fix: retain upgraded LLM provider pins

[stranske]

Retains the newer langchain-openai and langchain-anthropic pins already present in the affected consumer rather than downgrading them during template sync. Updates the canonical source and its exact-sync template together.\n\nValidation: scripts/sync_templates.sh, python3.12 scripts/validate_template_completeness.py, and git diff --check.

Summary by CodeRabbit

• Maintenance
  • Updated the LLM workflow components to newer versions.
  • Applied the same updates across the relevant project templates and tooling configurations.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 0dabb4f7-9a6e-4ac4-97e9-943dff2ee65f

📥 Commits

Reviewing files that changed from the base of the PR and between 885905e and c0f3fcf.

📒 Files selected for processing (2)

• templates/consumer-repo/tools/requirements-llm.txt
• tools/requirements-llm.txt

---

📝 Walkthrough

Walkthrough

Updated langchain-openai and langchain-anthropic pins in the main workflow requirements and consumer repository template.

Changes

LLM dependency pins

Layer / File(s)	Summary
Update LangChain provider pins tools/requirements-llm.txt, templates/consumer-repo/tools/requirements-llm.txt	Bumps langchain-openai from 1.3.5 to 1.4.1 and langchain-anthropic from 1.4.8 to 1.5.2 in both requirements files.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• stranske/Workflows#2506: Updates the same LLM dependency pins in both requirements files.
• stranske/Workflows#2545: Previously updated the langchain-anthropic pin in these files.
• stranske/Workflows#2730: Changes the workflow installation path that consumes these requirements.

Suggested labels: dependencies, maintenance, sync

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects preserving upgraded LLM dependency pins across synced requirements files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/retain-llm-provider-pins

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske-keepalive]

Workflow source needed

PR #2838 needs either a linked GitHub issue or one valid non-issue Workflow Source before PR metadata automation can manage it safely.

Please do one of:

• Add <!-- meta:issue:123 --> or a normal Closes #123 / Related to #123 line.
• Check one Workflow Source option in the PR body.
• Add a hidden marker such as <!-- workflow-source:local_request -->, <!-- workflow-source:manual_remote -->, <!-- workflow-source:review_followup -->, <!-- workflow-source:sync_campaign -->, or <!-- workflow-source:dependabot -->.
• Add a workflow source label such as workflow:source-direct-pr, workflow:source-local-request, workflow:source-review-followup, workflow:source-sync, or workflow:no-automation.

Once a valid source is present, this warning will not be reposted.

[agents-workflows-bot]

Automated Status Summary

Head SHA: 772d355
Latest Runs: ⏳ pending — Gate
Required contexts: Gate / gate, Health 45 Agents Guard / guard
Required: core tests (3.12): ⏳ pending, core tests (3.13): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined