Skip to content

deps(ai-backend)(deps): bump the ai-backend-minor-patch group across 1 directory with 17 updates - #654

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/ai-backend/dev/ai-backend-minor-patch-82c9053713
Open

deps(ai-backend)(deps): bump the ai-backend-minor-patch group across 1 directory with 17 updates#654
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/ai-backend/dev/ai-backend-minor-patch-82c9053713

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the ai-backend-minor-patch group with 17 updates in the /services/ai-backend directory:

Package From To
deepagents 0.7.4 0.7.13
ddgs 9.14.4 9.16.0
langchain 1.3.14 1.4.0
langchain-openai 1.4.1 1.6.0
langchain-anthropic 1.5.4 1.7.1
langchain-google-genai 4.3.2 4.4.0
litellm 1.95.0 1.99.0
langgraph 1.2.10 1.2.11
pydantic 2.13.4 2.13.5
pydantic-settings 2.14.2 2.15.0
python-dotenv 1.2.2 1.2.3
uvicorn 0.52.1 0.52.4
gunicorn 26.0.0 26.2.0
wheel 0.47.0 0.48.0
cryptography 50.0.0 50.0.1
starlette 1.4.1 1.6.0
wcmatch 11.0 11.0.1

Updates deepagents from 0.7.4 to 0.7.13

Release notes

Sourced from deepagents's releases.

deepagents==0.7.13

Bug Fixes

  • Renamed the SDK subagent mode from handoff to isolated (#6030).

Internal maintainers: @​ccurme

Released by: @​ccurme

This commit history includes changes to this package. Commits are listed newest first.

deepagents==0.7.12

Features

  • Added subagent conversation forking in the SDK (#5714).

Bug Fixes

  • Fixed glob sorting to tolerate missing modified_at values in the SDK (#4376).

Thanks to our community contributors: @​ujjwalredd

Special thanks to everyone who reported the issues addressed in this release: @​NinaadRao (#4668), @​ujjwalredd (#4377)

Internal maintainers: @​thushanth-bengre-langchain

Released by: @​hntrl

This commit history includes changes to this package. Commits are listed newest first.

... (truncated)

Commits
  • 1aae374 release(deepagents): 0.7.13 (#6031)
  • 3db758c chore(deps): raise dependency minimums for all (#6012)
  • 15454a8 fix(sdk): rename handoff subagent mode to isolated (#6030)
  • 0b83235 chore(deps): bump tornado from 6.5.7 to 6.5.8 in /examples/deep_research (#6027)
  • 5c7762c chore(deps): bump nltk from 3.10.0 to 3.10.3 in /libs/evals (#6026)
  • 03436b3 fix(talon): preserve WhatsApp quoted message context (#6025)
  • f93752f feat(talon): interrupt active turns for new messages (#6023)
  • d44a85f chore(deps): bump CodSpeedHQ/action from 5.0.3 to 5.2.1 in the minor-and-patc...
  • a197807 release(deepagents): 0.7.12 (#6006)
  • e0d0afa feat(talon): keep typing indicator alive during long agent turns (#5993)
  • Additional commits viewable in compare view

Updates ddgs from 9.14.4 to 9.16.0

Release notes

Sourced from ddgs's releases.

v9.16.0

Full Changelog: deedy5/ddgs@v9.15.0...v9.16.0

v9.15.0

What's Changed

Full Changelog: deedy5/ddgs@v9.14.4...v9.15.0

Commits
  • 70a5635 chore(release): bump version to 9.16.0
  • 9f517bc fix(engines): update DuckDuckgo
  • 3ea6cbc fix(engines): update and enable Google
  • 173ccbd chore(release): bump version to 9.15.0
  • a770102 feat(mcp): migrate to mcp 2.0
  • f4ba66c fix(engines): disable Google, Yandex
  • a12929a refactor(ddgs): improve extract performance
  • a97a4fc feat: remove dht
  • See full diff in compare view

Updates langchain from 1.3.14 to 1.4.0

Release notes

Sourced from langchain's releases.

langchain-perplexity==1.4.0

Changes since langchain-perplexity==1.3.2

release(perplexity): 1.4.0 (#37993) feat(perplexity): bind_tools and Responses-API tool round-trip (#37934) hotfix(openai): min core dep (#37990)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

langchain==1.4.0

Changes since langchain==1.3.18

docs(langchain): runnable langchain.mcp examples (#39976) feat(langchain): langchain.mcp namespace, MCPAdapter (#39939) perf(anthropic,langchain): omit middleware trace inputs (#40098) fix(langchain): include model destination in agent tool routing (#38355) chore(langchain): bump vcrpy test dependency minimum to >=8.2.0 (#39942)

langchain==1.4.0a4

Initial release

release(langchain): 1.4.0a4 test(langchain): cover mixed-era ClientGroup and group elicitation Update libs/langchain_v1/langchain/mcp/adapter.py fix(langchain): drive MCP elicitation via member session for fastmcp 4.0.1 fix(sdk): use latest fastmcp and rm reentrant impl cr cr refactor(langchain): inline MCP client arming into __init__ refactor(langchain): stamp an arm marker instead of introspecting the handler closure fix(langchain): gate MCP interrupt routing on the negotiated protocol era refactor(langchain): drop MCP elicitation flag, derive interrupt routing from the client fix(sdk): add _ReentrantClientGroup fix(langchain): narrow MCPAdapter.client union in mcp tests for mypy chore(langchain): format mcp/adapter.py release(langchain): 1.4.0a3 feat(langchain): group MCP tool metadata under an mcp namespace refactor(langchain): stop exporting MCPAdapterTarget from langchain.mcp refactor(langchain): rename convert_mcp_tool_to_langchain_tool to as_langchain_tool refactor(langchain): rename MCPAdapter.get_tools to list_tools feat(langchain): expose cache_mode on MCPAdapter.get_tools chore(langchain): require fastmcp 4.0.0 feat(langchain): accept a ClientGroup as an MCPAdapter target feat(langchain): mark the langchain.mcp namespace as beta

... (truncated)

Commits
  • 79cab2d release(anthropic): 1.7.1 (#40181)
  • 1e6a4f0 chore(model-profiles): refresh model profile data (#40171)
  • 8330dfe docs(langchain): runnable langchain.mcp examples (#39976)
  • 280442b feat(langchain): langchain.mcp namespace, MCPAdapter (#39939)
  • f5ee2b6 chore(chroma): bump Pygments security constraint (#40162)
  • 234255c chore(model-profiles): refresh model profile data (#40009)
  • 79e0e4a chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/langchain (#40149)
  • e90201b chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150)
  • 4240248 chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/text-splitters (#40148)
  • 530290a chore(deps): bump uv to 0.12.8 (#40092)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.4.1 to 1.6.0

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617) release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326) release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050) release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009) release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797) release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762)

... (truncated)

Commits
  • 3478c28 release(anthropic): 1.6.0 (#39763)
  • 420dfc9 release(openai): 1.6.0 (#39762)
  • 85602c3 release(core): 1.6.0 (#39760)
  • 5c3538e fix(core): resolve postponed annotations in `StructuredTool._injected_args_ke...
  • 9984a87 feat(core): add standard model exception types (#39538)
  • b3e9eef chore(model-profiles): refresh model profile data (#39751)
  • ded2a1f fix(core): allow deserializing RunnablePick (#39753)
  • 04ae744 fix(core): make convert_to_openai_function handle callables and non-dict ma...
  • 37f2662 feat(langchain): support custom token_counter in ContextEditingMiddleware (#3...
  • 2019bf5 fix(openai): raise clear error on unexpected response type in `_create_chat_r...
  • Additional commits viewable in compare view

Updates langchain-anthropic from 1.5.4 to 1.7.1

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.7.1

Changes since langchain-anthropic==1.7.0

release(anthropic): 1.7.1 (#40181) perf(anthropic,langchain): omit middleware trace inputs (#40098) feat(anthropic): add Claude Fable 5.1 support (#40106)

langchain-anthropic==1.7.0

Changes since langchain-anthropic==1.6.1

release(anthropic): 1.7.0 (#39963) feat(anthropic): support top-level param for skills via container; updates thinking display mode (#39962) feat(anthropic): support 1.0 sdk (#39938) fix(anthropic): auto-append advisor-tool-2026-03-01 beta header for advisor_20260301 tool (#39917) feat(anthropic): surface gateway response metadata (#39809)

langchain-anthropic==1.6.1

Changes since langchain-anthropic==1.6.0

release(anthropic): 1.6.1 (#39804) fix(anthropic): filter invalid tool calls from v1 content (#39803)

langchain-anthropic==1.6.0

Changes since langchain-anthropic==1.5.6

release(anthropic): 1.6.0 (#39763) feat(core): add standard model exception types (#39538) fix(anthropic): exclude sibling directories from grep search scope (#39681) chore(infra): support langsmith gateway in CI (#39651)

langchain-anthropic==1.5.6

Changes since langchain-anthropic==1.5.5

release(anthropic): 1.5.6 (#39622) fix(anthropic): normalize tool_search_tool_result blocks (#39621) fix(anthropic): correct model profile data for Fable 5, Sonnet 5, Opus 4.1 (#39604)

langchain-anthropic==1.5.5

Changes since langchain-anthropic==1.5.4

release(anthropic): 1.5.5 (#39597) fix(anthropic): report reasoning tokens in usage metadata (#39590) fix(anthropic): fix KeyError on rename in Claude file-tool middleware (#39293) chore(model-profiles): refresh model profile data (#39299) fix(anthropic): clearer error when no credentials are configured (#39285)

Commits
  • 79cab2d release(anthropic): 1.7.1 (#40181)
  • 1e6a4f0 chore(model-profiles): refresh model profile data (#40171)
  • 8330dfe docs(langchain): runnable langchain.mcp examples (#39976)
  • 280442b feat(langchain): langchain.mcp namespace, MCPAdapter (#39939)
  • f5ee2b6 chore(chroma): bump Pygments security constraint (#40162)
  • 234255c chore(model-profiles): refresh model profile data (#40009)
  • 79e0e4a chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/langchain (#40149)
  • e90201b chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150)
  • 4240248 chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/text-splitters (#40148)
  • 530290a chore(deps): bump uv to 0.12.8 (#40092)
  • Additional commits viewable in compare view

Updates langchain-google-genai from 4.3.2 to 4.4.0

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.4.0

Changes since libs/genai/v4.3.7

release(genai): 4.4.0 (#1989) feat(genai): support agentic video understanding (#1988)

langchain-google-genai==4.3.7

Changes since libs/genai/v4.3.6

release(genai): 4.3.7 (#1977) fix(genai): apply distinct indexes to repeated block types (#1974) chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /libs/genai (#1917) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969) fix(genai): remove __del__ that closes a potentially shared client (#1963) fix(genai): send skip_thought_signature_validator as a literal string (#1972) test(genai): failing test for DUMMY_THOUGHT_SIGNATURE rejection (#1971) fix(genai): drop foreign-provider reasoning blocks (#1970)

langchain-google-genai==4.3.6

Changes since libs/genai/v4.3.5

release(genai): 4.3.6 (#1968) fix(genai): preserve text and reasoning content for AIMessages with tool calls in _parse_chat_history (#1967) chore(model-profiles): refresh model profile data (#1956)

langchain-google-genai==4.3.5

Changes since libs/genai/v4.3.4

release(genai): 4.3.5 (#1955) feat(genai): support standard chat model exception types (#1952)

langchain-google-genai==4.3.4

Changes since libs/genai/v4.3.3

release(genai): 4.3.4 (#1946) chore(model-profiles): refresh model profile data (#1906) chore(genai): update tests for LangSmith gateway (#1944)

langchain-google-genai==4.3.3

Changes since libs/genai/v4.3.2

release(genai): 4.3.3 (#1936) fix: normalize empty AI content for Vertex (#1935) chore: bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/genai (#1918) chore: bump cryptography from 48.0.1 to 50.0.0 in /libs/genai (#1925)

Commits
  • d38d42f release(genai): 4.4.0 (#1989)
  • e52ace7 feat(genai): support agentic video understanding (#1988)
  • 3d9e491 release(genai): 4.3.7 (#1977)
  • df0901b fix(genai): apply distinct indexes to repeated block types (#1974)
  • 9bd41b7 chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /...
  • fcbb0d7 chore: bump the major group in /libs/community with 3 updates (#1920)
  • 71a17cf chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969)
  • a6206c3 fix(vertexai): bump pyarrow dependency (#1962)
  • d530f2f fix(genai): remove __del__ that closes a potentially shared client (#1963)
  • bd39818 fix(genai): send skip_thought_signature_validator as a literal string (#1972)
  • Additional commits viewable in compare view

Updates litellm from 1.95.0 to 1.99.0

Release notes

Sourced from litellm's releases.

v1.99.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.99.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits
  • fa647f7 Merge pull request #39048 from BerriAI/litellm_/docker-build-failure-9f6247
  • 5892e30 fix(docker): pin apk python to 3.13 in migrations image
  • 91f1a57 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13
  • d0c8667 Merge pull request #38862 from BerriAI/litellm_/litellm-e2e-rc-1-99-0-11cfd8
  • da1d292 test(e2e): measure the select popup after it settles instead of mid-flight
  • a2aecfe fix(e2e): only the negative fallback assertion needs every replica to agree
  • ab1da05 test(e2e): de-flake the cost-header cache read and the router fallback control
  • 1411852 Merge pull request #38855 from BerriAI/litellm_/backport-38251-rc-1-99-0
  • f0ee067 fix(anthropic): translate tool_result document blocks in the /v1/messages bridge
  • 4b281e7 Merge pull request #38854 from BerriAI/litellm_backport_model_test_dialog_str...
  • Additional commits viewable in compare view

Updates langgraph from 1.2.10 to 1.2.11

Release notes

Sourced from langgraph's releases.

langgraph==1.2.11

Changes since 1.2.10

  • release(langgraph): 1.2.11 (#8595)
  • feat(langgraph): expose trace_policy on add_node (#8523)
  • chore(deps): bump the minor-and-patch group across 1 directory with 7 updates (#8533)
  • chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
  • release(checkpoint-postgres): 3.1.2 (#8565)
  • release(checkpoint): 4.2.0 (#8563)
  • fix(checkpoint): collect writes at plain-value seed in delta channel history (#8526)
  • chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
  • chore: enable RUF100 and clear unused noqa directives (#8546)
  • chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /libs/langgraph (#8502)
  • chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /libs/langgraph (#8528)
  • release(checkpoint-sqlite): 3.1.1 (#8481)
  • release(checkpoint-postgres): 3.1.1 (#8480)
Commits
  • 644815f release(langgraph): 1.2.11 (#8595)
  • 7d6b579 feat(langgraph): expose trace_policy on add_node (#8523)
  • d56666f chore(deps): bump the minor-and-patch group across 1 directory with 7 updates...
  • 6a2822d chore(deps): bump the minor-and-patch group across 1 directory with 5 updates...
  • fde3068 release(checkpoint-postgres): 3.1.2 (#8565)
  • f55e772 release(checkpoint): 4.2.0 (#8563)
  • a90ab44 fix(checkpoint): collect writes at plain-value seed in delta channel history ...
  • ea5f9cc chore: enforce PLC0415 in tests for the remaining packages (#8547)
  • 36a505a test(checkpoint-postgres,checkpoint-sqlite): run the conformance suite (#8537)
  • d569e18 fix(checkpoint-postgres): find plain-value seeds when walking delta history (...
  • Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

@dependabot
deps(ai-backend)(deps): bump the ai-backend-minor-patch group across …
157527f 
…1 directory with 17 updates

Bumps the ai-backend-minor-patch group with 17 updates in the /services/ai-backend directory:

| Package | From | To |
| --- | --- | --- |
| [deepagents](https://github.com/langchain-ai/deepagents) | `0.7.4` | `0.7.13` |
| [ddgs](https://github.com/deedy5/ddgs) | `9.14.4` | `9.16.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.3.14` | `1.4.0` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.4.1` | `1.6.0` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.5.4` | `1.7.1` |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google) | `4.3.2` | `4.4.0` |
| [litellm](https://github.com/BerriAI/litellm) | `1.95.0` | `1.99.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.10` | `1.2.11` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.52.4` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [starlette](https://github.com/Kludex/starlette) | `1.4.1` | `1.6.0` |
| [wcmatch](https://github.com/facelessuser/wcmatch) | `11.0` | `11.0.1` |



Updates `deepagents` from 0.7.4 to 0.7.13
- [Release notes](https://github.com/langchain-ai/deepagents/releases)
- [Commits](langchain-ai/deepagents@deepagents==0.7.4...deepagents==0.7.13)

Updates `ddgs` from 9.14.4 to 9.16.0
- [Release notes](https://github.com/deedy5/ddgs/releases)
- [Commits](deedy5/ddgs@v9.14.4...v9.16.0)

Updates `langchain` from 1.3.14 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.3.14...langchain==1.4.0)

Updates `langchain-openai` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.4.1...langchain-openai==1.6.0)

Updates `langchain-anthropic` from 1.5.4 to 1.7.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.5.4...langchain-anthropic==1.7.1)

Updates `langchain-google-genai` from 4.3.2 to 4.4.0
- [Release notes](https://github.com/langchain-ai/langchain-google/releases)
- [Commits](langchain-ai/langchain-google@libs/genai/v4.3.2...libs/genai/v4.4.0)

Updates `litellm` from 1.95.0 to 1.99.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.95.0...v1.99.0)

Updates `langgraph` from 1.2.10 to 1.2.11
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.10...1.2.11)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `uvicorn` from 0.52.1 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.1...0.52.4)

Updates `gunicorn` from 26.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@26.0.0...26.2.0)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `starlette` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.4.1...1.6.0)

Updates `wcmatch` from 11.0 to 11.0.1
- [Release notes](https://github.com/facelessuser/wcmatch/releases)
- [Commits](facelessuser/wcmatch@11.0...11.0.1)

---
updated-dependencies:
- dependency-name: deepagents
  dependency-version: 0.7.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: ddgs
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-openai
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-anthropic
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langchain-google-genai
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: litellm
  dependency-version: 1.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: langgraph
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-backend-minor-patch
- dependency-name: wcmatch
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ai-backend, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@0x-copilot-dev 0x-copilot-dev Awaiting requested review from 0x-copilot-dev 0x-copilot-dev is a code owner
@parthpahwa1 parthpahwa1 Awaiting requested review from parthpahwa1 parthpahwa1 is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants