Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 28, 2024

Bumps the langchain group with 2 updates in the / directory: langchain and langchain-google-vertexai.

Updates langchain from 0.3.8 to 0.3.9

Release notes

Sourced from langchain's releases.

langchain-core==0.3.9

Changes since langchain-core==0.3.8

core[patch]: Release 0.3.9 (#27117) core,integrations[minor]: Dont error on fields in model_kwargs (#27110) core: fix batch race condition in FakeListChatModel (#26924) core[patch]: exclude model cache from ser (#27086) core[patch]: add UsageMetadata details (#27072)

langchain==0.3.9

Changes since langchain==0.3.8

langchain[patch]: Release 0.3.9 (#28399) Init embeddings (#28370) langchain[patch]: init_chat_model provider in model string (#28367) langchain[patch]: update deprecation message for agent classes and constructors (#28369) langchain: Fix Neo4jVector vector store reference from partner package for self query (#28292) langchain[patch]: support numpy 2 (#28183)

Commits

Updates langchain-google-vertexai from 2.0.3 to 2.0.8

Release notes

Sourced from langchain-google-vertexai's releases.

libs/vertexai/v2.0.8

What's Changed

Full Changelog: langchain-ai/langchain-google@libs/community/v2.0.3...libs/vertexai/v2.0.8

libs/vertexai/v2.0.7

What's Changed

Full Changelog: langchain-ai/langchain-google@libs/genai/v2.0.4...libs/vertexai/v2.0.7

libs/vertexai/v2.0.6

What's Changed

Full Changelog: langchain-ai/langchain-google@libs/community/v2.0.2...libs/vertexai/v2.0.6

libs/genai/v2.0.6

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-google@libs/genai/v2.0.5...libs/genai/v2.0.6

libs/vertexai/v2.0.5

What's Changed

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 28, 2024
@github-actions github-actions bot enabled auto-merge (squash) November 28, 2024 13:48
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

This pull request updates several dependencies and includes fixes and features for the Langfuse Python SDK. Here's a summary of the key changes:

  • Updates Langchain from 0.3.8 to 0.3.9 with improvements to model handling, deprecation messages, and numpy 2.0 support
  • Fixes empty input handling in Langchain stream calls and adds proper span input tracking
  • Adds support for linking Langfuse prompts directly to OpenAI completions via new langfuse_prompt parameter
  • Improves type support for decorators and adds optional observation_name parameter to @observe()
  • Enhances error handling for asyncio queues and circular references in serialization

Key points to note:

  • The changes maintain backward compatibility while adding new functionality
  • Several bug fixes improve stability around streaming and async operations
  • Type hints and error handling have been strengthened throughout
  • New features enable better integration between Langfuse and OpenAI/Langchain

No file(s) reviewed, no comment(s)
Edit PR Review Bot Settings | Greptile

@maxdeichmann
Copy link
Member

@dependabot rebase

Bumps the langchain group with 2 updates in the / directory: [langchain](https://github.com/langchain-ai/langchain) and [langchain-google-vertexai](https://github.com/langchain-ai/langchain-google).


Updates `langchain` from 0.3.8 to 0.3.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.8...langchain==0.3.9)

Updates `langchain-google-vertexai` from 2.0.3 to 2.0.8
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v2.0.3...libs/vertexai/v2.0.8)

---
updated-dependencies:
- dependency-name: langchain
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: langchain
- dependency-name: langchain-google-vertexai
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: langchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/langchain-68d69fb265 branch from 4bfac48 to 7d2afb3 Compare November 28, 2024 13:58
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

This pull request continues dependency updates and includes additional fixes and features for the Langfuse Python SDK. Here are the key changes since the last review:

  • Updates Pydantic to v2.7.0 with improved field serialization, docstring handling, and support for typing.Self
  • Adds SQLParse 0.5.0 with improved SQL parsing and security fixes for deeply nested statements
  • Updates OpenAI SDK to 1.23.6 with timestamp handling improvements and bug fixes for API responses
  • Upgrades Ruff to 0.4.1 featuring a new hand-written parser that provides 2x faster performance

Key points:

  • Security fix in SQLParse for potential DOS vulnerability from recursive parsing
  • Performance improvements from Ruff's new parser implementation
  • Timestamp handling fixes in OpenAI SDK to use unix integers consistently
  • Pydantic updates add new features like field deprecation support and generic Secret types

No file(s) reviewed, no comment(s)
Edit PR Review Bot Settings | Greptile

@github-actions github-actions bot merged commit 76610e0 into main Nov 28, 2024
9 of 10 checks passed
@github-actions github-actions bot deleted the dependabot/pip/langchain-68d69fb265 branch November 28, 2024 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants