chore(deps): bump the uv group across 1 directory with 20 updates#2
chore(deps): bump the uv group across 1 directory with 20 updates#2dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: langgraph dependency-version: 1.0.10rc1 dependency-type: direct:production dependency-group: uv - dependency-name: langchain-core dependency-version: 1.2.28 dependency-type: direct:production dependency-group: uv - dependency-name: langchain-openai dependency-version: 1.1.14 dependency-type: direct:production dependency-group: uv - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: direct:production dependency-group: uv - dependency-name: aiohttp dependency-version: 3.13.4 dependency-type: direct:production dependency-group: uv - dependency-name: python-multipart dependency-version: 0.0.26 dependency-type: direct:production dependency-group: uv - dependency-name: nltk dependency-version: 3.9.4 dependency-type: direct:production dependency-group: uv - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:development dependency-group: uv - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development dependency-group: uv - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:development dependency-group: uv - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: indirect dependency-group: uv - dependency-name: filelock dependency-version: 3.20.3 dependency-type: indirect dependency-group: uv - dependency-name: langgraph-checkpoint dependency-version: 4.0.0 dependency-type: indirect dependency-group: uv - dependency-name: langsmith dependency-version: 0.7.38 dependency-type: indirect dependency-group: uv - dependency-name: orjson dependency-version: 3.11.8 dependency-type: indirect dependency-group: uv - dependency-name: protobuf dependency-version: 6.33.6 dependency-type: indirect dependency-group: uv - dependency-name: pyasn1 dependency-version: 0.6.3 dependency-type: indirect dependency-group: uv - dependency-name: ujson dependency-version: 5.12.0 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect dependency-group: uv - dependency-name: virtualenv dependency-version: 20.36.1 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
CodeCapy Review ₍ᐢ•(ܫ)•ᐢ₎Codebase SummaryEverOS is a comprehensive repository that consolidates long-term memory methods, benchmarks, and use cases to build self-evolving agents. It includes multiple components such as EverCore and HyperMem for memory management along with demo applications for interactive user experiences, including memory graph visualization and themed UI demos like 'Game of Thrones Memories'. PR ChangesThis pull request updates various dependency versions in methods/evermemos/pyproject.toml. Notable bumps include upgrading langgraph, langchain-core, langchain-openai, python-dotenv, aiohttp, python-multipart, nltk, requests, and several development dependencies. These updates aim to improve compatibility, security, and performance while ensuring that the user-facing functionality remains robust. Setup Instructions
Generated Test Cases1: Homepage Load and Navigation Test ❗️❗️❗️Description: Ensures that the main landing page of EverOS loads correctly, displays critical UI elements such as the banner and navigation links, and properly routes users to different sections including documentation and demos. Prerequisites:
Steps:
Expected Result: The homepage loads without errors, displaying the banner and navigation elements correctly. Clicking on any navigation links routes the user to the expected pages with consistent layout and content. 2: Game of Thrones Memories Interactive UI Test ❗️❗️Description: Validates the interactive experience of the 'Game of Thrones Memories' use case, ensuring the demo is accessible and the Q&A interface functions as expected following dependency updates. Prerequisites:
Steps:
Expected Result: The demo page should load properly with all interactive components visible. Upon submitting the query, the application should process the input and display a contextual response based on the input theme (Game of Thrones), confirming that front-end interactions remain unaffected by the dependency updates. 3: Memory Graph Visualization UI Test ❗️❗️Description: Checks the memory graph visualization front-end demo to ensure that stored memory entities and their interrelations are rendered correctly after the dependency updates. Prerequisites:
Steps:
Expected Result: The memory graph visualization demo should render an interactive graph with nodes and edges clearly visible. User interactions (like hover or click) should reveal further details with no rendering issues, indicating that the front-end integration remains stable post dependency bump. Raw Changes AnalyzedFile: methods/evermemos/pyproject.toml
Changes:
@@ -6,14 +6,14 @@ license = {text = "Apache-2.0"}
requires-python = ">=3.12,<3.13"
dependencies = [
# Core Dependencies
- "langgraph>=0.2.6",
+ "langgraph>=1.0.10rc1",
"langgraph-api",
"langgraph-cli",
"langgraph-sdk>=0.1.57",
"langgraph-checkpoint-postgres>=2.0.21",
"langchain>=0.3.26",
- "langchain-core>=0.1.0",
- "langchain-openai>=0.3.28",
+ "langchain-core>=1.2.28",
+ "langchain-openai>=1.1.14",
"langchain-anthropic>=0.3.17",
"langchain-google-genai>=2.1.8",
"google-genai>=1.21.0",
@@ -26,15 +26,15 @@ dependencies = [
# Data Validation & Configuration
"pydantic[email]>=2.7.1",
"pydantic-settings>=2.0.0",
- "python-dotenv>=1.0.1",
+ "python-dotenv>=1.2.2",
"pyyaml>=6.0.0",
# Web Framework & API
"fastapi>=0.104.0",
"uvicorn[standard]>=0.24.0",
"greenlet>=3.2.0",
# HTTP Client & File Processing
- "aiohttp>=3.8.0",
- "python-multipart>=0.0.6",
+ "aiohttp>=3.13.4",
+ "python-multipart>=0.0.26",
"aiofiles>=24.1.0",
# Message Queue
"aiokafka>=0.11.0",
@@ -71,7 +71,7 @@ dependencies = [
"html2text>=2025.4.15",
"certifi>=2025.10.5",
"aiolimiter>=1.2.1",
- "nltk>=3.9.2",
+ "nltk>=3.9.4",
"tiktoken>=0.12.0",
"prometheus-client>=0.20.0",
]
@@ -121,10 +121,10 @@ addopts = "-v --tb=short"
[dependency-groups]
# Development dependencies - for local development
dev = [
- "black>=25.1.0",
+ "black>=26.3.1",
"ipdb>=0.13.13",
"isort>=6.0.1",
- "pytest>=8.4.2",
+ "pytest>=9.0.3",
"pytest-asyncio>=1.1.0",
"pytest-cov>=6.0.0",
"nest-asyncio",
@@ -156,7 +156,7 @@ evaluation = [
# Terminal formatting and progress display
"rich>=13.0.0",
# HTTP request library (for online API calls)
- "requests>=2.31.0",
+ "requests>=2.33.0",
]
# Evaluation + all online API clients (full testing environment)
|
|
🚀 Launching Scrapybara desktop... |
|
❌ Something went wrong: |
|
Looks like these dependencies are no longer a dependency, so this is no longer needed. |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.