Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the all-backend-deps group with 8 updates in the /src/backend directory:

Package From To
semantic-kernel[azure] 1.32.2 1.37.1
openai 1.84.0 2.6.1
opentelemetry-sdk 1.31.1 1.38.0
opentelemetry-api 1.31.1 1.38.0
opentelemetry-semantic-conventions 0.52b1 0.59b0
opentelemetry-instrumentation 0.52b1 0.59b0
azure-monitor-opentelemetry 1.6.8 1.8.1
azure-ai-projects 1.0.0b11 1.1.0b4

Updates semantic-kernel[azure] from 1.32.2 to 1.37.1

Release notes

Sourced from semantic-kernel[azure]'s releases.

python-1.37.1

Release Notes

Enhancements and Improvements

Bug Fixes

Python Package Updates

New Contributors

Full Changelog: microsoft/semantic-kernel@python-1.37.0...python-1.37.1

python-1.37.0

Release Notes

New Features

Enhancements and Improvements

Bug Fixes

Python Package Updates

New Contributors

Full Changelog: microsoft/semantic-kernel@python-1.36.2...python-1.37.0

python-1.36.2

Release Notes

Enhancements and Improvements

... (truncated)

Commits
  • 2651307 Python: Bump Python version to 1.37.1 for a release. (#13314)
  • 9962d43 Python: Fixed sending "text" parameter to OpenAI Responses API (#13280)
  • 05d659d Python: Fix non-string KernelArguments being converted to strings in prompt t...
  • 1f8fea2 Python: Fix ai connector integration tests (#13311)
  • f5fb44e Python: Bump weaviate image to 1.33.3 (#13313)
  • cc43169 .Net: [MEVD] Test cleanup pack (#13307)
  • c79c269 .Net: [MEVD] Fix filtering by true (#13294)
  • 96c4701 .Net: Feature/gemini function parts format (#13258)
  • 3434190 .Net: Fix #13183: .NET — Kernel.AddOpenAIChatClient throws an error when us… ...
  • cf9a5f2 Python: Fix onnx pkg by pinning. Pin openai < 2.0. (#13284)
  • Additional commits viewable in compare view

Updates openai from 1.84.0 to 2.6.1

Release notes

Sourced from openai's releases.

v2.6.1

2.6.1 (2025-10-24)

Full Changelog: v2.6.0...v2.6.1

Bug Fixes

Chores

  • client: clean up custom translations code (cfb9e25)

v2.6.0

2.6.0 (2025-10-20)

Full Changelog: v2.5.0...v2.6.0

Features

  • api: Add responses.input_tokens.count (6dd09e2)

Bug Fixes

  • api: internal openapi updates (caabd7c)

v2.5.0

2.5.0 (2025-10-17)

Full Changelog: v2.4.0...v2.5.0

Features

Chores

  • bump httpx-aiohttp version to 0.1.9 (67f2f0a)

v2.4.0

2.4.0 (2025-10-16)

Full Changelog: v2.3.0...v2.4.0

Features

  • api: Add support for gpt-4o-transcribe-diarize on audio/transcriptions endpoint (bdbe9b8)

... (truncated)

Changelog

Sourced from openai's changelog.

2.6.1 (2025-10-24)

Full Changelog: v2.6.0...v2.6.1

Bug Fixes

Chores

  • client: clean up custom translations code (cfb9e25)

2.6.0 (2025-10-20)

Full Changelog: v2.5.0...v2.6.0

Features

  • api: Add responses.input_tokens.count (6dd09e2)

Bug Fixes

  • api: internal openapi updates (caabd7c)

2.5.0 (2025-10-17)

Full Changelog: v2.4.0...v2.5.0

Features

Chores

  • bump httpx-aiohttp version to 0.1.9 (67f2f0a)

2.4.0 (2025-10-16)

Full Changelog: v2.3.0...v2.4.0

Features

  • api: Add support for gpt-4o-transcribe-diarize on audio/transcriptions endpoint (bdbe9b8)

Chores

... (truncated)

Commits

Updates opentelemetry-sdk from 1.31.1 to 1.38.0

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.38.0/0.59b0 (2025-10-16)

  • Add rstcheck to pre-commit to stop introducing invalid RST (#4755)
  • logs: extend Logger.emit to accept separated keyword arguments (#4737)
  • logs: add warnings for classes that would be deprecated and renamed in 1.39.0 (#4771)

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
  • Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
  • docs: linked the examples with their github source code location and added Prometheus example (#4728)
  • Permit to override default HTTP OTLP exporters headers (#4634)
  • semantic-conventions: Bump to 1.37.0 (#4731)
  • opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
  • Performance: Cache importlib_metadata.entry_points (#4735)
  • opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)

Version 1.36.0/0.57b0 (2025-07-29)

  • Add missing Prometheus exporter documentation (#4485)

  • Overwrite logging.config.fileConfig and logging.config.dictConfig to ensure the OTLP LogHandler remains attached to the root logger. Fix a bug that can cause a deadlock to occur over logging._lock in some cases (#4636).

  • otlp-http-exporter: set default value for param timeout_sec in _export method (#4691)

  • Update OTLP gRPC/HTTP exporters: calling shutdown will now interrupt exporters that are sleeping before a retry attempt, and cause them to return failure immediately. Update BatchSpan/LogRecordProcessors: shutdown will now complete after 30 seconds of trying to finish exporting any buffered telemetry, instead of continuing to export until all telemetry was exported. (#4638).

Version 1.35.0/0.56b0 (2025-07-11)

  • Update OTLP proto to v1.7 #4645.
  • Add event_name as a top level field in the LogRecord. Events are now simply logs with the

... (truncated)

Commits

Updates opentelemetry-api from 1.31.1 to 1.38.0

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.38.0/0.59b0 (2025-10-16)

  • Add rstcheck to pre-commit to stop introducing invalid RST (#4755)
  • logs: extend Logger.emit to accept separated keyword arguments (#4737)
  • logs: add warnings for classes that would be deprecated and renamed in 1.39.0 (#4771)

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
  • Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
  • docs: linked the examples with their github source code location and added Prometheus example (#4728)
  • Permit to override default HTTP OTLP exporters headers (#4634)
  • semantic-conventions: Bump to 1.37.0 (#4731)
  • opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
  • Performance: Cache importlib_metadata.entry_points (#4735)
  • opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)

Version 1.36.0/0.57b0 (2025-07-29)

  • Add missing Prometheus exporter documentation (#4485)

  • Overwrite logging.config.fileConfig and logging.config.dictConfig to ensure the OTLP LogHandler remains attached to the root logger. Fix a bug that can cause a deadlock to occur over logging._lock in some cases (#4636).

  • otlp-http-exporter: set default value for param timeout_sec in _export method (#4691)

  • Update OTLP gRPC/HTTP exporters: calling shutdown will now interrupt exporters that are sleeping before a retry attempt, and cause them to return failure immediately. Update BatchSpan/LogRecordProcessors: shutdown will now complete after 30 seconds of trying to finish exporting any buffered telemetry, instead of continuing to export until all telemetry was exported. (#4638).

Version 1.35.0/0.56b0 (2025-07-11)

  • Update OTLP proto to v1.7 #4645.
  • Add event_name as a top level field in the LogRecord. Events are now simply logs with the

... (truncated)

Commits

Updates opentelemetry-semantic-conventions from 0.52b1 to 0.59b0

Changelog

Sourced from opentelemetry-semantic-conventions's changelog.

Version 1.38.0/0.59b0 (2025-10-16)

  • Add rstcheck to pre-commit to stop introducing invalid RST (#4755)
  • logs: extend Logger.emit to accept separated keyword arguments (#4737)
  • logs: add warnings for classes that would be deprecated and renamed in 1.39.0 (#4771)

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
  • Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
  • docs: linked the examples with their github source code location and added Prometheus example (#4728)
  • Permit to override default HTTP OTLP exporters headers (#4634)
  • semantic-conventions: Bump to 1.37.0 (#4731)
  • opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
  • Performance: Cache importlib_metadata.entry_points (#4735)
  • opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)

Version 1.36.0/0.57b0 (2025-07-29)

  • Add missing Prometheus exporter documentation (#4485)

  • Overwrite logging.config.fileConfig and logging.config.dictConfig to ensure the OTLP LogHandler remains attached to the root logger. Fix a bug that can cause a deadlock to occur over logging._lock in some cases (#4636).

  • otlp-http-exporter: set default value for param timeout_sec in _export method (#4691)

  • Update OTLP gRPC/HTTP exporters: calling shutdown will now interrupt exporters that are sleeping before a retry attempt, and cause them to return failure immediately. Update BatchSpan/LogRecordProcessors: shutdown will now complete after 30 seconds of trying to finish exporting any buffered telemetry, instead of continuing to export until all telemetry was exported. (#4638).

Version 1.35.0/0.56b0 (2025-07-11)

  • Update OTLP proto to v1.7 #4645.
  • Add event_name as a top level field in the LogRecord. Events are now simply logs with the

... (truncated)

Commits

Updates opentelemetry-instrumentation from 0.52b1 to 0.59b0

Release notes

Sourced from opentelemetry-instrumentation's releases.

opentelemetry-instrumentation-openai-agents-v2 0.1.0

  • Initial barebones package skeleton: minimal instrumentor stub, version module, and packaging metadata/entry point. (#3805)
  • Implement OpenAI Agents span processing aligned with GenAI semantic conventions. (#3817)
  • Input and output according to GenAI spec. (#3824)

opentelemetry-instrumentation-openai-v2 2.1b0

  • Coerce openai response_format to semconv format (#3073)
  • Add example to opentelemetry-instrumentation-openai-v2 (#3006)
  • Support for AsyncOpenAI/AsyncCompletions (#2984)
  • Add metrics (#3180)

opentelemetry-instrumentation-openai-v2 2.0b0

  • Use generic OTEL_INSTRUMENTATION_GENAI_CAPTURE_MESSAGE_CONTENT environment variable to control if content of prompt, completion, and other messages is captured. (#2947)

  • Update OpenAI instrumentation to Semantic Conventions v1.28.0: add new attributes and switch prompts and completions to log-based events. (#2925)

  • Initial OpenAI instrumentation (#2759)

Changelog

Sourced from opentelemetry-instrumentation's changelog.

Version 1.38.0/0.59b0 (2025-10-16)

Fixed

  • opentelemetry-instrumentation-flask: Do not record http.server.duration metrics for excluded URLs. (#3794)
  • opentelemetry-instrumentation-botocore: migrate off the deprecated events API to use the logs API (#3624)
  • opentelemetry-instrumentation-dbapi: fix crash retrieving libpq version when enabling commenter with psycopg (#3796)
  • opentelemetry-instrumentation-fastapi: Fix handling of APIRoute subclasses (#3681)

Added

  • opentelemetry-instrumentation-botocore: Add support for AWS Secrets Manager semantic convention attribute (#3765)
  • opentelemetry-instrumentation-dbapi: Add support for commenter_options in trace_integration function to control SQLCommenter behavior (#3743)
  • Add rstcheck to pre-commit to stop introducing invalid RST (#3777)
  • opentelemetry-exporter-credential-provider-gcp: create this package which provides support for supplying your machine's Application Default Credentials (https://cloud.google.com/docs/authentication/application-default-credentials) to the OTLP Exporters created automatically by OpenTelemetry Python's auto instrumentation. These credentials authorize OTLP traces to be sent to telemetry.googleapis.com. #3766.
  • opentelemetry-instrumentation-psycopg: Add missing parameter capture_parameters to instrumentor. (#3676)
  • opentelemetry-instrumentation-dbapi: Adds sqlcommenter to documentation. (#3720)

Version 1.37.0/0.58b0 (2025-09-11)

Fixed

  • opentelemetry-instrumentation-fastapi: Fix middleware ordering to cover all exception handling use cases. (#3664)
  • opentelemetry-instrumentation-asgi: Make all user hooks failsafe and record exceptions in hooks. (#3664)
  • opentelemetry-instrumentation-fastapi: Fix memory leak in uninstrument_app() by properly removing apps from the tracking set (#3688)
  • opentelemetry-instrumentation-tornado Fix server (request) duration metric calculation (#3679)
  • opentelemetry-instrumentation-tornado: Fix to properly skip all server telemetry when URL excluded. (#3680)
  • opentelemetry-instrumentation: Avoid calls to context.detach with None token. (#3673)
  • opentelemetry-instrumentation-starlette/opentelemetry-instrumentation-fastapi: Fixes a crash when host-based routing is used (#3507)
  • Fix documentation order of sections and headers for Django, Flask, MySQL, mysqlclient, psycopg, psycopg2, pymysql, sqlalchemy instrumentations. (#3719)
  • opentelemetry-instrumentation-asgi Fixed an issue where FastAPI reports IP instead of URL. (#3670)

... (truncated)

Commits

Updates azure-monitor-opentelemetry from 1.6.8 to 1.8.1

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.8.1

1.8.1 (2025-09-17)

Bugs Fixed

  • Fixed version pinned for opentelemetry-sdk to resolve dependency conflicts. (#43012)
  • Modified ordering of dependencies in setup.py to avoid dependency conflicts in future. (#43023)

azure-monitor-opentelemetry_1.8.0

1.8.0 (2025-09-08)

Features Added

  • Added configuration changes for RateLimited Sampler (#41976)
Commits

Updates azure-ai-projects from 1.0.0b11 to 1.1.0b4

Release notes

Sourced from azure-ai-projects's releases.

azure-ai-projects_1.1.0b4

1.1.0b4 (2025-09-12)

Bugs Fixed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-backend-deps group with 8 updates in the /src/backend directory:

| Package | From | To |
| --- | --- | --- |
| [semantic-kernel[azure]](https://github.com/microsoft/semantic-kernel) | `1.32.2` | `1.37.1` |
| [openai](https://github.com/openai/openai-python) | `1.84.0` | `2.6.1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.31.1` | `1.38.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.31.1` | `1.38.0` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.52b1` | `0.59b0` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.52b1` | `0.59b0` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.6.8` | `1.8.1` |
| [azure-ai-projects](https://github.com/Azure/azure-sdk-for-python) | `1.0.0b11` | `1.1.0b4` |



Updates `semantic-kernel[azure]` from 1.32.2 to 1.37.1
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.32.2...python-1.37.1)

Updates `openai` from 1.84.0 to 2.6.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.84.0...v2.6.1)

Updates `opentelemetry-sdk` from 1.31.1 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.31.1...v1.38.0)

Updates `opentelemetry-api` from 1.31.1 to 1.38.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.31.1...v1.38.0)

Updates `opentelemetry-semantic-conventions` from 0.52b1 to 0.59b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-instrumentation` from 0.52b1 to 0.59b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `azure-monitor-opentelemetry` from 1.6.8 to 1.8.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.6.8...azure-monitor-opentelemetry_1.8.1)

Updates `azure-ai-projects` from 1.0.0b11 to 1.1.0b4
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-ai-projects_1.0.0b11...azure-ai-projects_1.1.0b4)

---
updated-dependencies:
- dependency-name: semantic-kernel[azure]
  dependency-version: 1.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: openai
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.59b0
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.59b0
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: azure-ai-projects
  dependency-version: 1.1.0b4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant