Skip to content

build(deps): bump the uv group across 10 directories with 7 updates#87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/deepagents/examples/deep_research/uv-cae55a9c67
Open

build(deps): bump the uv group across 10 directories with 7 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/deepagents/examples/deep_research/uv-cae55a9c67

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv group with 3 updates in the /deepagents/examples/deep_research directory: langgraph-checkpoint, langgraph-sdk and soupsieve.
Bumps the uv group with 3 updates in the /deepagents/examples/nvidia_deep_agent directory: langgraph-checkpoint, langgraph-sdk and soupsieve.
Bumps the uv group with 3 updates in the /deepagents/examples/text-to-sql-agent directory: langgraph-checkpoint, langgraph-sdk and pydantic-settings.
Bumps the uv group with 2 updates in the /deepagents/libs/acp directory: langgraph-checkpoint and langgraph-sdk.
Bumps the uv group with 5 updates in the /deepagents/libs/cli directory:

Package From To
langgraph-checkpoint 4.0.1 4.1.1
langgraph-sdk 0.3.11 0.3.15
soupsieve 2.8.3 2.8.4
pydantic-settings 2.13.1 2.14.2
mcp 1.26.0 1.28.1

Bumps the uv group with 2 updates in the /deepagents/libs/deepagents directory: langgraph-checkpoint and langgraph-sdk.
Bumps the uv group with 6 updates in the /deepagents/libs/harbor directory:

Package From To
langgraph-checkpoint 4.0.1 4.1.1
langgraph-sdk 0.3.11 0.3.15
soupsieve 2.8.3 2.8.4
pydantic-settings 2.13.1 2.14.2
litellm 1.82.1 1.84.0
mcp 1.26.0 1.28.1

Bumps the uv group with 3 updates in the /deepagents/libs/partners/daytona directory: langgraph-checkpoint, langgraph-sdk and vcrpy.
Bumps the uv group with 3 updates in the /deepagents/libs/partners/modal directory: langgraph-checkpoint, langgraph-sdk and vcrpy.
Bumps the uv group with 3 updates in the /deepagents/libs/partners/runloop directory: langgraph-checkpoint, langgraph-sdk and vcrpy.

Updates langgraph-checkpoint from 4.0.1 to 4.1.1

Release notes

Sourced from langgraph-checkpoint's releases.

langgraph-checkpoint==4.1.1

Changes since checkpoint==4.1.0

  • release(checkpoint): 4.1.1 (#7890)
  • fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/checkpoint (#7784)

langgraph-checkpoint==4.1.0

Changes since checkpoint==4.1.0a4

  • release: bump alpha packages to official versions (#7775)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/checkpoint (#7762)
  • chore(deps): bump langchain-core from 1.3.2 to 1.3.3 in /libs/checkpoint (#7752)
  • feat(checkpoint): force delta channel snapshot after max supersteps since last snapshot (#7746)
  • fix(checkpoint): specify allowed_objects in Reviver (#7743)
  • chore: remove keepset helper (#7745)
  • chore(langgraph): add guide/conformance for delta channel checkpointer (#7736)
  • docs(checkpoint): mark DeltaChannel and delta-history APIs as beta (#7732)
  • chore(deps): bump the minor-and-patch group across 1 directory with 3 updates (#7670)
  • chore: "chore: minor clean up around checkpoint and delta channel" (#7706)
  • chore: minor clean up around checkpoint and delta channel (#7705)

langgraph-checkpoint==4.1.0a4

Changes since checkpoint==4.1.0a3

  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • feat: public get_writes_history saver API + delta cadence rework (#7699)

langgraph-checkpoint==4.1.0a3

Changes since checkpoint==4.1.0a2

  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • chore(langgraph): use two phase read to avoid unnecessary data transport (#7660)
  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)
  • chore: update x links to langchain_oss (#7645)
  • release(checkpoint): 4.0.3 (#7625)
  • fix(checkpoint): revive lc=2 JSON blobs for safe types without allowlist (#7582)

langgraph-checkpoint==4.1.0a2

Changes since checkpoint==4.1.0a1

langgraph-checkpoint==4.1.0a1

Changes since checkpoint==4.0.3

  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)

... (truncated)

Commits
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • bf7fec0 release(langgraph): 1.2.1 (#7883)
  • 8215a9d feat(langgraph): add before_builtins opt-in for stream transformers (#7882)
  • Additional commits viewable in compare view

Updates langgraph-sdk from 0.3.11 to 0.3.15

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.3.15

Changes since sdk==0.3.14

  • release(checkpoint): 4.1.1 (#7890)
  • release(sdk-py): 0.3.15 (#7891)
  • fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • release(langgraph): 1.2.1 (#7883)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/sdk-py (#7863)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/sdk-py (#7764)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/sdk-py (#7789)
  • release: bump alpha packages to official versions (#7775)
  • chore(langgraph): bump langchain-core to 1.4.0 (#7767)
  • feat(sdk-py): support metadata filter for crons search/count (#7737)
  • chore(deps): bump ty from 0.0.23 to 0.0.33 in /libs/sdk-py (#7666)

langgraph-sdk==0.3.14

Changes since sdk==0.3.13

  • release(sdk-py): 0.3.14 (#7712)
  • feat(sdk-py): add return_minimal to threads update (#7704)
  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • release: alpha bump langgraph 1.2.0a6 (#7697)
  • release: alpha bump prebuilt 1.1.0a2, langgraph 1.2.0a5 (#7682)
  • release: alpha bump prebuilt 1.1.0a1, langgraph 1.2.0a4 (#7679)
  • feat(langgraph): dispatch stream_events(version='v3') on Pregel (#7677)
  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • release: alpha for timers (#7647)
  • chore: update x links to langchain_oss (#7645)
  • feat(langgraph): add streaming transformer infrastructure and tests (#7519)
  • chore(deps): bump the minor-and-patch group across 1 directory with 4 updates (ty held back) (#7635)
  • release(prebuilt): 1.0.12, langgraph 1.1.10 (#7623)
  • release(checkpoint): 4.0.3 (#7625)
  • release(prebuilt): 1.0.11 (#7610)
  • feat(prebuilt): allow ToolNode tools to return list[Command | ToolMessage] (#7596)
  • chore(langgraph): bump version 1.1.8 -> 1.1.9 (#7563)
  • release(langgraph): 1.1.8 (#7545)
  • release(prebuilt): 1.0.10 (#7541)
  • release(langgraph): 1.1.7 (#7540)
  • chore(deps): bump langsmith from 0.7.20 to 0.7.31 in /libs/sdk-py (#7528)
  • release(checkpoint): 4.0.2 (#7518)
  • chore(deps-dev): bump pytest from 9.0.2 to 9.0.3 in /libs/sdk-py (#7504)
  • release(langgraph): 1.1.7a2 (#7511)
  • chore: allow passing some metadata only for tracing purposes (#7383)
  • release(langgraph): 1.1.7a1 (#7476)
  • chore(deps): bump langchain-core from 1.2.22 to 1.2.28 in /libs/sdk-py (#7449)

langgraph-sdk==0.3.13

Changes since sdk==0.3.12

  • chore: validate reconnect url (#7434)

... (truncated)

Commits

Updates soupsieve from 2.8.3 to 2.8.4

Release notes

Sourced from soupsieve's releases.

2.8.4

  • FIX: Fix another inefficient attribute pattern (@​mauriceng98).
  • FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@​mauriceng98).
Commits

Updates langgraph-checkpoint from 4.0.1 to 4.1.1

Release notes

Sourced from langgraph-checkpoint's releases.

langgraph-checkpoint==4.1.1

Changes since checkpoint==4.1.0

  • release(checkpoint): 4.1.1 (#7890)
  • fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/checkpoint (#7784)

langgraph-checkpoint==4.1.0

Changes since checkpoint==4.1.0a4

  • release: bump alpha packages to official versions (#7775)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/checkpoint (#7762)
  • chore(deps): bump langchain-core from 1.3.2 to 1.3.3 in /libs/checkpoint (#7752)
  • feat(checkpoint): force delta channel snapshot after max supersteps since last snapshot (#7746)
  • fix(checkpoint): specify allowed_objects in Reviver (#7743)
  • chore: remove keepset helper (#7745)
  • chore(langgraph): add guide/conformance for delta channel checkpointer (#7736)
  • docs(checkpoint): mark DeltaChannel and delta-history APIs as beta (#7732)
  • chore(deps): bump the minor-and-patch group across 1 directory with 3 updates (#7670)
  • chore: "chore: minor clean up around checkpoint and delta channel" (#7706)
  • chore: minor clean up around checkpoint and delta channel (#7705)

langgraph-checkpoint==4.1.0a4

Changes since checkpoint==4.1.0a3

  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • feat: public get_writes_history saver API + delta cadence rework (#7699)

langgraph-checkpoint==4.1.0a3

Changes since checkpoint==4.1.0a2

  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • chore(langgraph): use two phase read to avoid unnecessary data transport (#7660)
  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)
  • chore: update x links to langchain_oss (#7645)
  • release(checkpoint): 4.0.3 (#7625)
  • fix(checkpoint): revive lc=2 JSON blobs for safe types without allowlist (#7582)

langgraph-checkpoint==4.1.0a2

Changes since checkpoint==4.1.0a1

langgraph-checkpoint==4.1.0a1

Changes since checkpoint==4.0.3

  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)

... (truncated)

Commits
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • bf7fec0 release(langgraph): 1.2.1 (#7883)
  • 8215a9d feat(langgraph): add before_builtins opt-in for stream transformers (#7882)
  • Additional commits viewable in compare view

Updates langgraph-sdk from 0.3.11 to 0.3.15

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.3.15

Changes since sdk==0.3.14

  • release(checkpoint): 4.1.1 (#7890)
  • release(sdk-py): 0.3.15 (#7891)
  • fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • release(langgraph): 1.2.1 (#7883)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/sdk-py (#7863)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/sdk-py (#7764)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/sdk-py (#7789)
  • release: bump alpha packages to official versions (#7775)
  • chore(langgraph): bump langchain-core to 1.4.0 (#7767)
  • feat(sdk-py): support metadata filter for crons search/count (#7737)
  • chore(deps): bump ty from 0.0.23 to 0.0.33 in /libs/sdk-py (#7666)

langgraph-sdk==0.3.14

Changes since sdk==0.3.13

  • release(sdk-py): 0.3.14 (#7712)
  • feat(sdk-py): add return_minimal to threads update (#7704)
  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • release: alpha bump langgraph 1.2.0a6 (#7697)
  • release: alpha bump prebuilt 1.1.0a2, langgraph 1.2.0a5 (#7682)
  • release: alpha bump prebuilt 1.1.0a1, langgraph 1.2.0a4 (#7679)
  • feat(langgraph): dispatch stream_events(version='v3') on Pregel (#7677)
  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • release: alpha for timers (#7647)
  • chore: update x links to langchain_oss (#7645)
  • feat(langgraph): add streaming transformer infrastructure and tests (#7519)
  • chore(deps): bump the minor-and-patch group across 1 directory with 4 updates (ty held back) (#7635)
  • release(prebuilt): 1.0.12, langgraph 1.1.10 (#7623)
  • release(checkpoint): 4.0.3 (#7625)
  • release(prebuilt): 1.0.11 (#7610)
  • feat(prebuilt): allow ToolNode tools to return list[Command | ToolMessage] (#7596)
  • chore(langgraph): bump version 1.1.8 -> 1.1.9 (#7563)
  • release(langgraph): 1.1.8 (#7545)
  • release(prebuilt): 1.0.10 (#7541)
  • release(langgraph): 1.1.7 (#7540)
  • chore(deps): bump langsmith from 0.7.20 to 0.7.31 in /libs/sdk-py (#7528)
  • release(checkpoint): 4.0.2 (#7518)
  • chore(deps-dev): bump pytest from 9.0.2 to 9.0.3 in /libs/sdk-py (#7504)
  • release(langgraph): 1.1.7a2 (#7511)
  • chore: allow passing some metadata only for tracing purposes (#7383)
  • release(langgraph): 1.1.7a1 (#7476)
  • chore(deps): bump langchain-core from 1.2.22 to 1.2.28 in /libs/sdk-py (#7449)

langgraph-sdk==0.3.13

Changes since sdk==0.3.12

  • chore: validate reconnect url (#7434)

... (truncated)

Commits

Updates soupsieve from 2.8.3 to 2.8.4

Release notes

Sourced from soupsieve's releases.

2.8.4

  • FIX: Fix another inefficient attribute pattern (@​mauriceng98).
  • FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@​mauriceng98).
Commits

Updates langgraph-checkpoint from 4.0.1 to 4.1.1

Release notes

Sourced from langgraph-checkpoint's releases.

langgraph-checkpoint==4.1.1

Changes since checkpoint==4.1.0

  • release(checkpoint): 4.1.1 (#7890)
  • fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/checkpoint (#7784)

langgraph-checkpoint==4.1.0

Changes since checkpoint==4.1.0a4

  • release: bump alpha packages to official versions (#7775)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/checkpoint (#7762)
  • chore(deps): bump langchain-core from 1.3.2 to 1.3.3 in /libs/checkpoint (#7752)
  • feat(checkpoint): force delta channel snapshot after max supersteps since last snapshot (#7746)
  • fix(checkpoint): specify allowed_objects in Reviver (#7743)
  • chore: remove keepset helper (#7745)
  • chore(langgraph): add guide/conformance for delta channel checkpointer (#7736)
  • docs(checkpoint): mark DeltaChannel and delta-history APIs as beta (#7732)
  • chore(deps): bump the minor-and-patch group across 1 directory with 3 updates (#7670)
  • chore: "chore: minor clean up around checkpoint and delta channel" (#7706)
  • chore: minor clean up around checkpoint and delta channel (#7705)

langgraph-checkpoint==4.1.0a4

Changes since checkpoint==4.1.0a3

  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • feat: public get_writes_history saver API + delta cadence rework (#7699)

langgraph-checkpoint==4.1.0a3

Changes since checkpoint==4.1.0a2

  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • chore(langgraph): use two phase read to avoid unnecessary data transport (#7660)
  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)
  • chore: update x links to langchain_oss (#7645)
  • release(checkpoint): 4.0.3 (#7625)
  • fix(checkpoint): revive lc=2 JSON blobs for safe types without allowlist (#7582)

langgraph-checkpoint==4.1.0a2

Changes since checkpoint==4.1.0a1

langgraph-checkpoint==4.1.0a1

Changes since checkpoint==4.0.3

  • release: alpha for timers (#7647)
  • feat(langgraph): DeltaChannel: store sentinel in blobs, reconstruct from checkpoint_writes (#7586)
  • chore: dynamic push-task timeouts (#7646)

... (truncated)

Commits
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • bf7fec0 release(langgraph): 1.2.1 (#7883)
  • 8215a9d feat(langgraph): add before_builtins opt-in for stream transformers (#7882)
  • Additional commits viewable in compare view

Updates langgraph-sdk from 0.3.11 to 0.3.15

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.3.15

Changes since sdk==0.3.14

  • release(checkpoint): 4.1.1 (#7890)
  • release(sdk-py): 0.3.15 (#7891)
  • fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • release(langgraph): 1.2.1 (#7883)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/sdk-py (#7863)
  • chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/sdk-py (#7764)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/sdk-py (#7789)
  • release: bump alpha packages to official versions (#7775)
  • chore(langgraph): bump langchain-core to 1.4.0 (#7767)
  • feat(sdk-py): support metadata filter for crons search/count (#7737)
  • chore(deps): bump ty from 0.0.23 to 0.0.33 in /libs/sdk-py (#7666)

langgraph-sdk==0.3.14

Changes since sdk==0.3.13

  • release(sdk-py): 0.3.14 (#7712)
  • feat(sdk-py): add return_minimal to threads update (#7704)
  • release: alpha bump (a4) for langgraph, checkpoint, checkpoint-postgres (#7701)
  • release: alpha bump langgraph 1.2.0a6 (#7697)
  • release: alpha bump prebuilt 1.1.0a2, langgraph 1.2.0a5 (#7682)
  • release: alpha bump prebuilt 1.1.0a1, langgraph 1.2.0a4 (#7679)
  • feat(langgraph): dispatch stream_events(version='v3') on Pregel (#7677)
  • release: alpha bump (a3) for langgraph, checkpoint, checkpoint-postgres (#7678)
  • release: alpha for timers (#7647)
  • chore: update x links to langchain_oss (#7645)
  • feat(langgraph): add streaming transformer infrastructure and tests (#7519)
  • chore(deps): bump the minor-and-patch group across 1 directory with 4 updates (ty held back) (#7635)
  • release(prebuilt): 1.0.12, langgraph 1.1.10 (#7623)
  • release(checkpoint): 4.0.3 (#7625)
  • release(prebuilt): 1.0.11 (#7610)
  • feat(prebuilt): allow ToolNode tools to return list[Command | ToolMessage] (#7596)
  • chore(langgraph): bump version 1.1.8 -> 1.1.9 (#7563)
  • release(langgraph): 1.1.8 (#7545)
  • release(prebuilt): 1.0.10 (#7541)
  • release(langgraph): 1.1.7 (#7540)
  • chore(deps): bump langsmith from 0.7.20 to 0.7.31 in /libs/sdk-py (#7528)
  • release(checkpoint): 4.0.2 (#7518)
  • chore(deps-dev): bump pytest from 9.0.2 to 9.0.3 in /libs/sdk-py (#7504)
  • release(langgraph): 1.1.7a2 (#7511)
  • chore: allow passing some metadata only for tracing purposes (#7383)
  • release(langgraph): 1.1.7a1 (#7476)
  • chore(deps): bump langchain-core from 1.2.22 to 1.2.28 in /libs/sdk-py (#7449)

langgraph-sdk==0.3.13

Changes since sdk==0.3.12

  • chore: validate reconnect url (#7434)

... (truncated)

Commits

Updates pydantic-settings from 2.13.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

v2.14.1

What's Changed

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • d703bd7 Prepare release 2.14.2 (#890)
  • e95c30b Prepare release 2.14.1 (#859)
  • 0c87345 Fix field named cls conflicting with classmethod parameter (#858)
  • 7bd0072 Bump the python-packages group with 2 updates (#856)
  • b03e573 Bump the github-actions group with 3 updates (#853)
  • eaa3b43 Bump the python-pa...

    Description has been truncated

@dependabot
build(deps): bump the uv group across 10 directories with 7 updates
1b00901 
Bumps the uv group with 3 updates in the /deepagents/examples/deep_research directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [soupsieve](https://github.com/facelessuser/soupsieve).
Bumps the uv group with 3 updates in the /deepagents/examples/nvidia_deep_agent directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [soupsieve](https://github.com/facelessuser/soupsieve).
Bumps the uv group with 3 updates in the /deepagents/examples/text-to-sql-agent directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [pydantic-settings](https://github.com/pydantic/pydantic-settings).
Bumps the uv group with 2 updates in the /deepagents/libs/acp directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) and [langgraph-sdk](https://github.com/langchain-ai/langgraph).
Bumps the uv group with 5 updates in the /deepagents/libs/cli directory:

| Package | From | To |
| --- | --- | --- |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.0.1` | `4.1.1` |
| [langgraph-sdk](https://github.com/langchain-ai/langgraph) | `0.3.11` | `0.3.15` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.8.3` | `2.8.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.2` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.26.0` | `1.28.1` |

Bumps the uv group with 2 updates in the /deepagents/libs/deepagents directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) and [langgraph-sdk](https://github.com/langchain-ai/langgraph).
Bumps the uv group with 6 updates in the /deepagents/libs/harbor directory:

| Package | From | To |
| --- | --- | --- |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.0.1` | `4.1.1` |
| [langgraph-sdk](https://github.com/langchain-ai/langgraph) | `0.3.11` | `0.3.15` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.8.3` | `2.8.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.2` |
| [litellm](https://github.com/BerriAI/litellm) | `1.82.1` | `1.84.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.26.0` | `1.28.1` |

Bumps the uv group with 3 updates in the /deepagents/libs/partners/daytona directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [vcrpy](https://github.com/kevin1024/vcrpy).
Bumps the uv group with 3 updates in the /deepagents/libs/partners/modal directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [vcrpy](https://github.com/kevin1024/vcrpy).
Bumps the uv group with 3 updates in the /deepagents/libs/partners/runloop directory: [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph) and [vcrpy](https://github.com/kevin1024/vcrpy).


Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `soupsieve` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `soupsieve` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `pydantic-settings` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.2)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `soupsieve` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

Updates `pydantic-settings` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.2)

Updates `mcp` from 1.26.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.28.1)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `soupsieve` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

Updates `pydantic-settings` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.2)

Updates `litellm` from 1.82.1 to 1.84.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@1.82.1...v1.84.0)

Updates `mcp` from 1.26.0 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.28.1)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `vcrpy` from 8.1.1 to 8.2.1
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v8.1.1...v8.2.1)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `vcrpy` from 8.1.1 to 8.2.1
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v8.1.1...v8.2.1)

Updates `langgraph-checkpoint` from 4.0.1 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.0.1...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.11 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.11...0.3.15)

Updates `vcrpy` from 8.1.1 to 8.2.1
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v8.1.1...v8.2.1)

---
updated-dependencies:
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: indirect
  dependency-group: uv
- dependency-name: litellm
  dependency-version: 1.84.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: vcrpy
  dependency-version: 8.2.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: vcrpy
  dependency-version: 8.2.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: langgraph-sdk
  dependency-version: 0.3.15
  dependency-type: indirect
  dependency-group: uv
- dependency-name: vcrpy
  dependency-version: 8.2.1
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants