Bump the minor-and-patch group with 7 updates by dependabot[bot] · Pull Request #5840 · mozilla/bugbug

dependabot · 2026-03-18T15:10:45Z

Bumps the minor-and-patch group with 7 updates:

Package	From	To
langchain	`1.2.10`	`1.2.12`
langchain-anthropic	`1.3.4`	`1.3.5`
langchain-mistralai	`1.1.1`	`1.1.2`
langgraph	`1.0.8`	`1.1.0`
qdrant-client	`1.15.1`	`1.17.0`
scikit-learn	`1.7.2`	`1.8.0`
responses	`0.21.0`	`0.26.0`

Updates langchain from 1.2.10 to 1.2.12

Release notes

Sourced from langchain's releases.

langchain-core==1.2.12

Changes since langchain-core==1.2.11

release(core): 1.2.12 (#35192) fix(core): fix setting ChatGeneration.text (#35191)

langchain==1.2.12

Changes since langchain==1.2.11

release(langchain_v1): 1.2.12 (#35770) feat: tracing for wrap model + tool call (#35765)

langchain-core==1.2.11

Changes since langchain-core==1.2.10

release(core): 1.2.11 (#35144) fix(openai): sanitize urls when counting tokens in images (#35143) chore(core): clean up docstring mismatch and redundant logic in langchain-core (#35064) fix(core): replace bare except with Exception in tracer (#35138)

langchain==1.2.11

Changes since langchain==1.2.10

release(langchain_v1): 1.2.11 (#35723) fix(langchain): normalize custom detector output to prevent KeyError in hash/mask strategies (#35651) chore: bump the minor-and-patch group across 3 directories with 7 updates (#35605) chore(langchain): switch refs from gemini-3 to gemini-3.1 (#35535) chore: bump the langchain-deps group across 3 directories with 7 updates (#35513) chore: bump langgraph-checkpoint from 3.0.1 to 4.0.0 in /libs/langchain_v1 (#35445) chore: bump the langchain-deps group across 3 directories with 14 updates (#35441) chore: bump google-cloud-aiplatform from 1.127.0 to 1.133.0 in /libs/langchain_v1 (#35397) revert: add ChatAnthropicBedrockWrapper (#35371) fix(langchain): support anthropic-bedrock in init_chat_model (#35366) style: fix some ruff noqa (#35321) fix(langchain): allow Gemini 3 models to use ProviderStrategy with tools (#34464) docs: fix docstring inaccuracies and update outdated LangSmith URLs (#35283) feat(openai): support automatic server-side compaction (#35212) chore: bump the langchain-deps group across 3 directories with 8 updates (#35257) feat(openrouter): add langchain-openrouter provider package (#35211) style: bump ruff version to 0.15 (#35042) chore(deps): bump pillow from 12.0.0 to 12.1.1 in /libs/langchain_v1 (#35174) chore(core): raise more descriptive model error in init_chat_model (#35167) chore(deps): bump langsmith from 0.4.42 to 0.6.3 in /libs/langchain_v1 (#35149) chore(deps): bump cryptography from 46.0.3 to 46.0.5 in /libs/langchain_v1 (#35148)

Commits

2a137bf release(langchain_v1): 1.2.12 (#35770)
25f94ee feat: tracing for wrap model + tool call (#35765)
f9dbd22 fix(openai): typo (#35763)
70cd1bd ci: allow bot bypass (#35762)
3e4c0d5 chore(model-profiles): refresh model profile data (#35754)
7cef35b chore: add reference docs MCP (#35737)
057c484 release(langchain_v1): 1.2.11 (#35723)
cb50fed ci: bypass issue-link gate for trusted contributors (#35720)
292d0bd docs(huggingface): add [full] install guidance and sentence-transformers>=5.2...
3e459be ci: use app token for external PR label to trigger downstream workflows (#35710)
Additional commits viewable in compare view

Updates langchain-anthropic from 1.3.4 to 1.3.5

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.3.5

Changes since langchain-anthropic==1.3.4

release(anthropic): 1.3.5 (#35873) fix(anthropic): Ignore general usage cache_creation fields if more specific fields are set (#35845) perf(.github): set a timeout on get min versions HTTP calls (#35851) feat(model-profiles): new fields + Makefile target (#35788) fix(anthropic): support eager_input_streaming (#35779) fix(anthropic): move _make_message_chunk_from_anthropic_event to instance method (#35670) chore: bump langgraph from 1.0.8 to 1.0.10rc1 in /libs/partners/anthropic (#35614) fix(anthropic): update integration test (#35577) fix(anthropic): drop forced tool_choice when thinking is enabled (#35544) chore: bump langgraph-checkpoint from 3.0.1 to 4.0.0 in /libs/partners/anthropic (#35450)

Commits

50febb7 release(anthropic): 1.3.5 (#35873)
313d353 chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/chroma (#35800)
1572ec1 chore: bump orjson from 3.11.5 to 3.11.6 in /libs/partners/qdrant (#35801)
721b7e1 chore: bump black from 25.11.0 to 26.3.1 in /libs/langchain_v1 (#35802)
7ef77c7 chore: bump orjson from 3.11.5 to 3.11.6 in /libs/standard-tests (#35804)
e2cd41e chore: bump orjson from 3.11.5 to 3.11.6 in /libs/langchain (#35806)
44e8e83 chore: bump orjson from 3.11.5 to 3.11.6 in /libs/langchain_v1 (#35807)
6d6d719 fix(anthropic): Ignore general usage cache_creation fields if more specific f...
b1f2d9c fix(langchain-classic): format (#35854)
d6dbcf6 perf(.github): set a timeout on get min versions HTTP calls (#35851)
Additional commits viewable in compare view

Updates langchain-mistralai from 1.1.1 to 1.1.2

Release notes

Sourced from langchain-mistralai's releases.

langchain-mistralai==1.1.2

Changes since langchain-mistralai==1.1.1

release(mistralai): 1.1.2 (#35835) feat(model-profiles): new fields + Makefile target (#35788) fix(model-profiles): sort generated profiles by model ID for stable diffs (#35344) chore: bump model profiles (#35294) fix(mistralai): update test (#35270) fix(mistralai): update exception retry logic in embeddings (#35238) fix(mistralai): fix NameError in RunnableWithFallbacks.__getattr__ when resolving type hints (#35172) chore(deps): bump langsmith from 0.4.31 to 0.6.3 in /libs/partners/mistralai (#35164) feat(model-profiles): add text_inputs and text_outputs (#35084) chore: add make type target (#35015) revert: "chore: add typing target in Makefile" (#35013) chore: add typing target in Makefile (#35012) chore: enrich pyproject.toml files (#34980) chore(deps): bump the uv group across 20 directories with 3 updates (#34941) chore: upgrade urllib3 to 2.6.3 (#34940) docs: add missing module-level docstrings to partner integrations (#34838) chore(deps): bump the uv group across 8 directories with 6 updates (#34773) chore: update twitter URLs (#34736) chore: ban relative imports on all packages (#34691) fix: typo: saved the world 'wether' -> 'whether' (#34524)

Commits

a9707b3 release(mistralai): 1.1.2 (#35835)
cf07003 release(langchain): 1.0.3 (#35834)
41cca20 release(core): 1.2.19 (#35832)
307cdca chore(core): move BaseCrossEncoder to langchain-core (#35809)
cee6430 refactor(xai): remove redundant lc_attributes override (#35791)
6b9b4c6 feat(xai): support base_url alias and XAI_API_BASE env var (#35790)
b676167 fix(deepseek): accept base_url as alias for api_base (#35789)
5d9568b feat(model-profiles): new fields + Makefile target (#35788)
1891d41 chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (#35774)
1d954bc chore: bump tornado from 6.5.2 to 6.5.5 in /libs/langchain (#35773)
Additional commits viewable in compare view

Updates langgraph from 1.0.8 to 1.1.0

Release notes

Sourced from langgraph's releases.

langgraph==1.1.0

Changes since 1.0.10

release(langgraph): 1.1 (#7102)

fix: replay behavior for parent + subgraphs! (#7038)

feat: type safe stream/invoke w/ proper output type coercion (#6961)

Type-Safe Streaming & Invoke

LangGraph 1.1 introduces version="v2" — a new opt-in streaming format that brings full type safety to stream(), astream(), invoke(), and ainvoke().

What's changing

v1 (default, unchanged): stream() yields bare tuples like (stream_mode, data) or just data. invoke() returns a plain dict. Interrupts are mixed into the output dict under "__interrupt__".

v2 (opt-in): stream() yields strongly-typed StreamPart dicts with type, ns, data, and (for values) interrupts fields. invoke() returns a GraphOutput object with .value and .interrupts attributes. When your state schema is a Pydantic model or dataclass, outputs are automatically coerced to the correct type.

invoke() / ainvoke() with version="v2"
from langgraph.types import GraphOutput
result = graph.invoke({"input": "hello"}, version="v2")
result is a GraphOutput, not a dict
assert isinstance(result, GraphOutput)
result.value       # your output — dict, Pydantic model, or dataclass
result.interrupts  # tuple[Interrupt, ...], empty if none occurred
With a non-"values" stream mode, invoke(..., stream_mode="updates", version="v2") returns list[StreamPart] instead of list[tuple].

stream() / astream() with version="v2"
for part in graph.stream({"input": "hello"}, version="v2"):
    if part["type"] == "values":
        part["data"]        # OutputT — full state
        part["interrupts"]  # tuple[Interrupt, ...]
    elif part["type"] == "updates":
        part["data"]        # dict[str, Any]
    elif part["type"] == "messages":
        part["data"]        # tuple[BaseMessage, dict]
    elif part["type"] == "custom":
        part["data"]        # Any
    elif part["type"] == "tasks":
        part["data"]        # TaskPayload | TaskResultPayload
    elif part["type"] == "debug":
        part["data"]        # DebugPayload

... (truncated)

Commits

3330ccd release(langgraph): 1.1 (#7102)
4ef6169 feat(cli): add distributed runtime support to langgraph cli (#7096)
27da1d3 chore(deps): bump the all-dependencies group across 1 directory with 3 update...
9c2deac fix: replay behavior for parent + subgraphs! (#7038)
2638ff7 release(cli): 0.4.15 (#7095)
6511797 feat(cli): add langgraph deploy (#7004)
6a19a5a chore: Add cache (#7092)
f4a18e0 chore(deps): bump the all-dependencies group in /libs/langgraph with 3 update...
d5b6124 chore(deps): bump the all-dependencies group across 1 directory with 2 update...
f7d94d2 chore(deps): bump the all-dependencies group in /libs/cli with 2 updates (#7075)
Additional commits viewable in compare view

Updates qdrant-client from 1.15.1 to 1.17.0

Release notes

Sourced from qdrant-client's releases.

v1.17.0

Change Log

Features 🚢

#1154 - introduce relevance feedback, add enable_hnsw option to payload indexes, add timeouts to upsert methods, weighted RRF, and more by @joein @coszio @generall

Fixes ⚙️

#1138 - fix score threshold for fusion queries by @cbcoutinho

Thanks to everyone who contributed to the current release! @cbcoutinho @generall @coszio @joein

v1.16.2

Change Log

Deprecations ⏳

#1110 - drop python3.9 support by @joein

Fixes ⚙️

Bump matplotlib from 3.1.1 to 3.1.2 #1132- adjust numpy versioning by @joein

#1133 - propagate lookup_from correctly in query_points_groups by @joein

#1134 - fix qdrant-client import in read-only systems by @holyMolyTolli

Thanks to everyone who contributed to the current release! @holyMolyTolli @joein

v1.16.1

Change Log

Features 🪐

#1116 - implement grpc version of cluster_collection_update by @joein

#1123 - expose the remaining cluster methods: remove_peer, collection_cluster_info, recover_current_peer, cluster_status by @joein

Fixes 😮

#1125 - rename common.proto to qdrant_common.proto to avoid conflicts with other libraries by @joein

#1124 - fix local mode with persistence backward compatibility by @joein

#1121 - add .pyi files for grpc files to help static code analyzers by @joein

v1.16.0

Change Log

Features 🪐

#1060 - builtin BM25 support (fastembed is not longer required to generate bm25 embeddings) by @joein

#1071 - grpc connection pooling by @JojiiOfficial

#1088 - queryless scores is now equal to 1 by @joein

#1077 - pass grpc credentials to grpc channels by @ivandasch @joein

... (truncated)

Commits

e7101dc bump version to v1.17.0
e50eb17 Update models 1.17 (#1154)
5234450 fix: apply score_threshold filtering after fusion queries in local mode (#1138)
49fa101 bump version to 1.16.2
5bd87e4 Fix/lazy load local mode (#1134)
1b142af fix: propagate lookup from correctly in query_points_groups (#1133)
9e61a69 Drop python3.9 (#1110)
2c45a53 new: adjust numpy versioning (#1132)
67836fc tests: speed up tests (#1130)
750d735 bump version to 1.16.1
Additional commits viewable in compare view

Updates scikit-learn from 1.7.2 to 1.8.0

Release notes

Sourced from scikit-learn's releases.

Release 1.8.0

We're happy to announce the 1.8.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_8_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.8.html

This version supports Python versions 3.11 to 3.14 and features support of free-threaded CPython.

You can upgrade with pip as usual:
pip install -U scikit-learn
The conda-forge builds can be installed using:
conda install -c conda-forge scikit-learn

Commits

646da0f [cd build]
4f4f283 Generate changelog
967dcde Set version
cb1424b DOC Release highlights for 1.8 (#32809)
5645b27 🔒 🤖 CI Update lock files for main CI build(s) 🔒 🤖 (#32859)
6b9fb11 🔒 🤖 CI Update lock files for free-threaded CI build(s) 🔒 :rob...
a0f6d88 🔒 🤖 CI Update lock files for array-api CI build(s) 🔒 🤖 ...
c1de8fc FIX Make get_namespace handle pandas dataframe input (#32838)
764249a Fix _safe_indexing with non integer arrays on array API inputs (#32840)
eca5e0a FIX Add new default max_samples=None in Bagging estimators (#32825)
Additional commits viewable in compare view

Updates responses from 0.21.0 to 0.26.0

Release notes

Sourced from responses's releases.

0.26.0

When using assert_all_requests_are_fired=True, assertions about unfired requests are now raised even when an exception occurs in the context manager or decorated function. Previously, these assertions were suppressed when exceptions occurred. This new behavior provides valuable debugging context about which mocked requests were or weren't called.

Consider the Retry-After header when handling retries

0.25.8

Fix bug where the content type is always recorded as either text/plain or application/json. See #770

Allow asserts on add_callback() matches. See #727

0.25.7

Added support for python 3.13

0.25.6

No release notes provided.

0.25.5

No release notes provided.

0.25.3

Fixed recorder not saving and loading response headers with yaml files. See #715

0.25.2

Mulligan on 0.25.1 to run release pipeline correctly.

Added matchers.body_matcher for matching string request bodies. See #717

Responses 0.25.1

What's Changed

Use pytest.mark.asyncio by @markstory in getsentry/responses#707

fix mocked HEAD response when content-length header is present by @ddarricau in getsentry/responses#712

fix(matchers): Don't sort failed matches when printing error message by @mgaligniana in getsentry/responses#711

New Contributors

@ddarricau made their first contribution in getsentry/responses#712

@mgaligniana made their first contribution in getsentry/responses#711

Full Changelog: getsentry/responses@0.25.0...0.25.1

0.25.0

Added support for Python 3.12

Fixed matchers.header_matcher not failing when a matched header is missing from the request. See #702

0.24.1

Reverted overloads removal

Added typing to Call attributes.

Fix socket issues (see #693)

0.24.0

... (truncated)

Changelog

Sourced from responses's changelog.

0.26.0

When using assert_all_requests_are_fired=True, assertions about unfired requests are now raised even when an exception occurs in the context manager or decorated function. Previously, these assertions were suppressed when exceptions occurred. This new behavior provides valuable debugging context about which mocked requests were or weren't called.

Consider the Retry-After header when handling retries

0.25.8

Fix bug where the content type is always recorded as either text/plain or application/json. See #770

Allow asserts on add_callback() matches. See #727

0.25.7

Added support for python 3.13

0.25.6

Added py.typed to package_data

0.25.5

Fix readme issue that prevented 0.25.4 from being published to pypi.

0.25.4

Responses can now match requests that use data with file-like objects. Files will be read as bytes and stored in the request mock. See #736

RequestsMock.matchers was added. This property is an alias to responses.matchers. See #739

Removed tests from packaged wheels. See #746

Improved recorder API to ease use in REPL environments. See #745

0.25.3

Fixed recorder not saving and loading response headers with yaml files. See #715

0.25.2

Mulligan on 0.25.1 to run release pipeline correctly.

... (truncated)

Commits

94913d0 release: 0.26.0
051b79e Make assert_all_requests_are_fired always assert on exception (#782)
0905cb8 Fix query_param_matcher not matching empty query parameter values (#787)
e0c6faa ci(release): Switch from action-prepare-release to Craft (#785)
1be3a73 fix: Consider the Retry-After header when handling retries (#784)
c6730fb Merge branch 'release/0.25.8'
cdd104d release: 0.25.8
f940dc7 Allow asserts on add_callback() matches (#774)
9485a01 Fix mypy errors in master (#776)
1532e9e 🔧 chore: update return type of RequestsMock.exit (#769)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [langchain](https://github.com/langchain-ai/langchain) | `1.2.10` | `1.2.12` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.3.4` | `1.3.5` | | [langchain-mistralai](https://github.com/langchain-ai/langchain) | `1.1.1` | `1.1.2` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.0.8` | `1.1.0` | | [qdrant-client](https://github.com/qdrant/qdrant-client) | `1.15.1` | `1.17.0` | | [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.7.2` | `1.8.0` | | [responses](https://github.com/getsentry/responses) | `0.21.0` | `0.26.0` | Updates `langchain` from 1.2.10 to 1.2.12 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.2.10...langchain==1.2.12) Updates `langchain-anthropic` from 1.3.4 to 1.3.5 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-anthropic==1.3.4...langchain-anthropic==1.3.5) Updates `langchain-mistralai` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-mistralai==1.1.1...langchain-mistralai==1.1.2) Updates `langgraph` from 1.0.8 to 1.1.0 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.0.8...1.1.0) Updates `qdrant-client` from 1.15.1 to 1.17.0 - [Release notes](https://github.com/qdrant/qdrant-client/releases) - [Commits](qdrant/qdrant-client@v1.15.1...v1.17.0) Updates `scikit-learn` from 1.7.2 to 1.8.0 - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](scikit-learn/scikit-learn@1.7.2...1.8.0) Updates `responses` from 0.21.0 to 0.26.0 - [Release notes](https://github.com/getsentry/responses/releases) - [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES) - [Commits](getsentry/responses@0.21.0...0.26.0) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-anthropic dependency-version: 1.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langchain-mistralai dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: langgraph dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: qdrant-client dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: scikit-learn dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: responses dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-and-patch group with 7 updates#5840

Bump the minor-and-patch group with 7 updates#5840
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/minor-and-patch-dc4d4818b8

dependabot bot commented on behalf of github Mar 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 18, 2026

langchain-core==1.2.12

langchain==1.2.12

langchain-core==1.2.11

langchain==1.2.11

langchain-anthropic==1.3.5

langchain-mistralai==1.1.2

langgraph==1.1.0

Type-Safe Streaming & Invoke

What's changing

invoke() / ainvoke() with version="v2"

stream() / astream() with version="v2"

v1.17.0

Change Log

Features 🚢

Fixes ⚙️

v1.16.2

Change Log

Deprecations ⏳

Fixes ⚙️

v1.16.1

Change Log

Features 🪐

Fixes 😮

v1.16.0

Change Log

Features 🪐

Release 1.8.0

0.26.0

0.25.8

0.25.7

0.25.6

0.25.5

0.25.3

0.25.2

Responses 0.25.1

What's Changed

New Contributors

0.25.0

0.24.1

0.24.0

0.26.0

0.25.8

0.25.7

0.25.6

0.25.5

0.25.4

0.25.3

0.25.2

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`invoke()` / `ainvoke()` with `version="v2"`

`stream()` / `astream()` with `version="v2"`