-
Notifications
You must be signed in to change notification settings - Fork 16
deps(deps): bump langchain-core from 0.3.74 to 0.3.75 in /requirements #219
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 0.3.74 to 0.3.75. - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==0.3.74...langchain-core==0.3.75) --- updated-dependencies: - dependency-name: langchain-core dependency-version: 0.3.75 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Important
Looks good to me! 👍
Reviewed everything up to 863740e in 2 minutes and 17 seconds. Click for details.
- Reviewed
122
lines of code in1
files - Skipped
0
files when reviewing. - Skipped posting
4
draft comments. View those below. - Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. requirements/requirements.txt:21
- Draft comment:
Click version changed from 8.2.1 to 8.1.8 – this downgrade may be unintended. Please confirm if this change is deliberate. - Reason this comment was not posted:
Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 0% vs. threshold = 50% Since this is a requirements file that was auto-generated by a dependency management tool (uv), version changes are likely intentional and managed by the tool. The comment asks for confirmation which violates our rule about not asking authors to confirm their intentions. Additionally, dependency changes are explicitly listed as something we should not comment on. The version downgrade could potentially cause compatibility issues with other packages. The automated tool might have made a mistake. Per our rules, we explicitly do not comment on dependency changes or library versions. The dependency management tool (uv) is trusted to handle version resolution correctly. Delete the comment as it violates two rules: no commenting on dependency changes and no asking authors to confirm their intentions.
2. requirements/requirements.txt:70
- Draft comment:
Markdown-it-py version was downgraded from 4.0.0 to 3.0.0. Verify that this major version change is intended and compatible with your toolchain. - Reason this comment was not posted:
Comment did not seem useful. Confidence is useful =0%
<= threshold50%
The comment is asking the PR author to verify a major version downgrade of a dependency, which is not allowed according to the rules. The comment does not provide a specific suggestion or ask for a test to be written, and it is related to dependencies, which should not be commented on.
3. requirements/requirements.txt:59
- Draft comment:
langchain-core is bumped to 0.3.75 as intended. Ensure downstream components are tested for compatibility with this update. - Reason this comment was not posted:
Confidence changes required:0%
<= threshold50%
None
4. requirements/requirements.txt:12
- Draft comment:
Comment references have been updated from 'requirements/requirements.in' to 'requirements.in'. Verify that this accurately reflects the current file structure. - Reason this comment was not posted:
Confidence changes required:0%
<= threshold50%
None
Workflow ID: wflow_BjvQepzzC6gu8SHs
You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.
distro==1.9.0 | ||
# via | ||
# anthropic | ||
# openai | ||
exceptiongroup==1.3.0 | ||
# via anyio |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bug: Unexpected Downgrades and New Dependency in langchain-core
The langchain-core
minor version bump (0.3.74 to 0.3.75) unexpectedly caused markdown-it-py
to downgrade from 4.0.0 to 3.0.0 (a major version change) and click
from 8.2.1 to 8.1.8. These downgrades could introduce breaking changes. A new dependency, exceptiongroup==1.3.0
, was also added. This suggests stricter constraints from langchain-core
or an environment mismatch during requirements regeneration.
Bumps langchain-core from 0.3.74 to 0.3.75.
Release notes
Sourced from langchain-core's releases.
Commits
dbebe2c
release(core): 0.3.75 (#32693)0080439
release(openai): 0.3.32 (#32691)1459d4f
fix(openai): Always add raw response object to OpenAI client errors for invok...f33480c
feat(core): trace response body on error (#32653)1c55536
chore(core): add note about backward compatibility fortool_calls
in `addit...622337a
docs(docs): fixed typos in documentations (#32661)1819c73
docs(docs): update Docker to ClickHouse 25.7 with vector_similarity support (...8171403
docs(docs): rebranding of Azure AI Studio to Azure AI Foundry (#32658)2d0713c
fix(infra): ollama CI8060b37
fix(infra): ollama CIDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Important
Bump
langchain-core
to 0.3.75 and update other dependencies inrequirements.txt
.langchain-core
from 0.3.74 to 0.3.75 inrequirements.txt
.click
from 8.2.1 to 8.1.8 andmarkdown-it-py
from 4.0.0 to 3.0.0 inrequirements.txt
.exceptiongroup
1.3.0 torequirements.txt
.requirements.txt
to reflect changes in dependency sources.This description was created by
for 863740e. You can customize this summary. It will automatically update as commits are pushed.