| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
Sorry, something went wrong.
There was a problem hiding this comment.
LGTM, transitive dep patch bump in the lockfile.
Extended reasoning...This PR is a Dependabot-generated patch-level bump of langgraph-sdk from 0.3.12 to 0.3.15. Only uv.lock is modified — the source under langfuse/ and the pyproject.toml constraints are unchanged. langgraph-sdk is a transitive dependency (the repo declares langgraph>=1,<2 directly), pulled in via the langchain/langgraph integration paths.
None observed. The version bump itself includes a relevant fix (fix(sdk-py): percent-encode caller-supplied identifiers in URL paths), which is a small hardening improvement. No new direct dependencies are added.
Low. Lockfile-only changes for a patch-version bump of a transitive dependency need minimal review — semver expectation is bug fixes / non-breaking changes, and the bug-hunting pass found no issues. The incidental rewrite of exclude-newer to the 0001-01-01T00:00:00Z sentinel with an inline comment is uv's standard lockfile regeneration behavior and is documented as having no effect.
No outstanding reviewer comments, no prior reviews from me on this PR, and the diff is contained entirely within a generated lockfile. Established pattern in this repo for Dependabot transitive bumps.
Sorry, something went wrong.
Bumps [langgraph-sdk](https://github.com/langchain-ai/langgraph) from 0.3.12 to 0.3.15. - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@0.3.12...0.3.15) --- updated-dependencies: - dependency-name: langgraph-sdk dependency-version: 0.3.15 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
| Back | FazBrowse Home | New Git URL |
Bumps langgraph-sdk from 0.3.12 to 0.3.15.
Release notesSourced from langgraph-sdk's releases.
... (truncated)
Commits