.16

Changes since langchain-core==1.2.15

release(core): 1.2.16 (#35439) fix(core): treat empty tool chunk ids as missing in merge (#35414)

langchain-core==1.2.15

Changes since langchain-core==1.2.14

fix(core): improve error message for non-JSON-serializable tool schemas (#34376) fix(core): improve typing/docs for on_chat_model_start to clarify required positional args (#35324) perf(core): defer specific langsmith imports to reduce import time (#35298) revert: add ChatAnthropicBedrockWrapper (#35371) release(core): 1.2.15 (#35367) fix(anthropic): replace retired model IDs in tests and docstrings (#35365) feat(anthropic): add ChatAnthropicBedrock wrapper (#35091) style: fix some ruff noqa (#35321)

Commits
  • 41cca20 release(core): 1.2.19 (#35832)
  • 307cdca chore(core): move BaseCrossEncoder to langchain-core (#35809)
  • cee6430 refactor(xai): remove redundant lc_attributes override (#35791)
  • 6b9b4c6 feat(xai): support base_url alias and XAI_API_BASE env var (#35790)
  • b676167 fix(deepseek): accept base_url as alias for api_base (#35789)
  • 5d9568b feat(model-profiles): new fields + Makefile target (#35788)
  • 1891d41 chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (#35774)
  • 1d954bc chore: bump tornado from 6.5.2 to 6.5.5 in /libs/langchain (#35773)
  • 261b1d5 chore: bump tornado from 6.5.2 to 6.5.5 in /libs/core (#35775)
  • 9521c67 fix(openai): close PIL Image handles in token counting to prevent fd leak (#3...
  • Additional commits viewable in compare view

Updates langchain-openai from 1.1.10 to 1.1.11

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.1.11

Changes since langchain-openai==1.1.10

fix(openai): bump min core version (#35705) release(openai): 1.1.11 (#35703) fix(openai): update responses API model detection for pro and codex models (#35594) feat(openai): support tool search (#35582) chore: bump langgraph from 1.0.8 to 1.0.10rc1 in /libs/partners/openai (#35612) chore(model-profiles): refresh model profile data (#35593) fix(openai): avoid PydanticSerializationUnexpectedValue for structured output (#35543) feat(openrouter): add streaming token usage support (#35559) fix: compaction typo (#35467) fix(openai): add test for CSV and accommodate breaking changes in file url inputs (#35454) chore: bump langgraph-checkpoint from 3.0.0 to 4.0.0 in /libs/partners/openai (#35448) fix(model-profiles): sort generated profiles by model ID for stable diffs (#35344) fix(openai): accept valid responses that are falsy at runtime (#35307)

Commits

Updates langchain-text-splitters from 1.0.0 to 1.1.1

Release notes

Sourced from langchain-text-splitters's releases.

langchain-text-splitters==1.1.1

Changes since langchain-text-splitters==1.1.0

release(text-splitters): 1.1.1 (#35318) fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._separators on each split_text() call (#35316) chore: bump transformers from 5.1.0 to 5.2.0 in /libs/text-splitters in the other-deps group across 1 directory (#35279) chore: bump the other-deps group across 3 directories with 2 updates (#35255) style: bump ruff version to 0.15 (#35042) fix: Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter.split_text_from_url (#35196) feat(text-splitters): add model_kwargs to SentenceTransformersTokenTextSplitter (#35113) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/text-splitters (#35162) chore(deps): bump the other-deps group across 3 directories with 12 updates (#35127) chore(deps): bump the other-deps group across 3 directories with 8 updates (#35120) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) fix(text-splitters): reverse preserved elements iterator in HTMLSemanticPreservingSplitter (#34080) chore: enrich pyproject.toml files (#34980) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) chore: upgrade urllib3 to 2.6.3 (#34940) style(text-splitters): lint (#34865) fix(text-splitters): fix typo 'seperator' -> 'separator' in test docs… (#34857) chore(deps): bump the uv group across 8 directories with 6 updates (#34773) chore(deps): bump the uv group across 3 directories with 1 update (#34741) chore: update twitter URLs (#34736) style(text-splitters): fix some ruff preview rules (#34665) chore: ban relative imports on all packages (#34691) style: bump ruff version to 0.14.11 (#34674) test(text-splitters): add edge case tests for CharacterTextSplitter (#34628) fix(text-splitters): HTMLSemanticPreservingSplitter nested preserved … (#34587) chore(deps): bump mypy to v1.19 and ruff to v1.14 (#34521) chore(text-splitters): bump dependency locks for python 3.14 (#34522) style(text-splitters,standard-tests,cli): add ruff TC and RUF012 rules (#34495) style: add ruff ISC001 rule (#34493) release(core): 1.2.3 (#34421) feat(infra): add CI check for out of date lockfiles (#34397)

langchain-text-splitters==1.1.0

Changes since langchain-text-splitters==1.0.0

release(text-splitters): 1.1.0 (#34346) feat(text-splitters): add R programming language support (#34241) feat: Use uuid7 for run ids (#34172) chore(cli,standard-tests,text-splitters): fix some ruff TC rules (#33934) style: some cleanup (#33857) chore: attribute package change versions (#33854) style: more refs fixes (#33730) chore(text-splitters): API reference link in README (#33713) style: more refs work (#33707) feat(infra): langchain docs MCP (#33636)

... (truncated)

Commits
  • 269947b release(text-splitters): 1.1.1 (#35318)
  • a9f3627 fix(core): accept integer temperature values in _get_ls_params (#35317)
  • 8951c01 fix(text-splitters): prevent JSFrameworkTextSplitter from mutating self._sepa...
  • 8323f55 docs(core): update load note to be precise (#35309)
  • b004103 docs(perplexity): Fix docstring of output_parsers.strip_think_tags() (#35264)
  • 82ae4fb chore: bump model profiles (#35294)
  • a565cf8 fix(core): prevent recursion error when args_schema is dict (#35260)
  • 0d13463 feat(anthropic): add User-Agent header for Anthropic API calls (#35268)
  • 8166e01 chore(anthropic): add version (#35293)
  • 6fe7845 release(openai): 1.1.10 (#35292)
  • Additional commits viewable in compare view

Updates langsmith from 0.7.4 to 0.7.17

Release notes

Sourced from langsmith's releases.

v0.7.17

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.7.16...v0.7.17

v0.7.16

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.7.15...v0.7.16

v0.7.15

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.7.14...v0.7.15

v0.7.14

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.7.13...v0.7.14

v0.7.13

What's Changed

... (truncated)

Commits

Updates numpy from 2.3.3 to 2.4.3

Release notes

Sourced from numpy's releases.

2.4.3 (Mar 9, 2026)

NumPy 2.4.3 Release Notes

The NumPy 2.4.3 is a patch release that fixes bugs discovered after the 2.4.2 release. The most user visible fix may be a threading fix for OpenBLAS on ARM, closing issue #30816.

This release supports Python versions 3.11-3.14

Contributors

A total of 11 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Antareep Sarkar +
  • Charles Harris
  • Joren Hammudoglu
  • Matthieu Darbois
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Pieter Eendebak
  • Sebastian Berg
  • Warren Weckesser
  • stratakis +

Pull requests merged

A total of 14 pull requests were merged for this release.

  • #30759: MAINT: Prepare 2.4.x for further development
  • #30827: BUG: Fix some leaks found via LeakSanitizer (#30756)
  • #30841: MAINT: Synchronize 2.4.x submodules with main
  • #30849: TYP: matlib: missing extended precision imports
  • #30850: BUG: Fix weak hash function in np.isin(). (#30840)
  • #30921: BUG: fix infinite recursion in np.ma.flatten_structured_array...
  • #30922: BUG: Fix buffer overrun in CPU baseline validation (#30877)
  • #30923: BUG: Fix busdaycalendar's handling of a bool array weekmask....
  • #30924: BUG: Fix reference leaks and NULL pointer dereferences (#30908)
  • #30925: MAINT: fix two minor issues noticed when touching the C API setup
  • #30955: ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • #30957: BUG: fix type issues in uses if PyDataType macros
  • #30958: MAINT: Don't use vulture 2.15, it has false positives
  • #30973: MAINT: update openblas (#30961)

2.4.2 (Feb 1, 2026)

NumPy 2.4.2 Release Notes

The NumPy 2.4.2 is a patch release that fixes bugs discovered after the 2.4.1 release. Highlights are:

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • 8bcb2e7 Merge pull request #30974 from charris/prepare-2.4.3
  • 9a2b5ee REL: Prepare for the NumPy 2.4.3 release
  • a822ac2 Merge pull request #30973 from charris/backport-30961
  • 039bf54 MAINT: update openblas (#30961)
  • 254bafa Merge pull request #30955 from charris/backport-30879
  • 0cc7d38 ENH: Test .kind not .char in np.testing.assert_equal (#30879)
  • 9ee571d Merge pull request #30957 from charris/backport-30918
  • f302a16 Merge pull request #30958 from charris/backport-30938
  • d240a09 MAINT: Don't use vulture 2.15, it has false positives
  • 4fc08e9 MAINT: Don't use vulture 2.15, it has false positives
  • Additional commits viewable in compare view

Updates boto3 from 1.40.37 to 1.42.68

Commits
  • 6b10acd Merge branch 'release-1.42.68'
  • 0b7dcef Bumping version to 1.42.68
  • 5754b6f Add changelog entries from botocore
  • b1ff6b0 Merge branch 'release-1.42.67'
  • d62e89b Merge branch 'release-1.42.67' into develop
  • 3a20a6a Bumping version to 1.42.67
  • 6724c7e Add changelog entries from botocore
  • d233684 Merge branch 'release-1.42.66'
  • 7d89871 Merge branch 'release-1.42.66' into develop
  • 4f44a49 Bumping version to 1.42.66
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 7 updates

Bumps the python-dependencies group with 7 updates in the /lisa-sdk directory:

| Package | From | To |
| --- | --- | --- |
| [langchain](https://github.com/langchain-ai/langchain) | `1.2.10` | `1.2.12` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.14` | `1.2.19` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.1.10` | `1.1.11` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.0.0` | `1.1.1` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.7.4` | `0.7.17` |
| [numpy](https://github.com/numpy/numpy) | `2.3.3` | `2.4.3` |
| [boto3](https://github.com/boto/boto3) | `1.40.37` | `1.42.68` |



Updates `langchain` from 1.2.10 to 1.2.12
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.2.10...langchain==1.2.12)

Updates `langchain-core` from 1.2.14 to 1.2.19
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.14...langchain-core==1.2.19)

Updates `langchain-openai` from 1.1.10 to 1.1.11
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.1.10...langchain-openai==1.1.11)

Updates `langchain-text-splitters` from 1.0.0 to 1.1.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.0.0...langchain-text-splitters==1.1.1)

Updates `langsmith` from 0.7.4 to 0.7.17
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.7.4...v0.7.17)

Updates `numpy` from 2.3.3 to 2.4.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.3.3...v2.4.3)

Updates `boto3` from 1.40.37 to 1.42.68
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.37...1.42.68)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 1.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-openai
  dependency-version: 1.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langsmith
  dependency-version: 0.7.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: numpy
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.42.68
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants