fix(deps): update all non-major dependencies #69
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
18.19.120
->18.19.121
18.19.122
1.39.17
->1.40.1
1.40.6
(+4)1.39.17
->1.40.1
1.40.6
(+4)7.9.2
->7.10.1
7.10.2
2.10.6
->2.11.0
2.11.2
(+1)0.3.26
->0.3.27
3.88.1
->3.90.0
3.96.2
(+9)3.88.1
->3.90.0
3.96.2
(+9)^0.5.0
->^0.6.0
0.6.4
(+1)22.17.1
->22.18.0
2.2.6
->2.3.2
1.24.0
->1.25.0
1.26.0
1.15.0
->1.15.1
1.15.0
->1.15.1
~5.8.0
->~5.9.0
Release Notes
boto/boto3 (boto3)
v1.40.1
Compare Source
======
acm-pca
: [botocore
] Doc-only update to add more information to GetCertificate action.aiops
: [botocore
] This release includes fix for InvestigationGroup timestamp conversion issue.arc-region-switch
: [botocore
] This is the initial SDK release for Region switchauditmanager
: [botocore
] Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported.lightsail
: [botocore
] This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region.observabilityadmin
: [botocore
] CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources.pcs
: [botocore
] Add support for IPv6 Networking for Clusters.securityhub
: [botocore
] Release new resource detail type CodeRepositorysns
: [botocore
] Amazon SNS support for Amazon SQS fair queuesv1.40.0
Compare Source
======
customer-profiles
: [botocore
] The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate.ec2
: [botocore
] Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem.elbv2
: [botocore
] This release enables secondary IP addresses for Network Load Balancers.entityresolution
: [botocore
] Add support for creating advanced rule-based matching workflows in AWS Entity Resolution.glue
: [botocore
] Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types.inspector2
: [botocore
] Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource typeiot
: [botocore
] This release allows AWS IoT Core users to use their own AWS KMS keys for data protectionopensearch
: [botocore
] Granular access control support for NEO-SAML with IAMFederation for AOS data sourcequicksight
: [botocore
] Added Impala connector supports3control
: [botocore
] Add Tags field to CreateAccessPointsesv2
: [botocore
] This release introduces support for Multi-tenant managementworkspaces-web
: [botocore
] Added ability to log session activity on a portal to an S3 bucket.sts
: [botocore
] Updated the default sts service endpoint fromlegacy
toregional
. This behavior can be overridden using thests_regional_endpoints
setting in the shared AWS config file or theAWS_STS_REGIONAL_ENDPOINTS
environment variable.boto/botocore (botocore)
v1.40.1
Compare Source
======
acm-pca
: Doc-only update to add more information to GetCertificate action.aiops
: This release includes fix for InvestigationGroup timestamp conversion issue.arc-region-switch
: This is the initial SDK release for Region switchauditmanager
: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported.lightsail
: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region.observabilityadmin
: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources.pcs
: Add support for IPv6 Networking for Clusters.securityhub
: Release new resource detail type CodeRepositorysns
: Amazon SNS support for Amazon SQS fair queuesv1.40.0
Compare Source
======
customer-profiles
: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate.ec2
: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem.elbv2
: This release enables secondary IP addresses for Network Load Balancers.entityresolution
: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution.glue
: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types.inspector2
: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource typeiot
: This release allows AWS IoT Core users to use their own AWS KMS keys for data protectionopensearch
: Granular access control support for NEO-SAML with IAMFederation for AOS data sourcequicksight
: Added Impala connector supports3control
: Add Tags field to CreateAccessPointsesv2
: This release introduces support for Multi-tenant managementworkspaces-web
: Added ability to log session activity on a portal to an S3 bucket.sts
: Updated the default sts service endpoint fromlegacy
toregional
. This behavior can be overridden using thests_regional_endpoints
setting in the shared AWS config file or theAWS_STS_REGIONAL_ENDPOINTS
environment variable.nedbat/coveragepy (coverage)
v7.10.1
Compare Source
Fix: the exclusion for
if TYPE_CHECKING:
was wrong: it marked the branchas partial, but it should have been a line exclusion so the entire clause
would be excluded. Improves
issue 831
_.Fix: changed where .pth files are written for
patch = subprocess
, closingissue 2006
_... _issue 2006:https://github.com/nedbat/coveragepy/issues/20066
.. _changes_7-10-0:
v7.10.0
Compare Source
A new configuration option: ":ref:
config_run_patch
" specifies named patchesto work around some limitations in coverage measurement. These patches are
available:
patch = _exit
lets coverage save its data even when :func:os._exit() <python:os._exit>
is used to abruptly end the process. This closeslong-standing
issue 310
_ as well as its duplicates:issue 312
,issue 1673
,issue 1845
, andissue 1941
.patch = subprocess
measures coverage in Python subprocesses createdwith :mod:
subprocess
, :func:os.system
, or one of the :func:execv <python:os.execl>
or :func:spawnv <python:os.spawnl>
family offunctions. Closes old
issue 367
, its duplicateissue 378
and oldissue 689
_.patch = execv
adjusts the :func:execv <python:os.execl>
family offunctions to save coverage data before ending the current program and
starting the next. Not available on Windows. Closes
issue 43
_ after 15years!
The HTML report now dimly colors subsequent lines in multi-line statements.
They used to have no color. This gives a better indication of the amount of
code missing in the report. Closes
issue 1308
_.Two new exclusion patterns are part of the defaults:
...
is automaticallyexcluded as a line and
if TYPE_CHECKING:
is excluded as a branch. Closesissue 831
_.A new command-line option:
--save-signal=USR1
specifies a signal thatcoverage.py will listen for. When the signal is sent, the coverage data will
be saved. This makes it possible to save data from within long-running
processes. Thanks,
Arkady Gilinsky <pull 1998_>
_.A new configuration option: ":ref:
config_report_partial_also
" is a list ofregexes to add as pragmas for partial branches. This parallels the
":ref:
config_report_exclude_also
" setting for adding line exclusionpatterns.
A few file path configuration settings didn't allow for tilde expansion:
:ref:
config_json_output
, :ref:config_lcov_output
and:ref:
config_run_debug_file
. This is now fixed.Wheels are included for 3.14 now that 3.14 rc1 is available.
We no longer ship a PyPy-specific wheel. PyPy will install the pure-Python
wheel. Closes
issue 2001
_.In the very unusual situation of not having a current frame, coverage no
longer crashes when using the sysmon core, fixing
issue 2005
_... _issue 43:https://github.com/nedbat/coveragepy/issues/433
.. _issue 310https://github.com/nedbat/coveragepy/issues/31010
.. _issue 31https://github.com/nedbat/coveragepy/issues/312312
.. _issue 3https://github.com/nedbat/coveragepy/issues/367/367
.. _issue https://github.com/nedbat/coveragepy/issues/378s/378
.. _issuehttps://github.com/nedbat/coveragepy/issues/689es/689
.. _issuhttps://github.com/nedbat/coveragepy/issues/831ues/831
.. _issuhttps://github.com/nedbat/coveragepy/issues/1308ues/1308
.. _isshttps://github.com/nedbat/coveragepy/issues/1673sues/1673
.. _ishttps://github.com/nedbat/coveragepy/issues/1845ssues/1845
.. _ihttps://github.com/nedbat/coveragepy/issues/1941issues/1941
.. [https://github.com/nedbat/coveragepy/pull/1998](https://redirect.github.com/nedbat/coveragepy/pull/1998)py/pull/1998
.. [https://github.com/nedbat/coveragepy/issues/2001](https://redirect.github.com/nedbat/coveragepy/issues/2001)y/issues/2001
.. https://github.com/nedbat/coveragepy/issues/2005py/issues/2005
.. _changes_7-9-2:
jlowin/fastmcp (fastmcp)
v2.11.0
: : Auth to a Good StartCompare Source
FastMCP 2.11 doubles down on what developers need most: speed and simplicity. This massive release delivers significant performance improvements and a dramatically better developer experience.
🔐 Enterprise-Ready Authentication brings comprehensive OAuth 2.1 support with WorkOS's AuthKit integration. The new AuthProvider interface leverages MCP's support for separate resource and authorization servers, handling API keys and remote authentication with Dynamic Client Registration. AuthKit integration means you can plug into existing enterprise identity systems without rebuilding your auth stack, setting the stage for plug-and-play auth that doesn't require users to become security experts overnight.
⚡ The Experimental OpenAPI Parser delivers dramatic performance improvements through single-pass schema processing and optimized memory usage. OpenAPI integrations are now significantly faster, with cleaner, more maintainable code. (Note: the experimental parser is disabled by default, set
FASTMCP_EXPERIMENTAL_ENABLE_NEW_OPENAPI_PARSER=1
to enable it. A message will be shown to all users on the legacy parser encouraging them to try the new one before it becomes the default.)🧠 Context State Management finally gives you persistent state across tool calls with a simple dict interface, while enhanced meta support lets you expose rich component metadata to clients. Combined with improved type annotations, string-based argument descriptions, and UV transport support, this release makes FastMCP feel more intuitive than ever.
This release represents a TON of community contributions and sets the foundation for even more ambitious features ahead.
What's Changed
New Features 🎉
meta
dict by @jlowin in https://github.com/jlowin/fastmcp/pull/1281Enhancements 🔧
fastmcp run mcp.json
by @strawgate in https://github.com/jlowin/fastmcp/pull/1138get_http_request
andcontext.session_id
by @hopeful0 in https://github.com/jlowin/fastmcp/pull/1242Fixes 🐞
Breaking Changes 🛫
Docs 📚
Other Changes 🦾
New Contributors
Full Changelog: jlowin/fastmcp@v2.10.6...v2.11.0
langfuse/langfuse (langfuse/langfuse)
v3.90.0
Compare Source
What's Changed
Feat
Chore
Refactor
Fixes
New Contributors
Full Changelog: langfuse/langfuse@v3.89.0...v3.90.0
langchain-ai/langgraph (langgraph)
v0.6.2
Compare Source
Changes since 0.6.1
context_schema
toconfig_schema
with correct condition (#5746)v0.6.1
Compare Source
Changes since 0.6.0
v0.6.0
Compare Source
LangGraph v0.6
We’re excited to announce the release of LangGraph v0.6.0, another significant step toward our v1.0 milestone. This release emphasizes providing a cleaner, more intuitive developer experience for building agentic workflows. Below we’ll cover the headline improvements and minor changes.
🚀 New Context API: Simplified Runtime Context Injection
The biggest improvement in v0.6 is the introduction of the new Context API, which makes it easier to pass run-scoped context in an intuitive and type safe way.
This pattern replaces the previously recommended pattern of injecting run-scoped context into
config['configurable']
.Before (v0.5):
After (v0.6):
The
Runtime
class provides a single interface for accessing information like:previous
is also available: the previous return value for the given threadNow, instead of injecting all of the above as separate parameters to node functions,
developers can access them all through a single
runtime
parameter.Migration Path
config_schema
is deprecated in favor ofcontext_schema
, and will be removed in v2.0.0config_schema
get_config_jsonschema
is deprecated in favor ofget_context_jsonschema
(though this is generally only used for graph introspection and not by most langgraph users)🔀 Dynamic model & tool selection
create_react_agent
can now dynamically choose both the model and tools at runtime using a custom context object:Then invoke the agent with your desired settings:
Now agents can flexibly adapt their behavior based on runtime context.
🏗️ Durability Mode Support
LangGraph v0.6 introduces a new
durability
****argument that gives you fine-grained control over persistence behavior. This provides finer grained control than its predecessor,checkpoint_during
.This was predated
"exit"
- Save checkpoint only when the graph exitscheckpoint_during=False
"async"
- Save checkpoint asynchronously while next step executescheckpoint_during=True
"sync"
- Save checkpoint synchronously before next stepMigration Path
checkpoint_during
is now deprecated in favor of the newdurability
argument. Backwards compatibility will be maintained until v2.0.0.🛡️ Enhanced Type Safety and Validation
In an effort to make graph building easier for developers, we’ve enhanced the type safety of the
LangGraph APIs.
LangGraph’s
StateGraph
andPregel
interfaces are now generic over a graph’s:state_schema
context_schema
input_schema
output_schema
This means that:
invoke
/stream
is type checked against the relevant schemacontext
available via the aforementionedRuntime
class matches thecontext_schema
🔧 A Refined
Interrupt
InterfaceIn preparation for v1.0, we’ve made a few changes to the
Interrupt
interface.Interrupts now have two attributes:
id
- a unique identifier for the interruptvalue
- the interrupt valueIn v0.6, we’ve removed the following attributes from the
Interrupt
class:when
- this was always"during"
and offered no practical valueresumable
- functionally, this is alwaysTrue
ns
- this information is now stored in a condensed format in theid
attributeinterrupt_id
has been deprecated in favor ofid
, but is still usable for backward compatibility🔒 Solidified Public API Surface
Gearing up for v1.0, we’ve solidified what’s public vs. private in the LangGraph API.
We’ve also deprecated some old import paths that have supported backports for ~1 year.
These changes make it easier to maintain a higher quality public API
and reduce the surface area for potential breaking changes.
The following table summarizes the changes:
from langgraph.pregel.types import ...
from langgraph.types import ...
from langgraph.constants import Send
from langgraph.types import Send
from langgraph.constants import Interrupt
from langgraph.types import Interrupt
from langgraph.channels import <ErrorClass>
from langgraph.errors import <ErrorClass>
langgraph.errors
from langgraph.constants import TAG_NOSTREAM_ALT
from langgraph.constants import NOSTREAM
🎯 Looking Toward v1.0
LangGraph v0.6 represents our final major changes before the stable v1.0 release.
We anticipate adhering strictly to SemVer post v1.0, leaning into a promise of stability and predictability.
Get Involved
LangGraph is an open source project, and we’d love to hear from you! We’ve rolled out a new LangChain forum for questions, feature requests, and discussions.
Please let us know what you think about the new Runtime API and other changes in v0.6, and if you have any difficulties with which we can help.
Full Changelog
context
API (#5566)Runtime
interface re patch/overrides (#5546)constants.py
->_internal/_typing.py
(#5518)config['configurable']
andconfig_schema
) (#5243)node
signatures vsinput_schema
foradd_node
(#5424)Interrupt
interface for v1 (#5405)actions/node-versions (node)
v22.18.0
: 22.18.0Compare Source
Node.js 22.18.0
numpy/numpy (numpy)
v2.3.2
: (Jul 24, 2025)Compare Source
NumPy 2.3.2 Release Notes
The NumPy 2.3.2 release is a patch release with a number of bug fixes
and maintenance updates. The highlights are:
This release supports Python versions 3.11-3.14
Contributors
A total of 9 people contributed to this release. People with a "+" by
their names contributed a patch for the first time.
Pull requests merged
A total of 16 pull requests were merged for this release.
np.char.array
andnp.char.asarray
...square
onarr \*\* 2
(#29392)Checksums
MD5