chore(deps-dev): bump the gha group across 1 directory with 10 updates #3587
+2,428
−3,632
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the gha group with 10 updates in the /packages/opentelemetry-instrumentation-langchain directory: | Package | From | To | | --- | --- | --- | | [pytest-sugar](https://github.com/Teemu/pytest-sugar) | `1.0.0` | `1.1.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.11` | `0.14.12` | | [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.51.0` | `0.76.0` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `0.3.13` | `0.3.22` | | [langchain-cohere](https://github.com/langchain-ai/langchain-cohere) | `0.3.1` | `0.4.6` | | [langchain-huggingface](https://github.com/langchain-ai/langchain) | `0.1.2` | `0.3.1` | | [langgraph](https://github.com/langchain-ai/langgraph) | `0.4.10` | `0.6.11` | | [openai](https://github.com/openai/openai-python) | `1.109.1` | `2.15.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.24.0` | `1.2.0` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.2` | `7.0.0` | Updates `pytest-sugar` from 1.0.0 to 1.1.1 - [Release notes](https://github.com/Teemu/pytest-sugar/releases) - [Changelog](https://github.com/Teemu/pytest-sugar/blob/main/CHANGES.rst) - [Commits](Teemu/pytest-sugar@v1.0.0...v1.1.1) Updates `ruff` from 0.14.11 to 0.14.12 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/commits) Updates `anthropic` from 0.51.0 to 0.76.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-python@v0.51.0...v0.76.0) Updates `langchain-anthropic` from 0.3.13 to 0.3.22 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-anthropic==0.3.13...langchain-anthropic==0.3.22) Updates `langchain-cohere` from 0.3.1 to 0.4.6 - [Release notes](https://github.com/langchain-ai/langchain-cohere/releases) - [Commits](langchain-ai/langchain-cohere@libs/cohere/v0.3.1...libs/cohere/v0.4.6) Updates `langchain-huggingface` from 0.1.2 to 0.3.1 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-huggingface==0.1.2...langchain-huggingface==0.3.1) Updates `langgraph` from 0.4.10 to 0.6.11 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@0.4.10...0.6.11) Updates `openai` from 1.109.1 to 2.15.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v1.109.1...v2.15.0) Updates `pytest-asyncio` from 0.24.0 to 1.2.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.24.0...v1.2.0) Updates `vcrpy` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.2...v7.0.0) --- updated-dependencies: - dependency-name: pytest-sugar dependency-version: 1.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: ruff dependency-version: 0.14.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha - dependency-name: anthropic dependency-version: 0.76.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: langchain-anthropic dependency-version: 0.3.22 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gha - dependency-name: langchain-cohere dependency-version: 0.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: langchain-huggingface dependency-version: 0.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: langgraph dependency-version: 0.6.11 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gha - dependency-name: openai dependency-version: 2.15.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: pytest-asyncio dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha - dependency-name: vcrpy dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: gha ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
![ellipsis-dev[bot]](https://avatars.githubusercontent.com/in/64358?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Important
Looks good to me! 👍
Reviewed everything up to fc073e2 in 2 minutes and 40 seconds. Click for details.
- Reviewed
47lines of code in1files - Skipped
1files when reviewing. - Skipped posting
10draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/opentelemetry-instrumentation-langchain/pyproject.toml:32
- Draft comment:
Bumped pytest-sugar to 1.1.1 in the dev group. Ensure its reporter signature changes don’t conflict with other pytest plugins. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is related to a dependency change, specifically bumping the version ofpytest-sugar. It asks the PR author to ensure that the reporter signature changes don't conflict with other pytest plugins. This falls under the rule of not asking the author to ensure compatibility or test changes, which is not allowed.
2. packages/opentelemetry-instrumentation-langchain/pyproject.toml:37
- Draft comment:
Expanded the upper bound for 'anthropic' to <0.77.0. Verify that any API changes in versions >=0.52.0 are compatible with our tests. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to verify compatibility with API changes, which violates the rule against asking for confirmation or verification of behavior. It does not provide a specific suggestion or point out a specific issue with the code.
3. packages/opentelemetry-instrumentation-langchain/pyproject.toml:41
- Draft comment:
Updated langchain-cohere to 0.4.6. Confirm that its API changes have been integrated properly. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to confirm that API changes have been integrated properly, which falls under the rule of not asking the author to confirm or ensure things. It does not provide a specific suggestion or point out a specific issue.
4. packages/opentelemetry-instrumentation-langchain/pyproject.toml:43
- Draft comment:
Broadened version range for langchain-huggingface to <0.4.0. Ensure newer releases remain backward compatible with our instrumentation. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is related to dependency changes, specifically the version range forlangchain-huggingface. The comment suggests ensuring backward compatibility, which is a general caution and not a specific actionable suggestion. According to the rules, comments on dependency changes or general cautions about compatibility should be removed.
5. packages/opentelemetry-instrumentation-langchain/pyproject.toml:47
- Draft comment:
Extended langgraph's version range to <0.7.0. Verify that any changes in versions 0.5.x or 0.6.x don’t break our instrumentation. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is asking the PR author to verify that changes in certain versions don't break the instrumentation, which is against the rules. It doesn't provide a specific suggestion or point out a specific issue with the code.
6. packages/opentelemetry-instrumentation-langchain/pyproject.toml:48
- Draft comment:
Updated openai dependency to allow versions up to <3. Confirm that changes in OpenAI v2.x are handled appropriately. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%The comment is asking the PR author to confirm that changes in OpenAI v2.x are handled appropriately. This falls under the rule of not asking the author to confirm or ensure behavior, which is not allowed.
7. packages/opentelemetry-instrumentation-langchain/pyproject.toml:53
- Draft comment:
pytest-asyncio's upper bound is now <1.3.0, supporting newer releases. Verify that async tests work properly with any changes in the event loop behavior. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is about a dependency change, specifically the upper bound of pytest-asyncio. It asks the PR author to verify that async tests work properly, which is a general request for verification and not a specific code suggestion or issue. This violates the rule against asking the author to ensure behavior is intended or tested.
8. packages/opentelemetry-instrumentation-langchain/pyproject.toml:58
- Draft comment:
vcrpy's version range has been updated to <8 to include v7 releases. Ensure cassette formats remain compatible. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%<= threshold50%This comment is related to a dependency change, specifically the version range of vcrpy. It suggests ensuring compatibility of cassette formats, which is a general cautionary note. According to the rules, comments on dependency changes or general cautions about compatibility should be removed.
9. packages/opentelemetry-instrumentation-langchain/pyproject.toml:55
- Draft comment:
Duplicate 'pytest-sugar' dependency found in the test group. Consider consolidating to avoid redundancy unless intentional. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 20% vs. threshold = 50% This comment is about code that exists in the file (the duplicate pytest-sugar dependency), but it's not specifically about a change made in this PR. The PR simply updated the version numbers of both instances from 1.0.0 to 1.1.1, but the duplication already existed before this PR. According to the rules, comments should be about changes made by the diff. The comment is also somewhat speculative ("unless intentional") and doesn't clearly indicate a required code change - it says "consider consolidating" which is more of a suggestion. This appears to be a code quality observation about pre-existing structure rather than an issue introduced by the changes. The duplication might be intentional since 'dev' and 'test' are separate dependency groups that might be used independently. The comment could be valid if the duplication is truly problematic, and the PR author did touch both lines, so they could have consolidated them during this update. While the PR author did update both lines, the duplication was pre-existing and not introduced by this change. The comment is about the structure of the dependency groups rather than the version update itself. According to the rules, I should only keep comments about changes made by the diff, and this is more about unchanged structure. This comment should be deleted because it's about pre-existing code structure (the duplication) rather than the actual change made in the PR (version updates). The comment is also not clearly actionable - it uses "consider" language and includes "unless intentional" which makes it speculative.
10. packages/opentelemetry-instrumentation-langchain/pyproject.toml:56
- Draft comment:
Duplicate 'pytest>=8.3.3,<9' dependency appears in the test group. Confirm if this redundancy is necessary for different dependency groups. - Reason this comment was not posted:
Comment was on unchanged code.
Workflow ID: wflow_iMIJNQwfpamhTI1G
You can customize 
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/uv/packages/opentelemetry-instrumentation-langchain/gha-35af071678
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gha group with 10 updates in the /packages/opentelemetry-instrumentation-langchain directory:
1.0.01.1.10.14.110.14.120.51.00.76.00.3.130.3.220.3.10.4.60.1.20.3.10.4.100.6.111.109.12.15.00.24.01.2.06.0.27.0.0Updates
pytest-sugarfrom 1.0.0 to 1.1.1Release notes
Sourced from pytest-sugar's releases.
Changelog
Sourced from pytest-sugar's changelog.
Commits
8133503Release pytest-sugar 1.1.16798042Fix conflict with other Pytest plugins (#297)43bbdd0Release pytest-sugar 1.1.0855d661Feature - Playwright Support for Trace Zip Mapping (#296)2a5862aMerge pull request #293 from cgoldberg/add-py313ca26d98Add support for Python 3.1369989ebClarify license as BSD 3-Clause License3c86a5cMerge pull request #289 from deronnax/remove-packaging-depc123be0remove 'packaging' packageefafd9cMerge pull request #282 from penguinpee/mainUpdates
rufffrom 0.14.11 to 0.14.12Changelog
Sourced from ruff's changelog.
Commits
Updates
anthropicfrom 0.51.0 to 0.76.0Release notes
Sourced from anthropic's releases.
... (truncated)
Changelog
Sourced from anthropic's changelog.
... (truncated)
Commits
9b5ab24release: 0.76.0e638d2efeat(client): add support for binary request streaming939a9aacodegen metadata1fb3773fix(client): loosen auth header validation103dd1fchore(ci): Add Claude Code GitHub Workflow (#1293)b9d03ebchore(internal): add--fixargument to lint script0e15b87fix: use async_to_httpx_files in patch method981bbc7chore(internal): add missing files argument to base client9d2a4cccodegen metadatac7f9600codegen metadataUpdates
langchain-anthropicfrom 0.3.13 to 0.3.22Commits
a763eberelease(anthropic): 0.3.22 (#33394)5fa1094fix(anthropic,standard-tests): carry over updates to v0.3 (#33393)5459ff1chore: cap lib upper bounds, run sync (#33320)f95669arelease(openai): 0.3.35 (#33299)3a465d6feat(openai): enable stream_usage when using default base URL and client (#33...e16feb9release(ollama): 0.3.10 (#33210)2bb57d4fix(ollama): excludeNoneparameters from options dictionary (#33208) (#33209)48b7775release(ollama): 0.3.9 (#33200)6f2d16erefactor(ollama): simplify options handling (#33199)a9eda18refactor(ollama): clean up tests (#33198)Updates
langchain-coherefrom 0.3.1 to 0.4.6Release notes
Sourced from langchain-cohere's releases.
... (truncated)
Commits
c3392e4release: 0.4.6 (#149)b53f464fix: ChatCohere._agenerate tool call parsing broken (#148)f0fd3e3fix: Update cohere package version to 5.16.2 (#145)91742edfix: Update import statements to use cohere module directly (#143)8d78a17fix: Fix documents sometimes not being passed to co.chat (#136)9b6ba0cchore: Bump version to 0.4.3 (#133)c1d8409feat: add base_url param to rerank (#132)d3d2955fix: Add validation to rerank for clientV1 (#129)a1c2c14fix: fix integration tests for 0.4.1 (#127)8e41da7Update poetry toml package version (#126)Updates
langchain-huggingfacefrom 0.1.2 to 0.3.1Commits
116b758fix: bump deps for release (#32179)10996a2release(perplexity): 0.1.2 (#32176)2aed07erelease(deepseek): 0.1.4 (#32178)64dac1frelease(huggingface): 0.3.1 (#32177)58768d8release(xai): 0.2.5 (#32174)d65da13docs(ollama): addvalidate_model_on_initnote, bump lock (#32172)8e4396bfix(ollama): robustly parse single-quoted JSON in tool calls (#32109)2ef9465fix(anthropic): fix test (#32145)cc076edfix(huggingface): update model used in standard tests (#32116)491f63crelease(ollama): release 0.3.5 (#32076)Updates
langgraphfrom 0.4.10 to 0.6.11Release notes
Sourced from langgraph's releases.
... (truncated)
Commits
dc0ee40chore: Allow checkpoint 3.0 in 0.6.* (#6315)c2bc6abchore(langgraph): bump langgraph version (#6257)4205505fix(langgraph): revert selective interrupt task scheduling (#6252)a059913fix(cli): rename studio to debugger (#6246)c2f359fchore(cli): bump to 0.4.3 (#6251)7f78a01chore(langgraph): bump version (#6245)7d166bfchore(checkpoint): bump patch version (#6244)6cc8899fix(langgraph): selective interrupt task scheduling (#6158)1ba96f4fix(checkpoint): handle metadata.writes when serializing old checkpoints with...b095811fix(langgraph): task result from stream mode debug / tasks should match forma...Updates
openaifrom 1.109.1 to 2.15.0Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
722d3ffrelease: 2.15.05da8c5ffeat(api): add new Response completed_at prop032e6cbchore(internal): codegen related updated3e6321release: 2.14.04547f1acodegen metadataa3c27a2chore(internal): add--fixargument to lint script51c6885feat(api): slugs for new audio models; make allmodelparams accept strings62699d9fix: use async_to_httpx_files in patch method20af6aacodegen metadataf94256drelease: 2.13.0Updates
pytest-asynciofrom 0.24.0 to 1.2.0Release notes
Sourced from pytest-asyncio's releases.
... (truncated)
Commits
0d3988fci: Create GitHub release before publishing to PyPI.07c5a0bdocs: Include orphaned news fragment in changelog.be24582chore: Prepare release of v1.2.0.7aeb296docs: Streamline news fragments7b8311cci: Fixes a bug that prevented SSH signature from being stripped from release...9d4c2bddocs: Add changelog entry for Pyright compatibility.94f6106test: Added tests which assert that the event loop is reinstated if unset by ...df61991[pre-commit.ci] pre-commit autoupdatef1f7941Build(deps): Bump pytest from 8.4.1 to 8.4.2c77d3d3Build(deps): Bump twine from 6.1.0 to 6.2.0Updates
vcrpyfrom 6.0.2 to 7.0.0Release notes
Sourced from vcrpy's releases.
Changelog
Sourced from vcrpy's changelog.
... (truncated)
Commits
3278619Release v7.0.03fb62e0fix: correctly handle asyncio.run when loop exists8197865build(deps): update sphinx requirement from <8 to <9be651bdpre-commit: Autoupdate