Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 27, 2025

Bumps langchain-core from 0.3.74 to 0.3.75.

Release notes

Sourced from langchain-core's releases.

langchain-core==0.3.75

Changes since langchain-core==0.3.74

release(core): 0.3.75 (#32693) feat(core): trace response body on error (#32653) chore(core): add note about backward compatibility for tool_calls in additional_kwargs in JsonOutputKeyToolsParser docs(docs): fixed typos in documentations (#32661) chore(core): add mypy pydantic plugin (#32604) refactor(core): Use duck typing for _StreamingCallbackHandler (#32535) fix(core): Support no-args tools by defaulting args to empty dict (#32530) docs: update outdated README.md content (#32540) chore(core): bump lock feat: port various nit changes from wip-v0.4 (#32506) fix(core): fix beta decorator for properties (#32497) chore: formatting across codebase (#32466)

Commits
  • dbebe2c release(core): 0.3.75 (#32693)
  • 0080439 release(openai): 0.3.32 (#32691)
  • 1459d4f fix(openai): Always add raw response object to OpenAI client errors for invok...
  • f33480c feat(core): trace response body on error (#32653)
  • 1c55536 chore(core): add note about backward compatibility for tool_calls in `addit...
  • 622337a docs(docs): fixed typos in documentations (#32661)
  • 1819c73 docs(docs): update Docker to ClickHouse 25.7 with vector_similarity support (...
  • 8171403 docs(docs): rebranding of Azure AI Studio to Azure AI Foundry (#32658)
  • 2d0713c fix(infra): ollama CI
  • 8060b37 fix(infra): ollama CI
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Important

Bump langchain-core to 0.3.75 and update other dependencies in requirements.txt.

  • Dependencies:
    • Bump langchain-core from 0.3.74 to 0.3.75 in requirements.txt.
    • Update click from 8.2.1 to 8.1.8 and markdown-it-py from 4.0.0 to 3.0.0 in requirements.txt.
    • Add exceptiongroup 1.3.0 to requirements.txt.
  • Misc:
    • Update comments in requirements.txt to reflect changes in dependency sources.

This description was created by Ellipsis for 863740e. You can customize this summary. It will automatically update as commits are pushed.

Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 0.3.74 to 0.3.75.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.74...langchain-core==0.3.75)

---
updated-dependencies:
- dependency-name: langchain-core
  dependency-version: 0.3.75
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 27, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 27, 2025

Labels

The following labels could not be found: auto-merge-candidate. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 27, 2025
Copy link

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 863740e in 2 minutes and 17 seconds. Click for details.
  • Reviewed 122 lines of code in 1 files
  • Skipped 0 files when reviewing.
  • Skipped posting 4 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. requirements/requirements.txt:21
  • Draft comment:
    Click version changed from 8.2.1 to 8.1.8 – this downgrade may be unintended. Please confirm if this change is deliberate.
  • Reason this comment was not posted:
    Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 0% vs. threshold = 50% Since this is a requirements file that was auto-generated by a dependency management tool (uv), version changes are likely intentional and managed by the tool. The comment asks for confirmation which violates our rule about not asking authors to confirm their intentions. Additionally, dependency changes are explicitly listed as something we should not comment on. The version downgrade could potentially cause compatibility issues with other packages. The automated tool might have made a mistake. Per our rules, we explicitly do not comment on dependency changes or library versions. The dependency management tool (uv) is trusted to handle version resolution correctly. Delete the comment as it violates two rules: no commenting on dependency changes and no asking authors to confirm their intentions.
2. requirements/requirements.txt:70
  • Draft comment:
    Markdown-it-py version was downgraded from 4.0.0 to 3.0.0. Verify that this major version change is intended and compatible with your toolchain.
  • Reason this comment was not posted:
    Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to verify a major version downgrade of a dependency, which is not allowed according to the rules. The comment does not provide a specific suggestion or ask for a test to be written, and it is related to dependencies, which should not be commented on.
3. requirements/requirements.txt:59
  • Draft comment:
    langchain-core is bumped to 0.3.75 as intended. Ensure downstream components are tested for compatibility with this update.
  • Reason this comment was not posted:
    Confidence changes required: 0% <= threshold 50% None
4. requirements/requirements.txt:12
  • Draft comment:
    Comment references have been updated from 'requirements/requirements.in' to 'requirements.in'. Verify that this accurately reflects the current file structure.
  • Reason this comment was not posted:
    Confidence changes required: 0% <= threshold 50% None

Workflow ID: wflow_BjvQepzzC6gu8SHs

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

distro==1.9.0
# via
# anthropic
# openai
exceptiongroup==1.3.0
# via anyio
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Unexpected Downgrades and New Dependency in langchain-core

The langchain-core minor version bump (0.3.74 to 0.3.75) unexpectedly caused markdown-it-py to downgrade from 4.0.0 to 3.0.0 (a major version change) and click from 8.2.1 to 8.1.8. These downgrades could introduce breaking changes. A new dependency, exceptiongroup==1.3.0, was also added. This suggests stricter constraints from langchain-core or an environment mismatch during requirements regeneration.

Additional Locations (1)

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants