Skip to content

Bump the minor-and-patch group across 1 directory with 15 updates#88

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-and-patch-7aeeb6671b
Open

Bump the minor-and-patch group across 1 directory with 15 updates#88
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-and-patch-7aeeb6671b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 12 updates in the / directory:

Package From To
fastmcp 3.2.4 3.4.0
debugpy 1.8.20 1.8.21
langchain-core 1.2.26 1.4.0
mcp 1.27.0 1.27.2
msgraph-sdk 1.55.0 1.58.0
langchain 1.2.15 1.3.4
langchain-openai 1.1.12 1.2.2
agent-framework-core 1.0.0rc5 1.7.0
azure-cosmos 4.15.0 4.16.1
azure-monitor-opentelemetry 1.8.6 1.8.8
ruff 0.15.8 0.15.15
prek 0.3.8 0.4.3

Updates fastmcp from 3.2.4 to 3.4.0

Release notes

Sourced from fastmcp's releases.

v3.4.0: Remote Control

FastMCP 3.4 is about reaching servers that live somewhere else. The headline is fastmcp-remote, a standalone bridge that connects stdio-only MCP hosts to servers hosted over HTTP. Around it, this release hardens the proxy layer those remote connections depend on — making bridges fail loudly instead of silently, and keeping authenticated sessions alive across the long idle periods that remote clients are prone to.

fastmcp-remote

Some MCP hosts still insist on launching a local stdio command, even when the server you want is already running over HTTP. FastMCP could already proxy a remote URL through fastmcp run, but that pulls in the full server-runner surface. fastmcp-remote is the small, single-purpose version: one URL in, one local stdio proxy out.

{
  "mcpServers": {
    "linear": {
      "command": "uvx",
      "args": ["fastmcp-remote", "https://mcp.linear.app/mcp"]
    }
  }
}

OAuth is enabled automatically for HTTPS servers, with support for explicit bearer tokens and custom headers when you need them. The implementation stays on FastMCP primitives — Client, OAuth, create_proxy, and stdio — and credits the original npm mcp-remote project for the command shape.

Bridges That Fail Loudly

Proxies are lazy bridges: they don't touch the upstream server during construction, but they do forward real MCP requests once a client connects. As of 3.4, initialize is part of that forwarded surface — so a proxy only reports a successful handshake after the upstream server initializes too. A missing backend, a wrong URL (the server root instead of /mcp), denied upstream auth, or a non-MCP upstream now fails the downstream initialize instead of producing a "connected" proxy whose capability fetches quietly come back empty. The proxy also forwards ping upstream now.

This is an intentional behavior change from 3.3, and the reason bridge callers like fastmcp-remote surface real upstream failures instead of degrading into empty tool lists.

Auth That Survives Idle Time

Remote sessions sit idle, and short-lived upstream tokens punish that. fastmcp_access_token_expiry_seconds decouples the FastMCP-issued token's lifetime from the upstream expires_in — the FastMCP token is just a reference into proxy storage, re-validated and transparently refreshed on every request, so it can safely outlive a 5-minute upstream token without forcing a full OAuth flow after every idle period. When the upstream issues no refresh token, the lifetime is capped to match.

from fastmcp.server.auth.providers.github import GitHubProvider
auth = GitHubProvider(
client_id="...",
client_secret="...",
base_url="https://your-server.com",
fastmcp_access_token_expiry_seconds=60 * 60 * 24,  # 24h client-facing token
)

Alongside it, token_expiry_threshold_seconds treats tokens as expired N seconds early to close refresh races, and WorkOSProvider gains valid_scopes and extra_authorize_params.

Returnable Tool Errors

A tool could previously only signal an error by raising, which flattens to a text-only result and discards structured content. ToolResult now accepts is_error, mapping to CallToolResult.isError so a tool can hand back a rich error the model can see and act on. The proxy uses this to forward upstream tool errors intact instead of collapsing them.

@mcp.tool
def lookup(id: str) -> ToolResult:
</tr></table>

... (truncated)

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v3.4.0: Remote Control

FastMCP 3.4 is about reaching servers that live somewhere else. The headline is fastmcp-remote, a standalone bridge that connects stdio-only MCP hosts to servers hosted over HTTP. Around it, the proxy layer those connections depend on is hardened: a proxy now forwards initialize upstream and fails loudly when the backend is missing or misconfigured, instead of reporting a connected-but-empty proxy. And FastMCP-issued access tokens can now outlive short-lived upstream tokens, so authenticated sessions survive the long idle periods remote clients are prone to.

New Features 🎉

Breaking Changes ⚠️

Enhancements ✨

Security 🔒

Fixes 🐞

... (truncated)

Commits

Updates debugpy from 1.8.20 to 1.8.21

Release notes

Sourced from debugpy's releases.

debugpy v1.8.21

Fixes for:

  • Return evaluate result in DAP response body instead of writing to stdout: #2027
  • Prevent invalid scopes request from crashing debug session: #2026
  • Skip uninitialized __slots__ in variable resolver: #2024
  • Handle -c arguments that are bytes instead of str: #2021
  • Fix evaluation of variables from chained exception frames: #2018
  • ContinueRequest with a specific threadId no longer resumes all threads (in-process adapter): #2012
  • Avoid strong reference to exceptions during unwind: #2008
  • Show error message on evaluate failures in the hover context: #2006
  • Display dlerror output when dlopen fails: #2000
  • Replace removed pkgutil.get_loader with importlib.util.find_spec in get_fullname: #1998

Enhancements:

  • Add option to ignore all system exit codes: #2017
  • Pull changes from pydevd up to March 2026: #2010

Infrastructure work:

Thanks to @​maxbachmann, @​mfussenegger, and @​sambrightman for the commits.

Commits
  • 858b05c Fix TSA #2816217: suppress Flawfinder false positive on Cython JoinPyUnicode ...
  • f0c34f1 Fix TSA #2816216: suppress Flawfinder false positive on Cython DIGIT_PAIRS_8 ...
  • 4c70e13 Fix TSA #2816218: suppress Flawfinder false positive on Cython read-loop iter...
  • 19c2b8c Fix TSA #2816220: suppress Flawfinder false positive on Cython read-loop iter...
  • ab92638 Merge pull request #2031 from StellaHuang95/stellahuang/tsa-2816219-flawfinde...
  • 12bd4fe Return evaluate result in DAP response body instead of writing to stdout (#2027)
  • 8bd57a7 Prevent invalid scopes request from crashing debug session (#2026)
  • bf118c8 Skip uninitialized slots in variable resolver (#2024)
  • a55be0e Potential fix when -c arguments are bytes instead of a str (#2021)
  • 0f037ad Fix evaluation of variables from chained exception frames (#2018)
  • Additional commits viewable in compare view

Updates langchain-core from 1.2.26 to 1.4.0

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.0

Changes since langchain-core==0.3.86

chore(infra): merge v1.4 into master (#37350) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/core (#37329) fix(core): avoid eager pydantic.v1 import in @deprecated (#37308) chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core (#37237) chore: bump jupyter-server from 2.17.0 to 2.18.0 in /libs/core (#37204) release(core): 1.3.3 (#37198) fix(core): set deprecation since to 1.3.3 to match release (#37200) fix(core, langchain): harden load() against untrusted manifests (#37197) chore: bump notebook from 7.5.0 to 7.5.6 in /libs/core (#37109) chore: bump types-pyyaml from 6.0.12.20250915 to 6.0.12.20260408 in /libs/core (#37129) fix(core): preserve structured inputs on tool runs in tracers (#37108) release(perplexity): 1.2.0 (#37091) chore(docs): update x handle references (#37081) fix(core): make removal optional in warn_deprecated (#37056) fix(core): validate batch_size in _batch and _abatch to prevent infinite loop (#36663) chore(core): mark stream_v2/astream_v2 as beta (#36992) release(core): 1.3.2 (#36990) feat(core): add content-block-centric streaming (v2) (#36834) release(core): 1.3.1 (#36972) feat(core): allow _format_output to pass through list of ToolOutputMixin instances (#36963) chore: bump nbconvert from 7.17.0 to 7.17.1 in /libs/core (#36923) feat(core): Update inheritance behavior for tracer metadata for special keys (#36900) chore: bump langsmith from 0.7.13 to 0.7.31 in /libs/core (#36813) release(core): release 1.3.0 (#36851) release(core): 1.3.0a3 (#36829) chore(core): keep checkpoint_ns behavior in streaming metadata for backwards compat (#36828) feat(core): Add chat model and LLM invocation params to traceable metadata (#36771) fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#36816) chore(deps): bump pytest to 9.0.3 (#36801) chore(core): harden private SSRF utilities (#36768) fix(openai): handle content blocks without type key in responses api conversion (#36725) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/core (#36719) release(core): 1.3.0.a2 (#36698) fix(core): Use reference counting for storing inherited run trees to support garbage collection (#36660) docs(core): nit (#36685) release(core): 1.3.0a1 (#36656) chore(core): reduce streaming metadata / perf (#36588) release(core): release 1.2.28 (#36614) fix(core): add more sanitization to templates (#36612) release(core): 1.2.27 (#36586) fix(core): handle symlinks in deprecated prompt save path (#36585) chore: add comment explaining pygments>=2.20.0 (#36570) release(core): 1.2.26 (#36511) fix(core): add init validator and serialization mappings for Bedrock models (#34510) feat(core): add ChatBaseten to serializable mapping (#36510) chore(core): drop gpt-3.5-turbo from docstrings (#36497) fix(core): correct parameter names in filter_messages docstring example (#36462)

... (truncated)

Commits
  • 70e66a1 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/openrouter (#37352)
  • da380bc chore(infra): merge v1.4 into master (#37350)
  • bbd10fe chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343)
  • 11bbfb7 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/fireworks (#37339)
  • 7fd61d2 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/mistralai (#37338)
  • 5c096bb chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/nomic (#37334)
  • ac47d54 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/chroma (#37333)
  • 7e5c570 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/qdrant (#37332)
  • 2086b91 chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/core (#37329)
  • 407e33a chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/langchain (#37327)
  • Additional commits viewable in compare view

Updates mcp from 1.27.0 to 1.27.2

Release notes

Sourced from mcp's releases.

v1.27.2

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v1.27.1...v1.27.2

v1.27.1

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v1.27.0...v1.27.1

Commits
  • 6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
  • ce267b6 [v1.x] Bind transport sessions to the authenticated principal (#2719)
  • 1abcca2 [v1.x] Add subject and claims to AccessToken (#2690)
  • 9773a3f [v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages artifact (...
  • 77431eb [v1.x] refactor: import SSEError from httpx_sse public API (#2561)
  • 2034cae [v1.x] build: restrict httpx to <1.0.0 (#2559)
  • 73d458b [v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthCli...
  • 8d4c2f5 [v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2...
  • See full diff in compare view

Updates msgraph-sdk from 1.55.0 to 1.58.0

Release notes

Sourced from msgraph-sdk's releases.

v1.58.0

1.58.0 (2026-05-20)

Features

  • drop Python 3.9 and add Python 3.14 support across packaging, CI, and docs (#1481) (9d3a8c8)
  • generation: update request builders and models (#1483) (c8fd694)

v1.57.0

1.57.0 (2026-05-05)

Features

  • generation: update request builders and models (8f65301)
  • generation: update request builders and models (54ae3ef)

v1.56.0

1.56.0 (2026-04-16)

Features

  • generation: update request builders and models (8b6bb43)
Changelog

Sourced from msgraph-sdk's changelog.

1.58.0 (2026-05-20)

Features

  • drop Python 3.9 and add Python 3.14 support across packaging, CI, and docs (#1481) (9d3a8c8)
  • generation: update request builders and models (#1483) (c8fd694)

1.57.0 (2026-05-05)

Features

  • generation: update request builders and models (8f65301)
  • generation: update request builders and models (54ae3ef)

1.56.0 (2026-04-16)

Features

  • generation: update request builders and models (8b6bb43)
Commits
  • c83cc2f chore(main): release 1.58.0 (#1484)
  • 3381e7d chore(deps): Update msgraph-core version to 1.4.0 (#1501)
  • e13b24a chore(deps): consolidate dependabot dependency updates (#1499)
  • 3f999a3 chore(deps-dev): consolidate dependabot dependency updates (#1491)
  • 9d3a8c8 feat: drop Python 3.9 and add Python 3.14 support across packaging, CI, and d...
  • c8fd694 feat(generation): update request builders and models (#1483)
  • 69b8936 Merge pull request #1479 from microsoftgraph/chore/rename-daily-ci-pipeline
  • f932dbd chore: add DevOps build pipeline for S360 security vulnerability scanning (#1...
  • 3b17405 Merge pull request #1467 from microsoftgraph/chore/consolidate-dependabot-upd...
  • 9e3975f Merge branch 'main' into chore/consolidate-dependabot-updates
  • Additional commits viewable in compare view

Updates langchain from 1.2.15 to 1.3.4

Release notes

Sourced from langchain's releases.

langchain-anthropic==1.3.4

Changes since langchain-anthropic==1.3.3

release(anthropic): 1.3.4 (#35418) fix(anthropic): filter out common OpenAI Responses block types (#35417) fix(anthropic): update integration tests (#35396) revert: add ChatAnthropicBedrockWrapper (#35371) fix(anthropic): replace retired model IDs in tests and docstrings (#35365) feat(anthropic): add ChatAnthropicBedrock wrapper (#35091) fix(model-profiles): sort generated profiles by model ID for stable diffs (#35344) fix(anthropic): set max input tokens based on 1m context beta header (#35341) chore: bump model profiles (#35294) feat(anthropic): add User-Agent header for Anthropic API calls (#35268) chore(anthropic): add version (#35293) fix(anthropic): hoist cache_control from tool_result content sub-blocks to tool_result level (#35126) chore(deps): bump langsmith from 0.4.43 to 0.6.3 in /libs/partners/anthropic (#35150)

langchain==1.3.4

Changes since langchain==1.3.3

release(langchain): 1.3.4 (#37861) fix(langchain): improve HITL rejection guidance (#37859)

langchain-core==1.3.3

Changes since langchain-core==1.3.2

release(core): 1.3.3 (#37198) fix(core): set deprecation since to 1.3.3 to match release (#37200) fix(core, langchain): harden load() against untrusted manifests (#37197) chore: bump notebook from 7.5.0 to 7.5.6 in /libs/core (#37109) chore: bump types-pyyaml from 6.0.12.20250915 to 6.0.12.20260408 in /libs/core (#37129) fix(core): preserve structured inputs on tool runs in tracers (#37108) release(perplexity): 1.2.0 (#37091) chore(docs): update x handle references (#37081) fix(core): make removal optional in warn_deprecated (#37056) fix(core): validate batch_size in _batch and _abatch to prevent infinite loop (#36663) chore(core): mark stream_v2/astream_v2 as beta (#36992)

langchain==1.3.3

Changes since langchain==1.3.2

release(langchain): 1.3.3 (#37843) chore(langchain): bump langgraph to 1.2.4 (#37857) chore(langchain): loosen langgraph dep range (#37855) feat(langchain): project subagent runs onto typed run.subagents channel (#37739) feat(langchain): add interrupt_mode and when predicate to HumanInTheLoopMiddleware (#37579)

langchain-core==1.3.2

Changes since langchain-core==1.3.1

... (truncated)

Commits
  • eb2dabb release(langchain): 1.3.4 (#37861)
  • 17d1c27 fix(langchain): improve HITL rejection guidance (#37859)
  • 14b1a24 release(langchain): 1.3.3 (#37843)
  • eb1f731 chore(langchain): bump langgraph to 1.2.4 (#37857)
  • 06e3c2a chore(langchain): loosen langgraph dep range (#37855)
  • 44545a0 chore: bump aws-actions/configure-aws-credentials from 6.1.1 to 6.2.0 in the ...
  • 7a74eeb chore(model-profiles): refresh model profile data (#37852)
  • dfca7f4 feat(langchain): project subagent runs onto typed run.subagents channel (#37739)
  • 36be77b feat(langchain): add interrupt_mode and when predicate to `HumanInTheLoop...
  • bc5f151 chore(model-profiles): refresh model profile data (#37802)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.1.12 to 1.2.2

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.2.2

Changes since langchain-openai==1.2.1

release(openai): 1.2.2 (#37617) chore(infra): bump langchain-tests floor to 1.1.9 (#37610) test(openai): unbreak audio chat and Azure embedding integration tests (#37589) fix(openai): guard httpx finalizers (#37570) chore: bump langsmith from 0.8.4 to 0.8.5 in /libs/partners/openai (#37549) chore: bump idna from 3.11 to 3.15 in /libs/partners/openai (#37548) ci(infra): harden Dependabot version-bound preservation (#37510) test(standard-tests): assert ls_model_name honors per-call model override (#37504) fix(openai): source LLM context size from model profiles (#37489) chore(core,langchain,openai): refresh stale OpenAI model references (#37487) fix(openai): broaden condition for ContextOverflowError to accommodate other providers (#37457) docs(openai): document base_url env var fallback chain (#37436) chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/openai (#37416) chore: bump langsmith from 0.7.31 to 0.8.0 in /libs/partners/openai (#37398) chore(infra): merge v1.4 into master (#37350) chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/openai (#37330) chore: bump langchain-core from 1.3.2 to 1.3.3 in /libs/partners/openai (#37266) chore(docs): update x handle references (#37081) chore(model-profiles): refresh model profile data (#37074) chore(docs): update comment for chatopenai (#37034) chore(model-profiles): refresh model profile data (#37015)

langchain-openai==1.2.1

Changes since langchain-openai==1.2.0

hotfix: bump min core versions (#36996) release(openai): 1.2.1 (#36995) fix(openai): add gpt-5.5 pro to Responses API check (#36994) feat(core): add content-block-centric streaming (v2) (#36834) chore(model-profiles): refresh model profile data (#36982)

langchain-openai==1.2.0

Changes since langchain-openai==1.1.16

release(openai): 1.2.0 (#36961) feat(openai): prevent silent streaming hangs in ChatOpenAI (#36949) hotfix(ci): remove nobenchmark flag (#36959) chore(partners): standardize integration test invocation (#36958)

langchain-openai==1.1.16

Changes since langchain-openai==1.1.15

release(openai): 1.1.16 (#36927) fix(openai): tolerate prompt_cache_retention drift in streaming (#36925)

langchain-openai==1.1.15

Changes since langchain-openai==1.1.14

... (truncated)

Commits
  • a1e2daf release(openai): 1.2.2 (#37617)
  • 9e21348 fix(openai): guard httpx finalizers against uninitialized instances (#37568)
  • 74cecb4 ci(infra): expand integration tests dispatch dropdown to external partners (#...
  • 269d628 fix(standard-tests): recognize parametrize-nested xfails in override check (#...
  • 23d369e test(xai): tolerate extra block types in web search and xfail v1 streaming to...
  • aef86c4 chore(infra): bump langchain-tests floor to 1.1.9 (#37610)
  • ebc1880 release(standard-tests): 1.1.9 (#37609)
  • 22575ad test(standard-tests): allow extra content blocks in streaming assertions (#37...
  • 1aa4496 feat(langchain): register stream transformers on middleware (#37591)
  • d2931d8 release(fireworks): 1.4.1 (#37603)
  • Additional commits viewable in compare view

Updates agent-framework-core from 1.0.0rc5 to 1.7.0

Release notes

Sourced from agent-framework-core's releases.

dotnet-1.7.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.6.2...dotnet-1.7.0

dotnet-1.6.2

What's Changed

@dependabot
Bump the minor-and-patch group across 1 directory with 15 updates
cf1d666 
Bumps the minor-and-patch group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.2.4` | `3.4.0` |
| [debugpy](https://github.com/microsoft/debugpy) | `1.8.20` | `1.8.21` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.26` | `1.4.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.0` | `1.27.2` |
| [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python) | `1.55.0` | `1.58.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.2.15` | `1.3.4` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.1.12` | `1.2.2` |
| [agent-framework-core](https://github.com/microsoft/agent-framework) | `1.0.0rc5` | `1.7.0` |
| [azure-cosmos](https://github.com/Azure/azure-sdk-for-python) | `4.15.0` | `4.16.1` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.8.6` | `1.8.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.8` | `0.15.15` |
| [prek](https://github.com/j178/prek) | `0.3.8` | `0.4.3` |



Updates `fastmcp` from 3.2.4 to 3.4.0
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.2.4...v3.4.0)

Updates `debugpy` from 1.8.20 to 1.8.21
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](microsoft/debugpy@v1.8.20...v1.8.21)

Updates `langchain-core` from 1.2.26 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.26...langchain-core==1.4.0)

Updates `mcp` from 1.27.0 to 1.27.2
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.0...v1.27.2)

Updates `msgraph-sdk` from 1.55.0 to 1.58.0
- [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases)
- [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md)
- [Commits](microsoftgraph/msgraph-sdk-python@v1.55.0...v1.58.0)

Updates `langchain` from 1.2.15 to 1.3.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.2.15...langchain==1.3.4)

Updates `langchain-openai` from 1.1.12 to 1.2.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.1.12...langchain-openai==1.2.2)

Updates `agent-framework-core` from 1.0.0rc5 to 1.7.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0rc5...dotnet-1.7.0)

Updates `azure-cosmos` from 4.15.0 to 4.16.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.15.0...azure-cosmos_4.16.1)

Updates `azure-monitor-opentelemetry` from 1.8.6 to 1.8.8
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.8.6...azure-monitor-opentelemetry_1.8.8)

Updates `opentelemetry-instrumentation-starlette` from 0.60b0 to 0.61b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.0...v1.40.0)

Updates `logfire` from 4.31.0 to 4.35.0
- [Release notes](https://github.com/pydantic/logfire/releases)
- [Changelog](https://github.com/pydantic/logfire/blob/main/CHANGELOG.md)
- [Commits](pydantic/logfire@v4.31.0...v4.35.0)

Updates `ruff` from 0.15.8 to 0.15.15
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.8...0.15.15)

Updates `prek` from 0.3.8 to 0.4.3
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.8...v0.4.3)

---
updated-dependencies:
- dependency-name: fastmcp
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: debugpy
  dependency-version: 1.8.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mcp
  dependency-version: 1.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: msgraph-sdk
  dependency-version: 1.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: agent-framework-core
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: azure-cosmos
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-instrumentation-starlette
  dependency-version: 0.61b0
  dependency-type: direct:production
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: logfire
  dependency-version: 4.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.15.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: prek
  dependency-version: 0.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants