Skip to content

chore(deps): bump the ai-providers group with 5 updates#654

Merged
ioannisj merged 1 commit into
mainfrom
dependabot/uv/ai-providers-170ba7c251
Jun 8, 2026
Merged

chore(deps): bump the ai-providers group with 5 updates#654
ioannisj merged 1 commit into
mainfrom
dependabot/uv/ai-providers-170ba7c251

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the ai-providers group with 5 updates:

Package From To
langchain 1.3.1 1.3.2
anthropic 0.104.1 0.105.2
langgraph 1.2.1 1.2.2
langchain-anthropic 1.4.3 1.4.4
google-genai 2.6.0 2.7.0

Updates langchain from 1.3.1 to 1.3.2

Release notes

Sourced from langchain's releases.

langchain-core==1.3.2

Changes since langchain-core==1.3.1

release(core): 1.3.2 (#36990) feat(core): add content-block-centric streaming (v2) (#36834)

langchain==1.3.2

Changes since langchain==1.3.1

chore(langchain): bump to 1.3.2, require langgraph>=1.2.2 (#37703) fix(langchain): land final answer in last AIMessage for TodoListMiddleware (#37643) feat(langchain): redact streamed PII in flight on PIIMiddleware (#37616) chore(infra): bump langchain-tests floor to 1.1.9 (#37610) release(standard-tests): 1.1.9 (#37609) feat(langchain): register stream transformers on middleware (#37591) chore: bump idna from 3.11 to 3.15 in /libs/langchain_v1 (#37534) ci(infra): harden Dependabot version-bound preservation (#37510) refactor(langchain): clean redundancy ifelse. (#37448) hotfix: bump lockfiles (#37508) chore(core,langchain,openai): refresh stale OpenAI model references (#37487) fix(langchain): sort glob_search results by mtime (newest first) (#37462) chore: bump langsmith from 0.7.31 to 0.8.0 in /libs/langchain_v1 (#37391)

langchain-perplexity==1.3.2

Changes since langchain-perplexity==1.3.1

release(perplexity): 1.3.2 (#37925) fix(perplexity): serialize ToolMessage and AIMessage.tool_calls (#37911)

Commits
  • 7bb4130 chore(langchain): bump to 1.3.2, require langgraph>=1.2.2 (#37703)
  • d9b8dd5 fix(langchain): land final answer in last AIMessage for TodoListMiddleware ...
  • 95c6a8a chore(core): bump uuid-utils to 0.16.0 (#37699)
  • c7858c4 test(anthropic): retry integration tests on transient failures (#37697)
  • 53a5ac3 chore(model-profiles): refresh model profile data (#37694)
  • 69d9e95 chore(model-profiles): refresh model profile data (#37650)
  • 33875fd ci(infra): serialize integration test shards across runs (#37648)
  • 2638f75 feat(standard-tests): forward LangSmith CI env vars to traces (#37645)
  • bdd7f71 ci(infra): trace scheduled integration tests (#37615)
  • 11cdce9 ci(infra): add middleware evals workflow for workflow_dispatch discovery (#...
  • Additional commits viewable in compare view

Updates anthropic from 0.104.1 to 0.105.2

Release notes

Sourced from anthropic's releases.

v0.105.2

0.105.2 (2026-05-29)

Full Changelog: v0.105.1...v0.105.2

v0.105.1

0.105.1 (2026-05-29)

Full Changelog: v0.105.0...v0.105.1

Chores

  • internal: use Trusted Publishing for PyPI releases (1d04fc5)

v0.105.0

0.105.0 (2026-05-28)

Full Changelog: v0.104.1...v0.105.0

Features

  • api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (f18b014)
  • support custom file size caps (#1825) (7e5f944)

Chores

  • examples: rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (#1822) (750f956)

Documentation

  • replace literal newlines (8f7f6c0)
Changelog

Sourced from anthropic's changelog.

0.105.2 (2026-05-29)

Full Changelog: v0.105.1...v0.105.2

0.105.1 (2026-05-29)

Full Changelog: v0.105.0...v0.105.1

Chores

  • internal: use Trusted Publishing for PyPI releases (1d04fc5)

0.105.0 (2026-05-28)

Full Changelog: v0.104.1...v0.105.0

Features

  • api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (f18b014)
  • support custom file size caps (#1825) (7e5f944)

Chores

  • examples: rename managed-agents private-sandbox-worker to self-hosted-sandbox-worker (#1822) (750f956)

Documentation

  • replace literal newlines (8f7f6c0)
Commits
  • ddd43b7 release: 0.105.2
  • 6213e77 ci: grant id-token permission for PyPI trusted publishing (#1837)
  • d88cede release: 0.105.1
  • 2ace39f codegen metadata
  • 24fe7d6 chore(internal): use Trusted Publishing for PyPI releases
  • c1d9307 codegen metadata
  • 9eaf324 codegen metadata
  • 43b5b1f Update CHANGELOG.md
  • daca1ac release: 0.105.0
  • 2b82676 feat(api): Add support for claude-opus-4-8, mid-conversation system blocks, a...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.1 to 1.2.2

Release notes

Sourced from langgraph's releases.

langgraph==1.2.2

Changes since 1.2.1

  • chore(langgraph): bump version to 1.2.2 (#7914)
  • fix(langgraph): assign stable IDs to id=None BaseMessages before DeltaChannel checkpoint writes (#7913)
  • release(checkpoint): 4.1.1 (#7890)
Commits
  • add2696 chore(langgraph): bump version to 1.2.2 (#7914)
  • 5d5a641 fix(langgraph): assign stable IDs to id=None BaseMessages before DeltaChannel...
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • See full diff in compare view

Updates langchain-anthropic from 1.4.3 to 1.4.4

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.4

Changes since langchain-anthropic==1.4.3

release(anthropic): 1.4.4 (#37757) fix(anthropic): normalize cross-provider tool-call IDs (#37756) test(anthropic): retry integration tests on transient failures (#37697) chore(infra): bump langchain-tests floor to 1.1.9 (#37610) chore: bump langsmith from 0.8.3 to 0.8.5 in /libs/partners/anthropic (#37564) chore: bump idna from 3.11 to 3.15 in /libs/partners/anthropic (#37565) ci(infra): harden Dependabot version-bound preservation (#37510) chore(infra): merge v1.4 into master (#37350) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343) chore: bump requests from 2.33.0 to 2.33.1 in /libs/partners/anthropic (#37286) chore: bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/anthropic (#37287) chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/anthropic (#37288)

Commits
  • 1338871 release(anthropic): 1.4.4 (#37757)
  • 1a5403d fix(anthropic): normalize cross-provider tool-call IDs (#37756)
  • 80ca600 chore(model-profiles): refresh model profile data (#37726)
  • 84e3c79 release(perplexity): 1.3.1 (#37720)
  • 8951e56 chore(perplexity): bump perplexityai to 0.34.1 (#37710)
  • b26b0ff ci: remove unnecessary permission and improve logging in waiting-on-author wo...
  • dc215f8 ci(infra): auto-remove waiting-on-author label on author reply (#37716)
  • 44d9f86 release(fireworks): 1.4.2 (#37715)
  • e3ce6e5 fix(fireworks): strip non-wire keys from all content parts before serializati...
  • 800f021 chore(model-profiles): refresh model profile data (#37712)
  • Additional commits viewable in compare view

Updates google-genai from 2.6.0 to 2.7.0

Release notes

Sourced from google-genai's releases.

v2.7.0

2.7.0 (2026-05-27)

Features

  • Additional computer_use field support for vertex. (b4828fa)
  • interaction-api: Allow "text/csv" as a supported document mime type for Interaction API. (543137b)
  • interaction-api: Enable BigQuery tool in Deep Research config. (5dc17e5)
  • Support Reinforcement Tuning in GenAI SDK (0ead888)
Changelog

Sourced from google-genai's changelog.

2.7.0 (2026-05-27)

Features

  • Additional computer_use field support for vertex. (b4828fa)
  • interaction-api: Allow "text/csv" as a supported document mime type for Interaction API. (543137b)
  • interaction-api: Enable BigQuery tool in Deep Research config. (5dc17e5)
  • Support Reinforcement Tuning in GenAI SDK (0ead888)
Commits
  • 5d0dff8 chore(main): release 2.7.0 (#2501)
  • b4828fa feat: additional computer_use field support for vertex.
  • 543137b feat(interaction-api): Allow "text/csv" as a supported document mime type for...
  • 5dc17e5 feat(interaction-api): Enable BigQuery tool in Deep Research config.
  • cd66b68 chore: Internal cleanup
  • 0ead888 feat: Support Reinforcement Tuning in GenAI SDK
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ai-providers group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [langchain](https://github.com/langchain-ai/langchain) | `1.3.1` | `1.3.2` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.104.1` | `0.105.2` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.1` | `1.2.2` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.4.4` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.6.0` | `2.7.0` |


Updates `langchain` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.3.1...langchain==1.3.2)

Updates `anthropic` from 0.104.1 to 0.105.2
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.104.1...v0.105.2)

Updates `langgraph` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.1...1.2.2)

Updates `langchain-anthropic` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.4.3...langchain-anthropic==1.4.4)

Updates `google-genai` from 2.6.0 to 2.7.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: anthropic
  dependency-version: 0.105.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
- dependency-name: langgraph
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-anthropic
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: google-genai
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 8, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 8, 2026 10:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 8, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgoogle-genai@​2.6.0 ⏵ 2.7.077 +1100100100100
Updatedlanggraph@​1.2.1 ⏵ 1.2.287 +1100100100100
Updatedanthropic@​0.104.1 ⏵ 0.105.291 +1100100100100
Updatedlangchain@​1.3.1 ⏵ 1.3.299 +1100100100100
Updatedlangchain-anthropic@​1.4.3 ⏵ 1.4.4100 +1100100100100

View full report

@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

posthog-python Compliance Report

Date: 2026-06-08 10:15:15 UTC
Duration: 176160ms

✅ All Tests Passed!

45/45 tests passed


Capture Tests

29/29 tests passed

View Details
Test Status Duration
Format Validation.Event Has Required Fields 518ms
Format Validation.Event Has Uuid 1507ms
Format Validation.Event Has Lib Properties 1507ms
Format Validation.Distinct Id Is String 1507ms
Format Validation.Token Is Present 1507ms
Format Validation.Custom Properties Preserved 1508ms
Format Validation.Event Has Timestamp 1507ms
Retry Behavior.Retries On 503 9516ms
Retry Behavior.Does Not Retry On 400 3512ms
Retry Behavior.Does Not Retry On 401 3508ms
Retry Behavior.Respects Retry After Header 9510ms
Retry Behavior.Implements Backoff 23523ms
Retry Behavior.Retries On 500 7517ms
Retry Behavior.Retries On 502 7512ms
Retry Behavior.Retries On 504 7511ms
Retry Behavior.Max Retries Respected 23530ms
Deduplication.Generates Unique Uuids 1497ms
Deduplication.Preserves Uuid On Retry 7516ms
Deduplication.Preserves Uuid And Timestamp On Retry 14520ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry 7507ms
Deduplication.No Duplicate Events In Batch 1505ms
Deduplication.Different Events Have Different Uuids 1507ms
Compression.Sends Gzip When Enabled 1507ms
Batch Format.Uses Proper Batch Structure 1507ms
Batch Format.Flush With No Events Sends Nothing 1005ms
Batch Format.Multiple Events Batched Together 1505ms
Error Handling.Does Not Retry On 403 3508ms
Error Handling.Does Not Retry On 413 3508ms
Error Handling.Retries On 408 7512ms

Feature_Flags Tests

16/16 tests passed

View Details
Test Status Duration
Request Payload.Request With Person Properties Device Id 1005ms
Request Payload.Flags Request Uses V2 Query Param 1007ms
Request Payload.Flags Request Hits Flags Path Not Decide 1006ms
Request Payload.Flags Request Omits Authorization Header 1007ms
Request Payload.Token In Flags Body Matches Init 1007ms
Request Payload.Groups Round Trip 1007ms
Request Payload.Groups Default To Empty Object 1006ms
Request Payload.Person Properties Distinct Id Auto Populated When Caller Omits It 1007ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False 1007ms
Request Payload.Disable Geoip Omitted Defaults To False 1007ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key 1006ms
Request Lifecycle.No Flags Request On Init Alone 503ms
Request Lifecycle.No Flags Request On Normal Capture 1508ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests 1011ms
Request Lifecycle.Mock Response Value Is Returned To Caller 1002ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event 1509ms

@ioannisj ioannisj merged commit 4845e48 into main Jun 8, 2026
29 checks passed
@ioannisj ioannisj deleted the dependabot/uv/ai-providers-170ba7c251 branch June 8, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant