Skip to content

build(deps): bump the uv-minor-patch group across 1 directory with 9 updates - #965

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-minor-patch-0ec44a7f58
Open

build(deps): bump the uv-minor-patch group across 1 directory with 9 updates#965
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-minor-patch-0ec44a7f58

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-minor-patch group with 9 updates in the / directory:

Package From To
openai-agents 0.18.3 0.19.1
langchain-core 1.5.1 1.5.3
langgraph 1.2.9 1.2.10
openai 2.48.0 2.52.0
fastapi 0.140.0 0.141.1
uvicorn 0.51.0 0.52.0
livekit 1.1.13 1.1.14
hypothesis 6.161.5 6.164.0
mutmut 3.6.0 3.7.0

Updates openai-agents from 0.18.3 to 0.19.1

Release notes

Sourced from openai-agents's releases.

v0.19.1

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-python@v0.19.0...v0.19.1

v0.19.0

Key Changes

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added agents.tool.ProgrammaticToolCallingTool, which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added retries for WebSocket overloads that occur before a response starts.
  • Added VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

What's Changed

... (truncated)

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

  • Bug fixes
  • New features
  • Changes to private interfaces
  • Updates to beta features

Breaking change changelog

0.19.0

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added [ProgrammaticToolCallingTool][agents.tool.ProgrammaticToolCallingTool], which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added provider retry guidance for WebSocket overloads that occur before a response starts so opt-in Runner retry policies can act when replay is permitted.
  • Added create-time-only S3 mounts for Vercel sandboxes through VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

  • Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
</tr></table>

... (truncated)

Commits
  • ddc39d0 Release 0.19.1 (#4010)
  • 1dddc0d feat(sandbox): support native host paths in path grants (#4009)
  • e75cdd2 fix: cancel sibling enablement checks on failure (#4005)
  • 3f45d9e fix: honor falsey input builders in agent-tools (#4007)
  • 71aa44e Preserve zero Blobfuse attribute cache timeout (#4006)
  • 3142f3a fix(run): cancel streamed models when input guardrails fail (#4004)
  • e8311b4 fix(run): count streamed retries when terminal usage is missing (#4002)
  • 35c8805 fix(memory): count valid SQLite session items for positive limits (#4001)
  • bb3d64e docs: update translated pages
  • f1becff docs: update missing info
  • Additional commits viewable in compare view

Updates langchain-core from 1.5.1 to 1.5.3

Release notes

Sourced from langchain-core's releases.

langchain-core==1.5.3

Changes since langchain-core==1.5.2

release(core): 1.5.3 (#39145) fix(core): fall back to LANGSMITH_API_KEY for gateway (#39115)

langchain-core==1.5.2

Changes since langchain-core==1.5.1

release(core): 1.5.2 (#39108) fix(core): handle empty string in gateway env vars (#39107) chore: bump setuptools from 82.0.0 to 83.0.0 in /libs/core (#39032) chore: bump jupyterlab from 4.5.9 to 4.5.10 in /libs/core (#39033) chore: bump setuptools from 80.9.0 to 83.0.0 in /libs/text-splitters (#39029)

Commits
  • 01d8481 release(core): 1.5.3 (#39145)
  • b8a6e36 chore(model-profiles): refresh model profile data (#39141)
  • cdca311 fix(core): fall back to LANGSMITH_API_KEY for gateway (#39115)
  • a5a8762 ci: annotate uv bump workflow with PR links (#39112)
  • 557c0a9 chore(deps): bump uv to 0.12.0 (#39111)
  • 835c85a release(anthropic): 1.5.3 (#39109)
  • c1ab807 release(core): 1.5.2 (#39108)
  • 3132233 fix(anthropic): preserve empty thinking field in signature_delta streaming (#...
  • b3a6d9a chore(model-profiles): refresh model profile data (#39105)
  • 447b51a fix(anthropic): strip unsupported fields from system message content blocks (...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.9 to 1.2.10

Release notes

Sourced from langgraph's releases.

langgraph==1.2.10

Changes since 1.2.9

  • release(langgraph): 1.2.10 (#8462)
  • chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
  • chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
  • feat(langgraph): type v3 stream_events return and native projections (#8389)
  • revert(langgraph): delete TracePolicy (#8403)
  • feat(langgraph): drop tags from TracePolicy (#8402)
  • feat(langgraph): expose trace_policy on add_node (#8362)
  • chore(deps): bump mistune from 3.2.1 to 3.3.0 in /libs/langgraph (#8317)
  • chore(deps): bump soupsieve from 2.8.1 to 2.8.4 in /libs/langgraph (#8318)
  • chore(cli): allow langgraph-api versions up to 1.0.0 (#8319)
Commits
  • 4134145 release(langgraph): 1.2.10 (#8462)
  • 30c4d58 chore(deps): bump jupyterlab from 4.5.9 to 4.5.10 in /libs/langgraph (#8440)
  • 1f2f88b chore(deps): bump js-yaml from 4.2.0 to 4.3.0 in /libs/cli/js-monorepo-exampl...
  • 2708203 chore(deps): bump setuptools from 82.0.1 to 83.0.0 in /libs/cli (#8434)
  • 9f1e40b chore(deps): bump setuptools from 80.9.0 to 83.0.0 in /libs/langgraph (#8435)
  • 1e1ca88 feat(langgraph): type v3 stream_events return and native projections (#8389)
  • 31f90df revert(langgraph): delete TracePolicy (#8403)
  • f02c0f0 feat(langgraph): drop tags from TracePolicy (#8402)
  • 8b39db3 feat(langgraph): expose trace_policy on add_node (#8362)
  • 9578140 feat(checkpoint,checkpoint-postgres): add opt-in omit_expired to skip expired...
  • Additional commits viewable in compare view

Updates openai from 2.48.0 to 2.52.0

Release notes

Sourced from openai's releases.

v2.52.0

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

  • api: content provenance checks (1d6c118)

Bug Fixes

  • client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

v2.51.0

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

Bug Fixes

  • api: add fast tier to helper methods (6064126)

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

... (truncated)

Changelog

Sourced from openai's changelog.

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

  • api: content provenance checks (1d6c118)

Bug Fixes

  • client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

Bug Fixes

  • api: add fast tier to helper methods (6064126)

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

... (truncated)

Commits

Updates fastapi from 0.140.0 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.52.0

Release notes

Sourced from uvicorn's releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn's changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)
Commits

Updates livekit from 1.1.13 to 1.1.14

Release notes

Sourced from livekit's releases.

protocol-v1.1.8

What's Changed

Full Changelog: livekit/python-sdks@rtc-v1.1.7...rtc-v1.1.8

Commits
  • 23cbb0f livekit v1.1.14 (#772)
  • b17a627 Bump livekit ffi to 0.12.73 (#766)
  • 1add524 fix(rtc): handle repeated local track subscription events (#771)
  • caaa961 fix(rtc): guard remote track event handlers against racing disconnect (#758)
  • 0ef63ce livekit-protocol v1.1.21 (#764)
  • d700260 chore(protocol): bump version for pii redaction (#763)
  • f78d208 chore: bump protocol to v1.50.3 for homogenized Turn/Job/Run simulation metri...
  • 8e02f62 Update dependency livekit-client to v2.20.0 (#695)
  • 6bc234d livekit-protocol v1.1.20 (#760)
  • 016a7b4 chore: bump protocol for simulation metrics pooling stats (#756)
  • Additional commits viewable in compare view

Updates hypothesis from 6.161.5 to 6.164.0

Commits
  • 4b8467b Bump hypothesis version to 6.164.0 and update changelog
  • 47bb9d1 Merge pull request #4833 from Zac-HD/claude/hypothesis-issue-4149-16nmgw
  • b2b77ec Bump hypothesis version to 6.163.1 and update changelog
  • bc2af6c Merge pull request #4832 from Zac-HD/claude/hypothesis-nocover-cleanup-1yu7ao
  • cef8c21 ignore mock xp namespace warning
  • 65022c4 fix parents
  • 0c45285 clean up tests, simplify configs, parse complex constants
  • 13ccc11 be explicit in allowed types
  • f3b6dfe Exclude test code from the combined coverage report
  • 71b7bc0 Recognize zipimported stdlib when filtering explanations
  • Additional commits viewable in compare view

Updates mutmut from 3.6.0 to 3.7.0

Changelog

Sourced from mutmut's changelog.

3.7.0


* Fix the trampoline dropping a generator's return value, so ``yield from`` on a mutated generator no longer yields ``None`` instead of its result

    

  • 

    Fix async generators, so that aclose()/athrow() are handled by the except/finally blocks of the mutated function instead of being swallowed by the trampoline
    

    • 

  • 

    Fix max_stack_depth when a test changes the working directory (for example via a tmpdir fixture)
    

    • 

  • 

    Fix type_check_command reporting type errors in copied files that have no mutants
    

    • 

  • 

    Per-function source hashing for incremental cache invalidation — only re-test mutants in functions that changed
    

    • 

  • 

    Cross-call dependency tracking — invalidate mutants in callers when a called function changes
    

    • 

  • 

    Use git to detect non-Python dependency file changes; falls back to a curated file list when git is unavailable
    

    • 

  • 

    Add cache_invalidation_exclude config to suppress noisy files from change detection
    

    • 

  • 

    Add use_git_change_detection config (default true) to opt out of git-based detection
    

    • 

  • 

    Add uv.lock, poetry.lock, Pipfile.lock, and pdm.lock to the list of files copied by default
    

    • 

  • 

    Invalidate cached results automatically when result-affecting config fields change
    

    • 

  • 

    Make mutmut browse, show and apply much faster and use far less memory, by storing where each mutant is in the mutated file instead of parsing the whole file to find it

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the uv-minor-patch group across 1 directory with 9 …
9a55477 
…updates

Bumps the uv-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.18.3` | `0.19.1` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.5.1` | `1.5.3` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.9` | `1.2.10` |
| [openai](https://github.com/openai/openai-python) | `2.48.0` | `2.52.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.140.0` | `0.141.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.0` |
| [livekit](https://github.com/livekit/python-sdks) | `1.1.13` | `1.1.14` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.161.5` | `6.164.0` |
| [mutmut](https://github.com/boxed/mutmut) | `3.6.0` | `3.7.0` |



Updates `openai-agents` from 0.18.3 to 0.19.1
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.18.3...v0.19.1)

Updates `langchain-core` from 1.5.1 to 1.5.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.5.1...langchain-core==1.5.3)

Updates `langgraph` from 1.2.9 to 1.2.10
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.9...1.2.10)

Updates `openai` from 2.48.0 to 2.52.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.48.0...v2.52.0)

Updates `fastapi` from 0.140.0 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.140.0...0.141.1)

Updates `uvicorn` from 0.51.0 to 0.52.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.0)

Updates `livekit` from 1.1.13 to 1.1.14
- [Release notes](https://github.com/livekit/python-sdks/releases)
- [Commits](livekit/python-sdks@rtc-v1.1.13...rtc-v1.1.14)

Updates `hypothesis` from 6.161.5 to 6.164.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.161.5...v6.164.0)

Updates `mutmut` from 3.6.0 to 3.7.0
- [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst)
- [Commits](boxed/mutmut@3.6.0...3.7.0)

---
updated-dependencies:
- dependency-name: openai-agents
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: langchain-core
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: langgraph
  dependency-version: 1.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: openai
  dependency-version: 2.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: uvicorn
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: livekit
  dependency-version: 1.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: hypothesis
  dependency-version: 6.164.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: mutmut
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants