Bump the python-uv-lock group across 1 directory with 15 updates by dependabot[bot] · Pull Request #857 · splunk/splunk-sdk-python · GitHub

Bumps the python-uv-lock group with 15 updates in the / directory:

Package	From	To
langchain	1.3.17	1.4.9
pydantic	2.13.4	2.14.3
langchain-anthropic	1.6.1	1.7.10
langchain-openai	1.6.0	1.7.4
langchain-google-genai	4.3.4	4.4.3
google-auth	2.57.0	2.62.1
pytest	9.1.1	9.2.0
pytest-asyncio	1.4.0	1.4.1.post1
python-dotenv	1.2.3	1.2.4
build	1.5.0	1.6.1
sphinx	9.1.0	9.2.0
basedpyright	1.39.10	1.40.2
ruff	0.16.4	0.17.4
mbake	1.4.6	1.5.0
zizmor	1.29.0	1.32.0

Updates langchain from 1.3.17 to 1.4.9

Release notes

Sourced from langchain's releases.

langchain==1.4.9

Changes since langchain==1.4.8

release(langchain): 1.4.9 (#41684) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): standardize model refusal content blocks (#41582)

langchain==1.4.8

[!WARNING] Python 3.10 support will be dropped in langchain-core 1.8.0 and langchain 1.5.0. The current minor versions are the last to support Python 3.10. Please upgrade to Python 3.11 or later.

Changes since langchain==1.4.7

chore(langchain): bump langchain-core (#41640) release(langchain): 1.4.8 (#41636) chore(deps): bump pyasn1 from 0.6.4 to 0.6.5 in /libs/langchain_v1 (#41591) chore(deps): bump joserfc from 1.7.4 to 1.7.6 in /libs/langchain_v1 (#41587) chore(deps): bump authlib from 1.7.2 to 1.9.1 in /libs/langchain_v1 (#41539) chore(deps): bump the minor-and-patch group across 3 directories with 32 updates (#41465) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(deps): bump fastmcp from 4.0.11 to 4.1.2 in /libs/langchain_v1 (#41437) chore(deps): bump opentelemetry-api from 1.44.0 to 1.45.1 in /libs/langchain_v1 (#41423) chore(infra): relax third-party dependency upper bounds (#41407)

langchain==1.4.7

Changes since langchain==1.4.6

chore(langchain): update lockfile (#41402) release(langchain): 1.4.7 (#41401) chore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/langchain_v1 (#41370) feat(core,langchain,standard-tests): read tool-call-delta in stream consumers (#41246) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/langchain_v1 (#41360) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/langchain_v1 (#41330) chore(deps): bump mcp from 2.1.1 to 2.2.0 in /libs/langchain_v1 (#41270) feat(core): accept address inside LangChainTracer (#41006)

langchain==1.4.6

Changes since langchain==1.4.5

release(langchain): 1.4.6 (#41247) feat(langchain): add opt-in per-call interrupts to HITL middleware (#41062)

langchain==1.4.5

Changes since langchain==1.4.4

release(langchain): 1.4.5 (#41226) feat(langchain): accept summarizer in SummarizationMiddleware (#41225)

langchain==1.4.4

... (truncated)

Commits

d1d95b7 release(langchain): 1.4.9 (#41684)
bbcdd56 release(anthropic): 1.7.10 (#41685)
16a08bd release(openai): 1.7.4 (#41683)
d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
504fd5c chore(model-profiles): refresh model profile data (#41669)
aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
49b9dfb release(core): 1.7.5 (#41665)
f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
67f17db fix(core): end tool run on cancellation (#41660)
Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

Build wheels for GraalPy 3.13 by @msimacek in #14136.

The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

Improve schema generation for fixed type handlers by @alexmojaki in #14130

Skip general schema dispatch for builtin scalars by @alexmojaki in #14141

Skip annotation handler setup when annotations are empty by @alexmojaki in #14149

Fix quadratic serialization time with per-index include/exclude on sequences by @Viicos in #14160

Avoid type lookups when checking for None during serialization by @Viicos in #14167

Improve performance of model serialization by @Viicos in #14171

Improve performance of dict serialization by @Viicos in #14172

Improve performance of type inference during serialization by @Viicos in #14173

Avoid cloning the field name when using the default value during validation by @Viicos in #14175

Do not evaluate model_config annotations by @Viicos in #14195

Avoid slow runtime Protocol check when expanding GroupedMetadata annotations by @Viicos in #14196

Use a lightweight @contextmanager implementation internally by @Viicos in #14199

Fixes

Fix various issues about GC tracking in pydantic-core by @Viicos in #13819

Include null in serialization JSON Schema for unless-none field serializers by @Kropiunig in #13848

Fix RecursionError when copying or unpickling models with defer_build by @Viicos in #14115

Remove dead default_factory check in unsupported Field() attribute by @owtaylor in #14129

Disallow non string extra keys during validation by @Viicos in #14135

Fix deeply nested data being reported as a cyclic reference by @Viicos in #14164

New Contributors

@owtaylor made their first contribution in #14129

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @Viicos in #14003

Bump speedate to v0.18.0 by @Viicos in #14007

Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @Viicos in #14083

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

Handle TypeError gracefully during docstring extraction by @Viicos in #13874

Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @Viicos in #13891

Don't apply ser_json_timedelta to all datetime types in serialization inference by @Viicos in #13892

Encode JSON Schema defaults with a consistent configuration by @Viicos in #13893

Propagate init and kw_only=False from Field() to stdlib dataclass fields by @Viicos in #13898

Respect propagated extra config in the JSON Schema of stdlib dataclasses by @Viicos in #13899

Handle OS errors during ZoneInfo validation by @Viicos in #13912

Handle exceptions during Decimal validation by @Viicos in #13940

Rebuild incomplete types during serialization inference by @Viicos in #13922

Reject large exponents in Fraction validation by @Viicos in #13944

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945

New Contributors

@saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

ea492e0 Bump pydantic-core to v2.50.4
4f4a33f Prepare release v2.14.3
dca067b Benchmark TypedDict schema generation across builds
a2d1f6c Skip annotation handler setup when annotations are empty
3ae0a40 Construct builtin scalar union schemas directly
358d36f Skip general schema dispatch for builtin scalars
3cc701a Improve schema generation for fixed type handlers
762db7e Remove redundant None check in union schema generation
c214986 Bump pytest-codspeed to v5.0.4
038ee97 Bump typing-inspection to v0.4.5
Additional commits viewable in compare view

Updates langchain-anthropic from 1.6.1 to 1.7.10

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.7.10

Changes since langchain-anthropic==1.7.9

release(anthropic): 1.7.10 (#41685) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): translate Gemini safety blocks to refusal content blocks (#41658) feat(core): standardize model refusal content blocks (#41582)

langchain-anthropic==1.7.9

Changes since langchain-anthropic==1.7.8

release(anthropic): 1.7.9 (#41644) fix(anthropic): report streamed content-block tokens to callbacks (#41643)

langchain-anthropic==1.7.8

Changes since langchain-anthropic==1.7.7

release(anthropic): 1.7.8 (#41638) fix(anthropic): strip index from compaction blocks (#41637) fix(anthropic): handle null cache-creation token counts (#41553)

langchain-anthropic==1.7.7

Changes since langchain-anthropic==1.7.6

release(anthropic): 1.7.7 (#41538) fix(anthropic): trace resolved reasoning effort (#41536) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/partners/anthropic (#41391) fix: fix dependencies in some partner packages (#41266)

langchain-anthropic==1.7.6

Changes since langchain-anthropic==1.7.5

release(anthropic): 1.7.6 (#41221) chore(model-profiles): refresh model profile data (#41145) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/anthropic (#41101) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/anthropic (#41080) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/anthropic (#40964)

langchain-anthropic==1.7.5

Changes since langchain-anthropic==1.7.4

release(anthropic): 1.7.5 (#40912) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) fix(anthropic): serialize invalid tool calls as tool use on replay (#40864)

langchain-anthropic==1.7.4

Changes since langchain-anthropic==1.7.3

... (truncated)

Commits

bbcdd56 release(anthropic): 1.7.10 (#41685)
16a08bd release(openai): 1.7.4 (#41683)
d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
504fd5c chore(model-profiles): refresh model profile data (#41669)
aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
49b9dfb release(core): 1.7.5 (#41665)
f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
67f17db fix(core): end tool run on cancellation (#41660)
0cc6e7c release(typesafe): 0.0.1 (#41650)
Additional commits viewable in compare view

Updates langchain-openai from 1.6.0 to 1.7.4

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.4

Changes since langchain-openai==1.7.3

release(openai): 1.7.4 (#41683) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): standardize model refusal content blocks (#41582) chore(model-profiles): refresh model profile data (#41556)

langchain-openai==1.7.3

Changes since langchain-openai==1.7.2

test(openai): use current lightweight model in integration tests (#41509) release(openai): 1.7.3 (#41506) chore(model-profiles): refresh openai model profile data (#41505) build(infra): patch test-only Pillow without dropping Python 3.10 (#41484) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/openai (#41379) chore(deps): bump certifi from 2025.10.5 to 2026.10.19 in /libs/partners/openai (#41380) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/partners/openai (#41362) chore(model-profiles): refresh model profile data (#41325) chore(deps): bump pytest from 9.0.3 to 9.1.1 in /libs/partners/openai (#41328) chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/openai (#41333) chore(deps): bump requests from 2.33.0 to 2.34.2 in /libs/partners/openai (#41331) chore(deps): bump orjson from 3.11.6 to 3.13.0 in /libs/partners/openai (#41329) fix: fix dependencies in some partner packages (#41266)

langchain-openai==1.7.2

Changes since langchain-openai==1.7.1

release(openai): 1.7.2 (#41245) fix(openai): keep Responses stream items on one block when output_index drifts (#41121)

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

... (truncated)

Commits

16a08bd release(openai): 1.7.4 (#41683)
d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
504fd5c chore(model-profiles): refresh model profile data (#41669)
aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
49b9dfb release(core): 1.7.5 (#41665)
f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
67f17db fix(core): end tool run on cancellation (#41660)
0cc6e7c release(typesafe): 0.0.1 (#41650)
ddd7303 feat(core): standardize model refusal content blocks (#41582)
Additional commits viewable in compare view

Updates langchain-google-genai from 4.3.4 to 4.4.3

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.4.3

Changes since libs/genai/v4.4.2

release(genai): 4.4.3 (#2106) fix(genai): support all built-in Tool types in bind_tools, including enterprise_web_search (#2105) chore(model-profiles): refresh model profile data (#2059) feat(genai): surface Gemini safety blocks as refusal content blocks (#2104) chore: bump aiohttp from 3.14.4 to 3.14.5 in /libs/genai (#2075) chore: bump certifi from 2026.2.25 to 2026.10.19 in /libs/genai (#2077) chore: remove precautionary third-party dependency caps (#2074) chore: bump aiohttp from 3.14.3 to 3.14.4 in /libs/genai (#2067) chore: bump multidict from 6.7.1 to 6.9.1 in /libs/genai (#2053)

langchain-google-genai==4.4.2

Changes since libs/genai/v4.4.1

release(genai): 4.2.2 (#2058) fix(genai,vertexai): normalize model names and fix Gemini 3.5 cached content paths and streaming usage (#2044) chore(model-profiles): refresh model profile data (#1984)

langchain-google-genai==4.4.1

Changes since libs/genai/v4.4.0

release(genai): 4.4.1 (#2050) fix(genai): omit Bedrock cache points from Gemini prompts (#2049) fix(genai): treat Gemini 4+ models as Gemini 3 or later (#2047) chore: bump urllib3 from 2.7.0 to 2.8.0 in /libs/genai (#2032) chore: bump the minor-and-patch group in /libs/genai with 4 updates (#2034) chore: bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/genai (#2035) chore: bump types-protobuf from 7.35.1.20260827 to 7.35.1.20260906 in /libs/genai (#2036) chore: bump types-google-cloud-ndb from 2.4.0.20260724 to 2.4.0.20260909 in /libs/genai (#2037) chore: bump anyio from 4.12.1 to 4.14.2 in /libs/genai (#2020) chore: bump the minor-and-patch group across 1 directory with 2 updates (#1990) chore: bump types-protobuf from 7.35.1.20260824 to 7.35.1.20260827 in /libs/genai (#1986)

langchain-google-genai==4.4.0

Changes since libs/genai/v4.3.7

release(genai): 4.4.0 (#1989) feat(genai): support agentic video understanding (#1988)

langchain-google-genai==4.3.7

Changes since libs/genai/v4.3.6

release(genai): 4.3.7 (#1977) fix(genai): apply distinct indexes to repeated block types (#1974) chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /libs/genai (#1917) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969) fix(genai): remove __del__ that closes a potentially shared client (#1963) fix(genai): send skip_thought_signature_validator as a literal string (#1972)

... (truncated)

Commits

b14e2ac release(genai): 4.4.3 (#2106)
bead369 fix(genai): support all built-in Tool types in bind_tools, including enterpri...
d2ac37d chore(model-profiles): refresh model profile data (#2059)
a657a33 feat(genai): surface Gemini safety blocks as refusal content blocks (#2104)
b5d58f4 chore: bump langgraph from 1.2.12 to 1.2.14 in /libs/community (#2087)
a34e44c chore: bump pyasn1 from 0.6.4 to 0.6.5 in /libs/vertexai (#2093)
e34175b chore: bump langgraph from 1.2.9 to 1.2.19 in /libs/vertexai (#2092)
b49d2b7 chore: bump certifi from 2025.11.12 to 2026.10.19 in /libs/community (#2076)
bc2a317 chore: bump certifi from 2025.11.12 to 2026.10.19 in /libs/vertexai (#2082)
6d84f6f chore: bump opentelemetry-api from 1.45.0 to 1.45.1 in /libs/community (#2083)
Additional commits viewable in compare view

Updates google-auth from 2.57.0 to 2.62.1

Release notes

Sourced from google-auth's releases.

google-auth: v2.62.1

2.62.1 (2026-11-02)

Bug Fixes

auth: strip -fips suffix from AWS service name in SigV4 signing (#18920) (2e1899e)

auth: use an unencrypted key for mTLS certificate rotation (#18709) (8166325)

Commits

d50415c chore(main): release google-auth 2.62.1 (#18786)
2e1899e fix(auth): strip -fips suffix from AWS service name in SigV4 signing (#18920)
ad03b95 perf(spanner): optimize request ID header generation and retry closures (#18408)
6e80b83 fix(bigtable): encode str qualifier in DeleteRangeFromColumn and allow -2**63...
72e5f48 docs(bigtable): add samples for sync client (#17820)
8aa6d4d fix(bigtable): validate DirectRow and table match in MutationsBatcher.mutate ...
8e0c4ab chore(bigtable): update pytest-asyncio (#18922)
048ef17 chore(main): release google-cloud-bigquery 3.47.0 (#18812)
a6d7f29 chore: release main (#18891)
deb2194 fix(google-api-core): align HTTP T3 and T4 OpenTelemetry span status and attr...
Additional commits viewable in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

#14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

#8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

#993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;

a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

#14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

#14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

#14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

#14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

#7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

#14743: Full diff: now contains a legend explaining the + & - symbols in diff output.

#2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.

#6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

#10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits

ae1d0ff Prepare release version 9.2.0
143ce31 pre-commit: exclude codespell on generated release announcements
532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
679d09c [pre-commit.ci] pre-commit autoupdate (#15266)
41d12cd docs: clarify typing for yield fixtures
b9022ba Merge pull request #15182 from 1871698/docs/improve-getting-started-description
16f87a7 docs: improve getting-started.rst test execution description
082ed70 Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6
ae37a01 Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4
Additional commits viewable in compare view

Updates pytest-asyncio from 1.4.0 to 1.4.1.post1

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.1.post1

1.4.1.post1 - 2026-11-01

Changed

Removed the upper version bound on the pytest dependency. (#1605)

pytest-asyncio v1.4.1

1.4.1 - 2026-10-25

Added

Declared support for Python 3.15 (#1588)

Fixed

Allow AsyncIterable as a return type for asynchronous generator fixtures decorated with pytest_asyncio.fixture (#1090)

Notes for Downstream Packagers

Source-tree development dependencies now use PEP 735 dependency groups and uv.lock. (#1518)

Commits

e420349 Bump mypy pre-commit hook to v2.4.0 (#1601)
16a1ba4 chore: Prepare release of v1.4.1.post1.
7087e7f build: drop pytest upper bound (#1605) (#1606)
6af7f5c chore: Prepare release of v1.4.1.
32ccf64 Support 3.15 (#1588)
9830071 Build(deps): Bump certifi from 2026.6.17 to 2026.10.19 (#1590)
0238023 Build(deps): Bump virtualenv from 21.7.13 to 21.14.13 (#1589)
93893ec Build(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (#1583)
f287e5e Build(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#1581)
b71da4f Build(deps-dev): Bump hypothesis from 6.168.3 to 6.168.5 (#1582)
Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

dotenv get no longer exits with code 1 for empty string values (KEY=) by [@ShamikOfficial] in #700

An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@Noethix55555] in #663

dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

dotenv get no longer exits with code 1 for empty string values (KEY=) by [

Bumps the python-uv-lock group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [langchain](https://github.com/langchain-ai/langchain) | `1.3.17` | `1.4.9` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.14.3` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.6.1` | `1.7.10` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.0` | `1.7.4` | | [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.3.4` | `4.4.3` | | [google-auth](https://github.com/googleapis/google-cloud-python) | `2.57.0` | `2.62.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.0` | `1.4.1.post1` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` | | [build](https://github.com/pypa/build) | `1.5.0` | `1.6.1` | | [sphinx](https://github.com/sphinx-doc/sphinx) | `9.1.0` | `9.2.0` | | [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.10` | `1.40.2` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.17.4` | | [mbake](https://github.com/EbodShojaei/bake) | `1.4.6` | `1.5.0` | | [zizmor](https://github.com/zizmorcore/zizmor) | `1.29.0` | `1.32.0` | Updates `langchain` from 1.3.17 to 1.4.9 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.3.17...langchain==1.4.9) Updates `pydantic` from 2.13.4 to 2.14.3 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.14.3) Updates `langchain-anthropic` from 1.6.1 to 1.7.10 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-anthropic==1.6.1...langchain-anthropic==1.7.10) Updates `langchain-openai` from 1.6.0 to 1.7.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.6.0...langchain-openai==1.7.4) Updates `langchain-google-genai` from 4.3.4 to 4.4.3 - [Release notes](https://github.com/langchain-ai/langchain-google/releases) - [Commits](langchain-ai/langchain-google@libs/genai/v4.3.4...libs/genai/v4.4.3) Updates `google-auth` from 2.57.0 to 2.62.1 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-auth-v2.57.0...google-auth-v2.62.1) Updates `pytest` from 9.1.1 to 9.2.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.1...9.2.0) Updates `pytest-asyncio` from 1.4.0 to 1.4.1.post1 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.4.0...v1.4.1.post1) Updates `python-dotenv` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4) Updates `build` from 1.5.0 to 1.6.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.5.0...1.6.1) Updates `sphinx` from 9.1.0 to 9.2.0 - [Release notes](https://github.com/sphinx-doc/sphinx/releases) - [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst) - [Commits](sphinx-doc/sphinx@v9.1.0...v9.2.0) Updates `basedpyright` from 1.39.10 to 1.40.2 - [Release notes](https://github.com/detachhead/basedpyright/releases) - [Commits](DetachHead/basedpyright@v1.39.10...v1.40.2) Updates `ruff` from 0.16.4 to 0.17.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.4...0.17.4) Updates `mbake` from 1.4.6 to 1.5.0 - [Release notes](https://github.com/EbodShojaei/bake/releases) - [Changelog](https://github.com/EbodShojaei/bake/blob/main/CHANGELOG.md) - [Commits](EbodShojaei/bake@v1.4.6...v1.5.0) Updates `zizmor` from 1.29.0 to 1.32.0 - [Release notes](https://github.com/zizmorcore/zizmor/releases) - [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md) - [Commits](zizmorcore/zizmor@v1.29.0...v1.32.0) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.4.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: pydantic dependency-version: 2.14.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: langchain-anthropic dependency-version: 1.7.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: langchain-openai dependency-version: 1.7.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: langchain-google-genai dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: google-auth dependency-version: 2.62.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: pytest dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: pytest-asyncio dependency-version: 1.4.1.post1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-uv-lock - dependency-name: python-dotenv dependency-version: 1.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-uv-lock - dependency-name: build dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: sphinx dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: basedpyright dependency-version: 1.40.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: ruff dependency-version: 0.17.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: mbake dependency-version: 1.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock - dependency-name: zizmor dependency-version: 1.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-uv-lock ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner November 13, 2026 10:56

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 13, 2026

Bump the python-uv-lock group across 1 directory with 15 updates by dependabot[bot] · Pull Request #857 · splunk/splunk-sdk-python · GitHub

Repository navigation

Bump the python-uv-lock group across 1 directory with 15 updates - #857

Bump the python-uv-lock group across 1 directory with 15 updates#857
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/python-uv-lock-4cc2d7ce78

dependabot Bot commented on behalf of github Nov 13, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the python-uv-lock group across 1 directory with 15 updates by dependabot[bot] · Pull Request #857 · splunk/splunk-sdk-python · GitHub

Repository navigation

Bump the python-uv-lock group across 1 directory with 15 updates - #857

Bump the python-uv-lock group across 1 directory with 15 updates#857dependabot[bot] wants to merge 1 commit intodevelopsplunk/splunk-sdk-python:developfrom dependabot/uv/python-uv-lock-4cc2d7ce78splunk/splunk-sdk-python:dependabot/uv/python-uv-lock-4cc2d7ce78Copy head branch name to clipboard

Conversation

dependabot Bot commented on behalf of github Nov 13, 2026

langchain==1.4.9

langchain==1.4.8

langchain==1.4.7

langchain==1.4.6

langchain==1.4.5

langchain==1.4.4

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

Performance

Fixes

New Contributors

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

Packaging

v2.14.0 (2026-10-08)

What's Changed

New Features

Changes

Fixes

New Contributors

langchain-anthropic==1.7.10

langchain-anthropic==1.7.9

langchain-anthropic==1.7.8

langchain-anthropic==1.7.7

langchain-anthropic==1.7.6

langchain-anthropic==1.7.5

langchain-anthropic==1.7.4

langchain-openai==1.7.4

langchain-openai==1.7.3

langchain-openai==1.7.2

langchain-openai==1.7.1

langchain-openai==1.7.0

langchain-google-genai==4.4.3

langchain-google-genai==4.4.2

langchain-google-genai==4.4.1

langchain-google-genai==4.4.0

langchain-google-genai==4.3.7

google-auth: v2.62.1

2.62.1 (2026-11-02)

Bug Fixes

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

New features

Improvements in existing functionality

pytest-asyncio v1.4.1.post1

1.4.1.post1 - 2026-11-01

Changed

pytest-asyncio v1.4.1

1.4.1 - 2026-10-25

Added

Fixed

Notes for Downstream Packagers

v1.2.4

Fixed

[1.2.4] - 2026-10-01

Fixed

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the python-uv-lock group across 1 directory with 15 updates#857
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/python-uv-lock-4cc2d7ce78