Sourced from langchain-core's releases.
langchain-core==1.6.5
Changes since langchain-core==1.6.4
release(core): 1.6.5 (#40816) fix(core): abbreviate long tool IDs in XML buffer strings (#40792)
langchain-core==1.6.4
Changes since langchain-core==1.6.3
release(core): 1.6.4 (#40718) chore(core): deprecate chat message history (#40711) chore(deps): bump anyio from 4.12.0 to 4.14.2 in /libs/core (#40634) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/core (#40574)
langchain-core==1.6.3
Changes since langchain-core==1.6.2
release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated
.text()access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)langchain-core==1.6.2
Changes since langchain-core==1.6.1
release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)
c5ab14d
release(core): 1.6.5 (#40816)5704d9d
chore(model-profiles): refresh model profile data (#40804)7622d3d
release(openai): 1.6.6 (#40800)2dd956b
docs(infra): fix AGENTS.md root setup guidance and package doc accuracy
(#40794)49f4b40
fix(openai): raise on error events in stream path (#40791)19cadaa
fix(core): abbreviate long tool IDs in XML buffer strings (#40792)798441e
chore(anthropic): fix integration test cassette (#40790)a476942
release(openai): 1.6.5 (#40787)46c6bdf
release(anthropic): 1.7.4 (#40786)290daba
fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from starlette's releases.
Version 1.7.0
This release adds experimental OpenTelemetry tracing, HTTP
QUERYsupport, and response trailers inTestClient. Starlette now requires AnyIO 4.[!WARNING]
OpenTelemetryMiddlewareis experimental. Its API and emitted telemetry may change in minor releases without a deprecation period.Added
- Add experimental
OpenTelemetryMiddlewarefor HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.- Expose the matched route through
scope["route"]#3438.- Support the
QUERYHTTP method inHTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.- Capture HTTP response trailers in
TestClientand expose them throughresponse.extensions["http.response.trailers"]#3563.- Support partitioned cookies in
SessionMiddleware#3510.- Add
partitionedtoResponse.delete_cookie()on Python 3.14 and later #3376.- Support IPv6 hosts in
TrustedHostMiddlewareandTestClient#3471.- Support Python 3.15 #3508.
Changed
- Require
anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.- Raise
WebSocketDisconnected, aRuntimeErrorsubclass, for disconnected WebSocket operations #2767.- Accept
Collection[str]inCORSMiddlewareconfiguration annotations, including sets and frozensets #3518.Fixed
- Run background tasks only after the response is sent when using
BaseHTTPMiddleware#3476.- Return
400for invalid multipart parser input #3492.- Include
Vary: Originon all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.- Handle malformed
Hostheaders and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.- Ignore
Rangeheaders whenFileResponsehas a status other than200, preserving its status and full body #3568.- Handle standalone
If-None-Match: *inStaticFiles#3201.- Reject WebSocket requests to
StaticFileswithout raising an assertion error #3532.- Persist session mutations made with
popitem()and|=#3436.- Handle empty and absent payloads in
WebSocketEndpoint.decode()#3372.- Implement
identityonSimpleUserandUnauthenticatedUser#3271.- Allow
HTTPExceptionto use non-standard status codes without an explicitdetail#3545.- Avoid deprecated AnyIO imports in
TestClientand add explicit imports inWSGIMiddlewarefor AnyIO 4.15 compatibility #3498 and #3501.- Offload debug traceback rendering to a worker thread in
ServerErrorMiddleware#2858.Full changelog: 1.6.0...1.7.0
Sourced from starlette's changelog.
1.7.0 (September 23, 2026)
This release adds experimental OpenTelemetry tracing and requires AnyIO 4.
!!! warning "OpenTelemetryMiddleware is experimental" Its API and emitted telemetry may change in minor releases without a deprecation period #3574.
Added
- Add experimental
OpenTelemetryMiddlewarefor HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.- Expose the matched route through
scope["route"]#3438.- Support the
QUERYHTTP method inHTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.- Capture HTTP response trailers in
TestClientand expose them throughresponse.extensions["http.response.trailers"]#3563.- Support partitioned cookies in
SessionMiddleware#3510.- Add
partitionedtoResponse.delete_cookie()on Python 3.14 and later #3376.- Support IPv6 hosts in
TrustedHostMiddlewareandTestClient#3471.- Support Python 3.15 #3508.
Changed
- Require
anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.- Raise
WebSocketDisconnected, aRuntimeErrorsubclass, for disconnected WebSocket operations #2767.- Accept
Collection[str]inCORSMiddlewareconfiguration annotations, including sets and frozensets #3518.Fixed
- Run background tasks only after the response is sent when using
BaseHTTPMiddleware#3476.- Return
400for invalid multipart parser input #3492.- Include
Vary: Originon all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.- Handle malformed
Hostheaders and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.- Ignore
Rangeheaders whenFileResponsehas a status other than200, preserving its status and full body #3568.- Handle standalone
If-None-Match: *inStaticFiles#3201.- Reject WebSocket requests to
StaticFileswithout raising an assertion error #3532.- Persist session mutations made with
popitem()and|=#3436.- Handle empty and absent payloads in
WebSocketEndpoint.decode()#3372.- Implement
identityonSimpleUserandUnauthenticatedUser#3271.- Allow
HTTPExceptionto use non-standard status codes without an explicitdetail#3545.- Avoid deprecated AnyIO imports in
TestClientand add explicit imports inWSGIMiddlewarefor AnyIO 4.15 compatibility #3498 and #3501.- Offload debug traceback rendering to a worker thread in
ServerErrorMiddleware#2858.
2269e9a
Version 1.7.0 (#3575)4fe55eb
Preserve FileResponse status for range requests (#3568)1f08daf
Mark OpenTelemetryMiddleware as experimental (#3574)57de5fa
Support HTTP response trailers in TestClient (#3563)03f12b7
Allow HTTPException to use non-standard status codes (#3545)76fd00f
Reject WebSocket requests to StaticFiles (#3532)f03f65c
docs: fix 'its not available' and 'This ensure' wording (#3526)485aca4
docs: the test client is built on httpx2, not httpx (#3525)fd662b1
Implement identity on SimpleUser and
UnauthenticatedUser (#3271)41db6a7
Stabilize CodSpeed upload buffer allocations (#3524)