Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 11, 2025

Bumps the langchain group with 1 update in the / directory: langchain-openai.

Updates langchain-openai from 0.2.14 to 0.3.29

Release notes

Sourced from langchain-openai's releases.

langchain-openai==0.3.29

Changes since langchain-openai==0.3.28

release(openai): release 0.3.29 (#32463) chore: formatting across codebase (#32466) fix(openai): revert some changes (#32462) feat(openai): minimal and verbosity (#32455) fix(openai): don't crash get_num_tokens_from_messages on gpt-5 (#32451) feat(openai): custom tools (#32449) test(openai): add tests for prompt_cache_key parameter and update docs (#32363) fix(openai): add in output_text (#32450) chore(openai): bump openai sdk (#32322) fix(openai): add max_retries parameter to ChatOpenAI for handling 503 capacity errors (#32286) fix: formatting issues in docstrings (#32265) feat(docs): improve devx, fix Makefile targets (#32237) fix: LLM mimicking Unicode responses due to forced Unicode conversion of non-ASCII characters. (#32222) fix(docs): capitalization, codeblock formatting, and hyperlinks, note blocks (#32235) docs(openai): add comprehensive documentation and examples for extra_body + others (#32149)

langchain-openai==0.3.28

Changes since langchain-openai==0.3.27

release(openai): 0.3.28 (#32015) fix(openai): support acknowledged safety checks in computer use (#31984) chore: [openai] bump sdk (#31958) docs(xai): update for Grok 4 (#31953) ruff: more rules across the board & fixes (#31898) fix: automatically fix issues with ruff (#31897) langchain-openai[patch]: Add ruff bandit rules to linter (#31788)

langchain-openai==0.3.27

Changes since langchain-openai==0.3.26

openai: release 0.3.27 (#31769) openai[fix]: Correctly set usage metadata for OpenAI Responses API (#31756) docs: updates from langchain-openai 0.3.26 (#31764)

langchain-openai==0.3.26

Changes since langchain-openai==0.3.25

openai[patch]: update cassette (#31752) openai[patch]: update test following release of openai 1.92 (#31751) openai: release 0.3.26 (#31749) openai[patch]: allow specification of output format for Responses API (#31686) openai[patch]: fix bug where function call IDs were not populated (#31735) openai[patch]: add attribute to always use previous_response_id (#31734) openai[patch]: fix dropping response headers while streaming / Azure (#31580)

langchain-openai==0.3.25

Changes since langchain-openai==0.3.24

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Important

Update langchain-openai dependency version in pyproject.toml to >=0.0.5,<0.4.

  • Dependencies:
    • Update langchain-openai version in pyproject.toml from >=0.0.5,<0.3 to >=0.0.5,<0.4.

This description was created by Ellipsis for f1f7cbd. You can customize this summary. It will automatically update as commits are pushed.

Disclaimer: Experimental PR review

Greptile Summary

This PR is an automated Dependabot update that bumps the langchain-openai development dependency from version 0.2.14 to 0.3.29. The change modifies the version constraint in pyproject.toml from <0.3 to <0.4, allowing the package manager to install the newer version.

The langchain-openai package is used as a development dependency in the Langfuse Python SDK, primarily for testing the Langchain integration functionality. Based on the repository's dependabot configuration, langchain-related dependencies are grouped together for coordinated updates, which explains why this update is part of the "langchain group".

This version bump represents a significant minor version jump that brings numerous improvements and fixes, including:

  • Support for GPT-5 token counting without crashes
  • Custom tools functionality
  • Prompt caching improvements with new prompt_cache_key parameter
  • Enhanced error handling with max_retries parameter for 503 capacity errors
  • Various bug fixes for function call IDs, response headers, and Unicode handling
  • Updated OpenAI SDK integration

Since this is a development dependency used primarily for testing the Langfuse-Langchain integration (specifically in test files that import ChatOpenAI), the update ensures that Langfuse's tests run against a current version of the langchain-openai package, helping maintain compatibility and catch potential integration issues early.

Confidence score: 4/5

  • This PR is safe to merge with minimal risk as it updates a development dependency with mostly additive changes and bug fixes
  • Score reflects the significant version jump but low risk due to dev-only usage and comprehensive release notes showing primarily fixes and enhancements
  • Pay attention to CI test results to ensure langchain integration tests still pass with the new version

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 11, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, no comments

Edit Code Review Bot Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/pip/langchain-52eb5f55a1 branch 4 times, most recently from 6fa5028 to 3820beb Compare August 19, 2025 14:55
@dependabot dependabot bot force-pushed the dependabot/pip/langchain-52eb5f55a1 branch 3 times, most recently from 8f53c89 to da28c8f Compare August 26, 2025 21:55
Bumps the langchain group with 1 update in the / directory: [langchain-openai](https://github.com/langchain-ai/langchain).


Updates `langchain-openai` from 0.2.14 to 0.3.29
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==0.2.14...langchain-openai==0.3.29)

---
updated-dependencies:
- dependency-name: langchain-openai
  dependency-version: 0.3.29
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: langchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/langchain-52eb5f55a1 branch from da28c8f to 976ad04 Compare August 27, 2025 15:08
@hassiebp hassiebp closed this Aug 27, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 27, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/langchain-52eb5f55a1 branch August 27, 2025 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants