chore(deps-dev): bump langchain-openai from 0.3.34 to 1.1.12 in the langchain group across 1 directory#1590
chore(deps-dev): bump langchain-openai from 0.3.34 to 1.1.12 in the langchain group across 1 directory#1590dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
dependabot
bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
This is a major version bump (0.3.34 → 1.1.12) for a dev dependency — worth a quick human check to confirm the langchain integration tests still pass against the new API.
Extended reasoning...
Overview
This PR bumps langchain-openai from 0.3.34 to 1.1.12 in pyproject.toml and uv.lock. The dependency is listed under [dependency-groups] dev only, so it does not affect the published langfuse package or end-users directly. The constraint changes from >=0.0.5,<0.4 to >=0.0.5,<1.2.
Security risks
None. This is a dev-only dependency used for testing the langchain integration, and no security-sensitive code paths are touched.
Level of scrutiny
Despite being a dev dependency, the version jump spans a major version boundary (0.x → 1.x), which in semver signals potential breaking changes. The langchain-openai 1.x series introduced new features (Responses API support, structured output changes, tool search, compaction, etc.) that could affect how the existing langchain integration tests interact with the library. Automated dependency bumps across major versions deserve a human glance to confirm test compatibility.
Other factors
No bugs were found by the automated review. The lock file update looks mechanically correct. The change is Dependabot-generated and well-scoped. The main uncertainty is whether the langchain integration tests in this repo remain green against langchain-openai 1.x — a CI run or quick manual check would confirm this.
Bumps the langchain group with 1 update: [langchain-openai](https://github.com/langchain-ai/langchain). Updates `langchain-openai` from 0.3.34 to 1.1.12 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==0.3.34...langchain-openai==1.1.12) --- updated-dependencies: - dependency-name: langchain-openai dependency-version: 1.1.12 dependency-type: direct:development update-type: version-update:semver-major dependency-group: langchain ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
changed the title
dependabot
bot
force-pushed
the
dependabot/uv/langchain-3ed0902394
branch
from
2589b1a to
9bf72b0
Compare
Bumps the langchain group with 1 update in the / directory: langchain-openai.
Updates
langchain-openaifrom 0.3.34 to 1.1.12Release notes
Sourced from langchain-openai's releases.
... (truncated)
Commits
ad574fcfix(openai): bump min core version (#36180)19f81cfrelease(core): 1.2.21 (#36179)6d07ef2release(openai): 1.1.12 (#36178)2f64d80fix(core,model-profiles): add missingModelProfilefields, warn on schema d...5ffece5chore(core): remove stale blockbuster allowlist for deleted context module (#...936b0a6chore(model-profiles): refresh model profile data (#36152)900f8a3fix(openai): support phase parameter (#36161)64a848aci: add maintainer override torequire-issue-linkworkflow (#36147)7d05cfbfix(openai): preserve namespace field in streaming function_call chunks (#36108)74ade80chore(model-profiles): refresh model profile data (#36123)