[dependabot]

Bumps the python-dependencies group in /sdk/python with 3 updates: langchain-core, crewai and pydantic-ai-slim.

Updates langchain-core from 1.6.1 to 1.6.3

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.3

Changes since langchain-core==1.6.2

release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated .text() access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)

langchain-core==1.6.2

Changes since langchain-core==1.6.1

release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)

Commits

• 348c9dc release(core): 1.6.3 (#40407)
• e0e1557 feat(core): Allow model name and provider tracing metadata override based on ...
• 67ee6cb chore(model-profiles): refresh model profile data (#40399)
• d5d7cc5 release(anthropic): 1.7.2 (#40387)
• 4436bd2 fix(anthropic): preserve invalid tool use blocks (#40372)
• 443154d feat(huggingface): use torch.accelerator for device-agnostic device count det...
• 3539ca0 fix(huggingface): remove retired IPEX backend (#39649)
• 45d94fb chore(model-profiles): refresh model profile data (#40358)
• 6035769 release(openai): 1.6.2 (#40339)
• a7b0f0a docs: update OpenWiki (#40318)
• Additional commits viewable in compare view

Updates crewai from 1.15.20 to 1.15.21

Release notes

Sourced from crewai's releases.

1.15.21

What's Changed

Features

• Add telemetry to track checkpoint runtime and CLI usage.

Bug Fixes

• Fix gateway errors reported inside an HTTP 200 response.
• Keep deploy push on the AMP create source.
• Report scrape failures instead of raising IndexError in the Oxylabs integration.
• Route all DashScope models through the native provider.
• Persist JSON checkpoints as UTF-8.
• Drop stray $ in f-string search URLs for BrightData.
• Support list-form type arrays in JSON schema conversion.
• Correct gpt-4o-mini context window from 200000 to 128000.
• Preserve streaming tool call arguments at contentBlockStop.
• Make pre-commit hooks portable on Windows.

Documentation

• Clarify that tracing is managed separately from telemetry.
• Fix parallel search reference link.
• Remove stale parameters from handle_llm_stream_chunk docstring.
• Fix streaming output docstring examples.
• Use organization UUIDs in the skill install reference.

Contributors

@​Alphaxiaoteng, @​DrewWhittleNZ, @​Ghraven, @​Shxiao101, @​Vaishnavi220506, @​Vidit-Ostwal, @​danielfsbarreto, @​georgeatparallel, @​github-actions[bot], @​jessemiller, @​joaomdmoura, @​kimnamu, @​kiwoongyoon, @​liang0417, @​lorenzejay, @​oxy-giedrius, @​simpleqt, @​uoparaji

Commits

• a8d330d [docs-freeze] docs: snapshot and changelog for v1.15.21 (#7363)
• d469e9f feat: bump versions to 1.15.21 (#7362)
• d729cad fix(openai): surface gateway errors reported inside an HTTP 200 (#7342)
• 4ed4aba fix(cli): keep deploy push on the AMP create source (#7345)
• 57df7f5 test(bedrock): restore provider module after import test (#7355)
• b92e80b chore(tools): make the vision_tool more dynamic (#7350)
• b0fd0a9 feat(telemetry): track checkpoint runtime and CLI usage (#7348)
• a53ecc1 fix: make pre-commit hooks portable on Windows (#6881)
• 929a173 test(agents): cover native result as answer (#7334) (#7336)
• 9feaf5e docs(tools): fix parallel search reference link (#7344)
• Additional commits viewable in compare view

Updates pydantic-ai-slim from 2.39.0 to 2.42.0

Release notes

Sourced from pydantic-ai-slim's releases.

v2.42.0 (2026-09-08)

What's Changed

⚠️ Compatibility Notes

• Reject invalid DeferredToolResults.approvals values by @​adtyavrdhn in pydantic/pydantic-ai#8081

🚀 Features

• Add a GitHubCopilotProvider for GitHub Copilot's OpenAI-compatible API by @​dsfaccini in pydantic/pydantic-ai#8059

🐛 Bug Fixes

• Honor anthropic_disallows_sampling_settings in BedrockConverseModel by @​rscholz98 in pydantic/pydantic-ai#7961
• Resolve non-object $ref definitions inline in code-mode function signatures by @​pydanty in pydantic/pydantic-ai#8056
• Validate ToolReturnContent without a Python call per JSON node by @​dsfaccini in pydantic/pydantic-ai#7823
• Preserve Anthropic recovery across normalized history by @​dsfaccini in pydantic/pydantic-ai#8040

New Contributors

• @​StarsExpress made their first contribution in pydantic/pydantic-ai#8155

Full Changelog: pydantic/pydantic-ai@v2.41.0...v2.42.0

v2.41.0 (2026-09-07)

What's Changed

🚀 Features

• Deprecate fallback_model in favor of fallback_subagent_model on ImageGeneration and XSearch by @​dsfaccini in pydantic/pydantic-ai#8077
• Add openai-codex provider for ChatGPT/Codex subscription authentication by @​mpfaffenberger in pydantic/pydantic-ai#7769
• Add a direct image generation API with ImageGenerator by @​EgonFerri in pydantic/pydantic-ai#5357

🐛 Bug Fixes

• Report Anthropic native web searches in RequestUsage.details and price them in cost by @​adtyavrdhn in pydantic/pydantic-ai#8169
• Wrap botocore transport errors in ModelAPIError in BedrockConverseModel by @​kimnamu in pydantic/pydantic-ai#8131
• Snap Gemini thinking levels to the nearest supported level by @​dsfaccini in pydantic/pydantic-ai#8165

New Contributors

• @​kimnamu made their first contribution in pydantic/pydantic-ai#8131
• @​EgonFerri made their first contribution in pydantic/pydantic-ai#5357

Full Changelog: pydantic/pydantic-ai@v2.40.0...v2.41.0

v2.40.0 (2026-09-04)

What's Changed

🚀 Features

• Add pydantic_ai.prices.update_in_background() by @​adtyavrdhn in pydantic/pydantic-ai#4841
• Handle barge-in in the session: handle_barge_in=True, interrupt(played_bytes=...), and played_audio_bytes by @​DouweM in pydantic/pydantic-ai#7870
• Add provider_factory to infer_realtime_model by @​DouweM in pydantic/pydantic-ai#8106
• Add @agent.on_event for registering event listeners on an Agent by @​DouweM in pydantic/pydantic-ai#8101
• Add respond= to RealtimeSession.send() and document that a text turn solicits a reply by @​DouweM in pydantic/pydantic-ai#8110
• Add RealtimeSession.enqueue() for out-of-band prompts from code driving the session by @​DouweM in pydantic/pydantic-ai#8109

🐛 Bug Fixes

... (truncated)

Commits

• 0ec8a5d Preserve Anthropic recovery across normalized history (#8040)
• 8e3f21d Add the harness gh-aw page to the docs navigation (#8229)
• 86fc58f Skip unchanged tests/ files in make typecheck-changed and add a `PYRIGHT_...
• 96d7e90 Add a GitHubCopilotProvider for GitHub Copilot's OpenAI-compatible API (#8059)
• 30549ab Validate ToolReturnContent without a Python call per JSON node (#7823)
• 59f7839 Publish the harness TrajectoryJudge page (#8222)
• 462c3f7 Resolve non-object $ref definitions inline in code-mode function signatures...
• e958cdc Reject invalid DeferredToolResults.approvals values (#8081)
• edcb123 Add DRY API errors helper in CohereEmbeddingModel (#8213)
• 05aea63 Honor anthropic_disallows_sampling_settings in BedrockConverseModel (#7961)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7830f62f-019e-4da3-9545-998db3da30ea

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thanks @dependabot[bot] for keeping our dependencies current! 🙌

[github-actions]

Automated approval for Dependabot dependency update.

[hermes-exosphere]

Approved automatically by the Hermes Dependabot approver.