chore(deps): bump the all-dependencies group across 1 directory with 22 updates by dependabot[bot] · Pull Request #147 · bogware/bog-agents

dependabot · 2026-06-18T03:43:17Z

Bumps the all-dependencies group with 21 updates in the /libs/bog-agents directory:

Package	From	To
anyio	`4.13.0`	`4.14.0`
langchain-core	`1.4.0`	`1.4.8`
langchain	`1.3.1`	`1.3.10`
langchain-anthropic	`1.4.3`	`1.4.6`
langchain-google-genai	`4.2.2`	`4.2.5`
wcmatch	`6.1`	`10.1`
cryptography	`48.0.0`	`49.0.0`
starlette	`1.2.1`	`1.3.1`
uvicorn	`0.47.0`	`0.49.0`
langchain-aws	`1.5.0`	`1.6.0`
langchain-openai	`1.2.1`	`1.3.2`
pytest	`9.0.3`	`9.1.1`
pytest-socket	`0.7.0`	`0.8.0`
ruff	`0.15.13`	`0.15.18`
ty	`0.0.37`	`0.0.51`
pytest-asyncio	`1.3.0`	`1.4.0`
langsmith	`0.8.5`	`0.8.18`
langchain-mistralai	`1.1.4`	`1.1.5`
langchain-deepseek	`1.0.1`	`1.1.0`
langchain-groq	`1.1.2`	`1.1.3`
datasets	`4.8.5`	`5.0.0`

Updates anyio from 4.13.0 to 4.14.0

Release notes

Sourced from anyio's releases.

4.14.0

Added support for Python 3.15

Added an asynchronous implementation of the itertools module (#998; PR by @11kkw)

Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @nullwiz)

Added support for custom capacity limiters in async path and file I/O functions and classes

Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

Changed TaskGroup.start_soon() to return a TaskHandle

Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @EmmanuelNiyonshuti)

Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @EmmanuelNiyonshuti)

Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @SAY-5)

Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

TaskGroup.start_soon()

TaskGroup.start()

anyio.from_thread.run()

This reverts an earlier change from v3.7.0 which was made in error. (#1153)

Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @gschaffner)

Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

anyio.CancelScope

anyio.CapacityLimiter

anyio.Condition

anyio.Event

anyio.Lock

anyio.ResourceGuard

anyio.Semaphore

Fixed cancellation exception escaping a cancel scope when triggered via check_cancelled() in a worker thread (#1113)

Fixed TaskGroup raising AttributeError instead of a clear error when entered more than once (#1109; PR by @bahtya)

Fixed lost type information when passing arguments to lru_cache (#1104; PR by @Graeme22)

Fixed test resumption after KeyboardInterrupt in async generator fixtures on the asyncio backend (#1060; PR by @EmmanuelNiyonshuti)

... (truncated)

Commits

ffe9133 Bumped up the version
f8b9f01 Fixed asyncio lock waiter deadlocks after cancellation (#1145)
d517ee1 [pre-commit.ci] pre-commit autoupdate (#1176)
550b68e Make anyio.run support Awaitable at runtime on all backends (#1171)
29a5e04 Fixed FastAPI test run
4d752ac Updated downstream test setups for FastAPI and Anthropic MCP
ebdc950 Added task handle support to start() and start_soon() (#1153)
f32bfb8 Fixed test suite compatibility issues with Pytest 9.1.0
85f7e8e Added __slots__ to several classes
b7ea84c [pre-commit.ci] pre-commit autoupdate (#1165)
Additional commits viewable in compare view

Updates langchain-core from 1.4.0 to 1.4.8

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.8

Changes since langchain-core==1.4.7

chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252) chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184) chore: bump bleach from 6.3.0 to 6.4.0 in /libs/core (#38198) release(core): 1.4.8 (#38254) refactor(langchain-classic): remove code for Python < 3.10 (#38194) perf(core): memoize BaseTool.tool_call_schema subset model and cache model_json_schema (#38073) style(core): fix style in langchain_core/_security (#38189) fix(core): preserve usage token details in v3 streaming events (#38021) fix(core): disallow_any_generics (#38156) chore(core): add mypy warn_unreachable (#38109) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118)

langchain-core==1.4.7

Changes since langchain-core==1.4.6

chore: bump tornado from 6.5.5 to 6.5.6 in /libs/core (#38115) release(core): 1.4.7 (#38111) fix(core,partners): rename package version trace metadata (#38110) fix(core): fix Pydantic v1 support in tools/runnable (#33698) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095)

langchain-core==1.4.6

Changes since langchain-core==1.4.5

release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) fix(core,openai): normalize v1 streamed tool calls (#35983) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470)

langchain-core==1.4.5

Changes since langchain-core==1.4.4

release(core): 1.4.5 (#38056) feat(standard-tests): validate tool call chunks during streaming (#34707) fix(core): async tracer on_chat_model_start fallback in sync context (#35233) fix(langchain): tighten structured output model fallbacks (#38042)

langchain-core==1.4.4

Changes since langchain-core==1.4.3

hotfix(core): bump lockfile(s) (#38032) release(core): 1.4.4 (#38031) fix(core): support content block tokens in callbacks (#34739) chore(core): improve typing of Runnable __or__ (#34530) chore(core): fix some any generics (#34545) fix(core): accept sequence tool error content (#38005)

... (truncated)

Commits

15b0a49 chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252)
612139f chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175)
921e370 chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176)
1aabc26 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179)
8d51355 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain (#38180)
0b1b7bb chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain (#38181)
dfd0627 chore: bump starlette from 1.0.1 to 1.3.1 in /libs/langchain (#38182)
0269392 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/langchain (#38183)
24d0b37 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184)
f368854 chore: bump bleach from 6.2.0 to 6.4.0 in /libs/text-splitters (#38195)
Additional commits viewable in compare view

Updates langchain from 1.3.1 to 1.3.10

Release notes

Sourced from langchain's releases.

langchain==1.3.10

Changes since langchain==1.3.9

release(langchain): 1.3.10 (#38255) chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176) chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179) fix(langchain): switch summary format (#38171) fix(langchain): detect provider strategy for dated gpt-5.2/gpt-5.4 snapshots (#38222) chore(langchain): improve typing in tests (#38163) chore: bump pyjwt from 2.12.0 to 2.13.0 in /libs/langchain_v1 (#38168) release(openai): 1.3.2 (#38130) hotfix(openai): switch version (#38123) release(openai): 1.4.0 (#38120) docs: refresh README installation and resources (#38119) test(core,langchain): update tests for explicit deserialization allowlists (#38118) release(core): 1.4.7 (#38111) release(anthropic): 1.4.6 (#38105)

langchain==1.3.9

Changes since langchain==1.3.8

release(anthropic): 1.4.6 (#38105) release(langchain): 1.3.9 (#38104) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106)

langchain==1.3.8

Changes since langchain==1.3.7

release(langchain): 1.3.8 (#38096) style(core,langchain,langchain-classic,partners): replace double backticks in docstrings (#38095) release(core): 1.4.6 (#38061) chore(langchain): add overloads to create_agent (#34309) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) fix(langchain): support async middleware decorator typing (#34584) fix(langchain): tighten structured output model fallbacks (#38042) release(anthropic): 1.4.5 (#38036) hotfix(core): bump lockfile(s) (#38032) refactor(langchain): refactor test_create_agent_tool_validation (#34443)

langchain==1.3.7

Changes since langchain==1.3.6

release(langchain): 1.3.7 (#38024) style(langchain): add ruff rules ARG (#34435) feat(langchain): add ProviderToolSearchMiddleware (#37969) chore(langchain): activate mypy warn_return_any (#34249) test(langchain): mark legacy trigger view for 2.0 removal (#38002)

langchain==1.3.6

Changes since langchain==1.3.5

... (truncated)

Commits

a807a9c release(langchain): 1.3.10 (#38255)
15b0a49 chore: bump jupyter-server from 2.18.0 to 2.20.0 in /libs/core (#38252)
612139f chore: bump tornado from 6.5.6 to 6.5.7 in /libs/text-splitters (#38175)
921e370 chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain_v1 (#38176)
1aabc26 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain_v1 (#38179)
8d51355 chore: bump aiohttp from 3.14.0 to 3.14.1 in /libs/langchain (#38180)
0b1b7bb chore: bump cryptography from 46.0.7 to 48.0.1 in /libs/langchain (#38181)
dfd0627 chore: bump starlette from 1.0.1 to 1.3.1 in /libs/langchain (#38182)
0269392 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/langchain (#38183)
24d0b37 chore: bump tornado from 6.5.6 to 6.5.7 in /libs/core (#38184)
Additional commits viewable in compare view

Updates langgraph from 1.2.0 to 1.2.6

Release notes

Sourced from langgraph's releases.

langgraph==1.2.6

Changes since 1.2.5

release(langgraph): 1.2.6 (#8139)

fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)

fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)

release(cli): 0.4.30 (#8101)

docs: standardize package README.md structure (#8064)

chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)

langgraph==1.2.5

Changes since 1.2.4

release(langgraph): 1.2.5 (#8062)

fix(langgraph): merge lc_versions config metadata (#8052)

release(cli): 0.4.28 (#8041)

fix: updateState bug for deltaChannel on empty thread (#8011)

chore: migrate Python type checking to ty (#8002)

chore(deps-dev): bump types-requests from 2.33.0.20260408 to 2.33.0.20260518 in /libs/langgraph (#7977)

chore(deps): bump the minor-and-patch group in /libs/langgraph with 14 updates (#7975)

langgraph==1.2.4

Changes since 1.2.3

release(langgraph): 1.2.4 (#7991)

test(sdk-py): add factory-graph integration test exercising the server factory path (#7978)

fix(langgraph): keep _on_started backward-compatible with overrides predating cause (#7987)

langgraph==1.2.3

Changes since 1.2.2

release(langgraph): 1.2.3 (#7945)

feat(langgraph): wire RemoteGraph.interleave to sdk-py interleave_projections (#7938)

feat(langgraph): add v3 streaming support to RemoteGraph (#7927)

feat(langgraph): name tool-dispatched subagents via lc_agent_name (#7928)

fix(langgraph): rename ProtocolEvent.eventId to event_id to match the wire field (#7942)

fix(langgraph): merge instead of overwrite in ensure_config for callbacks, tags, metadata, configurable (#7926)

fix(langgraph): [LSD-1507] Distinguish between user cancelled and other cancellations (#7920)

fix(cli): bump api bound to 0.10.0 (#7922)

feat(sdk-py): add websocket stream transports (#7830)

feat(sdk-py): add messages and tool call projections (#7823)

feat(sdk-py): add v3 streaming primitives and SSE transport (#7818)

langgraph==1.2.2

Changes since 1.2.1

chore(langgraph): bump version to 1.2.2 (#7914)

fix(langgraph): assign stable IDs to id=None BaseMessages before DeltaChannel checkpoint writes (#7913)

release(checkpoint): 4.1.1 (#7890)

... (truncated)

Commits

ce6c8b2 release(langgraph): 1.2.6 (#8139)
9100f2c feat: add delta-channel-dump recovery script as examples to dump from Postgre...
79befe6 fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
9af2521 fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
1a9baae release(cli): 0.4.30 (#8101)
916025d feat(cli): support compatible api version ranges (#8023)
9732084 ci(deps): pin GitHub Actions to commit SHAs (#8065)
8558481 docs: standardize package README.md structure (#8064)
4cf120d chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)
7ab79f9 release(langgraph): 1.2.5 (#8062)
Additional commits viewable in compare view

Updates langchain-anthropic from 1.4.3 to 1.4.6

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.6

Changes since langchain-anthropic==1.4.5

release(anthropic): 1.4.6 (#38105) fix(langchain,anthropic): confine file-search results and tighten anthropic allowed_prefixes (#38106) release(core): 1.4.6 (#38061) feat(core,partners): add package version tracking to tracing metadata (#35295) chore(infra): bump mypy to 2.1 and unify type-check config across the monorepo (#36470) feat(standard-tests): validate tool call chunks during streaming (#34707) test(anthropic): make expected warnings explicit (#38044) test(anthropic): make tests robust to gateway base URL (#38043)

langchain-anthropic==1.4.5

Changes since langchain-anthropic==1.4.4

release(anthropic): 1.4.5 (#38036) fix(core): support content block tokens in callbacks (#34739) chore(model-profiles): refresh model profile data (#38012) hotfix(openai): min core dep (#37990) test(langchain,partners): disable pytest-benchmark under xdist to silence PytestBenchmarkWarning (#37901) chore(model-profiles): refresh model profile data (#37895) chore(model-profiles): refresh model profile data (#37771)

langchain-anthropic==1.4.4

Changes since langchain-anthropic==1.4.3

release(anthropic): 1.4.4 (#37757) fix(anthropic): normalize cross-provider tool-call IDs (#37756) test(anthropic): retry integration tests on transient failures (#37697) chore(infra): bump langchain-tests floor to 1.1.9 (#37610) chore: bump langsmith from 0.8.3 to 0.8.5 in /libs/partners/anthropic (#37564) chore: bump idna from 3.11 to 3.15 in /libs/partners/anthropic (#37565) ci(infra): harden Dependabot version-bound preservation (#37510) chore(infra): merge v1.4 into master (#37350) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343) chore: bump requests from 2.33.0 to 2.33.1 in /libs/partners/anthropic (#37286) chore: bump langsmith from 0.7.31 to 0.8.3 in /libs/partners/anthropic (#37287) chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/anthropic (#37288)

Commits

c9f98c1 release(anthropic): 1.4.6 (#38105)
3bfb6a3 release(langchain): 1.3.9 (#38104)
dcaf779 fix(langchain,anthropic): confine file-search results and tighten anthropic `...
0392b6b fix(core): fix Pydantic v1 support in tools/runnable (#33698)
f6d63bc release(langchain): 1.3.8 (#38096)
5d20596 style(core,langchain,langchain-classic,partners): replace double backticks in...
fb55c66 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/huggingface (#38...
51daae5 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/chroma (#38092)
70e9579 chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/fireworks (#38093)
6c0e9af chore: bump langsmith from 0.8.9 to 0.8.14 in /libs/partners/xai (#38094)
Additional commits viewable in compare view

Updates langchain-google-genai from 4.2.2 to 4.2.5

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.2.5

Changes since libs/genai/v4.2.4

release(genai): 4.2.5 (#1831) fix(genai): merge per-request http options into chat config (#1830)

langchain-google-genai==4.2.4

Changes since libs/genai/v4.2.3

release(genai): 4.2.4 (#1815) fix(genai): fix tests (#1814) chore(genai): Update google-genai dependency to support 2.x (#1766) test(genai): force google_search use in structured-output test (#1801) chore: bump the minor-and-patch group across 1 directory with 5 updates (#1797) test(genai): fix context caching assertions, increase flaky retries (#1798) fix(genai): walrus operator precedence in v1 image/file url conversion (#1683) chore(genai): silence pytest-benchmark xdist warning (#1794)

langchain-google-genai==4.2.3

Changes since libs/genai/v4.2.2

release(genai): 4.2.3 (#1795) feat(genai): expose api_version (#1793) chore(model-profiles): refresh model profile data (#1792) chore: bump idna from 3.11 to 3.15 in /libs/genai (#1786) fix(genai): fix tests (#1785) chore(model-profiles): refresh model profile data (#1790) chore: bump langchain-core from 1.3.3 to 1.4.0 in /libs/genai (#1771) fix(genai, vertexai): reflect per-call model overrides in traces (#1774) chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/genai (#1758) docs(genai): fix deprecated safety settings documentation link (#1762) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/genai (#1763) chore: bump langsmith from 0.7.31 to 0.8.0 in /libs/genai (#1769) chore(model-profiles): refresh model profile data (#1755) ci(infra): pass --release --extended in release pre-checks (#1739) chore: update mypy requirement from <1.20.0,>=1.18.1 to >=1.18.1,<1.21.0 in /libs/genai in the genai group (#1666) feat(genai,vertexai): validate video metadata offsets before API call (#1719) chore(model-profiles): refresh model profile data (#1715) chore: bump min version of langchain-core to 1.3.2 (#1717) chore: bump langsmith from 0.7.9 to 0.7.31 in /libs/genai (#1702) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/genai (#1698) chore: bump pygments from 2.19.2 to 2.20.0 in /libs/genai (#1696)

Commits

54d649b release(genai): 4.2.5 (#1831)
923cb17 fix(genai): merge per-request http options into chat config (#1830)
8e006aa release(vertexai): 3.2.4 (#1829)
848df31 chore: bump pyarrow from 22.0.0 to 23.0.1 in /libs/vertexai (#1828)
57ddb64 release(genai): 4.2.4 (#1815)
13f9503 fix(genai): fix tests (#1814)
6b7d88d chore(genai): Update google-genai dependency to support 2.x (#1766)
b86ee2f test(genai): force google_search use in structured-output test (#1801)
fa11d05 chore: bump the minor-and-patch group across 1 directory with 5 updates (#1797)
cf8f49c test(genai): fix context caching assertions, increase flaky retries (#1798)
Additional commits viewable in compare view

Updates wcmatch from 6.1 to 10.1

Release notes

Sourced from wcmatch's releases.

10.1

NEW: Drop support for Python 3.8 which is "end of life".

NEW: Add support for Python 3.14.

NEW: Add wcmatch.glob.compile(pattern) and wcmatch.fnmatch.compile(pattern) to allow for precompiled matcher objects that can be reused.

10.0

NEW: Added GLOBSTARLONG which adds support for the Zsh style *** which acts like ** with GLOBSTAR but but traverses symlinks.

NEW: pathlib.match will respect symlink rules (when the REALPATH flag is given). Hidden file rules will be respected at all times. Enable DOTALL to match hidden files.

NEW: Symlinks should not be traversed when GLOBSTAR is enabled unless FOLLOW is also enabled, but they should still be matched. Prior to this change, symlinks were not traversed and they were ignored from matching which contradicts how Bash works and could be confusing to users.

FIX: Fix some inconsistencies with globmatch and symlink handling when REALPATH is enabled.

9.0

NEW: Remove deprecated function glob.raw_escape.

NEW: Officially support Python 3.13.

8.5.2

FIX: Fix pathlib issue with inheritance on Python versions greater than 3.12.

FIX: Fix EXTMATCH case with !(...) patterns.

8.5.1

FIX: Fix issue with type check failure in wcmatch.glob.

8.5

NEW: Formally support Python 3.11 (no change).

NEW: Add support for Python 3.12 (pathlib changes).

NEW: Drop Python 3.7 support.

FIX: Fix handling of current directory when magic and non-magic patterns are mixed in glob pattern list.

8.4.1

FIX: Windows drive path separators should normalize like other path separators.

FIX: Fix a Windows pattern parsing issue that caused absolute paths with ambiguous drives to not parse correctly.

8.4

NEW: Drop support for Python 3.6.

NEW: Switch to Hatch backend instead of Setuptools.

NEW: Add new exclude option to fnmatch, pathlib, and glob methods that allows exclusion patterns to be specified directly without needing to enable NEGATE and prepend patterns with !. exclude accepts a separate

... (truncated)

Commits

a6578f3 Update copyright
59fd08a Use trusted publishing and note Python 3.14 support (#229)
ff1562a Drop support for Python 3.8 and start testing experimental 3.14 (#228)
b67dad8 Windows testing should not be excluded on Python 3.13 anymore
08c64f5 Allow precompiled matcher objects to be hashed and pickled
73e0f45 Add option to get a precompiled matcher object (#227)
0af3bc5 Fix testing environment mismatch
69f315e Fix new lint errors
3f75174 Add security policy
37d16ac Typos: Remove duplicate words
Additional commits viewable in compare view

Updates cryptography from 48.0.0 to 49.0.0

Changelog

Sourced from cryptography's changelog.

49.0.0 - 2026-06-12


* **BACKWARDS INCOMPATIBLE:** Support for ``x86_64`` macOS has been removed.
  We now only publish ``arm64`` wheels for macOS.
* **BACKWARDS INCOMPATIBLE:** Support for 32-bit Windows has been removed.
  Users should move to a 64-bit Python installation.
* **BACKWARDS INCOMPATIBLE:** Removed the deprecated
  ``PUBLIC_KEY_TYPES``, ``PRIVATE_KEY_TYPES``,
  ``CERTIFICATE_PRIVATE_KEY_TYPES``, ``CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES``,
  and ``CERTIFICATE_PUBLIC_KEY_TYPES`` type aliases. Use
  ``PublicKeyTypes``, ``PrivateKeyTypes``, ``CertificateIssuerPrivateKeyTypes``,
  ``CertificateIssuerPublicKeyTypes``, and ``CertificatePublicKeyTypes``
  instead. These were deprecated in version 40.0.
* **BACKWARDS INCOMPATIBLE:** :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`
  now treats the first 4 bytes of the ``nonce`` as a 32-bit little-endian block
  counter (as defined in :rfc:`7539`) and tracks the number of bytes processed.
  Attempting to encrypt or decrypt more data than the counter allows before it
  would overflow now raises a :class:`ValueError` rather than silently diverging
  from RFC 7539. Setting the counter portion of the ``nonce`` to zero allows
  encrypting up to 256 GiB with a given nonce.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 certificate whose ECDSA or DSA
  signature ``AlgorithmIdentifier`` contains encoded NULL parameters now raises
  a :class:`ValueError`. Such certificates are invalid, but older versions of
  Java emitted them; previously they loaded with a deprecation warning.
* Fixed cross-compilation of the CFFI bindings when ``PYO3_CROSS_LIB_DIR``
  is set. The build now derives the Python include directory from
  ``PYO3_CROSS_LIB_DIR`` instead of querying the host interpreter, which
  previously caused the build to fail during cross-compilations for embedded
  systems, on hosts which have same-version Python development headers
  installed as the target Python.
* Added support for signing and verifying X.509 certificates, certificate
  signing requests, and certificate revocation lists with
  :doc:`/hazmat/primitives/asymmetric/mldsa` keys, as well as loading
  certificates that contain ML-DSA public keys.
* Added :meth:`~cryptography.hazmat.primitives.hpke.KEM.enc_length` to
  :class:`~cryptography.hazmat.primitives.hpke.KEM` so callers can split the
  encapsulated key from the ciphertext returned by
  :meth:`~cryptography.hazmat.primitives.hpke.Suite.encrypt`.
* :meth:`~cryptography.x509.verification.ExtensionPolicy.require_present`,
  :meth:`~cryptography.x509.verification.ExtensionPolicy.may_be_present`, and
  :meth:`~cryptography.x509.verification.ExtensionPolicy.require_not_present`
  now accept any extension type. Previously only a fixed set of extension
  types was supported, which made it impossible to account for otherwise
  unrecognized critical extensions during path validation.
* Added support for using :class:`~cryptography.x509.Certificate`,
  :class:`~cryptography.x509.CertificateSigningRequest`, and
  :class:`~cryptography.x509.CertificateRevocationList` as field types in
  :doc:`/hazmat/asn1/index` structures.
* Added :func:`~cryptography.hazmat.asn1.value_set`, a class decorator that
</tr></table>

... (truncated)

Commits

e300bbe bump version and changelog for 49.0.0 (#15030)
fa74cd8 Add external mu (message representative) support for ML-DSA (#14979)
f594db3 chore(deps): bump openssl from 0.10.80 to 0.10.81 (#15029)
608e011 chore(deps): bump openssl-sys from 0.9.116 to 0.9.117 (#15028)
a322bc4 chore(deps): bump cc from 1.2.63 to 1.2.64 (#15027)
33181a7 Reject critical nameConstraints extensions containing directoryName constrain...
6080dc7 Bump dependencies that dependabot isn't (#15026)
121faa3 chore(deps): bump virtualenv from 21.4.2 to 21.4.3 (#15023)
829520b Add more robust processing for DH parameters. (#15016)
0f05001 Bump downstream dependencies in CI (#15025)
Additional commits viewable in compare view

Updates starlette from 1.2.1 to 1.3.1

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

Use StarletteDeprecationWarning instead of DeprecationWarning by @Kludex in Kludex/starlette#3119

Enforce max_fields and max_part_size in FormParser by @Kludex in Kludex/starlette#3329

Enforce FormParser limits in parser callbacks by @Kludex in Kludex/starlette#3331

Full Changelog: Kludex/starlette@1.3.0...1.3.1

Version 1.3.0

What's Changed

Clamp oversized suffix ranges in FileResponse by @jiyujie2006 in Kludex/starlette#3307

Catch OSError alongside MultiPartException when closing temp files by @N3XT3R1337 in Kludex/starlette#3191

Add httpx2 to the full extra by @Kludex in Kludex/starlette#3323

Adjust testclient typing and warnings by @waketzheng in Kludex/starlette#3322

Fix IndexError in URL.replace() on a URL with no authority by @LeSingh1 in Kludex/starlette#3317

Annotate URLPath protocol parameter with Literal by @Chang-LeHung in Kludex/starlette#3285

avoid collapsing exception groups from user code by @graingert in Kludex/starlette#2830

Use removeprefix to strip weak ETag indicator in is_not_modified by @gnosyslambda in Kludex/starlette#3193

Build request.url from structured components by @Kludex in Kludex/starlette#3326

New Contributors

@jiyujie2006 made their first contribution in Kludex/starlette#3307

@N3XT3R1337 made their first contribution in Kludex/starlette#3191

@leestana01 made their first contribution in Kludex/starlette#3319

@LeSingh1 made their first contribution in Kludex/starlette#3317

@EmmanuelNiyonshuti made their first contribution in Kludex/starlette#3204

@Chang-LeHung made their first contribution in Kludex/starlette#3285

@gnosyslambda made their first contribution in Kludex/starlette#3193

Full Changelog: https://github.com/Klude...
Description has been truncated

…22 updates Bumps the all-dependencies group with 21 updates in the /libs/bog-agents directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.13.0` | `4.14.0` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.0` | `1.4.8` | | [langchain](https://github.com/langchain-ai/langchain) | `1.3.1` | `1.3.10` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.4.6` | | [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.2.2` | `4.2.5` | | [wcmatch](https://github.com/facelessuser/wcmatch) | `6.1` | `10.1` | | [cryptography](https://github.com/pyca/cryptography) | `48.0.0` | `49.0.0` | | [starlette](https://github.com/Kludex/starlette) | `1.2.1` | `1.3.1` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.47.0` | `0.49.0` | | [langchain-aws](https://github.com/langchain-ai/langchain-aws) | `1.5.0` | `1.6.0` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.1` | `1.3.2` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [pytest-socket](https://github.com/miketheman/pytest-socket) | `0.7.0` | `0.8.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.13` | `0.15.18` | | [ty](https://github.com/astral-sh/ty) | `0.0.37` | `0.0.51` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` | | [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.5` | `0.8.18` | | [langchain-mistralai](https://github.com/langchain-ai/langchain) | `1.1.4` | `1.1.5` | | [langchain-deepseek](https://github.com/langchain-ai/langchain) | `1.0.1` | `1.1.0` | | [langchain-groq](https://github.com/langchain-ai/langchain) | `1.1.2` | `1.1.3` | | [datasets](https://github.com/huggingface/datasets) | `4.8.5` | `5.0.0` | Updates `anyio` from 4.13.0 to 4.14.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.13.0...4.14.0) Updates `langchain-core` from 1.4.0 to 1.4.8 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.8) Updates `langchain` from 1.3.1 to 1.3.10 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.3.1...langchain==1.3.10) Updates `langgraph` from 1.2.0 to 1.2.6 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.2.0...1.2.6) Updates `langchain-anthropic` from 1.4.3 to 1.4.6 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-anthropic==1.4.3...langchain-anthropic==1.4.6) Updates `langchain-google-genai` from 4.2.2 to 4.2.5 - [Release notes](https://github.com/langchain-ai/langchain-google/releases) - [Commits](langchain-ai/langchain-google@libs/genai/v4.2.2...libs/genai/v4.2.5) Updates `wcmatch` from 6.1 to 10.1 - [Release notes](https://github.com/facelessuser/wcmatch/releases) - [Commits](facelessuser/wcmatch@6.1...10.1) Updates `cryptography` from 48.0.0 to 49.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...49.0.0) Updates `starlette` from 1.2.1 to 1.3.1 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@1.2.1...1.3.1) Updates `uvicorn` from 0.47.0 to 0.49.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.47.0...0.49.0) Updates `langchain-aws` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/langchain-ai/langchain-aws/releases) - [Commits](langchain-ai/langchain-aws@langchain-aws==1.5.0...langchain-aws==1.6.0) Updates `langchain-openai` from 1.2.1 to 1.3.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.2.1...langchain-openai==1.3.2) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `pytest-socket` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/miketheman/pytest-socket/releases) - [Changelog](https://github.com/miketheman/pytest-socket/blob/main/CHANGELOG.md) - [Commits](miketheman/pytest-socket@0.7.0...0.8.0) Updates `ruff` from 0.15.13 to 0.15.18 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.13...0.15.18) Updates `ty` from 0.0.37 to 0.0.51 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.37...0.0.51) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0) Updates `langsmith` from 0.8.5 to 0.8.18 - [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases) - [Commits](langchain-ai/langsmith-sdk@v0.8.5...v0.8.18) Updates `langchain-mistralai` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-mistralai==1.1.4...langchain-mistralai==1.1.5) Updates `langchain-deepseek` from 1.0.1 to 1.1.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-deepseek==1.0.1...langchain-deepseek==1.1.0) Updates `langchain-groq` from 1.1.2 to 1.1.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-groq==1.1.2...langchain-groq==1.1.3) Updates `datasets` from 4.8.5 to 5.0.0 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@4.8.5...5.0.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: cryptography dependency-version: 49.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: datasets dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: langchain dependency-version: 1.3.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-anthropic dependency-version: 1.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-aws dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-core dependency-version: 1.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-deepseek dependency-version: 1.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: langchain-google-genai dependency-version: 4.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-groq dependency-version: 1.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-mistralai dependency-version: 1.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langchain-openai dependency-version: 1.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: langgraph dependency-version: 1.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: langsmith dependency-version: 0.8.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pytest dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest-socket dependency-version: 0.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ruff dependency-version: 0.15.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ty dependency-version: 0.0.50 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: wcmatch dependency-version: '10.1' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-01T00:53:00Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 18, 2026

dependabot Bot force-pushed the dependabot/uv/libs/bog-agents/all-dependencies-ca767c73b1 branch from 1d411bd to af244ca Compare June 19, 2026 13:54

dependabot Bot force-pushed the dependabot/uv/libs/bog-agents/all-dependencies-ca767c73b1 branch from af244ca to 076fd2b Compare June 19, 2026 16:46

dependabot Bot closed this Jul 1, 2026

dependabot Bot deleted the dependabot/uv/libs/bog-agents/all-dependencies-ca767c73b1 branch July 1, 2026 00:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#147

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#147
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/libs/bog-agents/all-dependencies-ca767c73b1

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.14.0

langchain-core==1.4.8

langchain-core==1.4.7

langchain-core==1.4.6

langchain-core==1.4.5

langchain-core==1.4.4

langchain==1.3.10

langchain==1.3.9

langchain==1.3.8

langchain==1.3.7

langchain==1.3.6

langgraph==1.2.6

langgraph==1.2.5

langgraph==1.2.4

langgraph==1.2.3

langgraph==1.2.2

langchain-anthropic==1.4.6

langchain-anthropic==1.4.5

langchain-anthropic==1.4.4

langchain-google-genai==4.2.5

langchain-google-genai==4.2.4

langchain-google-genai==4.2.3

10.1

10.0

9.0

8.5.2

8.5.1

8.5

8.4.1

8.4

Version 1.3.1

What's Changed

Version 1.3.0

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading