Skip to content

chore(deps): bump the pip group across 12 directories with 7 updates #2308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

chore(deps): bump the pip group across 12 directories with 7 updates #2308

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 5, 2025 •
edited
Loading

Bumps the pip group with 1 update in the /gemini/multimodal-live-api/project-livewire/server directory: requests.
Bumps the pip group with 1 update in the /gemini/sample-apps/llamadeploy-on-cloud-run directory: llama-index.
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/conversational-app-multi-playbook/backend directory:

Package From To
requests 2.31.0 2.32.4
langchain-community 0.3.1 0.3.27
langchain-core 0.3.9 0.3.15
urllib3 1.26.16 2.5.0
gunicorn 20.1.0 23.0.0

Bumps the pip group with 2 updates in the /gemini/sample-apps/quickbot/conversational-app-multi-playbook/functions/create-intent directory: langchain-community and langchain-core.
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/conversational-app-single-playbook/backend directory:

Package From To
requests 2.31.0 2.32.4
langchain-community 0.3.1 0.3.27
langchain-core 0.3.9 0.3.15
urllib3 1.26.16 2.5.0
gunicorn 20.1.0 23.0.0

Bumps the pip group with 2 updates in the /gemini/sample-apps/quickbot/conversational-app-single-playbook/functions/create-intent directory: langchain-community and langchain-core.
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/document-search-using-agent-builder/backend directory:

Package From To
requests 2.31.0 2.32.4
langchain-community 0.3.1 0.3.27
langchain-core 0.3.9 0.3.15
urllib3 1.26.16 2.5.0
gunicorn 20.1.0 23.0.0

Bumps the pip group with 4 updates in the /gemini/sample-apps/quickbot/image-background-changer-using-imagen3/backend directory: requests, pillow, urllib3 and gunicorn.
Bumps the pip group with 4 updates in the /gemini/sample-apps/quickbot/linkedin-profile-image-generation-using-imagen3/backend directory: requests, pillow, urllib3 and gunicorn.
Bumps the pip group with 3 updates in the /gemini/sample-apps/quickbot/text-to-image-using-imagen3/backend directory: requests, urllib3 and gunicorn.
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/website-search-using-agent-builder/backend directory:

Package From To
requests 2.31.0 2.32.4
langchain-community 0.3.1 0.3.27
langchain-core 0.3.9 0.3.15
urllib3 1.26.16 2.5.0
gunicorn 20.1.0 23.0.0

Bumps the pip group with 2 updates in the /gemini/tuning/genai-mlops-tune-and-eval directory: requests and urllib3.

Updates requests from 2.32.3 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Updates llama-index from 0.12.28 to 0.12.41

Release notes

Sourced from llama-index's releases.

v0.12.41 (2025-06-07)

Release Notes

llama-index-core [0.12.41]

  • feat: Add MutableMappingKVStore for easier caching (#18893)
  • fix: async functions in tool specs (#19000)
  • fix: properly apply file limit to SimpleDirectoryReader (#18983)
  • fix: overwriting of LLM callback manager from Settings (#18951)
  • fix: Adding warning in the docstring of JsonPickleSerializer for the user to deserialize only safe things, rename to PickleSerializer (#18943)
  • fix: ImageDocument path and url checking to ensure that the input is really an image (#18947)
  • chore: remove some unused utils from core (#18985)

llama-index-embeddings-azure-openai [0.3.8]

  • fix: Azure api-key and azure-endpoint resolution fixes (#18975)
  • fix: api_base vs azure_endpoint resolution fixes (#19002)

llama-index-graph-stores-ApertureDB [0.1.0]

  • feat: Aperturedb propertygraph (#18749)

llama-index-indices-managed-llama-cloud [0.7.4]

  • fix: resolve retriever llamacloud index (#18949)
  • chore: composite retrieval add ReRankConfig (#18973)

llama-index-llms-azure-openai [0.3.4]

  • fix: api_base vs azure_endpoint resolution fixes (#19002)

llama-index-llms-bedrock-converse [0.7.1]

  • fix: handle empty message content to prevent ValidationError (#18914)

llama-index-llms-litellm [0.5.1]

  • feat: Add DocumentBlock support to LiteLLM integration (#18955)

llama-index-llms-ollama [0.6.2]

  • feat: Add support for the new think feature in ollama (#18993)

llama-index-llms-openai [0.4.4]

  • feat: add OpenAI JSON Schema structured output support (#18897)
  • fix: skip tool description length check in openai response api (#18956)

llama-index-packs-searchain [0.1.0]

... (truncated)

Changelog

Sourced from llama-index's changelog.

llama-index-core [0.12.41]

  • feat: Add MutableMappingKVStore for easier caching (#18893)
  • fix: async functions in tool specs (#19000)
  • fix: properly apply file limit to SimpleDirectoryReader (#18983)
  • fix: overwriting of LLM callback manager from Settings (#18951)
  • fix: Adding warning in the docstring of JsonPickleSerializer for the user to deserialize only safe things, rename to PickleSerializer (#18943)
  • fix: ImageDocument path and url checking to ensure that the input is really an image (#18947)
  • chore: remove some unused utils from core (#18985)

llama-index-embeddings-azure-openai [0.3.8]

  • fix: Azure api-key and azure-endpoint resolution fixes (#18975)
  • fix: api_base vs azure_endpoint resolution fixes (#19002)

llama-index-graph-stores-ApertureDB [0.1.0]

  • feat: Aperturedb propertygraph (#18749)

llama-index-indices-managed-llama-cloud [0.7.4]

  • fix: resolve retriever llamacloud index (#18949)
  • chore: composite retrieval add ReRankConfig (#18973)

llama-index-llms-azure-openai [0.3.4]

  • fix: api_base vs azure_endpoint resolution fixes (#19002)

llama-index-llms-bedrock-converse [0.7.1]

  • fix: handle empty message content to prevent ValidationError (#18914)

llama-index-llms-litellm [0.5.1]

  • feat: Add DocumentBlock support to LiteLLM integration (#18955)

llama-index-llms-ollama [0.6.2]

  • feat: Add support for the new think feature in ollama (#18993)

llama-index-llms-openai [0.4.4]

  • feat: add OpenAI JSON Schema structured output support (#18897)
  • fix: skip tool description length check in openai response api (#18956)

llama-index-packs-searchain [0.1.0]

  • feat: Add searchain package (#18929)

llama-index-readers-docugami [0.3.1]

... (truncated)

Commits

Updates requests from 2.31.0 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.1 to 0.3.27

Release notes

Sourced from langchain-community's releases.

langchain-community==0.3.22

Changes since langchain-community==0.3.21

community: release 0.3.22 (#30962) community: fix cost calculations for 4.1 and o4 in OpenAI callback (#30899) Community: Add bind variable support for oracle adb docloader (#30937) langchain_community: OpenAIEmbeddings not respecting chunk_size argument (#30946) community: Add deprecation decorator to SingleStore community integrations (#30846) community: support usage_metadata for litellm streaming calls (#30683) community: change metadata in opensearch mmr (#30921) community: redis tool typos fix (#30811) community: Add ruff rule PGH003 (#30812) community[patch]: fix cost calculations for o3 in OpenAI callback (#30807) Community: Add Managed Identity support for Azure AI Search (#30730) feat(community): add oauth2 support for Jira toolkit (#30684) community[patch]: simplify cache logic (#30760) community: deprecate AzureCosmosDBNoSqlVectorSearch in favor of langchain-azure-ai implementation (#30756) community: Google Vertex AI Search now returns the website title as part of the document metadata (#30688) Clean up numpy dependencies and speed up 3.13 CI with numpy>=2.1.0 (#30714) docs: Update couchbase vector store docs (#30710) ChatTongyi reasoning_content fix (#30694) community[patch]: Fix empty producer in PDF Parsers (#30620) community[patch]: Redundant Parser checker for Webbaseloader (#30632) feature: removed pandas dataframe dependency for similary_search when using DuckDB as vector store (#30445) community: Add support for custom runtimes to Riza tools (#30664)

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates langchain-core from 0.3.9 to 0.3.15

Commits

Updates urllib3 from 1.26.16 to 2.5.0

Release notes

Sourced from urllib3's releases.

2.5.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security issues

urllib3 2.5.0 fixes two moderate security issues:

Features

  • Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 for more information. (#3610)
  • Added support for version 0.5 of hatch-vcs (#3612)

Bugfixes

  • Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581)
  • Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615)

2.4.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. (#3555)

Misc

  • Switched to uv for installing development dependecies. (#3550)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566)

2.3.0

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.5.0 (2025-06-18)

Features

  • Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. ([#3610](https://github.com/urllib3/urllib3/issues/3610) <https://github.com/urllib3/urllib3/issues/3610>__)
  • Added support for version 0.5 of hatch-vcs ([#3612](https://github.com/urllib3/urllib3/issues/3612) <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

  • Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
  • Made the Node.js runtime respect redirect parameters such as retries and redirects.
  • Raised exception for HTTPResponse.shutdown on a connection already released to the pool. ([#3581](https://github.com/urllib3/urllib3/issues/3581) <https://github.com/urllib3/urllib3/issues/3581>__)
  • Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. ([#3615](https://github.com/urllib3/urllib3/issues/3615) <https://github.com/urllib3/urllib3/issues/3615>__)

2.4.0 (2025-04-10)

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. ([#3522](https://github.com/urllib3/urllib3/issues/3522) <https://github.com/urllib3/urllib3/issues/3522>__)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. ([#3567](https://github.com/urllib3/urllib3/issues/3567) <https://github.com/urllib3/urllib3/issues/3567>__)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. ([#3571](https://github.com/urllib3/urllib3/issues/3571) <https://github.com/urllib3/urllib3/issues/3571>__)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. ([#3555](https://github.com/urllib3/urllib3/issues/3555) <https://github.com/urllib3/urllib3/issues/3555>__)

Misc

  • Switched to uv for installing development dependecies. ([#3550](https://github.com/urllib3/urllib3/issues/3550) <https://github.com/urllib3/urllib3/issues/3550>__)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. ([#3566](https://github.com/urllib3/urllib3/issues/3566) <https://github.com/urllib3/urllib3/issues/3566>__)

2.3.0 (2024-12-22)

... (truncated)

Commits
  • aaab4ec Release 2.5.0
  • 7eb4a2a Merge commit from fork
  • f05b132 Merge commit from fork
  • d03fe32 Fix HTTP tunneling with IPv6 in older Python versions
  • 11661e9 Bump github/codeql-action from 3.28.0 to 3.29.0 (#3624)
  • 6a0ecc6 Update v2 migration guide to 2.4.0 (#3621)
  • 8e32e60 Raise exception for shutdown on a connection already released to the pool (#3...
  • 9996e0f Fix emscripten CI for Chrome 137+ (#3599)
  • 4fd1a99 Bump RECENT_DATE (#3617)
  • c4b5917 Add support for the new compression.zstd module in Python 3.14 (#3611)
  • Additional commits viewable in compare view

Updates gunicorn from 20.1.0 to 23.0.0

Release notes

Sourced from gunicorn's releases.

23.0.0

Gunicorn 23.0.0 has been released. This version improve HTTP 1.1. support and which improve safety

You're invited to upgrade asap your own installation.

23.0.0 - 2024-08-10

  • minor docs fixes (:pr:3217, :pr:3089, :pr:3167)
  • worker_class parameter accepts a class (:pr:3079)
  • fix deadlock if request terminated during chunked parsing (:pr:2688)
  • permit receiving Transfer-Encodings: compress, deflate, gzip (:pr:3261)
  • permit Transfer-Encoding headers specifying multiple encodings. note: no parameters, still (:pr:3261)
  • sdist generation now explicitly excludes sphinx build folder (:pr:3257)
  • decode bytes-typed status (as can be passed by gevent) as utf-8 instead of raising TypeError (:pr:2336)
  • raise correct Exception when encounting invalid chunked requests (:pr:3258)
  • the SCRIPT_NAME and PATH_INFO headers, when received from allowed forwarders, are no longer restricted for containing an underscore (:pr:3192)
  • include IPv6 loopback address [::1] in default for :ref:forwarded-allow-ips and :ref:proxy-allow-ips (:pr:3192)

** NOTE **

  • The SCRIPT_NAME change mitigates a regression that appeared first in the 22.0.0 release
  • Review your :ref:forwarded-allow-ips setting if you are still not seeing the SCRIPT_NAME transmitted
  • Review your :ref:forwarder-headers setting if you are missing headers after upgrading from a version prior to 22.0.0

** Breaking changes **

  • refuse requests where the uri field is empty (:pr:3255)
  • refuse requests with invalid CR/LR/NUL in heade field values (:pr:3253)
  • remove temporary --tolerate-dangerous-framing switch from 22.0 (:pr:3260)
  • If any of the breaking changes affect you, be aware that now refused requests can post a security problem, especially so in setups involving request pipe-lining and/or proxies.

Fix CVE-2024-1135

Gunicorn 22.0 has been released

Gunicorn 22.0.0 has been released. This version fix the numerous security vulnerabilities. You're invited to upgrade asap your own installation.

Changes:

22.0.0 - 2024-04-17
===================

    

  • use utime to notify workers liveness
    • 

  • migrate setup to pyproject.toml
    • 

  • fix numerous security vulnerabilities in HTTP parser (closing some request smuggling vectors)
    • 

  • parsing additional requests is no longer attempted past unsupported request framing
    • 

  • on HTTP versions < 1.1 support for chunked transfer is refused (only used in exploits)
    • 

  • requests conflicting configured or passed SCRIPT_NAME now produce a verbose error
    • 

  • Trailer fields are no longer inspected for headers indicating secure scheme
</tr></table>

... (truncated)

Commits
  • 411986d fix doc
  • 334392e Merge pull request #2559 from laggardkernel/bugfix/reexec-env
  • e75c353 Merge pull request #3189 from pajod/patch-py36
  • 9357b28 keep document user in access_log_format setting
  • 79fdef0 bump to 23.0.0
  • 3acd9fb Merge pull request #2620 from talkerbox/improve-access-log-format-docs
  • 3f56d76 Merge pull request #3192 from pajod/patch-allowed-script-name
  • 256d474 docs: revert duped directive
  • ffa48b5 test: default change was intentional
  • 52538ca docs: recommend SCRIPT_NAME=/subfolder
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.1 to 0.3.27

Release notes

Sourced from langchain-community's releases.

langchain-community==0.3.22

Changes since langchain-community==0.3.21

community: release 0.3.22 (#30962) community: fix cost calculations for 4.1 and o4 in OpenAI callback (#30899) Community: Add bind variable support for oracle adb docloader (#30937) langchain_community: OpenAIEmbeddings not respecting chunk_size argument (#30946) community: Add deprecation decorator to SingleStore community integrations (#30846) community: support usage_metadata for litellm streaming calls (#30683) community: change metadata in opensearch mmr (#30921) community: redis tool typos fix (#30811) community: Add ruff rule PGH003 (#30812) community[patch]: fix cost calculations for o3 in OpenAI callback (#30807) Community: Add Managed Identity support for Azure AI Search (#30730) feat(community): add oauth2 support for Jira toolkit (#30684) community[patch]: simplify cache logic (#30760) community: deprecate AzureCosmosDBNoSqlVectorSearch in favor of langchain-azure-ai implementation (#30756) community: Google Vertex AI Search now returns the website title as part of the document metadata (#30688) Clean up numpy dependencies and speed up 3.13 CI with numpy>=2.1.0 (#30714) docs: Update couchbase vector store docs (#30710) ChatTongyi reasoning_content fix (#30694) community[patch]: Fix empty producer in PDF Parsers (#30620) community[patch]: Redundant Parser checker for Webbaseloader (#30632) feature: removed pandas dataframe dependency for similary_search when using DuckDB as vector store (#30445) community: Add support for custom runtimes to Riza tools (#30664)

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates langchain-core from 0.3.9 to 0.3.15

Commits

Updates requests from 2.31.0 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.1 to 0.3.27

Release notes

Sourced from langchain-community's releases.

langchain-community==0.3.22

Changes since langchain-community==0.3.21

community: release 0.3.22 (#30962) community: fix cost calculations for 4.1 and o4 in OpenAI callback (#30899) Community: Add bind variable support for oracle adb docloader (#30937) langchain_community: OpenAIEmbeddings not respecting chunk_size argument (#30946) community: Add deprecation decorator to SingleStore community integrations (#30846) community: support usage_metadata for litellm streaming calls (#30683) community: change metadata in opensearch mmr (#30921) community: redis tool typos fix (#30811) community: Add ruff rule PGH003 (#30812) community[patch]: fix cost calculations for o3 in OpenAI callback (#30807) Community: Add Managed Identity support for Azure AI Search (#30730) feat(community): add oauth2 support for Jira toolkit (#30684) community[patch]: simplify cache logic (#30760) community: deprecate AzureCosmosDBNoSqlVectorSearch in favor of langchain-azure-ai implementation (#30756) community: Google Vertex AI Search now returns the website title as part of the document metadata (#30688) Clean up numpy dependencies and speed up 3.13 CI with numpy>=2.1.0 (#30714) docs: Update couchbase vector store docs (#30710) ChatTongyi reasoning_content fix (#30694) community[patch]: Fix empty producer in PDF Parsers (#30620) community[patch]: Redundant Parser checker for Webbaseloader (#30632) feature: removed pandas dataframe dependency for similary_search when using DuckDB as vector store (#30445) community: Add support for custom runtimes to Riza tools (#30664)

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates langchain-core from 0.3.9 to 0.3.15

Commits
  • 25a1031 community: Fix a validation error for MoonshotChat (#27801)
  • e4e2aa0 core[patch]: update image util err msg (

@dependabot
chore(deps): bump the pip group across 12 directories with 7 updates
b7e2d64 
Bumps the pip group with 1 update in the /gemini/multimodal-live-api/project-livewire/server directory: [requests](https://github.com/psf/requests).
Bumps the pip group with 1 update in the /gemini/sample-apps/llamadeploy-on-cloud-run directory: [llama-index](https://github.com/run-llama/llama_index).
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/conversational-app-multi-playbook/backend directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.4` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.1` | `0.3.27` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.9` | `0.3.15` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `2.5.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` |

Bumps the pip group with 2 updates in the /gemini/sample-apps/quickbot/conversational-app-multi-playbook/functions/create-intent directory: [langchain-community](https://github.com/langchain-ai/langchain) and [langchain-core](https://github.com/langchain-ai/langchain).
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/conversational-app-single-playbook/backend directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.4` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.1` | `0.3.27` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.9` | `0.3.15` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `2.5.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` |

Bumps the pip group with 2 updates in the /gemini/sample-apps/quickbot/conversational-app-single-playbook/functions/create-intent directory: [langchain-community](https://github.com/langchain-ai/langchain) and [langchain-core](https://github.com/langchain-ai/langchain).
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/document-search-using-agent-builder/backend directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.4` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.1` | `0.3.27` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.9` | `0.3.15` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `2.5.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` |

Bumps the pip group with 4 updates in the /gemini/sample-apps/quickbot/image-background-changer-using-imagen3/backend directory: [requests](https://github.com/psf/requests), [pillow](https://github.com/python-pillow/Pillow), [urllib3](https://github.com/urllib3/urllib3) and [gunicorn](https://github.com/benoitc/gunicorn).
Bumps the pip group with 4 updates in the /gemini/sample-apps/quickbot/linkedin-profile-image-generation-using-imagen3/backend directory: [requests](https://github.com/psf/requests), [pillow](https://github.com/python-pillow/Pillow), [urllib3](https://github.com/urllib3/urllib3) and [gunicorn](https://github.com/benoitc/gunicorn).
Bumps the pip group with 3 updates in the /gemini/sample-apps/quickbot/text-to-image-using-imagen3/backend directory: [requests](https://github.com/psf/requests), [urllib3](https://github.com/urllib3/urllib3) and [gunicorn](https://github.com/benoitc/gunicorn).
Bumps the pip group with 5 updates in the /gemini/sample-apps/quickbot/website-search-using-agent-builder/backend directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.4` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.1` | `0.3.27` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.9` | `0.3.15` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `2.5.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` |

Bumps the pip group with 2 updates in the /gemini/tuning/genai-mlops-tune-and-eval directory: [requests](https://github.com/psf/requests) and [urllib3](https://github.com/urllib3/urllib3).


Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `llama-index` from 0.12.28 to 0.12.41
- [Release notes](https://github.com/run-llama/llama_index/releases)
- [Changelog](https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md)
- [Commits](run-llama/llama_index@v0.12.28...v0.12.41)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `pillow` from 11.2.1 to 11.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `pillow` from 11.1.0 to 11.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `requests` from 2.31.0 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `langchain-community` from 0.3.1 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-community==0.3.1...langchain==0.3.27)

Updates `langchain-core` from 0.3.9 to 0.3.15
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.9...langchain-core==0.3.15)

Updates `urllib3` from 1.26.16 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

Updates `gunicorn` from 20.1.0 to 23.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...23.0.0)

Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `urllib3` from 1.26.20 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.5.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: llama-index
  dependency-version: 0.12.41
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-version: 23.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 5, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 5, 2025 15:56
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 5, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Superseded by #2311.

@dependabot dependabot bot closed this Sep 8, 2025
@dependabot dependabot bot deleted the dependabot/pip/gemini/multimodal-live-api/project-livewire/server/pip-e8b7bf692d branch September 8, 2025 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants