Skip to content

chore(deps)(deps): bump the ai-ml group across 1 directory with 7 updates#28

Merged
lfr-ai merged 1 commit into
masterfrom
dependabot/pip/backend/ai-ml-33eb647037
May 15, 2026
Merged

chore(deps)(deps): bump the ai-ml group across 1 directory with 7 updates#28
lfr-ai merged 1 commit into
masterfrom
dependabot/pip/backend/ai-ml-33eb647037

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on openai, langchain, langchain-core, langchain-openai, crewai, langchain-community and langchain-text-splitters to permit the latest version.
Updates openai to 2.36.0

Release notes

Sourced from openai's releases.

v2.36.0

2.36.0 (2026-05-07)

Full Changelog: v2.35.1...v2.36.0

Features

Changelog

Sourced from openai's changelog.

2.36.0 (2026-05-07)

Full Changelog: v2.35.1...v2.36.0

Features

2.35.1 (2026-05-06)

Full Changelog: v2.35.0...v2.35.1

Bug Fixes

  • api: fix imagegen size enum regression (4484653)

2.35.0 (2026-05-06)

Full Changelog: v2.34.0...v2.35.0

Features

Chores

  • remove legacy python cli (32f36e4)
  • rename legacy python cli entrypoint (a3b182d)

Documentation

  • api: update top_logprobs parameter description across chat and responses (f9d339f)

2.34.0 (2026-05-04)

Full Changelog: v2.33.0...v2.34.0

Features

  • api: add external_key_id to projects, email/metadata params to users, update types (2d232ee)
  • api: add support for Admin API Keys per endpoint (b8b176a)
  • api: admin API updates (4ae1138)
  • api: manual updates (c1870f1)
  • api: manual updates (f6bb9c7)
  • support setting headers via env (1e89d8b)

... (truncated)

Commits

Updates langchain to 1.3.0

Release notes

Sourced from langchain's releases.

langchain-core==1.3.0

Changes since langchain-core==1.2.31

release(core): release 1.3.0 (#36851) release(core): 1.3.0a3 (#36829) chore(core): keep checkpoint_ns behavior in streaming metadata for backwards compat (#36828) feat(core): Add chat model and LLM invocation params to traceable metadata (#36771) fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#36816) chore(deps): bump pytest to 9.0.3 (#36801) chore(core): harden private SSRF utilities (#36768) fix(openai): handle content blocks without type key in responses api conversion (#36725) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/core (#36719) release(core): 1.3.0.a2 (#36698) fix(core): Use reference counting for storing inherited run trees to support garbage collection (#36660) docs(core): nit (#36685) release(core): 1.3.0a1 (#36656) chore(core): reduce streaming metadata / perf (#36588)

Commits
  • 21d77d6 release(langchain): 1.3.0 (#37361)
  • e8ca09d chore: bump jupyter-server from 2.17.0 to 2.18.0 in /libs/core (#37354)
  • 9b6af7f chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core (#37353)
  • f7420f7 chore: bump requests from 2.33.1 to 2.34.0 in /libs/partners/fireworks (#37355)
  • 70e66a1 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/openrouter (#37352)
  • da380bc chore(infra): merge v1.4 into master (#37350)
  • bbd10fe chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343)
  • 11bbfb7 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/fireworks (#37339)
  • 7fd61d2 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/mistralai (#37338)
  • 5c096bb chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/nomic (#37334)
  • Additional commits viewable in compare view

Updates langchain-core to 1.4.0

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.0

Changes since langchain-core==0.3.86

chore(infra): merge v1.4 into master (#37350) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/core (#37329) fix(core): avoid eager pydantic.v1 import in @deprecated (#37308) chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core (#37237) chore: bump jupyter-server from 2.17.0 to 2.18.0 in /libs/core (#37204) release(core): 1.3.3 (#37198) fix(core): set deprecation since to 1.3.3 to match release (#37200) fix(core, langchain): harden load() against untrusted manifests (#37197) chore: bump notebook from 7.5.0 to 7.5.6 in /libs/core (#37109) chore: bump types-pyyaml from 6.0.12.20250915 to 6.0.12.20260408 in /libs/core (#37129) fix(core): preserve structured inputs on tool runs in tracers (#37108) release(perplexity): 1.2.0 (#37091) chore(docs): update x handle references (#37081) fix(core): make removal optional in warn_deprecated (#37056) fix(core): validate batch_size in _batch and _abatch to prevent infinite loop (#36663) chore(core): mark stream_v2/astream_v2 as beta (#36992) release(core): 1.3.2 (#36990) feat(core): add content-block-centric streaming (v2) (#36834) release(core): 1.3.1 (#36972) feat(core): allow _format_output to pass through list of ToolOutputMixin instances (#36963) chore: bump nbconvert from 7.17.0 to 7.17.1 in /libs/core (#36923) feat(core): Update inheritance behavior for tracer metadata for special keys (#36900) chore: bump langsmith from 0.7.13 to 0.7.31 in /libs/core (#36813) release(core): release 1.3.0 (#36851) release(core): 1.3.0a3 (#36829) chore(core): keep checkpoint_ns behavior in streaming metadata for backwards compat (#36828) feat(core): Add chat model and LLM invocation params to traceable metadata (#36771) fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#36816) chore(deps): bump pytest to 9.0.3 (#36801) chore(core): harden private SSRF utilities (#36768) fix(openai): handle content blocks without type key in responses api conversion (#36725) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/core (#36719) release(core): 1.3.0.a2 (#36698) fix(core): Use reference counting for storing inherited run trees to support garbage collection (#36660) docs(core): nit (#36685) release(core): 1.3.0a1 (#36656) chore(core): reduce streaming metadata / perf (#36588) release(core): release 1.2.28 (#36614) fix(core): add more sanitization to templates (#36612) release(core): 1.2.27 (#36586) fix(core): handle symlinks in deprecated prompt save path (#36585) chore: add comment explaining pygments>=2.20.0 (#36570) release(core): 1.2.26 (#36511) fix(core): add init validator and serialization mappings for Bedrock models (#34510) feat(core): add ChatBaseten to serializable mapping (#36510) chore(core): drop gpt-3.5-turbo from docstrings (#36497) fix(core): correct parameter names in filter_messages docstring example (#36462)

... (truncated)

Commits
  • 70e66a1 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/openrouter (#37352)
  • da380bc chore(infra): merge v1.4 into master (#37350)
  • bbd10fe chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343)
  • 11bbfb7 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/fireworks (#37339)
  • 7fd61d2 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/mistralai (#37338)
  • 5c096bb chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/nomic (#37334)
  • ac47d54 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/chroma (#37333)
  • 7e5c570 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/qdrant (#37332)
  • 2086b91 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/core (#37329)
  • 407e33a chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/langchain (#37327)
  • Additional commits viewable in compare view

Updates langchain-openai to 1.2.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.2.1

Changes since langchain-openai==1.2.0

hotfix: bump min core versions (#36996) release(openai): 1.2.1 (#36995) fix(openai): add gpt-5.5 pro to Responses API check (#36994) feat(core): add content-block-centric streaming (v2) (#36834) chore(model-profiles): refresh model profile data (#36982)

Commits

Updates crewai to 1.14.4

Release notes

Sourced from crewai's releases.

1.14.4

What's Changed

Features

  • Add support for custom persistence key in @​persist
  • Add Responses API support for Azure OpenAI provider
  • Forward credential_scopes to Azure AI Inference client
  • Add Vertex AI workload identity setup guide
  • Add Tavily Research and get Research
  • Add You.com MCP tools for search, research, and content extraction

Bug Fixes

  • Fix fall through when JSON regex match isn't valid JSON
  • Fix to preserve tool_calls when response also contains text
  • Fix to forward base_url and api_key to instructor.from_provider
  • Fix to warn and return empty when native MCP server returns no tools
  • Fix to use validated messages variable in non-streaming handlers
  • Fix to guard crew chat description helpers against LLM failures
  • Fix to reset messages and iterations between invocations
  • Fix to forward trained-agents file through replay and test
  • Fix to honor custom trained-agents file at inference
  • Fix to bind task-only agents to crew for multimodal input_files
  • Fix to serialize guardrail callables as null for JSON checkpointing
  • Fix renaming of force_final_answer to avoid self-referential router
  • Fix bump of litellm for SSTI fix; ignore unfixable pip CVE

Documentation

  • Update changelog and version for v1.14.4a1
  • Add E2B Sandbox Tools page
  • Add Daytona sandbox tools documentation

Contributors

@​EdwardIrby, @​dependabot[bot], @​factory-droid-oss, @​factory-droid[bot], @​greysonlalonde, @​kunalk16, @​lorenzejay, @​lucasgomide, @​manisrinivasan2k1, @​mattatcha, @​vinibrsl

Commits
  • 898f860 docs: update changelog and version for v1.14.4
  • 2c0323c feat: bump versions to 1.14.4
  • c580d42 chore(devtools): open PR for deployment test bump and wait for merge
  • 70f3919 fix(converter): fall through when JSON regex match isn't valid JSON
  • 864f0a8 Revert "feat(flow): support custom persistence key in @​persist (#5649)" (#5668)
  • 9f13235 fix(llm): preserve tool_calls when response also contains text
  • c7f0104 feat(azure): forward credential_scopes to Azure AI Inference client (#5661)
  • 14c3963 fix(instructor): forward base_url and api_key to instructor.from_provider
  • feb2e71 fix(mcp): warn and return empty when native MCP server returns no tools
  • e0b8675 feat(azure): add Responses API support for Azure OpenAI provider (#5201)
  • Additional commits viewable in compare view

Updates langchain-community to 0.4.1

Release notes

Sourced from langchain-community's releases.

libs/community/v0.4.1

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-community@libs/community/v0.4...libs/community/v0.4.1

Commits

Updates langchain-text-splitters to 1.1.2

Release notes

Sourced from langchain-text-splitters's releases.

langchain-text-splitters==1.1.2

Changes since langchain-text-splitters==1.1.1

release(text-splitters): 1.1.2 (#36822) fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url (#36821) chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797) chore(deps): bump pytest to 9.0.3 (#36801) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/text-splitters (#36714) chore: add comment explaining pygments>=2.20.0 (#36570) release(core): 1.2.26 (#36511) chore: pygments>=2.20.0 across all packages (CVE-2026-4539) (#36385) fix(text-splitters): prevent silent data loss for empty dict values in RecursiveJsonSplitter (#35079) feat(text-splitters): support spacy tests with Python 3.14 (#36198) fix(infra): correct lint_diff relative paths in package makefiles (#36333) chore: bump requests from 2.32.5 to 2.33.0 in /libs/text-splitters (#36238) chore: bump nltk from 3.9.3 to 3.9.4 in /libs/text-splitters (#36237) chore(partners): bump langchain-core min to 1.2.21 (#36183) chore(text-splitters): bump nltk in lock file (#36112) ci: suppress pytest streaming output in CI (#36092) chore(text-splitters): speed up ci (#36050) ci: avoid unnecessary dep installs in lint targets (#36046) chore: bump orjson from 3.11.5 to 3.11.6 in /libs/text-splitters (#35856) chore: bump locks, lint (#35985) perf(.github): set a timeout on get min versions HTTP calls (#35851) chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (#35774) chore: bump the minor-and-patch group across 3 directories with 3 updates (#35589) chore: bump the other-deps group across 3 directories with 2 updates (#35512) chore: bump nltk from 3.9.2 to 3.9.3 in /libs/text-splitters (#35449) chore: bump the other-deps group across 3 directories with 2 updates (#35407)

Commits
  • 58c4e5b release(text-splitters): 1.1.2 (#36822)
  • c289bf1 fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from...
  • b7447c6 fix(infra): skip serdes tests in min-version release step (#36818)
  • 41c0cc5 release(openai): 1.1.14 (#36820)
  • 0516156 fix(openai): use SSRF-safe transport for image token counting (#36819)
  • 338aa81 fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#3...
  • 51e9548 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/text-splitters (#36797)
  • e85c418 chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/model-profiles (#36798)
  • 789126e chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/standard-tests (#36799)
  • 937b3eb chore: bump langsmith from 0.6.3 to 0.7.31 in /libs/langchain_v1 (#36800)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 5, 2026
@dependabot dependabot Bot requested a review from lfr-ai as a code owner May 5, 2026 08:57
@dependabot @github

dependabot Bot commented on behalf of github May 5, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: LauritsFromberg, lauritsfromberg. Either they do not exist or they do not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: backend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title chore(deps)(deps): bump the ai-ml group in /backend with 7 updates chore(deps)(deps): bump the ai-ml group across 1 directory with 7 updates May 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/ai-ml-33eb647037 branch 2 times, most recently from dc18d0b to 4bcc6a9 Compare May 12, 2026 05:24
…ates

Updates the requirements on [openai](https://github.com/openai/openai-python), [langchain](https://github.com/langchain-ai/langchain), [langchain-core](https://github.com/langchain-ai/langchain), [langchain-openai](https://github.com/langchain-ai/langchain), [crewai](https://github.com/crewAIInc/crewAI), [langchain-community](https://github.com/langchain-ai/langchain-community) and [langchain-text-splitters](https://github.com/langchain-ai/langchain) to permit the latest version.

Updates `openai` to 2.36.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.101.0...v2.36.0)

Updates `langchain` to 1.3.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.0...langchain==1.3.0)

Updates `langchain-core` to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.3.3...langchain-core==1.4.0)

Updates `langchain-openai` to 1.2.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==0.3.0...langchain-openai==1.2.1)

Updates `crewai` to 1.14.4
- [Release notes](https://github.com/crewAIInc/crewAI/releases)
- [Commits](crewAIInc/crewAI@0.100.0...1.14.4)

Updates `langchain-community` to 0.4.1
- [Release notes](https://github.com/langchain-ai/langchain-community/releases)
- [Commits](langchain-ai/langchain-community@libs/community/v0.3.23...libs/community/v0.4.1)

Updates `langchain-text-splitters` to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==0.3.0...langchain-text-splitters==1.1.2)

---
updated-dependencies:
- dependency-name: crewai
  dependency-version: 1.14.4
  dependency-type: direct:production
  dependency-group: ai-ml
- dependency-name: langchain
  dependency-version: 1.2.17
  dependency-type: direct:production
  dependency-group: ai-ml
- dependency-name: langchain-community
  dependency-version: 0.4.1
  dependency-type: direct:development
  dependency-group: ai-ml
- dependency-name: langchain-core
  dependency-version: 1.3.2
  dependency-type: direct:production
  dependency-group: ai-ml
- dependency-name: langchain-openai
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: ai-ml
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: direct:development
  dependency-group: ai-ml
- dependency-name: openai
  dependency-version: 2.34.0
  dependency-type: direct:production
  dependency-group: ai-ml
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/ai-ml-33eb647037 branch from 4bcc6a9 to 5d1cc75 Compare May 13, 2026 06:40
@lfr-ai lfr-ai merged commit 0647fee into master May 15, 2026
10 of 20 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/backend/ai-ml-33eb647037 branch May 15, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant