Bump the python-minor-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #683 · OpenFn/apollo

dependabot · 2026-09-15T16:14:20Z

Bumps the python-minor-patch group with 9 updates in the / directory:

Package	From	To
python-dotenv	`1.2.2`	`1.2.3`
langchain-core	`1.5.1`	`1.6.3`
langchain-openai	`1.4.1`	`1.6.2`
nltk	`3.10.0`	`3.10.3`
sentry-sdk	`2.66.1`	`2.69.1`
psycopg2-binary	`2.9.12`	`2.9.13`
langfuse	`4.14.1`	`4.15.2`
opentelemetry-instrumentation-anthropic	`0.62.1`	`0.62.3`
ruff	`0.16.0`	`0.16.7`

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
f7b18d9 fix: round-trip backslashes through set_key (#680)
751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
Additional commits viewable in compare view

Updates langchain-core from 1.5.1 to 1.6.3

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.3

Changes since langchain-core==1.6.2

release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated .text() access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)

langchain-core==1.6.2

Changes since langchain-core==1.6.1

release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)

langchain-core==1.6.1

Changes since langchain-core==1.6.0

revert: release(core): 1.6.2 (#39971) release(core): 1.6.2 (#39967) fix(core): shore up indexing in genai v1 streaming content (#39964) fix(core): make StructuredTool JSON-serializable (#39631) chore(deps): bump minor and patch dependencies (#39869) release(core): 1.6.1 (#39832) feat(core): propagate gateway information on error path (#39829)

langchain-core==1.6.0

Changes since langchain-core==1.5.6

release(core): 1.6.0 (#39760) fix(core): resolve postponed annotations in StructuredTool._injected_args_keys (#39602) feat(core): add standard model exception types (#39538) fix(core): allow deserializing RunnablePick (#39753) fix(core): make convert_to_openai_function handle callables and non-dict mappings (#39750) fix(core): make subprocess and temporary file tests portable on Windows (#39664) fix(core): fail fast when tool schemas can't resolve forward refs during serialization (#39570) test(core): avoid version-dependent runnable snapshots (#39705) fix(core): require all nested properties for strict tool schemas (#39306) fix(core): remove stale sync-stream xfail [closes #39720] (#39723) perf(core): Lazily import transformers (#38037) fix(core): accept non-dict Mapping values in mustache templates (#39680) docs(core): clarify Runnable pipe coercion [closes #39075] (#39707) fix(core): finalize chain-group runs on BaseException (#39699)

langchain-core==1.5.6

Changes since langchain-core==1.5.5

... (truncated)

Commits

348c9dc release(core): 1.6.3 (#40407)
e0e1557 feat(core): Allow model name and provider tracing metadata override based on ...
67ee6cb chore(model-profiles): refresh model profile data (#40399)
d5d7cc5 release(anthropic): 1.7.2 (#40387)
4436bd2 fix(anthropic): preserve invalid tool use blocks (#40372)
443154d feat(huggingface): use torch.accelerator for device-agnostic device count det...
3539ca0 fix(huggingface): remove retired IPEX backend (#39649)
45d94fb chore(model-profiles): refresh model profile data (#40358)
6035769 release(openai): 1.6.2 (#40339)
a7b0f0a docs: update OpenWiki (#40318)
Additional commits viewable in compare view

Updates langchain-openai from 1.4.1 to 1.6.2

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.2

Changes since langchain-openai==1.6.1

release(openai): 1.6.2 (#40339) fix(openai): add GPT-6 Astra reasoning efforts (#40330) chore(deps): bump httpx2 from 2.10.0 to 2.12.0 in /libs/partners/openai (#40309)

langchain-openai==1.6.1

Changes since langchain-openai==1.6.0

fix(openai): bump max_completion_tokens in cache breakpoint integration test (#40284) release(openai): 1.6.1 (#40268) chore(model-profiles): refresh model profile data (#40217) fix(openai): support Azure AD auth with OpenAI 3.8 (#40190) feat(openai): support async tools (#40208) feat(openai): support configuration_update (#40201) chore(model-profiles): refresh model profile data (#40171) fix(openai): route gpt-5.6-sol to responses API (#40133) chore(openai): fix tests (#39972) fix(openai): correct reasoning_effort_levels for gpt-5 and gpt-5.1 profiles (#39936) chore(model-profiles): refresh model profile data (#39954)

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629)

... (truncated)

Commits

6035769 release(openai): 1.6.2 (#40339)
a7b0f0a docs: update OpenWiki (#40318)
1611938 fix(openai): add GPT-6 Astra reasoning efforts (#40330)
f092c9a chore(model-profiles): refresh model profile data (#40317)
22f3421 docs: update OpenWiki (#40218)
1c40140 chore(deps): bump httpx2 from 2.10.0 to 2.12.0 in /libs/partners/openai (#40309)
db613a9 fix(openai): bump max_completion_tokens in cache breakpoint integration tes...
9f2eb7f release(openai): 1.6.1 (#40268)
765eb32 chore(model-profiles): refresh model profile data (#40277)
e670c7a chore(model-profiles): refresh model profile data (#40258)
Additional commits viewable in compare view

Updates nltk from 3.10.0 to 3.10.3

Release notes

Sourced from nltk's releases.

v3.10.3

Version 3.10.3 2026-08-12

docs: wrap Chat-80 HOWTO output

Sandbox Stanford JAR execution to nltk_data directories

Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)

Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)

Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)

fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)

fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)

fix(security): validate corpus-reader roots against the data sandbox (CWE-73)

fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)

Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

Sandbox Stanford JAR execution to nltk_data directories by @ekaf in nltk/nltk#3743

docs: wrap Chat-80 HOWTO output by @medisean in nltk/nltk#3741

ci: sandboxed-open guard + stabilize security tests across platforms/pythons (#3740) by @alvations in nltk/nltk#3744

Prepare release 3.10.3 by @ekaf in nltk/nltk#3745

New Contributors

@medisean made their first contribution in nltk/nltk#3741

Full Changelog: nltk/nltk@v3.10.2...v3.10.3

v3.10.3-rc1

Version 3.10.3 2026-08-12

docs: wrap Chat-80 HOWTO output

Sandbox Stanford JAR execution to nltk_data directories

Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)

Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)

Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)

fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)

fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)

fix(security): validate corpus-reader roots against the data sandbox (CWE-73)

fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)

Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

Sandbox Stanford JAR execution to nltk_data directories by @ekaf in nltk/nltk#3743

docs: wrap Chat-80 HOWTO output by @medisean in nltk/nltk#3741

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.3 2026-08-12

docs: wrap Chat-80 HOWTO output

Sandbox Stanford JAR execution to nltk_data directories

Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)

Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)

Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)

fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)

fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)

fix(security): validate corpus-reader roots against the data sandbox (CWE-73)

fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)

Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

Version 3.10.2 2026-08-05

Remove inisec.py and document PYTHONSAFEPATH instead

Skip draft step in release workflow

Fix symlink escape in FramenetCorpusReader (CWE-59)

Guard tempfile.gettempdir() when building pathsec allowed roots

add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

Expand ~ in env-var paths

Validate types after WordNet app pickle deserialization

Fix uncontrolled search path in HunposTagger

Use exact thirds in masi_distance

Avoid retaining bllip import exceptions

Fix word_tokenize: pad opening single quote before multi-letter words.

Implement Tree.pformat_latex_forest.

Prevent module hijacking in inline imports.

Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

Enforce the stricter nltk.pathsec security policy by default

Document the new security model and migration guidance

Harden resource loading against path traversal and SSRF/DNS-rebinding

Harden downloader path handling and block XML entity expansion

Close remaining corpus-reader security edge cases

Replace unsafe exec() usage in the utility CLI

... (truncated)

Commits

303f6e2 Prepare release 3.10.3 (#3745)
cf2aaac Merge pull request #3744 from alvations/ci-guard-open
6cd8320 test: robustness on Python 3.14 / 3.14t CI (UnicodeDecodeError + timing flake)
e965330 fix: perceptron save_to_json breaks on Windows (os.open can't fd-open a direc...
df1bb4c test: make pathsec security tests platform-independent (fix Linux/Windows CI)
0e5c7be ci: guard against un-sandboxed open() in sandbox-sensitive modules (#3740)
5017826 Merge commit from fork
40d0f06 Triple-check hardening: perceptron TOCTOU squat, pathsec fd-leak, bcp47 entit...
483c5fe Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + s...
722778f Merge commit from fork
Additional commits viewable in compare view

Updates sentry-sdk from 2.66.1 to 2.69.1

Release notes

Sourced from sentry-sdk's releases.

2.69.1

New Features ✨

(django) Add http.route attribute by @alexander-alderman-webb in #7428

Bug Fixes 🐛

(aiohttp) Preserve SigV4-signed propagation headers by @Robinbinu in #7427

Internal Changes 🔧

Mcp

Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7424

Remove vacuous tests by @alexander-alderman-webb in #7420

Other

(cohere) Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7419

(openai-agents) Parametrize tests on stream_gen_ai_spans and the streaming trace lifecycle by @alexander-alderman-webb in #7405

2.69.0

New Features ✨

Other

(aiohttp) Add http.route attribute by @alexander-alderman-webb in #7341

(bottle) Add http.route attribute by @alexander-alderman-webb in #7343

(clickhouse_driver) Set breadcrumbs in the streaming trace lifecycle by @alexander-alderman-webb in #7325

(docs) Add Plausible analytics to Sphinx docs by @ericapisani in #7319

(falcon) Add http.route attribute by @alexander-alderman-webb in #7340

(fastapi) Add http.route attribute by @alexander-alderman-webb in #7322

(flask) Add http.route attribute by @alexander-alderman-webb in #7344

(pyramid) Add http.route attribute by @alexander-alderman-webb in #7347

(quart) Add http.route attribute by @alexander-alderman-webb in #7348

(sqlalchemy) Add more db system names for span data by @ericapisani in #7329

(starlette) Add http.route attribute by @alexander-alderman-webb in #7338

(types) Export SpanJSON type by @ericapisani in #7331

Add Python 3.15 to test matrix by @sentrivana in #7326

Bug Fixes 🐛

Mcp

Handle None arguments in tool and prompt handlers by @alexander-alderman-webb in #7387

Don't report stateless StreamableHTTP servers as stdio by @Snaylaker in #7224

Openai

Read input_text parts for the Responses API by @alexander-alderman-webb in #7333

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.69.1

New Features ✨

(django) Add http.route attribute by @alexander-alderman-webb in #7428

Bug Fixes 🐛

(aiohttp) Preserve SigV4-signed propagation headers by @Robinbinu in #7427

Internal Changes 🔧

Mcp

Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7424

Remove vacuous tests by @alexander-alderman-webb in #7420

Other

(cohere) Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7419

(openai-agents) Parametrize tests on stream_gen_ai_spans and the streaming trace lifecycle by @alexander-alderman-webb in #7405

2.69.0

New Features ✨

Other

(aiohttp) Add http.route attribute by @alexander-alderman-webb in #7341

(bottle) Add http.route attribute by @alexander-alderman-webb in #7343

(clickhouse_driver) Set breadcrumbs in the streaming trace lifecycle by @alexander-alderman-webb in #7325

(docs) Add Plausible analytics to Sphinx docs by @ericapisani in #7319

(falcon) Add http.route attribute by @alexander-alderman-webb in #7340

(fastapi) Add http.route attribute by @alexander-alderman-webb in #7322

(flask) Add http.route attribute by @alexander-alderman-webb in #7344

(pyramid) Add http.route attribute by @alexander-alderman-webb in #7347

(quart) Add http.route attribute by @alexander-alderman-webb in #7348

(sqlalchemy) Add more db system names for span data by @ericapisani in #7329

(starlette) Add http.route attribute by @alexander-alderman-webb in #7338

(types) Export SpanJSON type by @ericapisani in #7331

Add Python 3.15 to test matrix by @sentrivana in #7326

Bug Fixes 🐛

Mcp

Handle None arguments in tool and prompt handlers by @alexander-alderman-webb in #7387

Don't report stateless StreamableHTTP servers as stdio by @Snaylaker in #7224

Openai

... (truncated)

Commits

bd30ffb release: 2.69.1
f4d4af7 fix(aiohttp): Preserve SigV4-signed propagation headers
5e2fcf1 feat(django): Add http.route attribute (#7428)
611584b test(mcp): Parametrize tests on the streaming trace lifecycle (#7424)
bb53bac test(mcp): Remove vacuous tests (#7420)
42aa532 test(cohere): Parametrize tests on the streaming trace lifecycle (#7419)
f1c098a Merge branch 'release/2.69.0'
f186a62 Update changelog
131e307 test(openai-agents): Parametrize tests on stream_gen_ai_spans and the strea...
54404e1 release: 2.69.0
Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.12 to 2.9.13

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.15 (:ticket:[#1848](https://github.com/psycopg/psycopg2/issues/1848)).

Fix parsing of malformed bytea input.

Fix parsing of malformed int64 input in arrays (:ticket:[#1847](https://github.com/psycopg/psycopg2/issues/1847)).

Add a pyproject.toml file to declare a PEP 517 build backend (:ticket:[#1788](https://github.com/psycopg/psycopg2/issues/1788)).

Drop support for Python 3.9.

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8

... (truncated)

Commits

f650e7a chore: bump to release 2.9.13
368c8a1 chore!: drop support for Python 3.9
9b39e65 chore: drop scaleway build support
2ca7041 fix: fix handling of PostgreSQL 18 exceptions
5385c02 Build CPython 3.15 wheels
1d32e1f ci: only attempt triggering documentation refresh when pushing on main repo
433e7b7 chore: add pyproject.toml file to declare a PEP 517 build backend
8fb80bc fix: fix parsing of malformed int64 input in arrays
f98014a fix: fix parsing of malformed bytea input
822b79c chore: bump dependencies in binary package
Additional commits viewable in compare view

Updates langfuse from 4.14.1 to 4.15.2

Release notes

Sourced from langfuse's releases.

v4.15.0

What's Changed

Features

feat(assistant): Improve sandbox tool rendering by @bezbac in langfuse/langfuse#16305

feat(trace): compact timeline behind a feature preview by @nkabardin in langfuse/langfuse#16137

feat(in-app-agent): Foundation to make in-app agent available in OSS (2nd try) by @LysanderKie in langfuse/langfuse#16311

feat(analytics): add user id to backend activity events by @maxdeichmann in langfuse/langfuse#16318

Fixes

fix(trace): fold the playback transport into the header's overflow menu by @nkabardin in langfuse/langfuse#16201

fix(posthog): mask session replay content by @maxdeichmann in langfuse/langfuse#16302

fix(automations): strip repository-dispatch token from the read path by @Steffen911 in langfuse/langfuse#16300

fix(web): allow local media uploads through CSP by @wochinge in langfuse/langfuse#16301

fix(assistant): make message feedback optimistic by @bezbac in langfuse/langfuse#16306

fix(sandbox): redact tool payloads from runtime logs by @bezbac in langfuse/langfuse#16308

fix(assistant): fix tool races in sandbox runtime by @chelsealong in langfuse/langfuse#15970

fix(rbac): let project members view the API keys page by @Steffen911 in langfuse/langfuse#16312

fix(automations): preserve request headers when regenerating a webhook secret by @Steffen911 in langfuse/langfuse#16315

fix(assistant): Minor UI issues by @bezbac in langfuse/langfuse#16319

Chores

refactor: centralize product url / path creation by @bezbac in langfuse/langfuse#16291

chore(agents): teach Cursor agents Linear branches and human handoff by @nkabardin in langfuse/langfuse#16299

chore: make max_insert_threads on dual write path configurable by @sumerman in langfuse/langfuse#16303

test(assistant): Stabilize sandbox docker tests by @bezbac in langfuse/langfuse#16320

Full Changelog: langfuse/langfuse@v4.14.0...v4.15.0

Commits

See full diff in compare view

Updates opentelemetry-instrumentation-anthropic from 0.62.1 to 0.62.3

Release notes

Sourced from opentelemetry-instrumentation-anthropic's releases.

0.62.3

v0.62.3 (2026-08-10)

Fix

litellm: register instrumentation in commitizen version files (#4408)

[main 62e24c2ff] bump: version 0.62.2 → 0.62.3 66 files changed, 71 insertions(+), 65 deletions(-)

0.62.2

v0.62.2 (2026-08-09)

Fix

sdk,openai-agents: stop entity names leaking onto sibling and parent spans (#4405)

[main c2f3f45e2] bump: version 0.62.1 → 0.62.2 64 files changed, 69 insertions(+), 63 deletions(-)

Changelog

Sourced from opentelemetry-instrumentation-anthropic's changelog.

v0.62.3 (2026-08-10)

Fix

litellm: register instrumentation in commitizen version files (#4408)

v0.62.2 (2026-08-09)

Fix

sdk,openai-agents: stop entity names leaking onto sibling and parent spans (#4405)

Commits

62e24c2 bump: version 0.62.2 → 0.62.3
9965d24 fix(litellm): register instrumentation in commitizen version files (#4408)
c2f3f45 bump: version 0.62.1 → 0.62.2
e561195 fix(sdk,openai-agents): stop entity names leaking onto sibling and parent spa...
See full diff in compare view

Updates ruff from 0.16.0 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

@nightt5879

... (truncated)

Commits

b5dba86 Bump version to 0.16.7 (

Bumps the python-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.5.1` | `1.6.3` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.4.1` | `1.6.2` | | [nltk](https://github.com/nltk/nltk) | `3.10.0` | `3.10.3` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.66.1` | `2.69.1` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.12` | `2.9.13` | | [langfuse](https://github.com/langfuse/langfuse) | `4.14.1` | `4.15.2` | | [opentelemetry-instrumentation-anthropic](https://github.com/traceloop/openllmetry) | `0.62.1` | `0.62.3` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.0` | `0.16.7` | Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) Updates `langchain-core` from 1.5.1 to 1.6.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.5.1...langchain-core==1.6.3) Updates `langchain-openai` from 1.4.1 to 1.6.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.4.1...langchain-openai==1.6.2) Updates `nltk` from 3.10.0 to 3.10.3 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@v3.10.0...v3.10.3) Updates `sentry-sdk` from 2.66.1 to 2.69.1 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.66.1...2.69.1) Updates `psycopg2-binary` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `langfuse` from 4.14.1 to 4.15.2 - [Release notes](https://github.com/langfuse/langfuse/releases) - [Commits](https://github.com/langfuse/langfuse/commits) Updates `opentelemetry-instrumentation-anthropic` from 0.62.1 to 0.62.3 - [Release notes](https://github.com/traceloop/openllmetry/releases) - [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md) - [Commits](traceloop/openllmetry@0.62.1...0.62.3) Updates `ruff` from 0.16.0 to 0.16.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.0...0.16.7) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: langchain-core dependency-version: 1.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: langchain-openai dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: nltk dependency-version: 3.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: sentry-sdk dependency-version: 2.69.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: langfuse dependency-version: 4.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: opentelemetry-instrumentation-anthropic dependency-version: 0.62.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python An issue related to python/ML services labels Sep 15, 2026

Navigation Menu

Uh oh!

Bump the python-minor-patch group across 1 directory with 9 updates - #683

Bump the python-minor-patch group across 1 directory with 9 updates#683
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-patch-62842d59ac

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026

v1.2.3

Fixed

[1.2.3] - 2026-08-16

Fixed

langchain-core==1.6.3

langchain-core==1.6.2

langchain-core==1.6.1

langchain-core==1.6.0

langchain-core==1.5.6

langchain-openai==1.6.2

langchain-openai==1.6.1

langchain-openai==1.6.0

langchain-openai==1.5.2

langchain-openai==1.5.2a1

v3.10.3

What's Changed

New Contributors

v3.10.3-rc1

What's Changed

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

Current release

v4.15.0

What's Changed

Features

Fixes

Chores

0.62.3

v0.62.3 (2026-08-10)

Fix

0.62.2

v0.62.2 (2026-08-09)

Fix

v0.62.3 (2026-08-10)

Fix

v0.62.2 (2026-08-09)

Fix

0.16.7

Release Notes

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

0.16.7

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

Uh oh!