83fcca8687
chore(deps): bump cryptography from 46.0.3 to 46.0.5 in /libs/cli ( #6834 )
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 46.0.3
to 46.0.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst ">cryptography's
changelog</a>.</em></p>
<blockquote>
<p>46.0.5 - 2026-02-10</p>
<pre><code>
* An attacker could create a malicious public key that reveals portions
of your
private key when using certain uncommon elliptic curves (binary curves).
This version now includes additional security checks to prevent this
attack.
This issue only affects binary elliptic curves, which are rarely used in
real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab
and
Atuin Automated Vulnerability Discovery Engine** for reporting the
issue.
**CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
removed in the next release.
<p>.. v46-0-4:</p>
<p>46.0.4 - 2026-01-27<br />
</code></pre></p>
<ul>
<li><code>Dropped support for win_arm64 wheels</code>_.</li>
<li>Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.5.5.</li>
</ul>
<p>.. _v46-0-3:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/cryptography/commit/06e120e682cb200e3f7050c02f0bcdac90c4c6ad "><code>06e120e</code></a>
bump version for 46.0.5 release (<a
href="https://redirect.github.com/pyca/cryptography/issues/14289 ">#14289</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c "><code>0eebb9d</code></a>
EC check key on cofactor > 1 (<a
href="https://redirect.github.com/pyca/cryptography/issues/14287 ">#14287</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/bedf6e186b814f69a3f54f51252c23a71d44ed2e "><code>bedf6e1</code></a>
fix openssl version on 46 branch (<a
href="https://redirect.github.com/pyca/cryptography/issues/14220 ">#14220</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/e6f44fc8e6391f05d719fb9d369692325b87a471 "><code>e6f44fc</code></a>
bump for 46.0.4 and drop win arm64 due to CI issues (<a
href="https://redirect.github.com/pyca/cryptography/issues/14217 ">#14217</a>)</li>
<li>See full diff in <a
href="https://github.com/pyca/cryptography/compare/46.0.3...46.0.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraph/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com >
2026-02-17 09:23:09 -08:00
William FH and GitHub
2c6f99cbf0
release(cli): 0.4.12 ( #6716 )
...
Release Notes: Increase upper bound of `langgraph-ap` to `<0.8`
Closes https://github.com/langchain-ai/langgraph/issues/6706
2026-01-23 05:31:50 -08:00
b0c6126f2a
chore(deps): upgrade dependencies with uv lock --upgrade ( #6671 )
...
This PR updates the dependencies in all Python packages using `uv lock
--upgrade`.
This is an automated PR created by the UV Lock Upgrade workflow.
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
2026-01-18 16:19:35 -08:00
William FH and GitHub
05e4efe712
release(cli): relax api bounds ( #6606 )
2025-12-17 06:10:37 -08:00
William FH and GitHub
c80d93c78a
fix(cli): Escape variable substitution in compose codegen ( #6594 )
2025-12-15 14:51:03 -08:00
William FH and GitHub
6c6978918e
chore(cli): Pass through webhook configuration in dev server ( #6557 )
2025-12-09 07:05:15 -08:00
William FH and GitHub
2f1a16006a
release(cli): 0.4.8 ( #6556 )
...
For webhook configuration support
2025-12-09 13:25:02 +00:00
William FH and GitHub
8336686e89
release(cli): 0.4.7 expand api bounds ( #6390 )
...
Fixes #6380
2025-11-03 23:47:05 +00:00
Sydney Runkle and GitHub
2c3e380a35
feat: adding cursory Python 3.14 support ( #6298 )
...
* catching error thrown by asyncio
* using 2nd check for annotations given Pydantic 2.12 changes
* skipping tests for remote graph bc langgraph-api is dependent on
`jsonschema-rs`
* skipping tests w/ pydantic v1 models
```bash
hint: This usually indicates a problem with the package or the build environment.
help: `jsonschema-rs` (v0.29.1) was included because `langgraph:dev` (v1.0.0rc1) depends on `langgraph-cli[inmem]` which
depends on `langgraph-api` (v0.4.29) which depends on `jsonschema-rs`
```
not yet testing for free threaded python, that'll be much more involved!
ended up separating lint / testing deps during this process bc I was
getting a ton of not required deps while testing that were complicating
things :/
2025-10-17 08:26:52 -04:00
Sydney Runkle and GitHub
2d3121a17c
chore: drop Python 3.9 (and syntax) ( #6289 )
...
* `strict=False` is the default, pyupgrade to min version 3.10 adds this
to be explicit w/ behavior
2025-10-16 20:17:46 -04:00
4a0b2fa0ef
chore(deps): upgrade dependencies with uv lock --upgrade ( #6211 )
...
This PR updates the dependencies in all Python packages using `uv lock
--upgrade`.
This is an automated PR created by the UV Lock Upgrade workflow.
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
2025-09-29 09:07:51 +00:00
fe4029b3b8
chore(deps): upgrade dependencies with uv lock --upgrade ( #6176 )
...
This PR updates the dependencies in all Python packages using `uv lock
--upgrade`.
This is an automated PR created by the UV Lock Upgrade workflow.
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
2025-09-22 10:21:40 -04:00
8b55dff7a5
chore(deps): upgrade dependencies with uv lock --upgrade ( #6146 )
...
This PR updates the dependencies in all Python packages using `uv lock
--upgrade`.
This is an automated PR created by the UV Lock Upgrade workflow.
To make tests pass:
* linting fixes
* whitespace fixes in snapshots
---------
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
Co-authored-by: Sydney Runkle <sydneymarierunkle@gmail.com >
2025-09-14 19:36:43 -04:00
William FH and GitHub
ddf4e62bde
release(cli): 0.4.0 ( #6014 )
...
Relax upper-bound to permit server versions 0.4.*
2025-08-26 12:59:12 +00:00
William FH and GitHub
501ba8be34
release(cli): Bump max bound of langgraph-api ( #5978 )
2025-08-21 00:59:27 +00:00
William FH and GitHub
998e194e82
release(cli): Support bookworm, trixie, etc. ( #5975 )
...
Also add support for pinning to a semantic version.
2025-08-20 15:40:04 +00:00
David Asamu
4501e41991
uv sync
2025-07-24 00:36:02 +01:00
5978012619
release(cli): Release new CLI version with increased bounds for server ( #5565 )
...
Co-authored-by: Sydney Runkle <54324534+sydney-runkle@users.noreply.github.com >
2025-07-17 12:22:30 -07:00
3d9cb305b4
chore[deps]: upgrade dependencies with uv lock --upgrade ( #5471 )
...
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
2025-07-14 13:48:40 -04:00
William FH and GitHub
0d8a8c5847
feat: [CLI] Add arg to retain build deps (setuptools, pip, wheel) ( #5404 )
2025-07-08 19:41:47 +00:00
87f2e69395
chore[deps]: upgrade dependencies with uv lock --upgrade ( #5358 )
...
* chore: upgrade dependencies with `uv lock --upgrade`
* linting
* upgrade PR title
---------
Co-authored-by: sydney-runkle <54324534+sydney-runkle@users.noreply.github.com >
Co-authored-by: Sydney Runkle <sydneymarierunkle@gmail.com >
2025-07-07 23:24:32 +00:00
Sydney Runkle and GitHub
000f5c3043
fix[deps]: update lockfiles / deps bounds for internal tools ( #5301 )
...
update lockfiles / deps bounds
2025-07-02 10:30:55 -04:00
William FH and GitHub
a622218746
chore: (CLI) bump api minbound ( #5206 )
2025-06-25 19:28:13 -07:00
William FH and GitHub
b7973d65db
fix: Update lockfile ( #5102 )
2025-06-13 14:53:40 -07:00
William FH and GitHub
4548a0ebe8
feat: Customizable Pip Installer ( #5098 )
...
Let you set "pip_installer": "pip" (or uv) to handle corner cases in install compatibilities
2025-06-13 10:35:28 -07:00
William FH and GitHub
c17ee1bf5a
feat: [CLI] Add support for building deps with uv ( #4995 )
2025-06-09 08:57:29 -07:00
Nuno Campos
194c4c1d1c
cli 0.2.12
2025-06-04 15:50:07 -07:00
David Asamu
ae2b766d0f
bump version
2025-06-04 00:53:56 +01:00
Sydney Runkle and GitHub
228a08b966
ci: migrate to uv! ( #4698 )
...
* Migrate to `uv`
* Format `pyproject.toml` files properly
* Remove upper bounds on dependencies, and bounds on dev dependencies
(we should be using latest)
* Move to hatch for packaing
In the future we should:
* Set up dependabot / automate lockfile updates and tests
* Add tests for min compatible versions (I'll do this right after merge)
* Use dynamic versioning
* Bump `pydantic` to v2.11.4 in the lockfile, we have some tests failing
2025-05-15 17:39:14 -07:00
